claude-launchpad 0.3.3 → 0.4.0

package/dist/cli.js

@@ -2,7 +2,7 @@
 
 // src/cli.ts
 import { Command as Command5 } from "commander";
-import { join as join10 } from "path";
+import { join as join11 } from "path";
 
 // src/commands/init/index.ts
 import { Command } from "commander";
@@ -440,7 +440,14 @@ function generateSettings(detected) {
     matcher: "Read|Write|Edit",
     hooks: [{
       type: "command",
-      command: `echo "$TOOL_INPUT_FILE_PATH" | grep -qE '\\.(env|env\\..*)$' && ! echo "$TOOL_INPUT_FILE_PATH" | grep -q '.env.example' && echo 'BLOCKED: .env files contain secrets \u2014 use .env.example for documentation' && exit 1; exit 0`
+      command: `echo "$TOOL_INPUT_FILE_PATH" | grep -qE '\\.(env|env\\..*)$' && ! echo "$TOOL_INPUT_FILE_PATH" | grep -q '.env.example' && echo 'BLOCKED: .env files contain secrets' && exit 1; exit 0`
+    }]
+  });
+  preToolUse.push({
+    matcher: "Bash",
+    hooks: [{
+      type: "command",
+      command: `echo "$TOOL_INPUT_COMMAND" | grep -qE 'rm\\s+-rf\\s+/|DROP\\s+TABLE|DROP\\s+DATABASE|push.*--force|push.*-f' && echo 'BLOCKED: Destructive command detected' && exit 1; exit 0`
     }]
   });
   const formatHook = buildFormatHook(detected);
@@ -450,7 +457,19 @@ function generateSettings(detected) {
   const hooks = {};
   if (preToolUse.length > 0) hooks.PreToolUse = preToolUse;
   if (postToolUse.length > 0) hooks.PostToolUse = postToolUse;
-  return Object.keys(hooks).length > 0 ? { hooks } : {};
+  return {
+    $schema: "https://json.schemastore.org/claude-code-settings.json",
+    permissions: {
+      deny: [
+        "Bash(rm -rf /)",
+        "Bash(rm -rf ~)",
+        "Read(.env)",
+        "Read(.env.*)",
+        "Read(secrets/**)"
+      ]
+    },
+    hooks
+  };
 }
 var SAFE_FORMATTERS = {
   TypeScript: { extensions: ["ts", "tsx"], command: "npx prettier --write" },
@@ -649,11 +668,15 @@ async function scaffold(root, options, detected) {
   const tasksMd = generateTasksMd(options);
   const settings = generateSettings(detected);
   const claudeignore = generateClaudeignore(detected);
-  await mkdir(join2(root, ".claude"), { recursive: true });
+  await mkdir(join2(root, ".claude", "rules"), { recursive: true });
   const settingsPath = join2(root, ".claude", "settings.json");
   const mergedSettings = await mergeSettings(settingsPath, settings);
   const claudeignorePath = join2(root, ".claudeignore");
   const hasClaudeignore = await fileExists(claudeignorePath);
+  const claudeGitignorePath = join2(root, ".claude", ".gitignore");
+  const hasClaudeGitignore = await fileExists(claudeGitignorePath);
+  const rulesPath = join2(root, ".claude", "rules", "conventions.md");
+  const hasRules = await fileExists(rulesPath);
   const writes = [
     writeFile(join2(root, "CLAUDE.md"), claudeMd),
     writeFile(join2(root, "TASKS.md"), tasksMd),
@@ -662,18 +685,61 @@ async function scaffold(root, options, detected) {
   if (!hasClaudeignore) {
     writes.push(writeFile(claudeignorePath, claudeignore));
   }
+  if (!hasClaudeGitignore) {
+    writes.push(writeFile(claudeGitignorePath, [
+      "# Local-only Claude Code files (never commit these)",
+      "settings.local.json",
+      "plans/",
+      "memory/",
+      "sessions/",
+      "tmp/",
+      ""
+    ].join("\n")));
+  }
+  if (!hasRules) {
+    const rulesContent = generateStarterRules(detected);
+    writes.push(writeFile(rulesPath, rulesContent));
+  }
   await Promise.all(writes);
   log.success("Generated CLAUDE.md");
   log.success("Generated TASKS.md");
-  log.success("Generated .claude/settings.json (merged with existing)");
-  if (!hasClaudeignore) {
-    log.success("Generated .claudeignore");
-  }
+  log.success("Generated .claude/settings.json (schema, permissions, hooks)");
+  if (!hasClaudeGitignore) log.success("Generated .claude/.gitignore");
+  if (!hasClaudeignore) log.success("Generated .claudeignore");
+  if (!hasRules) log.success("Generated .claude/rules/conventions.md");
   log.blank();
   log.success("Done! Run `claude` to start.");
   log.info("Run `claude-launchpad doctor` to check your config quality.");
   log.blank();
 }
+function generateStarterRules(detected) {
+  const lines = [
+    "# Project Conventions",
+    "",
+    "- Use conventional commits (feat:, fix:, docs:, refactor:, test:, chore:)",
+    "- Keep files under 400 lines, functions under 50 lines",
+    "- Handle errors explicitly - no empty catch blocks",
+    "- Validate input at system boundaries"
+  ];
+  if (detected.language === "TypeScript" || detected.language === "JavaScript") {
+    lines.push("- Use named exports, no default exports except Next.js pages");
+    lines.push("- No `any` types in TypeScript");
+  }
+  if (detected.language === "Python") {
+    lines.push("- Type hints on all function signatures");
+    lines.push("- Async everywhere for I/O operations");
+  }
+  if (detected.language === "Go") {
+    lines.push("- Table-driven tests");
+    lines.push("- Errors are values - handle them, don't ignore them");
+  }
+  if (detected.language === "Rust") {
+    lines.push("- Prefer Result over unwrap/expect in library code");
+    lines.push("- No unsafe blocks without a safety comment");
+  }
+  lines.push("");
+  return lines.join("\n");
+}
 async function mergeSettings(existingPath, generated) {
   try {
     const existing = JSON.parse(await readFile2(existingPath, "utf-8"));
@@ -1573,6 +1639,8 @@ function createDoctorCommand() {
 import { Command as Command3 } from "commander";
 import ora from "ora";
 import chalk2 from "chalk";
+import { mkdir as mkdir4, writeFile as writeFile4 } from "fs/promises";
+import { join as join9 } from "path";
 
 // src/commands/eval/loader.ts
 import { readFile as readFile5, readdir as readdir3, access as access5 } from "fs/promises";
@@ -1747,7 +1815,7 @@ async function runScenario(scenario, options) {
   const sandboxDir = join8(tmpdir(), `claude-eval-${randomUUID()}`);
   try {
     await setupSandbox(sandboxDir, scenario);
-    await runClaudeInSandbox(sandboxDir, scenario.prompt, options.timeout);
+    await runClaudeInSandbox(sandboxDir, scenario.prompt, options.timeout, options.model);
     return await scoreResults(scenario, sandboxDir);
   } finally {
     if (options.debug) {
@@ -1796,7 +1864,7 @@ ${scenario.setup.instructions}
     "eval setup"
   ], { cwd: sandboxDir });
 }
-async function runClaudeInSandbox(cwd, prompt, timeout) {
+async function runClaudeInSandbox(cwd, prompt, timeout, model) {
   try {
     const sdk = await import("@anthropic-ai/claude-agent-sdk");
     const controller = new AbortController();
@@ -1810,7 +1878,8 @@ async function runClaudeInSandbox(cwd, prompt, timeout) {
           permissionMode: "dontAsk",
           settingSources: [],
           maxTurns: 20,
-          abortController: controller
+          abortController: controller,
+          ...model ? { model } : {}
         }
       })) {
       }
@@ -1818,31 +1887,29 @@ async function runClaudeInSandbox(cwd, prompt, timeout) {
       clearTimeout(timeoutId);
     }
   } catch {
-    await runClaudeCli(cwd, prompt, timeout);
+    await runClaudeCli(cwd, prompt, timeout, model);
   }
 }
-async function runClaudeCli(cwd, prompt, timeout) {
+async function runClaudeCli(cwd, prompt, timeout, model) {
   try {
-    await exec(
-      "claude",
-      [
-        "-p",
-        prompt,
-        "--output-format",
-        "text",
-        "--max-turns",
-        "20",
-        "--dangerously-skip-permissions",
-        "--allowedTools",
-        "Bash",
-        "Read",
-        "Write",
-        "Edit",
-        "Glob",
-        "Grep"
-      ],
-      { cwd, timeout, maxBuffer: 10 * 1024 * 1024 }
-    );
+    const args = [
+      "-p",
+      prompt,
+      "--output-format",
+      "text",
+      "--max-turns",
+      "20",
+      "--dangerously-skip-permissions",
+      "--allowedTools",
+      "Bash",
+      "Read",
+      "Write",
+      "Edit",
+      "Glob",
+      "Grep"
+    ];
+    if (model) args.push("--model", model);
+    await exec("claude", args, { cwd, timeout, maxBuffer: 10 * 1024 * 1024 });
   } catch (error) {
     if (error && typeof error === "object" && "stdout" in error) {
       return;
@@ -1951,7 +2018,7 @@ async function listAllFiles(dir) {
 
 // src/commands/eval/index.ts
 function createEvalCommand() {
-  return new Command3("eval").description("Test your Claude Code config against eval scenarios").option("-s, --suite <suite>", "Eval suite to run (e.g., security, conventions, workflow)").option("-p, --path <path>", "Project root path", process.cwd()).option("--scenarios <path>", "Custom scenarios directory").option("--runs <n>", "Runs per scenario (default: 3)", "3").option("--timeout <ms>", "Timeout per run in ms (default: 120000)", "120000").option("--json", "Output as JSON").option("--debug", "Keep sandbox directories for inspection").action(async (opts) => {
+  return new Command3("eval").description("Test your Claude Code config against eval scenarios").option("-s, --suite <suite>", "Eval suite to run (e.g., security, conventions, workflow)").option("-p, --path <path>", "Project root path", process.cwd()).option("--scenarios <path>", "Custom scenarios directory").option("--runs <n>", "Runs per scenario (default: 3)", "3").option("--timeout <ms>", "Timeout per run in ms (default: 120000)", "120000").option("--json", "Output as JSON").option("--debug", "Keep sandbox directories for inspection").option("--model <model>", "Model to use for eval (e.g., sonnet, haiku, opus)").action(async (opts) => {
     printBanner();
     const claudeAvailable = await checkClaudeCli();
     if (!claudeAvailable) {
@@ -1972,6 +2039,9 @@ function createEvalCommand() {
       return;
     }
     log.success(`Loaded ${scenarios.length} scenario(s)`);
+    if (opts.model) {
+      log.info(`Model: ${opts.model}`);
+    }
     log.blank();
     const runs = parseInt(opts.runs, 10);
     const timeout = parseInt(opts.timeout, 10);
@@ -1984,7 +2054,7 @@ function createEvalCommand() {
       try {
         const result = await runScenarioWithRetries(
           { ...scenario, runs },
-          { projectRoot: opts.path, timeout, debug: opts.debug }
+          { projectRoot: opts.path, timeout, debug: opts.debug, model: opts.model }
         );
         results.push(result);
         if (result.passed) {
@@ -2019,6 +2089,7 @@ function createEvalCommand() {
       return;
     }
     renderEvalReport(results);
+    await saveEvalReport(results, opts.path, opts.suite, opts.model);
   });
 }
 function renderEvalReport(results) {
@@ -2029,7 +2100,7 @@ function renderEvalReport(results) {
     console.log(`  ${icon} ${chalk2.bold(result.scenario)}  ${score}  ${status}`);
     const failedChecks = result.checks.filter((c) => !c.passed);
     for (const check of failedChecks) {
-      console.log(`    ${chalk2.dim("\u2500")} ${chalk2.dim(check.label)}`);
+      console.log(`    ${chalk2.red("\u2717")} ${chalk2.dim(check.label)}`);
     }
   }
   log.blank();
@@ -2046,6 +2117,56 @@ function renderEvalReport(results) {
     log.warn(`${passed} passed, ${failed} failed out of ${results.length} scenario(s).`);
   }
 }
+async function saveEvalReport(results, projectRoot, suite, model) {
+  const totalScore = results.reduce((s, r) => s + r.score, 0);
+  const totalMax = results.reduce((s, r) => s + r.maxScore, 0);
+  const pct = totalMax > 0 ? Math.round(totalScore / totalMax * 100) : 0;
+  const passed = results.filter((r) => r.passed).length;
+  const failed = results.length - passed;
+  const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
+  const lines = [
+    `# Eval Report \u2014 ${timestamp}`,
+    "",
+    `**Score: ${pct}%** (${passed} passed, ${failed} failed out of ${results.length} scenarios)`,
+    "",
+    `- Suite: ${suite ?? "all"}`,
+    `- Model: ${model ?? "default"}`,
+    `- Date: ${(/* @__PURE__ */ new Date()).toISOString().split("T")[0]}`,
+    "",
+    "## Results",
+    ""
+  ];
+  for (const result of results) {
+    const status = result.passed ? "PASS" : "FAIL";
+    lines.push(`### ${result.scenario} \u2014 ${result.score}/${result.maxScore} ${status}`);
+    const failedChecks = result.checks.filter((c) => !c.passed);
+    const passedChecks = result.checks.filter((c) => c.passed);
+    for (const check of passedChecks) {
+      lines.push(`- PASSED: ${check.label} (${check.points} pts)`);
+    }
+    for (const check of failedChecks) {
+      lines.push(`- FAILED: ${check.label} (${check.points} pts)`);
+    }
+    lines.push("");
+  }
+  if (failed > 0) {
+    lines.push("## Recommendations");
+    lines.push("");
+    for (const result of results.filter((r) => !r.passed)) {
+      lines.push(`### Fix: ${result.scenario}`);
+      const failedChecks = result.checks.filter((c) => !c.passed);
+      for (const check of failedChecks) {
+        lines.push(`- ${check.label} \u2014 update CLAUDE.md instructions or add hooks to enforce this behavior`);
+      }
+      lines.push("");
+    }
+  }
+  const evalDir = join9(projectRoot, ".claude", "eval");
+  await mkdir4(evalDir, { recursive: true });
+  const filename = `eval-${suite ?? "all"}-${timestamp}.md`;
+  await writeFile4(join9(evalDir, filename), lines.join("\n"));
+  log.success(`Report saved to .claude/eval/${filename}`);
+}
 async function checkClaudeCli() {
   const { execFile: execFile3 } = await import("child_process");
   const { promisify: promisify3 } = await import("util");
@@ -2063,7 +2184,7 @@ import { Command as Command4 } from "commander";
 import { spawn, execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
 import { access as access6 } from "fs/promises";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 var execAsync = promisify2(execFile2);
 var ENHANCE_PROMPT = `Read CLAUDE.md and the project's codebase, then update CLAUDE.md to fill in missing or incomplete sections.
 
@@ -2096,7 +2217,7 @@ function createEnhanceCommand() {
   return new Command4("enhance").description("Use Claude to analyze your codebase and complete CLAUDE.md").option("-p, --path <path>", "Project root path", process.cwd()).action(async (opts) => {
     printBanner();
     const root = opts.path;
-    const claudeMdPath = join9(root, "CLAUDE.md");
+    const claudeMdPath = join10(root, "CLAUDE.md");
     try {
       await access6(claudeMdPath);
     } catch {
@@ -2125,8 +2246,8 @@ function createEnhanceCommand() {
 }
 
 // src/cli.ts
-var program = new Command5().name("claude-launchpad").description("CLI toolkit that makes Claude Code setups measurably good").version("0.3.3", "-v, --version").action(async () => {
-  const hasConfig = await fileExists(join10(process.cwd(), "CLAUDE.md")) || await fileExists(join10(process.cwd(), ".claude", "settings.json"));
+var program = new Command5().name("claude-launchpad").description("CLI toolkit that makes Claude Code setups measurably good").version("0.4.0", "-v, --version").action(async () => {
+  const hasConfig = await fileExists(join11(process.cwd(), "CLAUDE.md")) || await fileExists(join11(process.cwd(), ".claude", "settings.json"));
   if (hasConfig) {
     await program.commands.find((c) => c.name() === "doctor")?.parseAsync([], { from: "user" });
   } else {