claude-nb 0.4.0 → 0.5.43

package/bin/board

@@ -14,7 +14,7 @@ CLAUDES_HOME = Path(__file__).resolve().parent.parent
 sys.path.insert(0, str(CLAUDES_HOME))
 
 from lib.board_db import BoardDB
-from lib.common import ClaudesEnv, parse_flags
+from lib.common import ClaudesEnv, parse_flags, validate_identity
 
 # ---------------------------------------------------------------------------
 # Command registry
@@ -33,14 +33,15 @@ class Command:
     needs_identity: bool = True
     takes_rest: bool = True
     aliases: list[str] = field(default_factory=list)
+    hidden: bool = False
 
 
 COMMANDS: list[Command] = [
     # ── messaging ──
-    Command("send", "lib.board_msg", "cmd_send", "send a message", "send <to> <msg> [--attach <f>]"),
-    Command("status", "lib.board_msg", "cmd_status", "update your current task", "status <description>"),
-    Command("inbox", "lib.board_msg", "cmd_inbox", "check unread messages", "inbox", takes_rest=False),
-    Command("ack", "lib.board_msg", "cmd_ack", "clear inbox", "ack", takes_rest=False),
+    Command("send", "lib.board_msg", "cmd_send", "send a message", "send <to> <msg> [--attach <f>]", hidden=True),
+    Command("status", "lib.board_msg", "cmd_status", "update your current task", "status <description>", hidden=True),
+    Command("inbox", "lib.board_msg", "cmd_inbox", "check unread messages", "inbox", takes_rest=False, hidden=True),
+    Command("ack", "lib.board_msg", "cmd_ack", "clear inbox", "ack", takes_rest=False, hidden=True),
     Command("log", "lib.board_msg", "cmd_log", "message history", "log [n] [--mine]"),
     # ── views ──
     Command("view", "lib.board_view", "cmd_view", "session dashboard", "view", takes_rest=False),
@@ -72,6 +73,7 @@ COMMANDS: list[Command] = [
         "pre-build",
         needs_identity=False,
         takes_rest=False,
+        hidden=True,
     ),
     Command(
         "dirty",
@@ -81,12 +83,37 @@ COMMANDS: list[Command] = [
         "dirty",
         needs_identity=False,
         takes_rest=False,
+        hidden=True,
     ),
     Command(
-        "files", "lib.board_view", "cmd_files", "list shared files", "files", needs_identity=False, takes_rest=False
+        "files",
+        "lib.board_view",
+        "cmd_files",
+        "list shared files",
+        "files",
+        needs_identity=False,
+        takes_rest=False,
+        hidden=True,
+    ),
+    Command(
+        "get",
+        "lib.board_view",
+        "cmd_get",
+        "view shared file content",
+        "get <hash|name>",
+        needs_identity=False,
+        hidden=True,
+    ),
+    Command(
+        "roster",
+        "lib.board_view",
+        "cmd_roster",
+        "team roster",
+        "roster",
+        needs_identity=False,
+        takes_rest=False,
+        hidden=True,
     ),
-    Command("get", "lib.board_view", "cmd_get", "view shared file content", "get <hash|name>", needs_identity=False),
-    Command("roster", "lib.board_view", "cmd_roster", "team roster", "roster", needs_identity=False, takes_rest=False),
     Command(
         "history",
         "lib.board_view",
@@ -94,6 +121,7 @@ COMMANDS: list[Command] = [
         "session message history",
         "history <session> [limit]",
         needs_identity=False,
+        hidden=True,
     ),
     Command(
         "freshness",
@@ -103,6 +131,7 @@ COMMANDS: list[Command] = [
         "freshness",
         needs_identity=False,
         takes_rest=False,
+        hidden=True,
     ),
     Command(
         "relations",
@@ -112,11 +141,20 @@ COMMANDS: list[Command] = [
         "relations",
         needs_identity=False,
         takes_rest=False,
+        hidden=True,
     ),
     # ── BBS ──
-    Command("post", "lib.board_bbs", "cmd_post", "BBS: create new thread", "post <标题> <内容>"),
-    Command("reply", "lib.board_bbs", "cmd_reply", "BBS: reply to thread", "reply <帖子ID> <内容>"),
-    Command("thread", "lib.board_bbs", "cmd_thread", "BBS: view thread", "thread <帖子ID>", needs_identity=False),
+    Command("post", "lib.board_bbs", "cmd_post", "BBS: create new thread", "post <标题> <内容>", hidden=True),
+    Command("reply", "lib.board_bbs", "cmd_reply", "BBS: reply to thread", "reply <帖子ID> <内容>", hidden=True),
+    Command(
+        "thread",
+        "lib.board_bbs",
+        "cmd_thread",
+        "BBS: view thread",
+        "thread <帖子ID>",
+        needs_identity=False,
+        hidden=True,
+    ),
     Command(
         "threads",
         "lib.board_bbs",
@@ -125,19 +163,41 @@ COMMANDS: list[Command] = [
         "threads",
         needs_identity=False,
         takes_rest=False,
+        hidden=True,
     ),
     # ── bug ──
-    Command("bug", "lib.board_bug", "cmd_bug", "bug tracker", "bug {report|assign|fix|list|overdue}"),
+    Command("bug", "lib.board_bug", "cmd_bug", "bug tracker", "bug {report|assign|fix|list|overdue}", hidden=True),
     # ── task ──
-    Command("task", "lib.board_task", "cmd_task", "task queue management", "task {add|done|list|next}"),
+    Command("task", "lib.board_task", "cmd_task", "task queue management", "task {add|done|list|next}", hidden=True),
+    # ── ownership ──
+    Command("own", "lib.board_own", "cmd_own", "ownership registry", "own {claim|list|disown|map}"),
+    Command("scan", "lib.board_own", "cmd_scan", "scan issues/CI for owners", "scan"),
+    # ── heartbeat ──
+    Command(
+        "pulse", "lib.board_pulse", "cmd_pulse", "heartbeat + unread count", "pulse", takes_rest=False, hidden=True
+    ),
     # ── voting ──
-    Command("propose", "lib.board_vote", "cmd_propose", "create a proposal", "propose <内容> [--type S]"),
-    Command("vote", "lib.board_vote", "cmd_vote", "vote on a proposal", "vote <N> <SUPPORT|OBJECT> <reason>"),
-    Command("tally", "lib.board_vote", "cmd_tally", "recount votes", "tally <N>", needs_identity=False),
+    Command("propose", "lib.board_vote", "cmd_propose", "create a proposal", "propose <内容> [--type S]", hidden=True),
+    Command(
+        "vote", "lib.board_vote", "cmd_vote", "vote on a proposal", "vote <N> <SUPPORT|OBJECT> <reason>", hidden=True
+    ),
+    Command("tally", "lib.board_vote", "cmd_tally", "recount votes", "tally <N>", needs_identity=False, hidden=True),
     # ── mailbox (encrypted) ──
-    Command("keygen", "lib.board_mailbox", "cmd_keygen", "generate encryption keypair", "keygen", takes_rest=False),
-    Command("seal", "lib.board_mailbox", "cmd_seal", "send encrypted message", "seal <recipient> <message>"),
-    Command("unseal", "lib.board_mailbox", "cmd_unseal", "read encrypted inbox", "unseal", takes_rest=False),
+    Command(
+        "keygen",
+        "lib.board_mailbox",
+        "cmd_keygen",
+        "generate encryption keypair",
+        "keygen",
+        takes_rest=False,
+        hidden=True,
+    ),
+    Command(
+        "seal", "lib.board_mailbox", "cmd_seal", "send encrypted message", "seal <recipient> <message>", hidden=True
+    ),
+    Command(
+        "unseal", "lib.board_mailbox", "cmd_unseal", "read encrypted inbox", "unseal", takes_rest=False, hidden=True
+    ),
     Command(
         "mailbox-log",
         "lib.board_mailbox",
@@ -145,9 +205,22 @@ COMMANDS: list[Command] = [
         "encrypted message history",
         "mailbox-log",
         takes_rest=False,
+        hidden=True,
     ),
+    Command(
+        "keygen-all",
+        "lib.board_mailbox",
+        "cmd_keygen_all",
+        "generate keys for all sessions",
+        "keygen-all",
+        needs_identity=False,
+        takes_rest=False,
+        hidden=True,
+    ),
+    # ── daily report ──
+    Command("daily", "lib.board_daily", "cmd_daily", "generate daily report", "daily [补充说明]"),
     # ── admin ──
-    Command("kudos", "lib.board_admin", "cmd_kudos", "give public recognition", "kudos <target> <reason>"),
+    Command("kudos", "lib.board_admin", "cmd_kudos", "give public recognition", "kudos <target> <reason>", hidden=True),
     Command(
         "kudos-list",
         "lib.board_admin",
@@ -157,12 +230,13 @@ COMMANDS: list[Command] = [
         needs_identity=False,
         takes_rest=False,
         aliases=["kudos-board"],
+        hidden=True,
     ),
-    Command("suspend", "lib.board_admin", "cmd_suspend", "suspend a session", "suspend <session>"),
-    Command("resume", "lib.board_admin", "cmd_resume", "resume a session", "resume <session>"),
+    Command("suspend", "lib.board_admin", "cmd_suspend", "suspend a session", "suspend <session>", hidden=True),
+    Command("resume", "lib.board_admin", "cmd_resume", "resume a session", "resume <session>", hidden=True),
     # ── git lock ──
-    Command("git-lock", "lib.board_lock", "cmd_git_lock", "acquire git index lock", "git-lock [reason]"),
-    Command("git-unlock", "lib.board_lock", "cmd_git_unlock", "release git index lock", "git-unlock"),
+    Command("git-lock", "lib.board_lock", "cmd_git_lock", "acquire git index lock", "git-lock [reason]", hidden=True),
+    Command("git-unlock", "lib.board_lock", "cmd_git_unlock", "release git index lock", "git-unlock", hidden=True),
     Command(
         "git-lock-status",
         "lib.board_lock",
@@ -171,6 +245,7 @@ COMMANDS: list[Command] = [
         "git-lock-status",
         needs_identity=False,
         takes_rest=False,
+        hidden=True,
     ),
     # ── tui ──
     Command(
@@ -182,6 +257,16 @@ COMMANDS: list[Command] = [
         needs_identity=False,
         takes_rest=False,
     ),
+    # ── mail ──
+    Command("mail", "lib.board_mail", "cmd_mail", "persistent mail with CC/threading", "mail {send|list|read|reply}"),
+    # ── pending actions ──
+    Command(
+        "pending",
+        "lib.board_pending",
+        "cmd_pending",
+        "pending actions queue",
+        "pending {add|list|verify|retry|resolve}",
+    ),
     # ── maintenance ──
     Command(
         "prune",
@@ -190,6 +275,7 @@ COMMANDS: list[Command] = [
         "prune old messages",
         "prune [--before DAYS] [--dry-run]",
         needs_identity=False,
+        hidden=True,
     ),
     Command(
         "backup",
@@ -198,6 +284,7 @@ COMMANDS: list[Command] = [
         "backup database",
         "backup [--output <path>]",
         needs_identity=False,
+        hidden=True,
     ),
     Command(
         "restore",
@@ -206,6 +293,7 @@ COMMANDS: list[Command] = [
         "restore from backup",
         "restore <file> [--force]",
         needs_identity=False,
+        hidden=True,
     ),
 ]
 
@@ -246,18 +334,12 @@ def _fmt_command(cmd: Command, width: int) -> str:
 
 
 def print_help() -> None:
-    max_name = max(len(c.name) + (2 + len(", ".join(c.aliases)) if c.aliases else 0) for c in COMMANDS) + 2
-    print("board v2 — agent coordination tool (SQLite backend, Python)\n")
+    visible = [c for c in COMMANDS if not c.hidden]
+    max_name = max(len(c.name) + (2 + len(", ".join(c.aliases)) if c.aliases else 0) for c in visible) + 2
+    print("board — 同学协作工具\n")
     print("Usage: board --as <name> <command> [args...]\n")
     print("Commands:")
-    last_module = ""
-    for c in COMMANDS:
-        mod = c.module.rsplit(".", 1)[-1]  # board_msg, board_view, etc.
-        if mod != last_module:
-            if last_module:
-                print()
-            print(f"  [{mod}]")
-            last_module = mod
+    for c in visible:
         print(_fmt_command(c, max_name))
     print()
 
@@ -290,6 +372,9 @@ def main() -> None:
         print("ERROR: identity required. Use: board --as <name> <command>", file=sys.stderr)
         raise SystemExit(1)
 
+    if identity:
+        validate_identity(db, identity)
+
     _dispatch(cmd, db, identity, rest)
 
 

package/bin/check-changelog

@@ -0,0 +1,98 @@
+#!/usr/bin/env python3
+"""check-changelog — enforce changelog discipline on release versions.
+
+Rules:
+  1. Release versions (no -dev suffix) MUST have a matching ## {version} entry
+     in CHANGELOG.md with actual content (not just a header).
+  2. The entry must NOT be marked "(unreleased)".
+  3. Dev versions always pass — the unreleased section accumulates freely.
+
+Usage:
+    ./bin/check-changelog          # check and exit 0/1
+    ./bin/check-changelog --help   # this message
+"""
+
+import re
+import sys
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parent.parent
+VERSION_FILE = ROOT / "VERSION"
+CHANGELOG_FILE = ROOT / "CHANGELOG.md"
+
+
+def read_version() -> str:
+    return VERSION_FILE.read_text().strip()
+
+
+def is_release(ver: str) -> bool:
+    return not ver.endswith("-dev")
+
+
+def find_changelog_section(ver: str, text: str) -> tuple[bool, str]:
+    """Find ## {ver} section in changelog. Returns (found, section_body)."""
+    pattern = re.compile(
+        rf"^## {re.escape(ver)}\b[^\n]*\n(.*?)(?=^## |\Z)",
+        re.MULTILINE | re.DOTALL,
+    )
+    m = pattern.search(text)
+    if not m:
+        return False, ""
+    return True, m.group(1).strip()
+
+
+def check_not_unreleased(ver: str, text: str) -> bool:
+    """Return True if the version header is NOT marked unreleased."""
+    pattern = re.compile(rf"^## {re.escape(ver)}.*\(unreleased\)", re.MULTILINE | re.IGNORECASE)
+    return not pattern.search(text)
+
+
+def previous_release(text: str, current: str) -> str | None:
+    """Find the most recent release version before current in CHANGELOG.md."""
+    versions = re.findall(r"^## (\d+\.\d+\.\d+)\b", text, re.MULTILINE)
+    for v in versions:
+        if v != current:
+            return v
+    return None
+
+
+def main() -> None:
+    if "--help" in sys.argv or "-h" in sys.argv:
+        print(__doc__)
+        return
+
+    ver = read_version()
+
+    if not is_release(ver):
+        print(f"OK {ver} is a dev version — changelog check skipped")
+        return
+
+    if not CHANGELOG_FILE.exists():
+        print(f"ERROR: CHANGELOG.md not found. Release {ver} requires a changelog entry.")
+        raise SystemExit(1)
+
+    text = CHANGELOG_FILE.read_text()
+
+    found, body = find_changelog_section(ver, text)
+    if not found:
+        prev = previous_release(text, ver)
+        hint = f" Summarize all changes since {prev}." if prev else ""
+        print(f"ERROR: CHANGELOG.md has no entry for release {ver}.{hint}")
+        print(f"Add a '## {ver}' section with Features, Bug Fixes, etc.")
+        raise SystemExit(1)
+
+    if not check_not_unreleased(ver, text):
+        print(f"ERROR: CHANGELOG.md entry for {ver} is marked (unreleased). Remove the marker for a release.")
+        raise SystemExit(1)
+
+    content_lines = [line for line in body.splitlines() if line.strip() and not line.startswith("#")]
+    if len(content_lines) < 3:
+        print(f"ERROR: CHANGELOG.md entry for {ver} is too thin ({len(content_lines)} content lines).")
+        print("A release changelog must summarize all changes since the previous release.")
+        raise SystemExit(1)
+
+    print(f"OK CHANGELOG.md has a valid entry for release {ver} ({len(content_lines)} content lines)")
+
+
+if __name__ == "__main__":
+    main()

package/bin/check-npm-package

@@ -0,0 +1,89 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+usage() {
+    cat <<'EOF'
+Usage: bin/check-npm-package [--install-smoke] [--tarball PATH]
+
+Build or inspect the npm package tarball, verify required files are present,
+reject obvious secret-bearing paths, and optionally install the packed tarball
+globally in a temporary prefix to prove the cnb entrypoint is runnable.
+EOF
+}
+
+INSTALL_SMOKE=false
+TARBALL=""
+
+while [ $# -gt 0 ]; do
+    case "$1" in
+        --install-smoke)
+            INSTALL_SMOKE=true
+            shift
+            ;;
+        --tarball)
+            if [ $# -lt 2 ]; then
+                echo "ERROR: --tarball requires a path" >&2
+                exit 2
+            fi
+            TARBALL="$2"
+            shift 2
+            ;;
+        -h|--help)
+            usage
+            exit 0
+            ;;
+        *)
+            echo "ERROR: unknown argument: $1" >&2
+            usage >&2
+            exit 2
+            ;;
+    esac
+done
+
+WORK_DIR="$(mktemp -d)"
+cleanup() {
+    rm -rf "$WORK_DIR"
+}
+trap cleanup EXIT
+
+if [ -z "$TARBALL" ]; then
+    tarball_name="$(npm pack --pack-destination "$WORK_DIR")"
+    TARBALL="$WORK_DIR/$tarball_name"
+fi
+
+if [ ! -f "$TARBALL" ]; then
+    echo "ERROR: tarball not found: $TARBALL" >&2
+    exit 1
+fi
+
+tar -tzf "$TARBALL" > "$WORK_DIR/files.txt"
+
+required_files=(
+    "package/bin/cnb.js"
+    "package/bin/cnb"
+    "package/lib/cli.py"
+    "package/VERSION"
+    "package/package.json"
+)
+
+for file in "${required_files[@]}"; do
+    if ! grep -qx "$file" "$WORK_DIR/files.txt"; then
+        echo "ERROR: npm package is missing required file: $file" >&2
+        exit 1
+    fi
+done
+
+if grep -E '(^|/)(\.env($|[._-])|\.npmrc$|id_(rsa|dsa|ecdsa|ed25519)$|[^/]+\.(pem|p12|pfx|key)$|credentials?($|[._-]))' "$WORK_DIR/files.txt"; then
+    echo "ERROR: npm package includes a path that looks secret-bearing" >&2
+    exit 1
+fi
+
+if [ "$INSTALL_SMOKE" = true ]; then
+    prefix="$WORK_DIR/install"
+    project="$WORK_DIR/project"
+    mkdir -p "$prefix" "$project"
+    npm install --global --ignore-scripts --no-audit --no-fund --prefix "$prefix" "$TARBALL"
+    PATH="$prefix/bin:$PATH" CNB_PROJECT="$project" cnb --version | grep -E '^cnb v[0-9]+\.[0-9]+\.[0-9]+' >/dev/null
+fi
+
+echo "OK npm package tarball passed checks: $TARBALL"

package/bin/check-readme-sync

@@ -0,0 +1,69 @@
+#!/usr/bin/env python3
+"""check-readme-sync — verify README.md and README_zh.md have matching section structure.
+
+Both files use <!-- section:NAME --> markers. This script checks that they
+have the same markers in the same order. Content differs (that's the point
+of two languages), but structure must match.
+
+Usage:
+    bin/check-readme-sync          # check and report
+    bin/check-readme-sync --fix    # print which sections are missing/extra
+
+Exit 0 if in sync, 1 if not.
+"""
+
+import re
+import sys
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parent.parent
+MARKER = re.compile(r"<!--\s*section:(\S+)\s*-->")
+
+
+def extract_sections(path: Path) -> list[str]:
+    if not path.exists():
+        return []
+    return MARKER.findall(path.read_text())
+
+
+def main() -> None:
+    en = ROOT / "README.md"
+    zh = ROOT / "README_zh.md"
+
+    en_sections = extract_sections(en)
+    zh_sections = extract_sections(zh)
+
+    if not en_sections:
+        print(f"ERROR: no section markers in {en.name}")
+        raise SystemExit(1)
+    if not zh_sections:
+        print(f"ERROR: no section markers in {zh.name}")
+        raise SystemExit(1)
+
+    if en_sections == zh_sections:
+        print(f"OK {len(en_sections)} sections in sync: {', '.join(en_sections)}")
+        return
+
+    en_set = set(en_sections)
+    zh_set = set(zh_sections)
+
+    missing_in_zh = en_set - zh_set
+    missing_in_en = zh_set - en_set
+
+    if missing_in_zh:
+        print(f"README_zh.md missing: {', '.join(sorted(missing_in_zh))}")
+    if missing_in_en:
+        print(f"README.md missing: {', '.join(sorted(missing_in_en))}")
+
+    if en_sections != zh_sections and not (missing_in_zh or missing_in_en):
+        print("Section order differs:")
+        for i, (e, z) in enumerate(zip(en_sections, zh_sections)):
+            if e != z:
+                print(f"  position {i}: README.md has '{e}', README_zh.md has '{z}'")
+                break
+
+    raise SystemExit(1)
+
+
+if __name__ == "__main__":
+    main()