@winspan/claude-forge 8.41.0 → 8.51.0

package/dist/skills/official/official-release-checklist.md

@@ -0,0 +1,30 @@
+---
+name: official-release-checklist
+version: 1.0.0
+description: "发布上线清单：从代码冻结到生产验证的完整流程"
+tags: [release, deploy, checklist, devops]
+---
+
+# 发布上线清单
+
+## 发布前
+- [ ] 所有测试通过（单元、集成、E2E）
+- [ ] 代码已 review 并合并到主干
+- [ ] 数据库迁移脚本已准备，可回滚
+- [ ] 配置变更已确认（环境变量、feature flag）
+- [ ] 监控告警已配置
+- [ ] 回滚方案已明确
+
+## 发布中
+- [ ] 灰度/金丝雀发布（先放 5% 流量）
+- [ ] 观察关键指标 5 分钟：错误率、P99 延迟
+
+## 发布后
+- [ ] 生产环境冒烟测试
+- [ ] 监控观察 30 分钟
+- [ ] 通知相关方
+
+## 回滚触发条件
+- 错误率上升 > 1%
+- P99 延迟上升 > 50%
+- 出现 CRITICAL 级别日志

package/dist/skills/official/official-security-hardening.md

@@ -0,0 +1,26 @@
+---
+name: official-security-hardening
+version: 1.0.0
+description: "安全加固清单：覆盖 OWASP Top 10 和常见安全实践"
+tags: [security, owasp, hardening]
+---
+
+# 安全加固
+
+## 输入验证
+- 所有外部输入在边界处验证（类型、长度、格式）
+- 参数化查询，禁止字符串拼接 SQL
+- 文件上传：验证类型、大小、存储路径隔离
+
+## 认证与授权
+- 密码：bcrypt/argon2 哈希，禁止 MD5/SHA1
+- Token：短有效期 + refresh token 机制
+- 每个接口显式检查权限，不依赖前端隐藏
+
+## 数据保护
+- 敏感字段（密码、密钥、PII）不写日志
+- HTTPS only，HSTS header
+- 密钥走环境变量，不进代码库
+
+## 依赖安全
+- 定期运行 `

package/dist/skills/official/official-spec-driven-design.md

@@ -0,0 +1,31 @@
+---
+name: official-spec-driven-design
+version: 1.0.0
+description: "SDD：先写规格文档再写代码，需求驱动实现"
+tags: [sdd, spec, design, requirements]
+---
+
+# Spec-Driven Design（规格驱动开发）
+
+在写任何代码之前，先把规格写清楚。规格是代码的合同。
+
+## 步骤
+
+1. **写 SPEC.md**，包含：
+   - 功能目标（一句话）
+   - 输入/输出定义（含类型和边界）
+   - 不做什么（明确排除项）
+   - 验收标准（可测试的条件列表）
+
+2. **评审规格** — 在写代码前确认规格无歧义
+   - 每条验收标准都能写成测试吗？
+   - 边界条件是否覆盖？
+
+3. **按规格实现** — 代码只做规格里写的事
+   - 遇到规格未覆盖的情况，先更新规格再写代码
+
+4. **验收** — 逐条对照验收标准，全部通过才算完成
+
+## 规则
+- 规格变更必须先于代码变更
+- 实现不得超出规格范围（避免过度设计）

package/dist/skills/official/planning-with-files.md

@@ -0,0 +1,37 @@
+---
+name: planning-with-files
+description: Implements Manus-style file-based planning to organize and track progress on complex tasks. Creates task_plan.md, findings.md, and progress.md. Use when asked to plan out, break down, or organize a multi-step project, research task, or any work requiring 5+ tool calls. Supports automatic session recovery after /clear.
+user-invocable: true
+allowed-tools: "Read Write Edit Bash Glob Grep"
+hooks:
+  UserPromptSubmit:
+    - hooks:
+        - type: command
+          command: "if [ -f task_plan.md ]; then echo '[planning-with-files] ACTIVE PLAN — current state:'; head -50 task_plan.md; echo ''; echo '=== recent progress ==='; tail -20 progress.md 2>/dev/null; echo ''; echo '[planning-with-files] Read findings.md for research context. Continue from the current phase.'; fi"
+  PreToolUse:
+    - matcher: "Write|Edit|Bash|Read|Glob|Grep"
+      hooks:
+        - type: command
+          command: "cat task_plan.md 2>/dev/null | head -30 || true"
+  PostToolUse:
+    - matcher: "Write|Edit"
+      hooks:
+        - type: command
+          command: "if [ -f task_plan.md ]; then echo '[planning-with-files] Update progress.md with what you just did. If a phase is now complete, update task_plan.md status.'; fi"
+  Stop:
+    - hooks:
+        - type: command
+          command: "powershell.exe -NoProfile -ExecutionPolicy Bypass -Command \\\"& (Get-ChildItem -Path (Join-Path ~ '.claude/plugins/cache') -Filter check-complete.ps1 -Recurse -EA 0 | Select-Object -First 1).FullName\\\" 2>/dev/null || sh \\\"$(ls $HOME/.claude/plugins/cache/*/*/*/scripts/check-complete.sh 2>/dev/null | head -1)\\\" 2>/dev/null || true"
+metadata:
+  version: "2.35.0"
+---
+
+# Planning with Files
+
+Work like Manus: Use persistent markdown files as your "working memory on disk."
+
+## FIRST: Restore Context (v2.2.0)
+
+**Before doing anything else**, check if planning files exist and read them:
+
+1. If `

package/dist/skills/official/ui-ux-pro-max.md

@@ -0,0 +1,18 @@
+---
+name: ui-ux-pro-max
+version: 2.5.0
+description: "AI 驱动的设计智能工具：67 种 UI 风格、161 种配色、57 种字体搭配、99 条 UX 准则"
+tags: [ui, ux, design, color, typography, accessibility]
+---
+
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+Antigravity Kit is an AI-powered design intelligence toolkit providing searchable databases of UI styles, color palettes, font pairings, chart types, and UX guidelines. It works as a skill/workflow for AI coding assistants (Claude Code, Windsurf, Cursor, etc.).
+
+## Search Command
+
+`

package/dist/skills/official/webapp-testing.md

@@ -0,0 +1,12 @@
+---
+name: webapp-testing
+description: Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.
+license: Complete terms in LICENSE.txt
+---
+
+# Web Application Testing
+
+To test local web applications, write native Python Playwright scripts.
+
+**Helper Scripts Available**:
+- `

package/dist/skills/official-skills.d.ts

@@ -1,6 +1,6 @@
 /**
  * Official built-in skills for claude-forge
- * Extracted from git history: c59670a:src-old/skills/official-sync/skill-definitions.ts
+ * Skill content is stored in src/skills/official/*.md files.
  */
 export interface OfficialSkill {
     name: string;
@@ -15,8 +15,12 @@ export interface OfficialSkill {
  */
 export declare const OFFICIAL_SKILL_KEYWORDS: Record<string, string[]>;
 /**
- * 16 official skills covering full-stack development workflow
- * Version changes trigger automatic updates in daemon startup
+ * Load official skills from a directory of .md files.
+ * Each .md file should have frontmatter with at minimum a `name` field.
+ * The `keywords` or `tags` field in frontmatter provides keyword matching hints.
+ *
+ * @param builtinDir - Path to the directory containing official skill .md files
+ * @returns Array of OfficialSkill objects
  */
-export declare const OFFICIAL_SKILLS: OfficialSkill[];
+export declare function loadOfficialSkills(builtinDir: string): OfficialSkill[];
 //# sourceMappingURL=official-skills.d.ts.map

package/dist/skills/official-skills.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"official-skills.d.ts","sourceRoot":"","sources":["../../src/skills/official-skills.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAoB5D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,aAAa,EAsrB1C,CAAC"}
+{"version":3,"file":"official-skills.d.ts","sourceRoot":"","sources":["../../src/skills/official-skills.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAoB5D,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,EAAE,CAqCtE"}