@winspan/claude-forge 8.41.0 → 8.50.6

package/playwright.config.ts

@@ -0,0 +1,40 @@
+import { defineConfig, devices } from '@playwright/test';
+
+/**
+ * Playwright E2E 测试配置
+ *
+ * 使用方法：
+ * 1. 安装依赖: npm install -D @playwright/test
+ * 2. 安装浏览器: npx playwright install
+ * 3. 启动守护进程: claude-forge daemon start
+ * 4. 运行测试: npm run test:e2e
+ */
+
+export default defineConfig({
+  testDir: './tests/e2e',
+  fullyParallel: true,
+  forbidOnly: !!process.env.CI,
+  retries: process.env.CI ? 2 : 0,
+  workers: process.env.CI ? 1 : undefined,
+  reporter: 'html',
+
+  use: {
+    baseURL: 'http://localhost:3721',
+    trace: 'on-first-retry',
+    screenshot: 'only-on-failure',
+  },
+
+  projects: [
+    {
+      name: 'chromium',
+      use: { ...devices['Desktop Chrome'] },
+    },
+  ],
+
+  webServer: {
+    command: 'echo "请确保守护进程已启动: claude-forge daemon start"',
+    url: 'http://localhost:3721',
+    reuseExistingServer: true,
+    timeout: 5000,
+  },
+});

package/scripts/demo-v2.ts

@@ -0,0 +1,91 @@
+#!/usr/bin/env tsx
+
+/**
+ * Rule Engine Smoke Demo
+ */
+
+import path from 'node:path';
+import { RuleEngine } from '../src/engine/rule-engine.js';
+import { EvidenceStore } from '../src/engine/evidence-store.js';
+import { ContextBuilder } from '../src/engine/context-builder.js';
+import type { ForgeEvent } from '../src/core/types.js';
+
+console.log('=== Claude Forge Rule Demo ===\n');
+
+const conventionsDir = path.join(process.cwd(), 'src/engine/conventions');
+const engine = new RuleEngine(conventionsDir);
+engine.loadAll();
+
+const conventions = engine.getConventions();
+console.log(`✓ 加载了 ${conventions.size} 个 Convention:`);
+for (const [id, conv] of conventions) {
+  console.log(`  - ${id}: ${conv.name} (v${conv.version})`);
+}
+console.log();
+
+const evidenceStore = new EvidenceStore();
+const contextBuilder = new ContextBuilder(evidenceStore);
+
+const blockedEvent: ForgeEvent = {
+  event_id: 'evt-001',
+  session_id: 'demo-session',
+  project_path: '/demo/project',
+  timestamp: new Date().toISOString(),
+  hook_type: 'PreToolUse',
+  tool_name: 'Bash',
+  tool_input: { command: 'git push --force origin main' },
+};
+
+const blockedContext = contextBuilder.build(blockedEvent, {
+  sessionStartTime: Date.now(),
+  gitBranch: 'main',
+});
+const blockedEvaluation = engine.evaluateDetailed(blockedContext);
+
+console.log('场景 1: git push --force origin main');
+console.log(`  决策: ${blockedEvaluation.decision.level}`);
+console.log(`  规则: ${blockedEvaluation.decision.rule_id}`);
+console.log(`  原因: ${blockedEvaluation.decision.reason}`);
+console.log(`  命中数: ${blockedEvaluation.matches.length}`);
+if (blockedEvaluation.matches[0]?.operator_guidance) {
+  console.log(`  指引: ${blockedEvaluation.matches[0].operator_guidance}`);
+}
+console.log();
+
+const safeEvent: ForgeEvent = {
+  event_id: 'evt-002',
+  session_id: 'demo-session',
+  project_path: '/demo/project',
+  timestamp: new Date().toISOString(),
+  hook_type: 'PreToolUse',
+  tool_name: 'Bash',
+  tool_input: { command: 'git status' },
+};
+
+const safeContext = contextBuilder.build(safeEvent, {
+  sessionStartTime: Date.now(),
+  gitBranch: 'main',
+});
+const safeEvaluation = engine.evaluateDetailed(safeContext);
+
+console.log('场景 2: git status');
+console.log(`  决策: ${safeEvaluation.decision.level}`);
+console.log();
+
+const blockedToolEvent = contextBuilder.toToolEvent(blockedEvent, false, blockedEvaluation.decision.reason);
+evidenceStore.recordEvent('demo-session', blockedToolEvent);
+evidenceStore.recordDecision('demo-session', blockedEvaluation.decision, blockedToolEvent);
+
+const safeToolEvent = contextBuilder.toToolEvent(safeEvent, true);
+evidenceStore.recordEvent('demo-session', safeToolEvent);
+
+const stats = evidenceStore.getStats('demo-session');
+console.log('会话统计:');
+console.log(`  工具调用: ${stats.tool_calls}`);
+console.log(`  总失败: ${stats.total_failures}`);
+console.log(`  阻断次数: ${stats.total_blocks}`);
+console.log(`  警告次数: ${stats.total_warns}`);
+console.log();
+
+console.log('=== Demo 完成 ===');
+console.log('可继续启动 daemon + web，查看 /api/decisions 和 /api/decisions/stream。');

package/scripts/dev-daemon.sh

@@ -0,0 +1,232 @@
+#!/bin/bash
+# Development daemon management script
+# Always uses the local build, not the global installation
+
+set -e
+
+PROJECT_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+DAEMON_SCRIPT="$PROJECT_ROOT/dist/daemon/index.js"
+PID_FILE="$HOME/.claude-forge/daemon.pid"
+LOG_FILE="$HOME/.claude-forge/daemon-dev.log"
+
+# Use system node (no version pinning)
+if [ -z "$NODE_BIN" ]; then
+  NODE_BIN="node"
+fi
+
+function get_pid() {
+  if [ -f "$PID_FILE" ]; then
+    cat "$PID_FILE"
+  fi
+}
+
+function is_running() {
+  local pid=$(get_pid)
+  if [ -n "$pid" ] && kill -0 "$pid" 2>/dev/null; then
+    return 0
+  fi
+  return 1
+}
+
+function find_orphan_daemons() {
+  # 查找所有 dist/daemon/index.js 进程（不管是否在 PID 文件里）
+  # 排除当前脚本自己和 grep 进程
+  pgrep -f "node.*${PROJECT_ROOT}/dist/daemon/index.js" 2>/dev/null || true
+}
+
+function stop_daemon() {
+  local stopped_any=0
+
+  # 1. 先按 PID 文件杀主 daemon
+  if is_running; then
+    local pid=$(get_pid)
+    echo "Stopping daemon (PID: $pid)..."
+    kill -TERM "$pid" 2>/dev/null || true
+    sleep 1
+    if kill -0 "$pid" 2>/dev/null; then
+      echo "Force killing daemon..."
+      kill -9 "$pid" 2>/dev/null || true
+    fi
+    stopped_any=1
+  fi
+  rm -f "$PID_FILE"
+
+  # 2. 兜底：清理所有孤儿 daemon 进程（没写 PID 文件的、或 PID 文件不同步的）
+  local orphan_pids=$(find_orphan_daemons)
+  if [ -n "$orphan_pids" ]; then
+    echo "Found orphan daemon process(es): $orphan_pids"
+    # shellcheck disable=SC2086
+    kill -TERM $orphan_pids 2>/dev/null || true
+    sleep 1
+    # 仍存活的强制杀掉
+    local still_alive=$(find_orphan_daemons)
+    if [ -n "$still_alive" ]; then
+      echo "Force killing orphan(s): $still_alive"
+      # shellcheck disable=SC2086
+      kill -9 $still_alive 2>/dev/null || true
+    fi
+    stopped_any=1
+  fi
+
+  if [ $stopped_any -eq 1 ]; then
+    echo "Daemon stopped"
+  else
+    echo "Daemon not running"
+  fi
+}
+
+function start_daemon() {
+  if is_running; then
+    echo "Daemon already running (PID: $(get_pid))"
+    return 1
+  fi
+
+  # 检查是否有孤儿 daemon 占着端口（PID 文件不在但进程还在）
+  local orphan_pids=$(find_orphan_daemons)
+  if [ -n "$orphan_pids" ]; then
+    echo "Warning: found orphan daemon process(es) without PID file: $orphan_pids"
+    echo "Cleaning up before starting..."
+    # shellcheck disable=SC2086
+    kill -9 $orphan_pids 2>/dev/null || true
+    sleep 1
+  fi
+
+  if [ ! -f "$DAEMON_SCRIPT" ]; then
+    echo "Error: Daemon script not found at $DAEMON_SCRIPT"
+    echo "Run 'npm run build' first"
+    return 1
+  fi
+
+  echo "Starting daemon from local build..."
+  echo "Script: $DAEMON_SCRIPT"
+  echo "Log: $LOG_FILE"
+
+  # Start daemon in background with FORGE_DAEMON_FOREGROUND=1
+  FORGE_DAEMON_FOREGROUND=1 nohup "$NODE_BIN" "$DAEMON_SCRIPT" > "$LOG_FILE" 2>&1 &
+  local pid=$!
+
+  # Wait for daemon to start (check PID file or port)
+  local max_wait=10
+  local waited=0
+  while [ $waited -lt $max_wait ]; do
+    sleep 1
+    waited=$((waited + 1))
+
+    # Check if PID file exists and process is running
+    if [ -f "$PID_FILE" ]; then
+      local daemon_pid=$(cat "$PID_FILE")
+      if kill -0 "$daemon_pid" 2>/dev/null; then
+        echo "Daemon started (PID: $daemon_pid)"
+        echo "✅ Using LOCAL build (not global installation)"
+        return 0
+      fi
+    fi
+
+    # Also check if the spawned process is still alive
+    if ! kill -0 "$pid" 2>/dev/null; then
+      echo "Error: Daemon process died during startup"
+      echo "Check log: $LOG_FILE"
+      if [ -f "$LOG_FILE" ] && [ -s "$LOG_FILE" ]; then
+        echo ""
+        echo "Last 20 lines of log:"
+        tail -20 "$LOG_FILE"
+      fi
+      return 1
+    fi
+  done
+
+  echo "Error: Daemon failed to start within ${max_wait}s"
+  echo "Check log: $LOG_FILE"
+  if [ -f "$LOG_FILE" ] && [ -s "$LOG_FILE" ]; then
+    echo ""
+    echo "Last 20 lines of log:"
+    tail -20 "$LOG_FILE"
+  fi
+  return 1
+}
+
+function restart_daemon() {
+  stop_daemon
+  sleep 1
+  start_daemon
+}
+
+function status_daemon() {
+  if is_running; then
+    local pid=$(get_pid)
+    echo "Daemon is running (PID: $pid)"
+
+    # Check which version is running
+    local exe=$(ps -p "$pid" -o command= | awk '{print $2}')
+    if [[ "$exe" == *"$PROJECT_ROOT"* ]]; then
+      echo "✅ Running LOCAL build"
+    else
+      echo "⚠️  Running GLOBAL installation: $exe"
+    fi
+
+    # Show recent logs
+    if [ -f "$LOG_FILE" ]; then
+      echo ""
+      echo "Recent logs:"
+      tail -10 "$LOG_FILE"
+    fi
+  else
+    echo "Daemon is not running"
+  fi
+
+  # 检查是否有未被 PID 文件追踪的孤儿 daemon
+  local orphan_pids=$(find_orphan_daemons)
+  if [ -n "$orphan_pids" ]; then
+    local tracked_pid=$(get_pid)
+    local orphans=""
+    for opid in $orphan_pids; do
+      if [ "$opid" != "$tracked_pid" ]; then
+        orphans="$orphans $opid"
+      fi
+    done
+    if [ -n "$orphans" ]; then
+      echo ""
+      echo "⚠️  Orphan daemon process(es) detected (not in PID file):$orphans"
+      echo "   Run '$0 stop' to clean them up."
+    fi
+  fi
+}
+
+function logs_daemon() {
+  if [ -f "$LOG_FILE" ]; then
+    tail -f "$LOG_FILE"
+  else
+    echo "Log file not found: $LOG_FILE"
+  fi
+}
+
+case "${1:-}" in
+  start)
+    start_daemon
+    ;;
+  stop)
+    stop_daemon
+    ;;
+  restart)
+    restart_daemon
+    ;;
+  status)
+    status_daemon
+    ;;
+  logs)
+    logs_daemon
+    ;;
+  *)
+    echo "Usage: $0 {start|stop|restart|status|logs}"
+    echo ""
+    echo "Development daemon management (always uses local build)"
+    echo ""
+    echo "Commands:"
+    echo "  start   - Start the daemon from local build"
+    echo "  stop    - Stop the daemon"
+    echo "  restart - Restart the daemon"
+    echo "  status  - Check daemon status"
+    echo "  logs    - Tail daemon logs"
+    exit 1
+    ;;
+esac

package/scripts/dev-web.ts

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+/**
+ * Dev watch mode for web frontend files.
+ *
+ * Watches src/web/static/ for changes and syncs to:
+ *   - dist/web/static/         (local build output)
+ *   - $(npm root -g)/@winspan/claude-forge/dist/web/static/  (global install)
+ *
+ * This avoids having to run `npm run build && npm link` after every edit.
+ *
+ * Usage: npm run dev:web
+ */
+
+import fs from 'fs';
+import path from 'path';
+import { execSync } from 'child_process';
+import { fileURLToPath } from 'url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const ROOT = path.resolve(__dirname, '..');
+const SRC_DIR = path.join(ROOT, 'src/web/static');
+const LOCAL_DIST = path.join(ROOT, 'dist/web/static');
+
+function globalInstallPath(): string | null {
+  try {
+    const npmRoot = execSync('npm root -g', { encoding: 'utf-8' }).trim();
+    const candidate = path.join(npmRoot, '@winspan/claude-forge/dist/web/static');
+    return fs.existsSync(candidate) ? candidate : null;
+  } catch {
+    return null;
+  }
+}
+
+function syncFile(relPath: string, targets: string[]) {
+  const srcPath = path.join(SRC_DIR, relPath);
+  if (!fs.existsSync(srcPath)) return;
+
+  for (const target of targets) {
+    const destPath = path.join(target, relPath);
+    fs.mkdirSync(path.dirname(destPath), { recursive: true });
+    fs.copyFileSync(srcPath, destPath);
+  }
+
+  const ts = new Date().toLocaleTimeString('zh-CN');
+  console.log(`[${ts}] ✓ 已同步 ${relPath} → ${targets.length} 个位置`);
+}
+
+function syncAll(targets: string[]) {
+  const entries = fs.readdirSync(SRC_DIR, { recursive: true, withFileTypes: true });
+  for (const entry of entries) {
+    if (!entry.isFile()) continue;
+    const relPath = path.relative(SRC_DIR, path.join((entry as any).parentPath ?? entry.path, entry.name));
+    syncFile(relPath, targets);
+  }
+}
+
+function main() {
+  if (!fs.existsSync(SRC_DIR)) {
+    console.error(`✗ 源目录不存在: ${SRC_DIR}`);
+    process.exit(1);
+  }
+
+  const targets: string[] = [];
+
+  if (fs.existsSync(path.dirname(LOCAL_DIST))) {
+    targets.push(LOCAL_DIST);
+  } else {
+    console.warn(`⚠ dist/ 不存在，请先运行 npm run build（将跳过本地 dist 同步）`);
+  }
+
+  const globalPath = globalInstallPath();
+  if (globalPath) {
+    targets.push(globalPath);
+    console.log(`→ 全局安装路径: ${globalPath}`);
+  } else {
+    console.warn(`⚠ 未检测到全局安装的 @winspan/claude-forge（将跳过全局同步）`);
+    console.warn(`  如需测试生产环境，请先运行: npm link`);
+  }
+
+  if (targets.length === 0) {
+    console.error('✗ 没有可用的同步目标，退出');
+    process.exit(1);
+  }
+
+  console.log(`\n📂 监听源: ${SRC_DIR}`);
+  console.log(`🎯 同步目标: ${targets.length} 个`);
+  console.log(`\n首次全量同步...\n`);
+  syncAll(targets);
+
+  console.log(`\n👀 开始监听变更（Ctrl+C 退出）...\n`);
+
+  let debounceTimer: NodeJS.Timeout | null = null;
+  const pending = new Set<string>();
+
+  fs.watch(SRC_DIR, { recursive: true }, (eventType, filename) => {
+    if (!filename) return;
+    if (filename.endsWith('.backup') || filename.endsWith('.tmp')) return;
+
+    pending.add(filename);
+
+    if (debounceTimer) clearTimeout(debounceTimer);
+    debounceTimer = setTimeout(() => {
+      for (const f of pending) syncFile(f, targets);
+      pending.clear();
+    }, 100);
+  });
+}
+
+main();