claude-flow-novice 2.15.0 → 2.15.1

package/dist/utils/secret-filter.js

@@ -0,0 +1,145 @@
+/**
+ * Secret Filter Utility
+ * Redacts sensitive information from logs and output strings
+ * Prevents accidental secret exposure in console output and log files
+ */ /**
+ * Sensitive pattern matchers that should be redacted
+ * Patterns are designed to avoid false positives while catching common secret formats
+ */ const SECRET_PATTERNS = [
+    // API Keys and Tokens
+    {
+        name: 'ANTHROPIC_API_KEY',
+        pattern: /(ANTHROPIC_API_KEY)[\s:=]+([^\s\n"']+)/gi
+    },
+    {
+        name: 'CFN_API_KEY',
+        pattern: /(CFN_API_KEY)[\s:=]+([^\s\n"']+)/gi
+    },
+    {
+        name: 'GITHUB_TOKEN',
+        pattern: /(github_token|GITHUB_TOKEN)[\s:=]+([^\s\n"']+)/gi
+    },
+    {
+        name: 'OpenAI_API_KEY',
+        pattern: /(OPENAI_API_KEY)[\s:=]+([^\s\n"']+)/gi
+    },
+    // Database Passwords and Redis Auth
+    {
+        name: 'REDIS_PASSWORD',
+        pattern: /(CFN_REDIS_PASSWORD|REDIS_PASSWORD)[\s:=]+([^\s\n"']+)/gi
+    },
+    {
+        name: 'DATABASE_PASSWORD',
+        pattern: /(password)[\s:=]+([^\s\n"']+)/gi
+    },
+    // Bearer Tokens
+    {
+        name: 'BEARER_TOKEN',
+        pattern: /(Bearer|bearer)\s+([A-Za-z0-9._\-]+)/g
+    },
+    // SSH Keys (partial - full keys are multi-line)
+    {
+        name: 'SSH_KEY_EXPORT',
+        pattern: /(ssh-rsa|ssh-ed25519|-----BEGIN)\s+([^\s\n]+)/g
+    },
+    // AWS/Cloud Credentials
+    {
+        name: 'AWS_ACCESS_KEY',
+        pattern: /(AKIA[0-9A-Z]{16})/g
+    },
+    // Basic Auth
+    {
+        name: 'BASIC_AUTH',
+        pattern: /([A-Za-z0-9_-]+:[A-Za-z0-9_-]+)@/g
+    }
+];
+/**
+ * Redacts sensitive information from text
+ * @param text The text that may contain sensitive information
+ * @param strict If true, uses aggressive redaction (default: false)
+ * @returns The text with sensitive information redacted
+ */ export function filterSecrets(text, strict = false) {
+    if (!text || typeof text !== 'string') {
+        return text;
+    }
+    let filtered = text;
+    for (const { name, pattern } of SECRET_PATTERNS){
+        if (pattern.test(filtered)) {
+            filtered = filtered.replace(pattern, (match)=>{
+                // Try to preserve structure for debugging
+                const parts = match.split(/[\s:=]+/);
+                if (parts.length >= 2) {
+                    // Return "KEY=***REDACTED***" format
+                    return `${parts[0]}=***${name}_REDACTED***`;
+                }
+                return `***${name}_REDACTED***`;
+            });
+        }
+    }
+    return filtered;
+}
+/**
+ * Redacts secrets from an object (typically config or env vars)
+ * @param obj The object to redact
+ * @returns A new object with secrets redacted
+ */ export function filterSecretsFromObject(obj) {
+    const redacted = {};
+    for (const [key, value] of Object.entries(obj)){
+        if (typeof value === 'string') {
+            // Check if key itself indicates a secret
+            const isSensitiveKey = /secret|password|key|token|auth|credential|api/i.test(key);
+            if (isSensitiveKey) {
+                redacted[key] = '***REDACTED***';
+            } else {
+                // Still filter the value for embedded secrets
+                redacted[key] = filterSecrets(value);
+            }
+        } else if (value && typeof value === 'object' && !Array.isArray(value)) {
+            // Recursively filter nested objects
+            redacted[key] = filterSecretsFromObject(value);
+        } else if (Array.isArray(value)) {
+            // Filter array elements that are strings
+            redacted[key] = value.map((item)=>typeof item === 'string' ? filterSecrets(item) : item);
+        } else {
+            redacted[key] = value;
+        }
+    }
+    return redacted;
+}
+/**
+ * Creates a safe JSON string from an object with secrets redacted
+ * @param obj The object to stringify
+ * @param space Optional spacing for pretty-printing
+ * @returns JSON string with secrets redacted
+ */ export function safeStringify(obj, space) {
+    const redacted = filterSecretsFromObject(obj);
+    return JSON.stringify(redacted, null, space);
+}
+/**
+ * Creates a wrapped console.log that automatically redacts secrets
+ * @returns A safe logging function
+ */ export function createSafeLogger(prefix = '') {
+    return (...args)=>{
+        const filteredArgs = args.map((arg)=>{
+            if (typeof arg === 'string') {
+                return filterSecrets(arg);
+            } else if (typeof arg === 'object' && arg !== null) {
+                return filterSecretsFromObject(arg);
+            }
+            return arg;
+        });
+        if (prefix) {
+            console.log(`[${prefix}]`, ...filteredArgs);
+        } else {
+            console.log(...filteredArgs);
+        }
+    };
+}
+export default {
+    filterSecrets,
+    filterSecretsFromObject,
+    safeStringify,
+    createSafeLogger
+};
+
+//# sourceMappingURL=secret-filter.js.map

package/dist/utils/secret-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utils/secret-filter.ts"],"sourcesContent":["/**\r\n * Secret Filter Utility\r\n * Redacts sensitive information from logs and output strings\r\n * Prevents accidental secret exposure in console output and log files\r\n */\r\n\r\n/**\r\n * Sensitive pattern matchers that should be redacted\r\n * Patterns are designed to avoid false positives while catching common secret formats\r\n */\r\nconst SECRET_PATTERNS: Array<{\r\n  name: string;\r\n  pattern: RegExp;\r\n}> = [\r\n  // API Keys and Tokens\r\n  {\r\n    name: 'ANTHROPIC_API_KEY',\r\n    pattern: /(ANTHROPIC_API_KEY)[\\s:=]+([^\\s\\n\"']+)/gi\r\n  },\r\n  {\r\n    name: 'CFN_API_KEY',\r\n    pattern: /(CFN_API_KEY)[\\s:=]+([^\\s\\n\"']+)/gi\r\n  },\r\n  {\r\n    name: 'GITHUB_TOKEN',\r\n    pattern: /(github_token|GITHUB_TOKEN)[\\s:=]+([^\\s\\n\"']+)/gi\r\n  },\r\n  {\r\n    name: 'OpenAI_API_KEY',\r\n    pattern: /(OPENAI_API_KEY)[\\s:=]+([^\\s\\n\"']+)/gi\r\n  },\r\n  // Database Passwords and Redis Auth\r\n  {\r\n    name: 'REDIS_PASSWORD',\r\n    pattern: /(CFN_REDIS_PASSWORD|REDIS_PASSWORD)[\\s:=]+([^\\s\\n\"']+)/gi\r\n  },\r\n  {\r\n    name: 'DATABASE_PASSWORD',\r\n    pattern: /(password)[\\s:=]+([^\\s\\n\"']+)/gi\r\n  },\r\n  // Bearer Tokens\r\n  {\r\n    name: 'BEARER_TOKEN',\r\n    pattern: /(Bearer|bearer)\\s+([A-Za-z0-9._\\-]+)/g\r\n  },\r\n  // SSH Keys (partial - full keys are multi-line)\r\n  {\r\n    name: 'SSH_KEY_EXPORT',\r\n    pattern: /(ssh-rsa|ssh-ed25519|-----BEGIN)\\s+([^\\s\\n]+)/g\r\n  },\r\n  // AWS/Cloud Credentials\r\n  {\r\n    name: 'AWS_ACCESS_KEY',\r\n    pattern: /(AKIA[0-9A-Z]{16})/g\r\n  },\r\n  // Basic Auth\r\n  {\r\n    name: 'BASIC_AUTH',\r\n    pattern: /([A-Za-z0-9_-]+:[A-Za-z0-9_-]+)@/g\r\n  }\r\n];\r\n\r\n/**\r\n * Redacts sensitive information from text\r\n * @param text The text that may contain sensitive information\r\n * @param strict If true, uses aggressive redaction (default: false)\r\n * @returns The text with sensitive information redacted\r\n */\r\nexport function filterSecrets(text: string, strict: boolean = false): string {\r\n  if (!text || typeof text !== 'string') {\r\n    return text;\r\n  }\r\n\r\n  let filtered = text;\r\n\r\n  for (const { name, pattern } of SECRET_PATTERNS) {\r\n    if (pattern.test(filtered)) {\r\n      filtered = filtered.replace(pattern, (match) => {\r\n        // Try to preserve structure for debugging\r\n        const parts = match.split(/[\\s:=]+/);\r\n        if (parts.length >= 2) {\r\n          // Return \"KEY=***REDACTED***\" format\r\n          return `${parts[0]}=***${name}_REDACTED***`;\r\n        }\r\n        return `***${name}_REDACTED***`;\r\n      });\r\n    }\r\n  }\r\n\r\n  return filtered;\r\n}\r\n\r\n/**\r\n * Redacts secrets from an object (typically config or env vars)\r\n * @param obj The object to redact\r\n * @returns A new object with secrets redacted\r\n */\r\nexport function filterSecretsFromObject(\r\n  obj: Record<string, any>\r\n): Record<string, any> {\r\n  const redacted: Record<string, any> = {};\r\n\r\n  for (const [key, value] of Object.entries(obj)) {\r\n    if (typeof value === 'string') {\r\n      // Check if key itself indicates a secret\r\n      const isSensitiveKey = /secret|password|key|token|auth|credential|api/i.test(key);\r\n      if (isSensitiveKey) {\r\n        redacted[key] = '***REDACTED***';\r\n      } else {\r\n        // Still filter the value for embedded secrets\r\n        redacted[key] = filterSecrets(value);\r\n      }\r\n    } else if (value && typeof value === 'object' && !Array.isArray(value)) {\r\n      // Recursively filter nested objects\r\n      redacted[key] = filterSecretsFromObject(value as Record<string, any>);\r\n    } else if (Array.isArray(value)) {\r\n      // Filter array elements that are strings\r\n      redacted[key] = value.map(item =>\r\n        typeof item === 'string' ? filterSecrets(item) : item\r\n      );\r\n    } else {\r\n      redacted[key] = value;\r\n    }\r\n  }\r\n\r\n  return redacted;\r\n}\r\n\r\n/**\r\n * Creates a safe JSON string from an object with secrets redacted\r\n * @param obj The object to stringify\r\n * @param space Optional spacing for pretty-printing\r\n * @returns JSON string with secrets redacted\r\n */\r\nexport function safeStringify(\r\n  obj: any,\r\n  space?: string | number\r\n): string {\r\n  const redacted = filterSecretsFromObject(obj);\r\n  return JSON.stringify(redacted, null, space);\r\n}\r\n\r\n/**\r\n * Creates a wrapped console.log that automatically redacts secrets\r\n * @returns A safe logging function\r\n */\r\nexport function createSafeLogger(prefix: string = '') {\r\n  return (...args: any[]) => {\r\n    const filteredArgs = args.map(arg => {\r\n      if (typeof arg === 'string') {\r\n        return filterSecrets(arg);\r\n      } else if (typeof arg === 'object' && arg !== null) {\r\n        return filterSecretsFromObject(arg);\r\n      }\r\n      return arg;\r\n    });\r\n\r\n    if (prefix) {\r\n      console.log(`[${prefix}]`, ...filteredArgs);\r\n    } else {\r\n      console.log(...filteredArgs);\r\n    }\r\n  };\r\n}\r\n\r\nexport default {\r\n  filterSecrets,\r\n  filterSecretsFromObject,\r\n  safeStringify,\r\n  createSafeLogger\r\n};\r\n"],"names":["SECRET_PATTERNS","name","pattern","filterSecrets","text","strict","filtered","test","replace","match","parts","split","length","filterSecretsFromObject","obj","redacted","key","value","Object","entries","isSensitiveKey","Array","isArray","map","item","safeStringify","space","JSON","stringify","createSafeLogger","prefix","args","filteredArgs","arg","console","log"],"mappings":"AAAA;;;;CAIC,GAED;;;CAGC,GACD,MAAMA,kBAGD;IACH,sBAAsB;IACtB;QACEC,MAAM;QACNC,SAAS;IACX;IACA;QACED,MAAM;QACNC,SAAS;IACX;IACA;QACED,MAAM;QACNC,SAAS;IACX;IACA;QACED,MAAM;QACNC,SAAS;IACX;IACA,oCAAoC;IACpC;QACED,MAAM;QACNC,SAAS;IACX;IACA;QACED,MAAM;QACNC,SAAS;IACX;IACA,gBAAgB;IAChB;QACED,MAAM;QACNC,SAAS;IACX;IACA,gDAAgD;IAChD;QACED,MAAM;QACNC,SAAS;IACX;IACA,wBAAwB;IACxB;QACED,MAAM;QACNC,SAAS;IACX;IACA,aAAa;IACb;QACED,MAAM;QACNC,SAAS;IACX;CACD;AAED;;;;;CAKC,GACD,OAAO,SAASC,cAAcC,IAAY,EAAEC,SAAkB,KAAK;IACjE,IAAI,CAACD,QAAQ,OAAOA,SAAS,UAAU;QACrC,OAAOA;IACT;IAEA,IAAIE,WAAWF;IAEf,KAAK,MAAM,EAAEH,IAAI,EAAEC,OAAO,EAAE,IAAIF,gBAAiB;QAC/C,IAAIE,QAAQK,IAAI,CAACD,WAAW;YAC1BA,WAAWA,SAASE,OAAO,CAACN,SAAS,CAACO;gBACpC,0CAA0C;gBAC1C,MAAMC,QAAQD,MAAME,KAAK,CAAC;gBAC1B,IAAID,MAAME,MAAM,IAAI,GAAG;oBACrB,qCAAqC;oBACrC,OAAO,GAAGF,KAAK,CAAC,EAAE,CAAC,IAAI,EAAET,KAAK,YAAY,CAAC;gBAC7C;gBACA,OAAO,CAAC,GAAG,EAAEA,KAAK,YAAY,CAAC;YACjC;QACF;IACF;IAEA,OAAOK;AACT;AAEA;;;;CAIC,GACD,OAAO,SAASO,wBACdC,GAAwB;IAExB,MAAMC,WAAgC,CAAC;IAEvC,KAAK,MAAM,CAACC,KAAKC,MAAM,IAAIC,OAAOC,OAAO,CAACL,KAAM;QAC9C,IAAI,OAAOG,UAAU,UAAU;YAC7B,yCAAyC;YACzC,MAAMG,iBAAiB,iDAAiDb,IAAI,CAACS;YAC7E,IAAII,gBAAgB;gBAClBL,QAAQ,CAACC,IAAI,GAAG;YAClB,OAAO;gBACL,8CAA8C;gBAC9CD,QAAQ,CAACC,IAAI,GAAGb,cAAcc;YAChC;QACF,OAAO,IAAIA,SAAS,OAAOA,UAAU,YAAY,CAACI,MAAMC,OAAO,CAACL,QAAQ;YACtE,oCAAoC;YACpCF,QAAQ,CAACC,IAAI,GAAGH,wBAAwBI;QAC1C,OAAO,IAAII,MAAMC,OAAO,CAACL,QAAQ;YAC/B,yCAAyC;YACzCF,QAAQ,CAACC,IAAI,GAAGC,MAAMM,GAAG,CAACC,CAAAA,OACxB,OAAOA,SAAS,WAAWrB,cAAcqB,QAAQA;QAErD,OAAO;YACLT,QAAQ,CAACC,IAAI,GAAGC;QAClB;IACF;IAEA,OAAOF;AACT;AAEA;;;;;CAKC,GACD,OAAO,SAASU,cACdX,GAAQ,EACRY,KAAuB;IAEvB,MAAMX,WAAWF,wBAAwBC;IACzC,OAAOa,KAAKC,SAAS,CAACb,UAAU,MAAMW;AACxC;AAEA;;;CAGC,GACD,OAAO,SAASG,iBAAiBC,SAAiB,EAAE;IAClD,OAAO,CAAC,GAAGC;QACT,MAAMC,eAAeD,KAAKR,GAAG,CAACU,CAAAA;YAC5B,IAAI,OAAOA,QAAQ,UAAU;gBAC3B,OAAO9B,cAAc8B;YACvB,OAAO,IAAI,OAAOA,QAAQ,YAAYA,QAAQ,MAAM;gBAClD,OAAOpB,wBAAwBoB;YACjC;YACA,OAAOA;QACT;QAEA,IAAIH,QAAQ;YACVI,QAAQC,GAAG,CAAC,CAAC,CAAC,EAAEL,OAAO,CAAC,CAAC,KAAKE;QAChC,OAAO;YACLE,QAAQC,GAAG,IAAIH;QACjB;IACF;AACF;AAEA,eAAe;IACb7B;IACAU;IACAY;IACAI;AACF,EAAE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-flow-novice",
-  "version": "2.15.0",
+  "version": "2.15.1",
   "description": "AI agent orchestration framework with namespace-isolated skills, agents, and CFN Loop validation. Safe installation with ~0.01% collision risk.",
   "main": "dist/index.js",
   "type": "module",
@@ -50,7 +50,7 @@
     ".claude/hooks/cfn-*",
     ".claude/commands/",
     ".claude/cfn-data/",
-    ".claude/cfn-agents-ignore/",
+    ".claude/cfn-extras/",
     "scripts/init-project.js",
     "scripts/*.sh",
     "!scripts/test-*.sh",
@@ -105,7 +105,7 @@
     "typecheck": "tsc --noEmit",
     "prepublishOnly": "npm run build && ./scripts/verify-no-secrets.sh",
     "prepack": "npm run build && npm run copy-claude-assets",
-    "copy-claude-assets": "rm -rf claude-assets && mkdir -p claude-assets && cp -r .claude/agents claude-assets/ && cp -r .claude/skills claude-assets/ && cp -r .claude/hooks claude-assets/ && cp -r .claude/commands claude-assets/ && cp -r .claude/cfn-agents-ignore claude-assets/ && cp -r .claude/root-claude-distribute claude-assets/",
+    "copy-claude-assets": "rm -rf claude-assets && mkdir -p claude-assets && cp -r .claude/agents claude-assets/ && cp -r .claude/skills claude-assets/ && cp -r .claude/hooks claude-assets/ && cp -r .claude/commands claude-assets/ && cp -r .claude/cfn-extras claude-assets/ && cp -r .claude/root-claude-distribute claude-assets/",
     "postinstall": "node scripts/init-project.js",
     "verify-package": "npm pack --dry-run",
     "portal:start": "./scripts/start-portal.sh",
@@ -121,8 +121,9 @@
     "docker:status": "docker-compose -f docker-compose.production.yml ps",
     "docker:test": "node tests/docker/production-deployment-test.js",
     "docker:orchestrator": "node tests/docker/production-agent-orchestrator.js",
+    "docker:env-sync": "tsx scripts/generate-cfn-runtime-env.ts",
     "test:docker:redis-coordination": "node tests/docker/cfn-coordination-test.js",
-    "test:docker:concurrent": "node tests/hello-world-docker/concurrent-agent-test.js",
+    "test:docker:concurrent": "node tests/hello-world/concurrent-agent-test.js",
     "test:docker:container": "bash tests/docker/container-test-runner.sh"
   },
   "dependencies": {

package/scripts/docker-agent-init.sh

@@ -0,0 +1,106 @@
+#!/bin/bash
+# Docker Agent Initialization Script
+# Handles Redis coordination data writing for containerized agents
+set -euo pipefail
+
+# Configuration from environment variables - uses CFN standard with fallback to legacy variables
+REDIS_HOST="${CFN_REDIS_HOST:-${REDIS_HOST:-cfn-redis}}"
+REDIS_PORT="${CFN_REDIS_PORT:-${REDIS_PORT:-6379}}"
+TASK_ID="${CFN_TASK_ID:-${TASK_ID:-unknown}}"
+AGENT_ID="${CFN_AGENT_ID:-${AGENT_ID:-docker-$(date +%s)-$$}}"
+AGENT_TYPE="${CFN_AGENT_TYPE:-${AGENT_TYPE:-unknown}}"
+
+# Coordination key patterns
+SIGNAL_KEY="swarm:${TASK_ID}:${AGENT_ID}:signal"
+COMPLETION_KEY="swarm:${TASK_ID}:${AGENT_ID}:done"
+
+# Function to write signal key
+write_signal() {
+    local signal="$1"
+    redis-cli -h "$REDIS_HOST" -p "$REDIS_PORT" SET "$SIGNAL_KEY" "$signal" EX 3600 >/dev/null 2>&1 || {
+        echo "Warning: Failed to write signal key to Redis"
+        return 1
+    }
+}
+
+# Function to write completion data
+write_completion() {
+    local status="$1"
+    local message="${2:-}"
+    local confidence="${3:-0.85}"
+
+    redis-cli -h "$REDIS_HOST" -p "$REDIS_PORT" \
+        HSET "$COMPLETION_KEY" \
+        "status" "$status" \
+        "message" "$message" \
+        "timestamp" "$(date -Iseconds)" \
+        "confidence" "$confidence" \
+        "agent_id" "$AGENT_ID" \
+        "agent_type" "$AGENT_TYPE" >/dev/null 2>&1 || {
+        echo "Warning: Failed to write completion data to Redis"
+        return 1
+    }
+
+    # Set expiration on hash key
+    redis-cli -h "$REDIS_HOST" -p "$REDIS_PORT" EXPIRE "$COMPLETION_KEY" 3600 >/dev/null 2>&1
+}
+
+# Initialize coordination data
+echo "🐳 Docker Agent Initializing"
+echo "Agent ID: $AGENT_ID"
+echo "Agent Type: $AGENT_TYPE"
+echo "Task ID: $TASK_ID"
+echo "Redis: $REDIS_HOST:$REDIS_PORT"
+echo ""
+
+# Write spawn signal
+if write_signal "spawned"; then
+    echo "✅ Coordination signal written to Redis"
+else
+    echo "⚠️  Running without Redis coordination"
+fi
+
+# Export agent metadata for child processes
+export AGENT_ID
+export AGENT_TYPE
+export TASK_ID
+export REDIS_HOST
+export REDIS_PORT
+
+# Function to be called on exit
+cleanup() {
+    local exit_code=$?
+    echo ""
+    echo "🐳 Agent Shutting Down (exit code: $exit_code)"
+
+    if [ $exit_code -eq 0 ]; then
+        write_completion "complete" "Agent finished successfully" "0.90"
+        write_signal "complete"
+    else
+        write_completion "error" "Agent exited with error code $exit_code" "0.50"
+        write_signal "error"
+    fi
+}
+
+trap cleanup EXIT
+
+# Execute the actual agent command
+# The real agent work happens here
+
+# Determine if we need to prepend the node CLI
+# Check if first argument is a known executable command
+FIRST_ARG="${1:-}"
+
+# If no arguments, use default node CLI
+if [ $# -eq 0 ]; then
+    exec node dist/cli/index.js
+# If first arg starts with -, it's a flag - prepend node CLI
+elif [[ "$FIRST_ARG" == -* ]]; then
+    exec node dist/cli/index.js "$@"
+# If first arg is a known shell command/executable, execute as-is
+elif command -v "$FIRST_ARG" >/dev/null 2>&1; then
+    exec "$@"
+# Otherwise, assume it's an agent type or subcommand - prepend node CLI
+else
+    exec node dist/cli/index.js agent "$@"
+fi

package/scripts/docker-rebuild-all-agents.sh

@@ -0,0 +1,127 @@
+#!/bin/bash
+# docker-rebuild-all-agents.sh
+# Rebuild all CFN agent Docker images after Redis connection fixes
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
+
+echo "🐳 Rebuilding All CFN Agent Images with Redis Fix"
+echo "=================================================="
+echo "Project Root: $PROJECT_ROOT"
+echo ""
+
+# Check if Docker is running
+if ! docker info >/dev/null 2>&1; then
+    echo "❌ Docker is not running. Please start Docker first."
+    exit 1
+fi
+
+# Change to project directory
+cd "$PROJECT_ROOT"
+
+# Enable BuildKit for faster builds
+export DOCKER_BUILDKIT=1
+
+BUILD_START=$(date +%s)
+
+# 1. Base agent image (used by all variants)
+echo "📦 [1/4] Building claude-flow-novice-agent:latest"
+echo "   Dockerfile: Dockerfile.agent"
+docker build \
+    --progress=plain \
+    --cache-from claude-flow-novice-agent:latest \
+    -f Dockerfile.agent \
+    -t claude-flow-novice-agent:latest \
+    . || {
+    echo "❌ Failed to build claude-flow-novice-agent:latest"
+    exit 1
+}
+echo "✅ claude-flow-novice-agent:latest built successfully"
+echo ""
+
+# 2. Frontend specialist (for TypeScript coordinator)
+echo "📦 [2/4] Building claude-flow-novice-agent:frontend"
+echo "   Dockerfile: Dockerfile.agent-frontend"
+docker build \
+    --progress=plain \
+    --cache-from claude-flow-novice-agent:frontend \
+    -f Dockerfile.agent-frontend \
+    -t claude-flow-novice-agent:frontend \
+    . || {
+    echo "❌ Failed to build claude-flow-novice-agent:frontend"
+    exit 1
+}
+echo "✅ claude-flow-novice-agent:frontend built successfully"
+echo ""
+
+# 3. Backend specialist (if Dockerfile exists)
+if [ -f "$PROJECT_ROOT/Dockerfile.agent-backend" ]; then
+    echo "📦 [3/4] Building claude-flow-novice-agent:backend"
+    echo "   Dockerfile: Dockerfile.agent-backend"
+    docker build \
+        --progress=plain \
+        --cache-from claude-flow-novice-agent:backend \
+        -f Dockerfile.agent-backend \
+        -t claude-flow-novice-agent:backend \
+        . || {
+        echo "❌ Failed to build claude-flow-novice-agent:backend"
+        exit 1
+    }
+    echo "✅ claude-flow-novice-agent:backend built successfully"
+    echo ""
+else
+    echo "⏭️  [3/4] Skipping claude-flow-novice-agent:backend (Dockerfile not found)"
+    echo ""
+fi
+
+# 4. Intelligent coordinator
+echo "📦 [4/4] Building cfn-intelligent-coordinator:latest"
+echo "   Dockerfile: Dockerfile.coordinator"
+docker build \
+    --progress=plain \
+    --cache-from cfn-intelligent-coordinator:latest \
+    -f Dockerfile.coordinator \
+    -t cfn-intelligent-coordinator:latest \
+    . || {
+    echo "❌ Failed to build cfn-intelligent-coordinator:latest"
+    exit 1
+}
+echo "✅ cfn-intelligent-coordinator:latest built successfully"
+echo ""
+
+BUILD_END=$(date +%s)
+BUILD_TIME=$((BUILD_END - BUILD_START))
+
+# Verify images
+echo "=================================================="
+echo "✅ All Images Built Successfully!"
+echo "=================================================="
+echo ""
+echo "📋 Image Details:"
+docker images --format "table {{.Repository}}\t{{.Tag}}\t{{.Size}}\t{{.CreatedAt}}" | \
+    grep -E "(claude-flow-novice-agent|cfn-intelligent-coordinator)" | \
+    grep -E "(latest|frontend|backend)" | \
+    head -10
+
+echo ""
+echo "⏱️  Build Time: ${BUILD_TIME}s"
+echo ""
+echo "🎯 Next Step: Run validation tests to confirm Redis connection"
+echo "   Command: ./tests/docker/validate-redis-connection.sh"
+echo ""
+echo "📝 Rebuild Report:"
+echo "   - Base agent: claude-flow-novice-agent:latest"
+echo "   - Frontend specialist: claude-flow-novice-agent:frontend"
+echo "   - Backend specialist: claude-flow-novice-agent:backend (if exists)"
+echo "   - Intelligent coordinator: cfn-intelligent-coordinator:latest"
+echo ""
+echo "💾 Image Sizes:"
+TOTAL_SIZE=$(docker images --format "{{.Size}}" | \
+    grep -E "MB|GB" | \
+    awk '{gsub(/MB/, "", $1); gsub(/GB/, "", $1); if ($1 ~ /GB/) print $1*1024; else print $1}' | \
+    awk '{sum+=$1} END {printf "%.0f MB\n", sum}')
+echo "   Total disk usage: $TOTAL_SIZE"
+echo ""
+echo "🚀 Ready for Redis validation and integration testing!"

package/scripts/init-project.js

@@ -61,9 +61,9 @@ const CFN_PATHS = {
     src: path.join(cfnRoot, 'claude-assets/cfn-data'),
     dest: '.claude/cfn-data'
   },
-  cfnAgentsIgnore: {
-    src: path.join(cfnRoot, 'claude-assets/cfn-agents-ignore'),
-    dest: '.claude/cfn-agents-ignore'
+  cfnExtras: {
+    src: path.join(cfnRoot, 'claude-assets/cfn-extras'),
+    dest: '.claude/cfn-extras'
   }
 };
 
@@ -74,7 +74,7 @@ async function ensureDirectories() {
     '.claude/hooks',
     '.claude/commands',
     '.claude/cfn-data',
-    '.claude/cfn-agents-ignore'
+    '.claude/cfn-extras'
   ];
 
   for (const dir of dirs) {

package/scripts/switch-api.sh

@@ -11,12 +11,17 @@
 #   - max:        Main Chat + Task tool use Anthropic (requires re-login)
 #   - CLI:        Respects custom routing when enabled (see agent profiles)
 #
-# Settings file: .claude/settings.json (project local)
+# Settings file: .claude/settings.local.json (preferred) or .claude/settings.json
 ##############################################################################
 
 set -euo pipefail
 
-SETTINGS_FILE=".claude/settings.json"
+# Detect which settings file to use (prefer settings.local.json)
+if [ -f ".claude/settings.local.json" ]; then
+    SETTINGS_FILE=".claude/settings.local.json"
+else
+    SETTINGS_FILE=".claude/settings.json"
+fi
 BACKUP_DIR=".claude/backups"
 
 # Create backup directory
@@ -37,10 +42,12 @@ show_status() {
     echo -e "${BLUE}   Claude API Provider Status${NC}"
     echo -e "${BLUE}═══════════════════════════════════════${NC}"
     echo ""
+    echo -e "${BLUE}Settings File:${NC} $SETTINGS_FILE"
+    echo ""
 
     if [ ! -f "$SETTINGS_FILE" ]; then
         echo -e "${YELLOW}⚠️  Settings file not found${NC}"
-        echo "   File: $SETTINGS_FILE"
+        echo "   Will be created on first switch"
         echo ""
         return
     fi
@@ -348,7 +355,7 @@ case "${1:-status}" in
         echo "Notes:"
         echo "  • CLI agents respect custom routing when enabled"
         echo "  • Main Chat routing affects Task() spawned agents"
-        echo "  • Settings file: .claude/settings.json"
+        echo "  • Settings file: .claude/settings.local.json (preferred) or .claude/settings.json"
         echo "  • Backups saved to: .claude/backups/"
         echo ""
         ;;