@deepstorm/cli 0.3.2 → 0.4.0

package/dist/cli.js

@@ -8307,6 +8307,19 @@ function skillIdsToTools(skillIds, registry2) {
   }
   return [...toolSet];
 }
+function detectToolsFromConfig(config, registry2) {
+  const knownTools = new Set(Object.keys(registry2.tools ?? {}));
+  const found = /* @__PURE__ */ new Set();
+  for (const key of Object.keys(config)) {
+    const dotIdx = key.indexOf(".");
+    if (dotIdx < 0) continue;
+    const prefix = key.slice(0, dotIdx);
+    if (knownTools.has(prefix)) {
+      found.add(prefix);
+    }
+  }
+  return [...found];
+}
 function readSettingsConfig(targetDir) {
   const settingsPath = path18.join(targetDir, ".claude", "settings.json");
   try {
@@ -8367,16 +8380,18 @@ function syncToolAssets(cliDir2, targetDir, installedSkillIds) {
   }
   const reader = new RegistryReader(registry2);
   const toolNames = skillIdsToTools(installedSkillIds, registry2);
-  if (toolNames.length === 0) {
-    console.log("\u26A0 \u65E0\u6CD5\u4ECE\u5DF2\u5B89\u88C5 skill \u89E3\u6790\u5DE5\u5177\u540D\u79F0\uFF0C\u8DF3\u8FC7\u8D44\u4EA7\u540C\u6B65");
+  const { config, installedMcpTools } = readSettingsConfig(targetDir);
+  const configTools = detectToolsFromConfig(config, registry2);
+  const allTools = [.../* @__PURE__ */ new Set([...toolNames, ...configTools])];
+  if (allTools.length === 0) {
+    console.log("\u26A0 \u65E0\u6CD5\u4ECE\u5DF2\u5B89\u88C5 skill \u6216\u914D\u7F6E\u89E3\u6790\u5DE5\u5177\u540D\u79F0\uFF0C\u8DF3\u8FC7\u8D44\u4EA7\u540C\u6B65");
     return { syncedSkills: [], syncedAgents: [], syncedHooks: [], backedUpFiles: [] };
   }
-  const { config, installedMcpTools } = readSettingsConfig(targetDir);
   const templateVariables = buildTemplateVariables(registry2, config, installedMcpTools);
   const mcpSkillSet = /* @__PURE__ */ new Set();
   if (installedMcpTools.length > 0) {
     const selectedMcpSet = new Set(installedMcpTools);
-    for (const tool of toolNames) {
+    for (const tool of allTools) {
       for (const skillId of reader.getToolMcpSkills(tool)) {
         const service = skillId.replace(/^deepstorm-mcp-/, "").replace(/-(read|write)$/, "");
         if (selectedMcpSet.has(service)) mcpSkillSet.add(skillId);
@@ -8385,7 +8400,7 @@ function syncToolAssets(cliDir2, targetDir, installedSkillIds) {
   }
   const mcpSkillIds = [...mcpSkillSet];
   const allSkillIdsForBackup = [.../* @__PURE__ */ new Set([...installedSkillIds, ...mcpSkillIds])];
-  const backedUpFiles = backupModifiedAssets(targetDir, allSkillIdsForBackup, toolNames, registry2);
+  const backedUpFiles = backupModifiedAssets(targetDir, allSkillIdsForBackup, allTools, registry2);
   if (backedUpFiles.length > 0) {
     console.log("\n\u26A0 \u68C0\u6D4B\u5230\u7528\u6237\u4FEE\u6539\u7684\u6587\u4EF6\uFF1A");
     for (const info of backedUpFiles) {
@@ -8397,7 +8412,7 @@ function syncToolAssets(cliDir2, targetDir, installedSkillIds) {
   const syncedAgents = [];
   const syncedHooks = [];
   let hasWarning = false;
-  for (const tool of toolNames) {
+  for (const tool of allTools) {
     try {
       reader.getToolEntry(tool);
     } catch {
@@ -8428,11 +8443,11 @@ function syncToolAssets(cliDir2, targetDir, installedSkillIds) {
   const syncedSkills = actualSkillIds.length > 0 ? actualSkillIds : [...installedSkillIds];
   const syncedMcpSkillIds = [];
   if (installedMcpTools.length > 0) {
-    installMcpSkills(toolNames, reader, cliDir2, targetDir, syncedMcpSkillIds, installedMcpTools);
+    installMcpSkills(allTools, reader, cliDir2, targetDir, syncedMcpSkillIds, installedMcpTools);
   }
-  mergeToolHooksJson(toolNames, cliDir2, targetDir);
+  mergeToolHooksJson(allTools, cliDir2, targetDir);
   const allSkillIds = [...installedSkillIds, ...syncedMcpSkillIds];
-  storeNewChecksums(targetDir, allSkillIds, toolNames, registry2);
+  storeNewChecksums(targetDir, allSkillIds, allTools, registry2);
   if (hasWarning) {
     console.log("\n\u26A0 \u90E8\u5206\u5DE5\u5177\u540C\u6B65\u51FA\u9519\uFF0C\u8BF7\u68C0\u67E5\u540E\u91CD\u8BD5");
   }

package/dist/hooks/reef-code-style-verify.sh.tmpl

@@ -0,0 +1,97 @@
+#!/bin/bash
+# reef-code-style-verify.sh.tmpl
+# PostToolUse: 在 Edit/Write 后自动验证代码风格
+#
+# 模板变量（安装时由 wizard 注入）：
+#   {{reef.backend.java.lintCmd}}    — Java lint 命令（默认 checkstyle）
+#   {{reef.backend.python.lintCmd}}  — Python lint 命令（默认 ruff check）
+#   {{reef.frontend.lintCmd}}        — 前端 lint 命令（默认 eslint）
+
+set -euo pipefail
+
+# ── 1. 获取文件路径 ──────────────────────────────────────────────────
+filepath=""
+
+if [ -p /dev/stdin ] && command -v jq &>/dev/null; then
+  filepath=$(jq -r '.tool_response.filePath // .tool_input.file_path // ""' 2>/dev/null || true)
+fi
+
+if [ -z "$filepath" ] || [ "$filepath" = "null" ]; then
+  filepath="${CLAUDE_CODE_TOOL_RESULT_FILEPATH:-}"
+fi
+
+[ -z "$filepath" ] && exit 0
+[ ! -f "$filepath" ] && exit 0
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+
+JAVA_LINT="{{reef.backend.java.lintCmd}}"
+PYTHON_LINT="{{reef.backend.python.lintCmd}}"
+TS_LINT="{{reef.frontend.lintCmd}}"
+
+# ── ESLint 配置检测 ───────────────────────────────────────────────────
+has_eslint_config() {
+  [ -f "$PROJECT_DIR/eslint.config.js" ] || \
+  [ -f "$PROJECT_DIR/eslint.config.mjs" ] || \
+  [ -f "$PROJECT_DIR/.eslintrc.js" ] || \
+  [ -f "$PROJECT_DIR/.eslintrc.json" ] || \
+  [ -f "$PROJECT_DIR/.eslintrc" ]
+}
+
+# ── 2. 按文件类型执行验证 ────────────────────────────────────────────
+
+case "$filepath" in
+  *.java)
+    # Java: checkstyle（如果项目配置了 checkstyle.xml）
+    if [ "$JAVA_LINT" != "none" ] && command -v "${JAVA_LINT%% *}" &>/dev/null; then
+      for conf in "$PROJECT_DIR/checkstyle.xml" "$PROJECT_DIR/config/checkstyle/checkstyle.xml"; do
+        if [ -f "$conf" ]; then
+          output=$($JAVA_LINT -c "$conf" "$filepath" 2>&1 | grep -iE "error|warning" | head -20 || true)
+          if [ -n "$output" ]; then
+            echo "[style-verify] ⚠ Java 代码风格问题："
+            echo "$output"
+            echo "[style-verify] 运行 $JAVA_LINT -c $conf $filepath 查看完整报告。"
+          fi
+        fi
+      done
+    fi
+    ;;
+
+  *.py)
+    # Python: ruff check
+    if [ "$PYTHON_LINT" != "none" ] && command -v "${PYTHON_LINT%% *}" &>/dev/null; then
+      output=$($PYTHON_LINT "$filepath" 2>/dev/null || true)
+      if [ -n "$output" ]; then
+        echo "[style-verify] ⚠ Python 代码风格问题："
+        echo "$output" | head -20
+        echo "[style-verify] 请使用 $PYTHON_LINT $filepath 查看完整报告。"
+      fi
+    fi
+    ;;
+
+  *.ts|*.tsx|*.js|*.jsx)
+    # TypeScript/JavaScript: eslint
+    if [ "$TS_LINT" != "none" ] && command -v npx &>/dev/null && has_eslint_config; then
+      output=$(cd "$PROJECT_DIR" && npx $TS_LINT "$filepath" 2>/dev/null || true)
+      if [ -n "$output" ]; then
+        echo "[style-verify] ⚠ TypeScript/JavaScript 代码风格问题："
+        echo "$output" | head -20
+        echo "[style-verify] 请运行 npx $TS_LINT $filepath 查看完整报告。"
+      fi
+    fi
+    ;;
+
+  *.html|*.css|*.scss|*.less)
+    # 前端模板/样式文件：eslint（如果项目已配置）
+    if [ "$TS_LINT" != "none" ] && command -v npx &>/dev/null && has_eslint_config; then
+      output=$(cd "$PROJECT_DIR" && npx $TS_LINT "$filepath" 2>/dev/null || true)
+      if [ -n "$output" ]; then
+        echo "[style-verify] ⚠ 前端文件代码风格问题："
+        echo "$output" | head -10
+        echo "[style-verify] 请运行 npx $TS_LINT $filepath 查看完整报告。"
+      fi
+    fi
+    ;;
+esac
+
+exit 0

package/dist/hooks/reef-hooks.json

@@ -30,7 +30,7 @@
           {
             "type": "prompt",
             "timeout": 5,
-            "prompt": "You are about to write or edit a file. If the target file extension is .java, load reef-style-backend skill for coding standards. If the target is .ts, .html, .css, .scss, or .less, load reef-style-frontend skill for coding standards. Follow the loaded skill's rules in your output."
+            "prompt": "You are about to write or edit a source file. The following core rules apply based on the file extension. You MUST follow the relevant rules for your file type.\n\n## 🔴 Core Coding Rules (must follow)\n\n### Java\n1. Use @Getter @AllArgsConstructor for event/POJO classes; NEVER use @Data\n2. NEVER use @Autowired field injection; always use constructor injection (@RequiredArgsConstructor)\n3. Use abstract method instead of instanceof chain for type dispatch\n4. Use formatted() / Text Block for string formatting; never use + concatenation\n5. Use @RequiredArgsConstructor for Service/Controller; @Getter @NoArgsConstructor(access = PROTECTED) for Entity\n\n### Python\n1. Use f-strings; never use % or .format()\n2. snake_case for functions/variables; PascalCase for classes\n3. Always annotate return types and parameter types (mypy must pass)\n4. Use is / is not for None comparison; never use == None\n5. Use Enum / Protocol / abstract method instead of isinstance() chain\n\n### TypeScript\n1. Standalone + OnPush + inject() (Angular) / Function components + hooks (React) / <script setup lang=\"ts\"> (Vue)\n2. Use output() instead of @Output() (Angular) / custom hooks over lifecycle methods (React) / composables (Vue)\n3. Use signal() / computed() for reactive state management\n4. Use loadComponent for lazy-loaded routes\n5. Use interface for Props / Entity types\n\n## 📖 Full Reference\nLoad the reef-style-backend or reef-style-frontend skill for the complete coding standard.\n\n## ✅ Self-Verification\nBefore writing code, first output `✅ [STYLE] confirmed {language} rules` to acknowledge you have read and will follow the rules above."
           }
         ]
       }
@@ -45,6 +45,17 @@
           }
         ]
       },
+      {
+        "matcher": "Edit|Write",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash .claude/hooks/reef-code-style-verify.sh",
+            "async": true,
+            "statusMessage": "Verifying code style..."
+          }
+        ]
+      },
       {
         "matcher": "Edit|Write",
         "hooks": [

package/dist/registry.json

@@ -562,6 +562,20 @@
                   ]
                 }
               ]
+            },
+            {
+              "key": "reef.backend.java.formatTool",
+              "label": "Java 格式化工具",
+              "type": "static",
+              "value": "google-java-format",
+              "template": {
+                "formatCmd": "google-java-format -i",
+                "lintCmd": "checkstyle"
+              },
+              "affectedTemplates": [
+                "hooks/reef-auto-format.sh.tmpl",
+                "hooks/reef-code-style-verify.sh.tmpl"
+              ]
             }
           ]
         },
@@ -951,13 +965,13 @@
       "hooks": [
         "reef-auto-format.sh",
         "reef-block-dangerous.sh",
+        "reef-code-style-verify.sh",
         "reef-intent-detect.sh",
         "reef-protect-files.sh",
         "reef-run-tests.sh",
         "reef-scope-check.sh",
         "reef-scope-ci.sh",
         "reef-scope-gate.sh",
-        "reef-scope-pre-commit.sh",
         "reef-scope-setup.sh",
         "reef-scope-split.sh"
       ]

package/dist/skills/reef-commit/SKILL.md

@@ -159,6 +159,38 @@ git status --short
 - 测试全部通过 → 继续
 - 任一测试失败 → 提示用户修复后再提交
 
+### 6.5 OpenSpec 验证与归档检查
+
+> 提交前检查关联的 OpenSpec change 是否已完成验证和归档。如果 `openspec/` 目录不存在或无活跃 change 则跳过本步骤。
+
+**判断流程（LLM 自行推理执行）：**
+
+1. **查找关联的 OpenSpec change：**
+   ```bash
+   BRANCH=$(git branch --show-current)
+   echo "当前分支: $BRANCH"
+
+   for dir in openspec/changes/*/; do
+     CHANGE_NAME=$(basename "$dir")
+     if [ -f "$dir/.openspec.yaml" ] && [ "$CHANGE_NAME" != "archive" ]; then
+       echo "发现活跃 OpenSpec change: $CHANGE_NAME"
+       cat "$dir/.openspec.yaml"
+     fi
+   done
+   ```
+
+2. **匹配规则：** 扫描 `openspec/changes/*/` 下活跃 change（不包含 `archive/`），与当前分支名比对；无匹配则跳过；多匹配则让用户选择。
+
+3. **检查归档状态：** 读取 `.openspec.yaml` 中 `status` 字段。`archived` → 跳过后续检查；否则继续。
+
+4. **运行验证：** 确认 `tasks.md` 全部 checkbox 已完成 → 通过 Skill 工具自动调用 `/opsx:verify`。有 CRITICAL 问题则中止；仅 WARNING/SUGGESTION 则通过。
+
+5. **运行归档：** 验证通过后 → 通过 Skill 工具自动调用 `/opsx:archive`。执行失败则提示用户手动处理。
+
+6. **确认已就绪：** 校验状态并向用户报告。
+
+> **提示：** verify/archive 执行后产生额外文件变更的，后续步骤会重新检测并纳入提交。
+
 ### 7. 收集上下文
 
 ```bash

package/dist/skills/reef-style-backend/fragments/java/api-spec/jackson-polymorphism.md

@@ -200,6 +200,6 @@ TypeScript union type + `type` literal 可直接利用 `@switch` 的类型窄化
 | `@JsonProperty("xAxisName") private String categoryAxisLabel` | 字段名合规，getter 合规，JSON 输出保留 `xAxisName` | ✅ |
 | 禁用 Checkstyle `ParameterNameCheck` | 全局禁用降低代码规范性 | ❌ |
 
-### 5.6 Decoder 对象保持 record
+### 5.6 DTO 对象保持 record
 
 如 `MetricAnswer` 是 Java record，不能继承。改造方案为直接替换字段类型（`ChartType chartType` → `ChartView chartView`），record 紧凑语法不受影响。构建逻辑从 `determineChartType()` 改为 `buildChartView()` 并返回具体子类。

package/dist/skills/reef-style-backend/fragments/java/framework/spring-boot/quick-reference.md

@@ -53,31 +53,8 @@ DTO 继承基类，写请求用独立 CreateRequest/UpdateRequest record。MapSt
 
 ### 异常处理
 
-| 异常 | HTTP | 场景 |
-| --- | --- | --- |
-| `NotFoundException` | 404 | 资源不存在 |
-| `AlreadyExistsException` | 409 | 重复创建 |
-| `InvalidArgumentException` | 400 | 参数校验失败 |
-| `PermissionDeniedException` | 403 | 无权限 |
-| `FailedPreconditionException` | 400 | 前置条件不满足 |
-
-所有自定义异常通过 `@RestControllerAdvice` `GlobalExceptionHandler` 统一处理，返回 AIP-193 兼容的 `CustomError` 结构：
-
-```java
-@RestControllerAdvice
-public class GlobalExceptionHandler {
-  @ExceptionHandler(ResourceNotFoundException.class)
-  public ResponseEntity<ErrorResponse> handleNotFound(ResourceNotFoundException ex) {
-    return ResponseEntity.status(NOT_FOUND).body(new ErrorResponse(ex.getMessage()));
-  }
-}
-```
+> 异常处理规范（异常继承层次、ErrorCode 枚举、GlobalExceptionHandler）参见 [异常处理规范](../exception-handling/quick-reference.md)。
 
 ### 安全编码规范
 
-- Controller 写操作接口必须加 `@PreAuthorize("hasAuthority('PERMISSION_NAME')")`，禁止在方法内硬编码权限字符串
-- 请求体参数加 `@Valid`，嵌套对象加 `@Valid`
-- DTO 中密码/token 用 `@JsonIgnore` 或从响应 DTO 中排除
-- 密码使用 `BCryptPasswordEncoder`
-- 禁止 `createNativeQuery`（绕过多租户 + SQL 注入风险）
-- `@Query` 始终使用命名参数（`:paramName`），不用 `?1` 位置参数
+> 安全红线（密码存储、SQL 注入、敏感信息脱敏、文件上传等）参见 [安全红线](../security-redlines/quick-reference.md)。

package/dist/skills/reef-style-backend/variants/java/examples/code-wrapping.md

@@ -185,7 +185,8 @@ Java 15+ 的 Text Block 用于嵌入 JSON / SQL / XML / 模板等 DSL。缩进
 ```java
 // ✅ opening """ 后直接换行，内容相对 opening 行缩进 4 格
 // ✅ closing """ 决定 stripIndent() 的公共缩进基线
-var json = """
+var json = 
+    """
     {
       "name": "example",
       "value": 42,
@@ -194,7 +195,8 @@ var json = """
     """;
 
 // ✅ 嵌入 SQL：closing """ 与 SQL 内容的公共缩进最左列对齐
-var sql = """
+var sql = 
+    """
     SELECT u.id, u.name, r.role_name
     FROM users u
     JOIN user_roles r ON r.user_id = u.id
@@ -209,7 +211,8 @@ var message = """
     """.formatted(userName, orderId);
 
 // ✅ 空行可用 \s 占位避免 stripIndent 清空：
-var json = """
+var json = 
+    """
     {
       "title": "test",
     \s
@@ -219,9 +222,10 @@ var json = """
 ```
 
 **规范：**
-- `"""` 必须后跟换行，**禁止在同行放内容**
-- `closing """` 的缩进决定公共缩进基线，放在最后一行内容之下，与之缩进对齐
+
+- `"""` **独立占一行**，后跟换行，禁止在同行放内容
+- `closing """` **独立占一行**，其缩进决定公共缩进基线，放在最后一行内容之下与之对齐
 - 禁止 text block 与 `+` 拼接混用；需要变量替换统一用 `formatted()`
 - 短字符串（≤ 100 列单行）不使用 text block，直接使用普通字符串
 - `\s` 用于显式保留 text block 中的空行（避免 `stripIndent()` 把空行清空）
-```
+

package/dist/skills/reef-style-backend/variants/java/quick-reference.md

@@ -22,45 +22,17 @@
 | 字段注释 | Model/Entity/Event 加 `/** */`，DTO/Record 不加 |
 | 日志实体 | 继承 `LogEntry`（SINGLE_TABLE），不直接继承基类 |
 | 弃用 API | 编译警告中的 `@Deprecated` API 在同一次 PR 中替换为新 API |
-| 多行字符串 | 用 Text Block `"""..."""` + `formatted()` 嵌入 JSON/SQL/XML，禁止 `+` 拼接；详见 [code-wrapping.md](examples/code-wrapping.md) |
+| 多行字符串 | 用 Text Block `"""..."""` + `formatted()` 嵌入 JSON/SQL/XML，禁止 `+` 拼接 |
 
 ## 代码风格
 
-### 通用约定
-
-- 变量命名有意义，禁止单字母（循环计数器 `i`/`j`/`k` 除外）
-- 局部变量用 `var`
-- 字符串格式化用 `formatted()`，不用 `+` 拼接
-- 多态替代 `instanceof` 链做类型分发
-- 100 列折行，运算符/`.`/`::` 放行首。适用范围如下：
-  - **代码结构**（方法调用、签名、表达式）严格执行 100 列
-  - **Javadoc / 注释文本**以可读性优先，不硬断中文句子；仅单行 `/** ... */` 标记超长时拆成多行
-- **方法调用参数换行**：所有参数能在列宽内一行放完则一行，放不完则每个参数独立一行（不混合分组）；详见 [code-wrapping.md](examples/code-wrapping.md)「方法调用参数换行」
-- 类内字段按用途逻辑分组，组间空行分隔，**禁止使用 `// ======`（或其他重复符号装饰）做视觉分隔线注释**。例如应避免 `// ========== 维度信息 ==========` 这种写法
-- 注释与代码逻辑块之间：相邻的两个 `// 注释 + 代码块` 之间用空行分隔，使每个逻辑块保持独立。
-  ```java
-  // ✅ 正确：逻辑块之间有空行
-  // PROPORTION → 饼图
-  if (queryIntent == QueryIntent.PROPORTION) {
-    return ChartType.PIE_CHART;
-  }
-
-  // GROUP_BY → 柱状图
-  if (queryIntent == QueryIntent.GROUP_BY) {
-    return ChartType.BAR_CHART;
-  }
-  ```
-  ```java
-  // ❌ 错误：缺少分隔空行，两个逻辑块粘连
-  // PROPORTION → 饼图
-  if (queryIntent == QueryIntent.PROPORTION) {
-    return ChartType.PIE_CHART;
-  }
-  // GROUP_BY → 柱状图
-  if (queryIntent == QueryIntent.GROUP_BY) {
-    return ChartType.BAR_CHART;
-  }
-  ```
+### LLM 常犯错误
+
+> 📌 以下规则仅约束 LLM 容易跑偏的地方。LLM 天然写对的内容（命名、代码空行分隔等）不再列出。
+
+- 局部变量优先用 `var`，避免冗余的类型声明
+- 字符串格式化用 `formatted()` / Text Block，不用 `+` 拼接
+- 用多态 / Abstract Method 替代 `instanceof` 链做类型分发
 
 ### Lombok 使用规范
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deepstorm/cli",
-  "version": "0.3.2",
+  "version": "0.4.0",
   "description": "DeepStorm CLI — 一键配置项目开发环境",
   "license": "MIT",
   "author": "billkang",