@paths.design/caws-cli 10.1.0 → 11.0.0

package/dist/templates/.caws/tools-allow.json

@@ -1,331 +0,0 @@
-[
-  "node",
-  "npm",
-  "yarn",
-  "pnpm",
-  "git",
-  "docker",
-  "kubectl",
-  "aws",
-  "azure",
-  "gcloud",
-  "terraform",
-  "ansible",
-  "curl",
-  "wget",
-  "grep",
-  "sed",
-  "awk",
-  "bash",
-  "sh",
-  "zsh",
-  "fish",
-  "python",
-  "python3",
-  "pip",
-  "pip3",
-  "virtualenv",
-  "conda",
-  "java",
-  "javac",
-  "gradle",
-  "maven",
-  "go",
-  "gofmt",
-  "rust",
-  "cargo",
-  "rustfmt",
-  "clippy",
-  "ruby",
-  "gem",
-  "bundle",
-  "rbenv",
-  "php",
-  "composer",
-  "dotnet",
-  "nuget",
-  "swift",
-  "xcodebuild",
-  "make",
-  "cmake",
-  "ninja",
-  "gcc",
-  "clang",
-  "ld",
-  "ar",
-  "strip",
-  "objdump",
-  "nm",
-  "readelf",
-  "file",
-  "hexdump",
-  "xxd",
-  "base64",
-  "openssl",
-  "ssh",
-  "scp",
-  "rsync",
-  "tar",
-  "gzip",
-  "bzip2",
-  "xz",
-  "zip",
-  "unzip",
-  "7z",
-  "jq",
-  "yq",
-  "xmlstarlet",
-  "html-xml-utils",
-  "pandoc",
-  "asciidoc",
-  "rst2html",
-  "markdown",
-  "remark",
-  "prettier",
-  "eslint",
-  "tslint",
-  "stylelint",
-  "htmlhint",
-  "csslint",
-  "jsonlint",
-  "yamllint",
-  "shellcheck",
-  "hadolint",
-  "dockerfile_lint",
-  "markdownlint",
-  "proselint",
-  "vale",
-  "alex",
-  "write-good",
-  "textlint",
-  "redpen",
-  "languagetool",
-  "grammarly",
-  "codespell",
-  "typos",
-  "aspell",
-  "hunspell",
-  "sort",
-  "uniq",
-  "cut",
-  "paste",
-  "join",
-  "split",
-  "tr",
-  "column",
-  "fold",
-  "fmt",
-  "pr",
-  "head",
-  "tail",
-  "wc",
-  "nl",
-  "od",
-  "strings",
-  "iconv",
-  "dos2unix",
-  "unix2dos",
-  "mac2unix",
-  "unix2mac",
-  "pbcopy",
-  "pbpaste",
-  "xclip",
-  "xsel",
-  "tmux",
-  "screen",
-  "vim",
-  "nvim",
-  "emacs",
-  "nano",
-  "micro",
-  "code",
-  "atom",
-  "sublime",
-  "vimr",
-  "macvim",
-  "gvim",
-  "vscode",
-  "intellij",
-  "pycharm",
-  "webstorm",
-  "phpstorm",
-  "rubymine",
-  "clion",
-  "goland",
-  "rider",
-  "datagrip",
-  "android-studio",
-  "xcode",
-  "eclipse",
-  "netbeans",
-  "idea",
-  "studio",
-  "vs",
-  "visualstudio",
-  "monodevelop",
-  "xamarin",
-  "rider",
-  "resharper",
-  "testcafe",
-  "cypress",
-  "playwright",
-  "puppeteer",
-  "selenium",
-  "webdriver",
-  "jest",
-  "mocha",
-  "jasmine",
-  "karma",
-  "vitest",
-  "testing-library",
-  "enzyme",
-  "react-testing-library",
-  "vue-test-utils",
-  "angular-testing-library",
-  "svelte-testing-library",
-  "lit-testing-library",
-  "ember-testing",
-  "backbone-testing",
-  "jquery-testing",
-  "dojo-testing",
-  "dojo",
-  "mootools",
-  "prototype",
-  "yui",
-  "extjs",
-  "sencha",
-  "backbone",
-  "marionette",
-  "chaplin",
-  "thorax",
-  "handlebars",
-  "mustache",
-  "underscore",
-  "lodash",
-  "ramda",
-  "functional",
-  "lazy",
-  "bluebird",
-  "q",
-  "deferred",
-  "async",
-  "await",
-  "generator",
-  "co",
-  "redux",
-  "mobx",
-  "flux",
-  "reflux",
-  "alt",
-  "flummox",
-  "delorean",
-  "cerebral",
-  "kea",
-  "zustand",
-  "jotai",
-  "recoil",
-  "valtio",
-  "effector",
-  "xstate",
-  "robot",
-  "easy-peasy",
-  "pullstate",
-  "akita",
-  "ngrx",
-  "ngxs",
-  "akita",
-  "elf",
-  "pinia",
-  "overmind",
-  "stately",
-  "context",
-  "useContext",
-  "useReducer",
-  "useState",
-  "useEffect",
-  "useMemo",
-  "useCallback",
-  "useRef",
-  "useImperativeHandle",
-  "useLayoutEffect",
-  "useDebugValue",
-  "useDeferredValue",
-  "useTransition",
-  "useId",
-  "useSyncExternalStore",
-  "createContext",
-  "createElement",
-  "cloneElement",
-  "isValidElement",
-  "ReactDOM",
-  "render",
-  "hydrate",
-  "createRoot",
-  "unmountComponentAtNode",
-  "findDOMNode",
-  "createPortal",
-  "unstable_batchedUpdates",
-  "flushSync",
-  "React",
-  "Component",
-  "PureComponent",
-  "memo",
-  "lazy",
-  "Suspense",
-  "ErrorBoundary",
-  "Profiler",
-  "StrictMode",
-  "Fragment",
-  "createRef",
-  "forwardRef",
-  "createContext",
-  "createElement",
-  "cloneElement",
-  "isValidElement",
-  "Children",
-  "map",
-  "forEach",
-  "count",
-  "only",
-  "toArray",
-  "ReactDOM",
-  "render",
-  "hydrate",
-  "createRoot",
-  "unmountComponentAtNode",
-  "findDOMNode",
-  "createPortal",
-  "unstable_batchedUpdates",
-  "flushSync",
-  "React",
-  "Component",
-  "PureComponent",
-  "memo",
-  "lazy",
-  "Suspense",
-  "ErrorBoundary",
-  "Profiler",
-  "StrictMode",
-  "Fragment",
-  "createRef",
-  "forwardRef",
-  "createContext",
-  "createElement",
-  "cloneElement",
-  "isValidElement",
-  "Children",
-  "map",
-  "forEach",
-  "count",
-  "only",
-  "toArray",
-  "ReactDOM",
-  "render",
-  "hydrate",
-  "createRoot",
-  "unmountComponentAtNode",
-  "findDOMNode",
-  "createPortal",
-  "unstable_batchedUpdates",
-  "flushSync"
-]

package/dist/templates/.caws/waivers.yml

@@ -1,19 +0,0 @@
-waivers:
-  # Example waiver for urgent fixes
-  # - id: "HOTFIX-001"
-  #   description: "Urgent security fix - mutation testing waived"
-  #   gates: ["mutation", "coverage"]
-  #   reason: "urgent_fix"
-  #   approver: "senior-dev"
-  #   expires_at: "2025-10-07T10:00:00.000Z"
-  #   projects: ["FEAT-1234"]
-  #   max_trust_score: 79
-
-  # Example waiver for experimental features
-  # - id: "EXP-001"
-  #   description: "Experimental feature - relaxed testing"
-  #   gates: ["mutation", "contracts"]
-  #   reason: "experimental"
-  #   approver: "tech-lead"
-  #   expires_at: "2025-10-14T10:00:00.000Z"
-  #   max_trust_score: 75

package/dist/templates/.claude/README.md

@@ -1,190 +0,0 @@
-# Claude Code Integration for CAWS
-
-This directory contains Claude Code hooks and configuration for CAWS (Coding Agent Working Standard) integration.
-
-## Overview
-
-CAWS hooks for Claude Code provide:
-
-- **Safety Gates**: Block dangerous commands and scan for secrets
-- **Quality Gates**: Run CAWS quality checks after file edits
-- **Scope Guards**: Validate edits against the working spec's scope
-- **Audit Logging**: Track agent actions for compliance
-
-## Directory Structure
-
-```
-.claude/
-├── settings.json      # Claude Code settings with hooks configuration
-├── hooks/             # Hook scripts
-│   ├── audit.sh           # Session and action logging
-│   ├── block-dangerous.sh # Block destructive commands
-│   ├── scan-secrets.sh    # Warn when reading sensitive files
-│   ├── quality-check.sh   # Run CAWS quality gates
-│   ├── validate-spec.sh   # Validate spec files
-│   ├── scope-guard.sh     # Check scope boundaries
-│   └── naming-check.sh    # Validate file naming conventions
-├── logs/              # Audit logs (gitignored)
-└── README.md          # This file
-```
-
-## Hook Events
-
-### PreToolUse Hooks
-
-Run before Claude executes a tool:
-
-| Hook | Matcher | Purpose |
-|------|---------|---------|
-| `block-dangerous.sh` | `Bash` | Block destructive shell commands |
-| `scan-secrets.sh` | `Read` | Warn when reading sensitive files |
-| `scope-guard.sh` | `Write\|Edit` | Check scope boundaries before edits (use `caws scope show` to diagnose blocks) |
-
-### PostToolUse Hooks
-
-Run after Claude executes a tool:
-
-| Hook | Matcher | Purpose |
-|------|---------|---------|
-| `quality-check.sh` | `Write\|Edit` | Run CAWS quality gates |
-| `validate-spec.sh` | `Write\|Edit` | Validate spec file changes |
-| `naming-check.sh` | `Write` | Check file naming conventions |
-| `audit.sh` | `Write\|Edit\|Bash` | Log tool usage |
-
-### Session Hooks
-
-| Hook | Event | Purpose |
-|------|-------|---------|
-| `audit.sh session-start` | `SessionStart` | Log session start |
-| `audit.sh stop` | `Stop` | Log session end |
-
-## Configuration
-
-### Enable/Disable Hooks
-
-Edit `settings.json` to enable or disable specific hooks. Remove entries from the `hooks` object to disable them.
-
-### Hook Levels
-
-The scaffold supports four hook levels:
-
-- **safety**: Block dangerous commands, scan for secrets
-- **quality**: Run quality gates on file edits
-- **scope**: Validate edits against spec scope
-- **audit**: Log all agent actions
-
-Run `caws init --hooks=safety,quality` to enable specific levels.
-
-## Audit Logs
-
-Audit logs are written to `.claude/logs/`:
-
-- `audit.log` - All-time log (appended)
-- `audit-YYYY-MM-DD.log` - Daily logs
-
-Logs are JSON-formatted for easy parsing:
-
-```json
-{
-  "timestamp": "2024-01-15T10:30:00Z",
-  "session_id": "abc123",
-  "event": "tool_use",
-  "tool": "Write",
-  "file": "src/index.ts",
-  "cwd": "/project"
-}
-```
-
-## Customization
-
-### Adding Custom Hooks
-
-1. Create a new script in `.claude/hooks/`
-2. Make it executable: `chmod +x .claude/hooks/my-hook.sh`
-3. Add it to `settings.json`:
-
-```json
-{
-  "hooks": {
-    "PostToolUse": [
-      {
-        "matcher": "Write|Edit",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/hooks/my-hook.sh",
-            "timeout": 10
-          }
-        ]
-      }
-    ]
-  }
-}
-```
-
-### Hook Input/Output
-
-Hooks receive JSON input via stdin:
-
-```json
-{
-  "session_id": "abc123",
-  "hook_event_name": "PostToolUse",
-  "tool_name": "Write",
-  "tool_input": {
-    "file_path": "/path/to/file.ts",
-    "content": "..."
-  },
-  "tool_response": { "success": true }
-}
-```
-
-Hooks can output JSON to control Claude's behavior:
-
-```json
-{
-  "decision": "block",
-  "reason": "Quality gate failed: ..."
-}
-```
-
-Or add context:
-
-```json
-{
-  "hookSpecificOutput": {
-    "hookEventName": "PostToolUse",
-    "additionalContext": "Remember to update the tests."
-  }
-}
-```
-
-## Troubleshooting
-
-### Hooks Not Running
-
-1. Check `settings.json` syntax: `cat .claude/settings.json | jq .`
-2. Verify scripts are executable: `ls -la .claude/hooks/`
-3. Test hooks manually: `echo '{}' | .claude/hooks/audit.sh`
-
-### Permission Errors
-
-Make all hook scripts executable:
-
-```bash
-chmod +x .claude/hooks/*.sh
-```
-
-### Debug Hooks
-
-Run Claude Code with `--debug` to see hook execution details:
-
-```bash
-claude --debug
-```
-
-## Further Reading
-
-- [Claude Code Hooks Documentation](https://code.claude.com/docs/en/hooks)
-- [CAWS Quality Gates](../../docs/quality-gates.md)
-- [CAWS Scope Management](../../docs/scope-management.md)

package/dist/templates/.claude/hooks/audit.sh

@@ -1,121 +0,0 @@
-#!/bin/bash
-# CAWS Audit Hook for Claude Code
-# Logs agent actions for compliance and debugging
-# @author @darianrosebrook
-
-set -euo pipefail
-
-# Get event type from argument or input
-EVENT_TYPE="${1:-tool-use}"
-
-# Read JSON input from stdin
-INPUT=$(cat)
-
-# Parse common fields from Claude Code hook input
-SESSION_ID=$(echo "$INPUT" | jq -r '.session_id // "unknown"')
-CWD=$(echo "$INPUT" | jq -r '.cwd // "."')
-HOOK_EVENT=$(echo "$INPUT" | jq -r '.hook_event_name // "unknown"')
-TOOL_NAME=$(echo "$INPUT" | jq -r '.tool_name // ""')
-PERMISSION_MODE=$(echo "$INPUT" | jq -r '.permission_mode // "default"')
-
-# Ensure log directory exists
-LOG_DIR="${CLAUDE_PROJECT_DIR:-.}/.claude/logs"
-mkdir -p "$LOG_DIR"
-
-# Log file path
-LOG_FILE="$LOG_DIR/audit.log"
-DATE_LOG_FILE="$LOG_DIR/audit-$(date +%Y-%m-%d).log"
-
-# Timestamp
-TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
-
-# Build log entry based on event type
-case "$EVENT_TYPE" in
-  session-start)
-    SOURCE=$(echo "$INPUT" | jq -r '.source // "unknown"')
-    MODEL=$(echo "$INPUT" | jq -r '.model // "unknown"')
-    LOG_ENTRY=$(jq -n \
-      --arg ts "$TIMESTAMP" \
-      --arg sid "$SESSION_ID" \
-      --arg event "session_start" \
-      --arg source "$SOURCE" \
-      --arg model "$MODEL" \
-      --arg cwd "$CWD" \
-      '{timestamp: $ts, session_id: $sid, event: $event, source: $source, model: $model, cwd: $cwd}')
-    ;;
-
-  stop)
-    STOP_HOOK_ACTIVE=$(echo "$INPUT" | jq -r '.stop_hook_active // false')
-    LOG_ENTRY=$(jq -n \
-      --arg ts "$TIMESTAMP" \
-      --arg sid "$SESSION_ID" \
-      --arg event "session_stop" \
-      --arg cwd "$CWD" \
-      --argjson hook_active "$STOP_HOOK_ACTIVE" \
-      '{timestamp: $ts, session_id: $sid, event: $event, cwd: $cwd, stop_hook_active: $hook_active}')
-    ;;
-
-  tool-use)
-    # Extract tool-specific info
-    TOOL_INPUT=$(echo "$INPUT" | jq -c '.tool_input // {}')
-    TOOL_RESPONSE=$(echo "$INPUT" | jq -c '.tool_response // {}')
-    TOOL_USE_ID=$(echo "$INPUT" | jq -r '.tool_use_id // ""')
-
-    # For file operations, extract the path
-    FILE_PATH=$(echo "$TOOL_INPUT" | jq -r '.file_path // ""')
-    COMMAND=$(echo "$TOOL_INPUT" | jq -r '.command // ""')
-
-    LOG_ENTRY=$(jq -n \
-      --arg ts "$TIMESTAMP" \
-      --arg sid "$SESSION_ID" \
-      --arg event "tool_use" \
-      --arg tool "$TOOL_NAME" \
-      --arg file "$FILE_PATH" \
-      --arg cmd "$COMMAND" \
-      --arg cwd "$CWD" \
-      --arg mode "$PERMISSION_MODE" \
-      '{timestamp: $ts, session_id: $sid, event: $event, tool: $tool, file: $file, command: $cmd, cwd: $cwd, permission_mode: $mode}')
-    ;;
-
-  *)
-    LOG_ENTRY=$(jq -n \
-      --arg ts "$TIMESTAMP" \
-      --arg sid "$SESSION_ID" \
-      --arg event "$EVENT_TYPE" \
-      --arg hook "$HOOK_EVENT" \
-      --arg cwd "$CWD" \
-      '{timestamp: $ts, session_id: $sid, event: $event, hook_event: $hook, cwd: $cwd}')
-    ;;
-esac
-
-# --- Log rotation ---
-# Keep main audit.log under 10MB; keep date-logs for 30 days
-rotate_logs() {
-  # Rotate main audit.log at 10MB
-  if [[ -f "$LOG_FILE" ]]; then
-    local size
-    size=$(wc -c < "$LOG_FILE" 2>/dev/null | tr -d ' ')
-    if [[ "$size" -gt 10485760 ]]; then
-      # Keep last rotated copy, discard older
-      [[ -f "${LOG_FILE}.1" ]] && rm -f "${LOG_FILE}.1"
-      mv "$LOG_FILE" "${LOG_FILE}.1"
-    fi
-  fi
-
-  # Prune date-based logs older than 30 days
-  if [[ -d "$LOG_DIR" ]]; then
-    find "$LOG_DIR" -name 'audit-*.log' -type f -mtime +30 -delete 2>/dev/null || true
-  fi
-}
-
-# Run rotation check ~1% of the time (avoid stat overhead on every tool call)
-if [[ $(( RANDOM % 100 )) -eq 0 ]]; then
-  rotate_logs
-fi
-
-# Append to log files
-echo "$LOG_ENTRY" >> "$LOG_FILE"
-echo "$LOG_ENTRY" >> "$DATE_LOG_FILE"
-
-# Success - allow operation to continue
-exit 0