@andyqiu/codeforge 0.8.12 → 0.8.14

package/bin/codeforge.mjs

@@ -255,7 +255,7 @@ async function cmdUpgrade(args) {
   const installTarget = latestVersion
     ? `@andyqiu/codeforge@${latestVersion}`
     : "@andyqiu/codeforge@latest"
-  const npmArgs = ["install", "-g", installTarget]
+  const npmArgs = ["install", "-g", installTarget, "--no-audit", "--no-fund", "--prefer-offline"]
 
   if (dryRun) {
     const displayNew = latestVersion ?? "未知（版本查询失败）"
@@ -264,20 +264,21 @@ async function cmdUpgrade(args) {
     return 0
   }
 
-  const r = spawnSync(npmCmd, npmArgs, { stdio: "pipe" })
+  const r = spawnSync(npmCmd, npmArgs, {
+    stdio: "inherit",
+    env: {
+      ...process.env,
+      npm_config_audit: "false",
+      npm_config_fund: "false",
+    },
+  })
   if (r.status !== 0) {
-    if (r.stderr) process.stderr.write(r.stderr)
-    if (r.stdout) process.stderr.write(r.stdout)
     err(`npm install 失败 (exit=${r.status ?? 1})`)
     err(`提示：可手动跑 npm install -g ${installTarget}`)
     return 1
   }
 
-  const code = installOpencode({ scope: "global", dryRun: false, extraArgs: ["--skip-build"], quiet: true })
-  if (code !== 0) {
-    err(`install --global 失败 (exit=${code})`)
-    return 1
-  }
+  // postinstall 已自动跑 codeforge install --global，无需重复执行
 
   // 升级后读取新版本（npm install 成功后本地 package.json 已更新）
   const newVersion = latestVersion ?? getVersion()

package/dist/index.js

@@ -32690,7 +32690,7 @@ import * as https from "node:https";
 // lib/version-injected.ts
 function getInjectedVersion() {
   try {
-    const v = "0.8.12";
+    const v = "0.8.14";
     if (typeof v === "string" && /^\d+\.\d+\.\d+/.test(v)) {
       return v;
     }

package/install.mjs

@@ -198,7 +198,7 @@ function rmrf(p) {
 
 function commandExists(cmd) {
   try {
-    const r = spawnSync(cmd, ["--version"], { stdio: "pipe", shell: IS_WIN })
+    const r = spawnSync(cmd, ["--version"], { stdio: "pipe", shell: IS_WIN, timeout: 5000 })
     return r.status === 0 || (r.error == null && r.status != null)
   } catch {
     return false
@@ -342,6 +342,7 @@ function ensureGlobalPluginDeps() {
     cwd: opencodeDir,
     stdio: VERBOSE ? "inherit" : "pipe",
     shell: IS_WIN,
+    timeout: 30000,
   })
   if (r.status !== 0) {
     if (!VERBOSE) {
@@ -440,7 +441,7 @@ function restoreDefaultAgent({ mode }) {
 // E. 文件分发（全 vlog，不进 summary）
 // ────────────────────────────────────────────────────────────────────
 function detectOpencode() {
-  const r = spawnSync("opencode", ["--version"], { stdio: "pipe", encoding: "utf8", shell: IS_WIN })
+  const r = spawnSync("opencode", ["--version"], { stdio: "pipe", encoding: "utf8", shell: IS_WIN, timeout: 8000 })
   if (r.status === 0) {
     vok(`检测到 opencode: ${(r.stdout ?? "").trim()}`)
   } else {
@@ -455,7 +456,7 @@ function buildBundle({ skipBuild }) {
   } else if (DRY_RUN) {
     vlog(`[dry-run] npm run build`)
   } else {
-    const r = spawnSync("npm", ["run", "build"], { cwd: SOURCE_ROOT, stdio: VERBOSE ? "inherit" : "pipe", shell: IS_WIN })
+    const r = spawnSync("npm", ["run", "build"], { cwd: SOURCE_ROOT, stdio: VERBOSE ? "inherit" : "pipe", shell: IS_WIN, timeout: 120000 })
     if (r.status !== 0) {
       if (!VERBOSE) {
         if (r.stdout) process.stderr.write(r.stdout)
@@ -780,7 +781,7 @@ function regenerateDevShim() {
     vlog(`[dry-run] node scripts/dev-sync.mjs --no-build`)
     return
   }
-  spawnSync(process.execPath, [devSync, "--no-build"], { cwd: SOURCE_ROOT, stdio: "pipe" })
+  spawnSync(process.execPath, [devSync, "--no-build"], { cwd: SOURCE_ROOT, stdio: "pipe", timeout: 10000 })
   vlog(`dev shim regenerated (.opencode/plugins/codeforge-dev.js)`)
 }
 
@@ -807,7 +808,7 @@ function installKhConfig({ mode, codeforgeCfgDir }) {
 function verifyInstall({ mode, targetRoot }) {
   // 1. git 版本 >= 2.5
   if (commandExists("git")) {
-    const r = spawnSync("git", ["--version"], { stdio: "pipe", encoding: "utf8", shell: IS_WIN })
+    const r = spawnSync("git", ["--version"], { stdio: "pipe", encoding: "utf8", shell: IS_WIN, timeout: 5000 })
     const m = /(\d+)\.(\d+)/.exec(r.stdout ?? "")
     const major = m ? parseInt(m[1], 10) : 0
     const minor = m ? parseInt(m[2], 10) : 0
@@ -822,7 +823,7 @@ function verifyInstall({ mode, targetRoot }) {
 
   // 1b. git rev-parse --git-dir
   if (commandExists("git")) {
-    const r = spawnSync("git", ["rev-parse", "--git-dir"], { stdio: "pipe", shell: IS_WIN })
+    const r = spawnSync("git", ["rev-parse", "--git-dir"], { stdio: "pipe", shell: IS_WIN, timeout: 5000 })
     if (r.status === 0) {
       vok(`当前目录是 git 仓库（git rev-parse --git-dir ✓）`)
     } else if (mode === "project") {
@@ -834,7 +835,7 @@ function verifyInstall({ mode, targetRoot }) {
 
   // 2. opencode 已安装
   if (commandExists("opencode")) {
-    const r = spawnSync("opencode", ["--version"], { stdio: "pipe", encoding: "utf8", shell: IS_WIN })
+    const r = spawnSync("opencode", ["--version"], { stdio: "pipe", encoding: "utf8", shell: IS_WIN, timeout: 8000 })
     vok(`opencode ${(r.stdout ?? "").trim() || "unknown"}`)
   } else {
     addWarn(`opencode 未在 PATH 中；CodeForge 无入口可用（请先安装 opencode）`)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@andyqiu/codeforge",
-  "version": "0.8.12",
+  "version": "0.8.14",
   "description": "CodeForge — opencode 的零侵入扩展包",
   "type": "module",
   "private": false,