claude-flow 3.6.30 → 3.7.0-alpha.10

package/.claude/helpers/security-scanner.sh

@@ -1,127 +1,127 @@
-#!/bin/bash
-# RuFlo V3 - Security Scanner Worker
-# Scans for secrets, vulnerabilities, CVE updates
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
-SECURITY_DIR="$PROJECT_ROOT/.claude-flow/security"
-SCAN_FILE="$SECURITY_DIR/scan-results.json"
-LAST_RUN_FILE="$SECURITY_DIR/.scanner-last-run"
-
-mkdir -p "$SECURITY_DIR"
-
-should_run() {
-  if [ ! -f "$LAST_RUN_FILE" ]; then return 0; fi
-  local last_run=$(cat "$LAST_RUN_FILE" 2>/dev/null || echo "0")
-  local now=$(date +%s)
-  [ $((now - last_run)) -ge 1800 ]  # 30 minutes
-}
-
-scan_secrets() {
-  local secrets_found=0
-  local patterns=(
-    "password\s*=\s*['\"][^'\"]+['\"]"
-    "api[_-]?key\s*=\s*['\"][^'\"]+['\"]"
-    "secret\s*=\s*['\"][^'\"]+['\"]"
-    "token\s*=\s*['\"][^'\"]+['\"]"
-    "private[_-]?key"
-  )
-
-  for pattern in "${patterns[@]}"; do
-    local count=$(grep -riE "$pattern" "$PROJECT_ROOT/src" "$PROJECT_ROOT/v3" 2>/dev/null | grep -v node_modules | grep -v ".git" | wc -l | tr -d '[:space:]')
-    count=${count:-0}
-    secrets_found=$((secrets_found + count))
-  done
-
-  echo "$secrets_found"
-}
-
-scan_vulnerabilities() {
-  local vulns=0
-
-  # Check for known vulnerable patterns
-  # SQL injection patterns
-  local sql_count=$(grep -rE "execute\s*\(" "$PROJECT_ROOT/src" "$PROJECT_ROOT/v3" 2>/dev/null | grep -v node_modules | grep -v ".test." | wc -l | tr -d '[:space:]')
-  vulns=$((vulns + ${sql_count:-0}))
-
-  # Command injection patterns
-  local cmd_count=$(grep -rE "exec\s*\(|spawn\s*\(" "$PROJECT_ROOT/src" "$PROJECT_ROOT/v3" 2>/dev/null | grep -v node_modules | grep -v ".test." | wc -l | tr -d '[:space:]')
-  vulns=$((vulns + ${cmd_count:-0}))
-
-  # Unsafe eval
-  local eval_count=$(grep -rE "\beval\s*\(" "$PROJECT_ROOT/src" "$PROJECT_ROOT/v3" 2>/dev/null | grep -v node_modules | wc -l | tr -d '[:space:]')
-  vulns=$((vulns + ${eval_count:-0}))
-
-  echo "$vulns"
-}
-
-check_npm_audit() {
-  if [ -f "$PROJECT_ROOT/package-lock.json" ]; then
-    # Skip npm audit for speed - it's slow
-    echo "0"
-  else
-    echo "0"
-  fi
-}
-
-run_scan() {
-  echo "[$(date +%H:%M:%S)] Running security scan..."
-
-  local secrets=$(scan_secrets)
-  local vulns=$(scan_vulnerabilities)
-  local npm_vulns=$(check_npm_audit)
-
-  local total_issues=$((secrets + vulns + npm_vulns))
-  local status="clean"
-
-  if [ "$total_issues" -gt 10 ]; then
-    status="critical"
-  elif [ "$total_issues" -gt 0 ]; then
-    status="warning"
-  fi
-
-  # Update audit status
-  cat > "$SCAN_FILE" << EOF
-{
-  "status": "$status",
-  "timestamp": "$(date -Iseconds)",
-  "findings": {
-    "secrets": $secrets,
-    "vulnerabilities": $vulns,
-    "npm_audit": $npm_vulns,
-    "total": $total_issues
-  },
-  "cves": {
-    "tracked": ["CVE-1", "CVE-2", "CVE-3"],
-    "remediated": 3
-  }
-}
-EOF
-
-  # Update main audit status file
-  if [ "$status" = "clean" ]; then
-    echo '{"status":"CLEAN","cvesFixed":3}' > "$SECURITY_DIR/audit-status.json"
-  else
-    echo "{\"status\":\"$status\",\"cvesFixed\":3,\"issues\":$total_issues}" > "$SECURITY_DIR/audit-status.json"
-  fi
-
-  echo "[$(date +%H:%M:%S)] ✓ Security: $status | Secrets: $secrets | Vulns: $vulns | NPM: $npm_vulns"
-
-  date +%s > "$LAST_RUN_FILE"
-}
-
-case "${1:-check}" in
-  "run"|"scan") run_scan ;;
-  "check") should_run && run_scan || echo "[$(date +%H:%M:%S)] Skipping (throttled)" ;;
-  "force") rm -f "$LAST_RUN_FILE"; run_scan ;;
-  "status")
-    if [ -f "$SCAN_FILE" ]; then
-      jq -r '"Status: \(.status) | Secrets: \(.findings.secrets) | Vulns: \(.findings.vulnerabilities) | NPM: \(.findings.npm_audit)"' "$SCAN_FILE"
-    else
-      echo "No scan data available"
-    fi
-    ;;
-  *) echo "Usage: $0 [run|check|force|status]" ;;
-esac
+#!/bin/bash
+# RuFlo V3 - Security Scanner Worker
+# Scans for secrets, vulnerabilities, CVE updates
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
+SECURITY_DIR="$PROJECT_ROOT/.claude-flow/security"
+SCAN_FILE="$SECURITY_DIR/scan-results.json"
+LAST_RUN_FILE="$SECURITY_DIR/.scanner-last-run"
+
+mkdir -p "$SECURITY_DIR"
+
+should_run() {
+  if [ ! -f "$LAST_RUN_FILE" ]; then return 0; fi
+  local last_run=$(cat "$LAST_RUN_FILE" 2>/dev/null || echo "0")
+  local now=$(date +%s)
+  [ $((now - last_run)) -ge 1800 ]  # 30 minutes
+}
+
+scan_secrets() {
+  local secrets_found=0
+  local patterns=(
+    "password\s*=\s*['\"][^'\"]+['\"]"
+    "api[_-]?key\s*=\s*['\"][^'\"]+['\"]"
+    "secret\s*=\s*['\"][^'\"]+['\"]"
+    "token\s*=\s*['\"][^'\"]+['\"]"
+    "private[_-]?key"
+  )
+
+  for pattern in "${patterns[@]}"; do
+    local count=$(grep -riE "$pattern" "$PROJECT_ROOT/src" "$PROJECT_ROOT/v3" 2>/dev/null | grep -v node_modules | grep -v ".git" | wc -l | tr -d '[:space:]')
+    count=${count:-0}
+    secrets_found=$((secrets_found + count))
+  done
+
+  echo "$secrets_found"
+}
+
+scan_vulnerabilities() {
+  local vulns=0
+
+  # Check for known vulnerable patterns
+  # SQL injection patterns
+  local sql_count=$(grep -rE "execute\s*\(" "$PROJECT_ROOT/src" "$PROJECT_ROOT/v3" 2>/dev/null | grep -v node_modules | grep -v ".test." | wc -l | tr -d '[:space:]')
+  vulns=$((vulns + ${sql_count:-0}))
+
+  # Command injection patterns
+  local cmd_count=$(grep -rE "exec\s*\(|spawn\s*\(" "$PROJECT_ROOT/src" "$PROJECT_ROOT/v3" 2>/dev/null | grep -v node_modules | grep -v ".test." | wc -l | tr -d '[:space:]')
+  vulns=$((vulns + ${cmd_count:-0}))
+
+  # Unsafe eval
+  local eval_count=$(grep -rE "\beval\s*\(" "$PROJECT_ROOT/src" "$PROJECT_ROOT/v3" 2>/dev/null | grep -v node_modules | wc -l | tr -d '[:space:]')
+  vulns=$((vulns + ${eval_count:-0}))
+
+  echo "$vulns"
+}
+
+check_npm_audit() {
+  if [ -f "$PROJECT_ROOT/package-lock.json" ]; then
+    # Skip npm audit for speed - it's slow
+    echo "0"
+  else
+    echo "0"
+  fi
+}
+
+run_scan() {
+  echo "[$(date +%H:%M:%S)] Running security scan..."
+
+  local secrets=$(scan_secrets)
+  local vulns=$(scan_vulnerabilities)
+  local npm_vulns=$(check_npm_audit)
+
+  local total_issues=$((secrets + vulns + npm_vulns))
+  local status="clean"
+
+  if [ "$total_issues" -gt 10 ]; then
+    status="critical"
+  elif [ "$total_issues" -gt 0 ]; then
+    status="warning"
+  fi
+
+  # Update audit status
+  cat > "$SCAN_FILE" << EOF
+{
+  "status": "$status",
+  "timestamp": "$(date -Iseconds)",
+  "findings": {
+    "secrets": $secrets,
+    "vulnerabilities": $vulns,
+    "npm_audit": $npm_vulns,
+    "total": $total_issues
+  },
+  "cves": {
+    "tracked": ["CVE-1", "CVE-2", "CVE-3"],
+    "remediated": 3
+  }
+}
+EOF
+
+  # Update main audit status file
+  if [ "$status" = "clean" ]; then
+    echo '{"status":"CLEAN","cvesFixed":3}' > "$SECURITY_DIR/audit-status.json"
+  else
+    echo "{\"status\":\"$status\",\"cvesFixed\":3,\"issues\":$total_issues}" > "$SECURITY_DIR/audit-status.json"
+  fi
+
+  echo "[$(date +%H:%M:%S)] ✓ Security: $status | Secrets: $secrets | Vulns: $vulns | NPM: $npm_vulns"
+
+  date +%s > "$LAST_RUN_FILE"
+}
+
+case "${1:-check}" in
+  "run"|"scan") run_scan ;;
+  "check") should_run && run_scan || echo "[$(date +%H:%M:%S)] Skipping (throttled)" ;;
+  "force") rm -f "$LAST_RUN_FILE"; run_scan ;;
+  "status")
+    if [ -f "$SCAN_FILE" ]; then
+      jq -r '"Status: \(.status) | Secrets: \(.findings.secrets) | Vulns: \(.findings.vulnerabilities) | NPM: \(.findings.npm_audit)"' "$SCAN_FILE"
+    else
+      echo "No scan data available"
+    fi
+    ;;
+  *) echo "Usage: $0 [run|check|force|status]" ;;
+esac

package/.claude/helpers/session.cjs

@@ -1,125 +1,125 @@
-#!/usr/bin/env node
-/**
- * Claude Flow Cross-Platform Session Manager
- * Works on Windows, macOS, and Linux
- */
-
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-
-const platform = os.platform();
-const homeDir = os.homedir();
-
-function getDataDir() {
-  const localDir = path.join(process.cwd(), '.claude-flow', 'sessions');
-  if (fs.existsSync(path.dirname(localDir))) {
-    return localDir;
-  }
-
-  switch (platform) {
-    case 'win32':
-      return path.join(process.env.APPDATA || homeDir, 'claude-flow', 'sessions');
-    case 'darwin':
-      return path.join(homeDir, 'Library', 'Application Support', 'claude-flow', 'sessions');
-    default:
-      return path.join(homeDir, '.claude-flow', 'sessions');
-  }
-}
-
-const SESSION_DIR = getDataDir();
-const SESSION_FILE = path.join(SESSION_DIR, 'current.json');
-
-function ensureDir(dir) {
-  if (!fs.existsSync(dir)) {
-    fs.mkdirSync(dir, { recursive: true });
-  }
-}
-
-const commands = {
-  start: () => {
-    ensureDir(SESSION_DIR);
-    const sessionId = `session-${Date.now()}`;
-    const session = {
-      id: sessionId,
-      startedAt: new Date().toISOString(),
-      platform: platform,
-      cwd: process.cwd(),
-      context: {},
-      metrics: { edits: 0, commands: 0, tasks: 0, errors: 0 }
-    };
-    fs.writeFileSync(SESSION_FILE, JSON.stringify(session, null, 2));
-    console.log(`Session started: ${sessionId}`);
-    return session;
-  },
-
-  restore: () => {
-    if (!fs.existsSync(SESSION_FILE)) {
-      console.log('No session to restore');
-      return null;
-    }
-    const session = JSON.parse(fs.readFileSync(SESSION_FILE, 'utf-8'));
-    session.restoredAt = new Date().toISOString();
-    fs.writeFileSync(SESSION_FILE, JSON.stringify(session, null, 2));
-    console.log(`Session restored: ${session.id}`);
-    return session;
-  },
-
-  end: () => {
-    if (!fs.existsSync(SESSION_FILE)) {
-      console.log('No active session');
-      return null;
-    }
-    const session = JSON.parse(fs.readFileSync(SESSION_FILE, 'utf-8'));
-    session.endedAt = new Date().toISOString();
-    session.duration = Date.now() - new Date(session.startedAt).getTime();
-
-    const archivePath = path.join(SESSION_DIR, `${session.id}.json`);
-    fs.writeFileSync(archivePath, JSON.stringify(session, null, 2));
-    fs.unlinkSync(SESSION_FILE);
-
-    console.log(`Session ended: ${session.id}`);
-    console.log(`Duration: ${Math.round(session.duration / 1000 / 60)} minutes`);
-    return session;
-  },
-
-  status: () => {
-    if (!fs.existsSync(SESSION_FILE)) {
-      console.log('No active session');
-      return null;
-    }
-    const session = JSON.parse(fs.readFileSync(SESSION_FILE, 'utf-8'));
-    const duration = Date.now() - new Date(session.startedAt).getTime();
-    console.log(`Session: ${session.id}`);
-    console.log(`Platform: ${session.platform}`);
-    console.log(`Started: ${session.startedAt}`);
-    console.log(`Duration: ${Math.round(duration / 1000 / 60)} minutes`);
-    return session;
-  },
-
-  metric: (name) => {
-    if (!fs.existsSync(SESSION_FILE)) {
-      return null;
-    }
-    const session = JSON.parse(fs.readFileSync(SESSION_FILE, 'utf-8'));
-    if (session.metrics[name] !== undefined) {
-      session.metrics[name]++;
-      fs.writeFileSync(SESSION_FILE, JSON.stringify(session, null, 2));
-    }
-    return session;
-  }
-};
-
-module.exports = commands;
-
-// CLI - only run when executed directly
-if (require.main === module) {
-  const [,, command, ...args] = process.argv;
-  if (command && commands[command]) {
-    commands[command](...args);
-  } else {
-    console.log('Usage: session.js <start|restore|end|status|metric>');
-    console.log(`Platform: ${platform}`);
-    console.log(`Data dir: ${SESSION_DIR}`);
-  }
-}
+#!/usr/bin/env node
+/**
+ * Claude Flow Cross-Platform Session Manager
+ * Works on Windows, macOS, and Linux
+ */
+
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+
+const platform = os.platform();
+const homeDir = os.homedir();
+
+function getDataDir() {
+  const localDir = path.join(process.cwd(), '.claude-flow', 'sessions');
+  if (fs.existsSync(path.dirname(localDir))) {
+    return localDir;
+  }
+
+  switch (platform) {
+    case 'win32':
+      return path.join(process.env.APPDATA || homeDir, 'claude-flow', 'sessions');
+    case 'darwin':
+      return path.join(homeDir, 'Library', 'Application Support', 'claude-flow', 'sessions');
+    default:
+      return path.join(homeDir, '.claude-flow', 'sessions');
+  }
+}
+
+const SESSION_DIR = getDataDir();
+const SESSION_FILE = path.join(SESSION_DIR, 'current.json');
+
+function ensureDir(dir) {
+  if (!fs.existsSync(dir)) {
+    fs.mkdirSync(dir, { recursive: true });
+  }
+}
+
+const commands = {
+  start: () => {
+    ensureDir(SESSION_DIR);
+    const sessionId = `session-${Date.now()}`;
+    const session = {
+      id: sessionId,
+      startedAt: new Date().toISOString(),
+      platform: platform,
+      cwd: process.cwd(),
+      context: {},
+      metrics: { edits: 0, commands: 0, tasks: 0, errors: 0 }
+    };
+    fs.writeFileSync(SESSION_FILE, JSON.stringify(session, null, 2));
+    console.log(`Session started: ${sessionId}`);
+    return session;
+  },
+
+  restore: () => {
+    if (!fs.existsSync(SESSION_FILE)) {
+      console.log('No session to restore');
+      return null;
+    }
+    const session = JSON.parse(fs.readFileSync(SESSION_FILE, 'utf-8'));
+    session.restoredAt = new Date().toISOString();
+    fs.writeFileSync(SESSION_FILE, JSON.stringify(session, null, 2));
+    console.log(`Session restored: ${session.id}`);
+    return session;
+  },
+
+  end: () => {
+    if (!fs.existsSync(SESSION_FILE)) {
+      console.log('No active session');
+      return null;
+    }
+    const session = JSON.parse(fs.readFileSync(SESSION_FILE, 'utf-8'));
+    session.endedAt = new Date().toISOString();
+    session.duration = Date.now() - new Date(session.startedAt).getTime();
+
+    const archivePath = path.join(SESSION_DIR, `${session.id}.json`);
+    fs.writeFileSync(archivePath, JSON.stringify(session, null, 2));
+    fs.unlinkSync(SESSION_FILE);
+
+    console.log(`Session ended: ${session.id}`);
+    console.log(`Duration: ${Math.round(session.duration / 1000 / 60)} minutes`);
+    return session;
+  },
+
+  status: () => {
+    if (!fs.existsSync(SESSION_FILE)) {
+      console.log('No active session');
+      return null;
+    }
+    const session = JSON.parse(fs.readFileSync(SESSION_FILE, 'utf-8'));
+    const duration = Date.now() - new Date(session.startedAt).getTime();
+    console.log(`Session: ${session.id}`);
+    console.log(`Platform: ${session.platform}`);
+    console.log(`Started: ${session.startedAt}`);
+    console.log(`Duration: ${Math.round(duration / 1000 / 60)} minutes`);
+    return session;
+  },
+
+  metric: (name) => {
+    if (!fs.existsSync(SESSION_FILE)) {
+      return null;
+    }
+    const session = JSON.parse(fs.readFileSync(SESSION_FILE, 'utf-8'));
+    if (session.metrics[name] !== undefined) {
+      session.metrics[name]++;
+      fs.writeFileSync(SESSION_FILE, JSON.stringify(session, null, 2));
+    }
+    return session;
+  }
+};
+
+module.exports = commands;
+
+// CLI - only run when executed directly
+if (require.main === module) {
+  const [,, command, ...args] = process.argv;
+  if (command && commands[command]) {
+    commands[command](...args);
+  } else {
+    console.log('Usage: session.js <start|restore|end|status|metric>');
+    console.log(`Platform: ${platform}`);
+    console.log(`Data dir: ${SESSION_DIR}`);
+  }
+}

package/.claude/helpers/setup-mcp.sh

@@ -1,18 +1,18 @@
-#!/bin/bash
-# Setup MCP server for Claude Flow
-
-echo "🚀 Setting up Claude Flow MCP server..."
-
-# Check if claude command exists
-if ! command -v claude &> /dev/null; then
-    echo "❌ Error: Claude Code CLI not found"
-    echo "Please install Claude Code first"
-    exit 1
-fi
-
-# Add MCP server
-echo "📦 Adding Claude Flow MCP server..."
-claude mcp add claude-flow npx claude-flow mcp start
-
-echo "✅ MCP server setup complete!"
-echo "🎯 You can now use mcp__claude-flow__ tools in Claude Code"
+#!/bin/bash
+# Setup MCP server for Claude Flow
+
+echo "🚀 Setting up Claude Flow MCP server..."
+
+# Check if claude command exists
+if ! command -v claude &> /dev/null; then
+    echo "❌ Error: Claude Code CLI not found"
+    echo "Please install Claude Code first"
+    exit 1
+fi
+
+# Add MCP server
+echo "📦 Adding Claude Flow MCP server..."
+claude mcp add claude-flow npx claude-flow mcp start
+
+echo "✅ MCP server setup complete!"
+echo "🎯 You can now use mcp__claude-flow__ tools in Claude Code"