claude-flow-novice 2.18.6 → 2.18.8

package/claude-assets/hooks/cfn-pre-execution/SESSION_START_README.md

@@ -1,87 +0,0 @@
-# Session Start Context Hook
-
-## Purpose
-
-Automatically loads project context at the beginning of each Claude Code session by reading `CLAUDE.md` and displaying key project guidelines, CFN Loop configuration, and environment status.
-
-## Location
-
-`.claude/hooks/cfn-pre-execution/session-start-context.sh`
-
-## Trigger
-
-This hook is designed to run automatically at session initialization when integrated with Claude Code's hook system.
-
-## Manual Execution
-
-```bash
-bash .claude/hooks/cfn-pre-execution/session-start-context.sh
-```
-
-## What It Does
-
-1. **Reads CLAUDE.md** from project root
-2. **Extracts Key Information:**
-   - Available CFN Loop execution modes (Task vs CLI)
-   - CTO Delegation persona guidelines
-   - Test-driven validation thresholds (v3.0+)
-3. **Checks Environment:**
-   - Custom provider routing status
-   - Redis CLI availability
-   - Docker availability
-4. **Displays Quick Reference** for immediate context
-
-## Example Output
-
-```
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-📋 SESSION START: Loading Project Context
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-
-✅ CLAUDE.md loaded
-   Location: /path/to/project/CLAUDE.md
-
-📌 Quick Reference:
-
-   CFN Loop Modes Available:
-   • /cfn-loop-task (Task Mode - Debugging, Full Visibility)
-   • /cfn-loop-cli  (CLI Mode - Production, 64% Cost Savings)
-
-   Active Persona: CTO Delegation
-   • Delegate all non-trivial work (>3 steps)
-   • Use CFN Loop slash commands for complex tasks
-   • Define success criteria, not adoption metrics
-
-   Test-Driven Gates (v3.0+):
-   • Standard Mode: ≥0.95 pass rate (Loop 3), ≥0.90 consensus (Loop 2)
-   • MVP Mode: ≥0.70 pass rate, ≥0.80 consensus
-   • Enterprise: ≥0.98 pass rate, ≥0.95 consensus
-
-🔧 Environment Status:
-   • Custom Provider Routing: DISABLED (default)
-   • Redis CLI: Available
-   • Docker: Available
-
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-✨ Ready to delegate. Use /cfn-loop-cli or /cfn-loop-task for complex work.
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-```
-
-## Integration with Claude Code
-
-To enable automatic execution at session start, this hook would need to be registered with Claude Code's hook system. The exact integration method depends on Claude Code's session lifecycle hooks implementation.
-
-## Benefits
-
-- **Immediate Context**: No need to manually reference CLAUDE.md
-- **Quick Reference**: Key patterns and modes displayed upfront
-- **Environment Awareness**: Instant visibility into available tools
-- **Consistency**: All sessions start with same baseline context
-
-## Customization
-
-Edit `.claude/hooks/cfn-pre-execution/session-start-context.sh` to:
-- Add/remove extracted sections from CLAUDE.md
-- Modify environment checks
-- Change output formatting
-- Add project-specific context

package/claude-assets/hooks/cfn-pre-execution/TEST_SESSION_START.md

@@ -1,128 +0,0 @@
-# Testing Session Start Hook
-
-## How to Verify It Works
-
-The session start hook will automatically execute in these scenarios:
-
-### 1. **New Session** (startup)
-When you first start Claude Code:
-```bash
-claude-code
-```
-
-You should see the context output displayed before the first prompt:
-```
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-📋 SESSION START: Loading Project Context
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-...
-```
-
-### 2. **Resume Session** (resume)
-When you resume a saved session:
-```bash
-claude-code --resume
-claude-code --continue
-# or use /resume command
-```
-
-The hook will run again, showing current project context.
-
-### 3. **Clear Session** (clear)
-After running `/clear` command:
-```
-User: /clear
-[Session cleared]
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-📋 SESSION START: Loading Project Context
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-...
-```
-
-## Quick Test (Manual)
-
-If you want to see what the output looks like right now:
-
-```bash
-bash .claude/hooks/cfn-pre-execution/session-start-context.sh
-```
-
-Expected output:
-- ✅ CLAUDE.md loaded confirmation
-- 📌 Quick reference with CFN Loop modes
-- CTO Delegation guidelines
-- Test-driven gate thresholds
-- Environment status (Redis, Docker, custom routing)
-
-## What You'll See
-
-**Successful Hook Execution:**
-- Context summary appears at session start
-- Key project patterns displayed
-- Environment status visible
-- Ready to work message
-
-**Hook Not Working:**
-- No output at session start
-- Check `.claude/hooks.json` configuration
-- Verify hook script is executable: `ls -l .claude/hooks/cfn-pre-execution/session-start-context.sh`
-- Check for errors: `bash -x .claude/hooks/cfn-pre-execution/session-start-context.sh`
-
-## Troubleshooting
-
-### Hook doesn't run automatically
-1. Check hooks configuration:
-   ```bash
-   cat .claude/hooks.json | grep -A 10 "SessionStart"
-   ```
-
-2. Verify script permissions:
-   ```bash
-   chmod +x .claude/hooks/cfn-pre-execution/session-start-context.sh
-   ```
-
-3. Test manually:
-   ```bash
-   bash .claude/hooks/cfn-pre-execution/session-start-context.sh
-   ```
-
-### Script errors
-Check for line ending issues (CRLF vs LF):
-```bash
-file .claude/hooks/cfn-pre-execution/session-start-context.sh
-# Should show: "with LF line terminators" (not CRLF)
-
-# Fix if needed:
-sed -i 's/\r$//' .claude/hooks/cfn-pre-execution/session-start-context.sh
-```
-
-## Configuration
-
-Hook configuration in `.claude/hooks.json`:
-```json
-{
-  "hooks": {
-    "SessionStart": [
-      {
-        "matcher": "startup|resume|clear",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "bash \"$CLAUDE_PROJECT_DIR/.claude/hooks/cfn-pre-execution/session-start-context.sh\"",
-            "description": "Load project context from CLAUDE.md at session start"
-          }
-        ]
-      }
-    ]
-  }
-}
-```
-
-## Next Session Test
-
-**To verify the hook is working:**
-1. End current session
-2. Start new Claude Code session
-3. Look for the context output before first prompt
-4. If you see the formatted output with CLAUDE.md content → ✅ Working!
-5. If you don't see anything → Check troubleshooting steps above

package/claude-assets/hooks/cfn-pre-execution/memory-check.sh

@@ -1,20 +0,0 @@
-#!/bin/bash
-
-# CFN Pre-Execution Memory Check Hook
-# Automatically checks memory availability before CFN operations
-
-set -euo pipefail
-
-# Hook configuration
-HOOK_SCRIPT_PATH="$(dirname "$0")/memory-check.sh"
-MEMORY_MANAGEMENT_SKILL="$(dirname "$0")/../../skills/cfn-memory-management/check-memory.sh"
-
-# Use the memory management skill if available, otherwise use local fallback
-if [[ -f "$MEMORY_MANAGEMENT_SKILL" ]]; then
-    exec "$MEMORY_MANAGEMENT_SKILL" "$@"
-elif [[ -f "$HOOK_SCRIPT_PATH" ]]; then
-    exec "$HOOK_SCRIPT_PATH" "$@"
-else
-    echo "WARNING: Memory check scripts not found, proceeding without memory validation"
-    exit 0
-fi

package/claude-assets/hooks/cfn-pre-execution/session-start-context.sh

@@ -1,111 +0,0 @@
-#!/bin/bash
-
-# CFN Session Start Context Hook
-# Automatically reads CLAUDE.md at session start to provide project context
-#
-# Purpose: Ensures Main Chat and agents have immediate access to project
-#          guidelines, CFN Loop patterns, and coordination protocols
-#
-# Triggered: Automatically at session initialization
-# Location: .claude/hooks/cfn-pre-execution/session-start-context.sh
-
-set -euo pipefail
-
-# === Configuration ===
-
-PROJECT_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../../.." && pwd)"
-CLAUDE_MD="${PROJECT_ROOT}/CLAUDE.md"
-CFN_EXPERT="${PROJECT_ROOT}/.claude/agents/cfn-dev-team/cfn-system-expert.md"
-
-# === Session Context Output ===
-
-echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-echo "📋 SESSION START: Loading Project Context"
-echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-echo ""
-
-# === Read CLAUDE.md ===
-
-if [[ -f "$CLAUDE_MD" ]]; then
-    echo "✅ CLAUDE.md loaded"
-    echo "   Location: $CLAUDE_MD"
-    echo ""
-
-    # Extract key sections for quick reference
-    echo "📌 Quick Reference:"
-    echo ""
-
-    # Extract CFN Loop modes
-    if grep -q "CFN Loop Execution Modes" "$CLAUDE_MD"; then
-        echo "   CFN Loop Modes Available:"
-        echo "   • /cfn-loop-task (Task Mode - Debugging, Full Visibility)"
-        echo "   • /cfn-loop-cli  (CLI Mode - Production, 64% Cost Savings)"
-        echo ""
-    fi
-
-    # Extract delegation pattern
-    if grep -q "CTO Delegation Persona" "$CLAUDE_MD"; then
-        echo "   Active Persona: CTO Delegation"
-        echo "   • Delegate all non-trivial work (>3 steps)"
-        echo "   • Use CFN Loop slash commands for complex tasks"
-        echo "   • Define success criteria, not adoption metrics"
-        echo ""
-    fi
-
-    # Extract test-driven requirements
-    if grep -q "Test-Driven Gates" "$CLAUDE_MD"; then
-        echo "   Test-Driven Gates (v3.0+):"
-        echo "   • Standard Mode: ≥0.95 pass rate (Loop 3), ≥0.90 consensus (Loop 2)"
-        echo "   • MVP Mode: ≥0.70 pass rate, ≥0.80 consensus"
-        echo "   • Enterprise: ≥0.98 pass rate, ≥0.95 consensus"
-        echo ""
-    fi
-
-else
-    echo "⚠️  WARNING: CLAUDE.md not found at $CLAUDE_MD"
-    echo ""
-fi
-
-# === CFN System Expert Reference ===
-
-if [[ -f "$CFN_EXPERT" ]]; then
-    echo "✅ CFN System Expert agent available"
-    echo "   Use for: CFN-specific troubleshooting, methodology questions"
-    echo ""
-else
-    echo "ℹ️  CFN System Expert agent not found (optional)"
-    echo ""
-fi
-
-# === Environment Check ===
-
-echo "🔧 Environment Status:"
-
-# Check for custom routing
-if [[ -f "${PROJECT_ROOT}/.env" ]] && grep -q "CFN_CUSTOM_ROUTING=true" "${PROJECT_ROOT}/.env" 2>/dev/null; then
-    echo "   • Custom Provider Routing: ENABLED"
-else
-    echo "   • Custom Provider Routing: DISABLED (default)"
-fi
-
-# Check for Redis coordination
-if command -v redis-cli &>/dev/null; then
-    echo "   • Redis CLI: Available"
-else
-    echo "   • Redis CLI: Not found (CLI mode may need Docker)"
-fi
-
-# Check for Docker
-if command -v docker &>/dev/null; then
-    echo "   • Docker: Available"
-else
-    echo "   • Docker: Not found"
-fi
-
-echo ""
-echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-echo "✨ Ready to delegate. Use /cfn-loop-cli or /cfn-loop-task for complex work."
-echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-echo ""
-
-exit 0

package/claude-assets/hooks/cfn-restore-from-backup.sh

@@ -1,37 +0,0 @@
-#!/bin/bash
-# Restore File from Backup
-# Restores a file from its most recent backup
-
-set -euo pipefail
-
-if [ $# -lt 1 ]; then
-  echo "Usage: $0 FILE_PATH"
-  echo "Restores FILE_PATH from most recent backup"
-  exit 1
-fi
-
-FILE_PATH="$1"
-BACKUP_PATTERN="${FILE_PATH}.backup-*"
-
-# Find most recent backup
-LATEST_BACKUP=$(ls -t $BACKUP_PATTERN 2>/dev/null | head -1)
-
-if [ -n "$LATEST_BACKUP" ]; then
-  echo "Restoring $FILE_PATH from $LATEST_BACKUP"
-
-  # Create pre-restore backup of current state
-  TIMESTAMP=$(date +%s)
-  cp "$FILE_PATH" "${FILE_PATH}.pre-restore-${TIMESTAMP}" 2>/dev/null || true
-
-  # Restore from backup
-  cp "$LATEST_BACKUP" "$FILE_PATH"
-
-  RESTORED_LINES=$(wc -l < "$FILE_PATH")
-  echo "✅ Restored $RESTORED_LINES lines"
-
-  # Log restoration
-  redis-cli LPUSH "restore:log" "{\"timestamp\":$TIMESTAMP,\"file\":\"$FILE_PATH\",\"backup\":\"$LATEST_BACKUP\",\"lines\":$RESTORED_LINES}" >/dev/null 2>&1 || true
-else
-  echo "❌ No backup found for $FILE_PATH"
-  exit 1
-fi

package/claude-assets/hooks/detect-hardcoded-credentials.sh

@@ -1,212 +0,0 @@
-#!/bin/bash
-#
-# Pre-commit Hook: Detect Hardcoded Credentials
-# Version: 1.0.0
-#
-# This hook prevents accidental commits of hardcoded credentials including:
-# - API keys (Anthropic, Z.ai, OpenRouter, etc)
-# - Database passwords
-# - JWT/Session secrets
-# - Bearer tokens
-# - Private keys
-#
-# Installation:
-#   cp .claude/hooks/detect-hardcoded-credentials.sh .git/hooks/pre-commit
-#   chmod +x .git/hooks/pre-commit
-#
-# Usage:
-#   Runs automatically before every git commit
-#   Bypass (NOT RECOMMENDED): git commit --no-verify
-#
-# Exit Codes:
-#   0 = No credentials found (safe to commit)
-#   1 = Credentials detected (commit blocked)
-#
-
-set -euo pipefail
-
-# Color codes for output
-RED='\033[0;31m'
-YELLOW='\033[1;33m'
-GREEN='\033[0;32m'
-NC='\033[0m' # No Color
-
-# Configuration
-EXCLUDE_PATTERNS=(
-  "*.example"
-  "*.template"
-  "docs/"
-  "tests/"
-  "legacy/"
-  "node_modules/"
-  ".git/"
-  "*.md"
-  "tests/fixtures/"  # Only exclude test fixtures, not all tests
-  "legacy/"
-  "node_modules/"
-  ".git/"
-  # REMOVED: "docs/" exclusion - now validates documentation files
-  # REMOVED: "*.md" exclusion - now validates markdown files
-)
-
-# High-entropy patterns (likely credentials)
-CREDENTIAL_PATTERNS=(
-  # API Keys
-  "sk-ant-v1-[a-zA-Z0-9_-]{50,}"                      # Anthropic keys
-  "sk-[a-zA-Z0-9]{20,}"                               # Generic API keys
-  "api_key\s*=\s*['\"][^'\"]{20,}['\"]"               # api_key assignments
-  "apikey\s*=\s*['\"][^'\"]{20,}['\"]"                # apikey assignments
-  "API_KEY\s*=\s*['\"][^'\"]{20,}['\"]"               # API_KEY assignments
-
-  # Passwords
-  "password\s*=\s*['\"][^'\"]{8,}['\"]"               # password assignments
-  "passwd\s*=\s*['\"][^'\"]{8,}['\"]"                 # passwd assignments
-  "pwd\s*=\s*['\"][^'\"]{8,}['\"]"                    # pwd assignments
-  "PASSWORD\s*=\s*['\"][^'\"]{8,}['\"]"               # PASSWORD assignments
-
-  # Database credentials
-  "POSTGRES_PASSWORD\s*=\s*['\"][^'\"]{8,}['\"]"      # PostgreSQL password
-  "MYSQL_PASSWORD\s*=\s*['\"][^'\"]{8,}['\"]"         # MySQL password
-  "MONGO_PASSWORD\s*=\s*['\"][^'\"]{8,}['\"]"         # MongoDB password
-  "DB_PASSWORD\s*=\s*['\"][^'\"]{8,}['\"]"            # Generic DB password
-  "REDIS_PASSWORD\s*=\s*['\"][^'\"]{8,}['\"]"         # Redis password
-
-  # Tokens & Secrets
-  "token\s*=\s*['\"][^'\"]{20,}['\"]"                 # token assignments
-  "secret\s*=\s*['\"][^'\"]{20,}['\"]"                # secret assignments
-  "jwt\s*=\s*['\"][^'\"]{20,}['\"]"                   # JWT assignments
-  "Bearer\s+[a-zA-Z0-9_.-]{20,}"                      # Bearer tokens
-
-  # AWS Credentials
-  "AKIA[0-9A-Z]\{16\}"                                # AWS Access Key ID
-  "aws_access_key_id\s*=\s*[^[:space:]]+"             # AWS key assignment
-  "aws_secret_access_key\s*=\s*[^[:space:]]+"         # AWS secret assignment
-
-  # Private Keys
-  "-----BEGIN PRIVATE KEY-----"                       # PEM private key start
-  "-----BEGIN RSA PRIVATE KEY-----"                   # RSA private key start
-  "-----BEGIN EC PRIVATE KEY-----"                    # EC private key start
-)
-
-# Build grep pattern
-PATTERN=""
-for p in "${CREDENTIAL_PATTERNS[@]}"; do
-  if [ -z "$PATTERN" ]; then
-    PATTERN="$p"
-  else
-    PATTERN="$PATTERN|$p"
-  fi
-done
-
-# Build exclude pattern for grep
-EXCLUDE_GREP=""
-for exc in "${EXCLUDE_PATTERNS[@]}"; do
-  if [ -z "$EXCLUDE_GREP" ]; then
-    EXCLUDE_GREP="--exclude=$exc"
-  else
-    EXCLUDE_GREP="$EXCLUDE_GREP --exclude=$exc"
-  fi
-done
-
-# Function to check staged files
-check_staged_files() {
-  local found_credentials=0
-
-  # Get list of staged files
-  local staged_files=$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null || echo "")
-
-  if [ -z "$staged_files" ]; then
-    return 0
-  fi
-
-  # Check each staged file
-  while IFS= read -r file; do
-    # Skip excluded patterns
-    local skip=0
-    for exc in "${EXCLUDE_PATTERNS[@]}"; do
-      if [[ "$file" == $exc ]]; then
-        skip=1
-        break
-      fi
-    done
-
-    if [ $skip -eq 1 ]; then
-      continue
-    fi
-
-    # Get staged content
-    local staged_content=$(git show ":$file" 2>/dev/null || echo "")
-
-    # Check for credentials in staged content
-    if echo "$staged_content" | grep -E "$PATTERN" >/dev/null 2>&1; then
-      echo -e "${RED}[SECURITY] Hardcoded credential detected in: ${NC}$file"
-      found_credentials=1
-    fi
-  done <<< "$staged_files"
-
-  return $found_credentials
-}
-
-# Function to check for dangerous files
-check_dangerous_files() {
-  local staged_files=$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null || echo "")
-
-  if [ -z "$staged_files" ]; then
-    return 0
-  fi
-
-  # Check for .env files (should never be committed)
-  if echo "$staged_files" | grep -E "^\.(env|env\.production|env\.staging)" >/dev/null; then
-    echo -e "${RED}[SECURITY] Attempting to commit .env file (BLOCKED)${NC}"
-    echo "        Use .env.example instead and add .env to .gitignore"
-    return 1
-  fi
-
-  # Check for private key files
-  if echo "$staged_files" | grep -E "\.(pem|key|pk|priv)$" >/dev/null; then
-    echo -e "${RED}[SECURITY] Attempting to commit private key file (BLOCKED)${NC}"
-    echo "        Private keys should never be committed to version control"
-    return 1
-  fi
-
-  return 0
-}
-
-# Main execution
-main() {
-  echo -e "${YELLOW}[CREDENTIAL DETECTION] Scanning staged files...${NC}"
-
-  # Check dangerous file types first
-  if ! check_dangerous_files; then
-    echo ""
-    echo -e "${RED}[SECURITY] Commit blocked: dangerous files detected${NC}"
-    echo ""
-    echo "How to fix:"
-    echo "  1. Add .env to .gitignore: echo '.env' >> .gitignore"
-    echo "  2. Remove the file from staging: git reset HEAD <file>"
-    echo "  3. Remove from history (if already committed):"
-    echo "     git filter-branch --tree-filter 'rm -f <file>' HEAD"
-    echo ""
-    return 1
-  fi
-
-  # Check for hardcoded credentials
-  if ! check_staged_files; then
-    echo ""
-    echo -e "${RED}[SECURITY] Commit blocked: hardcoded credentials detected${NC}"
-    echo ""
-    echo "How to fix:"
-    echo "  1. Remove hardcoded values: git checkout -- <file>"
-    echo "  2. Use environment variables instead"
-    echo "  3. Add values to .env.example (without real values)"
-    echo "  4. Re-stage the corrected file"
-    echo ""
-    echo "Reference: docs/CREDENTIAL_MANAGEMENT.md"
-    return 1
-  fi
-
-  echo -e "${GREEN}[CREDENTIAL DETECTION] ✓ No credentials detected${NC}"
-  return 0
-}
-
-main "$@"