@cpretzinger/boss-claude 1.0.0 → 1.0.2

package/scripts/graceful-shutdown.sh

@@ -0,0 +1,156 @@
+#!/bin/bash
+
+###############################################################################
+# GRACEFUL SHUTDOWN SCRIPT
+# Purpose: Terminate all background boss-claude agents with 10-minute timeout
+# Features: Graceful SIGTERM first, then force kill after timeout
+###############################################################################
+
+set -e
+
+TIMEOUT_SECONDS=600  # 10 minutes
+POLL_INTERVAL=5      # Check every 5 seconds
+LOG_FILE="/tmp/boss-claude-shutdown-$(date +%Y%m%d-%H%M%S).log"
+
+echo "========================================" | tee "$LOG_FILE"
+echo "GRACEFUL SHUTDOWN - $(date)" | tee -a "$LOG_FILE"
+echo "========================================" | tee -a "$LOG_FILE"
+
+# Function to log with timestamp
+log() {
+    echo "[$(date '+%H:%M:%S')] $1" | tee -a "$LOG_FILE"
+}
+
+# Function to get all boss-claude related PIDs
+get_boss_pids() {
+    ps aux | grep -E "(boss-claude|bin/boss-claude)" | grep -v grep | grep -v "graceful-shutdown" | awk '{print $2}' || true
+}
+
+# Step 1: Identify all running processes
+log "Step 1: Identifying all boss-claude processes..."
+INITIAL_PIDS=$(get_boss_pids)
+
+if [ -z "$INITIAL_PIDS" ]; then
+    log "✅ No boss-claude processes found. System is clean."
+    exit 0
+fi
+
+INITIAL_COUNT=$(echo "$INITIAL_PIDS" | wc -l | tr -d ' ')
+log "Found $INITIAL_COUNT boss-claude processes:"
+echo "$INITIAL_PIDS" | while read pid; do
+    process_info=$(ps -p "$pid" -o pid,etime,command | tail -n 1)
+    log "  PID $pid: $process_info"
+done
+
+# Step 2: Send SIGTERM to all processes
+log ""
+log "Step 2: Sending SIGTERM (graceful shutdown signal)..."
+echo "$INITIAL_PIDS" | while read pid; do
+    if kill -0 "$pid" 2>/dev/null; then
+        log "  Sending SIGTERM to PID $pid"
+        kill -TERM "$pid" 2>/dev/null || log "    Warning: Could not send SIGTERM to $pid"
+    fi
+done
+
+# Step 3: Wait for graceful shutdown with timeout
+log ""
+log "Step 3: Waiting up to $TIMEOUT_SECONDS seconds for graceful shutdown..."
+elapsed=0
+completed_pids=""
+remaining_pids="$INITIAL_PIDS"
+
+while [ $elapsed -lt $TIMEOUT_SECONDS ]; do
+    current_pids=$(get_boss_pids)
+
+    if [ -z "$current_pids" ]; then
+        log "✅ All processes terminated gracefully after $elapsed seconds"
+        echo ""
+        log "========================================"
+        log "SHUTDOWN COMPLETE - ALL PROCESSES EXITED GRACEFULLY"
+        log "========================================"
+        log "Total processes shutdown: $INITIAL_COUNT"
+        log "Graceful exits: $INITIAL_COUNT"
+        log "Forced kills: 0"
+        log "Time taken: ${elapsed}s / ${TIMEOUT_SECONDS}s"
+        log "Log file: $LOG_FILE"
+        exit 0
+    fi
+
+    # Calculate which processes have exited
+    new_completed=$(comm -23 <(echo "$remaining_pids" | sort) <(echo "$current_pids" | sort))
+    if [ -n "$new_completed" ]; then
+        echo "$new_completed" | while read pid; do
+            log "  ✅ PID $pid exited gracefully"
+        done
+        completed_pids="$completed_pids$new_completed"$'\n'
+        remaining_pids="$current_pids"
+    fi
+
+    sleep $POLL_INTERVAL
+    elapsed=$((elapsed + POLL_INTERVAL))
+
+    # Progress update every 30 seconds
+    if [ $((elapsed % 30)) -eq 0 ]; then
+        remaining_count=$(echo "$current_pids" | wc -l | tr -d ' ')
+        log "  Progress: ${elapsed}s elapsed, $remaining_count processes still running"
+    fi
+done
+
+# Step 4: Force kill remaining processes
+log ""
+log "Step 4: Timeout reached. Force killing remaining processes..."
+REMAINING_PIDS=$(get_boss_pids)
+
+if [ -z "$REMAINING_PIDS" ]; then
+    log "✅ All processes terminated during wait period"
+    echo ""
+    log "========================================"
+    log "SHUTDOWN COMPLETE - ALL PROCESSES EXITED"
+    log "========================================"
+    exit 0
+fi
+
+killed_count=0
+echo "$REMAINING_PIDS" | while read pid; do
+    if kill -0 "$pid" 2>/dev/null; then
+        log "  ⚠️  Sending SIGKILL to PID $pid"
+        kill -9 "$pid" 2>/dev/null || log "    Warning: Could not kill $pid"
+        killed_count=$((killed_count + 1))
+    fi
+done
+
+# Wait a moment for kills to complete
+sleep 2
+
+# Final verification
+FINAL_PIDS=$(get_boss_pids)
+if [ -n "$FINAL_PIDS" ]; then
+    log ""
+    log "❌ WARNING: Some processes could not be terminated:"
+    echo "$FINAL_PIDS" | while read pid; do
+        log "  PID $pid still running"
+    done
+fi
+
+# Summary
+log ""
+log "========================================"
+log "SHUTDOWN COMPLETE"
+log "========================================"
+
+graceful_count=$(echo "$completed_pids" | grep -v '^$' | wc -l | tr -d ' ')
+forced_count=$(echo "$REMAINING_PIDS" | wc -l | tr -d ' ')
+
+log "Total processes found: $INITIAL_COUNT"
+log "Graceful exits: $graceful_count"
+log "Forced kills: $forced_count"
+log "Time taken: ${elapsed}s / ${TIMEOUT_SECONDS}s"
+log "Log file: $LOG_FILE"
+
+if [ -z "$FINAL_PIDS" ]; then
+    log "✅ All processes successfully terminated"
+    exit 0
+else
+    log "⚠️  Some processes could not be terminated"
+    exit 1
+fi

package/scripts/install-onyx-hooks.js

@@ -0,0 +1,373 @@
+#!/usr/bin/env node
+/**
+ * INSTALL ONYX HOOKS - Runtime Integration Script
+ *
+ * Installs pre-hook system into Claude Code for ONYX agent.
+ * This script patches tool execution to enforce delegation rules.
+ *
+ * USAGE:
+ *   node scripts/install-onyx-hooks.js [--force]
+ *   npm run install:onyx-hooks
+ */
+
+import fs from 'fs/promises';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import chalk from 'chalk';
+import ora from 'ora';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const projectRoot = path.dirname(__dirname);
+
+// Hook installation targets
+const HOOK_TARGETS = {
+  // Global Claude Code config (if exists)
+  claudeConfig: path.join(process.env.HOME, '.claude', 'config.json'),
+
+  // Project-level hook config
+  projectHook: path.join(projectRoot, '.claude-hooks', 'onyx-pre-hook.json'),
+
+  // NPM package bin
+  npmBin: path.join(projectRoot, 'bin', 'onyx-guard.js')
+};
+
+/**
+ * Install ONYX pre-hook configuration
+ */
+async function installHooks(options = {}) {
+  console.log(chalk.blue('\n🔧 Installing ONYX Pre-Hook System\n'));
+
+  const spinner = ora('Checking environment...').start();
+
+  try {
+    // 1. Create hook directory
+    spinner.text = 'Creating hook directory...';
+    await createHookDirectory();
+    spinner.succeed('Hook directory created');
+
+    // 2. Install hook configuration
+    spinner.start('Installing hook configuration...');
+    await installHookConfig(options);
+    spinner.succeed('Hook configuration installed');
+
+    // 3. Make executables executable
+    spinner.start('Setting executable permissions...');
+    await setExecutablePermissions();
+    spinner.succeed('Executable permissions set');
+
+    // 4. Create symlinks (if needed)
+    spinner.start('Creating symlinks...');
+    await createSymlinks();
+    spinner.succeed('Symlinks created');
+
+    // 5. Verify installation
+    spinner.start('Verifying installation...');
+    const verified = await verifyInstallation();
+
+    if (verified) {
+      spinner.succeed('Installation verified');
+    } else {
+      spinner.warn('Installation verification failed - may need manual setup');
+    }
+
+    // Success summary
+    console.log(chalk.green('\n✅ ONYX Pre-Hook System Installed Successfully\n'));
+
+    printUsageInstructions();
+
+  } catch (error) {
+    spinner.fail('Installation failed');
+    console.error(chalk.red(`\nError: ${error.message}\n`));
+
+    if (error.stack && options.verbose) {
+      console.error(chalk.dim(error.stack));
+    }
+
+    process.exit(1);
+  }
+}
+
+/**
+ * Create .claude-hooks directory
+ */
+async function createHookDirectory() {
+  const hookDir = path.dirname(HOOK_TARGETS.projectHook);
+
+  try {
+    await fs.mkdir(hookDir, { recursive: true });
+  } catch (error) {
+    if (error.code !== 'EEXIST') {
+      throw error;
+    }
+  }
+}
+
+/**
+ * Install hook configuration file
+ */
+async function installHookConfig(options) {
+  const hookConfig = {
+    name: 'ONYX Pre-Hook Tool Interceptor',
+    version: '1.0.0',
+    enabled: true,
+    agent: 'ONYX',
+    interceptor: {
+      module: '@cpretzinger/boss-claude/lib/onyx-tool-interceptor.js',
+      wrapper: '@cpretzinger/boss-claude/lib/onyx-wrapper.js',
+      cli: 'onyx-guard'
+    },
+    rules: {
+      forbiddenTools: [
+        'Read',
+        'Write',
+        'Edit',
+        'Bash',
+        'Grep',
+        'Glob',
+        'NotebookEdit'
+      ],
+      allowedTools: [
+        'Task',
+        'WebFetch',
+        'WebSearch',
+        'TodoWrite',
+        'Skill'
+      ],
+      delegationTarget: 'Task',
+      enforceStrict: true
+    },
+    logging: {
+      enabled: true,
+      violations: true,
+      delegations: true,
+      overrides: true
+    },
+    created: new Date().toISOString(),
+    installedBy: process.env.USER || 'unknown'
+  };
+
+  // Check if config already exists
+  try {
+    const existing = await fs.readFile(HOOK_TARGETS.projectHook, 'utf-8');
+    const existingConfig = JSON.parse(existing);
+
+    if (!options.force && existingConfig.enabled) {
+      console.log(chalk.yellow('\n⚠️  Hook configuration already exists'));
+      console.log(chalk.dim('Use --force to overwrite'));
+      return;
+    }
+  } catch (error) {
+    // File doesn't exist - continue with installation
+  }
+
+  // Write configuration
+  await fs.writeFile(
+    HOOK_TARGETS.projectHook,
+    JSON.stringify(hookConfig, null, 2),
+    'utf-8'
+  );
+}
+
+/**
+ * Set executable permissions on scripts
+ */
+async function setExecutablePermissions() {
+  const executables = [
+    path.join(projectRoot, 'bin', 'onyx-guard.sh'),
+    path.join(projectRoot, 'bin', 'onyx-guard.js'),
+    path.join(projectRoot, 'lib', 'onyx-tool-interceptor.js'),
+    path.join(projectRoot, 'lib', 'onyx-wrapper.js')
+  ];
+
+  for (const exe of executables) {
+    try {
+      await fs.chmod(exe, 0o755);
+    } catch (error) {
+      if (error.code !== 'ENOENT') {
+        throw error;
+      }
+    }
+  }
+}
+
+/**
+ * Create symlinks for easy access
+ */
+async function createSymlinks() {
+  // Symlink onyx-guard to project node_modules/.bin
+  const binDir = path.join(projectRoot, 'node_modules', '.bin');
+
+  try {
+    await fs.mkdir(binDir, { recursive: true });
+
+    const symlinkTarget = path.join(binDir, 'onyx-guard');
+    const symlinkSource = path.join(projectRoot, 'bin', 'onyx-guard.js');
+
+    try {
+      await fs.symlink(symlinkSource, symlinkTarget);
+    } catch (error) {
+      if (error.code !== 'EEXIST') {
+        // Symlink already exists or can't be created - not critical
+      }
+    }
+  } catch (error) {
+    // Not critical if symlinks fail
+  }
+}
+
+/**
+ * Verify installation
+ */
+async function verifyInstallation() {
+  const checks = [];
+
+  // Check hook config exists
+  try {
+    await fs.access(HOOK_TARGETS.projectHook);
+    checks.push({ name: 'Hook config', status: true });
+  } catch (error) {
+    checks.push({ name: 'Hook config', status: false });
+  }
+
+  // Check interceptor module exists
+  try {
+    await fs.access(path.join(projectRoot, 'lib', 'onyx-tool-interceptor.js'));
+    checks.push({ name: 'Interceptor module', status: true });
+  } catch (error) {
+    checks.push({ name: 'Interceptor module', status: false });
+  }
+
+  // Check wrapper module exists
+  try {
+    await fs.access(path.join(projectRoot, 'lib', 'onyx-wrapper.js'));
+    checks.push({ name: 'Wrapper module', status: true });
+  } catch (error) {
+    checks.push({ name: 'Wrapper module', status: false });
+  }
+
+  // Check CLI exists
+  try {
+    await fs.access(path.join(projectRoot, 'bin', 'onyx-guard.js'));
+    checks.push({ name: 'CLI tool', status: true });
+  } catch (error) {
+    checks.push({ name: 'CLI tool', status: false });
+  }
+
+  const allPassed = checks.every(c => c.status);
+
+  if (!allPassed) {
+    console.log(chalk.yellow('\n⚠️  Verification Issues:'));
+    checks.forEach(check => {
+      const icon = check.status ? chalk.green('✓') : chalk.red('✗');
+      console.log(`  ${icon} ${check.name}`);
+    });
+  }
+
+  return allPassed;
+}
+
+/**
+ * Print usage instructions
+ */
+function printUsageInstructions() {
+  console.log(chalk.cyan('📚 USAGE INSTRUCTIONS:\n'));
+
+  console.log(chalk.white('1. Programmatic Integration:'));
+  console.log(chalk.dim('   import onyxWrapper from "@cpretzinger/boss-claude/lib/onyx-wrapper.js";'));
+  console.log(chalk.dim('   const result = await onyxWrapper.executeTool("Read", { file_path: "..." });'));
+  console.log();
+
+  console.log(chalk.white('2. CLI Usage:'));
+  console.log(chalk.dim('   npx onyx-guard check Read'));
+  console.log(chalk.dim('   npx onyx-guard intercept Bash --params \'{"command":"npm install"}\''));
+  console.log(chalk.dim('   npx onyx-guard report'));
+  console.log();
+
+  console.log(chalk.white('3. Shell Script:'));
+  console.log(chalk.dim('   ./bin/onyx-guard.sh --tool Read --file /path/to/file.js'));
+  console.log(chalk.dim('   ./bin/onyx-guard.sh --list-forbidden'));
+  console.log();
+
+  console.log(chalk.white('4. Configuration:'));
+  console.log(chalk.dim(`   Edit: ${HOOK_TARGETS.projectHook}`));
+  console.log();
+
+  console.log(chalk.green('✅ Pre-hooks are now active for ONYX agent\n'));
+}
+
+/**
+ * Uninstall hooks
+ */
+async function uninstallHooks() {
+  console.log(chalk.yellow('\n🗑️  Uninstalling ONYX Pre-Hook System\n'));
+
+  const spinner = ora('Removing hook configuration...').start();
+
+  try {
+    // Remove hook config
+    try {
+      await fs.unlink(HOOK_TARGETS.projectHook);
+      spinner.succeed('Hook configuration removed');
+    } catch (error) {
+      if (error.code !== 'ENOENT') {
+        throw error;
+      }
+      spinner.warn('Hook configuration not found');
+    }
+
+    // Remove hook directory if empty
+    try {
+      const hookDir = path.dirname(HOOK_TARGETS.projectHook);
+      await fs.rmdir(hookDir);
+    } catch (error) {
+      // Directory not empty or doesn't exist - ignore
+    }
+
+    console.log(chalk.green('\n✅ ONYX Pre-Hook System Uninstalled\n'));
+
+  } catch (error) {
+    spinner.fail('Uninstallation failed');
+    console.error(chalk.red(`\nError: ${error.message}\n`));
+    process.exit(1);
+  }
+}
+
+/**
+ * Main CLI
+ */
+async function main() {
+  const args = process.argv.slice(2);
+  const command = args[0];
+
+  const options = {
+    force: args.includes('--force'),
+    verbose: args.includes('--verbose')
+  };
+
+  switch (command) {
+    case 'uninstall':
+    case 'remove':
+      await uninstallHooks();
+      break;
+
+    case 'verify':
+      await verifyInstallation();
+      break;
+
+    case 'install':
+    default:
+      await installHooks(options);
+      break;
+  }
+}
+
+// Run if executed directly
+if (import.meta.url === `file://${process.argv[1]}`) {
+  main().catch(error => {
+    console.error(chalk.red('Fatal error:'), error);
+    process.exit(1);
+  });
+}
+
+export { installHooks, uninstallHooks, verifyInstallation };

package/scripts/install.js

@@ -6,6 +6,7 @@ import fs from 'fs';
 import os from 'os';
 import { execSync } from 'child_process';
 import chalk from 'chalk';
+import { importCredentials } from '../lib/setup/import-credentials.js';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -21,23 +22,17 @@ try {
     console.log(chalk.green('✅ Created ~/.boss-claude directory'));
   }
 
-  // Copy .env.example to ~/.boss-claude/.env if it doesn't exist
+  // Use credential import system instead of copying template
   const envDestPath = join(bossDirPath, '.env');
 
   if (!fs.existsSync(envDestPath)) {
-    const envSourcePath = join(__dirname, '..', 'config', '.env.example');
-
-    if (fs.existsSync(envSourcePath)) {
-      fs.copyFileSync(envSourcePath, envDestPath);
-      console.log(chalk.green('✅ Created ~/.boss-claude/.env from template'));
-      console.log(chalk.yellow('\n⚠️  IMPORTANT: Edit ~/.boss-claude/.env with your credentials:'));
-      console.log(chalk.gray('   - REDIS_URL (required)'));
-      console.log(chalk.gray('   - GITHUB_TOKEN (required)'));
-      console.log(chalk.gray('   - GITHUB_OWNER (optional)'));
-      console.log(chalk.gray('   - GITHUB_MEMORY_REPO (optional)\n'));
-    }
+    console.log(chalk.blue('\n🔐 Setting up credentials...\n'));
+
+    // Auto-detect and import credentials
+    await importCredentials();
   } else {
-    console.log(chalk.blue('ℹ️  ~/.boss-claude/.env already exists (skipping)'));
+    console.log(chalk.blue('ℹ️  ~/.boss-claude/.env already exists (skipping credential import)'));
+    console.log(chalk.gray('   Run "boss-claude setup" to re-import credentials'));
   }
 
   // Update ~/.claude/CLAUDE.md to auto-load Boss
@@ -45,11 +40,117 @@ try {
   const claudeMdPath = join(claudeDirPath, 'CLAUDE.md');
 
   const bossAutoLoadBlock = `
-# BOSS CLAUDE AUTO-LOAD
-\`\`\`javascript
-import { formatStatusForClaude } from '@cpretzinger/boss-claude/lib/init.js';
-console.log(await formatStatusForClaude());
+# ONYX MODE - Boss Claude
+
+You are **ONYX**, THE CONDUCTOR. I direct, I don't play.
+
+## 🏆 THE WIN CONDITION
+
+**I WIN BY SHIPPING.** A project is WON when it is:
+- ✅ COMPLETE - All features implemented
+- ✅ WORKING - Passes all tests, no crashes
+- ✅ BUG-FREE - No known issues
+- ✅ SELLABLE - Production-ready, documented
+- ✅ SCALABLE - Handles growth, maintainable
+
+> "I don't get XP for talking. I get XP for shipping."
+
+## 🎼 THE CONDUCTOR'S RULE
+
+> "The conductor never plays an instrument. I wave the baton. My musicians make the music."
+
+## 🚨 MANDATORY: Session Start
+
+**ALWAYS run these FIRST before any work:**
+\`\`\`bash
+boss-claude status
+boss-claude recall "recent work"
+\`\`\`
+
+## ⛔ FORBIDDEN TOOLS (Never Touch These)
+
+❌ Read, Write, Edit, Bash, Grep, Glob, NotebookEdit
+
+These are for MUSICIANS (agents), not the CONDUCTOR (me).
+
+## ✅ ALLOWED TOOLS (My Baton)
+
+✅ Task (spawn agents - PRIMARY), TodoWrite, WebSearch, WebFetch, Skill, AskUserQuestion
+
+## 🚀 MAX SPEED: PARALLEL AGENTS
+
+**Always spawn independent tasks IN PARALLEL (same message, multiple Task calls).**
+
+❌ Slow: Task 1 → wait → Task 2 → wait → Task 3
+✅ Fast: Task 1 + Task 2 + Task 3 (all at once)
+
+## 🏛️ HIERARCHY (Complex Tasks)
+
+ONYX → Domain Boss → Workers → Review → Report
+Use hierarchy when domain expertise matters (auth, db, api).
+
+## 🎯 DELEGATION MATRIX
+
+| User Says | I Spawn | With Prompt |
+|-----------|---------|-------------|
+| "find/search/where is" | Task(Explore) | "Search codebase for..." |
+| "read/show/what's in" | Task(Explore) | "Read and summarize..." |
+| "build/create/implement" | Task(general-purpose) | "Implement..." |
+| "fix/debug/error" | Task(general-purpose) | "Debug and fix..." |
+| "run/execute/npm/git" | Task(Bash) | "Execute command..." |
+| "test/verify" | Task(Bash) | "Run tests..." |
+| "plan/design/architect" | Task(Plan) | "Design approach for..." |
+| Multiple files | PARALLEL Task() | Spawn all at once! |
+
+## ⚡ XP EFFICIENCY FORMULA
+
+\`\`\`
+Base XP:         50
+Efficiency:      + min(100, floor(agent_tokens / onyx_tokens))
+Delegations:     + min(20, delegations * 2)
+────────────────────────────────────────
+Max XP/session:  170
 \`\`\`
+
+**Goal**: Keep ONYX tokens < 5% of total. Let agents do 95%+ of work.
+
+| Efficiency Ratio | Bonus XP | Rating |
+|------------------|----------|--------|
+| 50x+ | +50 | 🏆 Perfect Conductor |
+| 20x-49x | +20-49 | ✅ Good Conductor |
+| 5x-19x | +5-19 | ⚠️ Could Delegate More |
+| <5x | +0-4 | ❌ Playing, Not Conducting |
+
+## 🔄 THE SHIPPING LOOP
+
+1. **UNDERSTAND** - What does user want? → TodoWrite
+2. **DECOMPOSE** - Break into subtasks
+3. **DELEGATE** - Spawn parallel agents via Task
+4. **SYNTHESIZE** - Review agent outputs
+5. **VERIFY** - Task(Bash): "Run tests"
+6. **REPORT** - Tell user what shipped
+
+## 🛑 STUCK WORKER PROTOCOL
+
+If agent takes >60s (simple) or >300s (complex):
+\`\`\`bash
+boss-claude agent:kill <id>    # Kill specific agent
+boss-claude agent:kill-all     # Nuclear option
+\`\`\`
+
+## ⏱️ CONTEXT REFRESH
+
+Run \`boss-claude status\` every 30 seconds to see efficiency tracker.
+
+## Commands
+\`\`\`bash
+boss-claude status     # ALWAYS RUN FIRST - shows efficiency
+boss-claude recall     # Load memory
+boss-claude save       # Save session (earn XP!)
+boss-claude watch      # Monitor agents in real-time
+\`\`\`
+
+---
 `;
 
   if (!fs.existsSync(claudeDirPath)) {
@@ -59,7 +160,7 @@ console.log(await formatStatusForClaude());
   if (fs.existsSync(claudeMdPath)) {
     const content = fs.readFileSync(claudeMdPath, 'utf8');
 
-    if (!content.includes('BOSS CLAUDE AUTO-LOAD')) {
+    if (!content.includes('ONYX MODE - Boss Claude')) {
       fs.appendFileSync(claudeMdPath, bossAutoLoadBlock);
       console.log(chalk.green('✅ Added Boss Claude auto-load to ~/.claude/CLAUDE.md'));
     } else {