@winspan/claude-forge 0.1.1

package/dist/hooks/post-tool-use.sh

@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+# Claude Forge - PostToolUse Hook
+
+SOCKET_PATH="${CLAUDE_FORGE_SOCKET:-$HOME/.claude-forge/daemon.sock}"
+
+# 读取 stdin
+INPUT=$(cat)
+
+# 提取字段（tool_response 是 Claude Code 的字段名）
+TOOL_NAME="${CLAUDE_TOOL_NAME:-$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("tool_name",""))' 2>/dev/null || echo '')}"
+TOOL_INPUT=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(json.dumps(d.get("tool_input",{})))' 2>/dev/null || echo '{}')
+TOOL_OUTPUT=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(json.dumps(d.get("tool_response",{})))' 2>/dev/null || echo '{}')
+# cwd 是 Claude Code 的项目根目录
+PROJECT_PATH=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("cwd",""))' 2>/dev/null || echo '')
+PROJECT_PATH="${PROJECT_PATH:-${PWD}}"
+
+# 构造事件 JSON（通过环境变量传参，避免 shell 注入）
+EVENT=$(FORGE_TOOL_NAME="$TOOL_NAME" FORGE_TOOL_INPUT="$TOOL_INPUT" FORGE_TOOL_OUTPUT="$TOOL_OUTPUT" FORGE_PROJECT_PATH="$PROJECT_PATH" \
+  python3 -c "
+import json, os
+from datetime import datetime
+try:
+    tool_input = json.loads(os.environ.get('FORGE_TOOL_INPUT', '{}'))
+except Exception:
+    tool_input = {}
+try:
+    tool_output = json.loads(os.environ.get('FORGE_TOOL_OUTPUT', '{}'))
+except Exception:
+    tool_output = {}
+print(json.dumps({
+    'hook_type': 'PostToolUse',
+    'timestamp': datetime.now().strftime('%Y-%m-%dT%H:%M:%S'),
+    'session_id': os.environ.get('CLAUDE_CODE_SESSION_ID', 'cli'),
+    'project_path': os.environ.get('FORGE_PROJECT_PATH', ''),
+    'tool_name': os.environ.get('FORGE_TOOL_NAME', ''),
+    'tool_input': tool_input,
+    'tool_output': tool_output,
+}))
+" 2>/dev/null)
+
+# 发送到 daemon（PostToolUse 也需要等待响应以支持通知注入）
+RESPONSE=$(echo "$EVENT" | nc -U -w 5 "$SOCKET_PATH" 2>/dev/null || true)
+if [ -n "$RESPONSE" ]; then
+  HAS_CONTEXT=$(echo "$RESPONSE" | python3 -c 'import sys,json; d=json.load(sys.stdin); print("yes" if d.get("additionalContext") else "no")' 2>/dev/null || echo 'no')
+  if [ "$HAS_CONTEXT" = "yes" ]; then
+    echo "$RESPONSE"
+  fi
+fi
+exit 0

package/dist/hooks/pre-tool-use.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# Claude Forge - PreToolUse Hook（双向通信）
+
+SOCKET_PATH="${CLAUDE_FORGE_SOCKET:-$HOME/.claude-forge/daemon.sock}"
+
+# 读取 stdin（Claude Code 传入的 JSON）
+INPUT=$(cat)
+
+# 提取字段
+TOOL_NAME="${CLAUDE_TOOL_NAME:-$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("tool_name",""))' 2>/dev/null || echo '')}"
+TOOL_INPUT=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(json.dumps(d.get("tool_input",{})))' 2>/dev/null || echo '{}')
+PROJECT_PATH=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("cwd",""))' 2>/dev/null || echo '')
+PROJECT_PATH="${PROJECT_PATH:-${PWD}}"
+
+# 构造事件 JSON（通过环境变量传参，避免 shell 注入）
+EVENT=$(FORGE_TOOL_NAME="$TOOL_NAME" FORGE_TOOL_INPUT="$TOOL_INPUT" FORGE_PROJECT_PATH="$PROJECT_PATH" \
+  python3 -c "
+import json, os
+from datetime import datetime
+tool_input_raw = os.environ.get('FORGE_TOOL_INPUT', '{}')
+try:
+    tool_input = json.loads(tool_input_raw)
+except Exception:
+    tool_input = {}
+print(json.dumps({
+    'hook_type': 'PreToolUse',
+    'timestamp': datetime.now().strftime('%Y-%m-%dT%H:%M:%S'),
+    'session_id': os.environ.get('CLAUDE_CODE_SESSION_ID', 'cli'),
+    'project_path': os.environ.get('FORGE_PROJECT_PATH', ''),
+    'tool_name': os.environ.get('FORGE_TOOL_NAME', ''),
+    'tool_input': tool_input,
+}))
+" 2>/dev/null)
+
+# 发送事件并等待响应（双向通信，5 秒超时）
+RESPONSE=$(echo "$EVENT" | nc -U -w 5 "$SOCKET_PATH" 2>/dev/null)
+
+if [ -n "$RESPONSE" ]; then
+  # 解析响应
+  ALLOW=$(echo "$RESPONSE" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(str(d.get("allow",True)).lower())' 2>/dev/null || echo 'true')
+
+  if [ "$ALLOW" = "false" ]; then
+    # 输出拦截 JSON 到 stdout（Claude Code 读取）
+    echo "$RESPONSE"
+    exit 2
+  fi
+
+  # 有 additionalContext 时输出
+  HAS_CONTEXT=$(echo "$RESPONSE" | python3 -c 'import sys,json; d=json.load(sys.stdin); print("yes" if d.get("additionalContext") else "no")' 2>/dev/null || echo 'no')
+  if [ "$HAS_CONTEXT" = "yes" ]; then
+    echo "$RESPONSE"
+  fi
+fi
+
+exit 0

package/dist/hooks/stop.sh

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+# Claude Forge - Stop Hook
+
+SOCKET_PATH="${CLAUDE_FORGE_SOCKET:-$HOME/.claude-forge/daemon.sock}"
+
+# 读取 stdin
+INPUT=$(cat 2>/dev/null || echo '{}')
+
+# 提取 cwd
+PROJECT_PATH=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("cwd",""))' 2>/dev/null || echo '')
+PROJECT_PATH="${PROJECT_PATH:-${PWD}}"
+
+# 构造事件 JSON（通过环境变量传参，避免 shell 注入）
+EVENT=$(FORGE_PROJECT_PATH="$PROJECT_PATH" \
+  python3 -c "
+import json, os
+from datetime import datetime
+print(json.dumps({
+    'hook_type': 'Stop',
+    'timestamp': datetime.now().strftime('%Y-%m-%dT%H:%M:%S'),
+    'session_id': os.environ.get('CLAUDE_CODE_SESSION_ID', 'cli'),
+    'project_path': os.environ.get('FORGE_PROJECT_PATH', ''),
+    'tool_name': 'stop',
+    'tool_input': {},
+}))
+" 2>/dev/null)
+
+echo "$EVENT" | nc -U -w 1 "$SOCKET_PATH" 2>/dev/null || true
+exit 0

package/dist/hooks/user-prompt-submit.sh

@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+# Claude Forge - UserPromptSubmit Hook
+# 拦截用户输入，触发意图分析和自动 Pipeline 编排
+
+SOCKET_PATH="${CLAUDE_FORGE_SOCKET:-$HOME/.claude-forge/daemon.sock}"
+
+# daemon 未运行，快速跳过
+if [ ! -S "$SOCKET_PATH" ]; then
+  exit 0
+fi
+
+# 读取 stdin（Claude Code 传入的 JSON）
+INPUT=$(cat)
+
+# 提取字段
+USER_PROMPT=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("prompt",""))' 2>/dev/null || echo '')
+PROJECT_PATH=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("cwd",""))' 2>/dev/null || echo '')
+PROJECT_PATH="${PROJECT_PATH:-${PWD}}"
+
+# 空 prompt 跳过
+if [ -z "$USER_PROMPT" ]; then
+  exit 0
+fi
+
+# 安全地构造事件 JSON（通过环境变量传参，避免 shell 注入）
+EVENT=$(FORGE_USER_PROMPT="$USER_PROMPT" FORGE_PROJECT_PATH="$PROJECT_PATH" \
+  python3 -c "
+import json, os
+from datetime import datetime
+print(json.dumps({
+    'hook_type': 'UserPromptSubmit',
+    'timestamp': datetime.now().strftime('%Y-%m-%dT%H:%M:%S'),
+    'session_id': os.environ.get('CLAUDE_CODE_SESSION_ID', 'cli'),
+    'project_path': os.environ.get('FORGE_PROJECT_PATH', ''),
+    'tool_name': 'UserPrompt',
+    'tool_input': {'user_prompt': os.environ.get('FORGE_USER_PROMPT', '')},
+}))
+" 2>/dev/null)
+
+if [ -z "$EVENT" ]; then
+  exit 0
+fi
+
+# 发送事件并等待响应（10 秒超时，AI 分析可能需要更多时间）
+RESPONSE=$(echo "$EVENT" | nc -U -w 10 "$SOCKET_PATH" 2>/dev/null)
+
+if [ -n "$RESPONSE" ]; then
+  HAS_CONTEXT=$(echo "$RESPONSE" | python3 -c 'import sys,json; d=json.load(sys.stdin); print("yes" if d.get("additionalContext") else "no")' 2>/dev/null || echo 'no')
+  if [ "$HAS_CONTEXT" = "yes" ]; then
+    # stderr 输出到终端，让用户实时看到决策过程
+    # 用 fd3 保存真实 stderr，python3 错误丢弃，面板输出保留
+    exec 3>&2
+    echo "$RESPONSE" | python3 -c '
+import sys, json, os
+d = json.load(sys.stdin)
+ctx = d.get("additionalContext", "")
+lines = []
+for line in ctx.split("\n"):
+    if line.startswith("请在回复"):
+        break
+    if line.strip():
+        lines.append(line)
+if lines:
+    os.write(3, ("\033[36m" + "\n".join(lines) + "\033[0m\n").encode())
+' 2>/dev/null
+    exec 3>&-
+    # stdout 返回给 Claude Code
+    echo "$RESPONSE"
+  fi
+fi
+
+exit 0

package/dist/orchestration/index.d.ts

@@ -0,0 +1,32 @@
+import type { ForgeEvent } from '../types/index.js';
+import type { HookResponse } from '../daemon/server.js';
+import type Database from 'better-sqlite3';
+import { type PolicyRule } from './policy-engine.js';
+export interface OrchestrationConfig {
+    enabled: boolean;
+    customRules?: PolicyRule[];
+}
+export declare class OrchestrationEngine {
+    private policy;
+    private notifier;
+    private tracker;
+    private enabled;
+    constructor(config: OrchestrationConfig);
+    /**
+     * PreToolUse 事件：策略评估 + 通知附带
+     */
+    evaluatePreToolUse(event: ForgeEvent): HookResponse | null;
+    /**
+     * PostToolUse 事件：更新跟踪
+     */
+    handlePostToolUse(event: ForgeEvent): void;
+    /**
+     * 外部推送通知（蒸馏完成、CLAUDE.md 生成等）
+     */
+    pushNotification(message: string): void;
+    flushNotifications(): string | null;
+    setTrackerDatabase(db: Database.Database): void;
+    getStatus(): import("./tracker.js").SessionStatus;
+    getTrackerStats(days?: number): import("./tracker.js").TrackerStats | null;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/orchestration/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/orchestration/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAKnE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;CAC5B;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,OAAO,CAAU;gBAEb,MAAM,EAAE,mBAAmB;IAOvC;;OAEG;IACH,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,GAAG,IAAI;IAiC1D;;OAEG;IACH,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAK1C;;OAEG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIvC,kBAAkB,IAAI,MAAM,GAAG,IAAI;IAInC,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI;IAI/C,SAAS;IAIT,eAAe,CAAC,IAAI,SAAI;CAGzB"}

package/dist/orchestration/index.js

@@ -0,0 +1,72 @@
+import { PolicyEngine } from './policy-engine.js';
+import { Notifier } from './notifier.js';
+import { ExecutionTracker } from './tracker.js';
+import { logger } from '../utils/logger.js';
+export class OrchestrationEngine {
+    policy;
+    notifier;
+    tracker;
+    enabled;
+    constructor(config) {
+        this.enabled = config.enabled;
+        this.policy = new PolicyEngine(config.customRules);
+        this.notifier = new Notifier();
+        this.tracker = new ExecutionTracker();
+    }
+    /**
+     * PreToolUse 事件：策略评估 + 通知附带
+     */
+    evaluatePreToolUse(event) {
+        if (!this.enabled)
+            return null;
+        // 1. 策略评估
+        const decision = this.policy.evaluate(event);
+        if (decision && !decision.allow) {
+            logger.info(`策略已拦截：${decision.reason}`);
+            return { allow: false, reason: decision.reason };
+        }
+        // 2. 更新跟踪器
+        this.tracker.track(event);
+        // 3. 收集需要注入的上下文
+        const contextParts = [];
+        if (decision?.context) {
+            contextParts.push(decision.context);
+        }
+        // 待发送通知
+        const notifications = this.notifier.flush();
+        if (notifications) {
+            contextParts.push(notifications);
+        }
+        if (contextParts.length > 0) {
+            return { allow: true, additionalContext: contextParts.join('\n') };
+        }
+        return null;
+    }
+    /**
+     * PostToolUse 事件：更新跟踪
+     */
+    handlePostToolUse(event) {
+        if (!this.enabled)
+            return;
+        this.tracker.track(event);
+    }
+    /**
+     * 外部推送通知（蒸馏完成、CLAUDE.md 生成等）
+     */
+    pushNotification(message) {
+        this.notifier.push(message);
+    }
+    flushNotifications() {
+        return this.notifier.flush();
+    }
+    setTrackerDatabase(db) {
+        this.tracker.setDatabase(db);
+    }
+    getStatus() {
+        return this.tracker.getStatus();
+    }
+    getTrackerStats(days = 7) {
+        return this.tracker.getStats(days);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/orchestration/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/orchestration/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAmB,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAO5C,MAAM,OAAO,mBAAmB;IACtB,MAAM,CAAe;IACrB,QAAQ,CAAW;IACnB,OAAO,CAAmB;IAC1B,OAAO,CAAU;IAEzB,YAAY,MAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,KAAiB;QAClC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE/B,UAAU;QACV,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACnD,CAAC;QAED,WAAW;QACX,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE1B,gBAAgB;QAChB,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,IAAI,QAAQ,EAAE,OAAO,EAAE,CAAC;YACtB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAED,QAAQ;QACR,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC5C,IAAI,aAAa,EAAE,CAAC;YAClB,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,KAAiB;QACjC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,OAAe;QAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,kBAAkB,CAAC,EAAqB;QACtC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;IAClC,CAAC;IAED,eAAe,CAAC,IAAI,GAAG,CAAC;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/orchestration/notifier.d.ts

@@ -0,0 +1,11 @@
+export declare class Notifier {
+    private pendingNotifications;
+    push(message: string): void;
+    /**
+     * 获取所有待发送通知并清空队列
+     * 格式化为单条 additionalContext 字符串
+     */
+    flush(): string | null;
+    get pendingCount(): number;
+}
+//# sourceMappingURL=notifier.d.ts.map

package/dist/orchestration/notifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifier.d.ts","sourceRoot":"","sources":["../../src/orchestration/notifier.ts"],"names":[],"mappings":"AAEA,qBAAa,QAAQ;IACnB,OAAO,CAAC,oBAAoB,CAAgB;IAE5C,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAK3B;;;OAGG;IACH,KAAK,IAAI,MAAM,GAAG,IAAI;IAOtB,IAAI,YAAY,IAAI,MAAM,CAEzB;CACF"}

package/dist/orchestration/notifier.js

@@ -0,0 +1,22 @@
+import { logger } from '../utils/logger.js';
+export class Notifier {
+    pendingNotifications = [];
+    push(message) {
+        this.pendingNotifications.push(message);
+        logger.info(`通知已入队：${message}`);
+    }
+    /**
+     * 获取所有待发送通知并清空队列
+     * 格式化为单条 additionalContext 字符串
+     */
+    flush() {
+        if (this.pendingNotifications.length === 0)
+            return null;
+        const messages = this.pendingNotifications.splice(0);
+        return messages.join('\n');
+    }
+    get pendingCount() {
+        return this.pendingNotifications.length;
+    }
+}
+//# sourceMappingURL=notifier.js.map

package/dist/orchestration/notifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifier.js","sourceRoot":"","sources":["../../src/orchestration/notifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,OAAO,QAAQ;IACX,oBAAoB,GAAa,EAAE,CAAC;IAE5C,IAAI,CAAC,OAAe;QAClB,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAExD,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;IAC1C,CAAC;CACF"}

package/dist/orchestration/policy-engine.d.ts

@@ -0,0 +1,21 @@
+import type { ForgeEvent } from '../types/index.js';
+export interface PolicyRule {
+    id: string;
+    name: string;
+    tool: string;
+    pattern: string;
+    action: 'deny' | 'warn' | 'allow';
+    reason: string;
+    context?: string;
+}
+export interface PolicyDecision {
+    allow: boolean;
+    reason?: string;
+    context?: string;
+}
+export declare class PolicyEngine {
+    private rules;
+    constructor(customRules?: PolicyRule[]);
+    evaluate(event: ForgeEvent): PolicyDecision | null;
+}
+//# sourceMappingURL=policy-engine.d.ts.map

package/dist/orchestration/policy-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../../src/orchestration/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAgDD,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAe;gBAEhB,WAAW,GAAE,UAAU,EAAO;IAI1C,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc,GAAG,IAAI;CA8BnD"}

package/dist/orchestration/policy-engine.js

@@ -0,0 +1,77 @@
+import { logger } from '../utils/logger.js';
+/** 内置安全规则 */
+const BUILTIN_RULES = [
+    {
+        id: 'no-rm-rf-root',
+        name: '禁止删除根目录',
+        tool: 'Bash',
+        pattern: 'rm\\s+-[^\\s]*r[^\\s]*f[^\\s]*\\s+/',
+        action: 'deny',
+        reason: '危险操作：禁止对根目录执行 rm -rf',
+    },
+    {
+        id: 'no-sudo-rm',
+        name: '禁止 sudo 删除',
+        tool: 'Bash',
+        pattern: 'sudo\\s+rm\\s+-[^\\s]*r',
+        action: 'deny',
+        reason: '危险操作：禁止 sudo rm -r',
+    },
+    {
+        id: 'warn-force-push',
+        name: 'force push 警告',
+        tool: 'Bash',
+        pattern: 'git\\s+push\\s+.*--force',
+        action: 'warn',
+        reason: '警告：force push 可能覆盖远程历史',
+        context: '[Forge 警告] 检测到 git push --force，请确认这是有意为之。force push 会覆盖远程仓库的提交历史。',
+    },
+    {
+        id: 'no-chmod-777',
+        name: '禁止 chmod 777',
+        tool: 'Bash',
+        pattern: 'chmod\\s+777',
+        action: 'deny',
+        reason: '安全风险：禁止设置 777 权限',
+    },
+    {
+        id: 'warn-drop-table',
+        name: 'DROP TABLE 警告',
+        tool: 'Bash',
+        pattern: 'DROP\\s+TABLE|DROP\\s+DATABASE',
+        action: 'warn',
+        reason: '警告：检测到数据库删除操作',
+        context: '[Forge 警告] 检测到 DROP TABLE/DATABASE 操作，请确认不会误删生产数据。',
+    },
+];
+export class PolicyEngine {
+    rules;
+    constructor(customRules = []) {
+        this.rules = [...BUILTIN_RULES, ...customRules];
+    }
+    evaluate(event) {
+        if (event.hook_type !== 'PreToolUse')
+            return null;
+        const toolName = event.tool_name || '';
+        const inputStr = event.tool_input ? JSON.stringify(event.tool_input) : '';
+        for (const rule of this.rules) {
+            // 匹配工具名
+            if (rule.tool && !new RegExp(rule.tool, 'i').test(toolName)) {
+                continue;
+            }
+            // 匹配 input 内容
+            if (rule.pattern && !new RegExp(rule.pattern, 'i').test(inputStr)) {
+                continue;
+            }
+            logger.info(`策略匹配：${rule.name} (${rule.action})`);
+            if (rule.action === 'deny') {
+                return { allow: false, reason: rule.reason };
+            }
+            if (rule.action === 'warn') {
+                return { allow: true, context: rule.context || rule.reason };
+            }
+        }
+        return null; // 无匹配规则，放行
+    }
+}
+//# sourceMappingURL=policy-engine.js.map

package/dist/orchestration/policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/orchestration/policy-engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAkB5C,aAAa;AACb,MAAM,aAAa,GAAiB;IAClC;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,qCAAqC;QAC9C,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,sBAAsB;KAC/B;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,yBAAyB;QAClC,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,oBAAoB;KAC7B;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,0BAA0B;QACnC,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,wBAAwB;QAChC,OAAO,EAAE,oEAAoE;KAC9E;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,cAAc;QACvB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,kBAAkB;KAC3B;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,gCAAgC;QACzC,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,oDAAoD;KAC9D;CACF,CAAC;AAEF,MAAM,OAAO,YAAY;IACf,KAAK,CAAe;IAE5B,YAAY,cAA4B,EAAE;QACxC,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,WAAW,CAAC,CAAC;IAClD,CAAC;IAED,QAAQ,CAAC,KAAiB;QACxB,IAAI,KAAK,CAAC,SAAS,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QAElD,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE1E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,QAAQ;YACR,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5D,SAAS;YACX,CAAC;YAED,cAAc;YACd,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClE,SAAS;YACX,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YAElD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/C,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,CAAC,WAAW;IAC1B,CAAC;CACF"}

package/dist/orchestration/tracker.d.ts

@@ -0,0 +1,45 @@
+import type { ForgeEvent } from '../types/index.js';
+import type Database from 'better-sqlite3';
+export interface SessionStatus {
+    toolCallCount: number;
+    fileEditCount: number;
+    filesEdited: string[];
+    lastTool: string | null;
+    lastTime: string | null;
+    duration: string;
+}
+export interface TrackerStats {
+    totalSessions: number;
+    totalToolCalls: number;
+    totalFilesEdited: number;
+    topTools: Array<{
+        tool: string;
+        count: number;
+    }>;
+    topFiles: Array<{
+        file: string;
+        count: number;
+    }>;
+}
+/**
+ * 执行跟踪器 — 内存跟踪当前会话，同时持久化到 SQLite 供跨会话统计
+ */
+export declare class ExecutionTracker {
+    private toolCalls;
+    private editedFiles;
+    private startTime;
+    private db;
+    /**
+     * 注入 SQLite 实例以启用持久化（可选）
+     */
+    setDatabase(db: Database.Database): void;
+    private ensureSchema;
+    track(event: ForgeEvent): void;
+    getStatus(): SessionStatus;
+    /**
+     * 跨会话统计（需要 SQLite）
+     */
+    getStats(days?: number): TrackerStats | null;
+    reset(): void;
+}
+//# sourceMappingURL=tracker.d.ts.map

package/dist/orchestration/tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracker.d.ts","sourceRoot":"","sources":["../../src/orchestration/tracker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClD;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,SAAS,CAA6C;IAC9D,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,SAAS,CAAoC;IACrD,OAAO,CAAC,EAAE,CAAkC;IAE5C;;OAEG;IACH,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI;IAKxC,OAAO,CAAC,YAAY;IAiBpB,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAuB9B,SAAS,IAAI,aAAa;IAe1B;;OAEG;IACH,QAAQ,CAAC,IAAI,SAAI,GAAG,YAAY,GAAG,IAAI;IAgCvC,KAAK,IAAI,IAAI;CAKd"}

package/dist/orchestration/tracker.js

@@ -0,0 +1,95 @@
+/**
+ * 执行跟踪器 — 内存跟踪当前会话，同时持久化到 SQLite 供跨会话统计
+ */
+export class ExecutionTracker {
+    toolCalls = [];
+    editedFiles = new Set();
+    startTime = new Date().toISOString();
+    db = null;
+    /**
+     * 注入 SQLite 实例以启用持久化（可选）
+     */
+    setDatabase(db) {
+        this.db = db;
+        this.ensureSchema();
+    }
+    ensureSchema() {
+        if (!this.db)
+            return;
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS tracker_tool_calls (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        session_id TEXT NOT NULL,
+        tool_name TEXT NOT NULL,
+        file_path TEXT,
+        timestamp TEXT NOT NULL,
+        created_at TEXT DEFAULT (datetime('now'))
+      );
+      CREATE INDEX IF NOT EXISTS idx_tracker_session ON tracker_tool_calls(session_id);
+      CREATE INDEX IF NOT EXISTS idx_tracker_tool ON tracker_tool_calls(tool_name);
+      CREATE INDEX IF NOT EXISTS idx_tracker_ts ON tracker_tool_calls(timestamp DESC);
+    `);
+    }
+    track(event) {
+        if (!event.tool_name)
+            return;
+        this.toolCalls.push({ tool: event.tool_name, time: event.timestamp });
+        const filePath = event.tool_input?.file_path;
+        if (['Edit', 'Write', 'MultiEdit'].includes(event.tool_name) && filePath) {
+            this.editedFiles.add(filePath);
+        }
+        // 持久化到 SQLite
+        if (this.db) {
+            try {
+                this.db.prepare(`
+          INSERT INTO tracker_tool_calls (session_id, tool_name, file_path, timestamp)
+          VALUES (?, ?, ?, ?)
+        `).run(event.session_id, event.tool_name, filePath ?? null, event.timestamp);
+            }
+            catch {
+                // 持久化失败不影响内存跟踪
+            }
+        }
+    }
+    getStatus() {
+        const last = this.toolCalls[this.toolCalls.length - 1];
+        const start = new Date(this.startTime).getTime();
+        const mins = Math.floor((Date.now() - start) / 60000);
+        return {
+            toolCallCount: this.toolCalls.length,
+            fileEditCount: this.editedFiles.size,
+            filesEdited: [...this.editedFiles],
+            lastTool: last?.tool ?? null,
+            lastTime: last?.time ?? null,
+            duration: mins < 60 ? `${mins}分钟` : `${Math.floor(mins / 60)}小时${mins % 60}分钟`,
+        };
+    }
+    /**
+     * 跨会话统计（需要 SQLite）
+     */
+    getStats(days = 7) {
+        if (!this.db)
+            return null;
+        const cutoff = new Date(Date.now() - days * 86400000).toISOString();
+        const totalSessions = this.db.prepare('SELECT COUNT(DISTINCT session_id) as c FROM tracker_tool_calls WHERE timestamp > ?').get(cutoff).c;
+        const totalToolCalls = this.db.prepare('SELECT COUNT(*) as c FROM tracker_tool_calls WHERE timestamp > ?').get(cutoff).c;
+        const totalFilesEdited = this.db.prepare('SELECT COUNT(DISTINCT file_path) as c FROM tracker_tool_calls WHERE file_path IS NOT NULL AND timestamp > ?').get(cutoff).c;
+        const topTools = this.db.prepare(`
+      SELECT tool_name as tool, COUNT(*) as count
+      FROM tracker_tool_calls WHERE timestamp > ?
+      GROUP BY tool_name ORDER BY count DESC LIMIT 10
+    `).all(cutoff);
+        const topFiles = this.db.prepare(`
+      SELECT file_path as file, COUNT(*) as count
+      FROM tracker_tool_calls WHERE file_path IS NOT NULL AND timestamp > ?
+      GROUP BY file_path ORDER BY count DESC LIMIT 10
+    `).all(cutoff);
+        return { totalSessions, totalToolCalls, totalFilesEdited, topTools, topFiles };
+    }
+    reset() {
+        this.toolCalls = [];
+        this.editedFiles.clear();
+        this.startTime = new Date().toISOString();
+    }
+}
+//# sourceMappingURL=tracker.js.map

package/dist/orchestration/tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracker.js","sourceRoot":"","sources":["../../src/orchestration/tracker.ts"],"names":[],"mappings":"AAoBA;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACnB,SAAS,GAA0C,EAAE,CAAC;IACtD,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,SAAS,GAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,EAAE,GAA6B,IAAI,CAAC;IAE5C;;OAEG;IACH,WAAW,CAAC,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO;QACrB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;KAYZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAiB;QACrB,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO;QAE7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAEtE,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,EAAE,SAA+B,CAAC;QACnE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAED,cAAc;QACd,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;SAGf,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,IAAI,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/E,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS;QACP,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC;QAEtD,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;YACpC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YACpC,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;YAClC,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI;YAC5B,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI;YAC5B,QAAQ,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,IAAI,GAAG,EAAE,IAAI;SAC/E,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,IAAI,GAAG,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAEpE,MAAM,aAAa,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CACpC,oFAAoF,CACrF,CAAC,GAAG,CAAC,MAAM,CAAmB,CAAC,CAAC,CAAC;QAElC,MAAM,cAAc,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CACrC,kEAAkE,CACnE,CAAC,GAAG,CAAC,MAAM,CAAmB,CAAC,CAAC,CAAC;QAElC,MAAM,gBAAgB,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CACvC,6GAA6G,CAC9G,CAAC,GAAG,CAAC,MAAM,CAAmB,CAAC,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAIhC,CAAC,CAAC,GAAG,CAAC,MAAM,CAA2C,CAAC;QAEzD,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAIhC,CAAC,CAAC,GAAG,CAAC,MAAM,CAA2C,CAAC;QAEzD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACjF,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,CAAC;CACF"}