claude-mpm 4.1.26__py3-none-any.whl → 5.0.9__py3-none-any.whl

claude_mpm/hooks/templates/pre_tool_use_template.py

@@ -0,0 +1,323 @@
+#!/usr/bin/env python3
+"""
+PreToolUse Hook Template for Claude Code v2.0.30+
+
+This template demonstrates how to create PreToolUse hooks that can modify
+tool inputs before execution. Use cases include:
+
+1. Context Injection: Add project context to Read/Edit operations
+2. Security Guards: Validate file paths before operations
+3. Logging: Log tool invocations before execution
+4. Parameter Enhancement: Add default parameters to tool calls
+
+Requirements:
+- Claude Code v2.0.30 or higher
+- Hook must be configured with "modifyInput": true in settings.json
+
+Input Format (stdin):
+{
+  "hook_event_name": "PreToolUse",
+  "tool_name": "Edit",
+  "tool_input": {
+    "file_path": "/path/to/file.py",
+    "old_string": "foo",
+    "new_string": "bar"
+  },
+  "session_id": "abc123...",
+  "cwd": "/working/directory"
+}
+
+Output Format (stdout):
+{
+  "action": "continue",
+  "tool_input": {
+    "file_path": "/path/to/file.py",
+    "old_string": "foo",
+    "new_string": "bar_modified"
+  }
+}
+
+Or to block execution:
+{
+  "action": "block",
+  "message": "Reason for blocking"
+}
+
+Or to continue without modification:
+{
+  "action": "continue"
+}
+"""
+
+import json
+import os
+import sys
+from pathlib import Path
+from typing import Any, Dict, Optional
+
+
+class PreToolUseHook:
+    """Base class for PreToolUse hooks with input modification support."""
+
+    def __init__(self):
+        """Initialize the hook."""
+        self.debug = os.environ.get("CLAUDE_MPM_HOOK_DEBUG", "false").lower() == "true"
+
+    def log_debug(self, message: str) -> None:
+        """Log debug message to stderr."""
+        if self.debug:
+            print(f"[PreToolUse Hook] {message}", file=sys.stderr)
+
+    def read_event(self) -> Optional[Dict[str, Any]]:
+        """Read and parse the hook event from stdin."""
+        try:
+            event_data = sys.stdin.read()
+            if not event_data.strip():
+                return None
+            return json.loads(event_data)
+        except json.JSONDecodeError as e:
+            self.log_debug(f"Failed to parse event: {e}")
+            return None
+        except Exception as e:
+            self.log_debug(f"Error reading event: {e}")
+            return None
+
+    def continue_execution(
+        self, modified_input: Optional[Dict[str, Any]] = None
+    ) -> None:
+        """Continue execution with optional modified input."""
+        response = {"action": "continue"}
+        if modified_input is not None:
+            response["tool_input"] = modified_input
+        print(json.dumps(response))
+
+    def block_execution(self, message: str) -> None:
+        """Block execution with a message."""
+        response = {"action": "block", "message": message}
+        print(json.dumps(response))
+
+    def modify_input(
+        self, tool_name: str, tool_input: Dict[str, Any], event: Dict[str, Any]
+    ) -> Optional[Dict[str, Any]]:
+        """
+        Modify tool input before execution.
+
+        Override this method in subclasses to implement custom logic.
+
+        Args:
+            tool_name: Name of the tool being invoked
+            tool_input: Original tool input parameters
+            event: Full event data including session_id, cwd, etc.
+
+        Returns:
+            Modified tool input dict, or None to continue without modification
+        """
+        # Default: no modification
+        return None
+
+    def should_block(
+        self, tool_name: str, tool_input: Dict[str, Any], event: Dict[str, Any]
+    ) -> tuple[bool, str]:
+        """
+        Check if execution should be blocked.
+
+        Override this method in subclasses to implement validation logic.
+
+        Args:
+            tool_name: Name of the tool being invoked
+            tool_input: Original tool input parameters
+            event: Full event data including session_id, cwd, etc.
+
+        Returns:
+            Tuple of (should_block, reason)
+        """
+        # Default: don't block
+        return False, ""
+
+    def run(self) -> None:
+        """Main entry point for the hook."""
+        try:
+            # Read event from stdin
+            event = self.read_event()
+            if not event:
+                self.continue_execution()
+                return
+
+            tool_name = event.get("tool_name", "")
+            tool_input = event.get("tool_input", {})
+
+            self.log_debug(
+                f"Processing {tool_name} with input: {list(tool_input.keys())}"
+            )
+
+            # Check if execution should be blocked
+            should_block, reason = self.should_block(tool_name, tool_input, event)
+            if should_block:
+                self.log_debug(f"Blocking {tool_name}: {reason}")
+                self.block_execution(reason)
+                return
+
+            # Try to modify input
+            modified_input = self.modify_input(tool_name, tool_input, event)
+            if modified_input is not None:
+                self.log_debug(f"Modified {tool_name} input")
+                self.continue_execution(modified_input)
+            else:
+                self.log_debug(f"No modification for {tool_name}")
+                self.continue_execution()
+
+        except Exception as e:
+            self.log_debug(f"Hook error: {e}")
+            # Always continue on error to avoid blocking Claude
+            self.continue_execution()
+
+
+# ============================================================================
+# Example Implementations
+# ============================================================================
+
+
+class ContextInjectionHook(PreToolUseHook):
+    """
+    Example: Auto-inject project context into Read/Edit tool calls.
+
+    This hook adds project-specific context as comments to file operations.
+    """
+
+    def __init__(self):
+        super().__init__()
+        self.project_context = self._load_project_context()
+
+    def _load_project_context(self) -> str:
+        """Load project context from a file or environment."""
+        # Example: Load from .claude-context file
+        context_file = Path.cwd() / ".claude-context"
+        if context_file.exists():
+            return context_file.read_text()
+        return ""
+
+    def modify_input(
+        self, tool_name: str, tool_input: Dict[str, Any], event: Dict[str, Any]
+    ) -> Optional[Dict[str, Any]]:
+        """Inject context into Read operations."""
+        if tool_name == "Read" and self.project_context:
+            # Add context as a note (this is conceptual - actual implementation depends on use case)
+            modified = tool_input.copy()
+            # You could add context to a metadata field if the tool supports it
+            modified["_context"] = self.project_context[:200]
+            return modified
+        return None
+
+
+class SecurityGuardHook(PreToolUseHook):
+    """
+    Example: Validate file paths before file operations.
+
+    This hook blocks operations on sensitive files or directories.
+    """
+
+    BLOCKED_PATHS = [
+        ".env",
+        "credentials.json",
+        "secrets/",
+        ".ssh/",
+        "id_rsa",
+    ]
+
+    def should_block(
+        self, tool_name: str, tool_input: Dict[str, Any], event: Dict[str, Any]
+    ) -> tuple[bool, str]:
+        """Block operations on sensitive files."""
+        if tool_name in ["Write", "Edit", "Read"]:
+            file_path = tool_input.get("file_path", "")
+            if any(blocked in file_path for blocked in self.BLOCKED_PATHS):
+                return True, f"Access to sensitive file blocked: {file_path}"
+        return False, ""
+
+
+class LoggingHook(PreToolUseHook):
+    """
+    Example: Log all tool invocations before execution.
+
+    This hook logs tool calls to a file for debugging and audit purposes.
+    """
+
+    def __init__(self):
+        super().__init__()
+        self.log_file = Path.home() / ".claude-mpm" / "tool-calls.log"
+        self.log_file.parent.mkdir(exist_ok=True)
+
+    def modify_input(
+        self, tool_name: str, tool_input: Dict[str, Any], event: Dict[str, Any]
+    ) -> Optional[Dict[str, Any]]:
+        """Log the tool call."""
+        try:
+            from datetime import datetime, timezone
+
+            log_entry = {
+                "timestamp": datetime.now(timezone.utc).isoformat(),
+                "tool_name": tool_name,
+                "session_id": event.get("session_id", ""),
+                "cwd": event.get("cwd", ""),
+                "parameters": list(tool_input.keys()),
+            }
+            with self.log_file.open("a") as f:
+                f.write(json.dumps(log_entry) + "\n")
+        except Exception as e:
+            self.log_debug(f"Failed to log tool call: {e}")
+
+        # Don't modify input, just log
+        return None
+
+
+class ParameterEnhancementHook(PreToolUseHook):
+    """
+    Example: Add default parameters to tool calls.
+
+    This hook adds default values to tool parameters if not provided.
+    """
+
+    def modify_input(
+        self, tool_name: str, tool_input: Dict[str, Any], event: Dict[str, Any]
+    ) -> Optional[Dict[str, Any]]:
+        """Add default parameters."""
+        modified = tool_input.copy()
+
+        if tool_name == "Bash":
+            # Add default timeout if not specified
+            if "timeout" not in modified:
+                modified["timeout"] = 30000  # 30 seconds
+                return modified
+
+        elif tool_name == "Grep":
+            # Add line numbers by default
+            if "-n" not in modified:
+                modified["-n"] = True
+                return modified
+
+        return None
+
+
+# ============================================================================
+# Main Entry Point
+# ============================================================================
+
+
+def main():
+    """Main entry point - choose which hook implementation to use."""
+    # Select which hook implementation to use
+    # Uncomment the one you want to use:
+
+    # hook = ContextInjectionHook()
+    # hook = SecurityGuardHook()
+    # hook = LoggingHook()
+    # hook = ParameterEnhancementHook()
+
+    # Default: use base hook (no modification)
+    hook = PreToolUseHook()
+
+    hook.run()
+
+
+if __name__ == "__main__":
+    main()

claude_mpm/hooks/tool_call_interceptor.py

@@ -2,7 +2,7 @@
 
 import asyncio
 from collections import defaultdict
-from datetime import datetime
+from datetime import datetime, timezone
 from typing import Any, Dict, List, Optional
 
 from claude_mpm.core.logger import get_logger
@@ -105,7 +105,7 @@ class ToolCallInterceptor:
                 "parameters": parameters.copy(),  # Copy to avoid modifying original
             },
             metadata=metadata or {},
-            timestamp=datetime.now(),
+            timestamp=datetime.now(timezone.utc),
         )
 
         # Run hooks
@@ -125,10 +125,13 @@ class ToolCallInterceptor:
                         f"[{result.get('hook_name', 'Unknown')}] {result.get('error')}"
                     )
 
-            if result.get("modified") and result.get("data"):
+            if (
+                result.get("modified")
+                and result.get("data")
+                and "parameters" in result.get("data", {})
+            ):
                 # Update parameters if modified
-                if "parameters" in result.get("data", {}):
-                    modified_params = result["data"]["parameters"]
+                modified_params = result["data"]["parameters"]
 
             if result.get("metadata"):
                 hook_metadata.update(result["metadata"])

claude_mpm/hooks/validation_hooks.py

@@ -6,14 +6,14 @@ Validation hooks for claude-mpm operations.
 Inspired by awesome-claude-code's pre-push validation approach.
 """
 
-import logging
 from typing import Any, Callable, Dict, List, Optional
 
 import yaml
 
+from claude_mpm.core.logging_utils import get_logger
 from claude_mpm.validation import AgentValidator, ValidationResult
 
-logger = logging.getLogger(__name__)
+logger = get_logger(__name__)
 
 
 class ValidationHooks:
@@ -118,7 +118,7 @@ async def validate_agent_dependencies(profile_path: Path) -> ValidationResult:
     result = ValidationResult(is_valid=True)
 
     try:
-        with open(profile_path) as f:
+        with profile_path.open() as f:
             profile_data = yaml.safe_load(f)
 
         # Check for circular dependencies

claude_mpm/init.py

@@ -141,6 +141,25 @@ class ProjectInitializer:
             if not gitignore.exists():
                 gitignore.write_text("logs/\n*.log\n*.pyc\n__pycache__/\n")
 
+            # Also ensure MCP directories are in main project .gitignore
+            try:
+                from claude_mpm.services.project.project_organizer import (
+                    ProjectOrganizer,
+                )
+
+                # Check if we're in a git repository
+                if (project_root / ".git").exists():
+                    organizer = ProjectOrganizer(project_root)
+                    # This will add MCP directories and other standard patterns
+                    organizer.update_gitignore()
+                    self.logger.debug(
+                        "Updated project .gitignore with MCP and standard patterns"
+                    )
+            except Exception as e:
+                self.logger.debug(
+                    f"Could not update project gitignore with MCP patterns: {e}"
+                )
+
             # Log successful creation with details
             self.logger.info(f"Initialized project directory at {self.project_dir}")
             self.logger.debug("Created directories: agents, config, responses, logs")
@@ -251,11 +270,11 @@ class ProjectInitializer:
         """
         try:
             # Read existing JSON configuration
-            with open(old_file) as f:
+            with old_file.open() as f:
                 config = json.load(f)
 
             # Write as YAML
-            with open(new_file, "w") as f:
+            with new_file.open("w") as f:
                 yaml.dump(config, f, default_flow_style=False, sort_keys=False)
 
             self.logger.info(
@@ -291,7 +310,7 @@ class ProjectInitializer:
             },
         }
 
-        with open(config_file, "w") as f:
+        with config_file.open("w") as f:
             yaml.dump(default_config, f, default_flow_style=False, sort_keys=False)
 
     def _create_project_config(self, config_file: Path):
@@ -303,7 +322,7 @@ class ProjectInitializer:
             "tickets": {"auto_create": True, "prefix": "TSK"},
         }
 
-        with open(config_file, "w") as f:
+        with config_file.open("w") as f:
             json.dump(project_config, f, indent=2)
 
     def _copy_agent_templates(self):

claude_mpm/models/agent_session.py

@@ -13,7 +13,7 @@ chronological order for session replay and analysis.
 
 import json
 from dataclasses import asdict, dataclass, field
-from datetime import datetime
+from datetime import datetime, timezone
 from enum import Enum
 from typing import Any, Dict, List, Optional, Set
 
@@ -204,7 +204,7 @@ class AgentSession:
         and metric updates.
         """
         if timestamp is None:
-            timestamp = datetime.utcnow().isoformat() + "Z"
+            timestamp = datetime.now(timezone.utc).isoformat() + "Z"
 
         # Categorize the event
         category = self._categorize_event(event_type, data)
@@ -338,7 +338,7 @@ class AgentSession:
                             event.timestamp.replace("Z", "+00:00")
                         )
                         tool_op.duration_ms = int((end - start).total_seconds() * 1000)
-                    except:
+                    except Exception:
                         pass
 
                     event.correlation_id = corr_id
@@ -393,7 +393,7 @@ class AgentSession:
                 self.metrics.session_duration_ms = int(
                     (end - start).total_seconds() * 1000
                 )
-            except:
+            except Exception:
                 pass
 
         # Finalize any pending delegations
@@ -448,7 +448,7 @@ class AgentSession:
         filepath = directory / filename
 
         # Save to file
-        with open(filepath, "w", encoding="utf-8") as f:
+        with filepath.open("w", encoding="utf-8") as f:
             json.dump(self.to_dict(), f, indent=2, ensure_ascii=False)
 
         return str(filepath)
@@ -531,6 +531,8 @@ class AgentSession:
 
         WHY: Enables analysis of historical sessions.
         """
-        with open(filepath, encoding="utf-8") as f:
+        with Path(filepath).open(
+            encoding="utf-8",
+        ) as f:
             data = json.load(f)
         return cls.from_dict(data)

claude_mpm/models/git_repository.py

@@ -0,0 +1,198 @@
+"""Git repository model for agent sources."""
+
+from dataclasses import dataclass
+from datetime import datetime
+from pathlib import Path
+from typing import Optional
+from urllib.parse import urlparse
+
+
+@dataclass
+class GitRepository:
+    """Represents a Git repository configuration for agent sources.
+
+    This model tracks Git repositories that contain agent markdown files.
+    Repositories are cached locally and synced using ETag-based HTTP caching.
+
+    Attributes:
+        url: Full GitHub repository URL (e.g., https://github.com/owner/repo)
+        subdirectory: Optional subdirectory within repository (e.g., "agents/backend")
+        enabled: Whether this repository should be synced
+        priority: Priority for agent resolution (lower = higher precedence)
+        last_synced: Timestamp of last successful sync
+        etag: HTTP ETag from last sync for incremental updates
+    """
+
+    url: str
+    subdirectory: Optional[str] = None
+    enabled: bool = True
+    priority: int = 100
+    last_synced: Optional[datetime] = None
+    etag: Optional[str] = None
+
+    @property
+    def cache_path(self) -> Path:
+        """Return cache directory path for this repository.
+
+        Cache structure: ~/.claude-mpm/cache/remote-agents/{owner}/{repo}/{subdirectory}/
+
+        Returns:
+            Absolute path to cache directory for this repository
+
+        Example:
+            >>> repo = GitRepository(
+            ...     url="https://github.com/bobmatnyc/claude-mpm-agents",
+            ...     subdirectory="agents"
+            ... )
+            >>> repo.cache_path
+            Path('/Users/user/.claude-mpm/cache/remote-agents/bobmatnyc/claude-mpm-agents/agents')
+        """
+        home = Path.home()
+        base_cache = home / ".claude-mpm" / "cache" / "remote-agents"
+
+        # Extract owner and repo from URL
+        owner, repo = self._parse_github_url(self.url)
+
+        # Build cache path: base/owner/repo/subdirectory
+        cache_path = base_cache / owner / repo
+
+        if self.subdirectory:
+            # Normalize subdirectory path (remove leading/trailing slashes)
+            normalized_subdir = self.subdirectory.strip("/")
+            cache_path = cache_path / normalized_subdir
+
+        return cache_path
+
+    @property
+    def identifier(self) -> str:
+        """Return unique identifier for this repository.
+
+        Format: {owner}/{repo}/{subdirectory} or {owner}/{repo}
+
+        Returns:
+            Unique identifier string
+
+        Example:
+            >>> repo = GitRepository(
+            ...     url="https://github.com/owner/repo",
+            ...     subdirectory="agents"
+            ... )
+            >>> repo.identifier
+            'owner/repo/agents'
+        """
+        owner, repo = self._parse_github_url(self.url)
+        base_id = f"{owner}/{repo}"
+
+        if self.subdirectory:
+            normalized_subdir = self.subdirectory.strip("/")
+            return f"{base_id}/{normalized_subdir}"
+
+        return base_id
+
+    def validate(self) -> list[str]:
+        """Validate repository configuration.
+
+        Returns:
+            List of validation error messages (empty if valid)
+
+        Validation checks:
+            - URL is not empty
+            - URL is valid HTTP/HTTPS format
+            - URL is a GitHub repository URL
+            - Priority is non-negative
+            - Priority is reasonable (<= 1000, warning only)
+            - Subdirectory is relative path (not absolute)
+        """
+        errors = []
+
+        # Validate URL
+        if not self.url or not self.url.strip():
+            errors.append("URL cannot be empty")
+            return errors  # Can't continue validation without URL
+
+        # Check URL format
+        try:
+            parsed = urlparse(self.url)
+
+            # Must be HTTP or HTTPS
+            if parsed.scheme not in ("http", "https"):
+                errors.append(
+                    f"URL must use http:// or https:// protocol, got: {parsed.scheme}"
+                )
+
+            # Must be GitHub (for now)
+            if not parsed.netloc.endswith("github.com"):
+                errors.append(f"URL must be a GitHub repository, got: {parsed.netloc}")
+
+            # Should have owner/repo path structure
+            path_parts = [p for p in parsed.path.strip("/").split("/") if p]
+            if len(path_parts) < 2:
+                errors.append(f"URL must include owner/repo path, got: {parsed.path}")
+
+        except Exception as e:
+            errors.append(f"Invalid URL format: {e}")
+
+        # Validate priority
+        if self.priority < 0:
+            errors.append("Priority must be non-negative (0 or greater)")
+
+        if self.priority > 1000:
+            errors.append(
+                f"Priority {self.priority} is unusually high (recommended: 0-1000). "
+                "Lower priority numbers have higher precedence."
+            )
+
+        # Validate subdirectory
+        if self.subdirectory:
+            # Must be relative path
+            if Path(self.subdirectory).is_absolute():
+                errors.append(
+                    f"Subdirectory must be a relative path, got absolute: {self.subdirectory}"
+                )
+
+            # Should not start with slash
+            if self.subdirectory.startswith("/"):
+                errors.append(
+                    f"Subdirectory should not start with '/', got: {self.subdirectory}"
+                )
+
+        return errors
+
+    def _parse_github_url(self, url: str) -> tuple[str, str]:
+        """Parse GitHub URL to extract owner and repository name.
+
+        Args:
+            url: GitHub repository URL
+
+        Returns:
+            Tuple of (owner, repository_name)
+
+        Example:
+            >>> repo = GitRepository(url="https://github.com/owner/repo")
+            >>> repo._parse_github_url(repo.url)
+            ('owner', 'repo')
+        """
+        # Remove .git suffix if present
+        url = url.rstrip("/")
+        if url.endswith(".git"):
+            url = url[:-4]
+
+        # Parse URL
+        parsed = urlparse(url)
+        path_parts = [p for p in parsed.path.strip("/").split("/") if p]
+
+        if len(path_parts) >= 2:
+            owner = path_parts[0]
+            repo = path_parts[1]
+            return owner, repo
+
+        # Fallback: Use URL as-is if parsing fails
+        # This will be caught by validation
+        return "unknown", "unknown"
+
+    def __repr__(self) -> str:
+        """Return string representation of repository."""
+        return (
+            f"GitRepository(identifier='{self.identifier}', "
+            f"priority={self.priority}, enabled={self.enabled})"
+        )