@cloudstreamsoftware/claude-tools 1.0.0 → 1.1.0

package/skills/tutorial/lessons/13-golden-standard-graduation.md

@@ -0,0 +1,213 @@
+# Lesson 13: Golden Standard Graduation
+
+You've learned the system. Now understand the quality bar that defines CloudStream Software.
+
+## The Golden Standard Defined
+
+All work produced must meet **top 1% enterprise professional quality** - the standard expected from a 500-person professional development team at a Fortune 500 company.
+
+This is not aspirational. This is the baseline.
+
+## The Quality Bar
+
+| Aspect | Requirement |
+|--------|-------------|
+| **Code Quality** | Production-ready, bulletproof, auditable |
+| **Test Coverage** | 80%+ minimum, TDD workflow mandatory |
+| **Security** | OWASP Top 10 awareness, security review on all changes |
+| **Documentation** | Handoff-ready at all times |
+| **Compliance** | HIPAA/SOC2/PCI-DSS aware based on client context |
+| **Performance** | Optimized, profiled, no unnecessary operations |
+| **Accessibility** | WCAG 2.1 AA compliance for all user-facing work |
+
+## What "Top 1%" Means
+
+1. **Zero assumptions** - Verify everything, research when uncertain
+2. **Defensive coding** - Handle edge cases, validate inputs at boundaries
+3. **Audit trail** - Every action explainable and traceable
+4. **Cutting-edge awareness** - Use modern best practices, not legacy patterns
+5. **Peer-review quality** - Code must pass scrutiny from expert reviewers
+6. **No shortcuts** - Technical debt is not acceptable
+7. **Complete solutions** - Half-measures are failures
+
+## Verification Checklist
+
+Before ANY work is marked complete:
+
+- [ ] Would this pass review at Google/Microsoft/Amazon?
+- [ ] Is this handoff-ready if I'm unavailable tomorrow?
+- [ ] Are there any shortcuts or technical debt?
+- [ ] Have all edge cases been considered?
+- [ ] Is the security posture defensible?
+- [ ] Are tests comprehensive (not just happy path)?
+- [ ] Is documentation current and accurate?
+
+## Anti-Patterns (Never Acceptable)
+
+- "It works" without tests
+- "We can fix it later" technical debt
+- Assumptions about requirements
+- Skipping security review
+- Incomplete error handling
+- Missing edge case coverage
+- Copy-paste without understanding
+- "Good enough" mentality
+
+## Tutorial Graduation Checklist
+
+You are ready to use CloudStream Claude Tools at Golden Standard quality if you can:
+
+### Philosophy & Workflow (Lesson 0)
+- [ ] Explain the daily workflow lifecycle
+- [ ] Describe the "aha moment" about knowledge compounding
+- [ ] Understand how training mode teaches while you work
+
+### Core Architecture (Lesson 1)
+- [ ] Explain Commands → Agents → Rules → Skills
+- [ ] Run `/verify` confidently
+
+### Training Mode (Lesson 2)
+- [ ] Enable training mode in CLAUDE.md
+- [ ] Recognize intent detection suggestions
+- [ ] Understand verbosity levels
+
+### Essential Commands (Lessons 3-4)
+- [ ] Run `/plan` for complex features
+- [ ] Execute `/tdd` workflow (RED → GREEN → REFACTOR)
+- [ ] Use `/code-review` before PRs
+- [ ] Create `/checkpoint` before risky changes
+- [ ] Apply correct workflow for task type
+
+### Compliance (Lesson 5)
+- [ ] Set compliance mode in CLAUDE.md
+- [ ] Run `/compliance-check` for regulated industries
+- [ ] Understand HIPAA/SOC2/PCI-DSS differences
+
+### Zoho Development (Lesson 6)
+- [ ] Use `/zoho-scaffold` for components
+- [ ] Generate Deluge code with `/deluge`
+- [ ] Understand platform constraints
+
+### Hooks System (Lesson 7)
+- [ ] Understand 6 hook lifecycle events
+- [ ] Know which hooks block vs. warn
+- [ ] Find and read hooks.json
+
+### MCP Servers (Lesson 8)
+- [ ] Verify 3 core MCPs are configured
+- [ ] Understand 3 MCP tiers (core, per-client, optional)
+- [ ] Know when to add client-specific MCPs
+
+### Client Management (Lesson 9)
+- [ ] Use `/client-switch` for multi-client work
+- [ ] Generate `/handoff` documentation
+
+### Testing & E2E (Lesson 10)
+- [ ] Run `/e2e` tests
+- [ ] Use `/build-fix` for TypeScript errors
+- [ ] Invoke security-reviewer agent proactively
+
+### Skills (Lesson 11)
+- [ ] List all 16 skills
+- [ ] Understand skill-agent relationships
+- [ ] Explore skill subdirectories
+
+### Rules (Lesson 12)
+- [ ] Know rule loading priority
+- [ ] Understand always vs. conditional rules
+- [ ] Read and apply golden-standard.md
+
+## Your Daily Workflow
+
+```
+SESSION START:
+  - Context automatically restored
+  - Check client/compliance mode
+
+WORKING:
+  /client-switch <client>   # Set context if needed
+  /plan <feature>           # Complex work: plan first
+  /tdd <component>          # Code: tests first
+  /code-review              # Quality: review changes
+  /verify                   # Validate: before commit
+
+SESSION END:
+  /learn                    # Capture patterns (optional)
+  - State automatically saved
+```
+
+## Quick Reference Card
+
+```
+ESSENTIAL COMMANDS:
+  /verify         - Validate project (before every commit)
+  /plan           - Design implementation
+  /tdd            - Test-driven development
+  /code-review    - Quality check
+  /checkpoint     - Create safe restore point
+  /audit          - System health check
+
+ZOHO COMMANDS:
+  /zoho-scaffold  - Create components
+  /deluge         - Generate Deluge code
+  /compliance-check - Compliance audit
+
+ADVANCED COMMANDS:
+  /client-switch  - Switch client context
+  /handoff        - Generate handoff docs
+  /e2e            - End-to-end tests
+  /build-fix      - Fix build errors
+  /learn          - Capture patterns
+
+SYSTEM:
+  Hooks: PreToolUse, PostToolUse, Stop, SessionStart, SessionEnd, PreCompact
+  MCPs:  memory, sequential-thinking, context7 (+ 9 optional)
+  Skills: 16 across 5 categories
+  Rules:  15 files (golden-standard is primary)
+```
+
+## Final Exercise
+
+Run a complete self-audit:
+
+```
+/audit
+```
+
+**Expected output:**
+- Configuration: OK
+- Memory MCP: OK
+- Features: All loaded
+- Quality: Tests passing
+- Golden Standard: Aligned
+
+If any section fails, review the relevant lesson.
+
+## Congratulations!
+
+You have completed the core curriculum of the CloudStream Claude Tools tutorial.
+
+You now understand:
+- **The philosophy** behind guided workflows
+- **The architecture** of commands, agents, rules, and skills
+- **All 36 commands** and their purposes
+- **All 13 agents** and when they activate
+- **The Hooks system** for automation
+- **27 MCP tools** for extended capabilities
+- **16 skills** for domain expertise
+- **15 rules** for behavioral constraints
+- **The Golden Standard** quality bar
+
+**You are now equipped to produce work at the top 1% enterprise professional quality level.**
+
+## What's Next?
+
+**Lesson 14** covers Fork Setup & Sync - how to keep your copy of CloudStream Claude Tools updated with the latest features.
+
+**Lesson 15** covers the Living Examples System - community-curated code examples with validation and trust levels.
+
+---
+
+**Tutorial milestone**: Core curriculum complete (13/16 lessons)
+**Quality bar**: Golden Standard - top 1% enterprise professional quality
+**Key insight**: The system enforces quality automatically through rules, hooks, and guided workflows

package/skills/tutorial/lessons/14-fork-setup-and-sync.md

@@ -0,0 +1,312 @@
+# Lesson 14: Fork Setup & Staying Updated
+
+You've forked CloudStream Claude Tools. Now learn how to stay updated with new features while preserving your customizations.
+
+## Concept
+
+When you fork this repository, you have two goals:
+1. **Configure** the fork for your organization
+2. **Stay updated** when upstream releases new features
+
+The system is designed for this:
+- Core directories (agents/, commands/, skills/, rules/) can be synced safely
+- Your customizations (.env, personal/, private/) are protected
+
+## Initial Fork Setup
+
+### Step 1: Fork the Repository
+
+On GitHub:
+1. Navigate to the upstream repository
+2. Click "Fork"
+3. Clone your fork locally
+
+```bash
+git clone https://github.com/YOUR-ORG/everything-claude-code.git
+cd everything-claude-code
+```
+
+### Step 2: Add Upstream Remote
+
+```bash
+git remote add upstream https://github.com/affaan-m/everything-claude-code.git
+git fetch upstream
+```
+
+Verify remotes:
+```bash
+git remote -v
+# origin    https://github.com/YOUR-ORG/everything-claude-code.git (fetch)
+# origin    https://github.com/YOUR-ORG/everything-claude-code.git (push)
+# upstream  https://github.com/affaan-m/everything-claude-code.git (fetch)
+# upstream  https://github.com/affaan-m/everything-claude-code.git (push)
+```
+
+### Step 3: Initial Configuration
+
+1. **Set up credentials**: Copy `.env.example` to `.env` and fill in your values
+2. **Configure MCPs**: Update `.mcp.json` with your paths
+3. **Set project settings**: Customize CLAUDE.md for your organization
+
+## What Syncs vs. What's Protected
+
+| Directory | Sync? | Reason |
+|-----------|-------|--------|
+| `agents/` | YES | Core agent definitions |
+| `commands/` | YES | Command definitions |
+| `skills/` | YES | Knowledge patterns |
+| `rules/` | YES | Behavioral constraints |
+| `mcp-configs/` | YES | MCP server catalog |
+| `scripts/` | YES | Tooling scripts |
+| `tests/` | CAUTION | May have custom tests |
+| `hooks/` | CAUTION | May have customizations |
+| `.env*` | NEVER | Your credentials |
+| `personal/` | NEVER | Your custom additions |
+| `private/` | NEVER | Your secrets |
+| `CLAUDE.md` | CAUTION | Your project settings |
+
+## Staying Updated
+
+### Manual Sync (Recommended)
+
+Use these npm commands:
+
+```bash
+# See what would change
+npm run sync-check
+
+# Test merge without committing
+npm run sync-dry-run
+
+# Full sync + tests + commit
+npm run sync-auto
+
+# Cancel in-progress merge
+npm run sync-abort
+```
+
+### Under the Hood
+
+The sync commands run:
+```bash
+git fetch upstream
+git merge -X ours upstream/main -- agents/ commands/ skills/ rules/
+npm test                  # Validate everything works
+git push origin main      # Deploy to your fork
+```
+
+The `-X ours` flag means:
+- Accept upstream changes for new files
+- **Keep your version** if there's a conflict
+- Your customizations are preserved
+
+### When to Sync
+
+| Trigger | Action |
+|---------|--------|
+| Weekly | Run `npm run sync-check` to see changes |
+| New release announced | Run `npm run sync-auto` |
+| Before major project | Ensure latest features |
+
+## Breaking Changes
+
+Semantic versioning tells you what to expect:
+
+| Version Change | Meaning | Action |
+|----------------|---------|--------|
+| 1.x.x → 2.x.x | BREAKING | Manual review required |
+| 1.1.x → 1.2.x | Minor | Safe with tests |
+| 1.1.0 → 1.1.1 | Patch | Safe with tests |
+
+The sync script warns you about major version changes.
+
+## Customization Guidelines
+
+### Safe to Customize
+
+These files are yours to modify:
+
+| File/Directory | Purpose |
+|----------------|---------|
+| `CLAUDE.md` | Your project settings |
+| `.env` files | Your credentials |
+| `personal/` | Your custom additions |
+| `private/` | Your secrets |
+| `hooks/hooks.json` | Your hook customizations |
+
+### Creating Custom Components
+
+To add components that won't conflict with upstream:
+
+**Custom Agents:**
+```
+personal/agents/your-agent.md
+```
+
+**Custom Commands:**
+```
+personal/commands/your-command.md
+```
+
+**Custom Skills:**
+```
+personal/skills/your-skill/SKILL.md
+```
+
+**Custom Rules:**
+```
+personal/rules/your-rule.md
+```
+
+Files in `personal/` are:
+- Never overwritten by sync
+- Not tracked by upstream
+- Your organization's extensions
+
+### Don't Customize (Will Be Overwritten)
+
+Unless you disable sync, don't modify:
+- Core agent files in `agents/`
+- Core command files in `commands/`
+- Core skill files in `skills/`
+- Core rule files in `rules/`
+
+## Conflict Resolution
+
+If a sync has conflicts:
+
+**Step 1**: See conflicting files:
+```bash
+git status
+```
+
+**Step 2**: For each conflict, choose:
+- Keep yours: The `-X ours` flag already does this
+- Take theirs: Manually copy from upstream
+- Merge: Edit the file to combine both
+
+**Step 3**: Complete the merge:
+```bash
+git add .
+git commit -m "Merge upstream changes"
+```
+
+**Step 4**: Run tests:
+```bash
+npm test
+```
+
+## Exercise
+
+### Exercise 14.1: Check Upstream Status
+
+**Step 1**: Verify you have upstream configured:
+```bash
+git remote -v | grep upstream
+```
+
+If not, add it:
+```bash
+git remote add upstream https://github.com/affaan-m/everything-claude-code.git
+```
+
+### Exercise 14.2: Preview Changes
+
+**Step 1**: Fetch upstream:
+```bash
+git fetch upstream
+```
+
+**Step 2**: See what's new:
+```bash
+git log upstream/main --oneline -10
+```
+
+**Step 3**: Preview sync:
+```bash
+npm run sync-check
+```
+
+### Exercise 14.3: Create a Protected Customization
+
+**Step 1**: Create the personal directory:
+```bash
+mkdir -p personal/rules
+```
+
+**Step 2**: Add a custom rule:
+```bash
+cat > personal/rules/my-org-rule.md << 'EOF'
+---
+name: my-org-rule
+description: Custom rule for my organization
+always: true
+---
+
+# My Organization Rule
+
+Custom guidelines for our team.
+EOF
+```
+
+**Step 3**: This file is now protected from sync.
+
+## Verification
+
+You've completed this exercise successfully if:
+- [ ] Upstream remote is configured
+- [ ] You understand sync-safe vs. protected directories
+- [ ] You've run `npm run sync-check` at least once
+- [ ] You know where to put customizations
+
+## Sync Quick Reference
+
+```
+COMMANDS:
+  npm run sync-check     # Preview changes
+  npm run sync-dry-run   # Test merge
+  npm run sync-auto      # Full sync
+  npm run sync-abort     # Cancel merge
+
+PROTECTED:
+  .env*, personal/, private/, CLAUDE.md
+
+SYNCED:
+  agents/, commands/, skills/, rules/, mcp-configs/
+
+REMOTES:
+  origin   = Your fork
+  upstream = Source repository
+```
+
+## Tutorial Complete!
+
+Congratulations! You have completed all 14 lessons of the CloudStream Claude Tools tutorial.
+
+### What You've Learned
+
+1. **Philosophy** - Why this system exists and how to approach development
+2. **Architecture** - Commands → Agents → Rules → Skills
+3. **Training Mode** - How the system teaches while you work
+4. **Essential Commands** - verify, plan, tdd, code-review, checkpoint
+5. **Workflows** - plan → tdd → review → verify
+6. **Compliance** - HIPAA, SOC2, PCI-DSS modes
+7. **Zoho Development** - Creator, Catalyst, Deluge
+8. **Hooks** - Automated quality checks
+9. **MCPs** - External capabilities
+10. **Client Management** - Multi-client context
+11. **Testing** - E2E, security review
+12. **Skills** - 16 knowledge packages
+13. **Rules** - 15 behavioral constraints
+14. **Fork Setup** - Staying updated
+15. **Living Examples** - Community-curated examples
+
+### Next Steps
+
+Continue to [Lesson 15: Living Examples System](./15-living-examples-system.md) to learn about the community-curated example system.
+
+---
+
+**Progress**: 14 of 16 lessons complete
+**Next**: Living Examples System
+**Remember**: The system teaches while you work - let it guide you