claude-flow-novice 2.5.2 → 2.8.1

package/scripts/switch-api.sh

@@ -0,0 +1,233 @@
+#!/usr/bin/env bash
+##############################################################################
+# Claude API Switcher - Main Chat & Task Tool Provider Routing
+#
+# Usage: scripts/switch-api.sh [zai|max|status]
+#
+# What it does:
+#   - zai:    Main Chat + Task tool use Z.ai (add env vars to settings.json)
+#   - max:    Main Chat + Task tool use Anthropic (remove env vars, requires re-login)
+#   - CLI:    Always uses Z.ai (controlled by .env CLAUDE_API_PROVIDER=zai)
+#
+# Settings file: .claude/settings.json (project local)
+##############################################################################
+
+set -euo pipefail
+
+SETTINGS_FILE=".claude/settings.json"
+BACKUP_DIR=".claude/backups"
+
+# Create backup directory
+mkdir -p "$BACKUP_DIR"
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m' # No Color
+
+##############################################################################
+# Display current configuration
+##############################################################################
+show_status() {
+    echo -e "${BLUE}═══════════════════════════════════════${NC}"
+    echo -e "${BLUE}   Claude API Provider Status${NC}"
+    echo -e "${BLUE}═══════════════════════════════════════${NC}"
+    echo ""
+
+    if [ ! -f "$SETTINGS_FILE" ]; then
+        echo -e "${YELLOW}⚠️  Settings file not found${NC}"
+        echo "   File: $SETTINGS_FILE"
+        echo ""
+        return
+    fi
+
+    # Check for Z.ai env vars in settings
+    if grep -q "ANTHROPIC_BASE_URL" "$SETTINGS_FILE" 2>/dev/null; then
+        BASE_URL=$(jq -r '.env.ANTHROPIC_BASE_URL // empty' "$SETTINGS_FILE" 2>/dev/null || echo "")
+
+        if [[ "$BASE_URL" == *"z.ai"* ]]; then
+            echo -e "${GREEN}✓ Main Chat/Task Tool:${NC} Z.ai"
+            echo "  Base URL: $BASE_URL"
+            echo "  Cost: \$0.50/1M tokens"
+        else
+            echo -e "${GREEN}✓ Main Chat/Task Tool:${NC} Custom"
+            echo "  Base URL: $BASE_URL"
+        fi
+    else
+        echo -e "${GREEN}✓ Main Chat/Task Tool:${NC} Anthropic (default)"
+        echo "  Cost: \$15/1M tokens (Claude Max subscription)"
+        echo "  Status: Requires 'claude login'"
+    fi
+
+    # Check CLI routing (.env)
+    if grep -q "CLAUDE_API_PROVIDER=zai" .env 2>/dev/null; then
+        echo -e "${GREEN}✓ CLI Agents:${NC} Z.ai (from .env)"
+        echo "  Cost: \$0.50/1M tokens"
+    else
+        echo -e "${YELLOW}⚠️  CLI Agents:${NC} Anthropic (default)"
+        echo "  Set CLAUDE_API_PROVIDER=zai in .env for cost savings"
+    fi
+
+    echo ""
+    echo -e "${BLUE}Combined Architecture:${NC}"
+    echo "  Main Chat → Task tool → Coordinator (uses Main Chat provider)"
+    echo "  Coordinator → CLI spawn → Workers (uses CLI .env provider)"
+    echo ""
+}
+
+##############################################################################
+# Switch to Z.ai for Main Chat and Task Tool
+##############################################################################
+switch_to_zai() {
+    echo -e "${BLUE}Switching Main Chat/Task Tool to Z.ai...${NC}"
+    echo ""
+
+    # Backup current settings
+    if [ -f "$SETTINGS_FILE" ]; then
+        BACKUP_NAME="settings-$(date +%Y%m%d-%H%M%S)-before-zai.json"
+        cp "$SETTINGS_FILE" "$BACKUP_DIR/$BACKUP_NAME"
+        echo -e "${GREEN}✓${NC} Backed up: $BACKUP_DIR/$BACKUP_NAME"
+    fi
+
+    # Read current settings or create empty object
+    if [ -f "$SETTINGS_FILE" ]; then
+        CURRENT_SETTINGS=$(cat "$SETTINGS_FILE")
+    else
+        CURRENT_SETTINGS='{}'
+    fi
+
+    # Add Z.ai env vars to settings
+    NEW_SETTINGS=$(echo "$CURRENT_SETTINGS" | jq '. + {
+      "env": (.env // {}) + {
+        "ANTHROPIC_BASE_URL": "https://api.z.ai/api/anthropic",
+        "ANTHROPIC_AUTH_TOKEN": "cca13d09dcd6407183efe9e24c804cca.QO8R0JxF4fucsoWL"
+      }
+    }')
+
+    echo "$NEW_SETTINGS" > "$SETTINGS_FILE"
+
+    echo ""
+    echo -e "${GREEN}═══════════════════════════════════════${NC}"
+    echo -e "${GREEN}✓ Switched to Z.ai${NC}"
+    echo -e "${GREEN}═══════════════════════════════════════${NC}"
+    echo ""
+    echo -e "${GREEN}Main Chat + Task Tool:${NC} Z.ai"
+    echo "  • All Task() spawned agents use Z.ai"
+    echo "  • Cost: \$0.50/1M tokens (97% savings)"
+    echo "  • No login required"
+    echo ""
+    echo -e "${BLUE}CLI Agents:${NC} Z.ai (from .env)"
+    echo "  • CLAUDE_API_PROVIDER=zai in .env"
+    echo "  • Independent from Main Chat routing"
+    echo ""
+    echo -e "${YELLOW}Next Steps:${NC}"
+    echo "  1. Restart Claude desktop (if running)"
+    echo "  2. Test: /cfn-loop \"Test task\""
+    echo "  3. Verify logs show: Provider: zai"
+    echo ""
+}
+
+##############################################################################
+# Switch to Anthropic Max for Main Chat and Task Tool
+##############################################################################
+switch_to_max() {
+    echo -e "${BLUE}Switching Main Chat/Task Tool to Anthropic...${NC}"
+    echo ""
+
+    # Backup current settings
+    if [ -f "$SETTINGS_FILE" ]; then
+        BACKUP_NAME="settings-$(date +%Y%m%d-%H%M%S)-before-max.json"
+        cp "$SETTINGS_FILE" "$BACKUP_DIR/$BACKUP_NAME"
+        echo -e "${GREEN}✓${NC} Backed up: $BACKUP_DIR/$BACKUP_NAME"
+    fi
+
+    # Read current settings
+    if [ -f "$SETTINGS_FILE" ]; then
+        CURRENT_SETTINGS=$(cat "$SETTINGS_FILE")
+    else
+        echo -e "${YELLOW}⚠️  No settings file found, nothing to change${NC}"
+        echo ""
+        return
+    fi
+
+    # Remove Z.ai env vars
+    NEW_SETTINGS=$(echo "$CURRENT_SETTINGS" | jq 'del(.env.ANTHROPIC_BASE_URL, .env.ANTHROPIC_AUTH_TOKEN)')
+
+    echo "$NEW_SETTINGS" > "$SETTINGS_FILE"
+
+    echo ""
+    echo -e "${GREEN}═══════════════════════════════════════${NC}"
+    echo -e "${GREEN}✓ Switched to Anthropic${NC}"
+    echo -e "${GREEN}═══════════════════════════════════════${NC}"
+    echo ""
+    echo -e "${GREEN}Main Chat + Task Tool:${NC} Anthropic (official)"
+    echo "  • Uses Claude Max subscription"
+    echo "  • Cost: \$15/1M tokens (or \$0 with unlimited plan)"
+    echo "  • ${RED}Requires re-login${NC}: Run 'claude login'"
+    echo ""
+    echo -e "${BLUE}CLI Agents:${NC} Z.ai (from .env)"
+    echo "  • CLAUDE_API_PROVIDER=zai in .env"
+    echo "  • ${GREEN}Unchanged${NC} - CLI still uses Z.ai for cost savings"
+    echo ""
+    echo -e "${YELLOW}Next Steps:${NC}"
+    echo "  1. Run: ${BLUE}claude login${NC}"
+    echo "  2. Authenticate with Anthropic"
+    echo "  3. Restart Claude desktop"
+    echo "  4. Test: Main Chat should work"
+    echo ""
+    echo -e "${YELLOW}Combined Savings:${NC}"
+    echo "  • Main Chat: \$15/1M (high quality)"
+    echo "  • CLI Workers: \$0.50/1M (cost optimized)"
+    echo "  • Overall: 88% savings vs all-Anthropic"
+    echo ""
+}
+
+##############################################################################
+# Main command handler
+##############################################################################
+case "${1:-status}" in
+    status|current|"")
+        show_status
+        ;;
+
+    zai|z.ai)
+        switch_to_zai
+        show_status
+        ;;
+
+    max|claude|anthropic)
+        switch_to_max
+        show_status
+        ;;
+
+    help|--help|-h)
+        echo "Claude API Switcher"
+        echo ""
+        echo "Usage: $0 [command]"
+        echo ""
+        echo "Commands:"
+        echo "  status    Show current API configuration (default)"
+        echo "  zai       Switch Main Chat/Task tool to Z.ai"
+        echo "  max       Switch Main Chat/Task tool to Anthropic"
+        echo ""
+        echo "Examples:"
+        echo "  $0              # Show current status"
+        echo "  $0 zai          # Use Z.ai for Main Chat"
+        echo "  $0 max          # Use Anthropic for Main Chat (requires re-login)"
+        echo ""
+        echo "Notes:"
+        echo "  • CLI agents always use Z.ai (from .env CLAUDE_API_PROVIDER=zai)"
+        echo "  • Main Chat routing affects Task() spawned agents"
+        echo "  • Settings file: .claude/settings.json"
+        echo "  • Backups saved to: .claude/backups/"
+        echo ""
+        ;;
+
+    *)
+        echo -e "${RED}Unknown command: $1${NC}"
+        echo "Run '$0 help' for usage"
+        exit 1
+        ;;
+esac

package/scripts/validate-test-migration.sh

@@ -0,0 +1,49 @@
+#!/bin/bash
+
+log_info() {
+    echo "[INFO] $1"
+}
+
+log_error() {
+    echo "[ERROR] $1"
+}
+
+check_async_await_migration() {
+    local test_files
+    test_files=$(find . -type f \( -name "*.test.js" -o -name "*.test.ts" \))
+    local problem_files=()
+
+    for file in $test_files; do
+        if grep -q '\.then(' "$file" || grep -q 'done(' "$file"; then
+            problem_files+=("$file")
+        fi
+    done
+
+    if [ ${#problem_files[@]} -gt 0 ]; then
+        log_error "Found ${#problem_files[@]} files with async/await issues:"
+        for file in "${problem_files[@]}"; do
+            echo "  - $file"
+        done
+        return 1
+    else
+        log_info "No .then() or done() patterns found"
+        return 0
+    fi
+}
+
+main() {
+    log_info "Starting Test Migration Validation"
+
+    check_async_await_migration
+    local result=$?
+
+    if [ $result -eq 0 ]; then
+        log_info "Migration Validation PASSED ✓"
+        exit 0
+    else
+        log_error "Migration Validation FAILED ✗"
+        exit 1
+    fi
+}
+
+main

package/scripts/verify-no-secrets.sh

@@ -0,0 +1,55 @@
+#!/bin/bash
+# Verify npm package contains no secrets before publishing
+
+set -e
+
+echo "🔍 Scanning npm package for secrets..."
+
+# Get list of files that would be included (without actually packing)
+PACKAGE_FILES=$(npm pack --dry-run 2>&1 | grep -E '^[0-9.]+[kKMG]?B?\s+' | awk '{print $2}' || true)
+
+# Check for sensitive file patterns
+if echo "$PACKAGE_FILES" | grep -E '\.(env|key|pem|secrets|credentials)$' > /dev/null 2>&1; then
+  echo "❌ ERROR: Sensitive files detected in package:"
+  echo "$PACKAGE_FILES" | grep -E '\.(env|key|pem|secrets|credentials)$'
+  exit 1
+fi
+
+# Check for .claude/api-configs directory
+if echo "$PACKAGE_FILES" | grep -q '.claude/api-configs' 2>/dev/null; then
+  echo "❌ ERROR: API config directory included in package"
+  exit 1
+fi
+
+# Check actual file contents for secret patterns
+# Use dist/ and .claude/ directories since those are included in package
+SECRET_PATTERNS='(ANTHROPIC_API_KEY|ZAI_API_KEY|NPM_API_KEY|REDIS_PASSWORD)=[A-Za-z0-9_-]{20,}'
+KEY_PATTERNS='(sk-ant-api03-[A-Za-z0-9_-]{95}|npm_[A-Za-z0-9]{36})'
+
+if [ -d "dist" ]; then
+  if grep -r -E "$SECRET_PATTERNS" dist/ 2>/dev/null; then
+    echo "❌ ERROR: API key environment variables detected in dist/"
+    exit 1
+  fi
+
+  if grep -r -E "$KEY_PATTERNS" dist/ 2>/dev/null; then
+    echo "❌ ERROR: Live API keys detected in dist/"
+    exit 1
+  fi
+fi
+
+if [ -d ".claude" ]; then
+  # Check .claude directory (excluding known safe locations)
+  if grep -r -E "$SECRET_PATTERNS" .claude/ --exclude-dir=legacy 2>/dev/null; then
+    echo "❌ ERROR: API key environment variables detected in .claude/"
+    exit 1
+  fi
+
+  if grep -r -E "$KEY_PATTERNS" .claude/ --exclude-dir=legacy 2>/dev/null; then
+    echo "❌ ERROR: Live API keys detected in .claude/"
+    exit 1
+  fi
+fi
+
+echo "✅ No secrets detected in package"
+exit 0