ccgx-workflow 1.0.0

package/templates/scripts/repatch-gemini-plugin.mjs

@@ -0,0 +1,194 @@
+#!/usr/bin/env node
+/**
+ * repatch-gemini-plugin.mjs — Idempotent Windows-spawn patch for
+ * gemini@google-gemini plugin (v1.0.1+). Adds `windowsHide: true` (and
+ * `shell: process.platform === "win32"` where needed) to all 8 known
+ * spawn points so plugin operations don't flash console windows on
+ * Windows. Safe to run repeatedly.
+ *
+ * Reference: <ccg-workflow>/.ccg-migration/PLUGIN-PATCHES.md
+ *
+ * Usage:
+ *   node ~/.claude/.ccg/scripts/repatch-gemini-plugin.mjs
+ *   node /path/to/repatch-gemini-plugin.mjs   # standalone
+ *
+ * Re-run after every `claude plugin update gemini@google-gemini`.
+ *
+ * Patches use regex (not string includes) so they tolerate CRLF/LF line
+ * endings and minor whitespace variations between plugin versions.
+ */
+
+import { readdirSync, readFileSync, writeFileSync, existsSync, statSync } from "node:fs";
+import { homedir, platform } from "node:os";
+import { join } from "node:path";
+
+const PLUGIN_BASE = join(
+  homedir(),
+  ".claude",
+  "plugins",
+  "cache",
+  "google-gemini",
+  "gemini",
+);
+
+function findPluginVersion() {
+  if (!existsSync(PLUGIN_BASE)) {
+    throw new Error(
+      `gemini plugin not found at ${PLUGIN_BASE}. Install via: claude plugin install gemini@google-gemini`,
+    );
+  }
+  const versions = readdirSync(PLUGIN_BASE).filter((d) => {
+    try {
+      return statSync(join(PLUGIN_BASE, d)).isDirectory();
+    } catch {
+      return false;
+    }
+  });
+  if (versions.length === 0) {
+    throw new Error(`No gemini plugin version found under ${PLUGIN_BASE}`);
+  }
+  versions.sort();
+  return versions[versions.length - 1];
+}
+
+const VERSION = findPluginVersion();
+const SCRIPTS = join(PLUGIN_BASE, VERSION, "scripts");
+
+console.log(`Patching gemini plugin ${VERSION} at:\n  ${SCRIPTS}\n`);
+
+/**
+ * Each patch defines:
+ *   id          — patch ID for reporting
+ *   file        — relative to scripts/
+ *   description — human-readable
+ *   guard       — regex; if matches → already patched (skip)
+ *   match       — regex; locates spawn call options block
+ *   replace     — replacer function/string for String.replace
+ *
+ * Regex patterns are CRLF/LF-tolerant via `\r?\n` and `[ \t]+`.
+ */
+const PATCHES = [
+  {
+    id: "P-1",
+    file: "gemini-companion.mjs",
+    description: "spawnBackgroundWorker (Node task-worker)",
+    guard: /spawn\("node"[\s\S]{0,300}windowsHide:\s*true/,
+    match: /(spawn\("node",\s*\[scriptPath,\s*"task-worker",\s*jobId\],\s*\{[\s\S]*?detached:\s*true,)/,
+    replace: '$1\n    windowsHide: true,',
+  },
+  {
+    id: "P-2a",
+    file: "acp-broker.mjs",
+    description: "spawnAcpProcess (gemini --acp CLI)",
+    guard: /spawn\("gemini",\s*\["--acp"\][\s\S]{0,400}windowsHide:\s*true/,
+    match: /(spawn\("gemini",\s*\["--acp"\],\s*\{[\s\S]*?env:\s*process\.env)(\r?\n\s*\}\);)/,
+    replace: '$1,\n    shell: process.platform === "win32",\n    windowsHide: true$2',
+  },
+  {
+    id: "P-2b",
+    file: "lib/acp-client.mjs",
+    description: "ACPClient.spawn (gemini --acp CLI)",
+    guard: /this\.proc\s*=\s*spawn\("gemini"[\s\S]{0,400}windowsHide:\s*true/,
+    match: /(this\.proc\s*=\s*spawn\("gemini",\s*\["--acp"\],\s*\{[\s\S]*?stdio:\s*\["pipe",\s*"pipe",\s*"pipe"\])(\r?\n\s*\}\);)/,
+    replace: '$1,\n      shell: process.platform === "win32",\n      windowsHide: true$2',
+  },
+  {
+    id: "P-4",
+    file: "lib/broker-lifecycle.mjs",
+    description: "broker daemon spawn (node serve)",
+    guard: /spawn\("node",\s*\[\s*BROKER_SCRIPT[\s\S]{0,500}windowsHide:\s*true/,
+    match: /(spawn\("node",\s*\[\s*BROKER_SCRIPT[\s\S]*?detached:\s*true,)/,
+    replace: '$1\n    windowsHide: true,',
+  },
+  {
+    id: "P-5",
+    file: "lib/process.mjs",
+    description: "runCommand spawnSync (general helper)",
+    guard: /spawnSync\(command,\s*args,\s*\{[\s\S]*?windowsHide:\s*true/,
+    match: /(spawnSync\(command,\s*args,\s*\{[\s\S]*?stdio:\s*\["pipe",\s*"pipe",\s*"pipe"\])(\r?\n\s*\}\);)/,
+    replace: '$1,\n      windowsHide: true$2',
+  },
+  {
+    id: "P-6",
+    file: "lib/process.mjs",
+    description: "taskkill spawnSync (terminate tree)",
+    guard: /spawnSync\("taskkill"[\s\S]*?windowsHide:\s*true/,
+    match: /(spawnSync\("taskkill",\s*\["\/pid",\s*String\(pid\),\s*"\/T",\s*"\/F"\],\s*\{\s*stdio:\s*"ignore")(\s*\})/,
+    replace: '$1, windowsHide: true$2',
+  },
+  {
+    id: "P-7",
+    file: "lib/process.mjs",
+    description: "spawnDetached helper",
+    guard: /nodeSpawn\(command,\s*args[\s\S]*?windowsHide:\s*true/,
+    match: /(nodeSpawn\(command,\s*args,\s*\{[\s\S]*?detached:\s*true,)/,
+    replace: '$1\n    windowsHide: true,',
+  },
+  {
+    id: "P-8",
+    file: "lib/process.mjs",
+    description: "binaryAvailable (where/which)",
+    guard: /spawnSync\(command,\s*\[name\][\s\S]*?windowsHide:\s*true/,
+    match: /(spawnSync\(command,\s*\[name\],\s*\{\s*encoding:\s*"utf8",\s*stdio:\s*"pipe")(\s*\})/,
+    replace: '$1, windowsHide: true$2',
+  },
+];
+
+let applied = 0;
+let alreadyPatched = 0;
+let notMatched = 0;
+const seenFiles = new Map(); // file -> latest content (so multiple patches per file accumulate)
+
+for (const patch of PATCHES) {
+  const path = join(SCRIPTS, patch.file);
+  if (!existsSync(path)) {
+    console.log(`  [SKIP] ${patch.id} ${patch.description}: ${patch.file} not found`);
+    continue;
+  }
+
+  const content = seenFiles.get(path) ?? readFileSync(path, "utf8");
+
+  if (patch.guard.test(content)) {
+    console.log(`  [OK]    ${patch.id} ${patch.description} (already patched)`);
+    alreadyPatched++;
+    continue;
+  }
+
+  if (!patch.match.test(content)) {
+    console.log(`  [MISS]  ${patch.id} ${patch.description}: regex did not match (plugin version mismatch?)`);
+    notMatched++;
+    continue;
+  }
+
+  const next = content.replace(patch.match, patch.replace);
+  if (next === content) {
+    console.log(`  [MISS]  ${patch.id} ${patch.description}: replace produced no change`);
+    notMatched++;
+    continue;
+  }
+
+  seenFiles.set(path, next);
+  console.log(`  [APPLY] ${patch.id} ${patch.description}`);
+  applied++;
+}
+
+// Flush all modified files at once (avoids partial writes on multi-patch files like process.mjs)
+for (const [path, content] of seenFiles) {
+  writeFileSync(path, content, "utf8");
+}
+
+console.log(`\nSummary: ${applied} applied, ${alreadyPatched} already-patched, ${notMatched} unmatched`);
+
+if (platform() === "win32" && applied > 0) {
+  console.log("\nIMPORTANT — restart broker daemon for new patches to take effect:");
+  console.log("  Option A: claude plugin disable gemini@google-gemini && claude plugin enable gemini@google-gemini");
+  console.log("  Option B (PowerShell): Get-CimInstance Win32_Process -Filter \"Name='node.exe'\" |");
+  console.log("           Where-Object { $_.CommandLine -match 'acp-broker|broker-lifecycle' } |");
+  console.log("           ForEach-Object { Stop-Process -Id $_.ProcessId -Force }");
+}
+
+if (notMatched > 0) {
+  console.log("\nWARNING — some patches did not match. Plugin version may have changed.");
+  console.log("Inspect spawn points manually and update PLUGIN-PATCHES.md.");
+  process.exit(1);
+}

package/templates/skills/SKILL.md

@@ -0,0 +1,92 @@
+---
+name: ccg-skills
+description: CCG Skills - Quality gates, documentation generator, and multi-agent orchestration. Auto-installed by CCG workflow system.
+license: MIT
+user-invocable: false
+disable-model-invocation: false
+---
+
+# CCG Skills
+
+## Directory Structure
+
+```
+skills/
+├── tools/            # Quality gate tools
+│   ├── verify-security/   # Security vulnerability scanning
+│   ├── verify-quality/    # Code quality checking
+│   ├── verify-change/     # Change analysis & doc sync
+│   ├── verify-module/     # Module completeness validation
+│   ├── gen-docs/          # README.md & DESIGN.md generator
+│   └── lib/               # Shared utilities
+├── orchestration/    # Multi-agent coordination
+│   └── multi-agent/       # Ant colony-inspired coordination
+├── run_skill.js      # Unified skill runner
+└── SKILL.md          # This file
+```
+
+## Quick Navigation
+
+| Category | Description | Entry |
+|----------|-------------|-------|
+| **Quality Gates** | Module completeness, security, quality, change validation | [Quality Gates](#quality-gates) |
+| **Multi-Agent** | Multi-agent coordination and task decomposition | [Multi-Agent](#multi-agent-orchestration) |
+
+---
+
+## Quality Gates
+
+**Mandatory quality checkpoints to ensure deliverable standards.**
+
+| Skill | Trigger | Description |
+|-------|---------|-------------|
+| `/verify-module` | New module completed | Module structure & documentation completeness |
+| `/verify-security` | New module / security changes / refactoring | Security vulnerability scanning |
+| `/verify-change` | Design-level changes / refactoring | Document sync & change impact analysis |
+| `/verify-quality` | Complex modules / refactoring | Code quality metrics checking |
+| `/gen-docs` | New module created | README.md & DESIGN.md skeleton generator |
+
+### Auto-trigger Rules
+
+```
+New module:     /gen-docs → develop → /verify-module → /verify-security
+Code changes:   develop → /verify-change → /verify-quality
+Security tasks: execute → /verify-security
+Refactoring:    refactor → /verify-change → /verify-quality → /verify-security
+```
+
+### Running Skills
+
+```bash
+# Unified runner
+node ~/.claude/skills/ccg/run_skill.js <skill-name> [args...]
+
+# Examples
+node ~/.claude/skills/ccg/run_skill.js verify-security ./src
+node ~/.claude/skills/ccg/run_skill.js verify-quality ./src -v
+node ~/.claude/skills/ccg/run_skill.js verify-change --mode staged
+node ~/.claude/skills/ccg/run_skill.js verify-module ./my-module
+node ~/.claude/skills/ccg/run_skill.js gen-docs ./new-module --force
+```
+
+---
+
+## Multi-Agent Orchestration
+
+| Skill | Trigger | Description |
+|-------|---------|-------------|
+| `multi-agent` | TeamCreate, parallel tasks, multi-agent | Ant colony-inspired multi-agent coordination |
+
+Provides:
+- Agent role system (Lead/Scout/Worker/Soldier/Drone)
+- Pheromone-based indirect communication
+- File ownership locking & conflict avoidance
+- Adaptive concurrency control
+- TeamCreate vs single-agent decision tree
+
+---
+
+## Installed by CCG
+
+These skills are automatically installed during `npx ccg-workflow` initialization.
+To update: run `npx ccg-workflow update` or `npx ccg-workflow` again.

package/templates/skills/domains/ai/SKILL.md

@@ -0,0 +1,35 @@
+---
+name: ai
+description: AI/LLM 能力索引（Agent 开发、LLM 安全、RAG、Prompt 工程）。
+license: MIT
+user-invocable: false
+disable-model-invocation: false
+context: fork
+---
+
+# 丹鼎秘典 · AI/LLM 能力中枢
+
+## 能力矩阵
+
+| Skill | 定位 | 核心能力 |
+|-------|------|----------|
+| [agent-dev](agent-dev.md) | Agent 开发 | 多 Agent 编排、工具调用、RAG |
+| [llm-security](llm-security.md) | LLM 安全 | Prompt 注入、越狱防护、输出安全 |
+| [rag-system](rag-system.md) | RAG 系统 | 向量数据库、检索策略、重排算法 |
+| [prompt-and-eval](prompt-and-eval.md) | Prompt 工程与模型评估 | Few-shot、CoT、ReAct、RAGAS、LLM-as-Judge |
+
+## AI 工程原则
+
+```yaml
+设计原则:
+  - 人机协作，AI 增强而非替代
+  - 可解释性优先
+  - 安全边界明确
+  - 渐进式自主
+
+开发原则:
+  - Prompt 即代码，需版本控制
+  - 输入输出都需验证
+  - 成本与效果平衡
+  - 持续评估与迭代
+```

package/templates/skills/domains/ai/agent-dev.md

@@ -0,0 +1,242 @@
+---
+name: agent-dev
+description: AI Agent 开发。多 Agent 编排、工具调用、RAG 系统、Prompt 工程。当用户提到 Agent、RAG、Prompt、LangChain、向量数据库时使用。
+---
+
+# 🔮 丹鼎秘典 · AI Agent 开发
+
+
+## Agent 架构
+
+```
+┌─────────────────────────────────────────────────────────────┐
+│                      Agent 系统                              │
+├─────────────────────────────────────────────────────────────┤
+│  用户输入 → 意图理解 → 规划 → 执行 → 反思 → 输出            │
+│              │          │      │      │                      │
+│           Prompt     Planner  Tools  Memory                  │
+└─────────────────────────────────────────────────────────────┘
+```
+
+## 核心组件
+
+### 1. Prompt 工程
+
+```yaml
+结构化 Prompt:
+  - System: 角色定义、能力边界、行为规范
+  - Context: 背景信息、相关知识
+  - Task: 具体任务、输出格式
+  - Examples: Few-shot 示例
+
+技巧:
+  - 明确角色和边界
+  - 分步骤引导思考
+  - 提供输出格式示例
+  - 设置安全护栏
+```
+
+### 2. 工具调用
+
+```python
+# 工具定义
+tools = [
+    {
+        "name": "search",
+        "description": "搜索知识库",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "query": {"type": "string", "description": "搜索关键词"}
+            },
+            "required": ["query"]
+        }
+    }
+]
+
+# 工具执行
+def execute_tool(name: str, args: dict) -> str:
+    if name == "search":
+        return search_knowledge_base(args["query"])
+    raise ValueError(f"Unknown tool: {name}")
+```
+
+### 3. 记忆系统
+
+```yaml
+短期记忆:
+  - 对话历史
+  - 当前任务上下文
+  - 工具调用结果
+
+长期记忆:
+  - 向量数据库存储
+  - 用户偏好
+  - 历史交互摘要
+
+记忆管理:
+  - 滑动窗口
+  - 摘要压缩
+  - 重要性排序
+```
+
+## RAG 系统
+
+### 架构
+
+```
+文档 → 分块 → 嵌入 → 向量库
+                        ↓
+查询 → 嵌入 → 检索 → 重排序 → 生成
+```
+
+### 实现
+
+```python
+from langchain.text_splitter import RecursiveCharacterTextSplitter
+from langchain.embeddings import OpenAIEmbeddings
+from langchain.vectorstores import Chroma
+
+# 文档处理
+splitter = RecursiveCharacterTextSplitter(
+    chunk_size=1000,
+    chunk_overlap=200,
+    separators=["\n\n", "\n", "。", "，", " "]
+)
+chunks = splitter.split_documents(documents)
+
+# 向量存储
+embeddings = OpenAIEmbeddings()
+vectorstore = Chroma.from_documents(chunks, embeddings)
+
+# 检索
+retriever = vectorstore.as_retriever(
+    search_type="mmr",  # 最大边际相关性
+    search_kwargs={"k": 5, "fetch_k": 20}
+)
+```
+
+### 优化策略
+
+```yaml
+分块策略:
+  - 语义分块 vs 固定长度
+  - 重叠避免信息丢失
+  - 保留元数据
+
+检索优化:
+  - 混合检索 (关键词 + 向量)
+  - 重排序 (Reranker)
+  - 查询扩展
+
+生成优化:
+  - 引用来源
+  - 置信度评估
+  - 幻觉检测
+```
+
+## 多 Agent 编排
+
+### 模式
+
+```yaml
+顺序执行:
+  Agent A → Agent B → Agent C
+
+并行执行:
+  Agent A ─┬─→ Agent B ─┬─→ 汇总
+           └─→ Agent C ─┘
+
+层级结构:
+  Orchestrator
+      ├── Planner Agent
+      ├── Executor Agent
+      └── Reviewer Agent
+
+对话式:
+  Agent A ←→ Agent B (多轮交互)
+```
+
+### 实现示例
+
+```python
+class Orchestrator:
+    def __init__(self):
+        self.planner = PlannerAgent()
+        self.executor = ExecutorAgent()
+        self.reviewer = ReviewerAgent()
+
+    async def run(self, task: str) -> str:
+        # 规划
+        plan = await self.planner.plan(task)
+
+        # 执行
+        results = []
+        for step in plan.steps:
+            result = await self.executor.execute(step)
+            results.append(result)
+
+        # 审查
+        final = await self.reviewer.review(task, results)
+        return final
+```
+
+## 评估与监控
+
+```yaml
+评估维度:
+  - 准确性: 答案正确率
+  - 相关性: 检索质量
+  - 完整性: 信息覆盖
+  - 一致性: 多次回答稳定性
+
+监控指标:
+  - 延迟 (P50/P95/P99)
+  - Token 消耗
+  - 工具调用成功率
+  - 用户满意度
+```
+
+## 框架选择
+
+```yaml
+LangChain:
+  - 优点: 生态丰富，组件多
+  - 缺点: 抽象层多，调试难
+  - 适合: 快速原型
+
+LlamaIndex:
+  - 优点: RAG 专精
+  - 缺点: Agent 能力弱
+  - 适合: 知识库应用
+
+原生实现:
+  - 优点: 完全可控
+  - 缺点: 开发成本高
+  - 适合: 生产系统
+```
+
+## 最佳实践
+
+```yaml
+开发:
+  - Prompt 版本控制
+  - 单元测试覆盖
+  - 成本预算控制
+  - 降级策略
+
+部署:
+  - 流式输出
+  - 超时处理
+  - 重试机制
+  - 缓存策略
+
+安全:
+  - 输入验证
+  - 输出过滤
+  - 权限控制
+  - 审计日志
+```
+
+---
+