mova-claude-import 0.1.1 → 0.1.2

package/fixtures/pos/control_basic_project/mova/control_v0.json

@@ -0,0 +1,93 @@
+{
+  "$schema": "https://mova.dev/schemas/mova.control_v0.schema.json",
+  "version": "control_v0",
+  "claude_md": {
+    "inject_control_entry": true,
+    "marker": "<!-- MOVA_CONTROL_ENTRY_V0 -->",
+    "priority_sources": ["CLAUDE.md", ".claude/CLAUDE.md", "~/.claude/CLAUDE.md"]
+  },
+  "claude_memory": {
+    "enable": true,
+    "sources": ["CLAUDE.md"]
+  },
+  "overlay": {
+    "enable": true
+  },
+  "settings": {
+    "include_co_authored_by": true,
+    "env": {}
+  },
+  "mcp": {
+    "servers": {},
+    "enable_all_project_mcp_servers": false,
+    "enabled_mcpjson_servers": [],
+    "env_substitutions": {
+      "format": "${VAR}",
+      "default_format": "${VAR:-default}"
+    }
+  },
+  "policy": {
+    "mode": "report_only",
+    "hooks": {
+      "enable": true,
+      "on_invalid_hook": "report_only",
+      "definitions": [],
+      "events": {}
+    },
+    "permissions": {
+      "allow": [],
+      "deny": [],
+      "on_conflict": "deny_wins",
+      "on_unknown": "report_only"
+    },
+    "plugins": {
+      "enable": true,
+      "allowed_plugin_ids": [],
+      "denied_plugin_ids": [],
+      "on_unknown": "report_only",
+      "enabled_plugins": {}
+    }
+  },
+  "lsp": {
+    "enabled_plugins": [],
+    "config_path": ".claude/lsp.json",
+    "managed": false
+  },
+  "skill_eval": {
+    "enable": false,
+    "hooks": {
+      "shell": ".claude/hooks/skill-eval.sh",
+      "node": ".claude/hooks/skill-eval.js"
+    },
+    "rules_path": ".claude/hooks/skill-rules.json",
+    "scoring": {
+      "threshold": 0.6
+    }
+  },
+  "observability": {
+    "enable": true,
+    "mode": "report_only",
+    "writer": {
+      "type": "node",
+      "script_path": ".claude/hooks/mova-observe.js"
+    },
+    "output_dir": ".mova/episodes",
+    "stdout_tail_bytes": 4000,
+    "stderr_tail_bytes": 4000,
+    "max_event_bytes": 20000,
+    "tail_lines": 50,
+    "include_tools": ["Bash", "Read", "Edit", "MultiEdit", "Write"],
+    "include_events": ["PostToolUse", "UserPromptSubmit", "Stop"]
+  },
+  "assets": {
+    "skills": [],
+    "agents": [],
+    "commands": [],
+    "rules": [],
+    "hooks": [],
+    "workflows": [],
+    "docs": [],
+    "dotfiles": [],
+    "schemas": []
+  }
+}

package/fixtures/pos/observability_basic/CLAUDE.md

@@ -0,0 +1,3 @@
+# Observability Basic
+
+Minimal fixture for observability writer tests.

package/{.tmp_test_zip/out1 → fixtures/pos/preset_safe_observable_v0}/.mcp.json

@@ -1,3 +1,3 @@
-{
-  "servers": []
-}
+{
+  "servers": []
+}

package/fixtures/pos/preset_safe_observable_v0/CLAUDE.md

@@ -0,0 +1,3 @@
+# Preset Safe Observable Fixture
+
+Minimal fixture for preset overlay tests.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mova-claude-import",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "main": "index.js",
   "scripts": {
     "test": "node --test",
@@ -11,6 +11,7 @@
     "docs:check": "npm run docs:bindings -- --check",
     "demo": "node tools/demo_v0.mjs",
     "demo:clean": "node -e \"require('fs').rmSync('.tmp_demo',{recursive:true,force:true})\"",
+    "smoke": "node tools/smoke_v0.mjs",
     "quality": "node dist/quality_v0.js --suite pos",
     "quality:neg": "node dist/quality_v0.js --suite neg"
   },

package/presets/safe_observable_v0/assets/.claude/agents/code-reviewer.md

@@ -0,0 +1,9 @@
+# Code Reviewer
+
+Focus on correctness, regressions, and missing tests.
+
+Checklist:
+- Identify behavior changes and edge cases.
+- Look for unsafe file operations or permission changes.
+- Verify hooks, settings, and mcp changes are consistent.
+- Call out missing tests for new paths.

package/presets/safe_observable_v0/assets/.claude/commands/finish.md

@@ -0,0 +1,9 @@
+# /finish
+
+Purpose: close the session with verified changes and explicit outputs.
+
+Checklist:
+- Run relevant tests/formatting (if any).
+- Summarize changed files and rationale.
+- Note any follow-up tasks or risks.
+- Ensure outputs are saved to disk (no hidden state).

package/presets/safe_observable_v0/assets/.claude/commands/start.md

@@ -0,0 +1,9 @@
+# /start
+
+Purpose: start a focused session and set ground truth in files.
+
+Checklist:
+- Read `CLAUDE.md` and relevant rules.
+- Confirm branch is not `main`.
+- Identify target files and expected outputs.
+- Write or update a brief plan in `MOVA.md` if present.

package/presets/safe_observable_v0/assets/.claude/hooks/skill-eval.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+const prompt = process.env.CLAUDE_USER_PROMPT || process.env.CLAUDE_PROMPT || "";
+let skill = "general";
+
+if (/test|tdd|mock|coverage/i.test(prompt)) {
+  skill = "testing-patterns";
+} else if (/debug|trace|repro|bug/i.test(prompt)) {
+  skill = "systematic-debugging";
+} else if (/security|vuln|xss|csrf|auth/i.test(prompt)) {
+  skill = "security-basics";
+} else if (/git|branch|merge|rebase/i.test(prompt)) {
+  skill = "git-workflow";
+}
+
+process.stdout.write(JSON.stringify({ feedback: `skill-eval: ${skill}`, suppressOutput: true }));

package/presets/safe_observable_v0/assets/.claude/hooks/skill-eval.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+prompt="${CLAUDE_USER_PROMPT:-${CLAUDE_PROMPT:-}}"
+skill="general"
+
+if echo "$prompt" | grep -qi "test\\|tdd\\|mock\\|coverage"; then
+  skill="testing-patterns"
+elif echo "$prompt" | grep -qi "debug\\|trace\\|repro\\|bug"; then
+  skill="systematic-debugging"
+elif echo "$prompt" | grep -qi "security\\|vuln\\|xss\\|csrf\\|auth"; then
+  skill="security-basics"
+elif echo "$prompt" | grep -qi "git\\|branch\\|merge\\|rebase"; then
+  skill="git-workflow"
+fi
+
+echo "{\"feedback\": \"skill-eval: ${skill}\", \"suppressOutput\": true}"

package/presets/safe_observable_v0/assets/.claude/hooks/skill-rules.json

@@ -0,0 +1,26 @@
+{
+  "version": "v0",
+  "threshold": 0.6,
+  "rules": [
+    {
+      "id": "testing-patterns",
+      "keywords": ["test", "tdd", "mock", "coverage"],
+      "score": 0.8
+    },
+    {
+      "id": "systematic-debugging",
+      "keywords": ["debug", "trace", "repro", "bug"],
+      "score": 0.8
+    },
+    {
+      "id": "security-basics",
+      "keywords": ["security", "vuln", "xss", "csrf", "auth"],
+      "score": 0.8
+    },
+    {
+      "id": "git-workflow",
+      "keywords": ["git", "branch", "merge", "rebase"],
+      "score": 0.7
+    }
+  ]
+}

package/presets/safe_observable_v0/assets/.claude/rules/code-style.md

@@ -0,0 +1,6 @@
+# Code Style
+
+- Prefer clear, explicit naming over brevity.
+- Keep functions small; refactor if they grow complex.
+- Avoid global side effects; pass dependencies explicitly.
+- Use stable formatting (no manual alignment).

package/presets/safe_observable_v0/assets/.claude/rules/security.md

@@ -0,0 +1,6 @@
+# Security
+
+- Do not log secrets or tokens.
+- Use environment variables for credentials.
+- Avoid unsafe shell patterns (curl | sh, sudo, rm -rf).
+- Validate external inputs before use.

package/presets/safe_observable_v0/assets/.claude/skills/git-workflow/SKILL.md

@@ -0,0 +1,9 @@
+# Git Workflow
+
+Focus: keep history clean and changes reviewable.
+
+Guidelines:
+- Work on feature branches, not main.
+- Make small, focused commits.
+- Explain intent in commit messages.
+- Keep generated files out of commits.

package/presets/safe_observable_v0/assets/.claude/skills/security-basics/SKILL.md

@@ -0,0 +1,9 @@
+# Security Basics
+
+Focus: avoid unsafe defaults and handle secrets carefully.
+
+Guidelines:
+- Never print secrets to logs.
+- Validate external input and sanitize paths.
+- Prefer least-privilege behavior.
+- Flag risky operations before running them.

package/presets/safe_observable_v0/assets/.claude/skills/systematic-debugging/SKILL.md

@@ -0,0 +1,9 @@
+# Systematic Debugging
+
+Focus: isolate the failure with evidence and minimal changes.
+
+Guidelines:
+- Reproduce with a small, stable case.
+- Narrow the scope before proposing fixes.
+- Log or trace only what you need.
+- Confirm the fix with a regression test.

package/presets/safe_observable_v0/assets/.claude/skills/testing-patterns/SKILL.md

@@ -0,0 +1,9 @@
+# Testing Patterns
+
+Focus: build small, reliable tests around observed behavior.
+
+Guidelines:
+- Start from a failing example, then fix.
+- Prefer targeted tests over broad suites.
+- Use clear names that describe expected behavior.
+- Keep fixtures minimal and deterministic.

package/presets/safe_observable_v0/control_v0.json

@@ -0,0 +1,214 @@
+{
+  "$schema": "https://mova.dev/schemas/mova.control_v0.schema.json",
+  "version": "control_v0",
+  "claude_md": {
+    "inject_control_entry": true,
+    "marker": "<!-- MOVA_CONTROL_ENTRY_V0 -->",
+    "priority_sources": ["CLAUDE.md", ".claude/CLAUDE.md", "~/.claude/CLAUDE.md"]
+  },
+  "claude_memory": {
+    "enable": true,
+    "sources": ["CLAUDE.md"]
+  },
+  "overlay": {
+    "enable": true
+  },
+  "settings": {
+    "include_co_authored_by": true,
+    "env": {}
+  },
+  "mcp": {
+    "servers": {},
+    "enable_all_project_mcp_servers": false,
+    "enabled_mcpjson_servers": [],
+    "env_substitutions": {
+      "format": "${VAR}",
+      "default_format": "${VAR:-default}"
+    }
+  },
+  "policy": {
+    "mode": "report_only",
+    "hooks": {
+      "enable": true,
+      "on_invalid_hook": "report_only",
+      "definitions": [],
+      "events": {
+        "PreToolUse": [
+          {
+            "matcher": "Edit|MultiEdit|Write",
+            "hooks": [
+              {
+                "type": "command",
+                "command": "[ \"$(git branch --show-current)\" != \"main\" ] || { echo '{\"block\": true, \"message\": \"Cannot edit files on main branch. Create a feature branch first.\"}' >&2; exit 2; }",
+                "timeout": 5
+              }
+            ]
+          },
+          {
+            "matcher": "Bash",
+            "hooks": [
+              {
+                "type": "command",
+                "command": "if echo \"$CLAUDE_TOOL_INPUT\" | grep -E -i \"(rm\\\\s+-rf|sudo|curl\\\\s+[^|]+\\\\|\\\\s*sh|wget\\\\s+[^|]+\\\\|\\\\s*sh|mkfs\\\\.|dd\\\\s+if=|chmod\\\\s+777|chown\\\\s+root|\\\\.env|id_rsa|\\\\.pem)\"; then\n  echo '{\"block\": true, \"message\": \"Potentially dangerous command blocked.\"}' >&2\n  exit 2\nfi",
+                "timeout": 5
+              }
+            ]
+          }
+        ],
+        "PostToolUse": [
+          {
+            "matcher": "Edit|MultiEdit|Write",
+            "hooks": [
+              {
+                "type": "command",
+                "command": "if [[ \"$CLAUDE_TOOL_INPUT_FILE_PATH\" =~ \\\\.(js|jsx|ts|tsx)$ ]]; then\n  npx prettier --write \"$CLAUDE_TOOL_INPUT_FILE_PATH\" 2>&1\n  exit_code=$?\n  if [ $exit_code -ne 0 ]; then\n    echo '{\"feedback\": \"Formatting failed.\"}' >&2\n    exit 1\n  fi\n  echo '{\"feedback\": \"Formatting applied.\", \"suppressOutput\": true}'\nfi",
+                "timeout": 30
+              }
+            ]
+          },
+          {
+            "matcher": "Edit|MultiEdit|Write",
+            "hooks": [
+              {
+                "type": "command",
+                "command": "if [[ \"$CLAUDE_TOOL_INPUT_FILE_PATH\" =~ \\\\.test\\\\.(js|jsx|ts|tsx)$ ]]; then\n  npm test -- --findRelatedTests \"$CLAUDE_TOOL_INPUT_FILE_PATH\" --passWithNoTests 2>&1 | tail -30\n  exit 0\nfi",
+                "timeout": 90
+              }
+            ]
+          }
+        ],
+        "UserPromptSubmit": [
+          {
+            "hooks": [
+              {
+                "type": "command",
+                "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/hooks/skill-eval.sh",
+                "timeout": 5
+              }
+            ]
+          }
+        ]
+      }
+    },
+    "permissions": {
+      "allow": ["Bash", "Edit", "Read"],
+      "deny": [],
+      "on_conflict": "deny_wins",
+      "on_unknown": "report_only"
+    },
+    "plugins": {
+      "enable": true,
+      "allowed_plugin_ids": [],
+      "denied_plugin_ids": [],
+      "on_unknown": "report_only",
+      "enabled_plugins": {}
+    }
+  },
+  "lsp": {
+    "enabled_plugins": [],
+    "config_path": ".claude/lsp.json",
+    "managed": false
+  },
+  "skill_eval": {
+    "enable": true,
+    "hooks": {
+      "shell": ".claude/hooks/skill-eval.sh",
+      "node": ".claude/hooks/skill-eval.js"
+    },
+    "rules_path": ".claude/hooks/skill-rules.json",
+    "scoring": {
+      "threshold": 0.6
+    }
+  },
+  "observability": {
+    "enable": true,
+    "mode": "report_only",
+    "writer": {
+      "type": "node",
+      "script_path": ".claude/hooks/mova-observe.js"
+    },
+    "output_dir": ".mova/episodes",
+    "stdout_tail_bytes": 4000,
+    "stderr_tail_bytes": 4000,
+    "max_event_bytes": 20000,
+    "tail_lines": 50,
+    "include_tools": ["Bash", "Read", "Edit", "MultiEdit", "Write"],
+    "include_events": ["PostToolUse", "UserPromptSubmit", "Stop"]
+  },
+  "assets": {
+    "skills": [
+      {
+        "path": ".claude/skills/testing-patterns/SKILL.md",
+        "mode": "copy_through",
+        "source_path": ".claude/skills/testing-patterns/SKILL.md"
+      },
+      {
+        "path": ".claude/skills/systematic-debugging/SKILL.md",
+        "mode": "copy_through",
+        "source_path": ".claude/skills/systematic-debugging/SKILL.md"
+      },
+      {
+        "path": ".claude/skills/security-basics/SKILL.md",
+        "mode": "copy_through",
+        "source_path": ".claude/skills/security-basics/SKILL.md"
+      },
+      {
+        "path": ".claude/skills/git-workflow/SKILL.md",
+        "mode": "copy_through",
+        "source_path": ".claude/skills/git-workflow/SKILL.md"
+      }
+    ],
+    "agents": [
+      {
+        "path": ".claude/agents/code-reviewer.md",
+        "mode": "copy_through",
+        "source_path": ".claude/agents/code-reviewer.md"
+      }
+    ],
+    "commands": [
+      {
+        "path": ".claude/commands/start.md",
+        "mode": "copy_through",
+        "source_path": ".claude/commands/start.md"
+      },
+      {
+        "path": ".claude/commands/finish.md",
+        "mode": "copy_through",
+        "source_path": ".claude/commands/finish.md"
+      }
+    ],
+    "rules": [
+      {
+        "path": ".claude/rules/code-style.md",
+        "mode": "copy_through",
+        "source_path": ".claude/rules/code-style.md"
+      },
+      {
+        "path": ".claude/rules/security.md",
+        "mode": "copy_through",
+        "source_path": ".claude/rules/security.md"
+      }
+    ],
+    "hooks": [
+      {
+        "path": ".claude/hooks/skill-eval.sh",
+        "mode": "copy_through",
+        "source_path": ".claude/hooks/skill-eval.sh"
+      },
+      {
+        "path": ".claude/hooks/skill-eval.js",
+        "mode": "copy_through",
+        "source_path": ".claude/hooks/skill-eval.js"
+      },
+      {
+        "path": ".claude/hooks/skill-rules.json",
+        "mode": "copy_through",
+        "source_path": ".claude/hooks/skill-rules.json"
+      }
+    ],
+    "workflows": [],
+    "docs": [],
+    "dotfiles": [],
+    "schemas": []
+  }
+}