forge-workflow 0.0.6 → 0.0.8

package/opencode.json

@@ -0,0 +1,67 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "permission": {
+    "*": "ask",
+    "bash": {
+      "*": "ask",
+      "git status *": "allow",
+      "git log *": "allow",
+      "git diff *": "allow",
+      "git branch *": "allow",
+      "git show *": "allow",
+      "git remote *": "allow",
+      "git stash *": "allow",
+      "git tag *": "allow",
+      "git rev-parse *": "allow",
+      "git describe *": "allow",
+      "git ls-files *": "allow",
+      "git blame *": "allow",
+      "git shortlog *": "allow",
+      "git add *": "allow",
+      "git commit *": "allow",
+      "git push *": "allow",
+      "git checkout *": "allow",
+      "git switch *": "allow",
+      "git merge *": "allow",
+      "git rebase *": "ask",
+      "git cherry-pick *": "allow",
+      "bd *": "allow",
+      "gh *": "allow",
+      "ls *": "allow",
+      "cat *": "allow",
+      "grep *": "allow",
+      "find *": "allow",
+      "pwd *": "allow",
+      "which *": "allow",
+      "echo *": "allow",
+      "head *": "allow",
+      "tail *": "allow",
+      "sort *": "allow",
+      "wc *": "allow",
+      "awk *": "allow",
+      "sed *": "allow",
+      "stat *": "allow",
+      "du *": "allow",
+      "df *": "allow",
+      "file *": "allow",
+      "mkdir *": "allow",
+      "touch *": "allow",
+      "cp *": "allow",
+      "mv *": "allow",
+      "bun *": "allow",
+      "bunx *": "allow",
+      "npm *": "allow",
+      "npx *": "allow",
+      "node *": "allow",
+
+      "git worktree *": "allow",
+      "git reset --hard *": "ask",
+      "rm -rf *": "deny",
+      "git push --force *": "deny",
+      "git push -f *": "deny"
+    },
+    "edit": {
+      "*": "allow"
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "forge-workflow",
-  "version": "0.0.6",
+  "version": "0.0.8",
   "description": "7-stage TDD workflow for ALL AI coding agents (Claude, Cursor, Cline, OpenCode, Copilot, Kilo Code, Roo Code, Codex)",
   "bin": {
     "forge": "bin/forge.js",
@@ -43,8 +43,8 @@
     "eslint": "^10.0.2",
     "globals": "^17.3.0",
     "js-yaml": "^4.1.1",
-    "lefthook": "^1.10.1",
-    "yaml": "^2.8.2"
+    "lefthook": "^2.1.4",
+    "yaml": "^2.8.3"
   },
   "keywords": [
     "ai",
@@ -81,11 +81,17 @@
     ".claude/scripts/",
     ".claude/skills/",
     ".cursor/",
+    "!.cursor/node_modules/",
     ".cline/",
+    "!.cline/node_modules/",
     ".roo/",
+    "!.roo/node_modules/",
     ".codex/",
+    "!.codex/node_modules/",
     ".kilocode/",
+    "!.kilocode/node_modules/",
     ".opencode/",
+    "!.opencode/node_modules/",
     "scripts/",
     ".github/prompts/",
     ".github/PLUGIN_TEMPLATE.json",
@@ -97,7 +103,9 @@
     "lefthook.yml",
     "AGENTS.md",
     "CLAUDE.md",
-    ".mcp.json.example"
+    ".mcp.json.example",
+    ".cursorrules",
+    "opencode.json"
   ],
   "dependencies": {
     "@babel/parser": "^7.29.2",
@@ -106,7 +114,9 @@
   "overrides": {
     "eslint": "^10.0.2",
     "flatted": "3.4.2",
-    "minimatch": "10.2.4"
+    "minimatch": "10.2.4",
+    "brace-expansion": "5.0.5",
+    "lodash": "4.18.1"
   },
   "c8": {
     "lines": 80,

package/scripts/beads-context.sh

@@ -7,7 +7,7 @@
 #   set-acceptance   <issue-id> "<criteria-text>"
 #   update-progress  <issue-id> <task-num> <total> "<title>" <commit-sha> <test-count> <gate-count>
 #   parse-progress   <issue-id>
-#   stage-transition <issue-id> <completed-stage> <next-stage> [--summary "..."] [--decisions "..."] [--artifacts "..."] [--next "..."]
+#   stage-transition <issue-id> <completed-stage> <next-stage> [--summary "..."] [--decisions "..."] [--artifacts "..."] [--next "..."] [--workflow-state "{...}"]
 #   validate         <issue-id>
 #
 # Cross-platform: works on Windows (Git Bash), macOS, and Linux.
@@ -30,7 +30,7 @@ Subcommands:
   set-acceptance   <issue-id> "<criteria-text>"
   update-progress  <issue-id> <task-num> <total> "<title>" <commit-sha> <test-count> <gate-count>
   parse-progress   <issue-id>
-  stage-transition <issue-id> <completed-stage> <next-stage> [--summary "..."] [--decisions "..."] [--artifacts "..."] [--next "..."]
+  stage-transition <issue-id> <completed-stage> <next-stage> [--summary "..."] [--decisions "..."] [--artifacts "..."] [--next "..."] [--workflow-state "{...}"]
   validate         <issue-id>
 EOF
   exit 1
@@ -238,7 +238,7 @@ cmd_parse_progress() {
 
 cmd_stage_transition() {
   if [[ $# -lt 3 ]]; then
-    echo "Usage: beads-context.sh stage-transition <issue-id> <completed-stage> <next-stage> [--summary \"...\"] [--decisions \"...\"] [--artifacts \"...\"] [--next \"...\"]" >&2
+    echo "Usage: beads-context.sh stage-transition <issue-id> <completed-stage> <next-stage> [--summary \"...\"] [--decisions \"...\"] [--artifacts \"...\"] [--next \"...\"] [--workflow-state \"{...}\"]" >&2
     exit 1
   fi
 
@@ -250,7 +250,7 @@ cmd_stage_transition() {
   shift 3
 
   # Parse optional flags
-  local flag_summary="" flag_decisions="" flag_artifacts="" flag_next=""
+  local flag_summary="" flag_decisions="" flag_artifacts="" flag_next="" flag_workflow_state=""
   while [[ $# -gt 0 ]]; do
     case "$1" in
       --summary)
@@ -269,6 +269,10 @@ cmd_stage_transition() {
         shift
         flag_next="$(sanitize "${1:-}")"
         ;;
+      --workflow-state)
+        shift
+        flag_workflow_state="$(sanitize_config_value "${1:-}")"
+        ;;
       *)
         # Ignore unknown flags for forward compatibility
         ;;
@@ -296,6 +300,10 @@ Artifacts: ${flag_artifacts}"
     comment="${comment}
 Next: ${flag_next}"
   fi
+  if [[ -n "$flag_workflow_state" ]]; then
+    comment="${comment}
+WorkflowState: ${flag_workflow_state}"
+  fi
 
   if ! bd_comment "$issue_id" "$comment" > /dev/null; then
     die "Failed to record stage transition on issue ${issue_id}"

package/scripts/check-agents.js

@@ -19,8 +19,110 @@
  */
 
 const { syncCommands } = require('./sync-commands');
+const { AGENT_ADAPTERS } = require('./sync-commands');
 const path = require('path');
 const fs = require('fs');
+const { validatePluginSchema } = require('../lib/plugin-manager');
+
+const SYNC_ADAPTER_BY_PLUGIN_ID = Object.freeze({
+  claude: 'claude-code',
+  cline: 'cline',
+  codex: 'codex',
+  copilot: 'github-copilot',
+  cursor: 'cursor',
+  kilocode: 'kilo-code',
+  opencode: 'opencode',
+  roo: 'roo-code',
+});
+
+function normalizeRelativeDir(dir) {
+  if (!dir) return null;
+  return String(dir).replace(/\\/g, '/').replace(/\/+$/, '');
+}
+
+function getDeclaredCommandDir(plugin) {
+  const dirs = plugin.directories || {};
+  return dirs.commands || dirs.workflows || dirs.prompts || dirs.skills || null;
+}
+
+function getExpectedCommandDir(plugin) {
+  const adapterId = SYNC_ADAPTER_BY_PLUGIN_ID[plugin.id];
+  if (!adapterId) {
+    return null;
+  }
+
+  const adapter = AGENT_ADAPTERS[adapterId];
+  if (!adapter) {
+    return null;
+  }
+
+  if (plugin.id === 'codex') {
+    return normalizeRelativeDir(plugin.directories?.skills || adapter.baseDir);
+  }
+
+  return normalizeRelativeDir(adapter.baseDir);
+}
+
+function validatePluginParity(plugin, errors) {
+  const validation = validatePluginSchema(plugin);
+  if (!validation.valid) {
+    const parityErrors = validation.errors.filter((error) =>
+      error.startsWith('"support') || error.startsWith('"capabilities')
+    );
+    parityErrors.forEach((error) => {
+      errors.push(`Plugin "${plugin.name || plugin.id}" (${plugin.id || 'unknown'}): ${error}`);
+    });
+  }
+
+  const capabilities = plugin.capabilities || {};
+  const dirs = plugin.directories || {};
+  const supportStatus = plugin.support?.status;
+
+  if (capabilities.commands) {
+    const expectedDir = getExpectedCommandDir(plugin);
+    const declaredDir = normalizeRelativeDir(getDeclaredCommandDir(plugin));
+
+    if (!expectedDir) {
+      errors.push(
+        `Plugin "${plugin.name}" (${plugin.id}) declares commands support but has no Forge sync adapter.`
+      );
+    } else if (!declaredDir) {
+      errors.push(
+        `Plugin "${plugin.name}" (${plugin.id}) declares commands support but has no command directory configured.`
+      );
+    } else if (declaredDir !== expectedDir) {
+      errors.push(
+        `Plugin "${plugin.name}" (${plugin.id}) command directory "${declaredDir}" does not match sync output "${expectedDir}".`
+      );
+    }
+  }
+
+  if (capabilities.rules && !dirs.rules) {
+    errors.push(
+      `Plugin "${plugin.name}" (${plugin.id}) declares rules capability but has no scaffold path configured.`
+    );
+  }
+
+  if (capabilities.skills && !dirs.skills) {
+    errors.push(
+      `Plugin "${plugin.name}" (${plugin.id}) declares skills capability but has no scaffold path configured.`
+    );
+  }
+
+  if (supportStatus === 'deprecated' || supportStatus === 'unsupported') {
+    if (capabilities.skills) {
+      errors.push(
+        `Plugin "${plugin.name}" (${plugin.id}) is ${supportStatus} but still declares skills parity.`
+      );
+    }
+
+    if (plugin.setup?.createSkill || dirs.skills) {
+      errors.push(
+        `Plugin "${plugin.name}" (${plugin.id}) is ${supportStatus} but still scaffolds Forge skills.`
+      );
+    }
+  }
+}
 
 /**
  * Validate all agent configs are complete and in sync.
@@ -89,6 +191,7 @@ function checkAgents(repoRoot) {
       try {
         const plugin = JSON.parse(fs.readFileSync(path.join(pluginDir, file), 'utf8'));
         plugins.push(plugin);
+        validatePluginParity(plugin, errors);
       } catch (_err) {
         errors.push(`Failed to parse plugin file: lib/agents/${file}`);
       }

package/scripts/lib/eval-runner.js

@@ -9,6 +9,7 @@
  */
 
 const path = require('path');
+const fs = require('fs');
 const { execSync } = require('node:child_process');
 
 // ── active worktree tracking (cleanup on crash) ─────────────────────
@@ -17,6 +18,17 @@ const { execSync } = require('node:child_process');
 // Note: execSync is safe here — all paths are internally generated, never user input.
 const activeEvalWorktrees = new Map(); // path -> branch
 
+/**
+ * Force-remove a directory that git worktree remove may leave behind (Windows).
+ */
+function forceRemoveDir(dirPath) {
+  try {
+    if (fs.existsSync(dirPath)) {
+      fs.rmSync(dirPath, { recursive: true, force: true });
+    }
+  } catch (_err) { /* best-effort */ }
+}
+
 function cleanupActiveWorktrees() {
   if (activeEvalWorktrees.size === 0) return;
   let repoRoot;
@@ -25,6 +37,7 @@ function cleanupActiveWorktrees() {
     try {
       execSync(`git worktree remove --force "${wtPath}"`, { cwd: repoRoot, stdio: 'pipe' });
     } catch (_err) { /* already removed */ }
+    forceRemoveDir(wtPath);
     if (branch && branch.startsWith('eval-')) {
       try {
         execSync(`git branch -D "${branch}"`, { cwd: repoRoot, stdio: 'pipe' });
@@ -35,6 +48,37 @@ function cleanupActiveWorktrees() {
   activeEvalWorktrees.clear();
 }
 
+/**
+ * Remove stale eval-* directories left behind by crashed runs.
+ * Git has already forgotten them (worktree prune), but the directories persist on Windows.
+ */
+function cleanupStaleEvalWorktrees() {
+  try {
+    const worktreesDir = getWorktreesDir();
+    if (!fs.existsSync(worktreesDir)) return;
+
+    // Get the list of paths git still knows about
+    const repoRoot = getRepoRoot();
+    const knownRaw = execSync('git worktree list --porcelain', {
+      cwd: repoRoot, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'],
+    });
+    const knownPaths = new Set(
+      knownRaw.split('\n')
+        .filter((l) => l.startsWith('worktree '))
+        .map((l) => l.slice('worktree '.length).replace(/\\/g, '/'))
+    );
+
+    const entries = fs.readdirSync(worktreesDir);
+    for (const entry of entries) {
+      if (!entry.startsWith('eval-')) continue;
+      const fullPath = path.join(worktreesDir, entry).replace(/\\/g, '/');
+      if (!knownPaths.has(fullPath)) {
+        forceRemoveDir(path.join(worktreesDir, entry));
+      }
+    }
+  } catch (_err) { /* best-effort — don't block eval creation */ }
+}
+
 process.on('exit', cleanupActiveWorktrees);
 process.on('SIGINT', () => {
   const hadWork = activeEvalWorktrees.size > 0;
@@ -78,6 +122,9 @@ function getWorktreesDir() {
  * @returns {Promise<{ path: string, branch: string }>}
  */
 async function createEvalWorktree() {
+  // Self-heal: remove stale eval dirs from previous crashed runs
+  cleanupStaleEvalWorktrees();
+
   const timestamp = Date.now();
   const pid = process.pid;
   const name = `eval-${timestamp}-${pid}`;
@@ -128,6 +175,9 @@ async function destroyEvalWorktree(worktreePath) {
     stdio: ['pipe', 'pipe', 'pipe'],
   });
 
+  // Windows: git worktree remove often leaves the directory behind
+  forceRemoveDir(worktreePath);
+
   // Prune to clean up references
   execSync('git worktree prune', {
     cwd: repoRoot,

package/scripts/pr-coordinator.sh

@@ -563,9 +563,54 @@ cmd_auto_label() {
     echo "No label changes needed for PR #$pr_number"
   fi
 }
+collect_worktree_entries() {
+  local git_cmd porcelain current_path current_branch entries line separator
+  entries=""
+  current_path=""
+  current_branch=""
+  separator=$'\t'
+  git_cmd="${GIT_CMD:-git}"
+  porcelain="$("$git_cmd" worktree list --porcelain 2>/dev/null || true)"
+
+  while IFS= read -r line; do
+    case "$line" in
+      worktree\ *)
+        current_path="${line#worktree }"
+        ;;
+      branch\ refs/heads/*)
+        current_branch="${line#branch refs/heads/}"
+        ;;
+      "")
+        if [[ -n "$current_path" ]]; then
+          if [[ -n "$entries" ]]; then
+            entries+=$'\n'
+          fi
+          entries+="${current_path}${separator}${current_branch}"
+        fi
+        current_path=""
+        current_branch=""
+        ;;
+    esac
+  done <<EOF
+$porcelain
+
+EOF
+
+  if [[ -n "$current_path" ]]; then
+    if [[ -n "$entries" ]]; then
+      entries+=$'\n'
+    fi
+    entries+="${current_path}${separator}${current_branch}"
+  fi
+
+  printf '%s' "$entries"
+}
+
 cmd_stale_worktrees() {
   local threshold_hours=48
-  local worktrees_dir=".worktrees"
+  local worktree_filter=""
+  local git_cmd
+  git_cmd="${GIT_CMD:-git}"
 
   while [[ $# -gt 0 ]]; do
     case "$1" in
@@ -578,17 +623,19 @@ cmd_stale_worktrees() {
           return 1
         fi
         shift ;;
-      --dir=*) worktrees_dir="${1#--dir=}"; shift ;;
+      --dir=*) worktree_filter="${1#--dir=}"; shift ;;
       *) echo "Error: unknown flag '$1'" >&2; return 1 ;;
     esac
   done
 
   local repo_root
-  repo_root="$(git rev-parse --show-toplevel 2>/dev/null)" || repo_root="."
-  local wt_path="$repo_root/$worktrees_dir"
+  repo_root="$("$git_cmd" rev-parse --show-toplevel 2>/dev/null)" || repo_root="."
+
+  local worktree_entries
+  worktree_entries="$(collect_worktree_entries)"
 
-  if [[ ! -d "$wt_path" ]]; then
-    echo "No worktrees found (directory $worktrees_dir does not exist)"
+  if [[ -z "$worktree_entries" ]]; then
+    echo "No worktrees found"
     return 0
   fi
 
@@ -596,28 +643,29 @@ cmd_stale_worktrees() {
   local found_any=0
   local stale_count=0
 
-  for entry in "$wt_path"/*/; do
-    [[ -d "$entry" ]] || continue
-    found_any=1
+  while IFS=$'\t' read -r entry_path entry_branch; do
+    [[ -n "$entry_path" ]] || continue
 
-    # Resolve real path and verify it's under repo root
-    local real_path
-    real_path="$(realpath "$entry" 2>/dev/null)" || continue
-    local real_root
-    real_root="$(realpath "$repo_root" 2>/dev/null)" || continue
+    if [[ "$entry_path" == "$repo_root" ]]; then
+      continue
+    fi
 
-    if [[ "$real_path" != "$real_root/"* ]]; then
-      echo "WARNING: skipping symlink outside repo: $entry" >&2
+    if [[ -n "$worktree_filter" ]] && [[ "$entry_path" != *"$worktree_filter"* ]]; then
       continue
     fi
 
+    found_any=1
+
     # Get last commit date
     local last_commit_date
-    last_commit_date="$(git -C "$entry" log -1 --format=%ci 2>/dev/null)" || continue
+    last_commit_date="$("$git_cmd" -C "$entry_path" log -1 --format=%ci 2>/dev/null)" || continue
 
     # Get branch name
-    local branch_name
-    branch_name="$(git -C "$entry" branch --show-current 2>/dev/null)" || branch_name="unknown"
+    local branch_name="${entry_branch:-}"
+    if [[ -z "$branch_name" ]]; then
+      branch_name="$("$git_cmd" -C "$entry_path" branch --show-current 2>/dev/null)" || branch_name="unknown"
+    fi
+    branch_name="${branch_name:-unknown}"
 
     # Calculate age in hours
     local last_epoch now_epoch
@@ -628,10 +676,12 @@ cmd_stale_worktrees() {
     if [[ "$age_hours" -ge "$threshold_hours" ]]; then
       stale_count=$((stale_count + 1))
       local dir_name
-      dir_name="$(basename "$entry")"
+      dir_name="$(basename "$entry_path")"
       echo "STALE: $dir_name (branch: $branch_name, last commit: ${age_hours}h ago)"
     fi
-  done
+  done <<EOF
+$worktree_entries
+EOF
 
   if [[ "$found_any" -eq 0 ]]; then
     echo "No worktrees found"

package/scripts/smart-status.sh

@@ -20,8 +20,24 @@
 
 set -euo pipefail
 
+# ── Source cross-dev awareness scripts ────────────────────────────────
+# file-index.sh: file_index_read for reading file index entries
+# sync-utils.sh: get_session_identity for current developer identity
+
+_SMART_STATUS_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+if [ -f "$_SMART_STATUS_DIR/lib/sanitize.sh" ]; then
+  source "$_SMART_STATUS_DIR/lib/sanitize.sh"
+fi
+if [ -f "$_SMART_STATUS_DIR/file-index.sh" ]; then
+  source "$_SMART_STATUS_DIR/file-index.sh"
+fi
+if [ -f "$_SMART_STATUS_DIR/sync-utils.sh" ]; then
+  source "$_SMART_STATUS_DIR/sync-utils.sh"
+fi
+
 # ── Helpers ──────────────────────────────────────────────────────────────
 
+if ! declare -F sanitize >/dev/null; then
 # Sanitize a string: strip shell-injection patterns (OWASP A03)
 # Removes: double quotes, $(...), backticks, semicolons, and newlines
 sanitize() {
@@ -38,17 +54,6 @@ sanitize() {
   val="$(printf '%s' "$val" | tr '\n' ' ')"
   printf '%s' "$val"
 }
-
-# ── Source cross-dev awareness scripts ────────────────────────────────
-# file-index.sh: file_index_read for reading file index entries
-# sync-utils.sh: get_session_identity for current developer identity
-
-_SMART_STATUS_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-if [ -f "$_SMART_STATUS_DIR/file-index.sh" ]; then
-  source "$_SMART_STATUS_DIR/file-index.sh"
-fi
-if [ -f "$_SMART_STATUS_DIR/sync-utils.sh" ]; then
-  source "$_SMART_STATUS_DIR/sync-utils.sh"
 fi
 
 # ── Dependency check ────────────────────────────────────────────────────
@@ -117,6 +122,11 @@ done
 # not found" error, runs bd init --force + bd backup restore, then retries.
 # Capture stderr into variable (2>&1 redirects stderr to stdout for capture,
 # then >/dev/null discards original stdout so only errors remain).
+if ! command -v "$BD" >/dev/null 2>&1; then
+  echo "Error: bd is required but not found." >&2
+  exit 1
+fi
+
 _bd_list_err="$("$BD" list --json --limit 0 2>&1 >/dev/null || true)"
 if printf '%s' "$_bd_list_err" | grep -qi "database.*not found"; then
   # Derive prefix from repo root directory name (not pwd, which could be a subdirectory)