@colin4k1024/tsp 2.4.7 → 2.4.9

package/README.md

@@ -65,7 +65,7 @@ TSP 整合了多个社区开源框架的精华能力，而非从零构建：
 |------|------|--------------|
 | **ECC** (Everything Claude Code) | 社区 | 125+ specialist skills、27 specialist agents、language rules packs、runtime hooks、安装工具链 |
 | **BMAD** | 方法来源（已吸收） | 单入口主链（`/team-help`）、Requirement Challenge、Design Review、Implementation Readiness、Story Slice、`artifact:persist` 落盘、Release→Closeout 收口 |
-| **CodeGraph** | 社区（`colbymchenry/codegraph`） | 默认内置 MCP-backed 代码图谱能力（符号搜索、调用链、impact、focused context），以 npm 依赖 + target-scoped installer wrapper + 本地 skill 接入 |
+| **CodeGraph** | 社区（`colbymchenry/codegraph`） | 默认内置 MCP-backed 代码图谱能力（符号搜索、调用链、impact、focused context），以官方 standalone installer + target-scoped wrapper + Claude 自动初始化 hook 接入 |
 | **Graphify** | 社区（`safishamsi/graphify`） | 可选知识图谱能力（brownfield 结构扫描、依赖路径分析、架构问答证据），以 runbook + 本地 skill 接入，不替换 workflow-engine |
 | **GitNexus** | 社区（`abhigyanpatwari/GitNexus`） | 受控可选代码智能能力（MCP 查询、impact、detect_changes、多仓图谱证据），以 runbook + thin skill 接入，不内置依赖 |
 | **Open Design** | 社区（`nexu-io/open-design`） | 受控可选设计工作台能力（本地优先原型、deck、dashboard、mobile flow、`DESIGN.md`、导出 artifact），以 runbook + thin skill 接入，不内置 daemon |
@@ -80,7 +80,7 @@ TSP 整合了多个社区开源框架的精华能力，而非从零构建：
 
 TSP 当前支持把第三方设计能力作为外部扩展接入使用。设计工具负责高保真 artifact，TSP 负责团队协作、角色分工、handoff、quality gate 与发布收口。
 
-[Open Design](https://github.com/nexu-io/open-design) 是当前已纳入安装面导航的受控可选设计工作台：它提供本地优先 web/daemon、coding-agent CLI 调度、31 个设计 skills、设计系统库、sandbox preview 与 HTML/PDF/PPTX/ZIP/MP4 等导出链路。TSP 侧落点是 [skills/open-design/SKILL.md](skills/open-design/SKILL.md) 与 [docs/runbooks/open-design-integration.md](docs/runbooks/open-design-integration.md)，并通过 `design-prototyping` module 进入 `team` / `full` profile。其中 `full` profile 会自动执行 [scripts/install-open-design.js](scripts/install-open-design.js)，把 Open Design clone/update 到 `~/.tsp/open-design`，并在 `corepack` / `pnpm` 可用时安装依赖。TSP 不 vendoring Open Design 源码、daemon、skills、design-systems 或 SQLite 数据。
+[Open Design](https://github.com/nexu-io/open-design) 是当前已纳入安装面导航的受控可选设计工作台：它提供本地优先 web/daemon、coding-agent CLI 调度、31 个设计 skills、设计系统库、sandbox preview 与 HTML/PDF/PPTX/ZIP/MP4 等导出链路。TSP 侧落点是 [skills/open-design/SKILL.md](skills/open-design/SKILL.md) 与 [docs/runbooks/open-design-integration.md](docs/runbooks/open-design-integration.md)，并通过 `design-prototyping` module 进入 `team` / `full` profile。其中 `full` profile 会自动执行 [scripts/install-open-design.js](scripts/install-open-design.js)，把 Open Design clone/update 到 `~/.tsp/open-design`，并在 `corepack` / `pnpm` 可用时安装依赖；如果 GitHub 网络不可达，该步骤只警告并继续完成 TSP 核心安装。TSP 不 vendoring Open Design 源码、daemon、skills、design-systems 或 SQLite 数据。
 
 [huashu-design](https://github.com/alchaincyf/huashu-design) 仍作为文档级协同能力保留：它偏向高保真设计产出，覆盖 HTML 原生交互原型、浏览器演讲幻灯片、时间轴动画、信息图与 5 维度设计评审。
 
@@ -209,7 +209,7 @@ TSP 的公开能力是在多个社区项目、技能仓库和工程方法论的
 | 仓库 | 在 TSP 中的关系 | 说明 |
 |------|------|------|
 | [affaan-m/everything-claude-code](https://github.com/affaan-m/everything-claude-code) | 上游能力来源 | ECC harness layer、specialist agents、skills、runtime hooks 与安装工具链的重要参考来源 |
-| [colbymchenry/codegraph](https://github.com/colbymchenry/codegraph) | 默认内置接入 | 为 brownfield 符号搜索、调用链、impact 和 focused context 提供本地 MCP-backed 代码图谱能力；TSP 通过 target-scoped wrapper 调用上游 installer |
+| [colbymchenry/codegraph](https://github.com/colbymchenry/codegraph) | 默认内置接入 | 为 brownfield 符号搜索、调用链、impact 和 focused context 提供本地 MCP-backed 代码图谱能力；TSP 通过 target-scoped wrapper 调用上游 standalone installer |
 | [safishamsi/graphify](https://github.com/safishamsi/graphify) | 已吸收并本地化 | 为 brownfield 结构扫描、依赖路径分析与架构问答补充知识图谱能力 |
 | [abhigyanpatwari/GitNexus](https://github.com/abhigyanpatwari/GitNexus) | 受控可选接入 | 为 brownfield MCP 查询、impact、detect_changes 和多仓代码图谱证据提供外部能力；因许可证与 Node 20 要求，不内置依赖 |
 | [nexu-io/open-design](https://github.com/nexu-io/open-design) | 受控可选接入 | 为本地优先原型、deck、dashboard、mobile flow、`DESIGN.md` 与可导出视觉 artifact 提供外部设计工作台；不内置 daemon 或上游源码 |
@@ -279,7 +279,7 @@ TSP 的公开能力是在多个社区项目、技能仓库和工程方法论的
 - 定位：CodeGraph 作为默认内置 MCP-backed 代码图谱能力，Graphify 作为轻量结构证据层，GitNexus 作为受控可选深代码智能层；三者都不替代 workflow-engine 或 `/team-*` 主链。
 - 入口：CodeGraph 先执行 `npm run codegraph:doctor`，Graphify 先执行 `npm run graphify:doctor`，GitNexus 先执行 `npm run gitnexus:doctor`；详细操作见 [codegraph-code-intelligence-usage.md](docs/runbooks/codegraph-code-intelligence-usage.md)、[graphify-knowledge-graph-usage.md](docs/runbooks/graphify-knowledge-graph-usage.md) 与 [gitnexus-code-intelligence-usage.md](docs/runbooks/gitnexus-code-intelligence-usage.md)。
 - 分发：通过安装模块 `knowledge-graph` 与组件 `capability:knowledge-graph` 提供；默认纳入 `developer`、`team`、`research` 与 `full` profile，`core` 保持轻量。
-- 治理边界：TSP 只通过 `scripts/install-codegraph.js` 以当前 target 调用 CodeGraph installer，不使用 `--target=auto`，也不在安装时运行 `codegraph init -i`；Graphify/GitNexus 的自动 setup 类命令仍不在本仓库执行。
+- 治理边界：TSP 通过 `scripts/install-codegraph.js` 使用 CodeGraph 官方 standalone installer，不使用 `--target=auto`；Claude `SessionStart` 可在新项目静默执行 `codegraph init -i`，Codex/OpenCode 仅写入说明和诊断边界；Graphify/GitNexus 的自动 setup 类命令仍不在本仓库执行。
 
 ## 近期新增功能（v2.0.0 → v2.3.0）
 

package/hooks/hooks.json

@@ -232,6 +232,17 @@
         ],
         "description": "Load previous context and detect package manager on new session",
         "id": "session:start"
+      },
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hooks/run-with-flags.js\" \"session:codegraph:auto-init\" \"scripts/hooks/codegraph-auto-init.js\" \"minimal,standard,strict\""
+          }
+        ],
+        "description": "Silently initialize CodeGraph for new Claude projects when the index is missing",
+        "id": "session:codegraph:auto-init"
       }
     ],
     "PostToolUse": [

package/manifests/install-modules.json

@@ -305,11 +305,12 @@
         "docs/runbooks/graphify-knowledge-graph-usage.md",
         "docs/runbooks/gitnexus-code-intelligence-usage.md",
         "scripts/codegraph-preflight.js",
-        "scripts/install-codegraph.js"
+        "scripts/install-codegraph.js",
+        "scripts/hooks/codegraph-auto-init.js"
       ],
       "externalInstall": {
         "id": "codegraph",
-        "description": "Run the upstream CodeGraph installer through a TSP target-scoped wrapper; never uses --target=auto and never initializes project indexes.",
+        "description": "Install the upstream CodeGraph standalone CLI when needed, then run the target-scoped CodeGraph installer; never uses --target=auto.",
         "command": "node",
         "script": "scripts/install-codegraph.js",
         "args": []
@@ -344,6 +345,8 @@
         "profiles": [
           "full"
         ],
+        "failureMode": "warn",
+        "failureHint": "Open Design is an optional sidecar. TSP core files are still installed; rerun full install when GitHub access is available to refresh ~/.tsp/open-design.",
         "command": "node",
         "script": "scripts/install-open-design.js",
         "args": []

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@colin4k1024/tsp",
-  "version": "2.4.7",
+  "version": "2.4.9",
   "description": "Open-source Team Skills Platform for role-based AI delivery workflows, shared skills, hooks, commands, and multi-platform installs.",
   "repository": {
     "type": "git",
@@ -103,7 +103,6 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@colbymchenry/codegraph": "0.7.10",
     "@iarna/toml": "^2.2.5",
     "@inquirer/prompts": "^7.5.0",
     "ajv": "^8.18.0",

package/schemas/install-modules.schema.json

@@ -85,6 +85,58 @@
               "beta",
               "stable"
             ]
+          },
+          "externalInstall": {
+            "type": "object",
+            "properties": {
+              "id": {
+                "type": "string",
+                "pattern": "^[a-z0-9-]+$"
+              },
+              "description": {
+                "type": "string",
+                "minLength": 1
+              },
+              "profiles": {
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "failureMode": {
+                "type": "string",
+                "enum": [
+                  "error",
+                  "warn"
+                ]
+              },
+              "failureHint": {
+                "type": "string"
+              },
+              "command": {
+                "type": "string",
+                "minLength": 1
+              },
+              "script": {
+                "type": "string",
+                "minLength": 1
+              },
+              "args": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              }
+            },
+            "required": [
+              "id",
+              "description",
+              "command",
+              "script",
+              "args"
+            ],
+            "additionalProperties": false
           }
         },
         "required": [

package/scripts/codegraph-preflight.js

@@ -1,62 +1,66 @@
 #!/usr/bin/env node
 'use strict'
 
-const fs = require('fs')
-const path = require('path')
 const { spawnSync } = require('child_process')
-const { buildInstallCommand, mapTarget } = require('./install-codegraph')
-
-const MIN_NODE_MAJOR = 18
-const MAX_NODE_MAJOR_EXCLUSIVE = 25
-const PACKAGE_NAME = '@colbymchenry/codegraph'
-
-function parseNodeVersion(text) {
-  const match = String(text || '').trim().match(/^v?(\d+)\.(\d+)\.(\d+)/)
-  if (!match) {
-    return null
+const {
+  buildStandaloneInstallerInfo,
+  findOnPath,
+  mapTarget,
+  resolveCodeGraphBin,
+} = require('./install-codegraph')
+
+function detectPlatform(platform = process.platform) {
+  if (platform === 'darwin' || platform === 'linux' || platform === 'win32') {
+    return {
+      ok: true,
+      output: platform,
+    }
   }
+
   return {
-    major: Number(match[1]),
-    minor: Number(match[2]),
-    patch: Number(match[3]),
-    raw: `${match[1]}.${match[2]}.${match[3]}`,
+    ok: false,
+    output: `unsupported platform: ${platform}`,
   }
 }
 
-function isNodeSupported(version) {
-  return Boolean(
-    version
-      && version.major >= MIN_NODE_MAJOR
-      && version.major < MAX_NODE_MAJOR_EXCLUSIVE
-  )
-}
-
-function loadPackageMetadata() {
-  if (process.env.CODEGRAPH_PREFLIGHT_PACKAGE_JSON) {
+function detectDownloader(platform = process.platform) {
+  const installer = buildStandaloneInstallerInfo(platform)
+  if (!installer.supported) {
     return {
-      ok: true,
-      source: 'env',
-      metadata: JSON.parse(process.env.CODEGRAPH_PREFLIGHT_PACKAGE_JSON),
+      ok: false,
+      output: installer.reason,
     }
   }
 
-  try {
-    const packageJsonPath = require.resolve(`${PACKAGE_NAME}/package.json`)
+  if (platform === 'win32') {
+    const command = findOnPath('powershell.exe') || findOnPath('powershell') || findOnPath('pwsh')
+    if (!command) {
+      return {
+        ok: false,
+        output: 'PowerShell not found; install PowerShell or provide CODEGRAPH_INSTALL_BIN',
+      }
+    }
     return {
       ok: true,
-      source: packageJsonPath,
-      metadata: JSON.parse(fs.readFileSync(packageJsonPath, 'utf8')),
+      output: command,
     }
-  } catch (error) {
+  }
+
+  const curl = findOnPath('curl')
+  if (!curl) {
     return {
       ok: false,
-      source: 'node-resolution',
-      warning: error.message || String(error),
+      output: 'curl not found; install curl or provide CODEGRAPH_INSTALL_BIN',
     }
   }
+
+  return {
+    ok: true,
+    output: curl,
+  }
 }
 
-function detectCli(target) {
+function detectCli() {
   if (process.env.CODEGRAPH_PREFLIGHT_SKIP_CLI === '1') {
     return {
       ok: true,
@@ -65,27 +69,16 @@ function detectCli(target) {
     }
   }
 
-  let install
-  try {
-    install = buildInstallCommand(target || 'codex')
-  } catch (error) {
+  const resolved = resolveCodeGraphBin()
+  if (!resolved) {
     return {
       ok: false,
       command: 'codegraph',
-      output: error.message || String(error),
+      output: 'CodeGraph standalone binary not found',
     }
   }
 
-  if (!install.supported) {
-    return {
-      ok: true,
-      command: '(unsupported target skipped)',
-      output: install.reason,
-    }
-  }
-
-  const args = install.args.slice(0, install.args.length - 4).concat(['--help'])
-  const result = spawnSync(install.command, args, {
+  const result = spawnSync(resolved.command, [...resolved.argsPrefix, '--help'], {
     encoding: 'utf8',
     timeout: 8000,
   })
@@ -93,15 +86,15 @@ function detectCli(target) {
   if (result.error || result.status !== 0) {
     return {
       ok: false,
-      command: install.command,
+      command: resolved.command,
       output: result.error ? result.error.message : `${result.stdout || ''}${result.stderr || ''}`.trim(),
     }
   }
 
   return {
     ok: true,
-    command: install.command,
-    output: 'codegraph --help',
+    command: resolved.command,
+    output: `${resolved.displayCommand} (${resolved.source})`,
   }
 }
 
@@ -110,30 +103,24 @@ function main() {
   console.log('=========================')
 
   const target = process.env.TSP_INSTALL_TARGET || process.env.CODEGRAPH_PREFLIGHT_TARGET || ''
-  const nodeVersion = parseNodeVersion(process.env.CODEGRAPH_PREFLIGHT_NODE_VERSION || process.version)
-  const packageInfo = loadPackageMetadata()
-  const cli = detectCli(target)
+  const platform = detectPlatform()
+  const downloader = detectDownloader()
+  const cli = detectCli()
   const mappedTarget = target ? mapTarget(target) : null
   let hasFailure = false
 
-  if (!nodeVersion) {
-    hasFailure = true
-    console.log(`- Node: unable to detect version (requires >= ${MIN_NODE_MAJOR} and < ${MAX_NODE_MAJOR_EXCLUSIVE})`)
-  } else if (!isNodeSupported(nodeVersion)) {
+  if (!platform.ok) {
     hasFailure = true
-    console.log(`- Node: ${nodeVersion.raw} (requires >= ${MIN_NODE_MAJOR} and < ${MAX_NODE_MAJOR_EXCLUSIVE})`)
+    console.log(`- Platform: ${platform.output}`)
   } else {
-    console.log(`- Node: ${nodeVersion.raw} (ok)`)
+    console.log(`- Platform: ${platform.output} (ok)`)
   }
 
-  if (packageInfo.ok && packageInfo.metadata) {
-    const engine = packageInfo.metadata.engines && packageInfo.metadata.engines.node
-      ? packageInfo.metadata.engines.node
-      : '(not declared)'
-    console.log(`- CodeGraph package: ${packageInfo.metadata.version || '(unknown)'} (license ${packageInfo.metadata.license || '(unknown)'}, node ${engine})`)
-  } else {
+  if (!downloader.ok) {
     hasFailure = true
-    console.log(`- CodeGraph package: unavailable (${packageInfo.warning || 'not installed'})`)
+    console.log(`- Standalone installer dependency: ${downloader.output}`)
+  } else {
+    console.log(`- Standalone installer dependency: ${downloader.output} (ok)`)
   }
 
   if (!cli.ok) {
@@ -154,18 +141,23 @@ function main() {
   }
 
   console.log('\nControlled integration boundaries:')
+  console.log('- TSP installs CodeGraph through the official standalone curl/PowerShell installer when no binary is available.')
   console.log('- TSP calls CodeGraph installer with the current target only; it never uses --target=auto.')
-  console.log('- TSP install does not run `codegraph init -i`; initialize indexes inside target projects only.')
+  console.log('- Claude SessionStart may initialize project indexes automatically; Codex/OpenCode rely on instructions and diagnostics.')
   console.log('- Do not commit `.codegraph/` databases as TSP artifacts.')
 
   if (hasFailure) {
+    const installer = buildStandaloneInstallerInfo()
     console.log('\nFix failed checks before applying the CodeGraph integration.')
+    if (installer.supported) {
+      console.log(`Recommended standalone install: ${installer.display}`)
+    }
+    console.log('Offline fallback: set CODEGRAPH_INSTALL_BIN=/path/to/codegraph')
     process.exit(1)
   }
 
   console.log('\nRecommended next commands:')
   console.log('- npm run codegraph:doctor')
-  console.log('- codegraph init -i')
   console.log('- codegraph status')
 }
 
@@ -174,6 +166,7 @@ if (require.main === module) {
 }
 
 module.exports = {
-  isNodeSupported,
-  parseNodeVersion,
+  detectCli,
+  detectDownloader,
+  detectPlatform,
 }