agents-gitflow-guard 0.0.18 → 0.0.20

package/lib/cli.mjs

@@ -1,6 +1,8 @@
-import { _ as resolveLocale, d as gitRunner, f as loadConfig, h as makeT, i as formatDeny, l as currentBranch, o as stateDir, p as roleMatches, r as evaluateCommand, u as findRepoRoot, v as classify } from "./src-BQYC4N6b.mjs";
-import { readFile } from "node:fs/promises";
-import { join } from "node:path";
+import { _ as resolveLocale, d as gitRunner, f as loadConfig, h as makeT, i as formatDeny, l as currentBranch, o as stateDir, p as roleMatches, r as evaluateCommand, u as findRepoRoot, v as classify } from "./src-DPJRoEJq.mjs";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { createInterface } from "node:readline";
 //#region src/platform.ts
 function str(v) {
 	return typeof v === "string" ? v : "";
@@ -84,6 +86,213 @@ function encodeDeny(platform, reason) {
 	}
 }
 //#endregion
+//#region src/wire.ts
+const CLIENTS = [
+	"dsh",
+	"claude",
+	"codex",
+	"opencode",
+	"antigravity",
+	"pi"
+];
+function isWireClient(v) {
+	return CLIENTS.includes(v);
+}
+/** 各客户端的 hook 落位规格(dsh/pi 无 hook 文件, 仅输出接入引导) */
+const WIRE_CLIENTS = [
+	{
+		client: "claude",
+		projectPath: ".claude/settings.json",
+		globalPath: () => join(homedir(), ".claude", "settings.json")
+	},
+	{
+		client: "codex",
+		projectPath: ".codex/hooks.json",
+		globalPath: () => join(homedir(), ".codex", "hooks.json")
+	},
+	{
+		client: "opencode",
+		projectPath: ".opencode/hook/hooks.yaml",
+		globalPath: () => join(homedir(), ".config", "opencode", "hook", "hooks.yaml")
+	},
+	{
+		client: "antigravity",
+		projectPath: ".agents/hooks.json",
+		globalPath: () => join(homedir(), ".gemini", "config", "hooks.json"),
+		experimental: true
+	},
+	{
+		client: "dsh",
+		projectPath: "",
+		globalPath: () => ""
+	},
+	{
+		client: "pi",
+		projectPath: "",
+		globalPath: () => ""
+	}
+];
+/** 各 stdin-hook 客户端的 hook 命令(与 references/*.md 逐一对应; codex/antigravity 用相对 bin/...) */
+const COMMANDS = {
+	claude: "node ${CLAUDE_PROJECT_DIR}/bin/gitflow-guard.mjs check --platform claude",
+	codex: "node bin/gitflow-guard.mjs check --platform codex",
+	opencode: "node \"$OPENCODE_PROJECT_DIR/bin/gitflow-guard.mjs\" check --platform opencode",
+	antigravity: "node bin/gitflow-guard.mjs check --platform antigravity"
+};
+/** OpenCode YAML 模板(顶层 hooks: + 语义 id gitflow-guard) */
+const OPENCODE_TEMPLATE = [
+	"hooks:",
+	"  - id: gitflow-guard",
+	"    event: tool.before.bash",
+	"    actions:",
+	"      - bash: |",
+	`          ${COMMANDS.opencode}`
+].join("\n");
+const YAML_ID_GUARD = /^\s*- id: gitflow-guard\s*$/m;
+const YAML_ID_ANY = /^\s*- id:/m;
+/** 读取文本文件; 缺失返回 null(其余异常也视为缺失, 决策保守) */
+async function readText(path) {
+	try {
+		return await readFile(path, "utf8");
+	} catch {
+		return null;
+	}
+}
+async function writeText(path, content) {
+	await mkdir(dirname(path), { recursive: true });
+	await writeFile(path, content, "utf8");
+}
+/** JSON 递归搜索: 是否已含该命令(任意形状, 幂等判重) */
+function jsonContains(obj, needle) {
+	if (typeof obj === "string") return obj === needle;
+	if (Array.isArray(obj)) return obj.some((x) => jsonContains(x, needle));
+	if (obj !== null && typeof obj === "object") return Object.values(obj).some((x) => jsonContains(x, needle));
+	return false;
+}
+function parseJsonOrThrow(path, raw) {
+	try {
+		const parsed = JSON.parse(raw);
+		if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("not an object");
+		return parsed;
+	} catch {
+		throw new Error(`invalid JSON in ${path} — refusing to modify it`);
+	}
+}
+async function writeJson(path, obj) {
+	await writeText(path, `${JSON.stringify(obj, null, 2)}\n`);
+}
+/** JSON 客户端(claude/codex/antigravity)新增 hook 条目; 非破坏性合并, 同命令已存在则跳过 */
+async function addJsonEntry(path, client, dryRun) {
+	const cmd = COMMANDS[client];
+	const raw = await readText(path);
+	const obj = raw === null ? {} : parseJsonOrThrow(path, raw);
+	if (jsonContains(obj, cmd)) return "exists";
+	const entry = client === "antigravity" ? {
+		matcher: "run_command",
+		hooks: [{
+			type: "command",
+			command: cmd
+		}]
+	} : {
+		matcher: client === "codex" ? "^Bash$" : "Bash",
+		hooks: [{
+			type: "command",
+			command: cmd
+		}]
+	};
+	if (client === "antigravity") {
+		const block = obj["gitflow-guard"] ??= { PreToolUse: [] };
+		if (!Array.isArray(block.PreToolUse)) throw new Error(`invalid ${path}: gitflow-guard.PreToolUse must be an array`);
+		block.PreToolUse.push(entry);
+	} else {
+		const hooksObj = obj["hooks"] ??= {};
+		const arr = hooksObj["PreToolUse"] ??= [];
+		if (!Array.isArray(arr)) throw new Error(`invalid ${path}: hooks.PreToolUse must be an array`);
+		arr.push(entry);
+	}
+	if (!dryRun) await writeJson(path, obj);
+	return "added";
+}
+/** JSON 客户端移除本插件条目; 不动其他内容 */
+async function removeJsonEntry(path, client, dryRun) {
+	const cmd = COMMANDS[client];
+	const raw = await readText(path);
+	if (raw === null) return "absent";
+	const obj = parseJsonOrThrow(path, raw);
+	if (!jsonContains(obj, cmd)) return "absent";
+	if (client === "antigravity") delete obj["gitflow-guard"];
+	else {
+		const hooksObj = obj["hooks"];
+		const arr = hooksObj?.["PreToolUse"];
+		if (Array.isArray(arr)) {
+			const rest = arr.filter((e) => !(e?.hooks ?? []).some((h) => h?.command === cmd));
+			if (rest.length === 0) delete hooksObj["PreToolUse"];
+			else hooksObj["PreToolUse"] = rest;
+			if (hooksObj && Object.keys(hooksObj).length === 0) delete obj["hooks"];
+		}
+	}
+	if (!dryRun) await writeJson(path, obj);
+	return "removed";
+}
+/** OpenCode YAML: hooks: 列表按语义 id gitflow-guard 判重/落位 */
+async function addYamlEntry(path, dryRun) {
+	const raw = await readText(path);
+	if (raw !== null) {
+		if (YAML_ID_GUARD.test(raw)) return "exists";
+		const lines = raw.split("\n");
+		const hooksIdx = lines.findIndex((l) => /^hooks:\s*$/.test(l));
+		const block = OPENCODE_TEMPLATE.split("\n").slice(1);
+		if (hooksIdx === -1) {
+			const joined = [
+				...lines,
+				"",
+				...block
+			].join("\n");
+			if (!dryRun) await writeText(path, joined);
+			return "added";
+		}
+		lines.splice(hooksIdx + 1, 0, ...block);
+		if (!dryRun) await writeText(path, lines.join("\n"));
+		return "added";
+	}
+	if (!dryRun) await writeText(path, OPENCODE_TEMPLATE);
+	return "added";
+}
+/** OpenCode YAML: 移除 gitflow-guard 块; 若列表清空则连顶层 hooks: 一并清理 */
+async function removeYamlEntry(path, dryRun) {
+	const raw = await readText(path);
+	if (raw === null) return "absent";
+	if (!YAML_ID_GUARD.test(raw)) return "absent";
+	const lines = raw.split("\n");
+	const start = lines.findIndex((l) => YAML_ID_GUARD.test(l));
+	let end = lines.length;
+	for (let i = start + 1; i < lines.length; i++) if (YAML_ID_ANY.test(lines[i])) {
+		end = i;
+		break;
+	}
+	let rest = [...lines.slice(0, start), ...lines.slice(end)];
+	if (!rest.some((l) => YAML_ID_ANY.test(l))) rest = rest.filter((l) => !/^hooks:\s*$/.test(l));
+	const text = rest.join("\n");
+	if (!dryRun) await writeText(path, text);
+	return "removed";
+}
+/** 执行一次 wire 落位/移除/预览; dsh/pi 由上层直接短路, 不进这里 */
+async function applyWire(client, path, unwire, dryRun) {
+	if (client === "opencode") return unwire ? removeYamlEntry(path, dryRun) : addYamlEntry(path, dryRun);
+	return unwire ? removeJsonEntry(path, client, dryRun) : addJsonEntry(path, client, dryRun);
+}
+/** 只读探测: 该配置文件是否已含本插件 hook(status 的接线提示用) */
+async function isWired(client, path) {
+	const raw = await readText(path);
+	if (raw === null) return false;
+	if (client === "opencode") return YAML_ID_GUARD.test(raw);
+	try {
+		return jsonContains(JSON.parse(raw), COMMANDS[client]);
+	} catch {
+		return false;
+	}
+}
+//#endregion
 //#region src/cli.ts
 function parseFlags(argv) {
 	const flags = {};
@@ -95,11 +304,18 @@ function parseFlags(argv) {
 		else if (a === "--platform") flags.platform = next();
 		else if (a === "--command") flags.command = next();
 		else if (a === "--locale") flags.locale = next();
+		else if (a === "--client") flags.client = next();
+		else if (a === "--global") flags.global = true;
+		else if (a === "--project") flags.project = true;
+		else if (a === "--unwire") flags.unwire = true;
+		else if (a === "--dry-run") flags.dryRun = true;
+		else if (a === "--yes") flags.yes = true;
 		else if (a.startsWith("--repo=")) flags.repo = a.slice(7);
 		else if (a.startsWith("--lines=")) flags.lines = Number(a.slice(8));
 		else if (a.startsWith("--platform=")) flags.platform = a.slice(11);
 		else if (a.startsWith("--command=")) flags.command = a.slice(10);
 		else if (a.startsWith("--locale=")) flags.locale = a.slice(9);
+		else if (a.startsWith("--client=")) flags.client = a.slice(9);
 	}
 	return flags;
 }
@@ -131,6 +347,8 @@ async function main(argv, opts = {}) {
 		if (cmd === "status") return await status(flags, runner);
 		if (cmd === "audit") return await audit(flags, runner);
 		if (cmd === "check") return await check(flags);
+		if (cmd === "wire") return await wire(flags, runner);
+		if (cmd === "setup") return await setup(flags, runner);
 		const t = makeT(await resolveFrameworkLocale(flags, runner));
 		console.error(`${t("cli.unknownCommand", { cmd: cmd ?? "" })}\n\n${t("usage.text")}`);
 		return 1;
@@ -145,7 +363,8 @@ async function status(flags, runner) {
 		console.error(makeT(resolveLocale(flags.locale))("cli.cannotLocate"));
 		return 1;
 	}
-	const { config, errors, warnings } = await loadConfig(repoRoot);
+	const loaded = await loadConfig(repoRoot);
+	const { config, errors, warnings } = loaded;
 	const enabled = config?.enabled === true;
 	const t = makeT(cliLocale(flags, config?.locale));
 	console.log(t("cli.statusTitle", { repo: repoRoot }));
@@ -173,6 +392,10 @@ async function status(flags, runner) {
 		merge: c.branches.production.mergeBy || "user"
 	}));
 	if (c.branches.archive) console.log(t("cli.statusArchive", { list: c.branches.archive.branches.join(", ") }));
+	if (loaded.usingDefaults) {
+		console.log(t("cli.statusUsingDefaults"));
+		console.log(t("cli.statusMainProtected"));
+	}
 	console.log(t("cli.statusCurrentBranch", { branch: branch ?? t("cli.statusUnknownBranch") }));
 	const r = await runner.run([
 		"for-each-ref",
@@ -190,6 +413,15 @@ async function status(flags, runner) {
 	};
 	console.log(t("cli.statusLocalBranches"));
 	for (const b of localBranches) console.log(`  ${b} → ${classifyBranch(b)}`);
+	const hints = [];
+	for (const spec of WIRE_CLIENTS) {
+		if (spec.client === "dsh" || spec.client === "pi") continue;
+		if (!await isWired(spec.client, join(repoRoot, spec.projectPath))) hints.push(spec.client);
+	}
+	if (hints.length > 0) {
+		console.log(t("cli.statusWireHints"));
+		for (const c of hints) console.log(t("cli.statusWireHint", { client: c }));
+	}
 	return 0;
 }
 async function audit(flags, runner) {
@@ -214,6 +446,147 @@ async function audit(flags, runner) {
 	}
 	return 0;
 }
+/** 交互提问(仅 TTY 可用); 返回小写化、去空格的答案 */
+function askLine(question) {
+	return new Promise((resolve) => {
+		const rl = createInterface({
+			input: process.stdin,
+			output: process.stdout
+		});
+		rl.question(question, (ans) => {
+			rl.close();
+			resolve(ans.trim().toLowerCase());
+		});
+	});
+}
+/** 作用域解析: 显式旗标 > 交互询问(仅 TTY) > 非交互默认 project(安全) */
+async function resolveScope(flags, t) {
+	if (flags.global) return "global";
+	if (flags.project) return "project";
+	if (process.stdin.isTTY) {
+		const ans = await askLine(t("cli.wireScopeAsk"));
+		if (ans === "project" || ans === "p") return "project";
+		if (ans === "global" || ans === "g") return "global";
+		console.log(t("cli.wireScopeInvalid"));
+		return null;
+	}
+	return "project";
+}
+/** wire/setup 共用落位核心: dsh/pi 只打印引导; 其余客户端读取/合并/写入对应配置文件(非破坏性) */
+async function wireCore(client, scope, opts, t) {
+	const spec = WIRE_CLIENTS.find((s) => s.client === client);
+	if (client === "dsh") {
+		console.log(t("cli.wireDshGuide"));
+		return 0;
+	}
+	if (client === "pi") {
+		console.log(t("cli.wirePiGuide"));
+		return 0;
+	}
+	if (spec.experimental) console.log(t("cli.wireExperimental", { client }));
+	const path = scope === "project" ? join(opts.repoRoot, spec.projectPath) : spec.globalPath();
+	console.log(t("cli.wireTarget", {
+		client,
+		path
+	}));
+	if (opts.dryRun) {
+		const res = await applyWire(client, path, !!opts.unwire, true);
+		if (res === "added") console.log(t("cli.wireDryRunAdd", {
+			client,
+			path
+		}));
+		else if (res === "removed") console.log(t("cli.wireDryRunRemove", {
+			client,
+			path
+		}));
+		else console.log(t("cli.wireDryRunNoOp", {
+			client,
+			path
+		}));
+		return 0;
+	}
+	if (!opts.yes) {
+		if (scope === "global" && !process.stdin.isTTY) {
+			console.error(t("cli.wireRefuseGlobal"));
+			return 1;
+		}
+		if (process.stdin.isTTY) {
+			const ans = await askLine(t("cli.wireConfirmWrite", { path }));
+			if (ans !== "y" && ans !== "yes") return 1;
+		}
+	}
+	const res = await applyWire(client, path, !!opts.unwire, false);
+	if (res === "added") console.log(t("cli.wireCreated", {
+		client,
+		path
+	}));
+	else if (res === "exists") console.log(t("cli.wireAlready", {
+		client,
+		path
+	}));
+	else if (res === "removed") console.log(t("cli.wireRemoved", {
+		client,
+		path
+	}));
+	else console.log(t("cli.wireNotWired", {
+		client,
+		path
+	}));
+	return 0;
+}
+/** wire: 单客户端非交互/半交互落位(--client 必填; 作用域默认交互询问) */
+async function wire(flags, runner) {
+	const t = makeT(await resolveFrameworkLocale(flags, runner));
+	const client = (flags.client ?? "").toLowerCase();
+	if (!isWireClient(client)) {
+		console.error(t("cli.wireUnknownClient", { client }));
+		return 1;
+	}
+	const scope = await resolveScope(flags, t);
+	if (!scope) return 1;
+	let repoRoot = null;
+	if (scope === "project") {
+		repoRoot = await resolveRepo(flags, runner);
+		if (!repoRoot) {
+			console.error(t("cli.wireNeedRepo"));
+			return 1;
+		}
+	}
+	return wireCore(client, scope, {
+		unwire: flags.unwire,
+		dryRun: flags.dryRun,
+		yes: flags.yes,
+		repoRoot
+	}, t);
+}
+/** setup: 交互向导(客户端 → 作用域 → 确认), 安装后一步式接线; 非交互终端拒绝并指路 wire */
+async function setup(flags, runner) {
+	const t = makeT(await resolveFrameworkLocale(flags, runner));
+	if (!process.stdin.isTTY) {
+		console.error(t("cli.setupNoTty"));
+		return 1;
+	}
+	console.log(t("cli.setupIntro"));
+	const client = (await askLine(t("cli.setupClientAsk"))).trim().toLowerCase();
+	if (!isWireClient(client)) {
+		console.error(t("cli.setupClientInvalid"));
+		return 1;
+	}
+	const scope = await resolveScope(flags, t);
+	if (!scope) return 1;
+	let repoRoot = null;
+	if (scope === "project") {
+		repoRoot = await resolveRepo(flags, runner);
+		if (!repoRoot) {
+			console.error(t("cli.wireNeedRepo"));
+			return 1;
+		}
+	}
+	return wireCore(client, scope, {
+		yes: flags.yes,
+		repoRoot
+	}, t);
+}
 function readStdin() {
 	return new Promise((resolve) => {
 		let data = "";

package/lib/index.mjs

@@ -1,2 +1,2 @@
-import { a as name, c as createPiExtension, g as registerLocale, i as formatDeny, m as MESSAGE_KEYS, n as apply, o as stateDir, r as evaluateCommand, s as userStateRoot, t as appendAudit } from "./src-BQYC4N6b.mjs";
+import { a as name, c as createPiExtension, g as registerLocale, i as formatDeny, m as MESSAGE_KEYS, n as apply, o as stateDir, r as evaluateCommand, s as userStateRoot, t as appendAudit } from "./src-DPJRoEJq.mjs";
 export { MESSAGE_KEYS, appendAudit, apply, createPiExtension, evaluateCommand, formatDeny, name, registerLocale, stateDir, userStateRoot };