project-knowledge 0.1.0 → 1.0.1

package/CHANGELOG.md

@@ -9,6 +9,47 @@
 - **Removed**：删除文件 / 目录
 - **Fixed**：修复错误
 
+## [1.0.0] — 2026-06-15
+
+First public npm release of `project-knowledge`. The tool ships as a single
+zero-dependency Node server plus a vendored Vue 3 + Tailwind dashboard.
+
+### Added
+- **Server & API** — `_site/server.js` provides the dashboard, REST API, and
+  background job runner using only Node built-ins.
+- **Dashboard** — Vue 3 + Tailwind single-page UI in `_site/index.html`:
+  project control panel, collapsible summary groups, issues panel with
+  deduplication, supervision view.
+- **AI pipeline**
+  - `ai-adapter` — pluggable adapter dispatch (mock / Claude CLI / custom LLM)
+  - `analysis-orchestrator` — initial scan + commit-batch analysis
+  - `context-pack-builder` — packs context per LLM call
+  - `claude-cli-runner` + `claude-workbench` integration
+  - `ai-workspace`, `prompt-registry`, `llm-client`
+  - `draft-apply` — reviewable drafts before writeback
+- **Knowledge store v3** — `kb-v3` simplified layout, plus `knowledge-store`
+  external store abstraction and `kb-validator` for schema checks.
+- **Supervision & logging** — `supervision` + `structured-logger` for audit
+  of every AI job (mode, adapter, tokens, status).
+- **Dashboard features (TASK-014 … TASK-020)**
+  - TASK-014: project control panel simplification
+  - TASK-015: project delete functionality
+  - TASK-016: source branch tagging
+  - TASK-017: collapsible project groups in summary panel
+  - TASK-018: issues panel duplication
+  - TASK-019: KB storage framework + summary panel persistence across project switches
+  - TASK-020: kb-v3 simplified layout
+- **Vendored browser libs** — `_site/vendor/{vue.global.prod.js, tailwind-browser.js}`
+- **Tag-driven publish** — `.github/workflows/publish.yml` publishes to npm on
+  `v*` tags with provenance.
+
+### Changed
+- `package.json` — version 1.0.0; `files` updated to include `_site/vendor/`.
+- Expanded test suite under `_site/_test/` (AI profile, baseline schema,
+  draft-apply, kb-v2/v3 templates, knowledge-store + logs + supervision,
+  claude-workbench, project-control-panel task14, task15-20 integration +
+  UI flow, ui-smoke).
+
 ## 2026-06-08
 
 ### Changed

package/README.md

@@ -1,79 +1,222 @@
-# SanQian.Xu 项目知识库
+# project-knowledge
+
+> Knowledge-base manager with Git integration, AI-driven analysis, and bilingual (zh-CN / en-US) knowledge output.
+
+[![npm version](https://img.shields.io/npm/v/project-knowledge.svg)](https://www.npmjs.com/package/project-knowledge)
+[![Node](https://img.shields.io/node/v/project-knowledge.svg)](https://www.npmjs.com/package/project-knowledge)
+
+`project-knowledge` runs a local web dashboard that scans Git repositories,
+hands batches of commits to an AI agent (Claude CLI / mock adapter / custom
+LLM), and writes the resulting knowledge entries back to a structured
+knowledge base per project — modules, framework docs, commit changelogs,
+quality reviews, and operation notes.
+
+It is built to be a single-developer tool: zero runtime dependencies (Node
+built-ins only for the server), a vendored Vue 3 + Tailwind dashboard, and a
+file-based store you can read, grep, and version-control.
+
+---
+
+## Features
+
+- **Project registry** — declare projects in `projects.json`; the dashboard
+  drives scan / analyze / commit-draft / publish flows per project.
+- **Git scanner** — walks the working tree of each registered project,
+  extracts features and recent commits, and feeds the AI pipeline.
+- **AI pipeline**
+  - `analysis-orchestrator` — initial scan + commit-batch analysis modes.
+  - `ai-adapter` — pluggable profiles (mock / Claude CLI / custom LLM via
+    `llm-client`); `ai-profiles.json` controls which adapter runs.
+  - `context-pack-builder` — packs relevant context for each LLM call.
+  - `claude-cli-runner` + `claude-workbench` integration — runs Claude Code
+    in a sandboxed workspace and surfaces its session log.
+  - `prompt-registry` — versioned prompt templates (`claude-prompts.json`).
+  - `draft-apply` — turns LLM output into reviewable draft files; the user
+    approves, edits, or rejects each draft before it lands.
+- **Knowledge store (kb-v3)** — simplified layout: `framework.md`,
+  `modules/`, `commits/`, `features/`, `references/`, `operations/`,
+  `quality/`, plus a generated `kb-manifest.json` per project.
+- **Dashboard** — Vue 3 + Tailwind single-page UI: project control panel,
+  collapsible summary groups, issues panel with dedup, supervision view
+  showing structured logs and AI job runs.
+- **Supervision & structured logging** — every AI job is logged with
+  structured fields (run id, mode, adapter, token usage, status) so you can
+  audit what the agent did and replay.
+- **Hook integration** — installs a Windows scheduled task / post-commit
+  hook so each Git commit can trigger an analysis job automatically.
+- **Validator & PR context packs** — `kb-validator` checks the knowledge
+  base against the baseline schema; `buildPrContextPack` exports a focused
+  pack for a PR so reviewers (or an LLM) get just the relevant context.
+
+## Install
+
+```bash
+npm install -g project-knowledge
+```
+
+Requirements:
+
+- Node.js ≥ 18
+- Git on `PATH`
+- (Optional) [Claude Code CLI](https://docs.claude.com/en/docs/claude-code)
+  if you want the Claude adapter (the `mock-agent` adapter works without it)
+- Windows has the most complete hook/scheduled-task flow. The dashboard,
+  registry, AI profiles, and knowledge-store APIs use install-relative paths.
 
-> 统一管理 `D:\SanQian.Xu` 下多个项目的项目框架、功能模块、git 提交的功能变更。
+## Quick start
 
-## 目录速览
+Global install:
 
+```bash
+npm install -g project-knowledge
+project-knowledge            # starts server on http://localhost:7777
+project-knowledge start --port 9000
 ```
-project-knowledge-base/
-├── INDEX.md                # 项目速查表（按角色/技术栈/标签）
-├── projects.json           # 项目元信息（脚本读取）
-├── iterations.json         # 里程碑定义
-├── projects/
-│   ├── claude-code-ui/                # Claude Code UI（克隆参考项目）
-│   ├── claude-devsprite/              # Claude-DevSprite（CLI + Web Dashboard）
-│   ├── token-consumption-leaderboard/ # Token 消耗排行榜
-│   ├── quant-platform/                # 量化金融数据平台
-│   ├── web-remote-control/            # WebRTC 远程桌面
-│   └── tokenrank-cloud/               # TokenRank Cloud
-├── scripts/
-│   ├── gen-commit-doc.ps1  # 核心：git log → 功能文档
-│   ├── gen-commit-doc.sh   # Bash 版
-│   ├── list-features.ps1   # 列出某项目所有功能
-│   └── register-scheduled-task.bat  # 注册每日定时任务
-└── templates/              # 文档模板
+
+Or run from source:
+
+```bash
+git clone https://github.com/SanQianX/project-knowledge-base.git
+cd project-knowledge-base
+npm install
+npm start                    # node _site/server.js
+```
+
+Then open <http://localhost:7777>. Override the port with
+`KB_SITE_PORT=9000 npm start`.
+
+### First-time setup
+
+1. Open the dashboard → **Projects** → register a project (path + slug).
+On first run, v1.0.1 creates missing runtime JSON files automatically. If
+`projects.json` or `ai-profiles.json` is empty or invalid, the server recovers
+with a safe default; invalid JSON is backed up as `*.invalid-<timestamp>.bak`.
+
+2. Open **Settings** / **AI profiles** to add MiniMax / GLM / GPT /
+   Anthropic-compatible models. The npm package ships with a safe mock profile
+   and no API keys.
+3. Run **Scan** → **Initial analysis** → review drafts → **Apply drafts**.
+4. (Optional) **Install hook** so future commits trigger an analysis job.
+
+### Upgrading from v1.0.0
+
+v1.0.0 did not publish a `bin` command, so a global install could complete
+without creating the `project-knowledge` executable. Reinstall v1.0.1:
+
+```bash
+npm uninstall -g project-knowledge
+npm install -g project-knowledge@latest
+project-knowledge --version
+project-knowledge
 ```
 
-## 阅读路径
+## Architecture
 
-1. **第一次来** → 看 [INDEX.md](./INDEX.md) 了解项目概况
-2. **找某个项目的框架** → `projects/<slug>/framework.md`
-3. **找某个功能模块** → `projects/<slug>/modules/00-index.md`
-4. **找某次 git 提交的功能变更** → `projects/<slug>/commits/00-index.md`
-5. **找项目与源码的对应关系** → `projects/<slug>/references/source-map.md`
+```
+project-knowledge-base/
+├── _site/                       # The dashboard + server (ships to npm)
+│   ├── server.js                # HTTP server, REST API, zero deps
+│   ├── index.html               # Vue 3 + Tailwind single-page UI
+│   ├── lib/                     # All server-side modules
+│   │   ├── ai-adapter.js          # Profile dispatch (mock / Claude / LLM)
+│   │   ├── analysis-orchestrator.js
+│   │   ├── context-pack-builder.js
+│   │   ├── claude-cli-runner.js
+│   │   ├── claude-workbench (workspace manager)
+│   │   ├── draft-apply.js         # LLM output → reviewable draft files
+│   │   ├── ai-workspace.js
+│   │   ├── job-orchestrator.js
+│   │   ├── kb-v3.js                # Knowledge base layout v3
+│   │   ├── kb-validator.js
+│   │   ├── knowledge-store.js      # External store abstraction
+│   │   ├── supervision.js          # Audit / monitoring layer
+│   │   ├── structured-logger.js
+│   │   ├── prompt-registry.js
+│   │   ├── llm-client.js
+│   │   ├── index-builder.js
+│   │   ├── scanner.js
+│   │   ├── git-runner.js
+│   │   └── hook-manager.js
+│   ├── scripts/                 # hook-trigger.js, safe-runner.js
+│   ├── vendor/                  # vue.global.prod.js, tailwind-browser.js
+│   ├── _test/                   # smoke + unit tests (run via `npm test`)
+│   ├── start.bat / stop.bat     # Windows convenience launchers
+│   └── server.js
+├── templates/                   # Markdown templates for generated docs
+├── scripts/                     # PowerShell + bash commit-doc generators
+├── docs/                        # Design docs and contracts
+├── tasks/                       # Task tracking (TASK-001 …)
+├── projects/                    # The actual knowledge base (one dir per project)
+├── ai-profiles.json             # AI adapter profiles
+├── claude-prompts.json          # Prompt templates
+├── projects.json                # Project registry
+└── iterations.json              # Milestone definitions
+```
 
-## 项目 slug 对照
+The server is intentionally dependency-free — every line in `_site/server.js`
+and `_site/lib/*.js` uses only Node built-ins, so the install footprint is
+the dashboard assets and your data.
 
-| slug | 项目目录 | 显示名 |
-|------|----------|--------|
-| `claude-code-ui` | `Claude-Code-UI\Reference Project\claudecodeui` | Claude Code UI |
-| `claude-devsprite` | `Claude-DevSprite` | Claude-DevSprite |
-| `token-consumption-leaderboard` | `Token Consumption Leaderboard` | Token Consumption Leaderboard |
-| `quant-platform` | `quant-platform` | quant-platform |
-| `web-remote-control` | `web-remote-control` | web-remote-control |
-| `tokenrank-cloud` | `TokenRank Cloud` | TokenRank Cloud |
+## Configuration
 
-## 如何更新知识库
+| File                  | Purpose                                                              |
+| --------------------- | -------------------------------------------------------------------- |
+| `projects.json`       | Registry of projects: slug, name, path, source control info.        |
+| `iterations.json`     | Milestone definitions referenced by summary panels.                  |
+| `ai-profiles.json`    | One entry per AI adapter (id, type, model, prompt-id, options).     |
+| `claude-prompts.json` | Versioned prompt templates keyed by id; referenced by profiles.     |
+| `knowledge-store.json` | Runtime state of the external knowledge store (gitignored).         |
+| `logging.json`        | Runtime logging config (gitignored).                                 |
 
-### 手动更新
+Environment variables:
 
-- 改 `projects/<slug>/modules/*.md` 的「最近一次重要变更」段：PR 作者
-- 改 `projects/<slug>/framework.md`：项目 owner（季度审查）
-- 改 `INDEX.md`、`projects.json`、`iterations.json`：知识库 owner
+- `KB_SITE_PORT` — server port (default `7777`)
+- `KB_SITE_HOST` — bind host (default `127.0.0.1`)
 
-### 自动更新（git 提交 → 功能文档）
+## Testing
 
-```powershell
-cd D:\SanQian.Xu\project-knowledge-base\scripts
-.\gen-commit-doc.ps1 -ProjectSlug claude-devsprite   # 单项目
-.\gen-commit-doc.ps1 -ProjectSlug ALL                # 全部项目
+```bash
+npm test
 ```
 
-脚本行为：
-- `feat` / `fix` / `refactor` / `perf` → 写入 `commits/`
-- `docs` / `chore` / `test` / `style` → 跳过（不写入 commits/）
-- 同 feature-slug 的提交 → **追加到已有功能文件**（不新建）
-- `docs:` / `chore:` 视为维护类变更，不进 `commits/`
+Runs `_site/_test/run-all-tests.js`, which executes the smoke + unit tests
+across AI adapters, draft-apply, kb-v2/v3 templates, knowledge store,
+supervision, claude workbench, the project control panel (TASK-014),
+TASK-015–020 integration, and the UI flow.
+
+## Development
 
-详见 `templates/commit-feature.md` 的输出格式。
+The dashboard is a static `index.html` that ships Vue 3 + Tailwind from
+`_site/vendor/`. Edit `_site/index.html` directly and refresh the browser;
+no build step. Restart the server after editing anything under `_site/lib/`.
+
+Useful entry points:
+
+- Add a new AI adapter → `_site/lib/ai-adapter.js` + a profile in
+  `ai-profiles.json`.
+- Add a new prompt → `claude-prompts.json` + reference it from a profile.
+- Add a new dashboard page → `_site/index.html` (Vue components) + a route
+  handler in `_site/server.js`.
+
+## Publishing
+
+Releases are tag-driven. The `.github/workflows/publish.yml` workflow runs
+`npm publish --provenance --access public` on every `v*` tag push, using the
+`NPM_TOKEN` secret. To cut a release:
+
+```bash
+# bump version in package.json
+git commit -am "Release vX.Y.Z"
+git tag -a vX.Y.Z -m "vX.Y.Z"
+git push origin main
+git push origin vX.Y.Z    # triggers publish
+```
 
-## 维护约定
+## License
 
-- **路径风格**：所有内部链接用 POSIX 风格（`/` 而非 `\`）
-- **命名风格**：文件名 kebab-case 全小写 ASCII
-- **Frontmatter**：每个 `.md` 顶部带 YAML frontmatter（用 `---` 包围）
-- **每文件一职责**：一个模块一文件、一次功能交付一文件
+Currently `UNLICENSED` (see `package.json`). Revisit before public
+consumption — MIT or Apache-2.0 are reasonable defaults for a tool like this.
 
-## 知识库自身的变更
+## Changelog
 
-见 [CHANGELOG.md](./CHANGELOG.md)。
+See [CHANGELOG.md](./CHANGELOG.md).

package/_site/_test/ai-profile-test.js

@@ -7,6 +7,8 @@ const {
   ADAPTERS, getAdapter, listAdapters,
   validateInitialOutput, validateCommitBatchOutput,
 } = require('../lib/ai-adapter');
+const { readConfig: readLlmConfig } = require('../lib/llm-client');
+const { buildClaudeEnvFromProfile } = require('../lib/claude-cli-runner');
 
 const ROOT = path.resolve(__dirname, '..', '..');
 const SERVER = path.join(ROOT, '_site', 'server.js');
@@ -15,6 +17,7 @@ const AI_PROFILES_JSON = path.join(ROOT, 'ai-profiles.json');
 const PORT = process.env.KB_AI_TEST_PORT || '7795';
 const BASE_URL = `http://127.0.0.1:${PORT}`;
 const TEMP_SLUG = 'task-005-temp';
+const ORIGINAL_AI_PROFILES_TEXT = fs.readFileSync(AI_PROFILES_JSON, 'utf-8');
 
 function assert(cond, msg) { if (!cond) throw new Error(msg); }
 
@@ -52,6 +55,7 @@ async function cleanup() {
     delete cur[TEMP_SLUG];
     fs.writeFileSync(PROJECTS_JSON, JSON.stringify(cur, null, 2) + '\n', 'utf-8');
   }
+  fs.writeFileSync(AI_PROFILES_JSON, ORIGINAL_AI_PROFILES_TEXT, 'utf-8');
 }
 
 (async () => {
@@ -146,17 +150,68 @@ async function cleanup() {
     assert(!r.res.ok && r.res.status === 400, 'invalid profile id should 400');
     assert(Array.isArray(r.data.errors), 'should return errors list');
 
+    r = await json('PUT', '/api/ai-profiles', {
+      schema: 'ai-profiles/v1',
+      defaultProfileId: 'minimax-m3',
+      profiles: [
+        { id: 'mock-agent', name: 'Mock', enabled: true, implementation: 'mock-agent' },
+        { id: 'minimax-m3', name: 'Disabled LLM', enabled: false, implementation: 'claude-code-agent' },
+      ],
+    });
+    assert(!r.res.ok && r.res.status === 400, 'disabled default profile should 400');
+
     // 9. PUT /api/ai-profiles with valid config
     r = await json('PUT', '/api/ai-profiles', {
       schema: 'ai-profiles/v1',
       defaultProfileId: 'mock-agent',
       profiles: [
         { id: 'mock-agent', name: 'Mock', enabled: true, implementation: 'mock-agent' },
-        { id: 'claude-code-agent', name: 'Claude Code', enabled: false, implementation: 'claude-code-agent' },
+        {
+          id: 'minimax-m3',
+          name: 'MiniMax M3',
+          enabled: false,
+          implementation: 'claude-code-agent',
+          baseUrl: 'https://example.test/anthropic',
+          apiKey: 'test-key',
+          model: 'test-model',
+          version: '2023-06-01',
+          temperature: 0.1,
+          maxTokens: 1234,
+          timeoutMs: 7654,
+        },
       ],
     });
     assert(r.res.ok, 'valid profile config should be accepted');
 
+    const llmCfg = readLlmConfig({ profileId: 'minimax-m3' });
+    assert(llmCfg.baseUrl === 'https://example.test/anthropic', 'llm client should read baseUrl from profile');
+    assert(llmCfg.apiKey === 'test-key', 'llm client should read apiKey from profile');
+    assert(llmCfg.model === 'test-model', 'llm client should read model from profile');
+    assert(llmCfg.timeoutMs === 7654, 'llm client should read timeoutMs from profile');
+
+    const claudeEnv = buildClaudeEnvFromProfile({
+      apiKey: 'test-key',
+      baseUrl: 'https://example.test/anthropic',
+      model: 'test-model',
+      timeoutMs: 7654,
+    });
+    assert(claudeEnv.ANTHROPIC_AUTH_TOKEN === 'test-key', 'claude env should set auth token');
+    assert(claudeEnv.ANTHROPIC_BASE_URL === 'https://example.test/anthropic', 'claude env should set base URL');
+    assert(claudeEnv.ANTHROPIC_MODEL === 'test-model', 'claude env should set model');
+    assert(claudeEnv.ANTHROPIC_DEFAULT_SONNET_MODEL === 'test-model', 'claude env should map sonnet alias');
+    assert(claudeEnv.ANTHROPIC_DEFAULT_OPUS_MODEL === 'test-model', 'claude env should map opus alias');
+    assert(claudeEnv.ANTHROPIC_DEFAULT_HAIKU_MODEL === 'test-model', 'claude env should map haiku alias');
+    assert(claudeEnv.API_TIMEOUT_MS === '7654', 'claude env should set timeout');
+    assert(claudeEnv.CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC === '1', 'claude env should disable nonessential traffic');
+
+    r = await json('POST', '/api/ai-profiles/test', {
+      profileId: 'mock-agent',
+      prompt: 'what model are you?',
+    });
+    assert(r.res.ok, 'mock profile test should return 200');
+    assert(r.data.ok && r.data.model === 'mock-agent', 'mock profile test should identify mock-agent');
+    assert(/what model are you/.test(r.data.text), 'mock profile test should echo prompt');
+
     // 10. Per-project ai profile selection
     r = await json('PUT', '/api/projects', {
       slug: TEMP_SLUG,
@@ -165,6 +220,9 @@ async function cleanup() {
     assert(r.res.ok, 'upsert should succeed');
     assert(r.data.repoStatus !== undefined, 'repoStatus should be returned');
 
+    r = await json('PUT', `/api/projects/${TEMP_SLUG}/ai-profile`, { aiProfileId: 'minimax-m3' });
+    assert(!r.res.ok && r.res.status === 400, 'disabled ai profile should not be assignable');
+
     r = await json('PUT', `/api/projects/${TEMP_SLUG}/ai-profile`, { aiProfileId: 'mock-agent' });
     assert(r.res.ok, 'set ai profile should succeed');
     assert(r.data.aiProfileId === 'mock-agent', 'aiProfileId should be set');

package/_site/_test/baseline-schema-test.js

@@ -73,7 +73,7 @@ async function removeTempProject() {
 
     const stateResult = await json('GET', '/api/state');
     assert(stateResult.res.ok, '/api/state should return 200');
-    assert(stateResult.data.projectSchemaVersion === 'v1', 'projectSchemaVersion should be v1');
+    assert(stateResult.data.projectSchemaVersion === 'v3', 'projectSchemaVersion should be v3');
     assert(stateResult.data.kbRoot.endsWith('project-knowledge-base'), 'kbRoot should point to project-knowledge-base');
 
     const projects = stateResult.data.projects;
@@ -85,7 +85,7 @@ async function removeTempProject() {
       assert(Object.prototype.hasOwnProperty.call(cfg, 'lastSeenCommit'), `${slug} missing lastSeenCommit`);
       assert(Object.prototype.hasOwnProperty.call(cfg, 'lastAnalyzedCommit'), `${slug} missing lastAnalyzedCommit`);
       assert(cfg.aiProfileId, `${slug} missing aiProfileId`);
-      assert(cfg.kbSchemaVersion === 'v1', `${slug} missing kbSchemaVersion v1`);
+      assert(['v1', 'v2', 'v3'].includes(cfg.kbSchemaVersion), `${slug} missing supported kbSchemaVersion`);
       assert(cfg.goalStatus, `${slug} missing goalStatus`);
       assert(!String(cfg.kbPath || '').includes('\\SanQian.Xu\\kb\\'), `${slug} uses legacy kbPath`);
     }
@@ -106,7 +106,8 @@ async function removeTempProject() {
     assert(projectsResult.res.ok, '/api/projects should return 200');
     const temp = projectsResult.data[TEMP_SLUG];
     assert(temp, 'temp project should exist');
-    assert(temp.kbPath.endsWith(`project-knowledge-base\\projects\\${TEMP_SLUG}`), 'legacy kbPath should be normalized');
+    assert(!String(temp.kbPath || '').includes('\\SanQian.Xu\\kb\\'), 'legacy kbPath should be normalized');
+    assert(String(temp.kbPath || '').endsWith(`\\${TEMP_SLUG}`), 'normalized kbPath should end with the slug');
     assert(temp.enabled === true, 'temp project should default enabled=true');
     // repoStatus is auto-validated on upsert; ROOT may or may not be a git repo.
     // Accept any of the well-defined statuses that prove normalization ran.

package/_site/_test/claude-workbench-test.js

@@ -0,0 +1,72 @@
+// Claude workbench regression test.
+// Verifies permission-gated turns and persisted session metadata without spawning Claude.
+
+const fs = require('fs');
+const path = require('path');
+const runner = require('../lib/claude-cli-runner');
+
+const ROOT = path.resolve(__dirname, '..', '..');
+const TEMP_KB = path.join(ROOT, 'projects', 'claude-workbench-test-temp');
+const TEMP_AI = path.join(ROOT, '_site', '_ai', 'claude-workbench-test-temp');
+
+function assert(cond, msg) {
+  if (!cond) throw new Error(msg);
+}
+
+(async () => {
+  fs.rmSync(TEMP_KB, { recursive: true, force: true });
+  fs.rmSync(TEMP_AI, { recursive: true, force: true });
+  fs.mkdirSync(TEMP_KB, { recursive: true });
+
+  const started = runner.startSession({
+    slug: 'claude-workbench-test-temp',
+    projectPath: ROOT,
+    kbPath: TEMP_KB,
+    promptKey: 'initial-analysis',
+    aiProfile: {
+      id: 'test-profile',
+      implementation: 'claude-code-agent',
+      model: 'test-model',
+    },
+    vars: {
+      SLUG: 'claude-workbench-test-temp',
+      PROJECT_PATH: ROOT,
+      PRIMARY_LANGUAGE: 'JavaScript',
+      KNOWLEDGE_LANGUAGE: 'zh-CN',
+    },
+  });
+
+  assert(started.sessionId, 'startSession should return sessionId');
+  assert(started.pendingPermission, 'initial turn should require permission');
+
+  const state = runner.getState(started.sessionId);
+  assert(state.state === 'pending-permission', `expected pending-permission, got ${state.state}`);
+  assert(state.pendingPermission.requestId === started.pendingPermission.requestId, 'state should expose pending request');
+
+  const replay = [];
+  const unsubscribe = runner.subscribe(started.sessionId, event => replay.push(event.type));
+  unsubscribe();
+  assert(replay.includes('claude/permission-request'), 'subscribe should replay permission request');
+
+  const recordPath = path.join(TEMP_AI, 'claude-workbench', `${started.sessionId}.json`);
+  assert(fs.existsSync(recordPath), 'session record should be persisted');
+  const record = JSON.parse(fs.readFileSync(recordPath, 'utf-8'));
+  assert(record.claudeSessionId === null, 'no Claude session id before approval/spawn');
+  assert(record.events.some(e => e.type === 'claude/permission-request'), 'record should include permission event');
+
+  const resolved = runner.resolvePermission(started.sessionId, started.pendingPermission.requestId, { allow: false });
+  assert(resolved.ok && resolved.started === false, 'denying permission should not start Claude');
+  const after = runner.getState(started.sessionId);
+  assert(after.state === 'idle', `denied permission should return to idle, got ${after.state}`);
+  assert(!after.pendingPermission, 'pending permission should be cleared after denial');
+
+  runner.deleteSession(started.sessionId);
+  fs.rmSync(TEMP_KB, { recursive: true, force: true });
+  fs.rmSync(TEMP_AI, { recursive: true, force: true });
+  console.log('Claude workbench test passed');
+})().catch(err => {
+  try { fs.rmSync(TEMP_KB, { recursive: true, force: true }); } catch {}
+  try { fs.rmSync(TEMP_AI, { recursive: true, force: true }); } catch {}
+  console.error(err);
+  process.exit(1);
+});

package/_site/_test/draft-apply-test.js

@@ -103,7 +103,9 @@ async function cleanup() {
 
   // 3. List drafts
   const drafts = listDrafts(kbBase, runId);
-  assert(drafts.length >= 3, `expected 3+ drafts (1 goal + 1 analysis + 2 changes + 1 feature), got ${drafts.length}`);
+  assert(drafts.length >= 2, `expected at least change + feature drafts, got ${drafts.length}`);
+  assert(drafts.some(d => d.path.startsWith('changes/')), 'expected a changes draft');
+  assert(drafts.some(d => d.path.startsWith('features/')), 'expected a features draft for feature commit');
   // The orchestrator does NOT produce a goal draft for commit runs. It produces changes/* and a feature/*.
 
   // 4. Build draft payloads from the on-disk drafts
@@ -291,7 +293,8 @@ async function cleanup() {
     // 14. List drafts
     r = await json('GET', `/api/projects/${slug}/drafts/${srvRunId}`);
     assert(r.res.ok, 'list drafts should succeed');
-    assert(r.data.drafts.length >= 3, `expected 3+ drafts, got ${r.data.drafts.length}`);
+    assert(r.data.drafts.length >= 2, `expected at least change + feature drafts, got ${r.data.drafts.length}`);
+    assert(r.data.drafts.some(d => d.path.startsWith('changes/')), 'server should list a changes draft');
     const serverDrafts = r.data.drafts;
 
     // 15. Read raw draft text
@@ -301,10 +304,12 @@ async function cleanup() {
     assert(typeof r.data.content === 'string' && r.data.content.length > 0, 'raw content should be non-empty');
 
     // 16. Apply without allowGoalEdit (no goal in these drafts, so this should succeed)
-    const payloads2 = serverDrafts.map(d => ({
-      path: d.path,
-      content: fs.readFileSync(path.join(kbPath, '_ai', 'drafts', srvRunId, d.path), 'utf-8'),
-    }));
+    const payloads2 = [];
+    for (const d of serverDrafts) {
+      const raw = await json('GET', `/api/projects/${slug}/drafts/${srvRunId}/raw?path=${encodeURIComponent(d.path)}`);
+      assert(raw.res.ok, `raw draft should load for ${d.path}`);
+      payloads2.push({ path: d.path, content: raw.data.content, sourceBranch: d.sourceBranch, sourceHeadCommit: d.sourceHeadCommit });
+    }
     r = await json('POST', `/api/projects/${slug}/drafts/${srvRunId}/apply`, {
       drafts: payloads2,
       allowGoalEdit: false,
@@ -323,6 +328,7 @@ async function cleanup() {
 
     // 19. Refuse: try to apply a goal draft without allowGoalEdit
     fs.mkdirSync(path.join(kbPath, '_ai', 'drafts', 'goal-test'), { recursive: true });
+    fs.mkdirSync(path.join(kbPath, '_ai', 'runs'), { recursive: true });
     fs.writeFileSync(path.join(kbPath, '_ai', 'drafts', 'goal-test', 'project-goal.md'), '# Goal — bad');
     fs.writeFileSync(path.join(kbPath, '_ai', 'runs', 'goal-test.json'), JSON.stringify({ schema: 'ai-run/v1', runId: 'goal-test' }));
     r = await json('POST', `/api/projects/${slug}/drafts/goal-test/apply`, {