claude-flow-novice 2.18.6 → 2.18.7

package/claude-assets/hooks/cfn-invoke-pre-edit.sh

@@ -1,110 +0,0 @@
-#!/bin/bash
-
-##############################################################################
-# ⚠️  DEPRECATED - This bash script is deprecated
-#
-# Deprecation Date: 2025-11-20
-# Removal Date: 2026-02-20 (90 days)
-# Replacement: dist/cli/pre-edit-hook.js
-#
-# This script will be removed in 90 days. Please migrate to TypeScript.
-#
-# Migration Guide: See docs/BASH_DEPRECATION_NOTICE.md
-# TypeScript Benefits:
-#   - Type safety (zero runtime type errors)
-#   - 90%+ test coverage
-#   - Better performance
-#   - Comprehensive documentation
-#
-# Automatic Migration:
-#   Set USE_TYPESCRIPT=true to use TypeScript implementation automatically
-#
-##############################################################################
-
-
-# Pre-Edit Backup Hook Wrapper
-# Creates backup before file modifications in agent workflows
-#
-# Usage: .claude/hooks/cfn-invoke-pre-edit.sh FILE_PATH --agent-id AGENT_ID
-#
-# Arguments:
-#   FILE_PATH   - Absolute path to file about to be edited
-#   --agent-id  - Unique identifier for the agent performing the edit
-#
-# Returns:
-#   Backup directory path on success
-#   Exit code 1 on failure
-#
-# Example:
-#   BACKUP_PATH=$(./.claude/hooks/cfn-invoke-pre-edit.sh "/path/to/file.txt" --agent-id "backend-dev-1")
-
-set -euo pipefail
-
-# === Parse Arguments ===
-
-FILE_PATH=""
-AGENT_ID=""
-
-# First positional argument is file path
-if [[ -n "${1:-}" ]] && [[ "$1" != --* ]]; then
-    FILE_PATH="$1"
-    shift
-fi
-
-# Parse remaining named arguments
-while [[ "$#" -gt 0 ]]; do
-    case $1 in
-        --agent-id)
-            if [[ -z "${2:-}" ]]; then
-                echo "Error: --agent-id requires a value" >&2
-                exit 1
-            fi
-            AGENT_ID="$2"
-            shift 2
-            ;;
-        *)
-            echo "Error: Unknown argument: $1" >&2
-            echo "Usage: cfn-invoke-pre-edit.sh FILE_PATH --agent-id AGENT_ID" >&2
-            exit 1
-            ;;
-    esac
-done
-
-# === Validate Inputs ===
-
-if [[ -z "$FILE_PATH" ]]; then
-    echo "Error: No file path provided" >&2
-    echo "Usage: cfn-invoke-pre-edit.sh FILE_PATH --agent-id AGENT_ID" >&2
-    exit 1
-fi
-
-if [[ -z "$AGENT_ID" ]]; then
-    echo "Error: No agent ID provided" >&2
-    echo "Usage: cfn-invoke-pre-edit.sh FILE_PATH --agent-id AGENT_ID" >&2
-    exit 1
-fi
-
-if [[ ! -f "$FILE_PATH" ]]; then
-    echo "Error: File does not exist: $FILE_PATH" >&2
-    exit 1
-fi
-
-# === Execute Pre-Edit Backup ===
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-BACKUP_SCRIPT="${SCRIPT_DIR}/../skills/pre-edit-backup/backup.sh"
-
-if [[ ! -f "$BACKUP_SCRIPT" ]]; then
-    echo "Error: Backup script not found: $BACKUP_SCRIPT" >&2
-    exit 1
-fi
-
-# Execute backup and capture output
-if ! BACKUP_DIR=$("$BACKUP_SCRIPT" "$FILE_PATH" "$AGENT_ID" 2>&1); then
-    echo "Error: Backup failed: $BACKUP_DIR" >&2
-    exit 1
-fi
-
-# Return backup directory path
-echo "$BACKUP_DIR"
-exit 0

package/claude-assets/hooks/cfn-invoke-pre-edit.sh.backup

@@ -1,88 +0,0 @@
-#!/bin/bash
-
-# Pre-Edit Backup Hook Wrapper
-# Creates backup before file modifications in agent workflows
-#
-# Usage: .claude/hooks/cfn-invoke-pre-edit.sh FILE_PATH --agent-id AGENT_ID
-#
-# Arguments:
-#   FILE_PATH   - Absolute path to file about to be edited
-#   --agent-id  - Unique identifier for the agent performing the edit
-#
-# Returns:
-#   Backup directory path on success
-#   Exit code 1 on failure
-#
-# Example:
-#   BACKUP_PATH=$(./.claude/hooks/cfn-invoke-pre-edit.sh "/path/to/file.txt" --agent-id "backend-dev-1")
-
-set -euo pipefail
-
-# === Parse Arguments ===
-
-FILE_PATH=""
-AGENT_ID=""
-
-# First positional argument is file path
-if [[ -n "${1:-}" ]] && [[ "$1" != --* ]]; then
-    FILE_PATH="$1"
-    shift
-fi
-
-# Parse remaining named arguments
-while [[ "$#" -gt 0 ]]; do
-    case $1 in
-        --agent-id)
-            if [[ -z "${2:-}" ]]; then
-                echo "Error: --agent-id requires a value" >&2
-                exit 1
-            fi
-            AGENT_ID="$2"
-            shift 2
-            ;;
-        *)
-            echo "Error: Unknown argument: $1" >&2
-            echo "Usage: cfn-invoke-pre-edit.sh FILE_PATH --agent-id AGENT_ID" >&2
-            exit 1
-            ;;
-    esac
-done
-
-# === Validate Inputs ===
-
-if [[ -z "$FILE_PATH" ]]; then
-    echo "Error: No file path provided" >&2
-    echo "Usage: cfn-invoke-pre-edit.sh FILE_PATH --agent-id AGENT_ID" >&2
-    exit 1
-fi
-
-if [[ -z "$AGENT_ID" ]]; then
-    echo "Error: No agent ID provided" >&2
-    echo "Usage: cfn-invoke-pre-edit.sh FILE_PATH --agent-id AGENT_ID" >&2
-    exit 1
-fi
-
-if [[ ! -f "$FILE_PATH" ]]; then
-    echo "Error: File does not exist: $FILE_PATH" >&2
-    exit 1
-fi
-
-# === Execute Pre-Edit Backup ===
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-BACKUP_SCRIPT="${SCRIPT_DIR}/../skills/pre-edit-backup/backup.sh"
-
-if [[ ! -f "$BACKUP_SCRIPT" ]]; then
-    echo "Error: Backup script not found: $BACKUP_SCRIPT" >&2
-    exit 1
-fi
-
-# Execute backup and capture output
-if ! BACKUP_DIR=$("$BACKUP_SCRIPT" "$FILE_PATH" "$AGENT_ID" 2>&1); then
-    echo "Error: Backup failed: $BACKUP_DIR" >&2
-    exit 1
-fi
-
-# Return backup directory path
-echo "$BACKUP_DIR"
-exit 0

package/claude-assets/hooks/cfn-invoke-security-validation.sh

@@ -1,70 +0,0 @@
-#!/bin/bash
-# Security Validation Hook for Docker Hybrid Routing
-
-set -euo pipefail
-
-# Validate secret management configurations
-validate_secret_management() {
-    local file_path="$1"
-
-    # Check for hardcoded secrets
-    if grep -qE '(sk-ant-|token-|api_key=)' "$file_path"; then
-        echo "❌ SECURITY RISK: Potential secret exposure in $file_path"
-        return 1
-    fi
-
-    # Check for proper environment variable naming
-    if grep -qE 'API_KEY=|SECRET=|TOKEN=' "$file_path"; then
-        echo "⚠️ NAMING RISK: Inconsistent secret variable names in $file_path"
-        return 2
-    fi
-
-    return 0
-}
-
-# Validate Docker network configurations
-validate_docker_network() {
-    local compose_file="$1"
-
-    # Check for overly permissive network configurations
-    if ! grep -qE 'driver_opts:\n\s*encrypted:\s*"true"' "$compose_file"; then
-        echo "❌ NETWORK RISK: Network encryption not enabled"
-        return 1
-    fi
-
-    if ! grep -qE 'driver:\s*overlay' "$compose_file"; then
-        echo "⚠️ NETWORK CONFIG: Recommended to use overlay network for better isolation"
-        return 2
-    fi
-
-    return 0
-}
-
-# Main validation function
-main() {
-    local file_path="$1"
-    local file_name=$(basename "$file_path")
-    local exit_code=0
-
-    echo "🔒 Running security validation for $file_name"
-
-    case "$file_name" in
-        docker-compose.yml|docker-compose.*.yml)
-            validate_docker_network "$file_path" || exit_code=$?
-            ;;
-        .env|*.env)
-            validate_secret_management "$file_path" || exit_code=$?
-            ;;
-    esac
-
-    if [ $exit_code -eq 0 ]; then
-        echo "✅ Security validation passed for $file_name"
-    else
-        echo "🚨 Security validation failed for $file_name (Error code: $exit_code)"
-    fi
-
-    return $exit_code
-}
-
-# Execute main validation
-main "$@"

package/claude-assets/hooks/cfn-lint-sql-injection.sh

@@ -1,61 +0,0 @@
-#!/bin/bash
-# SQL Injection Linting Script
-# Detects vulnerable SQL query patterns in shell scripts
-# Part of SEC-003 SQL injection prevention
-
-set -euo pipefail
-
-# Check if file provided
-if [[ $# -eq 0 ]]; then
-    echo "Usage: $0 <file_path>" >&2
-    exit 1
-fi
-
-FILE_PATH="$1"
-
-if [[ ! -f "$FILE_PATH" ]]; then
-    echo "ERROR: File not found: $FILE_PATH" >&2
-    exit 1
-fi
-
-# Skip non-shell scripts
-if [[ ! "$FILE_PATH" =~ \.sh$ ]]; then
-    exit 0
-fi
-
-# Detect vulnerable patterns
-VULNERABLE_PATTERNS=(
-    'sqlite3.*["\047].*\$[A-Za-z_]'  # Direct variable interpolation in SQL strings
-    'sqlite3.*".*WHERE.*=.*\$'        # WHERE clauses with direct variables
-    'sqlite3.*".*VALUES.*\$'          # INSERT VALUES with direct variables
-    'sqlite3.*".*SET.*\$'             # UPDATE SET with direct variables
-)
-
-FOUND_ISSUES=0
-
-for pattern in "${VULNERABLE_PATTERNS[@]}"; do
-    # Exclude safe patterns:
-    # - sqlite-params.sh library itself
-    # - Comments (lines starting with #)
-    # - Heredocs (<<)
-    # - Already using sqlite_select/sqlite_insert/sqlite_exec
-    matches=$(grep -n -E "$pattern" "$FILE_PATH" | \
-              grep -v "sqlite_select\|sqlite_insert\|sqlite_exec" | \
-              grep -v "^[[:space:]]*#" | \
-              grep -v "<<" || true)
-
-    if [[ -n "$matches" ]]; then
-        echo "VULNERABILITY DETECTED in $FILE_PATH:" >&2
-        echo "$matches" >&2
-        FOUND_ISSUES=1
-    fi
-done
-
-if [[ $FOUND_ISSUES -eq 1 ]]; then
-    echo "" >&2
-    echo "RECOMMENDATION: Use parameterized queries from .claude/skills/bootstrap/sqlite-params.sh" >&2
-    echo "Example: sqlite_select \"\$DB\" \"SELECT * FROM table WHERE id = ?1\" \"\$user_input\"" >&2
-    exit 1
-fi
-
-exit 0

package/claude-assets/hooks/cfn-post-edit-cfn-retrospective.sh

@@ -1,110 +0,0 @@
-#!/bin/bash
-
-# Post-Edit Hook for CFN Retrospective Skills
-
-# Determine PROJECT_ROOT portably
-if [[ -z "$PROJECT_ROOT" ]]; then
-    # Resolve script location (handle symlinks)
-    SCRIPT_SOURCE="${BASH_SOURCE[0]}"
-    if [[ -L "$SCRIPT_SOURCE" ]]; then
-        SCRIPT_SOURCE="$(readlink -f "$SCRIPT_SOURCE" 2>/dev/null)" || {
-            echo "❌ Failed to resolve symlink for ${BASH_SOURCE[0]}" >&2
-            exit 1
-        }
-    fi
-
-    # Get script directory
-    SCRIPT_DIR="$(dirname "$SCRIPT_SOURCE")"
-    if ! cd "$SCRIPT_DIR" 2>/dev/null; then
-        echo "❌ Failed to cd to script directory: $SCRIPT_DIR" >&2
-        exit 1
-    fi
-    SCRIPT_DIR="$(pwd)"
-
-    # Navigate to project root (.claude/hooks -> ../..)
-    if ! cd "$SCRIPT_DIR/../.." 2>/dev/null; then
-        echo "❌ Failed to navigate to project root from $SCRIPT_DIR" >&2
-        exit 1
-    fi
-
-    export PROJECT_ROOT="$(pwd)"
-
-    # Return to original directory (optional, for safety)
-    cd - >/dev/null || true
-fi
-
-# Validate script permissions
-validate_script_permissions() {
-    local script_path="$1"
-    if [[ ! -x "$script_path" ]]; then
-        echo "❌ Script is not executable: $script_path"
-        chmod +x "$script_path" && echo "✅ Made script executable: $script_path"
-    fi
-}
-
-# Basic JSON validation
-validate_json_syntax() {
-    local file_path="$1"
-    if ! jq empty "$file_path" >/dev/null 2>&1; then
-        echo "❌ Invalid JSON syntax in $file_path"
-        return 1
-    fi
-    echo "✅ JSON syntax valid: $file_path"
-}
-
-# Specific validation for retrospective components
-validate_retrospective_skills() {
-    local base_path="${PROJECT_ROOT}/.claude/skills"
-    local skills=(
-        "pattern-extraction/extract-patterns.sh"
-        "playbook-auto-update/auto-update-playbook.sh"
-        "improvement-recommender/recommend-improvements.sh"
-        "retrospective-report/generate-report.sh"
-    )
-
-    for skill in "${skills[@]}"; do
-        full_path="${base_path}/${skill}"
-
-        # Validate script permissions
-        validate_script_permissions "$full_path"
-
-        # Run basic validation for shell scripts
-        if ! bash -n "$full_path" >/dev/null 2>&1; then
-            echo "❌ Syntax error in shell script: $skill"
-            return 1
-        fi
-    done
-
-    echo "✅ All retrospective skill scripts validated successfully"
-}
-
-# Validate playbook JSON
-validate_playbook() {
-    local playbook_path="${PROJECT_ROOT}/docs/PLAYBOOK.json"
-    validate_json_syntax "$playbook_path"
-}
-
-# Main validation function
-main() {
-    local edited_file="$1"
-    echo "🔍 Validating edited file: $edited_file"
-
-    # Determine validation based on file path
-    case "$edited_file" in
-        *".claude/skills/pattern-extraction"* | \
-        *".claude/skills/playbook-auto-update"* | \
-        *".claude/skills/improvement-recommender"* | \
-        *".claude/skills/retrospective-report"* | \
-        */PLAYBOOK.json)
-            validate_retrospective_skills
-            validate_playbook
-            ;;
-        *)
-            echo "✅ No specific validation required for this file"
-            exit 0
-            ;;
-    esac
-}
-
-# Run validation
-main "$1"

package/claude-assets/hooks/cfn-post-edit.config.json

@@ -1,51 +0,0 @@
-{
-  "enabled": true,
-  "version": "2.0.0",
-  "pipeline": "config/hooks/post-edit-pipeline.js",
-  "triggerOn": ["Edit", "Write", "MultiEdit"],
-  "fileTypes": [".ts", ".tsx", ".js", ".jsx", ".json", ".md", ".sh", ".bash", ".py", ".rs"],
-  "blocking": false,
-  "exitCodes": {
-    "0": "SUCCESS",
-    "1": "ERROR",
-    "2": "SYNTAX_ERROR",
-    "9": "BASH_VALIDATOR_ERROR",
-    "10": "BASH_VALIDATOR_WARNING",
-    "11": "CREDENTIAL_DETECTED"
-  },
-  "redis": {
-    "enabled": true,
-    "publishChannel": "swarm:hooks:post-edit",
-    "memoryKeyPattern": "swarm/{agentId}/hook-results"
-  },
-  "logging": {
-    "enabled": true,
-    "logFile": ".artifacts/logs/post-edit-pipeline.log",
-    "includeTimestamp": true,
-    "verbose": false
-  },
-  "validation": {
-    "typescript": {
-      "enabled": true,
-      "noEmit": true,
-      "skipLibCheck": true
-    },
-    "bash": {
-      "enabled": true,
-      "validators": ["pipe-safety", "dependency-checker", "line-endings"],
-      "timeout": 5000
-    },
-    "credentials": {
-      "enabled": true,
-      "validator": ".claude/hooks/validators/credential-scanner.sh",
-      "blocking": true,
-      "timeout": 10000
-    }
-  },
-  "feedback": {
-    "provideSuggestions": true,
-    "autoFixable": ["LINT_ISSUES"],
-    "nonBlocking": ["TYPE_WARNING", "LINT_ISSUES", "BASH_VALIDATOR_WARNING"],
-    "blocking": ["SYNTAX_ERROR", "BASH_VALIDATOR_ERROR", "CREDENTIAL_DETECTED"]
-  }
-}

package/claude-assets/hooks/cfn-post-edit.sh

@@ -1,21 +0,0 @@
-#!/bin/bash
-# Minimal post-edit hook for validation
-
-for file in "$@"; do
-    echo "Validating: $file"
-    case "$file" in
-        *.sh)
-            bash -n "$file" || { echo "Shell script syntax error in $file"; exit 1; }
-            ;;
-        *.md)
-            # Basic markdown validation
-            [[ -s "$file" ]] || { echo "Markdown file $file is empty"; exit 1; }
-            ;;
-        *)
-            echo "No specific validation for $file"
-            ;;
-    esac
-done
-
-echo "Post-edit validation complete."
-exit 0

package/claude-assets/hooks/cfn-post-execution/memory-cleanup.sh

@@ -1,20 +0,0 @@
-#!/bin/bash
-
-# CFN Post-Execution Memory Cleanup Hook
-# Automatically cleans up memory resources after CFN operations
-
-set -euo pipefail
-
-# Hook configuration
-HOOK_SCRIPT_PATH="$(dirname "$0")/memory-cleanup.sh"
-MEMORY_MANAGEMENT_SKILL="$(dirname "$0")/../../skills/cfn-memory-management/cleanup-memory.sh"
-
-# Use the memory management skill if available, otherwise use local fallback
-if [[ -f "$MEMORY_MANAGEMENT_SKILL" ]]; then
-    exec "$MEMORY_MANAGEMENT_SKILL" "$@"
-elif [[ -f "$HOOK_SCRIPT_PATH" ]]; then
-    exec "$HOOK_SCRIPT_PATH" "$@"
-else
-    echo "WARNING: Memory cleanup scripts not found, skipping cleanup"
-    exit 0
-fi

package/claude-assets/hooks/cfn-pre-edit-backup.sh

@@ -1,71 +0,0 @@
-#!/bin/bash
-# Pre-Edit Backup Hook
-# Automatically backs up files before Edit/Write operations
-
-set -euo pipefail
-
-FILE_PATH="$1"
-AGENT_ID="${2:-unknown}"
-TIMESTAMP=$(date +%s)
-
-# Critical files requiring backup
-CRITICAL_PATTERNS=(
-  "orchestrate-cfn-loop.sh"
-  "invoke-waiting-mode.sh"
-  "execute-.*\\.sh"
-  "agent\\.md"
-  "SKILL\\.md"
-)
-
-# Check if file matches critical pattern
-is_critical() {
-  local file="$1"
-  for pattern in "${CRITICAL_PATTERNS[@]}"; do
-    if echo "$file" | grep -qE "$pattern"; then
-      return 0
-    fi
-  done
-  return 1
-}
-
-# Only backup if file exists and is critical
-if [ ! -f "$FILE_PATH" ]; then
-  echo "[Pre-Edit Backup] File doesn't exist yet: $FILE_PATH"
-  exit 0
-fi
-
-if ! is_critical "$FILE_PATH"; then
-  echo "[Pre-Edit Backup] Not a critical file: $FILE_PATH"
-  exit 0
-fi
-
-# Create backup
-BACKUP_PATH="${FILE_PATH}.backup-${TIMESTAMP}"
-cp "$FILE_PATH" "$BACKUP_PATH"
-
-# Verify backup
-if [ -f "$BACKUP_PATH" ]; then
-  ORIGINAL_SIZE=$(wc -l < "$FILE_PATH")
-  BACKUP_SIZE=$(wc -l < "$BACKUP_PATH")
-
-  if [ "$ORIGINAL_SIZE" -eq "$BACKUP_SIZE" ]; then
-    echo "[Pre-Edit Backup] ✅ Backed up: $FILE_PATH ($ORIGINAL_SIZE lines)"
-    echo "[Pre-Edit Backup]    Backup: $BACKUP_PATH"
-
-    # Log to Redis
-    redis-cli LPUSH "backup:log" "{\"timestamp\":$TIMESTAMP,\"file\":\"$FILE_PATH\",\"agent\":\"$AGENT_ID\",\"lines\":$ORIGINAL_SIZE}" >/dev/null 2>&1 || true
-  else
-    echo "[Pre-Edit Backup] ❌ Backup verification failed"
-    exit 1
-  fi
-else
-  echo "[Pre-Edit Backup] ❌ Backup creation failed"
-  exit 1
-fi
-
-# Cleanup old backups (keep last 5)
-BACKUP_DIR=$(dirname "$FILE_PATH")
-BACKUP_PATTERN=$(basename "$FILE_PATH").backup-*
-find "$BACKUP_DIR" -name "$BACKUP_PATTERN" -type f 2>/dev/null | sort -r | tail -n +6 | xargs rm -f 2>/dev/null || true
-
-exit 0

package/claude-assets/hooks/cfn-pre-edit-security-warning.sh

@@ -1,40 +0,0 @@
-#!/bin/bash
-#
-# Pre-Edit Security Warning Hook
-# Warns security-specialist agents when editing documentation files
-# to remind them about credential redaction requirements
-#
-# Usage: Called automatically by cfn-invoke-pre-edit.sh
-#
-
-set -euo pipefail
-
-FILE_PATH="${1:-}"
-AGENT_TYPE="${2:-unknown}"
-
-# Only warn when editing documentation as security-specialist
-if [[ "$FILE_PATH" == docs/* ]] && [[ "$AGENT_TYPE" == "security-specialist" ]]; then
-  echo ""
-  echo "⚠️  SECURITY WARNING: Editing documentation as security-specialist"
-  echo "    ════════════════════════════════════════════════════════════"
-  echo ""
-  echo "    📋 MANDATORY REDACTION PROTOCOL:"
-  echo "       • ALWAYS redact sensitive values: API keys, passwords, tokens"
-  echo "       • Use [REDACTED] or placeholder patterns only"
-  echo "       • See: docs/templates/SECURITY_AUDIT_TEMPLATE.md"
-  echo ""
-  echo "    ✅ CORRECT:"
-  echo "       API_KEY=sk-ant-[REDACTED]"
-  echo "       PASSWORD=[REDACTED]"
-  echo "       JWT_TOKEN=eyJhbGci[REDACTED]..."
-  echo ""
-  echo "    ❌ WRONG:"
-  echo "       API_KEY=sk-ant-actual-key-value"
-  echo "       PASSWORD=actual-password-123"
-  echo ""
-  echo "    🛡️  Pre-commit hook will BLOCK commits with exposed credentials"
-  echo ""
-fi
-
-# Exit 0 (non-blocking warning)
-exit 0