create-claude-workspace 1.0.0

package/dist/template/.claude/scripts/docker-run.mjs

@@ -0,0 +1,363 @@
+#!/usr/bin/env node
+
+/**
+ * Docker-based isolated runner for Claude Starter Kit.
+ * Single cross-platform script replacing docker-run.sh + docker-run.ps1.
+ *
+ * Usage:
+ *   node .claude/scripts/docker-run.mjs              # autonomous (default)
+ *   node .claude/scripts/docker-run.mjs --shell       # interactive shell
+ *   node .claude/scripts/docker-run.mjs --help        # all options
+ */
+
+import { spawnSync } from 'node:child_process';
+import { existsSync, writeFileSync, unlinkSync } from 'node:fs';
+import { join, resolve, dirname } from 'node:path';
+import { homedir, platform as osPlatform, tmpdir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PROJECT_DIR = resolve(__dirname, '../..');
+const AUTH_COMPOSE = join(tmpdir(), 'claude-starter-kit-auth-compose.yml');
+const IS_WIN = osPlatform() === 'win32';
+const IS_MAC = osPlatform() === 'darwin';
+
+// ─── Colors ───
+
+const C = { r: '\x1b[31m', g: '\x1b[32m', y: '\x1b[33m', c: '\x1b[36m', n: '\x1b[0m' };
+const info  = (m) => console.log(`${C.g}[INFO]${C.n} ${m}`);
+const warn  = (m) => console.log(`${C.y}[WARN]${C.n} ${m}`);
+const error = (m) => console.log(`${C.r}[ERROR]${C.n} ${m}`);
+const step  = (m) => console.log(`${C.c}[STEP]${C.n} ${m}`);
+
+// ─── Helpers ───
+
+function sleepSync(ms) {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+
+function run(cmd, args = [], opts = {}) {
+  return spawnSync(cmd, args, {
+    shell: true,
+    cwd: opts.cwd ?? PROJECT_DIR,
+    stdio: opts.capture ? 'pipe' : 'inherit',
+    timeout: opts.timeout,
+    env: { ...process.env, ...opts.env },
+  });
+}
+
+function ok(cmd, args = []) {
+  return run(cmd, args, { capture: true }).status === 0;
+}
+
+function hasCmd(cmd) {
+  const check = IS_WIN ? 'where' : 'which';
+  return spawnSync(check, [cmd], { shell: true, stdio: 'pipe' }).status === 0;
+}
+
+/** Convert Windows backslash path to forward slashes for Docker */
+function toDockerPath(p) {
+  return p.replace(/\\/g, '/');
+}
+
+/**
+ * Run docker compose with the auth override file if it exists.
+ * Does NOT use shell: true — on Windows, cmd.exe splits arguments after
+ * '-c' into separate words, breaking 'bash -c "node ..."' commands.
+ * Without shell, Node.js passes each array element as a distinct argv entry.
+ */
+function compose(args, opts = {}) {
+  const files = ['-f', 'docker-compose.yml'];
+  if (existsSync(AUTH_COMPOSE)) files.push('-f', AUTH_COMPOSE);
+  return spawnSync('docker', ['compose', ...files, ...args], {
+    cwd: PROJECT_DIR,
+    stdio: opts.capture ? 'pipe' : 'inherit',
+    env: { ...process.env },
+  });
+}
+
+function cleanup() {
+  try { if (existsSync(AUTH_COMPOSE)) unlinkSync(AUTH_COMPOSE); } catch {}
+}
+
+process.on('exit', cleanup);
+process.on('SIGINT', () => { cleanup(); process.exit(130); });
+process.on('SIGTERM', () => { cleanup(); process.exit(143); });
+
+// ─── Parse args ───
+
+function parseArgs() {
+  const args = process.argv.slice(2);
+  const opts = {
+    shell: false, rebuild: false, login: false, help: false, verbose: false,
+    maxIterations: '', maxTurns: '', delay: '', cooldown: '',
+  };
+
+  for (let i = 0; i < args.length; i++) {
+    switch (args[i]) {
+      case '--help': case '-h': opts.help = true; break;
+      case '--shell': opts.shell = true; break;
+      case '--rebuild': opts.rebuild = true; break;
+      case '--login': opts.login = true; break;
+      case '--verbose': opts.verbose = true; break;
+      case '--max-iterations': case '--max-turns': case '--delay': case '--cooldown': {
+        const flag = args[i];
+        if (i + 1 >= args.length || args[i + 1].startsWith('--')) {
+          error(`${flag} requires a value`); process.exit(1);
+        }
+        const key = flag.slice(2).replace(/-([a-z])/g, (_, c) => c.toUpperCase());
+        opts[key] = args[++i];
+        break;
+      }
+      default:
+        error(`Unknown option: ${args[i]}`); process.exit(1);
+    }
+  }
+  return opts;
+}
+
+function printHelp() {
+  console.log(`
+Docker runner for Claude Starter Kit
+
+One command to start safe, isolated autonomous development.
+--skip-permissions is added automatically (the container is the sandbox).
+
+Usage:
+  node .claude/scripts/docker-run.mjs [options]
+
+Options:
+  --shell              Interactive shell instead of autonomous loop
+  --max-iterations <n> Max iterations (default: 50)
+  --max-turns <n>      Max turns per iteration (default: 50)
+  --delay <ms>         Pause between tasks (default: 5000)
+  --cooldown <ms>      Wait after rate limit (default: 60000)
+  --rebuild            Force rebuild Docker image
+  --login              Run 'claude auth login' on host before starting container
+  --verbose            Show live Claude activity (tool calls, file edits, text)
+  --help, -h           Show this help
+
+Authentication:
+  The container uses your HOST machine's Claude auth automatically.
+  - Max plan: run 'claude auth login' on your host first (or use --login)
+  - API key:  set ANTHROPIC_API_KEY=sk-... before running
+
+npm Publishing (optional):
+  Set NPM_TOKEN=npm_XXXXX before running.
+  Optionally: NPM_REGISTRY=npm.pkg.github.com (default: registry.npmjs.org)
+
+Examples:
+  node .claude/scripts/docker-run.mjs
+  node .claude/scripts/docker-run.mjs --max-iterations 20
+  node .claude/scripts/docker-run.mjs --shell
+  node .claude/scripts/docker-run.mjs --login
+`);
+}
+
+// ─── Docker installation ───
+
+function installDocker() {
+  if (IS_WIN) {
+    if (hasCmd('winget')) {
+      info('Installing Docker Desktop via winget...');
+      run('winget', ['install', '-e', '--id', 'Docker.DockerDesktop',
+        '--accept-package-agreements', '--accept-source-agreements']);
+      warn('Docker Desktop installed. Restart terminal, start Docker Desktop, re-run.');
+      process.exit(0);
+    }
+    if (hasCmd('choco')) {
+      info('Installing Docker Desktop via Chocolatey...');
+      run('choco', ['install', 'docker-desktop', '-y']);
+      warn('Docker Desktop installed. Restart terminal, start Docker Desktop, re-run.');
+      process.exit(0);
+    }
+    error('Docker not found. Install Docker Desktop:');
+    error('  https://docs.docker.com/desktop/install/windows-install/');
+    process.exit(1);
+
+  } else if (IS_MAC) {
+    if (hasCmd('brew')) {
+      info('Installing Docker Desktop via Homebrew...');
+      run('brew', ['install', '--cask', 'docker']);
+      info('Start Docker Desktop from Applications, then re-run.');
+      process.exit(0);
+    }
+    error('Install Docker Desktop: https://docs.docker.com/desktop/install/mac-install/');
+    process.exit(1);
+
+  } else {
+    // Linux — official convenience script
+    info('Installing Docker via get.docker.com...');
+    const result = run('sh', ['-c', 'curl -fsSL https://get.docker.com | sh']);
+    if (result.status !== 0) {
+      error('Docker installation failed. Install manually: https://docs.docker.com/engine/install/');
+      process.exit(1);
+    }
+    run('sudo', ['usermod', '-aG', 'docker', process.env.USER || ''], { capture: true });
+    warn('You may need "newgrp docker" or re-login for group changes.');
+    info('Docker installed.');
+  }
+}
+
+function startDaemon() {
+  warn('Docker daemon not running. Starting...');
+
+  if (IS_WIN) {
+    const exe = join(process.env.ProgramFiles || 'C:\\Program Files',
+      'Docker', 'Docker', 'Docker Desktop.exe');
+    if (existsSync(exe)) {
+      spawnSync('cmd', ['/c', 'start', '', `"${exe}"`], { stdio: 'ignore' });
+    }
+  } else if (IS_MAC) {
+    run('open', ['-a', 'Docker'], { capture: true });
+  } else {
+    run('sudo', ['systemctl', 'start', 'docker'], { capture: true });
+  }
+
+  info('Waiting for Docker daemon (up to 120s)...');
+  for (let i = 0; i < 60; i++) {
+    sleepSync(2000);
+    if (ok('docker', ['info'])) return;
+    if (i % 5 === 4) console.log(`  ... waiting (${(i + 1) * 2}s)`);
+  }
+  error('Docker daemon not running. Start it manually and re-run.');
+  process.exit(1);
+}
+
+// ─── Main ───
+
+const opts = parseArgs();
+if (opts.help) { printHelp(); process.exit(0); }
+
+console.log(`\n${C.c}╔══════════════════════════════════════════╗${C.n}`);
+console.log(`${C.c}║   Claude Starter Kit — Docker Runner     ║${C.n}`);
+console.log(`${C.c}╚══════════════════════════════════════════╝${C.n}\n`);
+
+// 1. Docker
+step('1/4 Checking Docker...');
+if (!hasCmd('docker')) installDocker();
+if (!ok('docker', ['info'])) startDaemon();
+info('Docker is ready.');
+
+// 2. Build
+step('2/4 Building container image...');
+compose(opts.rebuild ? ['build', '--no-cache'] : ['build', '-q']);
+info('Image built.');
+
+// 3. Auth
+step('3/4 Setting up authentication...');
+
+if (process.env.ANTHROPIC_API_KEY) {
+  info('Using ANTHROPIC_API_KEY from environment.');
+} else {
+  // --login: authenticate on the HOST where browser + TTY work
+  if (opts.login) {
+    if (hasCmd('claude')) {
+      info("Running 'claude auth login' on host...");
+      run('claude', ['auth', 'login']);
+    } else {
+      error('Claude CLI not found on host. Install it first:');
+      console.log('  npm i -g @anthropic-ai/claude-code');
+      console.log('  claude auth login');
+      console.log('');
+      console.log('Or use an API key:');
+      console.log('  ANTHROPIC_API_KEY=sk-... node .claude/scripts/docker-run.mjs');
+      process.exit(1);
+    }
+  }
+
+  // Mount ONLY auth credentials from the host, NOT the entire ~/.claude/.
+  // The ~/.claude/ directory contains plugins, settings, and marketplace
+  // configs with Windows paths (C:\Users\...). Mounting it into a Linux
+  // container causes Claude Code to misinterpret those paths and create
+  // junk directories in the project root. The named volume 'claude-home'
+  // from docker-compose.yml handles ~/.claude/ inside the container.
+  //
+  // Auth is stored in ~/.claude/.credentials.json (OAuth tokens).
+  // Do NOT mount ~/.claude.json — it contains host-specific settings
+  // (installMethod, tips, stats) that cause warnings in the container.
+  // Do NOT mount ~/.claude/ — it has plugin configs with Windows paths
+  // that create junk directories in the project root.
+  //
+  // We use a compose override YAML file instead of -v flags because
+  // 'docker compose run -v' on Windows misparses drive-letter paths.
+  const home = homedir();
+  const credentialsJson = join(home, '.claude', '.credentials.json');
+
+  if (existsSync(credentialsJson)) {
+    info('Mounting host Claude auth credentials into container.');
+    const vol = `      - ${toDockerPath(credentialsJson)}:/home/claude/.claude/.credentials.json:ro`;
+    writeFileSync(AUTH_COMPOSE, `services:\n  claude:\n    volumes:\n${vol}\n`);
+  } else {
+    error('No Claude authentication found. Options:');
+    console.log('');
+    console.log('  Option 1 — Claude Max plan (OAuth):');
+    console.log('    npm i -g @anthropic-ai/claude-code');
+    console.log('    claude auth login');
+    console.log('    Then re-run this script.');
+    console.log('');
+    console.log('  Option 2 — API key:');
+    console.log('    ANTHROPIC_API_KEY=sk-... node .claude/scripts/docker-run.mjs');
+    console.log('');
+    console.log('  Option 3 — Use --login flag:');
+    console.log('    node .claude/scripts/docker-run.mjs --login');
+    process.exit(1);
+  }
+}
+
+// 4. Interactive setup if project not initialized
+const needsSetup = !existsSync(join(PROJECT_DIR, 'MEMORY.md'));
+
+if (needsSetup && !opts.shell) {
+  step('4/5 Project not initialized — starting interactive setup...');
+  console.log('');
+  info('Answer the discovery questions to set up your project.');
+  info('This creates CLAUDE.md, PRODUCT.md, TODO.md, and MEMORY.md.');
+  info('After setup, the autonomous development loop starts automatically.');
+  console.log('');
+
+  // Interactive mode — no -T flag, TTY allocated for user input.
+  // The prompt argument starts the discovery conversation immediately
+  // while keeping the session interactive for follow-up questions.
+  const setupResult = compose(['run', '--rm', 'claude', '-c',
+    'claude --agent project-initializer --dangerously-skip-permissions "Initialize this project. First check if PLAN.md exists in the project root — if it does, use it as the primary source of information and only ask about details that are missing or unclear. If PLAN.md does not exist, start the full discovery conversation."']);
+
+  if (setupResult.status !== 0) {
+    warn('Setup exited with errors. Use --shell for manual setup.');
+    process.exit(1);
+  }
+
+  if (!existsSync(join(PROJECT_DIR, 'MEMORY.md'))) {
+    warn('Setup did not complete (MEMORY.md not found).');
+    warn('Run again or use --shell for manual setup.');
+    process.exit(1);
+  }
+
+  info('Setup complete. Starting autonomous development...');
+  console.log('');
+}
+
+// 5. Run
+step(needsSetup ? '5/5 Starting Claude Code...' : '4/4 Starting Claude Code...');
+
+if (opts.shell) {
+  console.log('');
+  info('Interactive shell. Examples:');
+  info('  claude                                              # interactive Claude');
+  info('  node .claude/scripts/autonomous.mjs --skip-permissions  # autonomous loop');
+  console.log('');
+  compose(['run', '--rm', 'claude']);
+} else {
+  let autoArgs = '--skip-permissions';
+  if (opts.maxIterations) autoArgs += ` --max-iterations ${opts.maxIterations}`;
+  if (opts.maxTurns)      autoArgs += ` --max-turns ${opts.maxTurns}`;
+  if (opts.delay)         autoArgs += ` --delay ${opts.delay}`;
+  if (opts.cooldown)      autoArgs += ` --cooldown ${opts.cooldown}`;
+  if (opts.verbose)       autoArgs += ' --verbose';
+
+  console.log('');
+  info('Autonomous mode — isolated in Docker, --skip-permissions is safe.');
+  info('Press Ctrl+C to stop after current iteration.');
+  console.log('');
+  compose(['run', '--rm', '-T', 'claude', '-c', `node .claude/scripts/autonomous.mjs ${autoArgs}`]);
+}