@su-record/vibe 2.9.21 → 2.9.23

package/hooks/scripts/prompt-dispatcher.js

@@ -1,190 +1,190 @@
-#!/usr/bin/env node
-/**
- * UserPromptSubmit 디스패처
- *
- * UserPromptSubmit은 matcher를 지원하지 않아 모든 hook이 매번 실행됨.
- * 이 디스패처가 stdin에서 prompt를 읽고, 패턴 매칭 후 해당 스크립트만 실행.
- *
- * 이점:
- * - 외부 LLM 호출(GPT/Gemini)이 패턴 매칭 없이 발동하지 않음
- * - context window에 불필요한 응답이 주입되지 않음
- * - 단일 프로세스에서 매칭 후 필요한 스크립트만 fork
- */
-import { execFile } from 'child_process';
-import { fileURLToPath } from 'url';
-import path from 'path';
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-
-// 재귀 가드 — 자식 Claude 세션에서 이 hook이 다시 실행되는 것 차단.
-// llm-orchestrate.js의 callClaudeCli가 VIBE_HOOK_DEPTH=1을 주입하므로,
-// 값이 있으면 즉시 종료해 프로세스 폭탄을 막는다.
-if (process.env.VIBE_HOOK_DEPTH) process.exit(0);
-
-// stdin에서 prompt 읽기
-let inputData = '';
-for await (const chunk of process.stdin) {
-  inputData += chunk;
-}
-
-let prompt = '';
-try {
-  const parsed = JSON.parse(inputData);
-  prompt = parsed.prompt || '';
-} catch {
-  process.exit(0);
-}
-
-if (!prompt) process.exit(0);
-
-// 패턴 → 실행할 스크립트 매핑
-// 각 항목: { pattern, script, args, label }
-const DISPATCH_RULES = [
-  // 항상 실행 (경량 스크립트)
-  {
-    pattern: null, // always
-    script: 'keyword-detector.js',
-    args: [prompt],
-    label: 'keyword',
-  },
-
-  // 패턴 매칭이 필요한 스크립트
-  {
-    pattern: /ultrawork|ulw|울트라워크|ralph|ralplan/i,
-    script: null, // keyword-detector가 이미 처리
-    label: 'skip',
-  },
-  // echo 전용 (stdout으로 직접 출력)
-  {
-    pattern: /e2e.*테스트|e2e.*test|playwright|브라우저.*테스트|browser.*test/i,
-    script: null,
-    echo: '[E2E MODE] Use /vibe.utils --e2e for Playwright-based browser testing. Supports visual regression and video recording.',
-    label: 'e2e-echo',
-  },
-
-  // 외부 LLM 호출 (GPT/Gemini) - 패턴 매칭 필수
-  {
-    pattern: /아키텍처.*(검토|리뷰|분석)|architecture.*(review|analyz)|설계.*검토|구조.*분석.*해/i,
-    script: 'llm-orchestrate.js',
-    args: ['gpt', 'orchestrate', 'You are a software architect. Analyze and review the architecture.'],
-    label: 'gpt-architecture',
-  },
-  {
-    pattern: /(UI|UX).*(리뷰|검토|피드백|개선)|사용자.*경험.*검토|디자인.*리뷰|design.*feedback/i,
-    script: 'llm-orchestrate.js',
-    args: ['gemini', 'orchestrate', 'You are a UI/UX expert. Analyze and provide feedback.'],
-    label: 'gemini-uiux',
-  },
-  {
-    pattern: /디버깅.*해|버그.*찾아|find.*bug|debug.*this.*code/i,
-    script: 'llm-orchestrate.js',
-    args: ['gpt', 'orchestrate', 'You are a debugging expert. Find bugs and suggest fixes.'],
-    label: 'gpt-debug',
-  },
-  {
-    pattern: /코드.*정적.*분석|코드.*분석.*해줘|analyze.*code.*quality/i,
-    script: 'llm-orchestrate.js',
-    args: ['gemini', 'orchestrate', 'You are a code analysis expert. Review and analyze the code.'],
-    label: 'gemini-analysis',
-  },
-  {
-    pattern: /코드.*리뷰|code.*review|PR.*리뷰|리뷰.*해줘.*코드/i,
-    script: 'llm-orchestrate.js',
-    args: ['gpt', 'orchestrate', 'You are a code review expert. Review the code for best practices, security, and performance.'],
-    label: 'gpt-codereview',
-  },
-  {
-    pattern: /추론.*해|reasoning|복잡.*분석|deep.*analysis/i,
-    script: 'llm-orchestrate.js',
-    args: ['gpt', 'orchestrate', 'You are a reasoning expert. Analyze the problem deeply and provide detailed reasoning.'],
-    label: 'gpt-reasoning',
-  },
-
-  // 테스트용
-  {
-    pattern: /^test-gpt/i,
-    script: 'llm-orchestrate.js',
-    args: ['gpt', 'orchestrate', 'You are a helpful assistant. Answer the user\'s question clearly and concisely.'],
-    label: 'test-gpt',
-  },
-  {
-    pattern: /^test-gemini/i,
-    script: 'llm-orchestrate.js',
-    args: ['gemini', 'orchestrate', 'You are a helpful assistant. Answer the user\'s question clearly and concisely.'],
-    label: 'test-gemini',
-  },
-];
-
-// 매칭된 스크립트 실행
-const execPromises = [];
-
-for (const rule of DISPATCH_RULES) {
-  if (rule.label === 'skip') continue;
-
-  // pattern이 null이면 항상 실행, 아니면 매칭 확인
-  if (rule.pattern !== null && !rule.pattern.test(prompt)) continue;
-
-  // echo 규칙: 직접 stdout 출력
-  if (rule.echo) {
-    process.stdout.write(rule.echo + '\n');
-    continue;
-  }
-
-  if (!rule.script) continue;
-
-  const scriptPath = path.join(__dirname, rule.script);
-  const args = rule.args || [];
-
-  execPromises.push(
-    new Promise((resolve) => {
-      execFile('node', [scriptPath, ...args], {
-        timeout: 30000,
-        env: { ...process.env },
-      }, (error, stdout, stderr) => {
-        if (stdout?.trim()) {
-          process.stdout.write(stdout);
-        }
-        resolve();
-      });
-    })
-  );
-}
-
-await Promise.all(execPromises);
-
-// Evolution: Gap detection — log unmatched prompts for skill gap analysis
-const matched = DISPATCH_RULES.some(r =>
-  r.label !== 'skip' && r.label !== 'keyword' &&
-  r.pattern !== null && r.pattern.test(prompt) &&
-  (r.script || r.echo)
-);
-
-if (!matched) {
-  setImmediate(async () => {
-    try {
-      const configPath = path.join(process.env.CLAUDE_PROJECT_DIR || '.', '.claude', 'vibe', 'config.json');
-      let gapEnabled = true;
-      try {
-        const fs = await import('fs');
-        if (fs.existsSync(configPath)) {
-          const config = JSON.parse(fs.readFileSync(configPath, 'utf8'));
-          gapEnabled = config.evolution?.gapDetection !== false && config.evolution?.enabled !== false;
-        }
-      } catch { /* ignore */ }
-
-      if (gapEnabled) {
-        const LIB_BASE = (await import('./utils.js')).getLibBaseUrl();
-        const [memMod, gapMod] = await Promise.all([
-          import(`${LIB_BASE}memory/MemoryStorage.js`),
-          import(`${LIB_BASE}evolution/SkillGapDetector.js`),
-        ]);
-        const storage = new memMod.MemoryStorage(process.env.CLAUDE_PROJECT_DIR || '.');
-        const detector = new gapMod.SkillGapDetector(storage);
-        detector.logMiss(prompt.slice(0, 200));
-        storage.close();
-      }
-    } catch (e) {
-      process.stderr.write(`[Evolution] Gap log error: ${e.message}\n`);
-    }
-  });
-}
+#!/usr/bin/env node
+/**
+ * UserPromptSubmit 디스패처
+ *
+ * UserPromptSubmit은 matcher를 지원하지 않아 모든 hook이 매번 실행됨.
+ * 이 디스패처가 stdin에서 prompt를 읽고, 패턴 매칭 후 해당 스크립트만 실행.
+ *
+ * 이점:
+ * - 외부 LLM 호출(GPT/Gemini)이 패턴 매칭 없이 발동하지 않음
+ * - context window에 불필요한 응답이 주입되지 않음
+ * - 단일 프로세스에서 매칭 후 필요한 스크립트만 fork
+ */
+import { execFile } from 'child_process';
+import { fileURLToPath } from 'url';
+import path from 'path';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+// 재귀 가드 — 자식 Claude 세션에서 이 hook이 다시 실행되는 것 차단.
+// llm-orchestrate.js의 callClaudeCli가 VIBE_HOOK_DEPTH=1을 주입하므로,
+// 값이 있으면 즉시 종료해 프로세스 폭탄을 막는다.
+if (process.env.VIBE_HOOK_DEPTH) process.exit(0);
+
+// stdin에서 prompt 읽기
+let inputData = '';
+for await (const chunk of process.stdin) {
+  inputData += chunk;
+}
+
+let prompt = '';
+try {
+  const parsed = JSON.parse(inputData);
+  prompt = parsed.prompt || '';
+} catch {
+  process.exit(0);
+}
+
+if (!prompt) process.exit(0);
+
+// 패턴 → 실행할 스크립트 매핑
+// 각 항목: { pattern, script, args, label }
+const DISPATCH_RULES = [
+  // 항상 실행 (경량 스크립트)
+  {
+    pattern: null, // always
+    script: 'keyword-detector.js',
+    args: [prompt],
+    label: 'keyword',
+  },
+
+  // 패턴 매칭이 필요한 스크립트
+  {
+    pattern: /ultrawork|ulw|울트라워크|ralph|ralplan/i,
+    script: null, // keyword-detector가 이미 처리
+    label: 'skip',
+  },
+  // echo 전용 (stdout으로 직접 출력)
+  {
+    pattern: /e2e.*테스트|e2e.*test|playwright|브라우저.*테스트|browser.*test/i,
+    script: null,
+    echo: '[E2E MODE] Use /vibe.utils --e2e for Playwright-based browser testing. Supports visual regression and video recording.',
+    label: 'e2e-echo',
+  },
+
+  // 외부 LLM 호출 (GPT/Gemini) - 패턴 매칭 필수
+  {
+    pattern: /아키텍처.*(검토|리뷰|분석)|architecture.*(review|analyz)|설계.*검토|구조.*분석.*해/i,
+    script: 'llm-orchestrate.js',
+    args: ['gpt', 'orchestrate', 'You are a software architect. Analyze and review the architecture.'],
+    label: 'gpt-architecture',
+  },
+  {
+    pattern: /(UI|UX).*(리뷰|검토|피드백|개선)|사용자.*경험.*검토|디자인.*리뷰|design.*feedback/i,
+    script: 'llm-orchestrate.js',
+    args: ['gemini', 'orchestrate', 'You are a UI/UX expert. Analyze and provide feedback.'],
+    label: 'gemini-uiux',
+  },
+  {
+    pattern: /디버깅.*해|버그.*찾아|find.*bug|debug.*this.*code/i,
+    script: 'llm-orchestrate.js',
+    args: ['gpt', 'orchestrate', 'You are a debugging expert. Find bugs and suggest fixes.'],
+    label: 'gpt-debug',
+  },
+  {
+    pattern: /코드.*정적.*분석|코드.*분석.*해줘|analyze.*code.*quality/i,
+    script: 'llm-orchestrate.js',
+    args: ['gemini', 'orchestrate', 'You are a code analysis expert. Review and analyze the code.'],
+    label: 'gemini-analysis',
+  },
+  {
+    pattern: /코드.*리뷰|code.*review|PR.*리뷰|리뷰.*해줘.*코드/i,
+    script: 'llm-orchestrate.js',
+    args: ['gpt', 'orchestrate', 'You are a code review expert. Review the code for best practices, security, and performance.'],
+    label: 'gpt-codereview',
+  },
+  {
+    pattern: /추론.*해|reasoning|복잡.*분석|deep.*analysis/i,
+    script: 'llm-orchestrate.js',
+    args: ['gpt', 'orchestrate', 'You are a reasoning expert. Analyze the problem deeply and provide detailed reasoning.'],
+    label: 'gpt-reasoning',
+  },
+
+  // 테스트용
+  {
+    pattern: /^test-gpt/i,
+    script: 'llm-orchestrate.js',
+    args: ['gpt', 'orchestrate', 'You are a helpful assistant. Answer the user\'s question clearly and concisely.'],
+    label: 'test-gpt',
+  },
+  {
+    pattern: /^test-gemini/i,
+    script: 'llm-orchestrate.js',
+    args: ['gemini', 'orchestrate', 'You are a helpful assistant. Answer the user\'s question clearly and concisely.'],
+    label: 'test-gemini',
+  },
+];
+
+// 매칭된 스크립트 실행
+const execPromises = [];
+
+for (const rule of DISPATCH_RULES) {
+  if (rule.label === 'skip') continue;
+
+  // pattern이 null이면 항상 실행, 아니면 매칭 확인
+  if (rule.pattern !== null && !rule.pattern.test(prompt)) continue;
+
+  // echo 규칙: 직접 stdout 출력
+  if (rule.echo) {
+    process.stdout.write(rule.echo + '\n');
+    continue;
+  }
+
+  if (!rule.script) continue;
+
+  const scriptPath = path.join(__dirname, rule.script);
+  const args = rule.args || [];
+
+  execPromises.push(
+    new Promise((resolve) => {
+      execFile('node', [scriptPath, ...args], {
+        timeout: 30000,
+        env: { ...process.env },
+      }, (error, stdout, stderr) => {
+        if (stdout?.trim()) {
+          process.stdout.write(stdout);
+        }
+        resolve();
+      });
+    })
+  );
+}
+
+await Promise.all(execPromises);
+
+// Evolution: Gap detection — log unmatched prompts for skill gap analysis
+const matched = DISPATCH_RULES.some(r =>
+  r.label !== 'skip' && r.label !== 'keyword' &&
+  r.pattern !== null && r.pattern.test(prompt) &&
+  (r.script || r.echo)
+);
+
+if (!matched) {
+  setImmediate(async () => {
+    try {
+      const configPath = path.join(process.env.CLAUDE_PROJECT_DIR || '.', '.claude', 'vibe', 'config.json');
+      let gapEnabled = true;
+      try {
+        const fs = await import('fs');
+        if (fs.existsSync(configPath)) {
+          const config = JSON.parse(fs.readFileSync(configPath, 'utf8'));
+          gapEnabled = config.evolution?.gapDetection !== false && config.evolution?.enabled !== false;
+        }
+      } catch { /* ignore */ }
+
+      if (gapEnabled) {
+        const LIB_BASE = (await import('./utils.js')).getLibBaseUrl();
+        const [memMod, gapMod] = await Promise.all([
+          import(`${LIB_BASE}memory/MemoryStorage.js`),
+          import(`${LIB_BASE}evolution/SkillGapDetector.js`),
+        ]);
+        const storage = new memMod.MemoryStorage(process.env.CLAUDE_PROJECT_DIR || '.');
+        const detector = new gapMod.SkillGapDetector(storage);
+        detector.logMiss(prompt.slice(0, 200));
+        storage.close();
+      }
+    } catch (e) {
+      process.stderr.write(`[Evolution] Gap log error: ${e.message}\n`);
+    }
+  });
+}

package/hooks/scripts/scope-guard.js

@@ -0,0 +1,145 @@
+#!/usr/bin/env node
+/**
+ * Scope Guard — declared-scope enforcement for Edit/Write.
+ *
+ * CLAUDE.md의 Hard Rule "Modify only requested scope"를 훅으로 강제한다.
+ * 사용자가 `.claude/vibe/scope.json`에 범위를 선언하면, Edit/Write가 그
+ * 범위를 벗어날 때 경고(warn) 또는 차단(block)한다.
+ *
+ * 스코프 파일이 없거나 비어있으면 no-op — 기존 동작을 바꾸지 않는다.
+ *
+ * scope.json 스키마:
+ * {
+ *   "mode": "warn" | "block",      // default: "warn"
+ *   "allow": ["src/cli/**"],       // glob 패턴 (둘 중 하나라도 있으면 allow-list 모드)
+ *   "deny":  ["src/hooks/**"],     // glob 패턴 (allow 통과 후에도 deny 매칭 시 차단)
+ *   "reason": "CLI refactor"       // 메시지에 표시
+ * }
+ *
+ * 매칭 대상: tool_input.file_path (project-relative 또는 absolute 모두 허용)
+ */
+
+import fs from 'fs';
+import path from 'path';
+import { PROJECT_DIR, logHookDecision } from './utils.js';
+
+const SCOPE_PATH = path.join(PROJECT_DIR, '.claude', 'vibe', 'scope.json');
+
+function readScope() {
+  try {
+    if (!fs.existsSync(SCOPE_PATH)) return null;
+    const raw = fs.readFileSync(SCOPE_PATH, 'utf-8');
+    const parsed = JSON.parse(raw);
+    const allow = Array.isArray(parsed.allow) ? parsed.allow : [];
+    const deny = Array.isArray(parsed.deny) ? parsed.deny : [];
+    if (allow.length === 0 && deny.length === 0) return null;
+    return {
+      mode: parsed.mode === 'block' ? 'block' : 'warn',
+      allow,
+      deny,
+      reason: typeof parsed.reason === 'string' ? parsed.reason : '',
+    };
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * 경량 glob → RegExp 변환.
+ *  - `**` : 경로 구분자 포함 임의 문자열
+ *  - `*`  : 구분자 제외 임의 문자열
+ *  - `?`  : 구분자 제외 한 글자
+ *  - 기타 정규식 메타문자는 이스케이프
+ */
+function globToRegExp(glob) {
+  const normalized = glob.replace(/\\/g, '/');
+  let out = '';
+  for (let i = 0; i < normalized.length; i++) {
+    const c = normalized[i];
+    if (c === '*') {
+      if (normalized[i + 1] === '*') {
+        out += '.*';
+        i++;
+        if (normalized[i + 1] === '/') i++; // `**/` → `.*`
+      } else {
+        out += '[^/]*';
+      }
+    } else if (c === '?') {
+      out += '[^/]';
+    } else if ('.+^$()|{}[]\\'.includes(c)) {
+      out += '\\' + c;
+    } else {
+      out += c;
+    }
+  }
+  return new RegExp('^' + out + '$');
+}
+
+function matchesAny(relPath, patterns) {
+  return patterns.some(p => globToRegExp(p).test(relPath));
+}
+
+function toRelative(filePath) {
+  if (!filePath) return '';
+  const abs = path.isAbsolute(filePath) ? filePath : path.resolve(PROJECT_DIR, filePath);
+  const rel = path.relative(path.resolve(PROJECT_DIR), abs).replace(/\\/g, '/');
+  return rel || path.basename(filePath).replace(/\\/g, '/');
+}
+
+function readStdinSync() {
+  try {
+    if (process.stdin.isTTY) return null;
+    const buf = Buffer.alloc(65536);
+    const bytesRead = fs.readSync(0, buf, 0, buf.length, null);
+    if (bytesRead > 0) return JSON.parse(buf.toString('utf-8', 0, bytesRead));
+  } catch { /* ignore */ }
+  return null;
+}
+
+function extractFilePath(toolInput) {
+  if (!toolInput) return '';
+  if (typeof toolInput === 'string') {
+    try { return JSON.parse(toolInput).file_path || ''; }
+    catch { return toolInput; }
+  }
+  return typeof toolInput.file_path === 'string' ? toolInput.file_path : '';
+}
+
+const scope = readScope();
+if (!scope) process.exit(0); // no scope declared → no-op
+
+const stdinPayload = readStdinSync();
+const toolName = stdinPayload?.tool_name || process.argv[2] || '';
+if (toolName !== 'Edit' && toolName !== 'Write') process.exit(0);
+
+const rawInput = stdinPayload?.tool_input ?? process.argv[3] ?? process.env.TOOL_INPUT ?? '';
+const filePath = extractFilePath(rawInput);
+if (!filePath) process.exit(0);
+
+const rel = toRelative(filePath);
+
+// 평가 순서: deny 우선 → allow 검증
+const denied = scope.deny.length > 0 && matchesAny(rel, scope.deny);
+const allowed = scope.allow.length === 0 || matchesAny(rel, scope.allow);
+
+const violated = denied || !allowed;
+if (!violated) process.exit(0);
+
+const lines = [];
+lines.push(`🚧 SCOPE GUARD: ${toolName} — out of declared scope`);
+lines.push(`  file: ${rel}`);
+if (denied) lines.push(`  reason: matches deny pattern`);
+else if (!allowed) lines.push(`  reason: not in allow list`);
+if (scope.reason) lines.push(`  declared scope: ${scope.reason}`);
+lines.push(`  declared in: .claude/vibe/scope.json (mode=${scope.mode})`);
+
+const blocking = scope.mode === 'block';
+if (blocking) {
+  lines.push('');
+  lines.push('🚫 BLOCKED. Edit scope.json or justify to the user before proceeding.');
+}
+
+console.log(lines.join('\n'));
+logHookDecision('scope-guard', toolName, blocking ? 'block' : 'warn', `${rel} ${denied ? '(deny)' : '(out-of-allow)'}`);
+
+process.exit(blocking ? 2 : 0);