claude-flow-novice 2.18.22 → 2.18.23

package/.claude/cfn-scripts/check-memory.sh

@@ -0,0 +1,150 @@
+#!/bin/bash
+# Memory Leak Prevention Script (ANTI-024)
+# Detects and kills orphaned test processes (jest, vitest, node test runners)
+#
+# Usage:
+#   ./scripts/check-memory.sh           # Report only
+#   ./scripts/check-memory.sh --kill    # Kill orphans
+#   ./scripts/check-memory.sh --kill 500  # Kill if total MB > 500
+
+set -euo pipefail
+
+KILL_MODE=false
+THRESHOLD_MB=0
+
+# Parse arguments
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        --kill)
+            KILL_MODE=true
+            shift
+            if [[ "${1:-}" =~ ^[0-9]+$ ]]; then
+                THRESHOLD_MB="$1"
+                shift
+            fi
+            ;;
+        --help|-h)
+            echo "Usage: $0 [--kill [threshold_mb]]"
+            echo "  --kill        Kill orphaned test processes"
+            echo "  --kill 500    Only kill if total memory > 500MB"
+            exit 0
+            ;;
+        *)
+            shift
+            ;;
+    esac
+done
+
+# Find test-related processes
+find_test_processes() {
+    # Jest, Vitest, and generic node test runners
+    pgrep -af "(jest|vitest|node.*test)" 2>/dev/null || true
+}
+
+# Calculate memory usage of test processes (in MB)
+get_test_memory_mb() {
+    ps aux 2>/dev/null | grep -E "(jest|vitest|node.*test)" | grep -v grep | \
+        awk '{sum+=$6} END {print int(sum/1024)}' || echo "0"
+}
+
+# Find orphaned processes (parent PID = 1 or parent dead)
+find_orphans() {
+    local orphans=()
+
+    while IFS= read -r line; do
+        local pid=$(echo "$line" | awk '{print $1}')
+        if [[ -z "$pid" ]]; then continue; fi
+
+        local ppid=$(ps -o ppid= -p "$pid" 2>/dev/null | tr -d ' ' || echo "")
+        if [[ -z "$ppid" ]]; then continue; fi
+
+        # Check if parent is init (1) or parent process doesn't exist
+        if [[ "$ppid" == "1" ]] || ! ps -p "$ppid" > /dev/null 2>&1; then
+            orphans+=("$pid")
+        fi
+    done < <(find_test_processes)
+
+    echo "${orphans[@]:-}"
+}
+
+# Kill processes gracefully
+kill_processes() {
+    local pids=("$@")
+
+    for pid in "${pids[@]}"; do
+        if [[ -z "$pid" ]]; then continue; fi
+
+        echo "Killing orphaned process: $pid"
+
+        # Try SIGTERM first
+        kill -TERM "$pid" 2>/dev/null || continue
+
+        # Wait up to 5 seconds for graceful shutdown
+        local count=0
+        while ps -p "$pid" > /dev/null 2>&1 && [[ $count -lt 5 ]]; do
+            sleep 1
+            ((count++))
+        done
+
+        # Force kill if still running
+        if ps -p "$pid" > /dev/null 2>&1; then
+            echo "Force killing: $pid"
+            kill -KILL "$pid" 2>/dev/null || true
+        fi
+    done
+}
+
+# Main
+main() {
+    local total_mb=$(get_test_memory_mb)
+    local orphans=($(find_orphans))
+    local orphan_count=${#orphans[@]}
+
+    echo "=== Memory Check (ANTI-024) ==="
+    echo "Test process memory: ${total_mb}MB"
+    echo "Orphaned processes: ${orphan_count}"
+
+    if [[ $orphan_count -gt 0 ]]; then
+        echo ""
+        echo "Orphan PIDs: ${orphans[*]}"
+
+        if $KILL_MODE; then
+            if [[ $THRESHOLD_MB -gt 0 ]] && [[ $total_mb -lt $THRESHOLD_MB ]]; then
+                echo "Memory ($total_mb MB) below threshold ($THRESHOLD_MB MB), skipping kill"
+                exit 0
+            fi
+
+            echo ""
+            echo "Killing orphaned processes..."
+            kill_processes "${orphans[@]}"
+
+            # Verify cleanup
+            sleep 1
+            local remaining=$(find_orphans | wc -w)
+            echo "Remaining orphans: $remaining"
+
+            if [[ $remaining -gt 0 ]]; then
+                echo "WARNING: Some processes could not be killed"
+                exit 1
+            fi
+        else
+            echo ""
+            echo "Run with --kill to terminate orphaned processes"
+        fi
+    else
+        echo "No orphaned test processes found"
+    fi
+
+    # Report current test processes
+    local running=$(find_test_processes | wc -l)
+    if [[ $running -gt 0 ]]; then
+        echo ""
+        echo "Running test processes: $running"
+        find_test_processes | head -5
+        if [[ $running -gt 5 ]]; then
+            echo "... and $((running - 5)) more"
+        fi
+    fi
+}
+
+main "$@"

package/.claude/cfn-scripts/run-with-memory-limit.sh

@@ -0,0 +1,91 @@
+#!/bin/bash
+# Run command with memory limit enforcement (ANTI-024)
+# Uses systemd-run when available, falls back to ulimit
+#
+# Usage:
+#   ./scripts/run-with-memory-limit.sh <memory_limit> <command...>
+#   ./scripts/run-with-memory-limit.sh 6G npm test
+#   ./scripts/run-with-memory-limit.sh 2G npm run test:unit
+
+set -euo pipefail
+
+MEMORY_LIMIT="${1:-6G}"
+shift
+
+if [[ $# -eq 0 ]]; then
+    echo "Usage: $0 <memory_limit> <command...>"
+    echo "Example: $0 6G npm test"
+    exit 1
+fi
+
+# Parse memory limit to bytes for ulimit fallback
+parse_memory_to_kb() {
+    local mem="$1"
+    local num="${mem%[GgMmKk]*}"
+    local unit="${mem: -1}"
+
+    case "$unit" in
+        G|g) echo $((num * 1024 * 1024)) ;;
+        M|m) echo $((num * 1024)) ;;
+        K|k) echo "$num" ;;
+        *)   echo "$mem" ;;  # Assume KB if no unit
+    esac
+}
+
+# Check systemd availability
+use_systemd() {
+    # Check if systemd-run exists and user session is available
+    command -v systemd-run >/dev/null 2>&1 && \
+    systemctl --user is-system-running >/dev/null 2>&1
+}
+
+# Check if running in WSL (systemd support varies)
+is_wsl() {
+    grep -qi microsoft /proc/version 2>/dev/null
+}
+
+echo "=== Memory-Limited Execution (ANTI-024) ==="
+echo "Limit: $MEMORY_LIMIT"
+echo "Command: $*"
+echo ""
+
+if use_systemd; then
+    echo "Using: systemd-run (cgroups v2)"
+    echo ""
+
+    # Run with systemd memory limit
+    # --user: run as current user
+    # --scope: transient scope (not a service)
+    # -p MemoryMax: hard memory limit
+    # -p MemorySwapMax=0: disable swap so OOM killer triggers at limit
+    exec systemd-run --user --scope \
+        -p MemoryMax="$MEMORY_LIMIT" \
+        -p MemorySwapMax=0 \
+        --description="CFN test run with memory limit" \
+        "$@"
+
+elif is_wsl; then
+    # WSL may not have full systemd support
+    echo "Using: ulimit (WSL detected, systemd unavailable)"
+    echo ""
+
+    MEM_KB=$(parse_memory_to_kb "$MEMORY_LIMIT")
+
+    # Set virtual memory limit (soft enforcement)
+    ulimit -v "$MEM_KB" 2>/dev/null || true
+
+    # Also set resident set size limit
+    ulimit -m "$MEM_KB" 2>/dev/null || true
+
+    exec "$@"
+
+else
+    echo "Using: ulimit (systemd unavailable)"
+    echo ""
+
+    MEM_KB=$(parse_memory_to_kb "$MEMORY_LIMIT")
+    ulimit -v "$MEM_KB" 2>/dev/null || true
+    ulimit -m "$MEM_KB" 2>/dev/null || true
+
+    exec "$@"
+fi

package/.claude/hooks/README.md

@@ -1,148 +1,148 @@
-# Claude Code Hooks
-
-This directory contains hooks that integrate with Claude Code's lifecycle events.
-
-## cfn-precompact-enhanced.sh
-
-Enhanced PreCompact hook that preserves context before conversation compaction (manual or auto).
-
-### Features
-
-**Context Preservation:**
-- Captures current git state (branch, status, recent commits)
-- Saves uncommitted and staged changes
-- Records modified files
-
-**Session Metrics:**
-- Counts recently edited files
-- Estimates session duration from git history
-- Detects test execution and status
-- Tracks tool usage (if transcript available)
-- Approximates token usage
-
-**CFN-Specific Detection:**
-- Active CFN Loop tasks
-- Running CFN Docker containers
-- Redis coordination state
-- Recent pre-edit backups
-
-**Output:**
-- Prints structured summary to stdout (injected into Claude's context)
-- Saves detailed JSON log to `.artifacts/precompact/session-{timestamp}.json`
-- Includes CLAUDE.md reminders for best practices
-
-### Configuration
-
-The hook is configured in `.claude/settings.json`:
-
-```json
-{
-  "hooks": {
-    "PreCompact": [
-      {
-        "matcher": "manual",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "/bin/bash .claude/hooks/cfn-precompact-enhanced.sh"
-          }
-        ]
-      },
-      {
-        "matcher": "auto",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "/bin/bash .claude/hooks/cfn-precompact-enhanced.sh"
-          }
-        ]
-      }
-    ]
-  }
-}
-```
-
-### Performance
-
-- **Timeout Protection**: 9-second overall script timeout
-- **Non-Blocking**: Always exits with code 0
-- **Optimized for WSL2**: Limits `find` depth and targets specific directories
-- **Graceful Degradation**: Continues if git/jq unavailable
-
-### Testing
-
-```bash
-# Test without stdin
-./.claude/hooks/cfn-precompact-enhanced.sh
-
-# Test with simulated input
-echo '{"type": "manual", "compact_type": "manual"}' | \
-  CLAUDE_PROJECT_DIR=$(pwd) bash .claude/hooks/cfn-precompact-enhanced.sh
-```
-
-### Output Example
-
-```
-=== PRE-COMPACT CONTEXT PRESERVATION ===
-
-Compact Type: manual
-Timestamp: 2025-12-10 04:46:26
-
-Git State:
-  Branch: feature/auth-system
-  Uncommitted: 3 files
-  Modified: 2 files
-  Staged: 1 files
-  Last commit: abc123 - "Add JWT validation" (2 hours ago)
-
-Session Summary:
-  Recent file edits: 5
-  Duration: 45 minutes
-  Tests run: true
-  Test status: passing
-  Tools used: 12 (Bash: 8, Edit: 4)
-  Approx tokens: ~800
-
-Key Context:
-  - Working directory: /path/to/project
-  - Uncommitted changes
-  - 2 CFN container(s) running
-
-Full context saved to: .artifacts/precompact/session-1765370786.json
-
-=== CLAUDE.md REMINDERS ===
-• Use CFN Loop for multi-step tasks
-• Batch operations in single messages
-• Pre-edit backup required before edits
-• Run tests before commits
-• Use service names in Docker networks
-```
-
-### Artifacts
-
-Session data is preserved in:
-- `.artifacts/precompact/session-{timestamp}.json` - Full JSON context
-- `.artifacts/precompact/{timestamp}-git.diff` - Git diff (if changes exist)
-- `.artifacts/precompact/{timestamp}-commits.txt` - Recent commit history
-- `.artifacts/precompact/backup-{todo-file}-{timestamp}` - Copied todo files
-
-### Environment Variables
-
-- `CLAUDE_PROJECT_DIR` - Project root (defaults to `pwd`)
-- `TRANSCRIPT_PATH` - Path to conversation transcript (optional, for tool usage stats)
-- `INPUT` - JSON input from Claude Code (compact_type, custom_instructions)
-
-### Troubleshooting
-
-**Hook times out:**
-- Check if running on Windows mount (should be Linux filesystem)
-- Verify timeout settings in script (default 9 seconds)
-- Reduce `find` depth or target fewer directories
-
-**No JSON output:**
-- Ensure `.artifacts/precompact/` directory exists
-- Check for `jq` availability (gracefully degrades if missing)
-
-**Line ending issues:**
-- Convert to Unix line endings: `dos2unix .claude/hooks/cfn-precompact-enhanced.sh`
-- Or use: `sed -i 's/\r$//' .claude/hooks/cfn-precompact-enhanced.sh`
+# Claude Code Hooks
+
+This directory contains hooks that integrate with Claude Code's lifecycle events.
+
+## cfn-precompact-enhanced.sh
+
+Enhanced PreCompact hook that preserves context before conversation compaction (manual or auto).
+
+### Features
+
+**Context Preservation:**
+- Captures current git state (branch, status, recent commits)
+- Saves uncommitted and staged changes
+- Records modified files
+
+**Session Metrics:**
+- Counts recently edited files
+- Estimates session duration from git history
+- Detects test execution and status
+- Tracks tool usage (if transcript available)
+- Approximates token usage
+
+**CFN-Specific Detection:**
+- Active CFN Loop tasks
+- Running CFN Docker containers
+- Redis coordination state
+- Recent pre-edit backups
+
+**Output:**
+- Prints structured summary to stdout (injected into Claude's context)
+- Saves detailed JSON log to `.artifacts/precompact/session-{timestamp}.json`
+- Includes CLAUDE.md reminders for best practices
+
+### Configuration
+
+The hook is configured in `.claude/settings.json`:
+
+```json
+{
+  "hooks": {
+    "PreCompact": [
+      {
+        "matcher": "manual",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "/bin/bash .claude/hooks/cfn-precompact-enhanced.sh"
+          }
+        ]
+      },
+      {
+        "matcher": "auto",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "/bin/bash .claude/hooks/cfn-precompact-enhanced.sh"
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+### Performance
+
+- **Timeout Protection**: 9-second overall script timeout
+- **Non-Blocking**: Always exits with code 0
+- **Optimized for WSL2**: Limits `find` depth and targets specific directories
+- **Graceful Degradation**: Continues if git/jq unavailable
+
+### Testing
+
+```bash
+# Test without stdin
+./.claude/hooks/cfn-precompact-enhanced.sh
+
+# Test with simulated input
+echo '{"type": "manual", "compact_type": "manual"}' | \
+  CLAUDE_PROJECT_DIR=$(pwd) bash .claude/hooks/cfn-precompact-enhanced.sh
+```
+
+### Output Example
+
+```
+=== PRE-COMPACT CONTEXT PRESERVATION ===
+
+Compact Type: manual
+Timestamp: 2025-12-10 04:46:26
+
+Git State:
+  Branch: feature/auth-system
+  Uncommitted: 3 files
+  Modified: 2 files
+  Staged: 1 files
+  Last commit: abc123 - "Add JWT validation" (2 hours ago)
+
+Session Summary:
+  Recent file edits: 5
+  Duration: 45 minutes
+  Tests run: true
+  Test status: passing
+  Tools used: 12 (Bash: 8, Edit: 4)
+  Approx tokens: ~800
+
+Key Context:
+  - Working directory: /path/to/project
+  - Uncommitted changes
+  - 2 CFN container(s) running
+
+Full context saved to: .artifacts/precompact/session-1765370786.json
+
+=== CLAUDE.md REMINDERS ===
+• Use CFN Loop for multi-step tasks
+• Batch operations in single messages
+• Pre-edit backup required before edits
+• Run tests before commits
+• Use service names in Docker networks
+```
+
+### Artifacts
+
+Session data is preserved in:
+- `.artifacts/precompact/session-{timestamp}.json` - Full JSON context
+- `.artifacts/precompact/{timestamp}-git.diff` - Git diff (if changes exist)
+- `.artifacts/precompact/{timestamp}-commits.txt` - Recent commit history
+- `.artifacts/precompact/backup-{todo-file}-{timestamp}` - Copied todo files
+
+### Environment Variables
+
+- `CLAUDE_PROJECT_DIR` - Project root (defaults to `pwd`)
+- `TRANSCRIPT_PATH` - Path to conversation transcript (optional, for tool usage stats)
+- `INPUT` - JSON input from Claude Code (compact_type, custom_instructions)
+
+### Troubleshooting
+
+**Hook times out:**
+- Check if running on Windows mount (should be Linux filesystem)
+- Verify timeout settings in script (default 9 seconds)
+- Reduce `find` depth or target fewer directories
+
+**No JSON output:**
+- Ensure `.artifacts/precompact/` directory exists
+- Check for `jq` availability (gracefully degrades if missing)
+
+**Line ending issues:**
+- Convert to Unix line endings: `dos2unix .claude/hooks/cfn-precompact-enhanced.sh`
+- Or use: `sed -i 's/\r$//' .claude/hooks/cfn-precompact-enhanced.sh`

package/.claude/hooks/{SessionStart:cfn-load-openai-key.sh → SessionStart-cfn-load-openai-key.sh}

@@ -1,35 +1,35 @@
-#!/bin/bash
-
-# SessionStart hook: Load OpenAI API key from root .env file
-# This ensures OPENAI_API_KEY is available for embedding generation
-
-set -e
-
-# Path to root .env file
-ROOT_ENV="${PROJECT_ROOT:-.}/.env"
-
-# Check if .env exists
-if [[ ! -f "$ROOT_ENV" ]]; then
-    echo "⚠️  Warning: $ROOT_ENV not found. OpenAI embeddings will not work." >&2
-    exit 0
-fi
-
-# Extract OPENAI_API_KEY from .env
-if grep -q "^OPENAI_API_KEY=" "$ROOT_ENV"; then
-    # Export the key for this session
-    export OPENAI_API_KEY=$(grep "^OPENAI_API_KEY=" "$ROOT_ENV" | cut -d'=' -f2- | tr -d '"')
-
-    # Verify key is set
-    if [[ -n "$OPENAI_API_KEY" ]]; then
-        echo "✅ Loaded OPENAI_API_KEY from root .env" >&2
-    else
-        echo "⚠️  Warning: OPENAI_API_KEY found but empty in $ROOT_ENV" >&2
-    fi
-else
-    echo "⚠️  Warning: OPENAI_API_KEY not found in $ROOT_ENV. OpenAI embeddings will not work." >&2
-fi
-
-# Make it available to subprocesses
-export OPENAI_API_KEY
-
-exit 0
+#!/bin/bash
+
+# SessionStart hook: Load OpenAI API key from root .env file
+# This ensures OPENAI_API_KEY is available for embedding generation
+
+set -e
+
+# Path to root .env file
+ROOT_ENV="${PROJECT_ROOT:-.}/.env"
+
+# Check if .env exists
+if [[ ! -f "$ROOT_ENV" ]]; then
+    echo "⚠️  Warning: $ROOT_ENV not found. OpenAI embeddings will not work." >&2
+    exit 0
+fi
+
+# Extract OPENAI_API_KEY from .env
+if grep -q "^OPENAI_API_KEY=" "$ROOT_ENV"; then
+    # Export the key for this session
+    export OPENAI_API_KEY=$(grep "^OPENAI_API_KEY=" "$ROOT_ENV" | cut -d'=' -f2- | tr -d '"')
+
+    # Verify key is set
+    if [[ -n "$OPENAI_API_KEY" ]]; then
+        echo "✅ Loaded OPENAI_API_KEY from root .env" >&2
+    else
+        echo "⚠️  Warning: OPENAI_API_KEY found but empty in $ROOT_ENV" >&2
+    fi
+else
+    echo "⚠️  Warning: OPENAI_API_KEY not found in $ROOT_ENV. OpenAI embeddings will not work." >&2
+fi
+
+# Make it available to subprocesses
+export OPENAI_API_KEY
+
+exit 0

package/.claude/hooks/SessionStart:cfn-build-ruvector.sh

@@ -1,28 +1,28 @@
-#!/bin/bash
-# SessionStart hook: Build RuVector Rust binary if missing
-# This ensures RuVector is compiled on cfn init
-
-RUVECTOR_DIR="$(dirname "$(dirname "$(dirname "$0")")")/skills/cfn-local-ruvector-accelerator"
-BINARY="$RUVECTOR_DIR/target/release/local-ruvector"
-
-# Only build if binary doesn't exist
-if [ ! -f "$BINARY" ]; then
-    echo "[cfn-build-ruvector] Binary not found, building..."
-
-    # Check if Cargo is available
-    if ! command -v cargo &> /dev/null; then
-        echo "[cfn-build-ruvector] WARNING: Cargo not installed, skipping RuVector build"
-        exit 0
-    fi
-
-    # Build release binary
-    cd "$RUVECTOR_DIR" && cargo build --release --quiet 2>/dev/null
-
-    if [ -f "$BINARY" ]; then
-        echo "[cfn-build-ruvector] ✅ RuVector binary built successfully"
-    else
-        echo "[cfn-build-ruvector] WARNING: Build failed, RuVector unavailable"
-    fi
-else
-    echo "[cfn-build-ruvector] ✅ RuVector binary already exists"
-fi
+#!/bin/bash
+# SessionStart hook: Build RuVector Rust binary if missing
+# This ensures RuVector is compiled on cfn init
+
+RUVECTOR_DIR="$(dirname "$(dirname "$(dirname "$0")")")/skills/cfn-local-ruvector-accelerator"
+BINARY="$RUVECTOR_DIR/target/release/local-ruvector"
+
+# Only build if binary doesn't exist
+if [ ! -f "$BINARY" ]; then
+    echo "[cfn-build-ruvector] Binary not found, building..."
+
+    # Check if Cargo is available
+    if ! command -v cargo &> /dev/null; then
+        echo "[cfn-build-ruvector] WARNING: Cargo not installed, skipping RuVector build"
+        exit 0
+    fi
+
+    # Build release binary
+    cd "$RUVECTOR_DIR" && cargo build --release --quiet 2>/dev/null
+
+    if [ -f "$BINARY" ]; then
+        echo "[cfn-build-ruvector] ✅ RuVector binary built successfully"
+    else
+        echo "[cfn-build-ruvector] WARNING: Build failed, RuVector unavailable"
+    fi
+else
+    echo "[cfn-build-ruvector] ✅ RuVector binary already exists"
+fi