add-coder 0.3.19 → 0.3.20-0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "add-coder",
-  "version": "0.3.19",
+  "version": "0.3.20-0",
   "private": false,
   "description": "[codein2027](https://github.com/xiaomingming92/codein2027) - A complete scaffolding for building the ADD programming paradigm, the implementation layer for AI code governance. Core principle: Audit as Infrastructure. Breaks the black-box programming process and cross-session amnesia, evolving programming paradigms into an auditable, traceable, and convergent new era. npx-ready.\n\n[codein2027](https://github.com/xiaomingming92/codein2027) 快速构建 ADD 编程范式的完整脚手架——AI 代码治理的落地方案。以「审计即基础设施」为核心，彻底打破编程过程黑盒与跨轮失忆，让编程范式进化为可审计、可追溯、可收敛的新时代。npx 即用，人人可体验。",
   "repository": {
@@ -48,13 +48,13 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
+    "@huggingface/transformers": "^3.8.1",
     "@prisma/adapter-pg": "^7.0.0",
     "@prisma/client": "^7.0.0",
     "dotenv": "*",
     "prisma": "^7.0.0",
     "tsx": ">=4",
-    "vector-cosine-similarity": "^1.8.0",
-    "@huggingface/transformers": "^3.8.1"
+    "vector-cosine-similarity": "^1.8.0"
   },
   "peerDependenciesMeta": {
     "@prisma/client": {

package/templates/.add-coder-src-hash.json

@@ -1,5 +1,5 @@
 {
-  "_version": "0.3.19",
+  "_version": "0.3.20-0",
   "adapters/claude/hooks/doc-format-guard.sh": "ec59ad3f",
   "adapters/claude/hooks/lib/common.sh": "4f3e64ad",
   "adapters/claude/hooks/lib/context-inject.sh": "cfc8c65e",
@@ -74,7 +74,7 @@
   "adapters/qoder/hooks/subagent-stop.sh": "5a2c78c6",
   "adapters/qoder/mcp.json": "b2075957",
   "adapters/qoder/settings.json": "4bae3c9a",
-  "adapters/qoder/sync-policy.json": "a4bcbbaf",
+  "adapters/qoder/sync-policy.json": "9cb6ff90",
   "adapters/trae/hooks/doc-format-guard.sh": "9b99f253",
   "adapters/trae/hooks/lib/common.sh": "4f3e64ad",
   "adapters/trae/hooks/lib/context-inject.sh": "cfc8c65e",
@@ -188,7 +188,7 @@
   "core/scripts/mcp-server/notifications/hitl.ts": "96eb7c5d",
   "core/scripts/mcp-server/notifications/hook.ts": "a6cb861f",
   "core/scripts/mcp-server/notifications/index.ts": "b6615afa",
-  "core/scripts/mcp-server/resources/add-coder-version.ts": "299fa071",
+  "core/scripts/mcp-server/resources/add-coder-version.ts": "2384fa40",
   "core/scripts/mcp-server/resources/add-state.ts": "1c1cc3a2",
   "core/scripts/mcp-server/resources/hook-events-report.ts": "1d4b5996",
   "core/scripts/mcp-server/resources/index.ts": "50e19629",
@@ -197,12 +197,13 @@
   "core/scripts/mcp-server/sampling/review.ts": "5db7a8df",
   "core/scripts/mcp-server/shared/dps-scoring.strategy.ts": "f1c901dc",
   "core/scripts/mcp-server/shared/env.ts": "57f4c2f2",
-  "core/scripts/mcp-server/shared/fs.ts": "97257db9",
+  "core/scripts/mcp-server/shared/fs.ts": "0e66a214",
   "core/scripts/mcp-server/shared/hitl-interaction.strategy.ts": "7c5c26f5",
   "core/scripts/mcp-server/shared/package.json": "e3d5a4a2",
-  "core/scripts/mcp-server/shared/prisma.ts": "e871942b",
+  "core/scripts/mcp-server/shared/prisma.ts": "a9618f99",
   "core/scripts/mcp-server/shared/project-root-strategy.ts": "1a5bdc57",
   "core/scripts/mcp-server/shared/response.ts": "f7806b67",
+  "core/scripts/mcp-server/shared/run-command.ts": "42caf972",
   "core/scripts/mcp-server/tasks/index.ts": "c040eb75",
   "core/scripts/mcp-server/tasks/runner.ts": "d84bd35d",
   "core/scripts/mcp-server/tasks/store.ts": "2fce1a92",
@@ -212,10 +213,10 @@
   "core/scripts/mcp-server/tools/docs.ts": "034e473c",
   "core/scripts/mcp-server/tools/gateway/check_add_route_completeness.ts": "b58e76ee",
   "core/scripts/mcp-server/tools/gateway/check_add_route_status.ts": "23fbbb6b",
-  "core/scripts/mcp-server/tools/gateway/check_dps.ts": "0f0bedd8",
-  "core/scripts/mcp-server/tools/gateway/check_rahs.ts": "fe210727",
-  "core/scripts/mcp-server/tools/gateway/check_spec_sync.ts": "89c2338b",
-  "core/scripts/mcp-server/tools/gateway/helpers.ts": "690d7891",
+  "core/scripts/mcp-server/tools/gateway/check_dps.ts": "4d599b38",
+  "core/scripts/mcp-server/tools/gateway/check_rahs.ts": "4078b0f1",
+  "core/scripts/mcp-server/tools/gateway/check_spec_sync.ts": "486df441",
+  "core/scripts/mcp-server/tools/gateway/helpers.ts": "f8794a92",
   "core/scripts/mcp-server/tools/gateway/index.ts": "559acb75",
   "core/scripts/mcp-server/tools/gateway.backup": "65eae393",
   "core/scripts/mcp-server/tools/hitl.ts": "f447345f",
@@ -232,7 +233,7 @@
   "core/specs/add-coder-npm-package/checklist.md": "ed92032c",
   "core/specs/add-coder-npm-package/spec.md": "c7d0f235",
   "core/specs/add-coder-npm-package/tasks.md": "c34301e5",
-  "core/templates/01-架构/《ADD开发工作路径与文档协同规范》.md": "c86814d0",
+  "core/templates/01-架构/《ADD开发工作路径与文档协同规范》.md": "c7e2ac6a",
   "core/templates/TERMINOLOGY.md": "e9f4f781",
   "core/templates/add-route-template-heavyweight.md": "0e107ac0",
   "core/templates/add-route-template.md": "da7022df",
@@ -274,6 +275,6 @@
   "core/templates/tasks-template.md": "2b9d0d52",
   "core/templates/tasks-template.schema.json": "fff6eb47",
   "core/tools/README.md": "26a63460",
-  "core/vocabulary/add-governance-vocabulary.md": "62d71481",
+  "core/vocabulary/add-governance-vocabulary.md": "ee9e2bd2",
   "shared/hooks-lib/common.sh": "441eee52"
 }

package/templates/adapters/qoder/sync-policy.json

@@ -4,7 +4,7 @@
   "checks": {
     "add_route_exists": { "enabled": true, "severity": "block" },
     "add_route_completeness": { "enabled": true, "severity": "block" },
-    "dps": { "enabled": true, "severity": "block", "threshold": 85 },
+    "dps": { "enabled": true, "severity": "block", "threshold": 80 },
     "rahs": { "enabled": true, "severity": "block", "threshold": 90 },
     "tasks": { "enabled": true, "severity": "block" },
     "checklist": { "enabled": true, "severity": "block" },

package/templates/core/scripts/mcp-server/resources/add-coder-version.ts

@@ -1,7 +1,7 @@
 import type { McpServer } from "@modelcontextprotocol/server"
 import { join } from "path"
 import { readFileSafe, PROJECT_ROOT } from "../shared/fs.js"
-import { spawnSync } from "child_process"
+import { runCommand } from "../shared/run-command.js"
 
 interface PkgJson { version?: string }
 
@@ -16,8 +16,9 @@ export function registerVersionResource(server: McpServer) {
       try { current = (JSON.parse(pkg) as PkgJson).version ?? "unknown" } catch { /* intentionally empty */ }
     }
     try {
-      const result = spawnSync("npm", ["view", "add-coder", "version"], { encoding: "utf-8", timeout: 10000 })
-      latest = (result.stdout || "").trim() || "unknown"
+      // win32 下 npm 为 .cmd → runCommand 自动解析（issue #10 跨端修复）
+      const result = runCommand("npm", ["view", "add-coder", "version"], { timeout: 10000 })
+      latest = result.stdout.trim() || "unknown"
       outdated = current !== "unknown" && latest !== "unknown" && current !== latest
     } catch { /* intentionally empty */ }
     return { contents: [{ text: JSON.stringify({ current, latest, outdated }), uri: "add-coder://version", mimeType: "application/json" }] }

package/templates/core/scripts/mcp-server/shared/fs.ts

@@ -1,7 +1,7 @@
 import { readFile, readdir } from "fs/promises"
 import { join, relative } from "path"
 import { existsSync } from "fs"
-import { spawnSync } from "child_process"
+import { runCommand } from "./run-command.js"
 import { PROJECT_ROOT, MAGIC_DIR } from "./env.js"
 import type { GuardResult } from "../types.js"
 
@@ -15,9 +15,14 @@ export async function validateDocWithGuard(filePath: string): Promise<GuardResul
   const content = await readFileSafe(filePath)
   if (!content) return { ok: false, issues: "文件无法读取" }
   const guardInput = JSON.stringify({ tool_input: { file_path: filePath, file_content: content } })
-  const result = spawnSync("bash", [guardScript], { input: guardInput, encoding: "utf-8", timeout: 5000 })
-  if (result.status !== 0) return { ok: false, issues: result.stderr || "guard 执行失败" }
-  return { ok: true, issues: "" }
+  try {
+    // bash 在 Windows 不存在 → runCommand 抛"命令不可用" → 显式返回 guard 失败（不再静默 null）
+    const result = runCommand("bash", [guardScript], { input: guardInput, timeout: 5000 })
+    if (result.status !== 0) return { ok: false, issues: result.stderr || "guard 执行失败" }
+    return { ok: true, issues: "" }
+  } catch (e) {
+    return { ok: false, issues: `guard 执行失败: ${e instanceof Error ? e.message : String(e)}` }
+  }
 }
 
 export async function readdirRecursive(baseDir: string): Promise<string[]> {

package/templates/core/scripts/mcp-server/shared/prisma.ts

@@ -41,6 +41,16 @@ if (url.startsWith("postgresql://") || url.startsWith("postgres://")) {
     adapter = new Pg({ connectionString: url })
   } catch { /* optional dep */ }
 }
+if (url.startsWith("file:")) {
+  // SQLite 完整链路（issue #10 P1-5）：DATABASE_URL 为 file: → 加载 better-sqlite3 adapter
+  try {
+    const bsql = require("@prisma/adapter-better-sqlite3") as Record<string, unknown>
+    const Bsql = bsql.PrismaBetterSQLite3 as new (opts: Record<string, unknown>) => Record<string, unknown>
+    adapter = new Bsql({ url })
+  } catch {
+    throw new Error("SQLite 模式需要安装 @prisma/adapter-better-sqlite3（npm install @prisma/adapter-better-sqlite3）")
+  }
+}
 
 export const prisma: Record<string, Record<string, (...a: unknown[]) => unknown>> = new PrismaClient({
   ...(adapter ? { adapter } : {}),

package/templates/core/scripts/mcp-server/shared/run-command.ts

@@ -0,0 +1,57 @@
+/*
+ * Author       : xiaomingming wujixmm@gmail.com
+ * Date         : 2026-08-07
+ * Description  : 跨平台子进程统一封装（模板版，消费项目 MCP 使用）
+ *                与 add-coder 包 src/lib/run-command.ts 语义一致：
+ *                - win32 下 npm/npx/pnpm/git 为 .cmd 批处理 → 显式追加 .cmd
+ *                - 命令不存在（ENOENT）→ 抛"命令不可用"，不再静默 status=null
+ *                - 本项目所有子进程调用 MUST 走 runCommand 单入口
+ */
+import { spawnSync } from "child_process"
+
+export interface RunCommandOptions {
+  cwd?: string
+  env?: NodeJS.ProcessEnv
+  input?: string
+  timeout?: number
+  shell?: boolean
+  platform?: NodeJS.Platform
+  /** stdio 透传（如 "inherit" 实时显示；默认无 input 时 ignore/pipe/pipe 捕获） */
+  stdio?: "inherit"
+}
+
+export interface RunResult {
+  status: number | null
+  stdout: string
+  stderr: string
+}
+
+/** Windows 下为 .cmd 批处理的可执行族（CreateProcess 无法直接执行） */
+const CMD_EXTENSIONS = ["npm", "npx", "pnpm", "git"]
+
+export function runCommand(cmd: string, args: string[], opts: RunCommandOptions = {}): RunResult {
+  const platform = opts.platform ?? process.platform
+  const needsCmdExt = platform === "win32" && CMD_EXTENSIONS.includes(cmd) && !opts.shell
+  const effectiveCmd = needsCmdExt ? `${cmd}.cmd` : cmd
+  const r = spawnSync(effectiveCmd, args, {
+    cwd: opts.cwd,
+    env: opts.env,
+    input: opts.input,
+    timeout: opts.timeout,
+    encoding: "utf-8",
+    shell: opts.shell,
+    stdio: opts.stdio ?? (opts.input !== undefined ? ["pipe", "pipe", "pipe"] : ["ignore", "pipe", "pipe"]),
+  })
+  if (r.error) {
+    throw new Error(`命令不可用: ${cmd}（平台: ${platform}，${r.error.message}）`)
+  }
+  return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" }
+}
+
+/** 跨平台命令存在性探测：win32 用 where / POSIX 用 which */
+export function commandExists(cmd: string, platform?: NodeJS.Platform): boolean {
+  const p = platform ?? process.platform
+  const probe = p === "win32" ? "where" : "which"
+  const r = spawnSync(probe, [cmd], { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] })
+  return !r.error && r.status === 0
+}

package/templates/core/scripts/mcp-server/tools/gateway/check_dps.ts

@@ -169,8 +169,11 @@ export function registerCheckDps(server: ToolRegistrar) {
               continuityCount++;
             }
           } catch {
-            // embedding 加载失败 → 降级纯结构分
+            // embedding 加载失败 → 降级纯结构分；提示预下载入口（不阻断、不报错，issue 关切：网络不通用户不卡死）
             continuityCount = 0;
+            parts.push(
+              "  ⚠️ embedding 不可用（模型未下载或网络不通）：语义延续性降级为 0——可运行 `add-coder model:download` 提前预下载",
+            );
           }
         }
         const structSem = mappingTotal > 0 ? (mappingMatched / mappingTotal) * 100 : 0;

package/templates/core/scripts/mcp-server/tools/gateway/check_rahs.ts

@@ -18,6 +18,7 @@ import {
   MAGIC_DIR,
 } from "../../shared/fs.js";
 import { prisma } from "../../shared/prisma.js";
+import { runCommand } from "../../shared/run-command.js";
 
 export function registerCheckRahs(server: ToolRegistrar) {
   server.registerTool(
@@ -51,10 +52,9 @@ export function registerCheckRahs(server: ToolRegistrar) {
           specScore = 80,
           symScore = 80;
         try {
-          const { spawnSync } = await import("child_process");
-          const tsc = spawnSync("npx", ["tsc", "--noEmit"], {
+          // win32 下 npx 为 .cmd → runCommand 自动解析（issue #10 跨端修复）
+          const tsc = runCommand("npx", ["tsc", "--noEmit"], {
             cwd: PROJECT_ROOT,
-            encoding: "utf-8",
             timeout: 30000,
           });
           typeScore =
@@ -62,8 +62,7 @@ export function registerCheckRahs(server: ToolRegistrar) {
               ? 100
               : Math.max(
                   0,
-                  100 -
-                    (tsc.stderr || "").split("\n").filter(Boolean).length * 5,
+                  100 - tsc.stderr.split("\n").filter(Boolean).length * 5,
                 );
         } catch {}
         try {

package/templates/core/scripts/mcp-server/tools/gateway/check_spec_sync.ts

@@ -18,6 +18,7 @@ import {
   PROJECT_ROOT,
   MAGIC_DIR,
 } from "../../shared/fs.js";
+import { runCommand } from "../../shared/run-command.js";
 
 export function registerCheckSpecSync(server: ToolRegistrar) {
   server.registerTool(
@@ -72,16 +73,14 @@ export function registerCheckSpecSync(server: ToolRegistrar) {
             .map((f: string) => f.replace(/`/g, ""));
           lines.push(`附录文件: ${appendixFiles.length} 个`);
 
-          // git diff 变更文件
+          // git diff 变更文件（win32 下 git 为 .cmd → runCommand 自动解析，issue #10 跨端修复）
           let diffFiles: string[] = [];
           try {
-            const { spawnSync } = await import("child_process");
-            const diff = spawnSync("git", ["diff", "--name-only"], {
+            const diff = runCommand("git", ["diff", "--name-only"], {
               cwd: PROJECT_ROOT,
-              encoding: "utf-8",
               timeout: 5000,
             });
-            diffFiles = (diff.stdout || "").trim().split("\n").filter(Boolean);
+            diffFiles = diff.stdout.trim().split("\n").filter(Boolean);
           } catch {
             lines.push("Git diff: 无法获取");
           }

package/templates/core/scripts/mcp-server/tools/gateway/helpers.ts

@@ -7,6 +7,8 @@
  * @Description  : 
  */
 import { DPS_SCORING_CONFIG as CFG } from "../../shared/dps-scoring.strategy.js";
+import { homedir } from "os";
+import { join } from "path";
 
 // ═══════════════ DPS 算法：共享辅助函数 ═══════════════
 
@@ -106,6 +108,11 @@ let _embedPipeline: { embed: (texts: string[]) => Promise<number[][]> } | null =
 export async function getEmbeddings(texts: string[]): Promise<number[][]> {
   if (!_embedPipeline) {
     const { pipeline, env } = await import("@huggingface/transformers");
+    // 与 add-coder CLI `model:download` 预下载同源：锚定用户级缓存（HF_HUB_CACHE → HF_HOME/hub → ~/.cache/huggingface/hub）
+    // ⚠️ transformers v3 默认 cacheDir 指向包内 .cache（重装即丢）——不锚定则 CLI 预下载的模型无法复用
+    const hubCache = process.env.HF_HUB_CACHE;
+    const home = process.env.HF_HOME || join(homedir(), ".cache", "huggingface");
+    env.cacheDir = hubCache || join(home, "hub");
     env.remoteHost = "https://hf-mirror.com";
     env.remotePathTemplate = "{model}/resolve/{revision}/";
     const extractor = await pipeline("feature-extraction", CFG.EMBEDDING_MODEL);

package/templates/core/templates/01-/346/236/266/346/236/204//343/200/212ADD/345/274/200/345/217/221/345/267/245/344/275/234/350/267/257/345/276/204/344/270/216/346/226/207/346/241/243/345/215/217/345/220/214/350/247/204/350/214/203/343/200/213.md

@@ -392,7 +392,7 @@ Step 8 收敛判断
 |------|---------|-------------------|
 | `check_add_route_status` | Step 3 前（前置守卫） | `"add_route_exists": { "enabled": true, "severity": "block" }` |
 | `check_add_route_completeness` | Step 3 代码完成后自检 | `"add_route_completeness": { "enabled": true, "severity": "block" }` |
-| `check_dps({ planKeyword })` | Step 0 末尾（进入 Step 1 前） | `"dps": { "enabled": true, "severity": "block", "threshold": 85 }` |
+| `check_dps({ planKeyword })` | Step 0 末尾（进入 Step 1 前） | `"dps": { "enabled": true, "severity": "block", "threshold": 80 }` |
 | `check_rahs({ planKeyword })` | Step 4 末尾 + Step 8 收敛 | `"rahs": { "enabled": true, "severity": "block", "threshold": 90 }` |
 
 策略文件位于 `{{magicDir}}/sync-policy.json`，重型 add-route 模板已内置对应的 §0.8 / §4.6 闸门段落。

package/templates/core/vocabulary/add-governance-vocabulary.md

@@ -190,7 +190,7 @@ LLM: "Step 3 前置守卫：我先检查 add-route 是否存在"
 
 **错误输出**：
 ```
-Guardian 返回: "⛔ BLOCKED: DPS 评分 72/100（< 85）"
+Guardian 返回: "⛔ BLOCKED: DPS 评分 72/100（< 80）"
 LLM: "DPS 偏低，但不影响代码，继续 Step 1..." [忽略阻断]
 ```