@winspan/claude-forge 8.51.1 → 8.54.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (409) hide show
  1. package/DEVELOPMENT.md +290 -221
  2. package/README.md +50 -8
  3. package/dist/cli/commands/skills.d.ts.map +1 -1
  4. package/dist/cli/commands/skills.js +121 -2
  5. package/dist/cli/commands/skills.js.map +1 -1
  6. package/dist/cli/init/hook-manager.d.ts +1 -1
  7. package/dist/cli/init/hook-manager.d.ts.map +1 -1
  8. package/dist/cli/init/hook-manager.js +1 -0
  9. package/dist/cli/init/hook-manager.js.map +1 -1
  10. package/dist/core/constants.d.ts +2 -0
  11. package/dist/core/constants.d.ts.map +1 -1
  12. package/dist/core/constants.js +4 -0
  13. package/dist/core/constants.js.map +1 -1
  14. package/dist/core/storage/events.d.ts.map +1 -1
  15. package/dist/core/storage/events.js +0 -1
  16. package/dist/core/storage/events.js.map +1 -1
  17. package/dist/core/storage/maintenance.d.ts +25 -3
  18. package/dist/core/storage/maintenance.d.ts.map +1 -1
  19. package/dist/core/storage/maintenance.js +33 -4
  20. package/dist/core/storage/maintenance.js.map +1 -1
  21. package/dist/core/storage/routing.d.ts +4 -0
  22. package/dist/core/storage/routing.d.ts.map +1 -1
  23. package/dist/core/storage/routing.js +10 -4
  24. package/dist/core/storage/routing.js.map +1 -1
  25. package/dist/core/storage/sessions.d.ts +17 -0
  26. package/dist/core/storage/sessions.d.ts.map +1 -1
  27. package/dist/core/storage/sessions.js +64 -0
  28. package/dist/core/storage/sessions.js.map +1 -1
  29. package/dist/core/storage/skills.d.ts +4 -0
  30. package/dist/core/storage/skills.d.ts.map +1 -1
  31. package/dist/core/storage/skills.js +10 -2
  32. package/dist/core/storage/skills.js.map +1 -1
  33. package/dist/core/storage/sqlite.d.ts +5 -0
  34. package/dist/core/storage/sqlite.d.ts.map +1 -1
  35. package/dist/core/storage/sqlite.js +6 -0
  36. package/dist/core/storage/sqlite.js.map +1 -1
  37. package/dist/core/storage/tasks.d.ts.map +1 -1
  38. package/dist/core/storage/tasks.js +2 -0
  39. package/dist/core/storage/tasks.js.map +1 -1
  40. package/dist/core/types.d.ts +7 -0
  41. package/dist/core/types.d.ts.map +1 -1
  42. package/dist/daemon/index.d.ts.map +1 -1
  43. package/dist/daemon/index.js +30 -5
  44. package/dist/daemon/index.js.map +1 -1
  45. package/dist/daemon/skill-sync.d.ts +21 -0
  46. package/dist/daemon/skill-sync.d.ts.map +1 -0
  47. package/dist/daemon/skill-sync.js +75 -0
  48. package/dist/daemon/skill-sync.js.map +1 -0
  49. package/dist/hooks/notification.sh +1 -1
  50. package/dist/hooks/post-tool-use.sh +1 -1
  51. package/dist/hooks/pre-tool-use.sh +1 -1
  52. package/dist/hooks/stop.sh +1 -1
  53. package/dist/hooks/user-prompt-submit.sh +1 -1
  54. package/dist/skills/official/code-simplifier.md +37 -1
  55. package/dist/skills/official/find-skills.md +120 -1
  56. package/dist/skills/official/official-api-design.md +14 -1
  57. package/dist/skills/official/official-architecture-decision.md +22 -1
  58. package/dist/skills/official/official-db-schema-design.md +19 -1
  59. package/dist/skills/official/official-debug.md +9 -1
  60. package/dist/skills/official/official-pr-review.md +1 -1
  61. package/dist/skills/official/official-security-hardening.md +7 -1
  62. package/dist/skills/official/planning-with-files.md +206 -2
  63. package/dist/skills/official/ui-ux-pro-max.md +88 -1
  64. package/dist/skills/official/webapp-testing.md +85 -1
  65. package/dist/skills/registry.d.ts +1 -1
  66. package/dist/skills/registry.d.ts.map +1 -1
  67. package/dist/skills/registry.js +15 -4
  68. package/dist/skills/registry.js.map +1 -1
  69. package/dist/skills/semantic-matcher.d.ts +4 -3
  70. package/dist/skills/semantic-matcher.d.ts.map +1 -1
  71. package/dist/skills/semantic-matcher.js +20 -22
  72. package/dist/skills/semantic-matcher.js.map +1 -1
  73. package/dist/skills/upgrade-engine.d.ts +93 -0
  74. package/dist/skills/upgrade-engine.d.ts.map +1 -0
  75. package/dist/skills/upgrade-engine.js +447 -0
  76. package/dist/skills/upgrade-engine.js.map +1 -0
  77. package/dist/skills/upgrade-prompt.d.ts +20 -0
  78. package/dist/skills/upgrade-prompt.d.ts.map +1 -0
  79. package/dist/skills/upgrade-prompt.js +75 -0
  80. package/dist/skills/upgrade-prompt.js.map +1 -0
  81. package/dist/web/analytics/weekly-report.d.ts.map +1 -1
  82. package/dist/web/analytics/weekly-report.js +21 -29
  83. package/dist/web/analytics/weekly-report.js.map +1 -1
  84. package/dist/web/routes/patch.d.ts.map +1 -1
  85. package/dist/web/routes/patch.js +32 -2
  86. package/dist/web/routes/patch.js.map +1 -1
  87. package/dist/web/routes/sessions.d.ts.map +1 -1
  88. package/dist/web/routes/sessions.js +9 -7
  89. package/dist/web/routes/sessions.js.map +1 -1
  90. package/dist/web/routes/trace.d.ts.map +1 -1
  91. package/dist/web/routes/trace.js +2 -3
  92. package/dist/web/routes/trace.js.map +1 -1
  93. package/dist/web/server.d.ts.map +1 -1
  94. package/dist/web/server.js +3 -2
  95. package/dist/web/server.js.map +1 -1
  96. package/package.json +12 -2
  97. package/scripts/postinstall.cjs +21 -0
  98. package/.claude/CLAUDE.md +0 -17
  99. package/.eslintrc.js +0 -23
  100. package/.prettierrc +0 -8
  101. package/ARCHITECTURE_ISSUES.md +0 -249
  102. package/CLAUDE.md +0 -265
  103. package/CLAUDE.md.backup +0 -488
  104. package/docs/concurrent-agents.md +0 -129
  105. package/docs/design/architecture-review-20260516.md +0 -232
  106. package/docs/design/fix-skills-data-and-set-leak-spec-20260516-1300.md +0 -219
  107. package/docs/design/h1-storage-aggregation-spec-20260518-1121.md +0 -299
  108. package/docs/design/h2-getdatabase-encapsulation-spec-20260518-1450.md +0 -191
  109. package/docs/design/h3-fallback-removal-spec-20260518-1245.md +0 -76
  110. package/docs/design/h4-index-dedup-spec-20260518-1230.md +0 -109
  111. package/docs/design/h6-services-migration-spec-20260518-1355.md +0 -82
  112. package/docs/design/hook-failure-queue-spec-20260516-1530.md +0 -204
  113. package/docs/design/l1-swarm-protocol-extract-spec-20260518-1605.md +0 -106
  114. package/docs/design/m10-forge-paths-spec-20260518-1320.md +0 -121
  115. package/docs/design/m2-m3-tool-input-spec-20260518-1425.md +0 -131
  116. package/docs/design/m7-routing-event-association-spec-20260518-1545.md +0 -103
  117. package/docs/design/project-path-gitroot-spec-20260518-1715.md +0 -134
  118. package/docs/design/refactor-phase1-spec-20260515-1600.md +0 -543
  119. package/docs/design/refactor-phase2-spec-20260515-1700.md +0 -424
  120. package/docs/design/task-active-gc-spec-20260518-1745.md +0 -146
  121. package/docs/design/tasks-list-filter-pagination-spec-20260518-0930.md +0 -208
  122. package/docs/implementation/fix-skills-data-and-set-leak-changelog-20260516-1300.md +0 -104
  123. package/docs/implementation/h1-storage-aggregation-changelog-20260518-1121.md +0 -82
  124. package/docs/implementation/h2-final-changelog-20260518-1530.md +0 -61
  125. package/docs/implementation/h2-phase1-safety-net-changelog-20260518-1450.md +0 -70
  126. package/docs/implementation/h2-phase2-operations-changelog-20260518-1450.md +0 -120
  127. package/docs/implementation/h2-phase3-callsites-changelog-20260518-1450.md +0 -71
  128. package/docs/implementation/h3-fallback-removal-changelog-20260518-1245.md +0 -71
  129. package/docs/implementation/h4-index-dedup-changelog-20260518-1230.md +0 -60
  130. package/docs/implementation/h6-services-migration-changelog-20260518-1355.md +0 -46
  131. package/docs/implementation/h7-m9-defaults-changelog-20260518-1300.md +0 -46
  132. package/docs/implementation/hook-failure-queue-changelog-20260516-1530.md +0 -196
  133. package/docs/implementation/hotfix-daemon-event-reject-20260516-1430.md +0 -56
  134. package/docs/implementation/l1-swarm-protocol-extract-changelog-20260518-1605.md +0 -45
  135. package/docs/implementation/l3-l4-daemon-perf-changelog-20260518-1410.md +0 -63
  136. package/docs/implementation/l6-l8-final-cleanup-changelog-20260518-1640.md +0 -38
  137. package/docs/implementation/m1-m4-m5-l7-cleanup-changelog-20260518-1310.md +0 -58
  138. package/docs/implementation/m10-forge-paths-changelog-20260518-1320.md +0 -60
  139. package/docs/implementation/m2-m3-tool-input-changelog-20260518-1425.md +0 -43
  140. package/docs/implementation/m6-m8-naming-shutdown-changelog-20260518-1340.md +0 -56
  141. package/docs/implementation/m7-routing-association-changelog-20260518-1545.md +0 -69
  142. package/docs/implementation/project-path-gitroot-changelog-20260518-1715.md +0 -63
  143. package/docs/implementation/refactor-phase1-changelog-20260515-1630.md +0 -354
  144. package/docs/implementation/refactor-phase2-changelog-20260515-1705.md +0 -421
  145. package/docs/implementation/task-active-gc-changelog-20260518-1745.md +0 -35
  146. package/docs/implementation/task-title-summary-changelog-20260518-1130.md +0 -39
  147. package/docs/implementation/tasks-detail-back-loses-filters-changelog-20260518-1100.md +0 -22
  148. package/docs/implementation/tasks-list-filter-pagination-changelog-20260518-0930.md +0 -72
  149. package/docs/implementation/tasks-page-white-screen-hotfix-changelog-20260518-1015.md +0 -56
  150. package/docs/reviews/claudemd-template-sync.md +0 -54
  151. package/docs/reviews/task-title-summary.md +0 -92
  152. package/docs/reviews/tasks-detail-back-loses-filters.md +0 -58
  153. package/docs/reviews/tasks-filter-pagination.md +0 -80
  154. package/docs/reviews/tasks-page-white-screen-hotfix.md +0 -126
  155. package/docs/ruflo-learning-strategy.md +0 -322
  156. package/docs/skills-deduplication-analysis.md +0 -83
  157. package/docs/skills-multiformat-support.md +0 -177
  158. package/docs/skills-third-party.md +0 -183
  159. package/docs/testing/tasks-filter-pagination-test-report.md +0 -86
  160. package/forge +0 -321
  161. package/playwright.config.ts +0 -40
  162. package/scripts/demo-v2.ts +0 -91
  163. package/scripts/dev-daemon.sh +0 -232
  164. package/scripts/dev-web.ts +0 -109
  165. package/scripts/e2e-mcp-link.ts +0 -423
  166. package/scripts/e2e-methodology-quality.ts +0 -253
  167. package/scripts/e2e-routing.ts +0 -456
  168. package/scripts/e2e-user-methodology.ts +0 -326
  169. package/scripts/e2e-web-workflows.ts +0 -299
  170. package/scripts/migrate-legacy-to-dynamic.sql +0 -108
  171. package/scripts/regenerate-execution-docs.ts +0 -116
  172. package/scripts/sync-agent-skills.ts +0 -193
  173. package/scripts/test-hook.sh +0 -71
  174. package/scripts/verify-skill-loading.ts +0 -62
  175. package/src/claudemd/claudemd-generator.ts +0 -568
  176. package/src/claudemd/convention-extractor.ts +0 -69
  177. package/src/claudemd/index.ts +0 -35
  178. package/src/claudemd/persona-manager.ts +0 -88
  179. package/src/claudemd/resume-manager.ts +0 -236
  180. package/src/claudemd/tech-detector.ts +0 -220
  181. package/src/claudemd/templates/swarm-protocol.md +0 -222
  182. package/src/cli/commands/claudemd.ts +0 -84
  183. package/src/cli/commands/config.ts +0 -46
  184. package/src/cli/commands/daemon.ts +0 -310
  185. package/src/cli/commands/executions.ts +0 -115
  186. package/src/cli/commands/init.ts +0 -204
  187. package/src/cli/commands/logs.ts +0 -181
  188. package/src/cli/commands/mcp.ts +0 -242
  189. package/src/cli/commands/menu.ts +0 -357
  190. package/src/cli/commands/skills.ts +0 -185
  191. package/src/cli/commands/stats.ts +0 -73
  192. package/src/cli/commands/status.ts +0 -69
  193. package/src/cli/commands/template.ts +0 -77
  194. package/src/cli/commands/trace.ts +0 -148
  195. package/src/cli/index.ts +0 -42
  196. package/src/cli/init/hook-manager.ts +0 -132
  197. package/src/core/ai/provider.ts +0 -308
  198. package/src/core/ai/types.ts +0 -51
  199. package/src/core/config.ts +0 -124
  200. package/src/core/constants.ts +0 -62
  201. package/src/core/event-fields.ts +0 -32
  202. package/src/core/queue/index.ts +0 -192
  203. package/src/core/storage/base.ts +0 -302
  204. package/src/core/storage/events.ts +0 -434
  205. package/src/core/storage/injections.ts +0 -78
  206. package/src/core/storage/maintenance.ts +0 -59
  207. package/src/core/storage/migrations/002_add_skill_tracking.sql +0 -6
  208. package/src/core/storage/migrations/003_add_skill_invocations.sql +0 -23
  209. package/src/core/storage/performance-indexes.sql +0 -23
  210. package/src/core/storage/routing.ts +0 -322
  211. package/src/core/storage/rows.ts +0 -112
  212. package/src/core/storage/schema.sql +0 -224
  213. package/src/core/storage/sessions.ts +0 -168
  214. package/src/core/storage/skills.ts +0 -233
  215. package/src/core/storage/sqlite.ts +0 -293
  216. package/src/core/storage/tasks.ts +0 -318
  217. package/src/core/storage/token-usage.ts +0 -93
  218. package/src/core/types.ts +0 -181
  219. package/src/core/utils/error-handler.ts +0 -257
  220. package/src/core/utils/forge-resume-block.ts +0 -74
  221. package/src/core/utils/format.ts +0 -69
  222. package/src/core/utils/git.ts +0 -23
  223. package/src/core/utils/logger.ts +0 -134
  224. package/src/core/utils/lru-cache.ts +0 -54
  225. package/src/core/utils/path.ts +0 -19
  226. package/src/core/utils/session.ts +0 -26
  227. package/src/core/utils/time.ts +0 -37
  228. package/src/core/utils/token-tracker.ts +0 -97
  229. package/src/daemon/event-parser.ts +0 -36
  230. package/src/daemon/handlers/history-exporter.ts +0 -117
  231. package/src/daemon/handlers/post-tool-use.ts +0 -54
  232. package/src/daemon/handlers/stop.ts +0 -208
  233. package/src/daemon/handlers/user-prompt.ts +0 -178
  234. package/src/daemon/hook-sync.ts +0 -91
  235. package/src/daemon/index.ts +0 -302
  236. package/src/daemon/launchd/com.claude-forge.daemon.plist.template +0 -47
  237. package/src/daemon/launchd-installer.ts +0 -260
  238. package/src/daemon/lifecycle.ts +0 -128
  239. package/src/daemon/router.ts +0 -40
  240. package/src/daemon/server.ts +0 -196
  241. package/src/daemon/services/task-segmenter.ts +0 -112
  242. package/src/hooks/hook-lib.sh +0 -118
  243. package/src/hooks/notification.sh +0 -35
  244. package/src/hooks/post-tool-use.sh +0 -61
  245. package/src/hooks/pre-tool-use.sh +0 -63
  246. package/src/hooks/stop.sh +0 -43
  247. package/src/hooks/user-prompt-submit.sh +0 -69
  248. package/src/mcp/server.ts +0 -322
  249. package/src/skills/index.ts +0 -2
  250. package/src/skills/invocation-guard.ts +0 -177
  251. package/src/skills/matcher.ts +0 -148
  252. package/src/skills/official/code-simplifier.md +0 -16
  253. package/src/skills/official/find-skills.md +0 -23
  254. package/src/skills/official/official-api-design.md +0 -17
  255. package/src/skills/official/official-architecture-decision.md +0 -20
  256. package/src/skills/official/official-bmad.md +0 -118
  257. package/src/skills/official/official-db-schema-design.md +0 -16
  258. package/src/skills/official/official-debug.md +0 -17
  259. package/src/skills/official/official-doc-driven.md +0 -31
  260. package/src/skills/official/official-harness-engineering.md +0 -108
  261. package/src/skills/official/official-performance-optimization.md +0 -30
  262. package/src/skills/official/official-pr-review.md +0 -35
  263. package/src/skills/official/official-release-checklist.md +0 -30
  264. package/src/skills/official/official-security-hardening.md +0 -26
  265. package/src/skills/official/official-spec-driven-design.md +0 -31
  266. package/src/skills/official/planning-with-files.md +0 -37
  267. package/src/skills/official/ui-ux-pro-max.md +0 -18
  268. package/src/skills/official/webapp-testing.md +0 -12
  269. package/src/skills/official-skills.ts +0 -89
  270. package/src/skills/registry.ts +0 -355
  271. package/src/skills/semantic-matcher.ts +0 -231
  272. package/src/skills/tools/pipeline-suggest.ts +0 -226
  273. package/src/skills/tools/skill-invoke.ts +0 -168
  274. package/src/skills/tools/skill-list.ts +0 -59
  275. package/src/templates/go.yaml +0 -53
  276. package/src/templates/python.yaml +0 -59
  277. package/src/templates/react.yaml +0 -55
  278. package/src/templates/template-manager.ts +0 -170
  279. package/src/web/analytics/anti-pattern-detector.ts +0 -367
  280. package/src/web/analytics/drift-detector.ts +0 -219
  281. package/src/web/analytics/weekly-report.ts +0 -431
  282. package/src/web/auth-middleware.ts +0 -54
  283. package/src/web/routes/_helpers.ts +0 -34
  284. package/src/web/routes/ai.ts +0 -204
  285. package/src/web/routes/auth.ts +0 -22
  286. package/src/web/routes/drift.ts +0 -25
  287. package/src/web/routes/error-handler.ts +0 -120
  288. package/src/web/routes/events.ts +0 -47
  289. package/src/web/routes/insights.ts +0 -43
  290. package/src/web/routes/patch.ts +0 -117
  291. package/src/web/routes/reports.ts +0 -34
  292. package/src/web/routes/rules.ts +0 -76
  293. package/src/web/routes/sessions.ts +0 -250
  294. package/src/web/routes/skill-stats.ts +0 -92
  295. package/src/web/routes/skills.ts +0 -350
  296. package/src/web/routes/static.ts +0 -67
  297. package/src/web/routes/stats.ts +0 -50
  298. package/src/web/routes/status.ts +0 -30
  299. package/src/web/routes/tasks.ts +0 -193
  300. package/src/web/routes/token-usage.ts +0 -20
  301. package/src/web/routes/trace.ts +0 -126
  302. package/src/web/routes/types.ts +0 -57
  303. package/src/web/server.ts +0 -134
  304. package/src/web/ssrf-guard.ts +0 -112
  305. package/src/web/static/index.html +0 -3251
  306. package/src/web/static/vendor/chart.umd.min.js +0 -20
  307. package/tests/e2e/dashboard.spec.ts +0 -205
  308. package/tests/e2e/routing-skill-e2e.test.ts +0 -39
  309. package/tests/helpers/mock-ai.ts +0 -92
  310. package/tests/helpers/mock-storage.ts +0 -159
  311. package/tests/integration/claudemd-generator.test.ts +0 -90
  312. package/tests/integration/queue-replay.integration.test.ts +0 -193
  313. package/tests/integration/tasks-filter.integration.test.ts +0 -154
  314. package/tests/integration/web-analytics.integration.test.ts +0 -133
  315. package/tests/integration/web-stats.integration.test.ts +0 -135
  316. package/tests/integration/web-trace.integration.test.ts +0 -175
  317. package/tests/performance/database.benchmark.ts +0 -161
  318. package/tests/semantic-matcher.test.ts +0 -99
  319. package/tests/skill-matcher.test.ts +0 -110
  320. package/tests/unit/ai-provider-retry.test.ts +0 -194
  321. package/tests/unit/ai-provider-vision.test.ts +0 -224
  322. package/tests/unit/claudemd-generator.test.ts +0 -68
  323. package/tests/unit/cli-mcp.test.ts +0 -141
  324. package/tests/unit/core/forge-paths.test.ts +0 -99
  325. package/tests/unit/daemon/hook-sync.test.ts +0 -71
  326. package/tests/unit/daemon/post-tool-use.test.ts +0 -121
  327. package/tests/unit/daemon/stop-handler-behavior-summary.test.ts +0 -202
  328. package/tests/unit/daemon/task-segmenter-recover.test.ts +0 -84
  329. package/tests/unit/event-fields.test.ts +0 -88
  330. package/tests/unit/event-parser.test.ts +0 -55
  331. package/tests/unit/handlers.test.ts +0 -171
  332. package/tests/unit/hooks/resolve-project-path.test.ts +0 -122
  333. package/tests/unit/invocation-guard.test.ts +0 -125
  334. package/tests/unit/queue.test.ts +0 -272
  335. package/tests/unit/router.test.ts +0 -138
  336. package/tests/unit/security.test.ts +0 -128
  337. package/tests/unit/skill-invocations-workflow.test.ts +0 -495
  338. package/tests/unit/skill-registry.test.ts +0 -94
  339. package/tests/unit/skills/invocation-guard-ttl.test.ts +0 -211
  340. package/tests/unit/skills/official-skills-loader.test.ts +0 -126
  341. package/tests/unit/skills/registry-multiformat.test.ts +0 -92
  342. package/tests/unit/socket-server.test.ts +0 -183
  343. package/tests/unit/storage/event-operations-aggregates.test.ts +0 -342
  344. package/tests/unit/storage/migration-idempotent.test.ts +0 -304
  345. package/tests/unit/storage/routing-aggregates.test.ts +0 -276
  346. package/tests/unit/storage/routing.test.ts +0 -117
  347. package/tests/unit/storage/schema-missing.test.ts +0 -81
  348. package/tests/unit/storage/session-operations-aggregates.test.ts +0 -120
  349. package/tests/unit/storage/sessions-aggregate.test.ts +0 -435
  350. package/tests/unit/storage/skill-operations-counts.test.ts +0 -106
  351. package/tests/unit/storage/skills-aggregates.test.ts +0 -104
  352. package/tests/unit/storage/sqlite-refactor-harness.test.ts +0 -314
  353. package/tests/unit/storage/task-operations-counts.test.ts +0 -46
  354. package/tests/unit/storage/tasks-getById.test.ts +0 -343
  355. package/tests/unit/storage/tasks-stale-gc.test.ts +0 -86
  356. package/tests/unit/storage.test.ts +0 -172
  357. package/tests/unit/token-usage.test.ts +0 -144
  358. package/tests/unit/type-guards.test.ts +0 -201
  359. package/tests/unit/utils/format.test.ts +0 -189
  360. package/tests/unit/utils/session.test.ts +0 -89
  361. package/tests/unit/utils/time.test.ts +0 -112
  362. package/tests/unit/web/navigation-back-contract.test.ts +0 -134
  363. package/tests/unit/web/routes-auth.test.ts +0 -93
  364. package/tests/unit/web/routes-events.test.ts +0 -101
  365. package/tests/unit/web/routes-rules.test.ts +0 -182
  366. package/tests/unit/web/routes-sessions.test.ts +0 -181
  367. package/tests/unit/web/routes-skill-stats.test.ts +0 -179
  368. package/tests/unit/web/routes-stats.test.ts +0 -92
  369. package/tests/unit/web/routes-tasks.test.ts +0 -385
  370. package/tests/unit/web/task-title-contract.test.ts +0 -210
  371. package/tests/unit/web/tasks-component-contract.test.ts +0 -179
  372. package/tsconfig.json +0 -22
  373. package/vitest.config.ts +0 -21
  374. package/vitest.integration.config.ts +0 -16
  375. package/web/CLAUDE.md +0 -20
  376. package/web/index.html +0 -13
  377. package/web/package-lock.json +0 -4854
  378. package/web/package.json +0 -35
  379. package/web/postcss.config.js +0 -6
  380. package/web/src/App.tsx +0 -110
  381. package/web/src/components/CodeBlock.tsx +0 -31
  382. package/web/src/components/Confirm.tsx +0 -96
  383. package/web/src/components/Drawer.tsx +0 -60
  384. package/web/src/components/Layout.tsx +0 -145
  385. package/web/src/components/MarkdownRenderer.tsx +0 -77
  386. package/web/src/components/SearchInput.tsx +0 -31
  387. package/web/src/components/SessionDetailContent.tsx +0 -157
  388. package/web/src/components/Toast.tsx +0 -92
  389. package/web/src/index.css +0 -19
  390. package/web/src/main.tsx +0 -31
  391. package/web/src/pages/AIConfig.tsx +0 -233
  392. package/web/src/pages/Dashboard.tsx +0 -572
  393. package/web/src/pages/Events.tsx +0 -271
  394. package/web/src/pages/Reports.tsx +0 -428
  395. package/web/src/pages/SessionDetail.tsx +0 -162
  396. package/web/src/pages/Sessions.tsx +0 -205
  397. package/web/src/pages/Skills.tsx +0 -180
  398. package/web/src/pages/TaskDetail.tsx +0 -515
  399. package/web/src/pages/Tasks.tsx +0 -415
  400. package/web/src/utils/auth.ts +0 -59
  401. package/web/src/utils/export.ts +0 -54
  402. package/web/src/utils/navigation.ts +0 -25
  403. package/web/src/utils/task-title.ts +0 -49
  404. package/web/src/utils/time.ts +0 -13
  405. package/web/tailwind.config.js +0 -11
  406. package/web/tsconfig.json +0 -21
  407. package/web/tsconfig.node.json +0 -10
  408. package/web/vite.config.ts +0 -76
  409. package/winspan-claude-forge-8.43.0.tgz +0 -0
@@ -1,67 +0,0 @@
1
- import express from 'express';
2
- import type { Application } from 'express';
3
- import fs from 'fs';
4
- import path from 'path';
5
- import { fileURLToPath } from 'url';
6
- import { logger } from '../../core/utils/logger.js';
7
- import type { RouteContext } from './types.js';
8
-
9
- const __dirname = path.dirname(fileURLToPath(import.meta.url));
10
-
11
- function findStaticDir(): string | null {
12
- const candidates = [
13
- path.join(__dirname, '..', 'static'), // dist/web/routes -> dist/web/static
14
- path.join(__dirname, '../../..', 'src/web/static'), // dev: src/web/routes -> src/web/static
15
- ];
16
- return candidates.find(d => fs.existsSync(d)) ?? null;
17
- }
18
-
19
- /**
20
- * Static assets — Vite-built UI + cache headers + SPA fallback.
21
- *
22
- * index.html: no-cache (always fetch latest, avoids stale UI after deploy)
23
- * /assets/*: immutable, content-hashed, safe to cache for a year.
24
- *
25
- * SPA fallback MUST be registered last so it doesn't shadow any API route;
26
- * that constraint is enforced by splitting into `registerStaticAssets` (runs
27
- * early, sets up express.static) and `registerStaticFallback` (runs last).
28
- */
29
- export function registerStaticAssets(app: Application, _ctx: RouteContext): void {
30
- const staticDir = findStaticDir();
31
- if (!staticDir) {
32
- logger.warn('[Web] Static directory not found; UI will not be served.');
33
- return;
34
- }
35
-
36
- app.use(express.static(staticDir, {
37
- setHeaders: (res, filePath) => {
38
- if (filePath.endsWith('index.html')) {
39
- res.setHeader('Cache-Control', 'no-cache, no-store, must-revalidate');
40
- res.setHeader('Pragma', 'no-cache');
41
- res.setHeader('Expires', '0');
42
- } else if (filePath.includes('/assets/')) {
43
- res.setHeader('Cache-Control', 'public, max-age=31536000, immutable');
44
- }
45
- },
46
- }));
47
-
48
- app.get('/', (_req, res) => {
49
- res.setHeader('Cache-Control', 'no-cache, no-store, must-revalidate');
50
- res.sendFile('index.html', { root: staticDir });
51
- });
52
-
53
- logger.info(`[Web] Serving static files from ${staticDir}`);
54
- }
55
-
56
- /**
57
- * SPA catch-all — must be registered last. Routes any non-/api path to
58
- * index.html so the frontend router handles deep links on refresh.
59
- */
60
- export function registerStaticFallback(app: Application, _ctx: RouteContext): void {
61
- const staticDir = findStaticDir();
62
- if (!staticDir) return;
63
- app.get(/^(?!\/api).*$/, (_req, res) => {
64
- res.setHeader('Cache-Control', 'no-cache, no-store, must-revalidate');
65
- res.sendFile('index.html', { root: staticDir });
66
- });
67
- }
@@ -1,50 +0,0 @@
1
- import type { Application } from 'express';
2
- import type { RouteContext } from './types.js';
3
-
4
- /**
5
- * /api/stats — System-wide statistics for the Dashboard.
6
- *
7
- * H2 Phase 3: 替换原 db.prepare 直写 SQL 为 SQLiteStorage facade 聚合方法。
8
- * 响应 shape 保持不变(前端契约):totalSessions / totalEvents / toolUsage /
9
- * dailyActivity / skillInvocations。
10
- */
11
- export function registerStatsRoutes(app: Application, ctx: RouteContext): void {
12
- const { storage } = ctx;
13
-
14
- app.get('/api/stats', (_req, res) => {
15
- const totalEvents = storage.countAllEvents();
16
- const totalSessions = storage.countAllSessions();
17
-
18
- // Tool usage distribution (top 15)
19
- const toolRows = storage.aggregateToolUsage({ limit: 15 });
20
- const toolUsage: Record<string, number> = {};
21
- for (const r of toolRows) {
22
- toolUsage[r.tool_name] = r.count;
23
- }
24
-
25
- // Daily activity (last 7 days)
26
- // 旧 SQL: timestamp >= date('now', '-7 days')
27
- // 新口径:调用方计算 ISO 字符串,传给 facade。
28
- const sevenDaysAgo = new Date(Date.now() - 7 * 24 * 60 * 60 * 1000).toISOString();
29
- const dailyRows = storage.aggregateDailyEventCounts({ since: sevenDaysAgo });
30
- const sessionDailyRows = storage.aggregateDailySessionCounts({ since: sevenDaysAgo });
31
-
32
- const sessionMap = new Map(sessionDailyRows.map(r => [r.date, r.count]));
33
- const dailyActivity = dailyRows.map(r => ({
34
- date: r.date,
35
- eventCount: r.count,
36
- sessionCount: sessionMap.get(r.date) || 0,
37
- }));
38
-
39
- // Skill invocation count
40
- const skillCount = storage.countAllSkillInvocations();
41
-
42
- res.json({
43
- totalSessions,
44
- totalEvents,
45
- toolUsage,
46
- dailyActivity,
47
- skillInvocations: skillCount,
48
- });
49
- });
50
- }
@@ -1,30 +0,0 @@
1
- import type { Application } from 'express';
2
- import type { RouteContext } from './types.js';
3
-
4
- /**
5
- * Status / health endpoints for the daemon and background worker.
6
- */
7
- export function registerStatusRoutes(app: Application, ctx: RouteContext): void {
8
- const { storage } = ctx;
9
-
10
- // Worker auth probe: legacy endpoint kept for UI backwards-compat.
11
- // The background worker subsystem was removed alongside the methodology
12
- // system (v8.36.0 hard deprecation B.1); the probe now always reports
13
- // unavailable so the UI hides background-mode affordances.
14
- app.get('/api/worker-auth-status', (_req, res) => {
15
- res.json({
16
- available: false,
17
- reason: 'background worker subsystem removed (methodology deprecation)',
18
- });
19
- });
20
-
21
- // Dashboard: daemon status
22
- app.get('/api/status', (_req, res) => {
23
- res.json({
24
- pid: process.pid,
25
- uptime: process.uptime(),
26
- memory: process.memoryUsage(),
27
- eventCount: storage.countEvents(),
28
- });
29
- });
30
- }
@@ -1,193 +0,0 @@
1
- import { z } from 'zod';
2
- import type { Application } from 'express';
3
- import type { RouteContext } from './types.js';
4
- import { truncateField } from './_helpers.js';
5
- import { getFilePath, getUserPrompt } from '../../core/event-fields.js';
6
-
7
- /**
8
- * /api/tasks — Task execution view.
9
- *
10
- * Provides a complete view of a task's execution process:
11
- * - GET /api/tasks — list + filter + paginate tasks
12
- * - GET /api/tasks/projects — distinct project paths that have tasks
13
- * - GET /api/tasks/:taskId — full execution detail for a single task
14
- */
15
-
16
- const TaskListQuery = z.object({
17
- limit: z.coerce.number().int().min(1).default(50).transform(v => Math.min(v, 200)),
18
- offset: z.coerce.number().int().min(0).default(0),
19
- /** multi-value: ?project=/a&project=/b OR ?project=/a */
20
- project: z.union([z.string(), z.array(z.string())]).optional(),
21
- from: z.string().optional(),
22
- to: z.string().optional(),
23
- search: z.string().max(100).optional(),
24
- session: z.string().optional(),
25
- });
26
-
27
- export function registerTasksRoutes(app: Application, ctx: RouteContext): void {
28
- const { storage } = ctx;
29
-
30
- // ── GET /api/tasks/projects — distinct project paths ──────────────────────
31
- // Must be registered BEFORE /:taskId to avoid 'projects' being treated as an id.
32
- app.get('/api/tasks/projects', (_req, res) => {
33
- const projects = storage.queryTaskProjects();
34
- res.json(projects);
35
- });
36
-
37
- // ── GET /api/tasks — paginated + filtered list ─────────────────────────────
38
- app.get('/api/tasks', (req, res) => {
39
- const parsed = TaskListQuery.safeParse(req.query);
40
- if (!parsed.success) {
41
- res.status(400).json({ error: 'Invalid query parameters', details: parsed.error.flatten() });
42
- return;
43
- }
44
-
45
- const { limit, offset, project, from, to, search, session } = parsed.data;
46
-
47
- const result = storage.queryTasksFiltered({
48
- limit,
49
- offset,
50
- project,
51
- from,
52
- to,
53
- search,
54
- session_id: session,
55
- });
56
-
57
- res.json(result);
58
- });
59
-
60
- // ── GET /api/tasks/:taskId — full execution detail ─────────────────────────
61
- app.get('/api/tasks/:taskId', (req, res) => {
62
- const taskId = req.params.taskId;
63
-
64
- // H1: PK direct fetch (was: queryTasks({limit:5000}).find)
65
- const task = storage.getTask(taskId);
66
- if (!task) {
67
- res.status(404).json({ error: 'Task not found' });
68
- return;
69
- }
70
-
71
- // H1: JOIN task_events (was: queryEvents({limit:5000}) + Set.has filter)
72
- const taskEvents = storage.queryEventsByTaskId(taskId, { limit: 5000 });
73
-
74
- // ── Injections ──────────────────────────────────────────────────────
75
- // H1: JOIN task_events (was: queryInjections({limit:500}) + Set.has filter)
76
- const allInjections = storage.queryInjectionsByTaskId(taskId);
77
- const injections = allInjections
78
- .map(inj => ({
79
- id: inj.id,
80
- timestamp: inj.timestamp,
81
- source_handler: inj.source_handler,
82
- injection_type: inj.injection_type,
83
- content: inj.content.slice(0, 1000),
84
- content_length: inj.content.length,
85
- truncated: inj.content.length > 1000,
86
- }));
87
-
88
- // ── Timeline ────────────────────────────────────────────────────────
89
- const timeline = taskEvents
90
- .filter(e => e.tool_name && (e.hook_type === 'PreToolUse' || e.hook_type === 'PostToolUse'))
91
- .reduce<Array<{
92
- timestamp: string;
93
- tool_name: string;
94
- hook_type: string;
95
- input: unknown;
96
- output: unknown;
97
- is_agent_call: boolean;
98
- agent_detail?: { subagent_type?: string; name?: string; prompt?: string };
99
- }>>((acc, e) => {
100
- // Deduplicate: only keep PreToolUse entries (PostToolUse is supplementary)
101
- if (e.hook_type === 'PostToolUse') {
102
- // Attach output to the matching PreToolUse entry if exists
103
- const pre = acc.find(
104
- a => a.tool_name === e.tool_name && !a.output && a.timestamp <= e.timestamp,
105
- );
106
- if (pre) {
107
- pre.output = truncateField(e.tool_output);
108
- }
109
- return acc;
110
- }
111
-
112
- const toolInput = e.tool_input ?? null;
113
- const isAgentCall = e.tool_name === 'Agent' || e.tool_name === 'Task';
114
-
115
- const entry: (typeof acc)[number] = {
116
- timestamp: e.timestamp,
117
- tool_name: e.tool_name!,
118
- hook_type: e.hook_type,
119
- input: truncateField(toolInput),
120
- output: truncateField(e.tool_output),
121
- is_agent_call: isAgentCall,
122
- };
123
-
124
- if (isAgentCall && toolInput) {
125
- entry.agent_detail = {
126
- subagent_type: typeof toolInput.subagent_type === 'string' ? toolInput.subagent_type : undefined,
127
- name: typeof toolInput.name === 'string' ? toolInput.name : undefined,
128
- prompt: typeof toolInput.prompt === 'string'
129
- ? toolInput.prompt
130
- : undefined,
131
- };
132
- }
133
-
134
- acc.push(entry);
135
- return acc;
136
- }, []);
137
-
138
- // ── Skill Invocations ───────────────────────────────────────────────
139
- // H1: SQL window filter (was: querySkillInvocations({limit:200}) + JS time filter)
140
- const allSkillInvocations = storage.querySkillInvocationsByTaskWindow(taskId);
141
-
142
- const skillInvocations = allSkillInvocations
143
- .map(si => ({
144
- id: si.id,
145
- skill_id: si.skill_id,
146
- agent_id: si.agent_id,
147
- invocation_type: si.invocation_type,
148
- reason: si.reason,
149
- workflow: si.workflow,
150
- phase: si.phase,
151
- feature_slug: si.feature_slug,
152
- success: si.success === 1,
153
- error: si.error,
154
- timestamp: si.timestamp,
155
- }));
156
-
157
- // ── Artifacts ───────────────────────────────────────────────────────
158
- const artifacts = [...new Set(
159
- taskEvents
160
- .filter(e =>
161
- (e.tool_name === 'Edit' || e.tool_name === 'Write') &&
162
- getFilePath(e),
163
- )
164
- .map(e => getFilePath(e)!),
165
- )];
166
-
167
- // ── User Prompts ────────────────────────────────────────────────────
168
- const userPrompts = taskEvents
169
- .filter(e => e.hook_type === 'UserPromptSubmit' && getUserPrompt(e))
170
- .map(e => ({
171
- timestamp: e.timestamp,
172
- content: getUserPrompt(e),
173
- }));
174
-
175
- res.json({
176
- task: {
177
- id: task.id,
178
- session_id: task.session_id,
179
- title: task.title,
180
- description: task.description,
181
- start_time: task.start_time,
182
- end_time: task.end_time,
183
- status: task.status,
184
- event_count: task.event_count,
185
- },
186
- userPrompts,
187
- injections,
188
- timeline,
189
- skillInvocations,
190
- artifacts,
191
- });
192
- });
193
- }
@@ -1,20 +0,0 @@
1
- import type { Application } from 'express';
2
- import type { RouteContext } from './types.js';
3
-
4
- /**
5
- * /api/token-usage/* — token usage queries by session.
6
- */
7
- export function registerTokenUsageRoutes(app: Application, ctx: RouteContext): void {
8
- const { storage } = ctx;
9
-
10
- app.get('/api/token-usage/session/:sessionId', (req, res) => {
11
- const sessionId = req.params.sessionId;
12
- try {
13
- const usage = storage.getTokenUsageBySession(sessionId);
14
- const details = storage.listTokenUsage({ session_id: sessionId, limit: 100 });
15
- res.json({ ...usage, details });
16
- } catch (err) {
17
- res.status(500).json({ error: String(err) });
18
- }
19
- });
20
- }
@@ -1,126 +0,0 @@
1
- /**
2
- * /api/trace/:commit — Trace a git commit to its forge session(s).
3
- *
4
- * Reads git notes from the project directory to find associated session IDs,
5
- * then queries storage for session details.
6
- */
7
-
8
- import type { Application } from 'express';
9
- import { execFileSync } from 'node:child_process';
10
- import fs from 'node:fs';
11
- import path from 'node:path';
12
- import type { RouteContext } from './types.js';
13
-
14
- export function registerTraceRoutes(app: Application, ctx: RouteContext): void {
15
- const { storage } = ctx;
16
-
17
- app.get('/api/trace/:commit', (req, res) => {
18
- const commitRef = req.params.commit;
19
- const projectPath = req.query.project as string | undefined;
20
-
21
- if (!projectPath) {
22
- res.status(400).json({ error: 'Query parameter "project" is required' });
23
- return;
24
- }
25
-
26
- // Security: validate projectPath to prevent command injection
27
- // 1. Must be an absolute path
28
- if (!path.isAbsolute(projectPath)) {
29
- res.status(400).json({ error: 'Project path must be absolute' });
30
- return;
31
- }
32
-
33
- // 2. Must exist and be a directory
34
- try {
35
- const stats = fs.statSync(projectPath);
36
- if (!stats.isDirectory()) {
37
- res.status(400).json({ error: 'Project path must be a directory' });
38
- return;
39
- }
40
- } catch {
41
- res.status(400).json({ error: 'Project path does not exist' });
42
- return;
43
- }
44
-
45
- // 3. Must contain a .git directory
46
- const gitDir = path.join(projectPath, '.git');
47
- if (!fs.existsSync(gitDir)) {
48
- res.status(400).json({ error: 'Project path is not a git repository' });
49
- return;
50
- }
51
-
52
- // 1. Resolve commit hash
53
- let commitHash: string;
54
- let commitMessage: string;
55
- try {
56
- commitHash = execFileSync('git', ['rev-parse', commitRef], {
57
- cwd: projectPath, stdio: 'pipe', timeout: 5000,
58
- }).toString().trim();
59
- } catch {
60
- res.status(404).json({ error: `Cannot resolve commit "${commitRef}"` });
61
- return;
62
- }
63
-
64
- try {
65
- commitMessage = execFileSync('git', ['log', '-1', '--format=%s', commitHash], {
66
- cwd: projectPath, stdio: 'pipe', timeout: 5000,
67
- }).toString().trim();
68
- } catch {
69
- commitMessage = '';
70
- }
71
-
72
- // 2. Read git notes
73
- let noteContent: string;
74
- try {
75
- noteContent = execFileSync('git', ['notes', 'show', commitHash], {
76
- cwd: projectPath, stdio: 'pipe', timeout: 5000,
77
- }).toString().trim();
78
- } catch {
79
- res.json({ commit: commitHash, message: commitMessage, sessions: [] });
80
- return;
81
- }
82
-
83
- // 3. Parse session IDs
84
- const sessionIds = noteContent
85
- .split('\n')
86
- .filter(line => line.startsWith('forge-session:'))
87
- .map(line => line.replace('forge-session:', '').trim());
88
-
89
- if (sessionIds.length === 0) {
90
- res.json({ commit: commitHash, message: commitMessage, sessions: [] });
91
- return;
92
- }
93
-
94
- // 4. Query session details
95
- // H2 Phase 3: 改用 facade 聚合方法,消除 db.prepare 直写。
96
- const allSessions = storage.querySessions({ limit: 5000 });
97
- const sessionDetails = sessionIds.map(sid => {
98
- const session = allSessions.find(s => s.session_id === sid || s.session_id.startsWith(sid));
99
- if (!session) return { session_id: sid, found: false };
100
-
101
- const fullId = session.session_id;
102
- const start = new Date(session.start_time);
103
- const end = new Date(session.end_time);
104
- const durationMin = Math.round((end.getTime() - start.getTime()) / 60000);
105
-
106
- const eventBreakdown = storage.aggregateHookTypeBySession(fullId);
107
- const agentRows = storage.aggregateAgentTypeBySession(fullId);
108
- const skillIds = storage.queryDistinctSkillIdsBySession(fullId);
109
-
110
- return {
111
- session_id: fullId,
112
- found: true,
113
- first_prompt: session.first_prompt,
114
- start_time: session.start_time,
115
- end_time: session.end_time,
116
- duration_min: durationMin,
117
- event_count: session.event_count,
118
- event_breakdown: Object.fromEntries(eventBreakdown.map(r => [r.hook_type, r.count])),
119
- agent_calls: agentRows.filter(r => r.agent_type).map(r => ({ type: r.agent_type, count: r.count })),
120
- skills: skillIds,
121
- };
122
- });
123
-
124
- res.json({ commit: commitHash, message: commitMessage, sessions: sessionDetails });
125
- });
126
- }
@@ -1,57 +0,0 @@
1
- /**
2
- * Shared types & helpers for route modules.
3
- */
4
-
5
- import path from 'path';
6
- import fs from 'fs';
7
- import { fileURLToPath } from 'url';
8
- import { homedir } from 'os';
9
- import type { SQLiteStorage } from '../../core/storage/sqlite.js';
10
- import type { SkillRegistry } from '../../skills/registry.js';
11
- import { FORGE_PATHS } from '../../core/constants.js';
12
-
13
- export interface RouteContext {
14
- storage: SQLiteStorage;
15
- skillRegistry?: SkillRegistry;
16
- }
17
-
18
- /**
19
- * Resolve the concrete on-disk path + backup dir for a patchable target.
20
- */
21
- export function resolvePatchTarget(
22
- targetType: string,
23
- targetName: string,
24
- ): { filePath: string; backupDir: string } {
25
- // Security: prevent path traversal attacks
26
- if (!targetName || targetName.includes('/') || targetName.includes('\\') || targetName.includes('..')) {
27
- throw new Error('Invalid target name: path traversal detected');
28
- }
29
-
30
- if (targetType === 'skill') {
31
- return {
32
- filePath: path.join(homedir(), '.claude', 'skills', `${targetName}.md`),
33
- backupDir: FORGE_PATHS.backups('skills'),
34
- };
35
- }
36
- if (targetType === 'routing_rule') {
37
- return {
38
- filePath: FORGE_PATHS.routingYaml(),
39
- backupDir: FORGE_PATHS.backups('routing'),
40
- };
41
- }
42
- throw new Error(`Unsupported targetType: ${targetType}`);
43
- }
44
-
45
- /**
46
- * Locate the static assets directory.
47
- */
48
- export function resolveStaticDir(moduleUrl: string): string | null {
49
- const dir = path.dirname(fileURLToPath(moduleUrl));
50
- const candidates = [
51
- path.join(dir, '..', 'static'),
52
- path.join(dir, '../../../src/web/static'),
53
- path.join(dir, '../static'),
54
- path.join(dir, '../../src/web/static'),
55
- ];
56
- return candidates.find(d => fs.existsSync(d)) ?? null;
57
- }
package/src/web/server.ts DELETED
@@ -1,134 +0,0 @@
1
- /**
2
- * Web API server — Express entry for the Forge dashboard.
3
- *
4
- * server.ts is intentionally thin: it wires middleware, composes the route
5
- * modules under src/web/routes/, and owns lifecycle (start/stop).
6
- */
7
-
8
- import express from 'express';
9
- import type { SQLiteStorage } from '../core/storage/sqlite.js';
10
- import type { SkillRegistry } from '../skills/registry.js';
11
- import type { InvocationGuard } from '../skills/invocation-guard.js';
12
- import { logger } from '../core/utils/logger.js';
13
- import { ErrorHandler } from '../core/utils/error-handler.js';
14
- import { requireAuth } from './auth-middleware.js';
15
- import { mountMcpServer } from '../mcp/server.js';
16
- import { errorHandler, notFoundHandler } from './routes/error-handler.js';
17
-
18
- import type { RouteContext } from './routes/types.js';
19
- import { registerAuthRoutes } from './routes/auth.js';
20
- import { registerStaticAssets, registerStaticFallback } from './routes/static.js';
21
- import { registerStatusRoutes } from './routes/status.js';
22
- import { registerEventsRoutes } from './routes/events.js';
23
- import { registerSessionsRoutes } from './routes/sessions.js';
24
- import { registerTokenUsageRoutes } from './routes/token-usage.js';
25
- import { registerAIRoutes } from './routes/ai.js';
26
- import { registerPatchRoutes } from './routes/patch.js';
27
- import { registerSkillsRoutes } from './routes/skills.js';
28
- import { registerTasksRoutes } from './routes/tasks.js';
29
- import { registerStatsRoutes } from './routes/stats.js';
30
- import { registerSkillStatsRoutes } from './routes/skill-stats.js';
31
- import { registerRulesRoutes } from './routes/rules.js';
32
- import { registerDriftRoutes } from './routes/drift.js';
33
- import { registerTraceRoutes } from './routes/trace.js';
34
- import { registerReportsRoutes } from './routes/reports.js';
35
- import { registerInsightsRoutes } from './routes/insights.js';
36
-
37
- export interface WebServerOptions {
38
- port: number;
39
- storage: SQLiteStorage;
40
- skillRegistry?: SkillRegistry;
41
- invocationGuard?: InvocationGuard;
42
- }
43
-
44
- export class WebServer {
45
- private app: express.Application;
46
- private server: ReturnType<express.Application['listen']> | null = null;
47
-
48
- constructor(private options: WebServerOptions) {
49
- this.app = express();
50
-
51
- // Security: limit request body size to prevent DoS attacks
52
- this.app.use(express.json({ limit: '10mb' }));
53
- this.app.use(express.urlencoded({ extended: true, limit: '10mb' }));
54
-
55
- this.setupRoutes();
56
- }
57
-
58
- private setupRoutes(): void {
59
- this.app.use('/api', (req, res, next) => {
60
- if (req.method === 'GET') return next();
61
- return requireAuth(req, res, next);
62
- });
63
-
64
- const ctx: RouteContext = {
65
- storage: this.options.storage,
66
- skillRegistry: this.options.skillRegistry,
67
- };
68
-
69
- // 1. Auth bootstrap
70
- registerAuthRoutes(this.app, ctx);
71
-
72
- // 2. Static assets (serves UI; fallback registered last)
73
- registerStaticAssets(this.app, ctx);
74
-
75
- // 3. API routes
76
- registerStatusRoutes(this.app, ctx);
77
- registerEventsRoutes(this.app, ctx);
78
- registerSessionsRoutes(this.app, ctx);
79
- registerTokenUsageRoutes(this.app, ctx);
80
- registerAIRoutes(this.app, ctx);
81
- registerPatchRoutes(this.app, ctx);
82
- registerSkillsRoutes(this.app, ctx);
83
- registerTasksRoutes(this.app, ctx);
84
- registerStatsRoutes(this.app, ctx);
85
- registerSkillStatsRoutes(this.app, ctx);
86
- registerRulesRoutes(this.app, ctx);
87
- registerDriftRoutes(this.app, ctx);
88
- registerTraceRoutes(this.app, ctx);
89
- registerReportsRoutes(this.app, ctx);
90
- registerInsightsRoutes(this.app, ctx);
91
-
92
- // 4. MCP server — mounted on /mcp (Streamable HTTP)
93
- if (this.options.skillRegistry) {
94
- mountMcpServer(this.app, {
95
- skillRegistry: this.options.skillRegistry,
96
- storage: this.options.storage,
97
- guard: this.options.invocationGuard,
98
- });
99
- } else {
100
- logger.warn('[MCP] Skipped mounting: skillRegistry not provided');
101
- }
102
-
103
- // 5. SPA catch-all — must be LAST
104
- registerStaticFallback(this.app, ctx);
105
-
106
- // 6. Error handlers — must be AFTER all routes
107
- this.app.use(notFoundHandler);
108
- this.app.use(errorHandler);
109
- }
110
-
111
- async start(): Promise<void> {
112
- return new Promise((resolve, reject) => {
113
- this.server = this.app.listen(this.options.port, () => {
114
- logger.info(`[Web] Server started on port ${this.options.port}`);
115
- resolve();
116
- });
117
-
118
- this.server?.on('error', (error: any) => {
119
- if (error.code === 'EADDRINUSE') {
120
- ErrorHandler.handle(error, 'Web Server');
121
- }
122
- reject(error);
123
- });
124
- });
125
- }
126
-
127
- async stop(): Promise<void> {
128
- if (this.server) {
129
- return new Promise(resolve => {
130
- this.server!.close(() => resolve());
131
- });
132
- }
133
- }
134
- }