@jojonax/codex-copilot 1.0.0 → 1.0.1

package/README.md

@@ -12,10 +12,10 @@ PRD → Tasks → CodeX Dev → PR → AI Review → Fix → Merge → Next Task
 
 ```bash
 # Install globally
-npm install -g codex-copilot
+npm install -g @jojonax/codex-copilot
 
 # Or run directly without installing
-npx codex-copilot
+npx @jojonax/codex-copilot
 
 # In your project directory:
 codex-copilot init    # Detect PRD, generate task queue
@@ -122,6 +122,13 @@ CodeX develops feature
 - [ ] GitHub Action for fully server-side automation
 - [ ] Support for monorepo / multi-package projects
 
+## Contributing
+
+1. Fork the repo
+2. Create a feature branch (`git checkout -b feat/awesome`)
+3. Commit your changes (`git commit -m 'feat: add awesome feature'`)
+4. Push and open a PR
+
 ## License
 
 MIT © Jonas Qin

package/bin/cli.js

@@ -10,8 +10,7 @@
  *   codex-copilot reset         # 重置状态（重新开始）
  */
 
-import { fileURLToPath } from 'url';
-import { dirname, resolve } from 'path';
+import { resolve } from 'path';
 import { existsSync } from 'fs';
 
 import { init } from '../src/commands/init.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jojonax/codex-copilot",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "PRD-driven automated development orchestrator for CodeX / Cursor",
   "bin": {
     "codex-copilot": "./bin/cli.js"

package/src/commands/init.js

@@ -7,7 +7,7 @@
  * 4. 创建 .codex-copilot/ 目录结构
  */
 
-import { mkdirSync, writeFileSync, readFileSync, existsSync, copyFileSync } from 'fs';
+import { mkdirSync, writeFileSync, readFileSync, existsSync } from 'fs';
 import { resolve, dirname } from 'path';
 import { fileURLToPath } from 'url';
 import { execSync } from 'child_process';

package/src/commands/run.js

@@ -6,6 +6,7 @@
 
 import { readFileSync, writeFileSync, existsSync } from 'fs';
 import { resolve } from 'path';
+import { execSync } from 'child_process';
 import { log, progressBar } from '../utils/logger.js';
 import { git } from '../utils/git.js';
 import { github } from '../utils/github.js';
@@ -113,22 +114,14 @@ async function developPhase(projectDir, task, baseBranch) {
   const devPrompt = buildDevPrompt(task);
 
   // 检查是否有 CodeX CLI
-  let codexAvailable = false;
-  try {
-    const { execSync } = await import('child_process');
-    execSync('which codex', { stdio: 'pipe' });
-    codexAvailable = true;
-  } catch {}
+  const codexAvailable = isCodexAvailable();
 
   if (codexAvailable) {
     log.info('检测到 CodeX CLI，自动执行...');
     const autoRun = await confirm('自动调用 CodeX 开发？');
     if (autoRun) {
       try {
-        const { execSync } = await import('child_process');
-        // 将 prompt 写入临时文件
         const promptPath = resolve(projectDir, '.codex-copilot/_current_prompt.md');
-        const { writeFileSync } = await import('fs');
         writeFileSync(promptPath, devPrompt);
         execSync(`codex -q --file .codex-copilot/_current_prompt.md`, {
           cwd: projectDir,
@@ -154,17 +147,12 @@ async function developPhase(projectDir, task, baseBranch) {
 
   // 同时将 Prompt 保存到文件，方便复制
   const promptPath = resolve(projectDir, '.codex-copilot/_current_prompt.md');
-  const { writeFileSync: ws } = await import('fs');
-  ws(promptPath, devPrompt);
+  writeFileSync(promptPath, devPrompt);
   log.dim(`Prompt 已保存到 .codex-copilot/_current_prompt.md (可直接复制文件内容)`);
   log.blank();
 
-  // 尝试复制到剪贴板
-  try {
-    const { execSync } = await import('child_process');
-    execSync(`echo '${devPrompt.replace(/'/g, "\\'")}' | pbcopy`, { stdio: 'pipe' });
-    log.info('📋 已复制到剪贴板！直接到 CodeX 中粘贴即可');
-  } catch {}
+  // 尝试复制到剪贴板（通过 stdin 传入，避免 shell 注入）
+  copyToClipboard(devPrompt);
 
   await ask('CodeX 开发完成后按 Enter 继续...');
 }
@@ -208,7 +196,8 @@ async function prPhase(projectDir, task, baseBranch) {
 // ──────────────────────────────────────────────
 // 阶段 3: Review 循环
 // ──────────────────────────────────────────────
-async function reviewLoop(projectDir, task, prInfo, { maxRounds, pollInterval, waitTimeout }) {
+async function reviewLoop(projectDir, task, prInfo, { maxRounds: _maxRounds, pollInterval, waitTimeout }) {
+  let maxRounds = _maxRounds;
   log.step('阶段 3/4: 等待 Review');
 
   for (let round = 1; round <= maxRounds; round++) {
@@ -320,22 +309,15 @@ ${feedback}
 
   // 保存到文件并提示用户
   const promptPath = resolve(projectDir, '.codex-copilot/_current_prompt.md');
-  const { writeFileSync } = await import('fs');
   writeFileSync(promptPath, fixPrompt);
 
   // 尝试 CodeX CLI
-  let codexAvailable = false;
-  try {
-    const { execSync } = await import('child_process');
-    execSync('which codex', { stdio: 'pipe' });
-    codexAvailable = true;
-  } catch {}
+  const codexAvailable = isCodexAvailable();
 
   if (codexAvailable) {
     const autoFix = await confirm('自动调用 CodeX 修复？');
     if (autoFix) {
       try {
-        const { execSync } = await import('child_process');
         execSync(`codex -q --file .codex-copilot/_current_prompt.md`, {
           cwd: projectDir,
           stdio: 'inherit',
@@ -353,11 +335,7 @@ ${feedback}
   log.dim(`Review 修复 Prompt 已保存到 .codex-copilot/_current_prompt.md`);
   log.dim('请将文件内容粘贴到 CodeX 执行');
 
-  try {
-    const { execSync } = await import('child_process');
-    execSync(`cat .codex-copilot/_current_prompt.md | pbcopy`, { cwd: projectDir, stdio: 'pipe' });
-    log.info('📋 已复制到剪贴板');
-  } catch {}
+  copyToClipboard(fixPrompt);
 
   await ask('CodeX 修复完成后按 Enter 继续...');
 }
@@ -411,3 +389,19 @@ ${task.acceptance.map(a => `- ${a}`).join('\n')}
 function sleep(ms) {
   return new Promise(resolve => setTimeout(resolve, ms));
 }
+
+function isCodexAvailable() {
+  try {
+    execSync('which codex', { stdio: 'pipe' });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function copyToClipboard(text) {
+  try {
+    execSync('pbcopy', { input: text, stdio: ['pipe', 'pipe', 'pipe'] });
+    log.info('📋 已复制到剪贴板');
+  } catch {}
+}

package/src/utils/detect-prd.js

@@ -4,7 +4,7 @@
  */
 
 import { readdirSync, readFileSync, statSync } from 'fs';
-import { resolve, basename, extname } from 'path';
+import { resolve, extname } from 'path';
 import { log } from './logger.js';
 
 // PRD 文件名匹配模式（优先级由高到低）

package/src/utils/git.js

@@ -71,10 +71,14 @@ export function commitAll(cwd, message) {
     log.dim('没有变更需要提交');
     return false;
   }
-  exec(`git commit -m "${message}"`, cwd);
+  exec(`git commit -m ${shellEscape(message)}`, cwd);
   return true;
 }
 
+function shellEscape(str) {
+  return `'${str.replace(/'/g, "'\\''")}'`
+}
+
 /**
  * 推送分支
  */

package/src/utils/github.js

@@ -14,6 +14,10 @@ function ghJSON(cmd, cwd) {
   return output ? JSON.parse(output) : null;
 }
 
+function shellEscape(str) {
+  return `'${str.replace(/'/g, "'\\''")}'`
+}
+
 /**
  * 检查 gh CLI 是否登录
  */
@@ -31,7 +35,7 @@ export function checkGhAuth() {
  */
 export function createPR(cwd, { title, body, base = 'main', head }) {
   const output = gh(
-    `pr create --title "${title}" --body "${body}" --base ${base} --head ${head}`,
+    `pr create --title ${shellEscape(title)} --body ${shellEscape(body)} --base ${base} --head ${head}`,
     cwd
   );
   // 从输出中提取 PR URL 和编号