@winspan/claude-forge 0.3.1 → 0.3.2

package/README.md

@@ -146,7 +146,7 @@ Claude 读取 additionalContext，按指令执行
 | `{project}/.claude-forge/decisions.md` | 项目决策日志 |
 | `{project}/.claude-forge/timeline.md` | 项目时间线 |
 | `{project}/.claude-forge/custom-convention.yaml` | 项目级自定义规范 |
-| `{project}/docs/plan-*.md` | Plan-First 计划文件（按版本存储，Claude 负责写，Forge 负责读；`plan-reader.ts` 扫描 `docs/plan-*.md`，不再使用 `.claude-forge/plans/` 按日期文件）（[x] 2026-04-13）|}
+| `{project}/docs/plan-*.md` | Plan-First 计划文件（按版本存储，Claude 负责写，Forge 负责读；`plan-reader.ts` 扫描 `docs/plan-*.md`，不再使用 `.claude-forge/plans/` 按日期文件）（[x] 2026-04-13）|
 
 ---
 

package/dist/hooks/check-context-limit.sh

@@ -4,10 +4,10 @@
 WARN_THRESHOLD="${CONTEXT_WARN_THRESHOLD:-150000}"
 ALERT_THRESHOLD="${CONTEXT_ALERT_THRESHOLD:-180000}"
 
-# 从 stdin 读取 hook 输入，提取 session_id 和 cwd
+# 从 stdin 读取 hook 输入，提取 session_id 和 cwd（jq 替代 python3）
 INPUT=$(cat)
-SESSION_ID=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("session_id",""))' 2>/dev/null || echo "")
-CWD=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("cwd",""))' 2>/dev/null || echo "")
+SESSION_ID=$(echo "$INPUT" | jq -r '.session_id // ""')
+CWD=$(echo "$INPUT" | jq -r '.cwd // ""')
 
 # 定位 session 文件
 find_session_file() {
@@ -34,29 +34,14 @@ if [ -z "$SESSION_FILE" ] || [ ! -f "$SESSION_FILE" ]; then
     exit 0
 fi
 
-CONTEXT_TOKENS=$(python3 - "$SESSION_FILE" <<'PYEOF'
-import sys, json
-
-session_file = sys.argv[1]
-max_tokens = 0
-
-with open(session_file) as f:
-    for line in f:
-        try:
-            d = json.loads(line)
-            if d.get('type') == 'assistant' and 'message' in d:
-                usage = d['message'].get('usage', {})
-                total = (usage.get('input_tokens', 0) +
-                         usage.get('cache_read_input_tokens', 0) +
-                         usage.get('cache_creation_input_tokens', 0))
-                if total > max_tokens:
-                    max_tokens = total
-        except Exception:
-            pass
-
-print(max_tokens)
-PYEOF
-)
+# 只扫描最后 200 行（token 用量只会增大，最新的 assistant 消息在末尾）
+# 避免随 session 增长的全文件 O(n) 扫描
+CONTEXT_TOKENS=$(tail -200 "$SESSION_FILE" | jq -r '
+  select(.type == "assistant" and .message.usage != null)
+  | (.message.usage.input_tokens // 0)
+    + (.message.usage.cache_read_input_tokens // 0)
+    + (.message.usage.cache_creation_input_tokens // 0)
+' 2>/dev/null | awk 'BEGIN{max=0} {if($1+0>max) max=$1+0} END{print max}')
 
 CONTEXT_TOKENS="${CONTEXT_TOKENS:-0}"
 

package/dist/hooks/notification.sh

@@ -7,29 +7,23 @@ AUTH_TOKEN=$(cat "$HOME/.claude-forge/daemon.token" 2>/dev/null || echo '')
 # 读取 stdin
 INPUT=$(cat)
 
-# 提取 cwd
-PROJECT_PATH=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("cwd",""))' 2>/dev/null || echo '')
+# 提取 cwd（jq 替代 python3）
+PROJECT_PATH=$(echo "$INPUT" | jq -r '.cwd // ""')
 PROJECT_PATH="${PROJECT_PATH:-${PWD}}"
 
-# 构造事件 JSON（通过环境变量传参，避免 shell 注入）
-EVENT=$(FORGE_PROJECT_PATH="$PROJECT_PATH" FORGE_INPUT="$INPUT" FORGE_AUTH_TOKEN="$AUTH_TOKEN" \
-  python3 -c "
-import json, os
-from datetime import datetime
-try:
-    tool_input = json.loads(os.environ.get('FORGE_INPUT', '{}'))
-except Exception:
-    tool_input = {}
-print(json.dumps({
-    'hook_type': 'Notification',
-    'timestamp': datetime.now().strftime('%Y-%m-%dT%H:%M:%S'),
-    'session_id': os.environ.get('CLAUDE_CODE_SESSION_ID', 'cli'),
-    'project_path': os.environ.get('FORGE_PROJECT_PATH', ''),
-    'tool_name': 'notification',
-    'tool_input': tool_input,
-    '_auth': os.environ.get('FORGE_AUTH_TOKEN', ''),
-}))
-" 2>/dev/null)
+# 构造事件 JSON（原始 INPUT 作为 tool_input，保留完整通知内容）
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%S")
+TOOL_INPUT=$(echo "$INPUT" | jq -c '.')
+EVENT=$(jq -n \
+  --arg hook_type "Notification" \
+  --arg timestamp "$TIMESTAMP" \
+  --arg session_id "${CLAUDE_CODE_SESSION_ID:-cli}" \
+  --arg project_path "$PROJECT_PATH" \
+  --argjson tool_input "$TOOL_INPUT" \
+  --arg auth "$AUTH_TOKEN" \
+  '{hook_type: $hook_type, timestamp: $timestamp, session_id: $session_id,
+    project_path: $project_path, tool_name: "notification",
+    tool_input: $tool_input, _auth: $auth}')
 
 echo "$EVENT" | nc -U -w 1 "$SOCKET_PATH" 2>/dev/null || true
 exit 0

package/dist/hooks/post-tool-use.sh

@@ -7,43 +7,33 @@ AUTH_TOKEN=$(cat "$HOME/.claude-forge/daemon.token" 2>/dev/null || echo '')
 # 读取 stdin
 INPUT=$(cat)
 
-# 提取字段（tool_response 是 Claude Code 的字段名）
-TOOL_NAME="${CLAUDE_TOOL_NAME:-$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("tool_name",""))' 2>/dev/null || echo '')}"
-TOOL_INPUT=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(json.dumps(d.get("tool_input",{})))' 2>/dev/null || echo '{}')
-TOOL_OUTPUT=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(json.dumps(d.get("tool_response",{})))' 2>/dev/null || echo '{}')
-# cwd 是 Claude Code 的项目根目录
-PROJECT_PATH=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("cwd",""))' 2>/dev/null || echo '')
+# 提取字段（单次 jq 调用，替代 4 个 python3 进程）
+# tool_response 是 Claude Code 的字段名
+TOOL_NAME="${CLAUDE_TOOL_NAME:-$(echo "$INPUT" | jq -r '.tool_name // ""')}"
+TOOL_INPUT=$(echo "$INPUT" | jq -c '.tool_input // {}')
+TOOL_OUTPUT=$(echo "$INPUT" | jq -c '.tool_response // {}')
+PROJECT_PATH=$(echo "$INPUT" | jq -r '.cwd // ""')
 PROJECT_PATH="${PROJECT_PATH:-${PWD}}"
 
-# 构造事件 JSON（通过环境变量传参，避免 shell 注入）
-EVENT=$(FORGE_TOOL_NAME="$TOOL_NAME" FORGE_TOOL_INPUT="$TOOL_INPUT" FORGE_TOOL_OUTPUT="$TOOL_OUTPUT" FORGE_PROJECT_PATH="$PROJECT_PATH" FORGE_AUTH_TOKEN="$AUTH_TOKEN" \
-  python3 -c "
-import json, os
-from datetime import datetime
-try:
-    tool_input = json.loads(os.environ.get('FORGE_TOOL_INPUT', '{}'))
-except Exception:
-    tool_input = {}
-try:
-    tool_output = json.loads(os.environ.get('FORGE_TOOL_OUTPUT', '{}'))
-except Exception:
-    tool_output = {}
-print(json.dumps({
-    'hook_type': 'PostToolUse',
-    'timestamp': datetime.now().strftime('%Y-%m-%dT%H:%M:%S'),
-    'session_id': os.environ.get('CLAUDE_CODE_SESSION_ID', 'cli'),
-    'project_path': os.environ.get('FORGE_PROJECT_PATH', ''),
-    'tool_name': os.environ.get('FORGE_TOOL_NAME', ''),
-    'tool_input': tool_input,
-    'tool_output': tool_output,
-    '_auth': os.environ.get('FORGE_AUTH_TOKEN', ''),
-}))
-" 2>/dev/null)
+# 构造事件 JSON
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%S")
+EVENT=$(jq -n \
+  --arg hook_type "PostToolUse" \
+  --arg timestamp "$TIMESTAMP" \
+  --arg session_id "${CLAUDE_CODE_SESSION_ID:-cli}" \
+  --arg project_path "$PROJECT_PATH" \
+  --arg tool_name "$TOOL_NAME" \
+  --argjson tool_input "$TOOL_INPUT" \
+  --argjson tool_output "$TOOL_OUTPUT" \
+  --arg auth "$AUTH_TOKEN" \
+  '{hook_type: $hook_type, timestamp: $timestamp, session_id: $session_id,
+    project_path: $project_path, tool_name: $tool_name, tool_input: $tool_input,
+    tool_output: $tool_output, _auth: $auth}')
 
 # 发送到 daemon（PostToolUse 也需要等待响应以支持通知注入）
 RESPONSE=$(echo "$EVENT" | nc -U -w 5 "$SOCKET_PATH" 2>/dev/null || true)
 if [ -n "$RESPONSE" ]; then
-  HAS_CONTEXT=$(echo "$RESPONSE" | python3 -c 'import sys,json; d=json.load(sys.stdin); print("yes" if d.get("additionalContext") else "no")' 2>/dev/null || echo 'no')
+  HAS_CONTEXT=$(echo "$RESPONSE" | jq -r 'if .additionalContext and (.additionalContext != "") then "yes" else "no" end')
   if [ "$HAS_CONTEXT" = "yes" ]; then
     echo "$RESPONSE"
   fi

package/dist/hooks/pre-tool-use.sh

@@ -7,48 +7,39 @@ AUTH_TOKEN=$(cat "$HOME/.claude-forge/daemon.token" 2>/dev/null || echo '')
 # 读取 stdin（Claude Code 传入的 JSON）
 INPUT=$(cat)
 
-# 提取字段
-TOOL_NAME="${CLAUDE_TOOL_NAME:-$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("tool_name",""))' 2>/dev/null || echo '')}"
-TOOL_INPUT=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(json.dumps(d.get("tool_input",{})))' 2>/dev/null || echo '{}')
-PROJECT_PATH=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("cwd",""))' 2>/dev/null || echo '')
+# 提取字段（单次 jq 调用，替代 3 个 python3 进程）
+TOOL_NAME="${CLAUDE_TOOL_NAME:-$(echo "$INPUT" | jq -r '.tool_name // ""')}"
+TOOL_INPUT=$(echo "$INPUT" | jq -c '.tool_input // {}')
+PROJECT_PATH=$(echo "$INPUT" | jq -r '.cwd // ""')
 PROJECT_PATH="${PROJECT_PATH:-${PWD}}"
 
-# 构造事件 JSON（通过环境变量传参，避免 shell 注入）
-EVENT=$(FORGE_TOOL_NAME="$TOOL_NAME" FORGE_TOOL_INPUT="$TOOL_INPUT" FORGE_PROJECT_PATH="$PROJECT_PATH" FORGE_AUTH_TOKEN="$AUTH_TOKEN" \
-  python3 -c "
-import json, os
-from datetime import datetime
-tool_input_raw = os.environ.get('FORGE_TOOL_INPUT', '{}')
-try:
-    tool_input = json.loads(tool_input_raw)
-except Exception:
-    tool_input = {}
-print(json.dumps({
-    'hook_type': 'PreToolUse',
-    'timestamp': datetime.now().strftime('%Y-%m-%dT%H:%M:%S'),
-    'session_id': os.environ.get('CLAUDE_CODE_SESSION_ID', 'cli'),
-    'project_path': os.environ.get('FORGE_PROJECT_PATH', ''),
-    'tool_name': os.environ.get('FORGE_TOOL_NAME', ''),
-    'tool_input': tool_input,
-    '_auth': os.environ.get('FORGE_AUTH_TOKEN', ''),
-}))
-" 2>/dev/null)
+# 构造事件 JSON（jq -n 替代 python3 heredoc）
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%S")
+EVENT=$(jq -n \
+  --arg hook_type "PreToolUse" \
+  --arg timestamp "$TIMESTAMP" \
+  --arg session_id "${CLAUDE_CODE_SESSION_ID:-cli}" \
+  --arg project_path "$PROJECT_PATH" \
+  --arg tool_name "$TOOL_NAME" \
+  --argjson tool_input "$TOOL_INPUT" \
+  --arg auth "$AUTH_TOKEN" \
+  '{hook_type: $hook_type, timestamp: $timestamp, session_id: $session_id,
+    project_path: $project_path, tool_name: $tool_name, tool_input: $tool_input,
+    _auth: $auth}')
 
 # 发送事件并等待响应（双向通信，5 秒超时）
 RESPONSE=$(echo "$EVENT" | nc -U -w 5 "$SOCKET_PATH" 2>/dev/null)
 
 if [ -n "$RESPONSE" ]; then
-  # 解析响应
-  ALLOW=$(echo "$RESPONSE" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(str(d.get("allow",True)).lower())' 2>/dev/null || echo 'true')
+  ALLOW=$(echo "$RESPONSE" | jq -r '.allow // true')
 
   if [ "$ALLOW" = "false" ]; then
-    # 输出拦截 JSON 到 stdout（Claude Code 读取）
     echo "$RESPONSE"
     exit 2
   fi
 
   # 有 additionalContext 时输出
-  HAS_CONTEXT=$(echo "$RESPONSE" | python3 -c 'import sys,json; d=json.load(sys.stdin); print("yes" if d.get("additionalContext") else "no")' 2>/dev/null || echo 'no')
+  HAS_CONTEXT=$(echo "$RESPONSE" | jq -r 'if .additionalContext and (.additionalContext != "") then "yes" else "no" end')
   if [ "$HAS_CONTEXT" = "yes" ]; then
     echo "$RESPONSE"
   fi

package/dist/hooks/stop.sh

@@ -7,25 +7,20 @@ AUTH_TOKEN=$(cat "$HOME/.claude-forge/daemon.token" 2>/dev/null || echo '')
 # 读取 stdin
 INPUT=$(cat 2>/dev/null || echo '{}')
 
-# 提取 cwd
-PROJECT_PATH=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("cwd",""))' 2>/dev/null || echo '')
+# 提取 cwd（jq 替代 python3）
+PROJECT_PATH=$(echo "$INPUT" | jq -r '.cwd // ""')
 PROJECT_PATH="${PROJECT_PATH:-${PWD}}"
 
-# 构造事件 JSON（通过环境变量传参，避免 shell 注入）
-EVENT=$(FORGE_PROJECT_PATH="$PROJECT_PATH" FORGE_AUTH_TOKEN="$AUTH_TOKEN" \
-  python3 -c "
-import json, os
-from datetime import datetime
-print(json.dumps({
-    'hook_type': 'Stop',
-    'timestamp': datetime.now().strftime('%Y-%m-%dT%H:%M:%S'),
-    'session_id': os.environ.get('CLAUDE_CODE_SESSION_ID', 'cli'),
-    'project_path': os.environ.get('FORGE_PROJECT_PATH', ''),
-    'tool_name': 'stop',
-    'tool_input': {},
-    '_auth': os.environ.get('FORGE_AUTH_TOKEN', ''),
-}))
-" 2>/dev/null)
+# 构造事件 JSON
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%S")
+EVENT=$(jq -n \
+  --arg hook_type "Stop" \
+  --arg timestamp "$TIMESTAMP" \
+  --arg session_id "${CLAUDE_CODE_SESSION_ID:-cli}" \
+  --arg project_path "$PROJECT_PATH" \
+  --arg auth "$AUTH_TOKEN" \
+  '{hook_type: $hook_type, timestamp: $timestamp, session_id: $session_id,
+    project_path: $project_path, tool_name: "stop", tool_input: {}, _auth: $auth}')
 
 echo "$EVENT" | nc -U -w 1 "$SOCKET_PATH" 2>/dev/null || true
 exit 0

package/dist/hooks/user-prompt-submit.sh

@@ -13,9 +13,9 @@ fi
 # 读取 stdin（Claude Code 传入的 JSON）
 INPUT=$(cat)
 
-# 提取字段
-USER_PROMPT=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("prompt",""))' 2>/dev/null || echo '')
-PROJECT_PATH=$(echo "$INPUT" | python3 -c 'import sys,json; d=json.load(sys.stdin); print(d.get("cwd",""))' 2>/dev/null || echo '')
+# 提取字段（jq 替代 python3）
+USER_PROMPT=$(echo "$INPUT" | jq -r '.prompt // ""')
+PROJECT_PATH=$(echo "$INPUT" | jq -r '.cwd // ""')
 PROJECT_PATH="${PROJECT_PATH:-${PWD}}"
 
 # 空 prompt 跳过
@@ -23,21 +23,18 @@ if [ -z "$USER_PROMPT" ]; then
   exit 0
 fi
 
-# 安全地构造事件 JSON（通过环境变量传参，避免 shell 注入）
-EVENT=$(FORGE_USER_PROMPT="$USER_PROMPT" FORGE_PROJECT_PATH="$PROJECT_PATH" FORGE_AUTH_TOKEN="$AUTH_TOKEN" \
-  python3 -c "
-import json, os
-from datetime import datetime
-print(json.dumps({
-    'hook_type': 'UserPromptSubmit',
-    'timestamp': datetime.now().strftime('%Y-%m-%dT%H:%M:%S'),
-    'session_id': os.environ.get('CLAUDE_CODE_SESSION_ID', 'cli'),
-    'project_path': os.environ.get('FORGE_PROJECT_PATH', ''),
-    'tool_name': 'UserPrompt',
-    'tool_input': {'user_prompt': os.environ.get('FORGE_USER_PROMPT', '')},
-    '_auth': os.environ.get('FORGE_AUTH_TOKEN', ''),
-}))
-" 2>/dev/null)
+# 构造事件 JSON（jq -n 替代 python3 heredoc）
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%S")
+EVENT=$(jq -n \
+  --arg hook_type "UserPromptSubmit" \
+  --arg timestamp "$TIMESTAMP" \
+  --arg session_id "${CLAUDE_CODE_SESSION_ID:-cli}" \
+  --arg project_path "$PROJECT_PATH" \
+  --arg user_prompt "$USER_PROMPT" \
+  --arg auth "$AUTH_TOKEN" \
+  '{hook_type: $hook_type, timestamp: $timestamp, session_id: $session_id,
+    project_path: $project_path, tool_name: "UserPrompt",
+    tool_input: {user_prompt: $user_prompt}, _auth: $auth}')
 
 if [ -z "$EVENT" ]; then
   exit 0
@@ -47,25 +44,15 @@ fi
 RESPONSE=$(echo "$EVENT" | nc -U -w 10 "$SOCKET_PATH" 2>/dev/null)
 
 if [ -n "$RESPONSE" ]; then
-  HAS_CONTEXT=$(echo "$RESPONSE" | python3 -c 'import sys,json; d=json.load(sys.stdin); print("yes" if d.get("additionalContext") else "no")' 2>/dev/null || echo 'no')
+  HAS_CONTEXT=$(echo "$RESPONSE" | jq -r 'if .additionalContext and (.additionalContext != "") then "yes" else "no" end')
   if [ "$HAS_CONTEXT" = "yes" ]; then
     # stderr 输出到终端，让用户实时看到决策过程
-    # 用 fd3 保存真实 stderr，python3 错误丢弃，面板输出保留
-    exec 3>&2
-    echo "$RESPONSE" | python3 -c '
-import sys, json, os
-d = json.load(sys.stdin)
-ctx = d.get("additionalContext", "")
-lines = []
-for line in ctx.split("\n"):
-    if line.startswith("请在回复"):
-        break
-    if line.strip():
-        lines.append(line)
-if lines:
-    os.write(3, ("\033[36m" + "\n".join(lines) + "\033[0m\n").encode())
-' 2>/dev/null
-    exec 3>&-
+    CONTEXT=$(echo "$RESPONSE" | jq -r '.additionalContext // ""')
+    # 提取第一个"请在回复"之前的非空行，输出到终端
+    DISPLAY_LINES=$(printf '%s' "$CONTEXT" | awk '/^请在回复/{exit} NF{print}')
+    if [ -n "$DISPLAY_LINES" ]; then
+      printf '\033[36m%s\033[0m\n' "$DISPLAY_LINES" >&2
+    fi
     # stdout 返回给 Claude Code
     echo "$RESPONSE"
   fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@winspan/claude-forge",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "SDLC intelligent orchestration engine for Claude Code",
   "main": "dist/cli/index.js",
   "type": "module",