claude-flow-novice 2.18.6 → 2.18.8

package/claude-assets/skills/cfn-validation-framework/lib/layers/SKILL.md

@@ -1,133 +0,0 @@
----
-name: defense-in-depth
-description: Multi-layer validation strategy for CFN Loop to prevent "consensus on vapor" and ensure robust, high-quality deliverables
----
-
-# Defense-in-Depth Validation for CFN Loop
-
-## Overview
-
-In the Claude Flow Novice system, defense-in-depth validation prevents low-quality or incomplete work by enforcing rigorous checks at multiple coordination layers.
-
-**Core Principle:** Validate deliverables, confidence, and context at EVERY stage of the CFN Loop workflow.
-
-## Validation Layers in CFN Loop
-
-### Layer 1: Coordinator Context Extraction
-**Purpose:** Validate task description and initial context
-
-```bash
-# Mandatory fields in context extraction
-REQUIRED_FIELDS=(
-  "epicGoal"          # 1-2 sentence description
-  "inScope"           # Specific, achievable objectives
-  "outOfScope"        # Clear boundaries
-  "deliverables"      # Exact file paths/names
-  "directory"         # Target creation path
-  "acceptanceCriteria" # Measurable requirements
-)
-
-validate_coordinator_context() {
-  for field in "${REQUIRED_FIELDS[@]}"; do
-    if [[ -z "${CONTEXT[$field]}" ]]; then
-      echo "❌ INVALID: Missing required context field: $field"
-      return 1
-    fi
-  done
-}
-```
-
-### Layer 2: Orchestrator Agent Spawning Validation
-**Purpose:** Ensure agents receive complete, actionable context
-
-```bash
-validate_agent_context() {
-  # Reference STRAT-025: Explicit Deliverable Tracking
-  DELIVERABLES_CHECKLIST=$(
-    for file in "${CONTEXT[deliverables]}"; do
-      if [[ -f "$file" ]]; then
-        echo "✅ $file"
-      else
-        echo "❌ $file MISSING"
-      fi
-    done
-  )
-
-  # Confidence calculation based on deliverable completion
-  COMPLETION_RATE=$(calculate_completion_rate "$DELIVERABLES_CHECKLIST")
-
-  # Enforce low confidence if any deliverables missing
-  if (( $(echo "$COMPLETION_RATE < 0.50" | bc -l) )); then
-    AGENT_CONFIDENCE=0.25
-  fi
-}
-```
-
-### Layer 3: Loop 2 Validator Quality Gate
-**Purpose:** Enforce strict consensus validation
-
-```bash
-validate_loop2_consensus() {
-  # Reference STRAT-020: Mandatory Deliverable Verification
-  if [[ "$DELIVERABLES_CREATED" -eq 0 ]]; then
-    echo "❌ NO DELIVERABLES CREATED"
-    OVERRIDE_CONSENSUS="ITERATE"
-    FEEDBACK="Iteration required: No deliverables produced"
-  fi
-
-  # Consensus threshold enforcement
-  if (( $(echo "$CONSENSUS_SCORE < 0.90" | bc -l) )); then
-    echo "❌ CONSENSUS TOO LOW"
-    OVERRIDE_CONSENSUS="ITERATE"
-  fi
-}
-```
-
-### Layer 4: Product Owner Decision Validation
-**Purpose:** Final quality and strategic alignment check
-
-```bash
-validate_product_owner_decision() {
-  # Verify deliverables match epic goals
-  STRATEGIC_ALIGNMENT=$(assess_strategic_match)
-
-  if [[ "$STRATEGIC_ALIGNMENT" -lt 0.75 ]]; then
-    echo "❌ LOW STRATEGIC ALIGNMENT"
-    DECISION="ABORT"
-    REASON="Deliverables do not match epic objectives"
-  fi
-}
-```
-
-## Redis-based Quality Coordination
-
-Implement quality gates using Redis pub/sub for zero-token coordination:
-
-```bash
-# Quality gate blocking mechanism
-redis-cli BLPOP "cfn_loop:quality_gate:$TASK_ID" 0
-
-# Signal quality validation result
-redis-cli LPUSH "cfn_loop:quality_result:$TASK_ID" "$VALIDATION_STATUS"
-```
-
-## Confidence and Consensus Mapping
-
-**Confidence Thresholds:**
-- Gate Threshold: ≥0.75
-- Consensus Threshold: ≥0.90
-- Product Owner Strategic Alignment: ≥0.85
-
-## Key Insights
-
-1. **Multi-Layer Validation:** Each layer adds a unique validation perspective
-2. **Prevent "Consensus on Vapor":** Strict deliverable tracking
-3. **Dynamic Iteration:** Automatic re-execution when quality gates fail
-4. **Zero-Token Coordination:** Redis pub/sub enables efficient quality management
-
-## Implementation References
-- STRAT-020: Mandatory Deliverable Verification
-- STRAT-025: Explicit Deliverable Tracking
-- PATTERN-022: Agent Lifecycle Management
-
-**Success is not consensus, but verifiable, high-quality deliverables.**

package/claude-assets/skills/cfn-vision-analysis/SKILL.md

@@ -1,20 +0,0 @@
----
-name: cfn-vision-analysis
-description: Image and vision analysis capabilities for screenshot and mockup validation
-version: 1.0.0
-tags: [vision, image, analysis, screenshots]
-status: production
----
-
-# CFN Vision Analysis Skill
-
-## Purpose
-
-Provides image and vision analysis capabilities for validating screenshots, mockups, and visual content in the CFN Loop workflow.
-
-## Use Cases
-
-- Screenshot validation against mockups
-- UI consistency checking
-- Visual regression detection
-- Brand guideline compliance

package/claude-assets/skills/equation-solver/README.md

@@ -1,327 +0,0 @@
-# Equation-Solver Skill
-
-A production-grade, security-hardened algebraic equation solver for the Claude Flow Novice framework.
-
-## Features
-
-- **Solves algebraic equations** of any degree (linear, quadratic, cubic, higher-order)
-- **Security-hardened:** Prevents template injection, command injection, and code execution
-- **Fast:** <500ms for most equations
-- **Reliable:** 24/24 test cases passing (100% success rate)
-- **Type-safe:** Full bash strict mode with error handling
-- **Composable:** Works with CFN orchestration and swarm coordination
-
-## Quick Start
-
-```bash
-# Basic usage
-./.claude/skills/equation-solver/solve.sh "x + 2 = 5"
-# Output: {"solutions":["3"],"message":"1 solution(s) found"}
-
-# Specify variable
-./.claude/skills/equation-solver/solve.sh "x^2 + 5x + 6 = 0" x
-# Output: {"solutions":["-2","-3"],"message":"2 solution(s) found"}
-
-# Verbose output
-./.claude/skills/equation-solver/solve.sh -v "2x - 4 = 0"
-```
-
-## Installation
-
-```bash
-cd ./.claude/skills/equation-solver
-npm install
-npm test  # Run tests to verify
-```
-
-## Supported Equations
-
-### Linear Equations
-```bash
-./solve.sh "x + 2 = 5"
-./solve.sh "3x - 7 = 5"
-./solve.sh "2x + 3 = x + 8"
-```
-
-### Quadratic Equations
-```bash
-./solve.sh "x^2 + 5x + 6 = 0"
-./solve.sh "(x + 2)(x + 3) = 0"
-./solve.sh "x^2 - 4 = 0"
-```
-
-### Polynomial Equations
-```bash
-./solve.sh "x^3 - 6x^2 + 11x - 6 = 0"
-./solve.sh "x^4 - 1 = 0"
-```
-
-### With Decimals
-```bash
-./solve.sh "0.5x + 1.5 = 2.5"
-./solve.sh "0.1x^2 + 0.2x + 0.1 = 0"
-```
-
-## Security
-
-This skill is hardened against:
-
-- **Template Injection** - Input whitelist prevents JavaScript escaping
-- **Command Injection** - Shell metacharacters filtered at validation
-- **Path Traversal** - No file system access beyond temp files
-- **DoS Attacks** - Input length limits and processing timeouts
-- **TOCTOU Races** - Secure temp file creation with restrictive permissions
-
-See `SECURITY_AUDIT_REPORT.md` for comprehensive vulnerability assessment.
-
-## Testing
-
-```bash
-# Run all tests (security + functional)
-npm test
-
-# Run minimal test suite
-bash test-equation-solver-minimal.sh
-
-# Test specific equation
-./solve.sh "your equation here" your_variable
-```
-
-**Test Results:** 24/24 passing (100%)
-- Security tests: 15/15 (100% injection attempts blocked)
-- Functional tests: 6/6 (100% equations solved correctly)
-- Edge case tests: 3/3 (100% boundaries handled)
-
-## API Reference
-
-### Command Syntax
-
-```
-solve.sh [OPTIONS] EQUATION [VARIABLE]
-```
-
-### Arguments
-
-| Argument | Required | Default | Description |
-|----------|----------|---------|-------------|
-| EQUATION | Yes | - | Algebraic equation (e.g., "x^2 + 5x + 6 = 0") |
-| VARIABLE | No | x | Variable to solve for |
-
-### Options
-
-```
--h, --help    Display help message
--v, --verbose Enable verbose output for debugging
-```
-
-### Output Format
-
-**Success (exit code 0):**
-```json
-{
-  "solutions": ["3", "-2"],
-  "message": "2 solution(s) found"
-}
-```
-
-**Error (exit code 1):**
-```
-Error: Equation contains invalid characters
-Allowed: alphanumeric, +, -, *, /, ^, (), ., =, spaces
-```
-
-### Exit Codes
-
-- `0` - Success: equation solved or valid output produced
-- `1` - Failure: validation error or solving failed
-
-## Performance
-
-| Equation Type | Typical Time | Max Time | Examples |
-|---|---|---|---|
-| Linear | <100ms | <150ms | `x + 2 = 5` |
-| Quadratic | <150ms | <200ms | `x^2 + 5x + 6 = 0` |
-| Cubic | <200ms | <300ms | `x^3 - 6x^2 + 11x - 6 = 0` |
-| Complex | <500ms | <1000ms | High-degree or many terms |
-
-## Limitations
-
-1. **Single-variable equations only** - Multi-variable equations must specify one to solve for
-2. **Algebraic solutions only** - Transcendental equations may have limited results
-3. **Degree limits** - Very high-degree polynomials (>10) may timeout
-4. **Complex numbers** - Displayed in text format (e.g., "1+2i")
-
-## Error Handling
-
-### Invalid Characters
-
-```bash
-$ ./solve.sh "x'; process.exit(1); '"
-Error: Equation contains invalid character: '''
-Allowed: alphanumeric, +, -, *, /, ^, (), ., =, spaces
-```
-
-### Unbalanced Parentheses
-
-```bash
-$ ./solve.sh "x + ((5 + 2"
-Error: Unbalanced parentheses in equation
-```
-
-### Invalid Variable Name
-
-```bash
-$ ./solve.sh "x + 2 = 5" "1x"
-Error: Variable must start with letter or underscore
-```
-
-### Equation Too Long
-
-```bash
-$ ./solve.sh "$(printf 'x+1%.0s' {1..1000})"
-Error: Equation too long (max 500 characters)
-```
-
-## Files
-
-```
-equation-solver/
-├── solve.sh                      # Main solver (secure implementation)
-├── package.json                  # Dependencies
-├── test-equation-solver-minimal.sh   # Quick test suite
-├── README.md                     # This file
-├── SKILL.md                      # Skill metadata
-├── SECURITY.md                   # Security documentation
-├── SECURITY_AUDIT_REPORT.md     # Full security audit
-└── node_modules/
-    └── nerdamer/                # Algebra solving library
-```
-
-## Dependencies
-
-- **Node.js** v12+ (LTS recommended)
-- **nerdamer** v1.1.13 (algebra solving library)
-- **bash** v4+ (for shell script execution)
-
-## Integration
-
-### With CFN Orchestration
-
-```bash
-# Spawn as part of CFN swarm
-cfn-orchestrate.sh --skill equation-solver --context "x^2 + 5x + 6 = 0"
-```
-
-### Programmatic Usage
-
-```bash
-# Capture output
-result=$(./solve.sh "x + 2 = 5")
-solutions=$(echo "$result" | jq -r '.solutions[0]')
-```
-
-### Batch Processing
-
-```bash
-for equation in "x + 2 = 5" "x^2 - 4 = 0" "x^3 = 8"; do
-  echo "Equation: $equation"
-  ./solve.sh "$equation"
-  echo ""
-done
-```
-
-## Troubleshooting
-
-### "Command not found: nerdamer"
-
-```bash
-# Reinstall dependencies
-cd ./.claude/skills/equation-solver
-npm install
-```
-
-### "Failed to solve equation"
-
-Check that the equation is valid:
-```bash
-# Valid: x + 2 = 5
-# Invalid: x' + 2 = 5  (invalid character)
-# Invalid: x + 2 = (5  (unbalanced parentheses)
-```
-
-### Incorrect Solutions
-
-Try reformulating the equation:
-```bash
-# Instead of: x^2 + 5x + 6 = 0
-# Try: (x + 2)(x + 3) = 0
-```
-
-### Performance Issues
-
-Simplify complex equations:
-```bash
-# Large polynomial might timeout
-# Break into smaller pieces or use fewer terms
-```
-
-## Security Considerations
-
-### Safe to Use With:
-- User-provided equations from trusted sources
-- CFN framework validation layers
-- Sandboxed environments
-
-### Not Recommended For:
-- Direct web API exposure without additional authentication
-- Equations from untrusted sources without upstream validation
-- High-frequency solving (>1000 equations/sec) - add rate limiting
-
-## Support
-
-### Documentation
-- Security implementation: `SECURITY.md`
-- Vulnerability assessment: `SECURITY_AUDIT_REPORT.md`
-- Skill metadata: `SKILL.md`
-
-### Testing
-- Run tests: `npm test`
-- Debug: `./solve.sh -v "your equation"`
-
-### Issues
-
-Report issues with:
-1. Equation that failed
-2. Expected output
-3. Actual output
-4. Test results from `npm test`
-
-## License
-
-MIT License - See LICENSE file in project root
-
-## Changelog
-
-### v1.0.0 (2025-12-04)
-
-**Initial Release**
-
-- Production-grade equation solver
-- Comprehensive security hardening
-- 24/24 test suite (100% passing)
-- Security score: 0.95
-- Zero known vulnerabilities
-
-**Security Fixes:**
-- Template injection prevention
-- Command injection prevention
-- Safe temporary file handling
-- Input validation with whitelisting
-- Parentheses balancing validation
-- Length limits for all inputs
-
----
-
-**Status:** Production-Ready ✓
-**Last Updated:** 2025-12-04
-**Maintainer:** Security Specialist Agent