@winspan/claude-forge 8.53.2 → 8.54.4

package/src/templates/python.yaml

@@ -1,59 +0,0 @@
-# Python Project Template
-# 为 Python 项目提供开箱即用的规则配置
-
-name: "Python Project"
-description: "Python 项目的推荐规则配置，包含安全检查、代码风格、依赖管理等"
-version: "1.0.0"
-
-# 启用的规则文件
-conventions:
-  - python-best-practices
-  - basic-security
-  - git-safety
-
-# 项目配置
-config:
-  # 文件扩展名
-  file_extensions:
-    - .py
-
-  # 忽略的目录
-  ignore_paths:
-    - __pycache__/
-    - .venv/
-    - venv/
-    - .pytest_cache/
-    - dist/
-    - build/
-    - "*.egg-info/"
-
-  # 推荐的工具
-  recommended_tools:
-    - black
-    - flake8
-    - mypy
-    - pytest
-    - bandit
-
-# 初始化脚本
-init_commands:
-  - python -m venv .venv
-  - source .venv/bin/activate
-  - pip install -r requirements.txt
-
-# 推荐的 Makefile targets
-recommended_make_targets:
-  lint: "flake8 src tests"
-  format: "black src tests"
-  type-check: "mypy src"
-  security: "bandit -r src"
-  test: "pytest tests/ -v --cov=src"
-
-# 文档链接
-documentation:
-  - name: "Python 官方文档"
-    url: "https://docs.python.org/3/"
-  - name: "PEP 8 Style Guide"
-    url: "https://peps.python.org/pep-0008/"
-  - name: "Python Security Best Practices"
-    url: "https://python.readthedocs.io/en/stable/library/security_warnings.html"

package/src/templates/react.yaml

@@ -1,55 +0,0 @@
-# React Project Template
-# 为 React 项目提供开箱即用的规则配置
-
-name: "React Project"
-description: "React 项目的推荐规则配置，包含 XSS 防护、性能优化、Hooks 规范等"
-version: "1.0.0"
-
-# 启用的规则文件
-conventions:
-  - react-best-practices
-  - basic-security
-  - git-safety
-
-# 项目配置
-config:
-  # 文件扩展名
-  file_extensions:
-    - .jsx
-    - .tsx
-    - .js
-    - .ts
-
-  # 忽略的目录
-  ignore_paths:
-    - node_modules/
-    - build/
-    - dist/
-    - .next/
-    - coverage/
-
-  # 推荐的工具
-  recommended_tools:
-    - eslint
-    - prettier
-    - typescript
-    - jest
-
-# 初始化脚本
-init_commands:
-  - npm install
-  - npm run build
-
-# 推荐的 package.json scripts
-recommended_scripts:
-  lint: "eslint src --ext .js,.jsx,.ts,.tsx"
-  format: "prettier --write \"src/**/*.{js,jsx,ts,tsx}\""
-  test: "jest"
-  build: "react-scripts build"
-
-# 文档链接
-documentation:
-  - name: "React 官方文档"
-    url: "https://react.dev"
-  - name: "React Security Best Practices"
-    url: "https://react.dev/learn/security"

package/src/templates/template-manager.ts

@@ -1,170 +0,0 @@
-/**
- * Template Manager - 管理项目模板
- *
- * 提供模板加载、初始化和配置功能
- */
-
-import fs from 'node:fs';
-import path from 'node:path';
-import yaml from 'js-yaml';
-import { fileURLToPath } from 'node:url';
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-
-export interface ProjectTemplate {
-  name: string;
-  description: string;
-  version: string;
-  conventions: string[];
-  config: {
-    file_extensions: string[];
-    ignore_paths: string[];
-    recommended_tools: string[];
-  };
-  init_commands?: string[];
-  recommended_scripts?: Record<string, string>;
-  recommended_make_targets?: Record<string, string>;
-  documentation?: Array<{
-    name: string;
-    url: string;
-  }>;
-}
-
-export class TemplateManager {
-  private templatesDir: string;
-  private templates: Map<string, ProjectTemplate> = new Map();
-
-  constructor(templatesDir?: string) {
-    this.templatesDir = templatesDir ?? path.join(__dirname, '../templates');
-  }
-
-  /**
-   * 加载所有模板
-   */
-  loadAll(): void {
-    if (!fs.existsSync(this.templatesDir)) {
-      throw new Error(`Templates directory not found: ${this.templatesDir}`);
-    }
-
-    const files = fs.readdirSync(this.templatesDir);
-    const yamlFiles = files.filter(f => f.endsWith('.yaml') || f.endsWith('.yml'));
-
-    for (const file of yamlFiles) {
-      const templateId = path.basename(file, path.extname(file));
-      const templatePath = path.join(this.templatesDir, file);
-      const content = fs.readFileSync(templatePath, 'utf-8');
-      const template = yaml.load(content) as ProjectTemplate;
-
-      this.templates.set(templateId, template);
-    }
-  }
-
-  /**
-   * 获取模板
-   */
-  getTemplate(templateId: string): ProjectTemplate | undefined {
-    return this.templates.get(templateId);
-  }
-
-  /**
-   * 列出所有模板
-   */
-  listTemplates(): Array<{ id: string; template: ProjectTemplate }> {
-    return Array.from(this.templates.entries()).map(([id, template]) => ({
-      id,
-      template,
-    }));
-  }
-
-  /**
-   * 初始化项目模板
-   */
-  initProject(templateId: string, projectPath: string): void {
-    const template = this.getTemplate(templateId);
-    if (!template) {
-      throw new Error(`Template not found: ${templateId}`);
-    }
-
-    // 创建 .claude-forge 目录
-    const forgeDir = path.join(projectPath, '.claude-forge');
-    if (!fs.existsSync(forgeDir)) {
-      fs.mkdirSync(forgeDir, { recursive: true });
-    }
-
-    // 创建配置文件
-    const config = {
-      template: templateId,
-      conventions: template.conventions,
-      ignore_paths: template.config.ignore_paths,
-    };
-
-    const configPath = path.join(forgeDir, 'config.yaml');
-    fs.writeFileSync(configPath, yaml.dump(config), 'utf-8');
-
-    // 创建 .gitignore（如果不存在）
-    const gitignorePath = path.join(projectPath, '.gitignore');
-    if (!fs.existsSync(gitignorePath)) {
-      const gitignoreContent = template.config.ignore_paths.join('\n') + '\n';
-      fs.writeFileSync(gitignorePath, gitignoreContent, 'utf-8');
-    }
-
-    console.log(`✓ Initialized ${template.name} template`);
-    console.log(`✓ Created ${configPath}`);
-    console.log(`✓ Enabled conventions: ${template.conventions.join(', ')}`);
-  }
-
-  /**
-   * 生成推荐配置
-   */
-  generateRecommendations(templateId: string): string {
-    const template = this.getTemplate(templateId);
-    if (!template) {
-      throw new Error(`Template not found: ${templateId}`);
-    }
-
-    let output = `# ${template.name} - Recommended Configuration\n\n`;
-
-    // 推荐的工具
-    if (template.config.recommended_tools.length > 0) {
-      output += `## Recommended Tools\n\n`;
-      template.config.recommended_tools.forEach(tool => {
-        output += `- ${tool}\n`;
-      });
-      output += '\n';
-    }
-
-    // 推荐的脚本
-    if (template.recommended_scripts) {
-      output += `## Recommended Scripts (package.json)\n\n`;
-      output += '```json\n';
-      output += '"scripts": {\n';
-      Object.entries(template.recommended_scripts).forEach(([name, cmd], idx, arr) => {
-        const comma = idx < arr.length - 1 ? ',' : '';
-        output += `  "${name}": "${cmd}"${comma}\n`;
-      });
-      output += '}\n';
-      output += '```\n\n';
-    }
-
-    // 推荐的 Makefile targets
-    if (template.recommended_make_targets) {
-      output += `## Recommended Makefile Targets\n\n`;
-      output += '```makefile\n';
-      Object.entries(template.recommended_make_targets).forEach(([name, cmd]) => {
-        output += `${name}:\n\t${cmd}\n\n`;
-      });
-      output += '```\n\n';
-    }
-
-    // 文档链接
-    if (template.documentation && template.documentation.length > 0) {
-      output += `## Documentation\n\n`;
-      template.documentation.forEach(doc => {
-        output += `- [${doc.name}](${doc.url})\n`;
-      });
-      output += '\n';
-    }
-
-    return output;
-  }
-}

package/src/web/analytics/anti-pattern-detector.ts

@@ -1,367 +0,0 @@
-/**
- * AntiPatternDetector — 工作流反模式检测引擎
- *
- * 扫描 events / sessions 表，识别可操作的反模式：
- *   - edit_loop:           同一文件反复 Edit/Write（调试鬼打墙）
- *   - tool_failure_spike:  最近 24h 工具失败率突增
- *   - no_commit:           长会话无 git commit
- *   - event_overflow:      单 session 事件数异常
- *
- * 性能策略：
- *   - 一次性拉取窗口内事件，4 条规则共享缓存
- *   - 仅读 storage（getDatabase + queryEvents + querySessions），不改任何状态
- */
-
-import { createHash } from 'node:crypto';
-import type { SQLiteStorage } from '../../core/storage/sqlite.js';
-import type { ForgeEvent } from '../../core/types.js';
-import type { SessionSummary } from '../../core/storage/sessions.js';
-
-export type AntiPatternType =
-  | 'edit_loop'
-  | 'tool_failure_spike'
-  | 'no_commit'
-  | 'event_overflow';
-
-export type AntiPatternSeverity = 'info' | 'warn' | 'critical';
-
-export interface AntiPattern {
-  id: string;
-  type: AntiPatternType;
-  severity: AntiPatternSeverity;
-  title: string;
-  description: string;
-  detail: Record<string, unknown>;
-  detectedAt: string;
-  sessionId?: string;
-  filePath?: string;
-}
-
-const DAY_MS = 24 * 3600 * 1000;
-const EDIT_TOOLS = new Set(['Edit', 'Write', 'MultiEdit']);
-
-export class AntiPatternDetector {
-  constructor(private storage: SQLiteStorage) {}
-
-  /**
-   * 运行全部反模式规则。
-   *
-   * @param windowDays 检测窗口（天），默认 7
-   */
-  detectAll(windowDays: number = 7): AntiPattern[] {
-    const now = Date.now();
-    const sinceMs = now - windowDays * DAY_MS;
-    const sinceISO = new Date(sinceMs).toISOString();
-    const detectedAt = new Date(now).toISOString();
-
-    // 一次性拉取窗口内事件 + 会话，4 条规则共用
-    const events = this.queryEventsSince(sinceISO);
-    const sessions = this.querySessionsSince(sinceISO);
-
-    const patterns: AntiPattern[] = [
-      ...this.detectEditLoop(events, detectedAt),
-      ...this.detectToolFailureSpike(events, now, windowDays, detectedAt),
-      ...this.detectNoCommit(sessions, events, detectedAt),
-      ...this.detectEventOverflow(sessions, events, detectedAt),
-    ];
-
-    // 按 severity → critical→warn→info 排序，方便前端取 top N
-    const sevOrder: Record<AntiPatternSeverity, number> = { critical: 0, warn: 1, info: 2 };
-    patterns.sort((a, b) => sevOrder[a.severity] - sevOrder[b.severity]);
-    return patterns;
-  }
-
-  // ── 数据加载 ──────────────────────────────────────────────────────────
-
-  /**
-   * 拉取窗口内全部事件。
-   *
-   * H2 Phase 3: 改用 facade 聚合方法。
-   */
-  private queryEventsSince(sinceISO: string): ForgeEvent[] {
-    return this.storage.queryEventsByTimeRange({ since: sinceISO });
-  }
-
-  private querySessionsSince(sinceISO: string): SessionSummary[] {
-    return this.storage.querySessionsByTimeRange({ since: sinceISO });
-  }
-
-  // ── Rule 1: edit_loop ─────────────────────────────────────────────────
-
-  private detectEditLoop(events: ForgeEvent[], detectedAt: string): AntiPattern[] {
-    // 仅 PreToolUse 计一次（避免 Pre + Post 重复计数）
-    const buckets = new Map<string, {
-      sessionId: string;
-      filePath: string;
-      count: number;
-      firstAt: string;
-      lastAt: string;
-    }>();
-
-    for (const ev of events) {
-      if (ev.hook_type !== 'PreToolUse') continue;
-      if (!ev.tool_name || !EDIT_TOOLS.has(ev.tool_name)) continue;
-      const filePath = extractFilePath(ev.tool_input);
-      if (!filePath) continue;
-
-      const key = `${ev.session_id}::${filePath}`;
-      const cur = buckets.get(key);
-      if (cur) {
-        cur.count += 1;
-        if (ev.timestamp < cur.firstAt) cur.firstAt = ev.timestamp;
-        if (ev.timestamp > cur.lastAt) cur.lastAt = ev.timestamp;
-      } else {
-        buckets.set(key, {
-          sessionId: ev.session_id,
-          filePath,
-          count: 1,
-          firstAt: ev.timestamp,
-          lastAt: ev.timestamp,
-        });
-      }
-    }
-
-    const out: AntiPattern[] = [];
-    for (const b of buckets.values()) {
-      if (b.count < 5) continue;
-      const severity: AntiPatternSeverity = b.count >= 8 ? 'critical' : 'warn';
-      out.push({
-        id: stableId('edit_loop', b.sessionId, b.filePath),
-        type: 'edit_loop',
-        severity,
-        title: `编辑循环：${shortPath(b.filePath)} 被改动 ${b.count} 次`,
-        description: `会话 ${shortId(b.sessionId)} 内对同一文件反复 Edit/Write，疑似调试鬼打墙。`,
-        detail: {
-          filePath: b.filePath,
-          count: b.count,
-          sessionId: b.sessionId,
-          firstEditAt: b.firstAt,
-          lastEditAt: b.lastAt,
-        },
-        detectedAt,
-        sessionId: b.sessionId,
-        filePath: b.filePath,
-      });
-    }
-    return out;
-  }
-
-  // ── Rule 2: tool_failure_spike ────────────────────────────────────────
-
-  private detectToolFailureSpike(
-    events: ForgeEvent[],
-    nowMs: number,
-    windowDays: number,
-    detectedAt: string,
-  ): AntiPattern[] {
-    const recentCutoffMs = nowMs - DAY_MS;
-    const recentCutoffISO = new Date(recentCutoffMs).toISOString();
-
-    let recentTotal = 0;
-    let recentFailures = 0;
-    let baselineTotal = 0;
-    let baselineFailures = 0;
-
-    for (const ev of events) {
-      if (ev.hook_type !== 'PostToolUse') continue;
-      const failed = isFailedToolOutput(ev.tool_output);
-      if (ev.timestamp >= recentCutoffISO) {
-        recentTotal += 1;
-        if (failed) recentFailures += 1;
-      } else {
-        baselineTotal += 1;
-        if (failed) baselineFailures += 1;
-      }
-    }
-
-    if (recentTotal < 10) {
-      // 样本太少，不报警
-      return [];
-    }
-
-    const recentRate = recentFailures / recentTotal;
-    const baselineRate = baselineTotal > 0 ? baselineFailures / baselineTotal : 0;
-
-    if (recentRate < 0.2) return [];
-
-    const severity: AntiPatternSeverity = recentRate >= 0.4 ? 'critical' : 'warn';
-    return [{
-      id: stableId('tool_failure_spike', detectedAt.slice(0, 13)),
-      type: 'tool_failure_spike',
-      severity,
-      title: `工具失败率 ${(recentRate * 100).toFixed(1)}%（最近 24h）`,
-      description: `最近 24 小时 PostToolUse 失败比例显著高于过去 ${windowDays - 1} 天均值（${(baselineRate * 100).toFixed(1)}%）。`,
-      detail: {
-        recentFailureRate: round(recentRate, 4),
-        baselineFailureRate: round(baselineRate, 4),
-        recentWindowHours: 24,
-        baselineWindowDays: Math.max(windowDays - 1, 1),
-        totalToolUses: recentTotal,
-        failures: recentFailures,
-        baselineTotal,
-        baselineFailures,
-      },
-      detectedAt,
-    }];
-  }
-
-  // ── Rule 3: no_commit ─────────────────────────────────────────────────
-
-  private detectNoCommit(
-    sessions: SessionSummary[],
-    events: ForgeEvent[],
-    detectedAt: string,
-  ): AntiPattern[] {
-    // 预聚合：每个 session 内的 Bash 命令文本
-    const bashBySession = new Map<string, string[]>();
-    for (const ev of events) {
-      if (ev.tool_name !== 'Bash') continue;
-      if (ev.hook_type !== 'PreToolUse') continue;
-      const cmd = extractBashCommand(ev.tool_input);
-      if (!cmd) continue;
-      const list = bashBySession.get(ev.session_id);
-      if (list) list.push(cmd);
-      else bashBySession.set(ev.session_id, [cmd]);
-    }
-
-    const out: AntiPattern[] = [];
-    for (const s of sessions) {
-      const durationMs = isoDiffMs(s.start_time, s.end_time);
-      const durationMin = durationMs / 60000;
-      if (durationMin <= 30) continue;
-
-      const cmds = bashBySession.get(s.session_id) ?? [];
-      const hasCommit = cmds.some((c) => /\bgit\s+commit\b/.test(c));
-      if (hasCommit) continue;
-
-      const severity: AntiPatternSeverity = durationMin > 60 ? 'critical' : 'warn';
-      out.push({
-        id: stableId('no_commit', s.session_id),
-        type: 'no_commit',
-        severity,
-        title: `${Math.round(durationMin)} 分钟会话无 git commit`,
-        description: `会话 ${shortId(s.session_id)} 持续 ${Math.round(durationMin)} 分钟未沉淀提交。`,
-        detail: {
-          sessionId: s.session_id,
-          durationMin: Math.round(durationMin),
-          eventCount: s.event_count,
-          startTime: s.start_time,
-          endTime: s.end_time,
-          bashCommands: cmds.length,
-        },
-        detectedAt,
-        sessionId: s.session_id,
-      });
-    }
-    return out;
-  }
-
-  // ── Rule 4: event_overflow ────────────────────────────────────────────
-
-  private detectEventOverflow(
-    sessions: SessionSummary[],
-    events: ForgeEvent[],
-    detectedAt: string,
-  ): AntiPattern[] {
-    // 按 session 统计 top tools
-    const toolBySession = new Map<string, Map<string, number>>();
-    for (const ev of events) {
-      if (!ev.tool_name) continue;
-      let m = toolBySession.get(ev.session_id);
-      if (!m) {
-        m = new Map();
-        toolBySession.set(ev.session_id, m);
-      }
-      m.set(ev.tool_name, (m.get(ev.tool_name) ?? 0) + 1);
-    }
-
-    const out: AntiPattern[] = [];
-    for (const s of sessions) {
-      if (s.event_count <= 500) continue;
-      const severity: AntiPatternSeverity = s.event_count > 1000 ? 'critical' : 'warn';
-      const durationMin = Math.round(isoDiffMs(s.start_time, s.end_time) / 60000);
-      const topTools = topN(toolBySession.get(s.session_id), 5);
-
-      out.push({
-        id: stableId('event_overflow', s.session_id),
-        type: 'event_overflow',
-        severity,
-        title: `事件爆量：${s.event_count} 个事件`,
-        description: `会话 ${shortId(s.session_id)} 单次累计 ${s.event_count} 个事件，可能任务规划失败或循环失控。`,
-        detail: {
-          sessionId: s.session_id,
-          eventCount: s.event_count,
-          durationMin,
-          topTools,
-          startTime: s.start_time,
-          endTime: s.end_time,
-        },
-        detectedAt,
-        sessionId: s.session_id,
-      });
-    }
-    return out;
-  }
-}
-
-// ── helpers ─────────────────────────────────────────────────────────────
-
-function extractFilePath(input: ForgeEvent['tool_input']): string | undefined {
-  if (!input) return undefined;
-  const fp = input.file_path;
-  if (typeof fp === 'string' && fp.length > 0) return fp;
-  return undefined;
-}
-
-function extractBashCommand(input: ForgeEvent['tool_input']): string | undefined {
-  if (!input) return undefined;
-  const cmd = input.command;
-  return typeof cmd === 'string' ? cmd : undefined;
-}
-
-function isFailedToolOutput(out: Record<string, unknown> | undefined): boolean {
-  if (!out) return false;
-  // Claude Code 的 PostToolUse output 形态：
-  //   - { error: "..." }                    → 失败
-  //   - { success: false, error: "..." }    → 失败
-  //   - { stderr: "...", stdout: "" }       → 通常代表失败（仅当 stderr 非空且 stdout 空）
-  //   - { isError: true }                   → 失败
-  const err = out.error;
-  if (typeof err === 'string' && err.length > 0) return true;
-  if (out.success === false) return true;
-  if (out.isError === true) return true;
-  return false;
-}
-
-function isoDiffMs(startISO: string, endISO: string): number {
-  const s = Date.parse(startISO);
-  const e = Date.parse(endISO);
-  if (Number.isNaN(s) || Number.isNaN(e)) return 0;
-  return Math.max(0, e - s);
-}
-
-function topN(map: Map<string, number> | undefined, n: number): Array<{ tool: string; count: number }> {
-  if (!map) return [];
-  return [...map.entries()]
-    .sort((a, b) => b[1] - a[1])
-    .slice(0, n)
-    .map(([tool, count]) => ({ tool, count }));
-}
-
-function round(n: number, digits: number): number {
-  const f = 10 ** digits;
-  return Math.round(n * f) / f;
-}
-
-function shortId(id: string): string {
-  return id.length > 8 ? id.slice(0, 8) : id;
-}
-
-function shortPath(p: string): string {
-  if (p.length <= 60) return p;
-  return '…' + p.slice(-58);
-}
-
-function stableId(...parts: string[]): string {
-  return createHash('sha1').update(parts.join('|')).digest('hex').slice(0, 16);
-}