@claude-flow/cli 3.7.0-alpha.1 → 3.7.0-alpha.10

package/.claude/helpers/ddd-tracker.sh

@@ -1,144 +1,144 @@
-#!/bin/bash
-# Claude Flow V3 - DDD Progress Tracker Worker
-# Tracks Domain-Driven Design implementation progress
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
-METRICS_DIR="$PROJECT_ROOT/.claude-flow/metrics"
-DDD_FILE="$METRICS_DIR/ddd-progress.json"
-V3_PROGRESS="$METRICS_DIR/v3-progress.json"
-LAST_RUN_FILE="$METRICS_DIR/.ddd-last-run"
-
-mkdir -p "$METRICS_DIR"
-
-# V3 Target Domains
-DOMAINS=("agent-lifecycle" "task-execution" "memory-management" "coordination" "shared-kernel")
-
-should_run() {
-  if [ ! -f "$LAST_RUN_FILE" ]; then return 0; fi
-  local last_run=$(cat "$LAST_RUN_FILE" 2>/dev/null || echo "0")
-  local now=$(date +%s)
-  [ $((now - last_run)) -ge 600 ]  # 10 minutes
-}
-
-check_domain() {
-  local domain="$1"
-  local domain_path="$PROJECT_ROOT/v3/@claude-flow/$domain"
-  local alt_path="$PROJECT_ROOT/src/domains/$domain"
-
-  local score=0
-  local max_score=100
-
-  # Check if domain directory exists (20 points)
-  if [ -d "$domain_path" ] || [ -d "$alt_path" ]; then
-    score=$((score + 20))
-    local path="${domain_path:-$alt_path}"
-    [ -d "$domain_path" ] && path="$domain_path" || path="$alt_path"
-
-    # Check for domain layer (15 points)
-    [ -d "$path/domain" ] || [ -d "$path/src/domain" ] && score=$((score + 15))
-
-    # Check for application layer (15 points)
-    [ -d "$path/application" ] || [ -d "$path/src/application" ] && score=$((score + 15))
-
-    # Check for infrastructure layer (15 points)
-    [ -d "$path/infrastructure" ] || [ -d "$path/src/infrastructure" ] && score=$((score + 15))
-
-    # Check for API/interface layer (10 points)
-    [ -d "$path/api" ] || [ -d "$path/src/api" ] && score=$((score + 10))
-
-    # Check for tests (15 points)
-    local test_count=$(find "$path" -name "*.test.ts" -o -name "*.spec.ts" 2>/dev/null | wc -l)
-    [ "$test_count" -gt 0 ] && score=$((score + 15))
-
-    # Check for index/exports (10 points)
-    [ -f "$path/index.ts" ] || [ -f "$path/src/index.ts" ] && score=$((score + 10))
-  fi
-
-  echo "$score"
-}
-
-count_entities() {
-  local type="$1"
-  local pattern="$2"
-
-  find "$PROJECT_ROOT/v3" "$PROJECT_ROOT/src" -name "*.ts" 2>/dev/null | \
-    xargs grep -l "$pattern" 2>/dev/null | \
-    grep -v node_modules | grep -v ".test." | wc -l || echo "0"
-}
-
-track_ddd() {
-  echo "[$(date +%H:%M:%S)] Tracking DDD progress..."
-
-  local total_score=0
-  local domain_scores=""
-  local completed_domains=0
-
-  for domain in "${DOMAINS[@]}"; do
-    local score=$(check_domain "$domain")
-    total_score=$((total_score + score))
-    domain_scores="$domain_scores\"$domain\": $score, "
-
-    [ "$score" -ge 50 ] && completed_domains=$((completed_domains + 1))
-  done
-
-  # Calculate overall progress
-  local max_total=$((${#DOMAINS[@]} * 100))
-  local progress=$((total_score * 100 / max_total))
-
-  # Count DDD artifacts
-  local entities=$(count_entities "entities" "class.*Entity\|interface.*Entity")
-  local value_objects=$(count_entities "value-objects" "class.*VO\|ValueObject")
-  local aggregates=$(count_entities "aggregates" "class.*Aggregate\|AggregateRoot")
-  local repositories=$(count_entities "repositories" "interface.*Repository\|Repository")
-  local services=$(count_entities "services" "class.*Service\|Service")
-  local events=$(count_entities "events" "class.*Event\|DomainEvent")
-
-  # Write DDD metrics
-  cat > "$DDD_FILE" << EOF
-{
-  "timestamp": "$(date -Iseconds)",
-  "progress": $progress,
-  "domains": {
-    ${domain_scores%,*}
-  },
-  "completed": $completed_domains,
-  "total": ${#DOMAINS[@]},
-  "artifacts": {
-    "entities": $entities,
-    "valueObjects": $value_objects,
-    "aggregates": $aggregates,
-    "repositories": $repositories,
-    "services": $services,
-    "domainEvents": $events
-  }
-}
-EOF
-
-  # Update v3-progress.json
-  if [ -f "$V3_PROGRESS" ] && command -v jq &>/dev/null; then
-    jq --argjson progress "$progress" --argjson completed "$completed_domains" \
-      '.ddd.progress = $progress | .domains.completed = $completed' \
-      "$V3_PROGRESS" > "$V3_PROGRESS.tmp" && mv "$V3_PROGRESS.tmp" "$V3_PROGRESS"
-  fi
-
-  echo "[$(date +%H:%M:%S)] ✓ DDD: ${progress}% | Domains: $completed_domains/${#DOMAINS[@]} | Entities: $entities | Services: $services"
-
-  date +%s > "$LAST_RUN_FILE"
-}
-
-case "${1:-check}" in
-  "run"|"track") track_ddd ;;
-  "check") should_run && track_ddd || echo "[$(date +%H:%M:%S)] Skipping (throttled)" ;;
-  "force") rm -f "$LAST_RUN_FILE"; track_ddd ;;
-  "status")
-    if [ -f "$DDD_FILE" ]; then
-      jq -r '"Progress: \(.progress)% | Domains: \(.completed)/\(.total) | Entities: \(.artifacts.entities) | Services: \(.artifacts.services)"' "$DDD_FILE"
-    else
-      echo "No DDD data available"
-    fi
-    ;;
-  *) echo "Usage: $0 [run|check|force|status]" ;;
-esac
+#!/bin/bash
+# Claude Flow V3 - DDD Progress Tracker Worker
+# Tracks Domain-Driven Design implementation progress
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
+METRICS_DIR="$PROJECT_ROOT/.claude-flow/metrics"
+DDD_FILE="$METRICS_DIR/ddd-progress.json"
+V3_PROGRESS="$METRICS_DIR/v3-progress.json"
+LAST_RUN_FILE="$METRICS_DIR/.ddd-last-run"
+
+mkdir -p "$METRICS_DIR"
+
+# V3 Target Domains
+DOMAINS=("agent-lifecycle" "task-execution" "memory-management" "coordination" "shared-kernel")
+
+should_run() {
+  if [ ! -f "$LAST_RUN_FILE" ]; then return 0; fi
+  local last_run=$(cat "$LAST_RUN_FILE" 2>/dev/null || echo "0")
+  local now=$(date +%s)
+  [ $((now - last_run)) -ge 600 ]  # 10 minutes
+}
+
+check_domain() {
+  local domain="$1"
+  local domain_path="$PROJECT_ROOT/v3/@claude-flow/$domain"
+  local alt_path="$PROJECT_ROOT/src/domains/$domain"
+
+  local score=0
+  local max_score=100
+
+  # Check if domain directory exists (20 points)
+  if [ -d "$domain_path" ] || [ -d "$alt_path" ]; then
+    score=$((score + 20))
+    local path="${domain_path:-$alt_path}"
+    [ -d "$domain_path" ] && path="$domain_path" || path="$alt_path"
+
+    # Check for domain layer (15 points)
+    [ -d "$path/domain" ] || [ -d "$path/src/domain" ] && score=$((score + 15))
+
+    # Check for application layer (15 points)
+    [ -d "$path/application" ] || [ -d "$path/src/application" ] && score=$((score + 15))
+
+    # Check for infrastructure layer (15 points)
+    [ -d "$path/infrastructure" ] || [ -d "$path/src/infrastructure" ] && score=$((score + 15))
+
+    # Check for API/interface layer (10 points)
+    [ -d "$path/api" ] || [ -d "$path/src/api" ] && score=$((score + 10))
+
+    # Check for tests (15 points)
+    local test_count=$(find "$path" -name "*.test.ts" -o -name "*.spec.ts" 2>/dev/null | wc -l)
+    [ "$test_count" -gt 0 ] && score=$((score + 15))
+
+    # Check for index/exports (10 points)
+    [ -f "$path/index.ts" ] || [ -f "$path/src/index.ts" ] && score=$((score + 10))
+  fi
+
+  echo "$score"
+}
+
+count_entities() {
+  local type="$1"
+  local pattern="$2"
+
+  find "$PROJECT_ROOT/v3" "$PROJECT_ROOT/src" -name "*.ts" 2>/dev/null | \
+    xargs grep -l "$pattern" 2>/dev/null | \
+    grep -v node_modules | grep -v ".test." | wc -l || echo "0"
+}
+
+track_ddd() {
+  echo "[$(date +%H:%M:%S)] Tracking DDD progress..."
+
+  local total_score=0
+  local domain_scores=""
+  local completed_domains=0
+
+  for domain in "${DOMAINS[@]}"; do
+    local score=$(check_domain "$domain")
+    total_score=$((total_score + score))
+    domain_scores="$domain_scores\"$domain\": $score, "
+
+    [ "$score" -ge 50 ] && completed_domains=$((completed_domains + 1))
+  done
+
+  # Calculate overall progress
+  local max_total=$((${#DOMAINS[@]} * 100))
+  local progress=$((total_score * 100 / max_total))
+
+  # Count DDD artifacts
+  local entities=$(count_entities "entities" "class.*Entity\|interface.*Entity")
+  local value_objects=$(count_entities "value-objects" "class.*VO\|ValueObject")
+  local aggregates=$(count_entities "aggregates" "class.*Aggregate\|AggregateRoot")
+  local repositories=$(count_entities "repositories" "interface.*Repository\|Repository")
+  local services=$(count_entities "services" "class.*Service\|Service")
+  local events=$(count_entities "events" "class.*Event\|DomainEvent")
+
+  # Write DDD metrics
+  cat > "$DDD_FILE" << EOF
+{
+  "timestamp": "$(date -Iseconds)",
+  "progress": $progress,
+  "domains": {
+    ${domain_scores%,*}
+  },
+  "completed": $completed_domains,
+  "total": ${#DOMAINS[@]},
+  "artifacts": {
+    "entities": $entities,
+    "valueObjects": $value_objects,
+    "aggregates": $aggregates,
+    "repositories": $repositories,
+    "services": $services,
+    "domainEvents": $events
+  }
+}
+EOF
+
+  # Update v3-progress.json
+  if [ -f "$V3_PROGRESS" ] && command -v jq &>/dev/null; then
+    jq --argjson progress "$progress" --argjson completed "$completed_domains" \
+      '.ddd.progress = $progress | .domains.completed = $completed' \
+      "$V3_PROGRESS" > "$V3_PROGRESS.tmp" && mv "$V3_PROGRESS.tmp" "$V3_PROGRESS"
+  fi
+
+  echo "[$(date +%H:%M:%S)] ✓ DDD: ${progress}% | Domains: $completed_domains/${#DOMAINS[@]} | Entities: $entities | Services: $services"
+
+  date +%s > "$LAST_RUN_FILE"
+}
+
+case "${1:-check}" in
+  "run"|"track") track_ddd ;;
+  "check") should_run && track_ddd || echo "[$(date +%H:%M:%S)] Skipping (throttled)" ;;
+  "force") rm -f "$LAST_RUN_FILE"; track_ddd ;;
+  "status")
+    if [ -f "$DDD_FILE" ]; then
+      jq -r '"Progress: \(.progress)% | Domains: \(.completed)/\(.total) | Entities: \(.artifacts.entities) | Services: \(.artifacts.services)"' "$DDD_FILE"
+    else
+      echo "No DDD data available"
+    fi
+    ;;
+  *) echo "Usage: $0 [run|check|force|status]" ;;
+esac

package/.claude/helpers/github-safe.js

@@ -1,121 +1,121 @@
-#!/usr/bin/env node
-
-/**
- * Safe GitHub CLI Helper
- *
- * Prevents two classes of issue when calling `gh`:
- * 1. Timeout / shell-quoting bugs when issue/PR bodies contain backticks,
- *    `$(...)`, or other special characters — bodies go through a temp file
- *    via `--body-file` instead of being inlined in the command line.
- * 2. Command injection (audit_1776853149979 finding) — args were
- *    previously concatenated into a shell string and passed to
- *    `execSync`, so a caller passing `; rm -rf …` would have it
- *    executed by /bin/sh. Now uses `execFileSync('gh', argArray)`
- *    which goes through execve directly with no shell interpretation.
- *
- * Usage:
- *   ./github-safe.js issue comment 123 "Message with `backticks`"
- *   ./github-safe.js pr create --title "Title" --body "Complex body"
- */
-
-import { execFileSync } from 'child_process';
-import { writeFileSync, unlinkSync } from 'fs';
-import { tmpdir } from 'os';
-import { join } from 'path';
-import { randomBytes } from 'crypto';
-
-const args = process.argv.slice(2);
-
-if (args.length < 2) {
-  console.log(`
-Safe GitHub CLI Helper
-
-Usage:
-  ./github-safe.js issue comment <number> <body>
-  ./github-safe.js pr comment <number> <body>
-  ./github-safe.js issue create --title <title> --body <body>
-  ./github-safe.js pr create --title <title> --body <body>
-
-Bodies with backticks, command substitution, and other special shell
-characters are routed through a tempfile via --body-file. All gh args
-are passed via execFileSync (no shell interpretation).
-`);
-  process.exit(1);
-}
-
-// Whitelist of gh top-level commands we forward. Restricting this is
-// defense-in-depth even though execFileSync would already block shell
-// metacharacters in args.
-const ALLOWED_COMMANDS = new Set(['issue', 'pr', 'repo', 'api', 'workflow', 'run', 'release', 'auth', 'gist']);
-
-const [command, subcommand, ...restArgs] = args;
-
-if (!ALLOWED_COMMANDS.has(command)) {
-  console.error(`Refusing to forward unknown gh command: ${command}`);
-  console.error(`Allowed: ${Array.from(ALLOWED_COMMANDS).join(', ')}`);
-  process.exit(1);
-}
-
-// Build the final argv that gets passed to execFileSync.
-// IMPORTANT: never join into a shell string. Each element is one argv slot.
-function runGh(argv) {
-  try {
-    execFileSync('gh', argv, {
-      stdio: 'inherit',
-      timeout: 30000,
-      // shell:false is the default — kept explicit so a future refactor
-      // doesn't accidentally turn it on.
-      shell: false,
-    });
-  } catch (error) {
-    console.error('Error:', error?.message ?? String(error));
-    process.exit(1);
-  }
-}
-
-// Handle commands that take body content
-if ((command === 'issue' || command === 'pr') &&
-    (subcommand === 'comment' || subcommand === 'create')) {
-
-  let bodyIndex = -1;
-  let body = '';
-
-  if (subcommand === 'comment' && restArgs.length >= 2) {
-    // Positional: github-safe.js issue comment 123 "body"
-    body = restArgs[1];
-    bodyIndex = 1;
-  } else {
-    bodyIndex = restArgs.indexOf('--body');
-    if (bodyIndex !== -1 && bodyIndex < restArgs.length - 1) {
-      body = restArgs[bodyIndex + 1];
-    }
-  }
-
-  if (body) {
-    const tmpFile = join(tmpdir(), `gh-body-${randomBytes(8).toString('hex')}.tmp`);
-    try {
-      writeFileSync(tmpFile, body, 'utf8');
-
-      // Build the gh argv with --body-file instead of --body / inline body
-      const finalArgs = [command, subcommand, ...restArgs];
-      const offset = 2; // command + subcommand
-      if (subcommand === 'comment' && bodyIndex === 1) {
-        finalArgs[offset + 1] = '--body-file';
-        finalArgs.push(tmpFile);
-      } else if (bodyIndex !== -1) {
-        finalArgs[offset + bodyIndex] = '--body-file';
-        finalArgs[offset + bodyIndex + 1] = tmpFile;
-      }
-
-      runGh(finalArgs);
-    } finally {
-      try { unlinkSync(tmpFile); } catch { /* ignore cleanup errors */ }
-    }
-  } else {
-    // No body — forward all args as-is (still via execFileSync)
-    runGh(args);
-  }
-} else {
-  // Other gh subcommands — forward as-is
-  runGh(args);
-}
+#!/usr/bin/env node
+
+/**
+ * Safe GitHub CLI Helper
+ *
+ * Prevents two classes of issue when calling `gh`:
+ * 1. Timeout / shell-quoting bugs when issue/PR bodies contain backticks,
+ *    `$(...)`, or other special characters — bodies go through a temp file
+ *    via `--body-file` instead of being inlined in the command line.
+ * 2. Command injection (audit_1776853149979 finding) — args were
+ *    previously concatenated into a shell string and passed to
+ *    `execSync`, so a caller passing `; rm -rf …` would have it
+ *    executed by /bin/sh. Now uses `execFileSync('gh', argArray)`
+ *    which goes through execve directly with no shell interpretation.
+ *
+ * Usage:
+ *   ./github-safe.js issue comment 123 "Message with `backticks`"
+ *   ./github-safe.js pr create --title "Title" --body "Complex body"
+ */
+
+import { execFileSync } from 'child_process';
+import { writeFileSync, unlinkSync } from 'fs';
+import { tmpdir } from 'os';
+import { join } from 'path';
+import { randomBytes } from 'crypto';
+
+const args = process.argv.slice(2);
+
+if (args.length < 2) {
+  console.log(`
+Safe GitHub CLI Helper
+
+Usage:
+  ./github-safe.js issue comment <number> <body>
+  ./github-safe.js pr comment <number> <body>
+  ./github-safe.js issue create --title <title> --body <body>
+  ./github-safe.js pr create --title <title> --body <body>
+
+Bodies with backticks, command substitution, and other special shell
+characters are routed through a tempfile via --body-file. All gh args
+are passed via execFileSync (no shell interpretation).
+`);
+  process.exit(1);
+}
+
+// Whitelist of gh top-level commands we forward. Restricting this is
+// defense-in-depth even though execFileSync would already block shell
+// metacharacters in args.
+const ALLOWED_COMMANDS = new Set(['issue', 'pr', 'repo', 'api', 'workflow', 'run', 'release', 'auth', 'gist']);
+
+const [command, subcommand, ...restArgs] = args;
+
+if (!ALLOWED_COMMANDS.has(command)) {
+  console.error(`Refusing to forward unknown gh command: ${command}`);
+  console.error(`Allowed: ${Array.from(ALLOWED_COMMANDS).join(', ')}`);
+  process.exit(1);
+}
+
+// Build the final argv that gets passed to execFileSync.
+// IMPORTANT: never join into a shell string. Each element is one argv slot.
+function runGh(argv) {
+  try {
+    execFileSync('gh', argv, {
+      stdio: 'inherit',
+      timeout: 30000,
+      // shell:false is the default — kept explicit so a future refactor
+      // doesn't accidentally turn it on.
+      shell: false,
+    });
+  } catch (error) {
+    console.error('Error:', error?.message ?? String(error));
+    process.exit(1);
+  }
+}
+
+// Handle commands that take body content
+if ((command === 'issue' || command === 'pr') &&
+    (subcommand === 'comment' || subcommand === 'create')) {
+
+  let bodyIndex = -1;
+  let body = '';
+
+  if (subcommand === 'comment' && restArgs.length >= 2) {
+    // Positional: github-safe.js issue comment 123 "body"
+    body = restArgs[1];
+    bodyIndex = 1;
+  } else {
+    bodyIndex = restArgs.indexOf('--body');
+    if (bodyIndex !== -1 && bodyIndex < restArgs.length - 1) {
+      body = restArgs[bodyIndex + 1];
+    }
+  }
+
+  if (body) {
+    const tmpFile = join(tmpdir(), `gh-body-${randomBytes(8).toString('hex')}.tmp`);
+    try {
+      writeFileSync(tmpFile, body, 'utf8');
+
+      // Build the gh argv with --body-file instead of --body / inline body
+      const finalArgs = [command, subcommand, ...restArgs];
+      const offset = 2; // command + subcommand
+      if (subcommand === 'comment' && bodyIndex === 1) {
+        finalArgs[offset + 1] = '--body-file';
+        finalArgs.push(tmpFile);
+      } else if (bodyIndex !== -1) {
+        finalArgs[offset + bodyIndex] = '--body-file';
+        finalArgs[offset + bodyIndex + 1] = tmpFile;
+      }
+
+      runGh(finalArgs);
+    } finally {
+      try { unlinkSync(tmpFile); } catch { /* ignore cleanup errors */ }
+    }
+  } else {
+    // No body — forward all args as-is (still via execFileSync)
+    runGh(args);
+  }
+} else {
+  // Other gh subcommands — forward as-is
+  runGh(args);
+}

package/.claude/helpers/github-setup.sh

@@ -1,28 +1,28 @@
-#!/bin/bash
-# Setup GitHub integration for Claude Flow
-
-echo "🔗 Setting up GitHub integration..."
-
-# Check for gh CLI
-if ! command -v gh &> /dev/null; then
-    echo "⚠️  GitHub CLI (gh) not found"
-    echo "Install from: https://cli.github.com/"
-    echo "Continuing without GitHub features..."
-else
-    echo "✅ GitHub CLI found"
-    
-    # Check auth status
-    if gh auth status &> /dev/null; then
-        echo "✅ GitHub authentication active"
-    else
-        echo "⚠️  Not authenticated with GitHub"
-        echo "Run: gh auth login"
-    fi
-fi
-
-echo ""
-echo "📦 GitHub swarm commands available:"
-echo "  - npx claude-flow github swarm"
-echo "  - npx claude-flow repo analyze"
-echo "  - npx claude-flow pr enhance"
-echo "  - npx claude-flow issue triage"
+#!/bin/bash
+# Setup GitHub integration for Claude Flow
+
+echo "🔗 Setting up GitHub integration..."
+
+# Check for gh CLI
+if ! command -v gh &> /dev/null; then
+    echo "⚠️  GitHub CLI (gh) not found"
+    echo "Install from: https://cli.github.com/"
+    echo "Continuing without GitHub features..."
+else
+    echo "✅ GitHub CLI found"
+    
+    # Check auth status
+    if gh auth status &> /dev/null; then
+        echo "✅ GitHub authentication active"
+    else
+        echo "⚠️  Not authenticated with GitHub"
+        echo "Run: gh auth login"
+    fi
+fi
+
+echo ""
+echo "📦 GitHub swarm commands available:"
+echo "  - npx claude-flow github swarm"
+echo "  - npx claude-flow repo analyze"
+echo "  - npx claude-flow pr enhance"
+echo "  - npx claude-flow issue triage"

package/.claude/helpers/guidance-hook.sh

@@ -1,13 +1,13 @@
-#!/bin/bash
-# Capture hook guidance for Claude visibility
-GUIDANCE_FILE=".claude-flow/last-guidance.txt"
-mkdir -p .claude-flow
-
-case "$1" in
-  "route")
-    npx agentic-flow@alpha hooks route "$2" 2>&1 | tee "$GUIDANCE_FILE"
-    ;;
-  "pre-edit")
-    npx agentic-flow@alpha hooks pre-edit "$2" 2>&1 | tee "$GUIDANCE_FILE"
-    ;;
-esac
+#!/bin/bash
+# Capture hook guidance for Claude visibility
+GUIDANCE_FILE=".claude-flow/last-guidance.txt"
+mkdir -p .claude-flow
+
+case "$1" in
+  "route")
+    npx agentic-flow@alpha hooks route "$2" 2>&1 | tee "$GUIDANCE_FILE"
+    ;;
+  "pre-edit")
+    npx agentic-flow@alpha hooks pre-edit "$2" 2>&1 | tee "$GUIDANCE_FILE"
+    ;;
+esac