agileflow 2.76.0 → 2.78.0

package/README.md

@@ -3,7 +3,7 @@
 </p>
 
 [![npm version](https://img.shields.io/npm/v/agileflow?color=brightgreen)](https://www.npmjs.com/package/agileflow)
-[![Commands](https://img.shields.io/badge/commands-58-blue)](docs/04-architecture/commands.md)
+[![Commands](https://img.shields.io/badge/commands-68-blue)](docs/04-architecture/commands.md)
 [![Agents/Experts](https://img.shields.io/badge/agents%2Fexperts-27-orange)](docs/04-architecture/subagents.md)
 [![Skills](https://img.shields.io/badge/skills-dynamic-purple)](docs/04-architecture/skills.md)
 
@@ -65,7 +65,7 @@ AgileFlow combines three proven methodologies:
 
 | Component | Count | Description |
 |-----------|-------|-------------|
-| [Commands](docs/04-architecture/commands.md) | 58 | Slash commands for agile workflows |
+| [Commands](docs/04-architecture/commands.md) | 68 | Slash commands for agile workflows |
 | [Agents/Experts](docs/04-architecture/subagents.md) | 27 | Specialized agents with self-improving knowledge bases |
 | [Skills](docs/04-architecture/skills.md) | Dynamic | Generated on-demand with `/agileflow:skill:create` |
 
@@ -76,7 +76,7 @@ AgileFlow combines three proven methodologies:
 Full documentation lives in [`docs/04-architecture/`](docs/04-architecture/):
 
 ### Reference
-- [Commands](docs/04-architecture/commands.md) - All 58 slash commands
+- [Commands](docs/04-architecture/commands.md) - All 68 slash commands
 - [Agents/Experts](docs/04-architecture/subagents.md) - 27 specialized agents with self-improving knowledge
 - [Skills](docs/04-architecture/skills.md) - Dynamic skill generator with MCP integration
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agileflow",
-  "version": "2.76.0",
+  "version": "2.78.0",
   "description": "AI-driven agile development system for Claude Code, Cursor, Windsurf, and more",
   "keywords": [
     "agile",
@@ -51,6 +51,8 @@
     "test:coverage": "jest --coverage"
   },
   "dependencies": {
+    "blessed": "^0.1.81",
+    "blessed-contrib": "^4.10.1",
     "chalk": "^4.1.2",
     "commander": "^12.1.0",
     "fs-extra": "^11.2.0",
@@ -59,6 +61,9 @@
     "ora": "^5.4.1",
     "semver": "^7.6.3"
   },
+  "optionalDependencies": {
+    "node-pty": "^1.0.0"
+  },
   "engines": {
     "node": ">=18.0.0"
   },

package/scripts/agileflow-configure.js

@@ -23,7 +23,7 @@
  *   --detect                            Show current status
  *   --help                              Show help
  *
- * Features: sessionstart, precompact, ralphloop, selfimprove, archival, statusline, autoupdate
+ * Features: sessionstart, precompact, ralphloop, selfimprove, archival, statusline, autoupdate, damagecontrol
  */
 
 const fs = require('fs');
@@ -76,6 +76,11 @@ const FEATURES = {
   archival: { script: 'archive-completed-stories.sh', requiresHook: 'sessionstart' },
   statusline: { script: 'agileflow-statusline.sh' },
   autoupdate: { metadataOnly: true }, // Stored in metadata.updates.autoUpdate
+  damagecontrol: {
+    preToolUseHooks: true,
+    scripts: ['damage-control-bash.js', 'damage-control-edit.js', 'damage-control-write.js'],
+    patternsFile: 'damage-control-patterns.yaml',
+  },
 };
 
 // Complete registry of all scripts that may need repair
@@ -87,6 +92,9 @@ const ALL_SCRIPTS = {
   'auto-self-improve.js': { feature: 'selfimprove', required: true },
   'archive-completed-stories.sh': { feature: 'archival', required: true },
   'agileflow-statusline.sh': { feature: 'statusline', required: true },
+  'damage-control-bash.js': { feature: 'damagecontrol', required: true },
+  'damage-control-edit.js': { feature: 'damagecontrol', required: true },
+  'damage-control-write.js': { feature: 'damagecontrol', required: true },
 
   // Support scripts (used by commands/agents)
   'obtain-context.js': { usedBy: ['/babysit', '/mentor', '/sprint'] },
@@ -215,6 +223,7 @@ function detectConfig() {
       selfimprove: { enabled: false, valid: true, issues: [], version: null, outdated: false },
       archival: { enabled: false, threshold: null, version: null, outdated: false },
       statusline: { enabled: false, valid: true, issues: [], version: null, outdated: false },
+      damagecontrol: { enabled: false, valid: true, issues: [], version: null, outdated: false, level: null, patternCount: 0 },
     },
     metadata: { exists: false, version: null },
     currentVersion: VERSION,
@@ -298,6 +307,32 @@ function detectConfig() {
             }
           }
         }
+
+        // PreToolUse hooks (damage control)
+        if (settings.hooks.PreToolUse) {
+          if (Array.isArray(settings.hooks.PreToolUse) && settings.hooks.PreToolUse.length > 0) {
+            // Check for damage-control hooks by looking for damage-control scripts
+            const hasBashHook = settings.hooks.PreToolUse.some(
+              h => h.matcher === 'Bash' && h.hooks?.some(hk => hk.command?.includes('damage-control'))
+            );
+            const hasEditHook = settings.hooks.PreToolUse.some(
+              h => h.matcher === 'Edit' && h.hooks?.some(hk => hk.command?.includes('damage-control'))
+            );
+            const hasWriteHook = settings.hooks.PreToolUse.some(
+              h => h.matcher === 'Write' && h.hooks?.some(hk => hk.command?.includes('damage-control'))
+            );
+
+            if (hasBashHook || hasEditHook || hasWriteHook) {
+              status.features.damagecontrol.enabled = true;
+              // Count how many of the 3 hooks are present
+              const hookCount = [hasBashHook, hasEditHook, hasWriteHook].filter(Boolean).length;
+              if (hookCount < 3) {
+                status.features.damagecontrol.valid = false;
+                status.features.damagecontrol.issues.push(`Only ${hookCount}/3 hooks configured`);
+              }
+            }
+          }
+        }
       }
 
       // StatusLine
@@ -326,6 +361,11 @@ function detectConfig() {
         status.features.archival.threshold = meta.archival.threshold_days;
       }
 
+      // Damage control metadata
+      if (meta.features?.damagecontrol?.enabled) {
+        status.features.damagecontrol.level = meta.features.damagecontrol.protectionLevel || 'standard';
+      }
+
       // Read feature versions from metadata and check if outdated
       if (meta.features) {
         Object.entries(meta.features).forEach(([feature, data]) => {
@@ -402,6 +442,22 @@ function printStatus(status) {
 
   printFeature('statusline', 'Status Line');
 
+  // Damage Control (special display with level info)
+  const dc = status.features.damagecontrol;
+  if (dc.enabled) {
+    let dcStatusText = 'enabled';
+    if (dc.level) dcStatusText += ` (${dc.level})`;
+    if (!dc.valid) dcStatusText = 'INCOMPLETE';
+    const dcIcon = dc.enabled && dc.valid ? '🛡️' : '⚠️';
+    const dcColor = dc.enabled && dc.valid ? c.green : c.yellow;
+    log(`  ${dcIcon} Damage Control: ${dcStatusText}`, dcColor);
+    if (dc.issues?.length > 0) {
+      dc.issues.forEach(issue => log(`     └─ ${issue}`, c.yellow));
+    }
+  } else {
+    log(`  ❌ Damage Control: disabled`, c.dim);
+  }
+
   // Metadata
   if (status.metadata.exists) {
     log(`\nMetadata: v${status.metadata.version}`, c.dim);
@@ -584,9 +640,10 @@ function enableFeature(feature, options = {}) {
 
     // Stop hooks use error suppression to avoid blocking Claude
     const isStoHook = config.hook === 'Stop';
-    const command = config.type === 'node'
-      ? `node ${absoluteScriptPath}${isStoHook ? ' 2>/dev/null || true' : ''}`
-      : `bash ${absoluteScriptPath}${isStoHook ? ' 2>/dev/null || true' : ''}`;
+    const command =
+      config.type === 'node'
+        ? `node ${absoluteScriptPath}${isStoHook ? ' 2>/dev/null || true' : ''}`
+        : `bash ${absoluteScriptPath}${isStoHook ? ' 2>/dev/null || true' : ''}`;
 
     if (isStoHook) {
       // Stop hooks stack - add to existing hooks instead of replacing
@@ -599,9 +656,7 @@ function enableFeature(feature, options = {}) {
       }
 
       // Check if this script is already added
-      const hasHook = settings.hooks.Stop[0].hooks.some(h =>
-        h.command?.includes(config.script)
-      );
+      const hasHook = settings.hooks.Stop[0].hooks.some(h => h.command?.includes(config.script));
 
       if (!hasHook) {
         settings.hooks.Stop[0].hooks.push({ type: 'command', command });
@@ -686,6 +741,79 @@ function enableFeature(feature, options = {}) {
     return true; // Skip settings.json write for this feature
   }
 
+  // Handle damage control (PreToolUse hooks)
+  if (feature === 'damagecontrol') {
+    const level = options.protectionLevel || 'standard';
+
+    // Verify all required scripts exist
+    const requiredScripts = ['damage-control-bash.js', 'damage-control-edit.js', 'damage-control-write.js'];
+    for (const script of requiredScripts) {
+      if (!scriptExists(script)) {
+        error(`Script not found: ${getScriptPath(script)}`);
+        info('Run "npx agileflow update" to reinstall scripts');
+        return false;
+      }
+    }
+
+    // Deploy patterns file if not exists
+    const patternsDir = path.join(process.cwd(), '.agileflow', 'config');
+    const patternsDest = path.join(patternsDir, 'damage-control-patterns.yaml');
+    if (!fs.existsSync(patternsDest)) {
+      ensureDir(patternsDir);
+      // Try to copy from templates
+      const templatePath = path.join(process.cwd(), '.agileflow', 'templates', 'damage-control-patterns.yaml');
+      if (fs.existsSync(templatePath)) {
+        fs.copyFileSync(templatePath, patternsDest);
+        success('Deployed damage control patterns');
+      } else {
+        warn('No patterns template found - hooks will use defaults');
+      }
+    }
+
+    // Initialize PreToolUse array if not exists
+    if (!settings.hooks.PreToolUse) {
+      settings.hooks.PreToolUse = [];
+    }
+
+    // Helper to add or update a PreToolUse hook
+    const addPreToolUseHook = (matcher, scriptName) => {
+      const scriptPath = path.join(process.cwd(), '.agileflow', 'scripts', scriptName);
+
+      // Remove existing hook for this matcher if present
+      settings.hooks.PreToolUse = settings.hooks.PreToolUse.filter(h => h.matcher !== matcher);
+
+      // Add new hook
+      settings.hooks.PreToolUse.push({
+        matcher,
+        hooks: [{ type: 'command', command: `node ${scriptPath}`, timeout: 5 }],
+      });
+    };
+
+    // Add hooks for Bash, Edit, Write tools
+    addPreToolUseHook('Bash', 'damage-control-bash.js');
+    addPreToolUseHook('Edit', 'damage-control-edit.js');
+    addPreToolUseHook('Write', 'damage-control-write.js');
+
+    success('Damage control PreToolUse hooks enabled');
+
+    // Update metadata with protection level
+    updateMetadata({
+      features: {
+        damagecontrol: {
+          enabled: true,
+          protectionLevel: level,
+          version: VERSION,
+          at: new Date().toISOString(),
+        },
+      },
+    });
+
+    writeJSON('.claude/settings.json', settings);
+    updateGitignore();
+
+    return true;
+  }
+
   writeJSON('.claude/settings.json', settings);
   updateMetadata({
     features: { [feature]: { enabled: true, version: VERSION, at: new Date().toISOString() } },
@@ -765,6 +893,45 @@ function disableFeature(feature) {
     return true; // Skip settings.json write for this feature
   }
 
+  // Disable damage control (PreToolUse hooks)
+  if (feature === 'damagecontrol') {
+    if (settings.hooks?.PreToolUse && Array.isArray(settings.hooks.PreToolUse)) {
+      const before = settings.hooks.PreToolUse.length;
+
+      // Remove damage-control hooks (Bash, Edit, Write matchers with damage-control scripts)
+      settings.hooks.PreToolUse = settings.hooks.PreToolUse.filter(h => {
+        const isDamageControlHook = h.hooks?.some(hk => hk.command?.includes('damage-control'));
+        return !isDamageControlHook;
+      });
+
+      const after = settings.hooks.PreToolUse.length;
+
+      if (before > after) {
+        success(`Removed ${before - after} damage control PreToolUse hook(s)`);
+      }
+
+      // If no more PreToolUse hooks, remove the entire array
+      if (settings.hooks.PreToolUse.length === 0) {
+        delete settings.hooks.PreToolUse;
+      }
+    }
+
+    // Update metadata
+    updateMetadata({
+      features: {
+        damagecontrol: {
+          enabled: false,
+          version: VERSION,
+          at: new Date().toISOString(),
+        },
+      },
+    });
+
+    writeJSON('.claude/settings.json', settings);
+    success('Damage control disabled');
+    return true;
+  }
+
   writeJSON('.claude/settings.json', settings);
   updateMetadata({
     features: { [feature]: { enabled: false, version: VERSION, at: new Date().toISOString() } },
@@ -1027,9 +1194,11 @@ function showVersionInfo() {
       const installed = installedVersion.split('.').map(Number);
       const latest = latestVersion.split('.').map(Number);
 
-      if (latest[0] > installed[0] ||
-          (latest[0] === installed[0] && latest[1] > installed[1]) ||
-          (latest[0] === installed[0] && latest[1] === installed[1] && latest[2] > installed[2])) {
+      if (
+        latest[0] > installed[0] ||
+        (latest[0] === installed[0] && latest[1] > installed[1]) ||
+        (latest[0] === installed[0] && latest[1] === installed[1] && latest[2] > installed[2])
+      ) {
         log('\n🔄 Update available! Run: npx agileflow update', c.yellow);
       }
     }
@@ -1227,9 +1396,10 @@ ${c.cyan}Feature Control:${c.reset}
   --enable=<list>     Enable features (comma-separated)
   --disable=<list>    Disable features (comma-separated)
 
-  Features: sessionstart, precompact, ralphloop, selfimprove, archival, statusline
+  Features: sessionstart, precompact, ralphloop, selfimprove, archival, statusline, damagecontrol
 
   Stop hooks (ralphloop, selfimprove) run when Claude completes/pauses
+  Damage control (damagecontrol) uses PreToolUse hooks to block dangerous commands
 
 ${c.cyan}Statusline Components:${c.reset}
   --show=<list>       Show statusline components (comma-separated)
@@ -1292,6 +1462,9 @@ ${c.cyan}Examples:${c.reset}
 
   # Repair scripts for a specific feature
   node .agileflow/scripts/agileflow-configure.js --repair=statusline
+
+  # Enable damage control (PreToolUse hooks to block dangerous commands)
+  node .agileflow/scripts/agileflow-configure.js --enable=damagecontrol
 `);
 }
 
@@ -1351,8 +1524,7 @@ function main() {
     else if (arg.startsWith('--repair=')) {
       repair = true;
       repairFeature = arg.split('=')[1].trim().toLowerCase();
-    }
-    else if (arg === '--version' || arg === '-v') showVersion = true;
+    } else if (arg === '--version' || arg === '-v') showVersion = true;
     else if (arg === '--list-scripts' || arg === '--scripts') listScriptsMode = true;
   });