@the-bearded-bear/claude-craft 8.16.1 → 8.17.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/Dev/i18n/en/Common/rules/12-context-management.md +13 -7
  2. package/Dev/scripts/check-prerequisites.sh +4 -4
  3. package/README.md +31 -11
  4. package/bundles/cursor/.cursorrules +12 -12
  5. package/bundles/windsurf/.windsurfrules +12 -12
  6. package/cli/lib/tech-registry.js +1 -1
  7. package/package.json +2 -2
package/Dev/i18n/en/Common/rules/12-context-management.md CHANGED
@@ -748,12 +748,14 @@ For the 5 `opus` agents (security-auditor, database-architect, migration-special
748
748
 
749
749
  | Frontmatter | Description |
750
750
  |-------------|-------------|
751
- | `context: fork` | Run in isolated context (no pollution) |
751
+ | `context: fork` | Run in isolated context (no pollution). Recommended threshold: **>60 lines**. |
752
752
  | `disable-model-invocation: true` | Prevent automatic invocation by Claude |
753
753
  | `claudeMdExcludes` (setting) | Exclude specific CLAUDE.md files in monorepos |
754
754
 
755
755
  **Auto-compaction and skills:** After compaction, skills auto-reload (5K tokens/skill, 25K total max).
756
756
 
757
+ **Skills with `context: fork` (24 total):** Heavy (>100 lines, 17): `architect`, `debug-methodical`, `atomic-tasks`, `socratic-brainstorm`, `architecture-clean-ddd`, `parallel-worktrees`, `event-driven`, `cqrs`, `async`, `multitenant`, `testing`, `testing-symfony`, `testing-python`, `testing-react`, `testing-flutter`, `testing-reactnative`, `design-md-convention`. Medium (60-100 lines, 7): `edge-computing`, `wasm`, `graphql`, `monorepo`, `observability`, `docker-hadolint`, `api-gateway`.
758
+
757
759
  ---
758
760
 
759
761
  ## Token Optimization — Quick Setup
@@ -762,13 +764,14 @@ For the 5 `opus` agents (security-auditor, database-architect, migration-special
762
764
 
763
765
  **RTK (Rust Token Killer):** CLI proxy that reduces token consumption by 60-90% on dev commands. Install: `rtk init -g`.
764
766
 
765
- **Sub-agent model:** `export CLAUDE_CODE_SUBAGENT_MODEL="sonnet"` — 40-60% cost reduction.
767
+ **Sub-agent model:** `export CLAUDE_CODE_SUBAGENT_MODEL="claude-sonnet-4-6"` — 40-60% cost reduction.
766
768
 
767
769
  **Optimization hooks:**
768
770
 
769
771
  | Hook | File | Impact |
770
772
  |------|------|--------|
771
773
  | **PostToolUse** (Bash) | `~/.claude/hooks/post-tool-filter.sh` | Guides Claude to summarize outputs >10KB |
774
+ | **PostToolUse** (Read) | settings.json built-in | Alerts when a file read exceeds 50KB — prompts extracting only the relevant section |
772
775
  | **PreCompact** | `~/.claude/hooks/pre-compact.sh` | Preserves critical context before compaction |
773
776
  | **SessionStart** (compact) | Template `context-reinject.json` | Re-injects `context-essentials.md` after compaction |
774
777
 
@@ -777,10 +780,13 @@ Templates available in `.claude/templates/hooks/`: `output-filter.json`, `pre-co
777
780
  | Optimization | Savings |
778
781
  |---|---|
779
782
  | RTK + ultra-compact | 60-90% on CLI outputs |
780
- | SUBAGENT_MODEL=sonnet | 40-60% sub-agent cost |
781
- | PostToolUse hook | Reduces context pollution |
783
+ | SUBAGENT_MODEL=claude-sonnet-4-6 | 40-60% sub-agent cost |
784
+ | ENABLE_PROMPT_CACHING_1H | -40% on repetitive sessions (active by default in settings.json) |
785
+ | fallbackModel | Opus reliability — no session interruptions (active by default in settings.json) |
786
+ | PostToolUse hook (Bash+Read) | Reduces context pollution (5K-50K tokens/session on large files) |
782
787
  | PreCompact hook | Prevents context loss |
783
- | **Combined total** | **55-65% overall reduction** |
788
+ | context:fork skills (24 total) | 2K-15K tokens per long session chaining multiple skills |
789
+ | **Combined total** | **60-75% overall reduction** |
784
790
 
785
791
  > Detailed examples and templates: see `@.claude/references/base/context-management.md`
786
792
 
@@ -814,6 +820,6 @@ Beyond RTK and native hooks, the Claude Code ecosystem offers tools that cover a
814
820
 
815
821
  ---
816
822
 
817
- **Last updated:** 2026-04
818
- **Version:** 1.2.0
823
+ **Last updated:** 2026-06
824
+ **Version:** 1.3.0
819
825
  **Author:** The Bearded CTO
package/Dev/scripts/check-prerequisites.sh CHANGED
@@ -119,12 +119,12 @@ check_yq_version() {
119
119
  check_node_version() {
120
120
  if command -v node &> /dev/null; then
121
121
  local version=$(node --version | sed 's/v//' | cut -d. -f1)
122
- if [[ $version -ge 18 ]]; then
122
+ if [[ $version -ge 22 ]]; then
123
123
  return 0
124
124
  else
125
- ui_check_fail "node - Found v$version, need v18+"
125
+ ui_check_fail "node - Found v$version, need v22+"
126
126
  if $FIX; then
127
- ui_check_info "Fix: Use nvm to install Node.js 20: nvm install 20 && nvm use 20"
127
+ ui_check_info "Fix: Use nvm to install Node.js 22: nvm install 22 && nvm use 22"
128
128
  fi
129
129
  ERRORS=$((ERRORS + 1))
130
130
  return 1
@@ -136,7 +136,7 @@ check_node_version() {
136
136
  echo -e "${BOLD}Required Dependencies:${NC}"
137
137
  echo ""
138
138
 
139
- check "node" "Node.js 18+ for NPX and CLI" \
139
+ check "node" "Node.js 22+ for NPX and CLI" \
140
140
  "brew install node" \
141
141
  "sudo apt install nodejs npm" \
142
142
  "required"
package/README.md CHANGED
@@ -26,9 +26,26 @@ Plus **11 stack-specific reviewers** (@symfony-reviewer, @react-reviewer, @pytho
26
26
  [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
27
27
  [![Mutation testing badge](https://img.shields.io/endpoint?style=flat&url=https%3A%2F%2Fbadge-api.stryker-mutator.io%2Fgithub.com%2FTheBeardedBearSAS%2Fclaude-craft%2Fmain)](https://dashboard.stryker-mutator.io/reports/github.com/TheBeardedBearSAS/claude-craft/main)
28
28
 
29
- A comprehensive framework for AI-assisted development with [Claude Code](https://claude.ai/code). Install standardized rules, agents, and commands for your projects across multiple technology stacks — **31 specialized agents (+39 infra agents on-demand), 125 commands across 15 namespaces, 48 skills**, all token-optimized via `context: fork` and sub-agent model routing.
29
+ A comprehensive framework for AI-assisted development with [Claude Code](https://claude.ai/code). Install standardized rules, agents, and commands for your projects across multiple technology stacks — **31 specialized agents (+39 infra agents on-demand), 125 commands across 15 namespaces (219 total), 55 skills**, all token-optimized via `context: fork` and sub-agent model routing.
30
30
 
31
- ## What's New in v8.15.0
31
+ ## What's New in v8.17.0
32
+
33
+ **Audit exhaustif multi-agents + mises à jour 2026-06-24 (v8.17.0) :**
34
+
35
+ - **Versions infra** : Docker 29.6.0, OpenTofu 1.12.2, Ansible 2.21.1, Helm 4.2.2, Node.js 24.x Active LTS.
36
+ - **Sécurité** : OWASP Top 10:2025 complet (10/10 catégories dans la règle 11) ; RS256 marqué DEPRECATED ; guidance Argon2id précisée ; hook templates `protect-files.json` / `quality-gate.json` corrigés (anti-pattern `$TOOL_INPUT` → lecture stdin JSON).
37
+ - **Modèles** : `claude-fable-5` documenté ; IDs canoniques complets dans la table d'effort.
38
+ - **CLI** : `/goal`, `/usage`, `/workflows` documentés dans CLI-REFERENCE.md.
39
+ - **Optimisation tokens** : `ENABLE_PROMPT_CACHING_1H` et `fallbackModel` activés dans `settings.json` distribué.
40
+ - **Docs** : compteur commandes corrigé (133 → 125 core / 219 total) ; TROUBLESHOOTING, FAQ, CHEAT-SHEET, COMPETITIVE-ANALYSIS enrichis.
41
+
42
+ **Dépendances et supply chain (v8.16.0 / v8.16.1) :**
43
+
44
+ - **Trivy action** : `aquasecurity/trivy-action` mis à jour (v8.16.0) — scan CVE supply chain.
45
+ - **Download artifact** : `actions/download-artifact` bumped de 4.2.1 à 8.0.1 (v8.16.0).
46
+ - **CodeQL action** : `github/codeql-action` mis à jour (v8.16.0) — analyse SAST.
47
+ - **Playwright** : `@playwright/test` mis à jour de 1.60.0 à 1.61.0 dans `/website` (v8.16.0).
48
+ - **Patch de stabilité** : correctifs de dernière minute (v8.16.1).
32
49
 
33
50
  **Refonte du design de l'interface web Kanban (v8.15.0) :**
34
51
 
@@ -67,7 +84,7 @@ A comprehensive framework for AI-assisted development with [Claude Code](https:/
67
84
  - **MIT-only strict (v8.8.0)** -- Claude Craft est 100 % open-source MIT, aucune licence commerciale ou enterprise. Stratégie open-core abandonnée.
68
85
  - **Parité i18n stricte (v8.8.2)** -- la CI bloque désormais si un fichier traduit est à < 80 % de la taille de l'anglais. Dette i18n résorbée (gap 101 → 0).
69
86
  - **Branding the-bearded-bear.com (v8.10.1)** -- migration complète des domaines vers `the-bearded-bear.com`, normalisation de l'organisation GitHub.
70
- - **125 commandes sur 15 namespaces** -- namespace `/paperclip:*` (8 commandes) ajouté, 48 skills disponibles.
87
+ - **125 commandes sur 15 namespaces** (219 total avec infra/projet) -- namespace `/paperclip:*` (8 commandes) ajouté, 55 skills disponibles.
71
88
  - **Claude Code 2.1.168** -- version recommandée (Opus 4.8, Dynamic Workflows, `effort: ultracode`).
72
89
 
73
90
  > ← Versions antérieures (v8.0 → v8.7) : voir le [CHANGELOG](CHANGELOG.md) et [.claude/COMPATIBILITY.md](.claude/COMPATIBILITY.md).
@@ -127,11 +144,11 @@ Claude Code is powerful on its own. Claude Craft makes it **consistent and team-
127
144
  | **PHP** | 8.5 | `--tech=php` |
128
145
  | **Paperclip** | 2026.609.0 | `--tech=paperclip` |
129
146
 
130
- | **Docker** | 29.5.3 (CVE-2026-33997) | `--tech=docker` |
147
+ | **Docker** | 29.6.0 (CVE-2026-33997) | `--tech=docker` |
131
148
  | **Coolify** | v4.1.2 | `--tech=coolify` |
132
149
  | **Kubernetes** | 1.36.1 | `--tech=kubernetes` |
133
- | **OpenTofu** | 1.12.1 | `--tech=opentofu` |
134
- | **Ansible** | 2.21.0 | `--tech=ansible` |
150
+ | **OpenTofu** | 1.12.2 | `--tech=opentofu` |
151
+ | **Ansible** | 2.21.1 | `--tech=ansible` |
135
152
  | **Hcloud** | 1.61+ | `--tech=hcloud` |
136
153
  | **PgBouncer** | 1.25.2 (CVE-2026-6664/6665/6666/6667 patched) | `--tech=pgbouncer` |
137
154
  | **FrankenPHP** | 1.12.4 (CVE-2026-45062 patched) | `--tech=frankenphp` |
@@ -143,8 +160,8 @@ See [Technologies](docs/TECHNOLOGIES.md) for full details.
143
160
  | Category | Count | Examples |
144
161
  |----------|-------|---------|
145
162
  | **Agents** | 31 default (+ 39 infra on-demand) | `@tdd-coach`, `@api-designer`, `@symfony-reviewer`, `@kubernetes-architect`, `@hcloud-architect` |
146
- | **Commands** | 133 across 15 namespaces | `/workflow:init`, `/team:audit`, `/react:generate-component` |
147
- | **Skills** | 55 | Architecture, testing, security best practices |
163
+ | **Commands** | 125 across 15 namespaces (219 total with infra/project) | `/workflow:init`, `/team:audit`, `/react:generate-component` |
164
+ | **Skills** | 55 | Architecture, testing, security, DDD best practices |
148
165
  | **Templates** | 21 | Code generation patterns, BMAD project templates |
149
166
  | **Checklists** | 10 | Commit, feature, release quality gates |
150
167
 
@@ -185,7 +202,7 @@ These are the commands you'll use most:
185
202
  | `/common:ralph-run "task"` | Run Claude in continuous loop until task is done |
186
203
  | `/qa:recette` | Automated acceptance testing via Chrome |
187
204
 
188
- See [CLI Reference](docs/CLI-REFERENCE.md) for all 125 commands across 15 namespaces.
205
+ See [CLI Reference](docs/CLI-REFERENCE.md) for all 125 commands across 15 core namespaces (219 total including infra and project management).
189
206
 
190
207
  ## Installation
191
208
 
@@ -265,7 +282,7 @@ Context usage is optimized: ~3,500 tokens always loaded vs ~70,000 if everything
265
282
  | [Installation](docs/INSTALLATION.md) | All installation methods |
266
283
  | [Configuration](docs/CONFIGURATION.md) | Project configuration |
267
284
  | [CLI Reference](docs/CLI-REFERENCE.md) | Full CLI documentation |
268
- | [Commands](docs/COMMANDS.md) | All 125 commands |
285
+ | [Commands](docs/COMMANDS.md) | All 133 commands |
269
286
  | [Agents](docs/AGENTS.md) | All 31 default agents (+ 39 infra on-demand) |
270
287
  | [Skills](docs/SKILLS.md) | Best practices reference |
271
288
  | [Technologies](docs/TECHNOLOGIES.md) | Stack-specific guides |
@@ -276,7 +293,10 @@ Context usage is optimized: ~3,500 tokens always loaded vs ~70,000 if everything
276
293
  | [Privacy Policy](PRIVACY.md) | Data protection and GDPR compliance |
277
294
  | [FAQ](docs/FAQ.md) | Common questions |
278
295
  | [Troubleshooting](docs/TROUBLESHOOTING.md) | Problem solving |
279
- | [Migration v7](docs/MIGRATION-v7.md) | Upgrade from previous versions |
296
+ | [Migration v6→v7](docs/MIGRATION-v7.md) | Upgrade from v6 to v7 |
297
+ | [Migration v7→v8](docs/MIGRATION-v7-to-v8.md) | Upgrade from v7 to v8 |
298
+ | [Agent Teams Guide](docs/AGENT-TEAMS-GUIDE.md) | Multi-agent team orchestration |
299
+ | [Cheat Sheet](docs/CHEAT-SHEET.md) | Quick command reference card |
280
300
  | [Skills Publishing](docs/SKILLS-PUBLISHING.md) | Guide for publishing skills |
281
301
  | [Compatibility](.claude/COMPATIBILITY.md) | Claude Code version compatibility |
282
302
 
package/bundles/cursor/.cursorrules CHANGED
@@ -8,7 +8,7 @@
8
8
 
9
9
  # Claude-Craft - Multi-Technology Framework
10
10
 
11
- **Version:** 8.16.1 | **Languages:** en, fr, es, de, pt
11
+ **Version:** 8.17.0 | **Languages:** en, fr, es, de, pt
12
12
 
13
13
  A comprehensive AI-assisted development framework for Claude Code with 11 technology stacks, 31 specialized agents (+39 infra agents on-demand), 125 commands across 15 namespaces, and BMAD v6 project management.
14
14
 
@@ -38,9 +38,9 @@ A comprehensive AI-assisted development framework for Claude Code with 11 techno
38
38
  | Symfony / PHP | `@.claude/references/symfony/CLAUDE.md` | `/symfony:*` |
39
39
  | Flutter / Dart | `@.claude/references/flutter/CLAUDE.md` | `/flutter:*` |
40
40
  | React | `@.claude/references/react/` | `/react:*` |
41
- | React Native | `@.claude/references/react-native/` | `/reactnative:*` |
42
- | Angular | `@.claude/references/angular/` | `/angular:*` |
43
- | Vue.js | `@.claude/references/vuejs/` | `/vuejs:*` |
41
+ | React Native | `@.claude/references/reactnative/CLAUDE.md` | `/reactnative:*` |
42
+ | Angular | `@.claude/references/angular/CLAUDE.md` | `/angular:*` |
43
+ | Vue.js | `@.claude/references/vuejs/CLAUDE.md` | `/vuejs:*` |
44
44
  | Laravel | `@.claude/references/laravel/` | `/laravel:*` |
45
45
  | Python | `@.claude/references/python/` | `/python:*` |
46
46
  | PHP | `@.claude/references/php/` | `/php:*` |
@@ -55,7 +55,7 @@ See `@.claude/INDEX.md` for condensed checklists and patterns.
55
55
 
56
56
  ## Available Commands (15 namespaces, 125 commands)
57
57
 
58
- Core: `/common:*`, `/workflow:*`, `/team:*`, `/qa:*`, `/uiux:*` | Tech: `/symfony:*`, `/react:*`, `/flutter:*`, `/python:*`, `/angular:*`, `/vuejs:*`, `/laravel:*`, `/reactnative:*`, `/csharp:*`, `/php:*`, `/paperclip:*` | Infra (via `@devops-engineer`): Docker 29.5.3 (CVE-2026-33997), Coolify v4.1.2, K8s 1.36.1, OpenTofu 1.12.1, Ansible 2.21.0, FrankenPHP 1.12.4 (CVE-2026-45062 patched), PgBouncer 1.25.2 (CVE-2026-6664/6665/6666/6667 patched) | Project: `/sprint:*`, `/gate:*`, `/project:*`
58
+ Core: `/common:*`, `/workflow:*`, `/team:*`, `/qa:*`, `/uiux:*` | Tech: `/symfony:*`, `/react:*`, `/flutter:*`, `/python:*`, `/angular:*`, `/vuejs:*`, `/laravel:*`, `/reactnative:*`, `/csharp:*`, `/php:*`, `/paperclip:*` | Infra (via `@devops-engineer`): Docker 29.6.0, Coolify v4.1.2, K8s 1.36.1, OpenTofu 1.12.2, Ansible 2.21.1, FrankenPHP 1.12.4, PgBouncer 1.25.2 | Project: `/sprint:*`, `/gate:*`, `/project:*`
59
59
 
60
60
  Full reference: [Commands](../docs/COMMANDS.md) | [CLI Reference](../docs/CLI-REFERENCE.md)
61
61
 
@@ -190,7 +190,7 @@ See `.claude/rules/12-context-management.md` for detailed guidance.
190
190
  | **`/memory`** | Persistent session learnings across conversations (v2.1.59+) |
191
191
  | **Pointers over copies** | Use `@path` references instead of copying code into CLAUDE.md |
192
192
  | **Token optimization** | Use `/common:setup-rtk` for 55-65% token savings |
193
- | **Sub-agent model** | Set `CLAUDE_CODE_SUBAGENT_MODEL=sonnet` for cost savings |
193
+ | **Sub-agent model** | Set `CLAUDE_CODE_SUBAGENT_MODEL=claude-sonnet-4-6` for cost savings |
194
194
 
195
195
  See `.claude/templates/hooks/` for ready-to-use hook templates.
196
196
 
@@ -312,21 +312,21 @@ SRP | OCP | LSP | ISP | DIP — See full rules in .claude/rules/04-solid-princip
312
312
  TDD: RED → GREEN → REFACTOR | Coverage >= 80% | Mutation testing
313
313
 
314
314
  ### Security
315
- ## OWASP Top 10:2025 — Essentiels
315
+ ## OWASP Top 10:2025 — Toutes les categories (10/10)
316
316
 
317
317
  | # | Menace | Defense |
318
318
  |---|--------|---------|
319
319
  | 1 | Broken Access Control (inclut **SSRF** consolide) | Verifier permissions a CHAQUE requete, deny by default |
320
- | 2 | Cryptographic Failures | TLS 1.3, **Argon2id** (128 MiB RAM, t=3-5, p=1), secrets dans vault |
320
+ | 2 | Cryptographic Failures | TLS 1.3, **Argon2id** (128 MiB RAM, t>=3, p=1), secrets dans vault |
321
321
  | 3 | Injection | Requetes parametrees, validation/sanitization |
322
322
  | 4 | Insecure Design | Threat modeling, defense in depth, rate limiting |
323
323
  | 5 | Security Misconfiguration | Hardening, erreurs generiques en prod |
324
- | 6 | **Software Supply Chain Failures** (nouveau 2025) | SLSA 1.0, SBOM (SPDX 3 / CycloneDX), Sigstore keyless signing, reproducible builds |
324
+ | 6 | **Software Supply Chain Failures** (nouveau 2025) | SLSA 1.0, SBOM (CycloneDX 1.6+ / SPDX 3), Sigstore keyless signing, reproducible builds |
325
325
  | 7 | **Mishandling of Exceptional Conditions** (nouveau 2025) | Logger les erreurs, ne jamais exposer la stack trace en prod |
326
+ | 8 | **Authentication Failures** | MFA obligatoire, brute-force protection, sessions invalidees a la deconnexion |
327
+ | 9 | **Security Logging and Monitoring Failures** | Centraliser les logs, alertes sur anomalies, retention >= 1 an |
328
+ | 10 | **Vulnerable and Outdated Components** | Dependabot/Renovate, `npm audit --audit-level=moderate`, Trivy, Grype |
326
329
 
327
- Sources : [OWASP Top 10:2025](https://owasp.org/Top10/2025/), [Supply Chain 2026](https://kawaldeepsingh.medium.com/practical-software-supply-chain-security-2026-sboms-signing-slsa-reproducible-builds-a-0416cfac32dc).
328
-
329
- ## Regles non-negociables
330
330
 
331
331
  ### Git Workflow
332
332
  Conventional Commits | GitHub Flow | Feature branches < 3 days
package/bundles/windsurf/.windsurfrules CHANGED
@@ -8,7 +8,7 @@
8
8
 
9
9
  # Claude-Craft - Multi-Technology Framework
10
10
 
11
- **Version:** 8.16.1 | **Languages:** en, fr, es, de, pt
11
+ **Version:** 8.17.0 | **Languages:** en, fr, es, de, pt
12
12
 
13
13
  A comprehensive AI-assisted development framework for Claude Code with 11 technology stacks, 31 specialized agents (+39 infra agents on-demand), 125 commands across 15 namespaces, and BMAD v6 project management.
14
14
 
@@ -38,9 +38,9 @@ A comprehensive AI-assisted development framework for Claude Code with 11 techno
38
38
  | Symfony / PHP | `@.claude/references/symfony/CLAUDE.md` | `/symfony:*` |
39
39
  | Flutter / Dart | `@.claude/references/flutter/CLAUDE.md` | `/flutter:*` |
40
40
  | React | `@.claude/references/react/` | `/react:*` |
41
- | React Native | `@.claude/references/react-native/` | `/reactnative:*` |
42
- | Angular | `@.claude/references/angular/` | `/angular:*` |
43
- | Vue.js | `@.claude/references/vuejs/` | `/vuejs:*` |
41
+ | React Native | `@.claude/references/reactnative/CLAUDE.md` | `/reactnative:*` |
42
+ | Angular | `@.claude/references/angular/CLAUDE.md` | `/angular:*` |
43
+ | Vue.js | `@.claude/references/vuejs/CLAUDE.md` | `/vuejs:*` |
44
44
  | Laravel | `@.claude/references/laravel/` | `/laravel:*` |
45
45
  | Python | `@.claude/references/python/` | `/python:*` |
46
46
  | PHP | `@.claude/references/php/` | `/php:*` |
@@ -55,7 +55,7 @@ See `@.claude/INDEX.md` for condensed checklists and patterns.
55
55
 
56
56
  ## Available Commands (15 namespaces, 125 commands)
57
57
 
58
- Core: `/common:*`, `/workflow:*`, `/team:*`, `/qa:*`, `/uiux:*` | Tech: `/symfony:*`, `/react:*`, `/flutter:*`, `/python:*`, `/angular:*`, `/vuejs:*`, `/laravel:*`, `/reactnative:*`, `/csharp:*`, `/php:*`, `/paperclip:*` | Infra (via `@devops-engineer`): Docker 29.5.3 (CVE-2026-33997), Coolify v4.1.2, K8s 1.36.1, OpenTofu 1.12.1, Ansible 2.21.0, FrankenPHP 1.12.4 (CVE-2026-45062 patched), PgBouncer 1.25.2 (CVE-2026-6664/6665/6666/6667 patched) | Project: `/sprint:*`, `/gate:*`, `/project:*`
58
+ Core: `/common:*`, `/workflow:*`, `/team:*`, `/qa:*`, `/uiux:*` | Tech: `/symfony:*`, `/react:*`, `/flutter:*`, `/python:*`, `/angular:*`, `/vuejs:*`, `/laravel:*`, `/reactnative:*`, `/csharp:*`, `/php:*`, `/paperclip:*` | Infra (via `@devops-engineer`): Docker 29.6.0, Coolify v4.1.2, K8s 1.36.1, OpenTofu 1.12.2, Ansible 2.21.1, FrankenPHP 1.12.4, PgBouncer 1.25.2 | Project: `/sprint:*`, `/gate:*`, `/project:*`
59
59
 
60
60
  Full reference: [Commands](../docs/COMMANDS.md) | [CLI Reference](../docs/CLI-REFERENCE.md)
61
61
 
@@ -190,7 +190,7 @@ See `.claude/rules/12-context-management.md` for detailed guidance.
190
190
  | **`/memory`** | Persistent session learnings across conversations (v2.1.59+) |
191
191
  | **Pointers over copies** | Use `@path` references instead of copying code into CLAUDE.md |
192
192
  | **Token optimization** | Use `/common:setup-rtk` for 55-65% token savings |
193
- | **Sub-agent model** | Set `CLAUDE_CODE_SUBAGENT_MODEL=sonnet` for cost savings |
193
+ | **Sub-agent model** | Set `CLAUDE_CODE_SUBAGENT_MODEL=claude-sonnet-4-6` for cost savings |
194
194
 
195
195
  See `.claude/templates/hooks/` for ready-to-use hook templates.
196
196
 
@@ -312,21 +312,21 @@ SRP | OCP | LSP | ISP | DIP — See full rules in .claude/rules/04-solid-princip
312
312
  TDD: RED → GREEN → REFACTOR | Coverage >= 80% | Mutation testing
313
313
 
314
314
  ### Security
315
- ## OWASP Top 10:2025 — Essentiels
315
+ ## OWASP Top 10:2025 — Toutes les categories (10/10)
316
316
 
317
317
  | # | Menace | Defense |
318
318
  |---|--------|---------|
319
319
  | 1 | Broken Access Control (inclut **SSRF** consolide) | Verifier permissions a CHAQUE requete, deny by default |
320
- | 2 | Cryptographic Failures | TLS 1.3, **Argon2id** (128 MiB RAM, t=3-5, p=1), secrets dans vault |
320
+ | 2 | Cryptographic Failures | TLS 1.3, **Argon2id** (128 MiB RAM, t>=3, p=1), secrets dans vault |
321
321
  | 3 | Injection | Requetes parametrees, validation/sanitization |
322
322
  | 4 | Insecure Design | Threat modeling, defense in depth, rate limiting |
323
323
  | 5 | Security Misconfiguration | Hardening, erreurs generiques en prod |
324
- | 6 | **Software Supply Chain Failures** (nouveau 2025) | SLSA 1.0, SBOM (SPDX 3 / CycloneDX), Sigstore keyless signing, reproducible builds |
324
+ | 6 | **Software Supply Chain Failures** (nouveau 2025) | SLSA 1.0, SBOM (CycloneDX 1.6+ / SPDX 3), Sigstore keyless signing, reproducible builds |
325
325
  | 7 | **Mishandling of Exceptional Conditions** (nouveau 2025) | Logger les erreurs, ne jamais exposer la stack trace en prod |
326
+ | 8 | **Authentication Failures** | MFA obligatoire, brute-force protection, sessions invalidees a la deconnexion |
327
+ | 9 | **Security Logging and Monitoring Failures** | Centraliser les logs, alertes sur anomalies, retention >= 1 an |
328
+ | 10 | **Vulnerable and Outdated Components** | Dependabot/Renovate, `npm audit --audit-level=moderate`, Trivy, Grype |
326
329
 
327
- Sources : [OWASP Top 10:2025](https://owasp.org/Top10/2025/), [Supply Chain 2026](https://kawaldeepsingh.medium.com/practical-software-supply-chain-security-2026-sboms-signing-slsa-reproducible-builds-a-0416cfac32dc).
328
-
329
- ## Regles non-negociables
330
330
 
331
331
  ### Git Workflow
332
332
  Conventional Commits | GitHub Flow | Feature branches < 3 days
package/cli/lib/tech-registry.js CHANGED
@@ -145,7 +145,7 @@ const TECH_REGISTRY = {
145
145
  namespace: 'docker',
146
146
  i18nDir: 'Docker',
147
147
  installScript: 'install-docker-rules.sh',
148
- version: '29.5.3',
148
+ version: '29.6.0',
149
149
  tier: null,
150
150
  },
151
151
  coolify: {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@the-bearded-bear/claude-craft",
3
- "version": "8.16.1",
3
+ "version": "8.17.0",
4
4
  "description": "A comprehensive framework for AI-assisted development with Claude Code. Install standardized rules, agents, and commands for your projects.",
5
5
  "type": "module",
6
6
  "main": "cli/index.js",
@@ -103,7 +103,7 @@
103
103
  "chokidar": "^5.0.0",
104
104
  "gray-matter": "^4.0.3",
105
105
  "hono": "^4.12.14",
106
- "js-yaml": "^4.1.1",
106
+ "js-yaml": "^4.2.0",
107
107
  "marked": "^18.0.4",
108
108
  "zod": "^4.4.3"
109
109
  },