@winspan/claude-forge 8.41.0 → 8.51.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@winspan/claude-forge",
-  "version": "8.41.0",
+  "version": "8.51.0",
   "description": "SDLC intelligent orchestration engine for Claude Code",
   "main": "dist/cli/index.js",
   "type": "module",
@@ -8,79 +8,45 @@
     "claude-forge": "dist/cli/index.js",
     "cf": "dist/cli/index.js"
   },
-  "exports": {
-    ".": {
-      "default": "./dist/cli/index.js"
-    }
-  },
-  "files": [
-    "dist/",
-    "README.md",
-    "LICENSE"
-  ],
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
   "scripts": {
     "prebuild": "rm -rf dist",
-    "build": "tsc && mkdir -p dist/hooks && cp -r src/hooks/* dist/hooks/ && chmod +x dist/hooks/*.sh && cp src/core/storage/schema.sql dist/core/storage/schema.sql && mkdir -p dist/web/static && cp -r web/dist/* dist/web/static/ 2>/dev/null || cp src/web/static/index.html dist/web/static/ && cp -r src/web/static/vendor dist/web/static/ 2>/dev/null || true && mkdir -p dist/engine/conventions && cp src/engine/conventions/*.yaml dist/engine/conventions/",
-    "build:web": "cd web && npm run build",
-    "build:all": "npm run build:web && npm run build",
-    "prepublishOnly": "npm run build:all",
-    "dev": "tsx src/cli/index.ts",
-    "dev:daemon": "tsx src/daemon/index.ts",
-    "dev:web": "tsx scripts/dev-web.ts",
+    "build": "tsc && mkdir -p dist/hooks && cp -r src/hooks/* dist/hooks/ && chmod +x dist/hooks/*.sh && chmod +x dist/cli/index.js && cp src/core/storage/schema.sql dist/core/storage/schema.sql && mkdir -p dist/daemon/launchd && cp src/daemon/launchd/*.template dist/daemon/launchd/ && mkdir -p dist/skills/official && cp src/skills/official/*.md dist/skills/official/ && mkdir -p dist/claudemd/templates && cp src/claudemd/templates/*.md dist/claudemd/templates/ && mkdir -p dist/web/static && cp -r web/dist/* dist/web/static/ 2>/dev/null || cp src/web/static/index.html dist/web/static/ && cp -r src/web/static/vendor dist/web/static/ 2>/dev/null || true && (test -f dist/core/storage/schema.sql || (echo '[build] FATAL: dist/core/storage/schema.sql missing' && exit 1)) && (test -f dist/claudemd/templates/swarm-protocol.md || (echo '[build] FATAL: dist/claudemd/templates/swarm-protocol.md missing' && exit 1))",
     "test": "vitest run",
     "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage",
-    "test:e2e": "playwright test",
-    "lint": "eslint src --ext .ts",
-    "format": "prettier --write \"src/**/*.ts\"",
-    "format:check": "prettier --check \"src/**/*.ts\"",
-    "sync:web": "cp src/web/static/index.html dist/web/static/index.html 2>/dev/null; cp src/web/static/index.html $(npm root -g)/@winspan/claude-forge/dist/web/static/index.html 2>/dev/null; echo '✓ Web files synced'",
-    "sync:agent-skills": "tsx scripts/sync-agent-skills.ts"
+    "dev:daemon": "./scripts/dev-daemon.sh",
+    "dev:daemon:start": "./scripts/dev-daemon.sh start",
+    "dev:daemon:stop": "./scripts/dev-daemon.sh stop",
+    "dev:daemon:restart": "./scripts/dev-daemon.sh restart",
+    "dev:daemon:status": "./scripts/dev-daemon.sh status",
+    "dev:daemon:logs": "./scripts/dev-daemon.sh logs"
   },
   "keywords": [
     "claude",
-    "claude-code",
-    "sdlc",
     "ai",
-    "automation"
+    "sdlc",
+    "orchestration"
   ],
-  "author": "admin",
+  "author": "WinsPan",
   "license": "MIT",
-  "devDependencies": {
-    "@types/better-sqlite3": "^7.6.13",
-    "@types/cors": "^2.8.19",
-    "@types/express": "^5.0.6",
-    "@types/js-yaml": "^4.0.9",
-    "@types/node": "^25.5.0",
-    "@types/uuid": "^10.0.0",
-    "@typescript-eslint/eslint-plugin": "^8.58.0",
-    "@typescript-eslint/parser": "^8.58.0",
-    "eslint": "^10.1.0",
-    "eslint-config-prettier": "^10.1.8",
-    "prettier": "^3.8.1",
-    "tsx": "^4.21.0",
-    "typescript": "^6.0.2",
-    "vitest": "^4.1.2"
-  },
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.82.0",
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "better-sqlite3": "^12.8.0",
+    "@anthropic-ai/sdk": "^0.32.1",
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "better-sqlite3": "^12.10.0",
     "chalk": "^5.6.2",
-    "commander": "^14.0.3",
-    "cors": "^2.8.6",
-    "express": "^5.2.1",
-    "glob": "^13.0.6",
+    "commander": "^12.1.0",
+    "express": "^4.21.2",
     "gray-matter": "^4.0.3",
-    "js-yaml": "^4.1.1",
-    "uuid": "^14.0.0",
-    "yaml": "^2.8.4",
-    "zod": "^4.3.6"
+    "js-yaml": "^4.1.0",
+    "zod": "^3.24.1"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.12",
+    "@types/express": "^5.0.0",
+    "@types/js-yaml": "^4.0.9",
+    "@types/node": "^22.10.2",
+    "@types/supertest": "^7.2.0",
+    "supertest": "^7.2.2",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8"
   }
 }

package/playwright.config.ts

@@ -0,0 +1,40 @@
+import { defineConfig, devices } from '@playwright/test';
+
+/**
+ * Playwright E2E 测试配置
+ *
+ * 使用方法：
+ * 1. 安装依赖: npm install -D @playwright/test
+ * 2. 安装浏览器: npx playwright install
+ * 3. 启动守护进程: claude-forge daemon start
+ * 4. 运行测试: npm run test:e2e
+ */
+
+export default defineConfig({
+  testDir: './tests/e2e',
+  fullyParallel: true,
+  forbidOnly: !!process.env.CI,
+  retries: process.env.CI ? 2 : 0,
+  workers: process.env.CI ? 1 : undefined,
+  reporter: 'html',
+
+  use: {
+    baseURL: 'http://localhost:3721',
+    trace: 'on-first-retry',
+    screenshot: 'only-on-failure',
+  },
+
+  projects: [
+    {
+      name: 'chromium',
+      use: { ...devices['Desktop Chrome'] },
+    },
+  ],
+
+  webServer: {
+    command: 'echo "请确保守护进程已启动: claude-forge daemon start"',
+    url: 'http://localhost:3721',
+    reuseExistingServer: true,
+    timeout: 5000,
+  },
+});

package/scripts/demo-v2.ts

@@ -0,0 +1,91 @@
+#!/usr/bin/env tsx
+
+/**
+ * Rule Engine Smoke Demo
+ */
+
+import path from 'node:path';
+import { RuleEngine } from '../src/engine/rule-engine.js';
+import { EvidenceStore } from '../src/engine/evidence-store.js';
+import { ContextBuilder } from '../src/engine/context-builder.js';
+import type { ForgeEvent } from '../src/core/types.js';
+
+console.log('=== Claude Forge Rule Demo ===\n');
+
+const conventionsDir = path.join(process.cwd(), 'src/engine/conventions');
+const engine = new RuleEngine(conventionsDir);
+engine.loadAll();
+
+const conventions = engine.getConventions();
+console.log(`✓ 加载了 ${conventions.size} 个 Convention:`);
+for (const [id, conv] of conventions) {
+  console.log(`  - ${id}: ${conv.name} (v${conv.version})`);
+}
+console.log();
+
+const evidenceStore = new EvidenceStore();
+const contextBuilder = new ContextBuilder(evidenceStore);
+
+const blockedEvent: ForgeEvent = {
+  event_id: 'evt-001',
+  session_id: 'demo-session',
+  project_path: '/demo/project',
+  timestamp: new Date().toISOString(),
+  hook_type: 'PreToolUse',
+  tool_name: 'Bash',
+  tool_input: { command: 'git push --force origin main' },
+};
+
+const blockedContext = contextBuilder.build(blockedEvent, {
+  sessionStartTime: Date.now(),
+  gitBranch: 'main',
+});
+const blockedEvaluation = engine.evaluateDetailed(blockedContext);
+
+console.log('场景 1: git push --force origin main');
+console.log(`  决策: ${blockedEvaluation.decision.level}`);
+console.log(`  规则: ${blockedEvaluation.decision.rule_id}`);
+console.log(`  原因: ${blockedEvaluation.decision.reason}`);
+console.log(`  命中数: ${blockedEvaluation.matches.length}`);
+if (blockedEvaluation.matches[0]?.operator_guidance) {
+  console.log(`  指引: ${blockedEvaluation.matches[0].operator_guidance}`);
+}
+console.log();
+
+const safeEvent: ForgeEvent = {
+  event_id: 'evt-002',
+  session_id: 'demo-session',
+  project_path: '/demo/project',
+  timestamp: new Date().toISOString(),
+  hook_type: 'PreToolUse',
+  tool_name: 'Bash',
+  tool_input: { command: 'git status' },
+};
+
+const safeContext = contextBuilder.build(safeEvent, {
+  sessionStartTime: Date.now(),
+  gitBranch: 'main',
+});
+const safeEvaluation = engine.evaluateDetailed(safeContext);
+
+console.log('场景 2: git status');
+console.log(`  决策: ${safeEvaluation.decision.level}`);
+console.log();
+
+const blockedToolEvent = contextBuilder.toToolEvent(blockedEvent, false, blockedEvaluation.decision.reason);
+evidenceStore.recordEvent('demo-session', blockedToolEvent);
+evidenceStore.recordDecision('demo-session', blockedEvaluation.decision, blockedToolEvent);
+
+const safeToolEvent = contextBuilder.toToolEvent(safeEvent, true);
+evidenceStore.recordEvent('demo-session', safeToolEvent);
+
+const stats = evidenceStore.getStats('demo-session');
+console.log('会话统计:');
+console.log(`  工具调用: ${stats.tool_calls}`);
+console.log(`  总失败: ${stats.total_failures}`);
+console.log(`  阻断次数: ${stats.total_blocks}`);
+console.log(`  警告次数: ${stats.total_warns}`);
+console.log();
+
+console.log('=== Demo 完成 ===');
+console.log('可继续启动 daemon + web，查看 /api/decisions 和 /api/decisions/stream。');

package/scripts/dev-daemon.sh

@@ -0,0 +1,232 @@
+#!/bin/bash
+# Development daemon management script
+# Always uses the local build, not the global installation
+
+set -e
+
+PROJECT_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+DAEMON_SCRIPT="$PROJECT_ROOT/dist/daemon/index.js"
+PID_FILE="$HOME/.claude-forge/daemon.pid"
+LOG_FILE="$HOME/.claude-forge/daemon-dev.log"
+
+# Use system node (no version pinning)
+if [ -z "$NODE_BIN" ]; then
+  NODE_BIN="node"
+fi
+
+function get_pid() {
+  if [ -f "$PID_FILE" ]; then
+    cat "$PID_FILE"
+  fi
+}
+
+function is_running() {
+  local pid=$(get_pid)
+  if [ -n "$pid" ] && kill -0 "$pid" 2>/dev/null; then
+    return 0
+  fi
+  return 1
+}
+
+function find_orphan_daemons() {
+  # 查找所有 dist/daemon/index.js 进程（不管是否在 PID 文件里）
+  # 排除当前脚本自己和 grep 进程
+  pgrep -f "node.*${PROJECT_ROOT}/dist/daemon/index.js" 2>/dev/null || true
+}
+
+function stop_daemon() {
+  local stopped_any=0
+
+  # 1. 先按 PID 文件杀主 daemon
+  if is_running; then
+    local pid=$(get_pid)
+    echo "Stopping daemon (PID: $pid)..."
+    kill -TERM "$pid" 2>/dev/null || true
+    sleep 1
+    if kill -0 "$pid" 2>/dev/null; then
+      echo "Force killing daemon..."
+      kill -9 "$pid" 2>/dev/null || true
+    fi
+    stopped_any=1
+  fi
+  rm -f "$PID_FILE"
+
+  # 2. 兜底：清理所有孤儿 daemon 进程（没写 PID 文件的、或 PID 文件不同步的）
+  local orphan_pids=$(find_orphan_daemons)
+  if [ -n "$orphan_pids" ]; then
+    echo "Found orphan daemon process(es): $orphan_pids"
+    # shellcheck disable=SC2086
+    kill -TERM $orphan_pids 2>/dev/null || true
+    sleep 1
+    # 仍存活的强制杀掉
+    local still_alive=$(find_orphan_daemons)
+    if [ -n "$still_alive" ]; then
+      echo "Force killing orphan(s): $still_alive"
+      # shellcheck disable=SC2086
+      kill -9 $still_alive 2>/dev/null || true
+    fi
+    stopped_any=1
+  fi
+
+  if [ $stopped_any -eq 1 ]; then
+    echo "Daemon stopped"
+  else
+    echo "Daemon not running"
+  fi
+}
+
+function start_daemon() {
+  if is_running; then
+    echo "Daemon already running (PID: $(get_pid))"
+    return 1
+  fi
+
+  # 检查是否有孤儿 daemon 占着端口（PID 文件不在但进程还在）
+  local orphan_pids=$(find_orphan_daemons)
+  if [ -n "$orphan_pids" ]; then
+    echo "Warning: found orphan daemon process(es) without PID file: $orphan_pids"
+    echo "Cleaning up before starting..."
+    # shellcheck disable=SC2086
+    kill -9 $orphan_pids 2>/dev/null || true
+    sleep 1
+  fi
+
+  if [ ! -f "$DAEMON_SCRIPT" ]; then
+    echo "Error: Daemon script not found at $DAEMON_SCRIPT"
+    echo "Run 'npm run build' first"
+    return 1
+  fi
+
+  echo "Starting daemon from local build..."
+  echo "Script: $DAEMON_SCRIPT"
+  echo "Log: $LOG_FILE"
+
+  # Start daemon in background with FORGE_DAEMON_FOREGROUND=1
+  FORGE_DAEMON_FOREGROUND=1 nohup "$NODE_BIN" "$DAEMON_SCRIPT" > "$LOG_FILE" 2>&1 &
+  local pid=$!
+
+  # Wait for daemon to start (check PID file or port)
+  local max_wait=10
+  local waited=0
+  while [ $waited -lt $max_wait ]; do
+    sleep 1
+    waited=$((waited + 1))
+
+    # Check if PID file exists and process is running
+    if [ -f "$PID_FILE" ]; then
+      local daemon_pid=$(cat "$PID_FILE")
+      if kill -0 "$daemon_pid" 2>/dev/null; then
+        echo "Daemon started (PID: $daemon_pid)"
+        echo "✅ Using LOCAL build (not global installation)"
+        return 0
+      fi
+    fi
+
+    # Also check if the spawned process is still alive
+    if ! kill -0 "$pid" 2>/dev/null; then
+      echo "Error: Daemon process died during startup"
+      echo "Check log: $LOG_FILE"
+      if [ -f "$LOG_FILE" ] && [ -s "$LOG_FILE" ]; then
+        echo ""
+        echo "Last 20 lines of log:"
+        tail -20 "$LOG_FILE"
+      fi
+      return 1
+    fi
+  done
+
+  echo "Error: Daemon failed to start within ${max_wait}s"
+  echo "Check log: $LOG_FILE"
+  if [ -f "$LOG_FILE" ] && [ -s "$LOG_FILE" ]; then
+    echo ""
+    echo "Last 20 lines of log:"
+    tail -20 "$LOG_FILE"
+  fi
+  return 1
+}
+
+function restart_daemon() {
+  stop_daemon
+  sleep 1
+  start_daemon
+}
+
+function status_daemon() {
+  if is_running; then
+    local pid=$(get_pid)
+    echo "Daemon is running (PID: $pid)"
+
+    # Check which version is running
+    local exe=$(ps -p "$pid" -o command= | awk '{print $2}')
+    if [[ "$exe" == *"$PROJECT_ROOT"* ]]; then
+      echo "✅ Running LOCAL build"
+    else
+      echo "⚠️  Running GLOBAL installation: $exe"
+    fi
+
+    # Show recent logs
+    if [ -f "$LOG_FILE" ]; then
+      echo ""
+      echo "Recent logs:"
+      tail -10 "$LOG_FILE"
+    fi
+  else
+    echo "Daemon is not running"
+  fi
+
+  # 检查是否有未被 PID 文件追踪的孤儿 daemon
+  local orphan_pids=$(find_orphan_daemons)
+  if [ -n "$orphan_pids" ]; then
+    local tracked_pid=$(get_pid)
+    local orphans=""
+    for opid in $orphan_pids; do
+      if [ "$opid" != "$tracked_pid" ]; then
+        orphans="$orphans $opid"
+      fi
+    done
+    if [ -n "$orphans" ]; then
+      echo ""
+      echo "⚠️  Orphan daemon process(es) detected (not in PID file):$orphans"
+      echo "   Run '$0 stop' to clean them up."
+    fi
+  fi
+}
+
+function logs_daemon() {
+  if [ -f "$LOG_FILE" ]; then
+    tail -f "$LOG_FILE"
+  else
+    echo "Log file not found: $LOG_FILE"
+  fi
+}
+
+case "${1:-}" in
+  start)
+    start_daemon
+    ;;
+  stop)
+    stop_daemon
+    ;;
+  restart)
+    restart_daemon
+    ;;
+  status)
+    status_daemon
+    ;;
+  logs)
+    logs_daemon
+    ;;
+  *)
+    echo "Usage: $0 {start|stop|restart|status|logs}"
+    echo ""
+    echo "Development daemon management (always uses local build)"
+    echo ""
+    echo "Commands:"
+    echo "  start   - Start the daemon from local build"
+    echo "  stop    - Stop the daemon"
+    echo "  restart - Restart the daemon"
+    echo "  status  - Check daemon status"
+    echo "  logs    - Tail daemon logs"
+    exit 1
+    ;;
+esac

package/scripts/dev-web.ts

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+/**
+ * Dev watch mode for web frontend files.
+ *
+ * Watches src/web/static/ for changes and syncs to:
+ *   - dist/web/static/         (local build output)
+ *   - $(npm root -g)/@winspan/claude-forge/dist/web/static/  (global install)
+ *
+ * This avoids having to run `npm run build && npm link` after every edit.
+ *
+ * Usage: npm run dev:web
+ */
+
+import fs from 'fs';
+import path from 'path';
+import { execSync } from 'child_process';
+import { fileURLToPath } from 'url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const ROOT = path.resolve(__dirname, '..');
+const SRC_DIR = path.join(ROOT, 'src/web/static');
+const LOCAL_DIST = path.join(ROOT, 'dist/web/static');
+
+function globalInstallPath(): string | null {
+  try {
+    const npmRoot = execSync('npm root -g', { encoding: 'utf-8' }).trim();
+    const candidate = path.join(npmRoot, '@winspan/claude-forge/dist/web/static');
+    return fs.existsSync(candidate) ? candidate : null;
+  } catch {
+    return null;
+  }
+}
+
+function syncFile(relPath: string, targets: string[]) {
+  const srcPath = path.join(SRC_DIR, relPath);
+  if (!fs.existsSync(srcPath)) return;
+
+  for (const target of targets) {
+    const destPath = path.join(target, relPath);
+    fs.mkdirSync(path.dirname(destPath), { recursive: true });
+    fs.copyFileSync(srcPath, destPath);
+  }
+
+  const ts = new Date().toLocaleTimeString('zh-CN');
+  console.log(`[${ts}] ✓ 已同步 ${relPath} → ${targets.length} 个位置`);
+}
+
+function syncAll(targets: string[]) {
+  const entries = fs.readdirSync(SRC_DIR, { recursive: true, withFileTypes: true });
+  for (const entry of entries) {
+    if (!entry.isFile()) continue;
+    const relPath = path.relative(SRC_DIR, path.join((entry as any).parentPath ?? entry.path, entry.name));
+    syncFile(relPath, targets);
+  }
+}
+
+function main() {
+  if (!fs.existsSync(SRC_DIR)) {
+    console.error(`✗ 源目录不存在: ${SRC_DIR}`);
+    process.exit(1);
+  }
+
+  const targets: string[] = [];
+
+  if (fs.existsSync(path.dirname(LOCAL_DIST))) {
+    targets.push(LOCAL_DIST);
+  } else {
+    console.warn(`⚠ dist/ 不存在，请先运行 npm run build（将跳过本地 dist 同步）`);
+  }
+
+  const globalPath = globalInstallPath();
+  if (globalPath) {
+    targets.push(globalPath);
+    console.log(`→ 全局安装路径: ${globalPath}`);
+  } else {
+    console.warn(`⚠ 未检测到全局安装的 @winspan/claude-forge（将跳过全局同步）`);
+    console.warn(`  如需测试生产环境，请先运行: npm link`);
+  }
+
+  if (targets.length === 0) {
+    console.error('✗ 没有可用的同步目标，退出');
+    process.exit(1);
+  }
+
+  console.log(`\n📂 监听源: ${SRC_DIR}`);
+  console.log(`🎯 同步目标: ${targets.length} 个`);
+  console.log(`\n首次全量同步...\n`);
+  syncAll(targets);
+
+  console.log(`\n👀 开始监听变更（Ctrl+C 退出）...\n`);
+
+  let debounceTimer: NodeJS.Timeout | null = null;
+  const pending = new Set<string>();
+
+  fs.watch(SRC_DIR, { recursive: true }, (eventType, filename) => {
+    if (!filename) return;
+    if (filename.endsWith('.backup') || filename.endsWith('.tmp')) return;
+
+    pending.add(filename);
+
+    if (debounceTimer) clearTimeout(debounceTimer);
+    debounceTimer = setTimeout(() => {
+      for (const f of pending) syncFile(f, targets);
+      pending.clear();
+    }, 100);
+  });
+}
+
+main();