claude-flow-novice 2.0.3 → 2.0.4

package/dist/src/utils/timezone-utils.js

@@ -1,134 +1,115 @@
 /**
  * Timezone utilities for Claude Flow
  * Provides consistent timezone handling across the application
- */
-
-/**
+ */ /**
  * Get current timestamp in user's local timezone
  * @returns {string} Formatted timestamp in local timezone
- */
-export function getLocalTimestamp() {
-  const now = new Date();
-  return now.toLocaleString(undefined, {
-    year: 'numeric',
-    month: '2-digit',
-    day: '2-digit',
-    hour: '2-digit',
-    minute: '2-digit',
-    second: '2-digit',
-    timeZoneName: 'short',
-  });
+ */ export function getLocalTimestamp() {
+    const now = new Date();
+    return now.toLocaleString(undefined, {
+        year: 'numeric',
+        month: '2-digit',
+        day: '2-digit',
+        hour: '2-digit',
+        minute: '2-digit',
+        second: '2-digit',
+        timeZoneName: 'short'
+    });
 }
-
 /**
  * Get current timestamp in ISO format but with timezone offset
  * @returns {string} ISO timestamp with timezone
- */
-export function getLocalISOTimestamp() {
-  const now = new Date();
-  const timezoneOffset = -now.getTimezoneOffset();
-  const offsetHours = Math.floor(Math.abs(timezoneOffset) / 60);
-  const offsetMinutes = Math.abs(timezoneOffset) % 60;
-  const offsetSign = timezoneOffset >= 0 ? '+' : '-';
-
-  const year = now.getFullYear();
-  const month = String(now.getMonth() + 1).padStart(2, '0');
-  const day = String(now.getDate()).padStart(2, '0');
-  const hours = String(now.getHours()).padStart(2, '0');
-  const minutes = String(now.getMinutes()).padStart(2, '0');
-  const seconds = String(now.getSeconds()).padStart(2, '0');
-
-  const offsetHoursStr = String(offsetHours).padStart(2, '0');
-  const offsetMinutesStr = String(offsetMinutes).padStart(2, '0');
-
-  return `${year}-${month}-${day}T${hours}:${minutes}:${seconds}${offsetSign}${offsetHoursStr}:${offsetMinutesStr}`;
+ */ export function getLocalISOTimestamp() {
+    const now = new Date();
+    const timezoneOffset = -now.getTimezoneOffset();
+    const offsetHours = Math.floor(Math.abs(timezoneOffset) / 60);
+    const offsetMinutes = Math.abs(timezoneOffset) % 60;
+    const offsetSign = timezoneOffset >= 0 ? '+' : '-';
+    const year = now.getFullYear();
+    const month = String(now.getMonth() + 1).padStart(2, '0');
+    const day = String(now.getDate()).padStart(2, '0');
+    const hours = String(now.getHours()).padStart(2, '0');
+    const minutes = String(now.getMinutes()).padStart(2, '0');
+    const seconds = String(now.getSeconds()).padStart(2, '0');
+    const offsetHoursStr = String(offsetHours).padStart(2, '0');
+    const offsetMinutesStr = String(offsetMinutes).padStart(2, '0');
+    return `${year}-${month}-${day}T${hours}:${minutes}:${seconds}${offsetSign}${offsetHoursStr}:${offsetMinutesStr}`;
 }
-
 /**
  * Convert UTC timestamp to local time display
  * @param {string|Date} timestamp - UTC timestamp
  * @returns {string} Formatted local timestamp
- */
-export function convertToLocalTime(timestamp) {
-  const date = typeof timestamp === 'string' ? new Date(timestamp) : timestamp;
-
-  if (isNaN(date.getTime())) {
-    return 'Invalid Date';
-  }
-
-  return date.toLocaleString(undefined, {
-    year: 'numeric',
-    month: '2-digit',
-    day: '2-digit',
-    hour: '2-digit',
-    minute: '2-digit',
-    second: '2-digit',
-    timeZoneName: 'short',
-  });
+ */ export function convertToLocalTime(timestamp) {
+    const date = typeof timestamp === 'string' ? new Date(timestamp) : timestamp;
+    if (isNaN(date.getTime())) {
+        return 'Invalid Date';
+    }
+    return date.toLocaleString(undefined, {
+        year: 'numeric',
+        month: '2-digit',
+        day: '2-digit',
+        hour: '2-digit',
+        minute: '2-digit',
+        second: '2-digit',
+        timeZoneName: 'short'
+    });
 }
-
 /**
  * Get relative time description (e.g., "2 hours ago")
  * @param {string|Date} timestamp - Timestamp to compare
  * @returns {string} Relative time description
- */
-export function getRelativeTime(timestamp) {
-  const date = typeof timestamp === 'string' ? new Date(timestamp) : timestamp;
-  const now = new Date();
-  const diffMs = now.getTime() - date.getTime();
-
-  if (isNaN(date.getTime())) {
-    return 'Invalid Date';
-  }
-
-  const diffSeconds = Math.floor(diffMs / 1000);
-  const diffMinutes = Math.floor(diffSeconds / 60);
-  const diffHours = Math.floor(diffMinutes / 60);
-  const diffDays = Math.floor(diffHours / 24);
-
-  if (diffSeconds < 60) {
-    return 'just now';
-  } else if (diffMinutes < 60) {
-    return `${diffMinutes} minute${diffMinutes === 1 ? '' : 's'} ago`;
-  } else if (diffHours < 24) {
-    return `${diffHours} hour${diffHours === 1 ? '' : 's'} ago`;
-  } else if (diffDays < 7) {
-    return `${diffDays} day${diffDays === 1 ? '' : 's'} ago`;
-  } else {
-    return date.toLocaleDateString();
-  }
+ */ export function getRelativeTime(timestamp) {
+    const date = typeof timestamp === 'string' ? new Date(timestamp) : timestamp;
+    const now = new Date();
+    const diffMs = now.getTime() - date.getTime();
+    if (isNaN(date.getTime())) {
+        return 'Invalid Date';
+    }
+    const diffSeconds = Math.floor(diffMs / 1000);
+    const diffMinutes = Math.floor(diffSeconds / 60);
+    const diffHours = Math.floor(diffMinutes / 60);
+    const diffDays = Math.floor(diffHours / 24);
+    if (diffSeconds < 60) {
+        return 'just now';
+    } else if (diffMinutes < 60) {
+        return `${diffMinutes} minute${diffMinutes === 1 ? '' : 's'} ago`;
+    } else if (diffHours < 24) {
+        return `${diffHours} hour${diffHours === 1 ? '' : 's'} ago`;
+    } else if (diffDays < 7) {
+        return `${diffDays} day${diffDays === 1 ? '' : 's'} ago`;
+    } else {
+        return date.toLocaleDateString();
+    }
 }
-
 /**
  * Format timestamp for display with both absolute and relative time
  * @param {string|Date} timestamp - Timestamp to format
  * @returns {object} Object with formatted times
- */
-export function formatTimestampForDisplay(timestamp) {
-  const localTime = convertToLocalTime(timestamp);
-  const relativeTime = getRelativeTime(timestamp);
-
-  return {
-    absolute: localTime,
-    relative: relativeTime,
-    display: `${localTime} (${relativeTime})`,
-  };
+ */ export function formatTimestampForDisplay(timestamp) {
+    const localTime = convertToLocalTime(timestamp);
+    const relativeTime = getRelativeTime(timestamp);
+    return {
+        absolute: localTime,
+        relative: relativeTime,
+        display: `${localTime} (${relativeTime})`
+    };
 }
-
 /**
  * Get user's timezone information
  * @returns {object} Timezone information
- */
-export function getTimezoneInfo() {
-  const date = new Date();
-  const formatter = new Intl.DateTimeFormat(undefined, { timeZoneName: 'long' });
-  const parts = formatter.formatToParts(date);
-  const timeZoneName = parts.find((part) => part.type === 'timeZoneName')?.value;
-
-  return {
-    name: timeZoneName || 'Unknown',
-    abbreviation: date.toLocaleString(undefined, { timeZoneName: 'short' }).split(' ').pop(),
-    offset: -date.getTimezoneOffset() / 60,
-    offsetString: date.toTimeString().split(' ')[1],
-  };
+ */ export function getTimezoneInfo() {
+    const date = new Date();
+    const formatter = new Intl.DateTimeFormat(undefined, {
+        timeZoneName: 'long'
+    });
+    const parts = formatter.formatToParts(date);
+    const timeZoneName = parts.find((part)=>part.type === 'timeZoneName')?.value;
+    return {
+        name: timeZoneName || 'Unknown',
+        abbreviation: date.toLocaleString(undefined, {
+            timeZoneName: 'short'
+        }).split(' ').pop(),
+        offset: -date.getTimezoneOffset() / 60,
+        offsetString: date.toTimeString().split(' ')[1]
+    };
 }

package/dist/src/validators/epic-config-schema.js

@@ -0,0 +1,214 @@
+import Ajv from "ajv";
+import addFormats from "ajv-formats";
+const ajv = new Ajv({
+    allErrors: true,
+    strict: false
+});
+addFormats(ajv);
+// JSON schema for sprint configuration
+const sprintSchema = {
+    type: 'object',
+    required: [
+        'sprintId',
+        'name',
+        'description',
+        'taskType'
+    ],
+    properties: {
+        sprintId: {
+            type: 'string',
+            pattern: '^[a-zA-Z0-9\\-_]{1,50}$',
+            minLength: 1,
+            maxLength: 50
+        },
+        name: {
+            type: 'string',
+            minLength: 1,
+            maxLength: 200
+        },
+        description: {
+            type: 'string',
+            minLength: 1,
+            maxLength: 5000
+        },
+        taskType: {
+            type: 'string',
+            enum: [
+                'implementation',
+                'testing',
+                'documentation',
+                'refactoring',
+                'security',
+                'performance',
+                'research',
+                'deployment'
+            ]
+        },
+        maxIterations: {
+            type: 'integer',
+            minimum: 1,
+            maximum: 100,
+            nullable: true
+        },
+        dependencies: {
+            type: 'array',
+            items: {
+                type: 'string',
+                pattern: '^[a-zA-Z0-9\\-_]{1,50}$'
+            },
+            maxItems: 20,
+            nullable: true
+        }
+    },
+    additionalProperties: false
+};
+// JSON schema for phase configuration
+const phaseSchema = {
+    type: 'object',
+    required: [
+        'phaseId',
+        'name',
+        'file'
+    ],
+    properties: {
+        phaseId: {
+            type: 'string',
+            pattern: '^[a-zA-Z0-9\\-_]{1,50}$',
+            minLength: 1,
+            maxLength: 50
+        },
+        name: {
+            type: 'string',
+            minLength: 1,
+            maxLength: 200
+        },
+        file: {
+            type: 'string',
+            minLength: 1,
+            maxLength: 500,
+            pattern: '^[^<>:"|?*\\x00-\\x1F]+$'
+        },
+        description: {
+            type: 'string',
+            minLength: 1,
+            maxLength: 5000,
+            nullable: true
+        },
+        sprints: {
+            type: 'array',
+            items: sprintSchema,
+            maxItems: 100,
+            nullable: true
+        },
+        dependencies: {
+            type: 'array',
+            items: {
+                type: 'string',
+                pattern: '^[a-zA-Z0-9\\-_]{1,50}$'
+            },
+            maxItems: 20,
+            nullable: true
+        }
+    },
+    additionalProperties: false
+};
+// JSON schema for epic configuration
+export const epicConfigSchema = {
+    type: 'object',
+    required: [
+        'epicId',
+        'name',
+        'phases'
+    ],
+    properties: {
+        epicId: {
+            type: 'string',
+            pattern: '^[a-zA-Z0-9\\-_]{1,50}$',
+            minLength: 1,
+            maxLength: 50
+        },
+        name: {
+            type: 'string',
+            minLength: 1,
+            maxLength: 200
+        },
+        description: {
+            type: 'string',
+            minLength: 1,
+            maxLength: 10000,
+            nullable: true
+        },
+        phases: {
+            type: 'array',
+            items: phaseSchema,
+            minItems: 1,
+            maxItems: 50
+        },
+        metadata: {
+            type: 'object',
+            properties: {
+                createdAt: {
+                    type: 'string',
+                    format: 'date-time',
+                    nullable: true
+                },
+                author: {
+                    type: 'string',
+                    maxLength: 100,
+                    nullable: true
+                },
+                version: {
+                    type: 'string',
+                    pattern: '^\\d+\\.\\d+\\.\\d+$',
+                    nullable: true
+                }
+            },
+            nullable: true,
+            additionalProperties: false
+        }
+    },
+    additionalProperties: false
+};
+// Compiled validators
+export const validateEpicConfig = ajv.compile(epicConfigSchema);
+export const validatePhaseConfig = ajv.compile(phaseSchema);
+export const validateSprintConfig = ajv.compile(sprintSchema);
+/**
+ * Validates epic configuration with detailed error reporting
+ * @throws Error with validation details if invalid
+ */ export function validateAndThrow(config, validator) {
+    if (!validator(config)) {
+        const errors = validator.errors?.map((err)=>{
+            const path = err.instancePath || 'root';
+            return `  - ${path}: ${err.message}`;
+        }).join('\n');
+        throw new Error(`Invalid configuration:\n${errors}\n\n` + `This helps prevent:\n` + `  - CVE-2025-005: Malformed JSON injection\n` + `  - Prototype pollution attacks\n` + `  - Path traversal vulnerabilities`);
+    }
+}
+/**
+ * Sanitize object keys to prevent prototype pollution
+ */ export function sanitizeObjectKeys(obj) {
+    if (obj === null || typeof obj !== 'object') {
+        return obj;
+    }
+    if (Array.isArray(obj)) {
+        return obj.map(sanitizeObjectKeys);
+    }
+    const sanitized = {};
+    const dangerousKeys = [
+        '__proto__',
+        'constructor',
+        'prototype'
+    ];
+    for (const key of Object.keys(obj)){
+        // Skip dangerous keys
+        if (dangerousKeys.includes(key)) {
+            console.warn(`[SECURITY] Blocked dangerous key: ${key}`);
+            continue;
+        }
+        sanitized[key] = sanitizeObjectKeys(obj[key]);
+    }
+    // Explicitly set __proto__ to null to prevent prototype pollution
+    Object.setPrototypeOf(sanitized, null);
+    return sanitized;
+}

package/dist/src/validators/index.js

@@ -0,0 +1,10 @@
+/**
+ * Validators Module
+ *
+ * Provides validation functionality for enforcing best practices and detecting anti-patterns.
+ *
+ * @module validators
+ */ // TodoWrite Batching Validator
+export { TodoWriteValidator, getGlobalValidator, resetGlobalValidator } from "./todowrite-batching-validator";
+// TodoWrite Integration
+export { isValidationEnabled, getIntegrationConfig, validateTodoWrite, parseValidationFlags, displayValidationHelp, todoWriteWithValidation, createValidationMiddleware, getValidationStatus } from "./todowrite-integration";