sumulige-claude 1.0.5 → 1.0.7

package/.claude/hooks/privacy-filter.js

@@ -0,0 +1,224 @@
+/**
+ * Privacy Filter - 过滤对话中的敏感信息
+ *
+ * 功能：
+ * - 检测并过滤 API Key、Token 等敏感信息
+ * - 支持自定义过滤规则
+ * - 保留敏感信息的标记而非完全删除
+ */
+
+const fs = require('fs');
+const path = require('path');
+
+// 敏感信息模式匹配
+const SENSITIVE_PATTERNS = [
+  // API Keys (sk-开头，通常很长)
+  {
+    pattern: /sk-[a-zA-Z0-9_-]{20,}/g,
+    replace: 'sk-[REDACTED]',
+    name: 'OpenAI API Key'
+  },
+  // Bearer Tokens (JWT格式)
+  {
+    pattern: /Bearer\s+[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/gi,
+    replace: 'Bearer [REDACTED]',
+    name: 'Bearer Token'
+  },
+  // API Key/Token/Secret 配置格式
+  {
+    pattern: /(?:api[_-]?key|token|secret|password|passwd)["'']?\s*[:=]\s*["'']([a-zA-Z0-9_\-+=]{8,})["'']?/gi,
+    replace: (match) => {
+      const key = match.split(/[:=]/)[0].trim();
+      return `${key}: [REDACTED]`;
+    },
+    name: 'Config Key'
+  },
+  // URL 中的敏感参数
+  {
+    pattern: /([?&](key|token|api[_-]?key|secret|password|passwd)=)[a-zA-Z0-9_\-+=%]{8,}/gi,
+    replace: '$1[REDACTED]',
+    name: 'URL Param'
+  },
+  // JSON 中的敏感字段
+  {
+    pattern: /(["'](?:api[_-]?key|token|secret|password|passwd)["']\s*:\s*["'])([a-zA-Z0-9_\-+=]{8,})(["'])/gi,
+    replace: '$1[REDACTED]$3',
+    name: 'JSON Field'
+  },
+  // AWS Access Key
+  {
+    pattern: /AKIA[0-9A-Z]{16}/g,
+    replace: 'AKIA[REDACTED]',
+    name: 'AWS Access Key'
+  },
+  // GitHub Token
+  {
+    pattern: /ghp_[a-zA-Z0-9]{36,}/g,
+    replace: 'ghp_[REDACTED]',
+    name: 'GitHub Token'
+  },
+  // 信用卡号 (简单模式)
+  {
+    pattern: /\b\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}\b/g,
+    replace: '[CARD-REDACTED]',
+    name: 'Credit Card'
+  },
+  // IP 地址 (可选)
+  {
+    pattern: /\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/g,
+    replace: '[IP-REDACTED]',
+    name: 'IP Address'
+  },
+  // 邮箱 (可选)
+  {
+    pattern: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}\b/g,
+    replace: '[EMAIL-REDACTED]',
+    name: 'Email'
+  }
+];
+
+/**
+ * 过滤文本中的敏感信息
+ * @param {string} text - 原始文本
+ * @param {Object} options - 选项
+ * @returns {Object} { filteredText, detectedItems }
+ */
+function filterSensitive(text, options = {}) {
+  const {
+    excludePatterns = [],      // 排除的模式名称
+    includePatterns = [],      // 只包含的模式名称
+    markOnly = false,          // 只标记不过滤
+  } = options;
+
+  let filteredText = text;
+  const detectedItems = [];
+
+  // 确定要使用的模式
+  let patterns = SENSITIVE_PATTERNS;
+  if (includePatterns.length > 0) {
+    patterns = patterns.filter(p => includePatterns.includes(p.name));
+  }
+  if (excludePatterns.length > 0) {
+    patterns = patterns.filter(p => !excludePatterns.includes(p.name));
+  }
+
+  // 应用每个模式
+  patterns.forEach(pattern => {
+    const matches = text.matchAll(pattern.pattern);
+    for (const match of matches) {
+      detectedItems.push({
+        type: pattern.name,
+        original: match[0],
+        position: match.index,
+        length: match[0].length
+      });
+    }
+
+    if (markOnly) {
+      // 只标记，不过滤
+      filteredText = filteredText.replace(pattern.pattern, `🚨${match[0]}🚨`);
+    } else {
+      // 过滤替换
+      if (typeof pattern.replace === 'string') {
+        filteredText = filteredText.replace(pattern.pattern, pattern.replace);
+      } else if (typeof pattern.replace === 'function') {
+        filteredText = filteredText.replace(pattern.pattern, pattern.replace);
+      }
+    }
+  });
+
+  return {
+    filteredText,
+    detectedItems,
+    hasSensitive: detectedItems.length > 0
+  };
+}
+
+/**
+ * 检查文本是否包含敏感信息
+ */
+function hasSensitive(text) {
+  for (const pattern of SENSITIVE_PATTERNS) {
+    if (pattern.pattern.test(text)) {
+      return true;
+    }
+  }
+  return false;
+}
+
+/**
+ * 获取所有可用的模式名称
+ */
+function getPatternNames() {
+  return SENSITIVE_PATTERNS.map(p => p.name);
+}
+
+// CLI 使用
+if (require.main === module) {
+  const args = process.argv.slice(2);
+
+  if (args[0] === '--check') {
+    // 检查文件
+    const filePath = args[1];
+    if (!filePath) {
+      console.error('Usage: node privacy-filter.js --check <file>');
+      process.exit(1);
+    }
+    const content = fs.readFileSync(filePath, 'utf-8');
+    const result = filterSensitive(content);
+
+    if (result.hasSensitive) {
+      console.log(`🚨 检测到 ${result.detectedItems.length} 处敏感信息:`);
+      result.detectedItems.forEach(item => {
+        console.log(`  - [${item.type}] ${item.original.substring(0, 50)}...`);
+      });
+      process.exit(1);
+    } else {
+      console.log('✅ 未检测到敏感信息');
+      process.exit(0);
+    }
+  } else if (args[0] === '--filter') {
+    // 过滤文件
+    const filePath = args[1];
+    const outputPath = args[2] || filePath;
+
+    if (!filePath) {
+      console.error('Usage: node privacy-filter.js --filter <input> [output]');
+      process.exit(1);
+    }
+
+    const content = fs.readFileSync(filePath, 'utf-8');
+    const result = filterSensitive(content);
+
+    fs.writeFileSync(outputPath, result.filteredText, 'utf-8');
+
+    if (result.hasSensitive) {
+      console.log(`⚠️ 已过滤 ${result.detectedItems.length} 处敏感信息 → ${outputPath}`);
+    } else {
+      console.log(`✅ 无敏感信息，已复制 → ${outputPath}`);
+    }
+  } else if (args[0] === '--patterns') {
+    // 列出所有模式
+    console.log('可用的过滤模式:');
+    getPatternNames().forEach(name => console.log(`  - ${name}`));
+  } else {
+    console.log(`
+Privacy Filter - 敏感信息过滤工具
+
+用法:
+  node privacy-filter.js --check <file>          检查文件是否包含敏感信息
+  node privacy-filter.js --filter <input> [out] 过滤敏感信息
+  node privacy-filter.js --patterns              列出所有过滤模式
+
+导出使用:
+  const { filterSensitive, hasSensitive } = require('./privacy-filter.js');
+    `);
+  }
+}
+
+module.exports = {
+  filterSensitive,
+  hasSensitive,
+  getPatternNames,
+  SENSITIVE_PATTERNS
+};

package/.claude/hooks/project-kickoff.cjs

@@ -0,0 +1,114 @@
+#!/usr/bin/env node
+/**
+ * Project Kickoff Hook - Manus-style project initialization
+ *
+ * 触发条件:
+ * - 检测到新项目 (缺少 PROJECT_KICKOFF.md)
+ * - 用户明确请求项目启动
+ *
+ * 功能:
+ * - 检查项目是否已启动
+ * - 如果未启动，提示 AI 进行项目规划
+ */
+
+const fs = require('fs');
+const path = require('path');
+
+const PROJECT_DIR = process.env.CLAUDE_PROJECT_DIR || process.cwd();
+const TEMPLATES_DIR = path.join(PROJECT_DIR, '.claude/templates');
+const KICKOFF_FILE = path.join(PROJECT_DIR, 'PROJECT_KICKOFF.md');
+const PLAN_FILE = path.join(PROJECT_DIR, 'TASK_PLAN.md');
+const PROPOSAL_FILE = path.join(PROJECT_DIR, 'PROJECT_PROPOSAL.md');
+const HINT_FILE = path.join(PROJECT_DIR, '.claude/.kickoff-hint.txt');
+
+// 检查项目是否已启动
+function isProjectStarted() {
+  return fs.existsSync(KICKOFF_FILE);
+}
+
+// 检查是否为强制启动模式
+function isForceKickoff() {
+  const toolInput = process.env.CLAUDE_TOOL_INPUT || '';
+  return toolInput.includes('kickoff') ||
+         toolInput.includes('项目启动') ||
+         toolInput.includes('project plan') ||
+         toolInput.includes('重新规划');
+}
+
+// 生成启动提示
+function generateKickoffHint() {
+  const now = new Date().toISOString().split('T')[0];
+
+  return `
+╔══════════════════════════════════════════════════════════════════════╗
+║                    🚀 项目启动检测 (Project Kickoff)                 ║
+╚══════════════════════════════════════════════════════════════════════╝
+
+检测到此项目尚未完成启动流程。
+
+根据 Manus 风格的 AI 2.0 开发范式，在开始编码前，我们需要：
+
+═══════════════════════════════════════════════════════════════════════
+
+📋 第一步: 项目启动清单 (PROJECT_KICKOFF.md)
+   ├── 定义项目目标和成功标准
+   ├── 明确技术约束和非技术约束
+   └── 划定 AI/Human 责任边界
+
+📋 第二步: 任务执行计划 (TASK_PLAN.md)
+   ├── 任务分解 (WBS)
+   ├── 依赖关系分析
+   ├── Agent 分配策略
+   └── 检查点设置
+
+📋 第三步: 项目计划书 (PROJECT_PROPOSAL.md)
+   ├── 技术架构设计
+   ├── 功能需求分析
+   ├── 开发迭代规划
+   └── 风险评估
+
+═══════════════════════════════════════════════════════════════════════
+
+🎯 下一步行动:
+
+请回答以下问题，我将为你生成完整的项目规划：
+
+1. 项目名称是什么？
+2. 用一句话描述这个项目要解决什么问题？
+3. 核心目标是什么？（成功标准是什么？）
+4. 有什么技术约束或偏好？（语言/框架/部署等）
+5. 预期的时间框架是怎样的？
+
+回答这些问题后，我将：
+✅ 生成 PROJECT_KICKOFF.md
+✅ 生成 TASK_PLAN.md
+✅ 生成 PROJECT_PROPOSAL.md
+✅ 等待你的确认后开始执行
+
+═══════════════════════════════════════════════════════════════════════
+
+💡 提示: 你也可以直接说 "跳过启动" 使用传统开发模式
+
+生成日期: ${now}
+`;
+}
+
+// 主函数
+function main() {
+  // 如果项目已启动且不是强制模式，静默退出
+  if (isProjectStarted() && !isForceKickoff()) {
+    process.exit(0);
+  }
+
+  // 生成提示文件
+  const hint = generateKickoffHint();
+  fs.mkdirSync(path.dirname(HINT_FILE), { recursive: true });
+  fs.writeFileSync(HINT_FILE, hint);
+
+  // 同时输出到 stdout (供 AI 直接读取)
+  console.log(hint);
+
+  process.exit(0);
+}
+
+main();

package/.claude/hooks/rag-skill-loader.cjs

@@ -0,0 +1,159 @@
+#!/usr/bin/env node
+/**
+ * RAG Skill Loader - 动态技能感知加载器
+ *
+ * 基于用户任务内容，自动检测并加载相关技能
+ * 无感知运行，零打扰
+ */
+
+const fs = require('fs');
+const path = require('path');
+
+const PROJECT_DIR = process.env.CLAUDE_PROJECT_DIR || process.cwd();
+const RAG_DIR = path.join(PROJECT_DIR, '.claude/rag');
+const SKILL_INDEX_FILE = path.join(RAG_DIR, 'skill-index.json');
+const SKILLS_DIR = path.join(PROJECT_DIR, '.claude/skills');
+
+// 技能关键词匹配权重
+const KEYWORD_WEIGHTS = {
+  exact: 1.0,      // 完全匹配
+  partial: 0.8,    // 部分匹配
+  related: 0.5     // 相关匹配
+};
+
+// 加载技能索引
+function loadSkillIndex() {
+  if (!fs.existsSync(SKILL_INDEX_FILE)) {
+    return { skills: [], auto_load: { enabled: false } };
+  }
+  try {
+    return JSON.parse(fs.readFileSync(SKILL_INDEX_FILE, 'utf-8'));
+  } catch (e) {
+    return { skills: [], auto_load: { enabled: false } };
+  }
+}
+
+// 分析用户输入，提取关键词
+function analyzeInput(input) {
+  const toolName = process.env.CLAUDE_TOOL_NAME || '';
+  const lowerInput = input.toLowerCase();
+
+  // 关键词提取
+  const keywords = [
+    // 前端相关
+    'frontend', 'ui', 'react', 'vue', 'component', 'design', 'styling', 'css', 'tailwind',
+    // 文档相关
+    'document', 'docx', 'word', 'pdf', 'ppt', 'slide', 'spreadsheet', 'excel', 'xlsx',
+    // 艺术相关
+    'art', 'design', 'creative', 'poster', 'generative', 'algorithmic', 'canvas',
+    // 测试相关
+    'test', 'testing', 'e2e', 'automation', 'browser',
+    // Agent 相关
+    'agent', 'orchestration', 'workflow', 'multi-agent',
+    // 工具相关
+    'mcp', 'api', 'server', 'integration', 'cli'
+  ];
+
+  const found = keywords.filter(k => lowerInput.includes(k));
+  return {
+    keywords: found,
+    toolName,
+    inputLength: input.length
+  };
+}
+
+// 匹配技能
+function matchSkills(analysis, skillIndex) {
+  const { keywords, toolName } = analysis;
+  const matches = [];
+
+  for (const skill of skillIndex.skills) {
+    let score = 0;
+    let matchedKeywords = [];
+
+    for (const keyword of keywords) {
+      for (const skillKeyword of skill.keywords) {
+        if (skillKeyword === keyword) {
+          score += KEYWORD_WEIGHTS.exact;
+          matchedKeywords.push(keyword);
+        } else if (skillKeyword.includes(keyword) || keyword.includes(skillKeyword)) {
+          score += KEYWORD_WEIGHTS.partial;
+          matchedKeywords.push(keyword);
+        }
+      }
+    }
+
+    // 工具名称匹配
+    if (toolName && skill.keywords.some(k => toolName.toLowerCase().includes(k))) {
+      score += KEYWORD_WEIGHTS.related;
+    }
+
+    if (score > 0) {
+      matches.push({
+        name: skill.name,
+        score: score,
+        keywords: matchedKeywords,
+        description: skill.description
+      });
+    }
+  }
+
+  // 按分数排序
+  return matches.sort((a, b) => b.score - a.score);
+}
+
+// 生成技能加载提示
+function generateSkillLoadHint(matches) {
+  if (matches.length === 0) {
+    return '';
+  }
+
+  const topMatches = matches.slice(0, 3);
+  const skillNames = topMatches.map(m => m.name).join(', ');
+
+  return `
+🧠 [RAG] 检测到相关技能: ${skillNames}
+
+使用方式: openskills read <skill-name>
+
+匹配详情:
+${topMatches.map(m => `  - ${m.name}: ${(m.score).toFixed(1)} (${m.keywords.join(', ')})`).join('\n')}
+`;
+}
+
+// 主函数 - 完全静默，输出到文件
+function main() {
+  try {
+    const skillIndex = loadSkillIndex();
+    if (!skillIndex.auto_load?.enabled) {
+      process.exit(0);
+    }
+
+    const toolInput = process.env.CLAUDE_TOOL_INPUT || '';
+    if (!toolInput || toolInput.length < 10) {
+      process.exit(0);
+    }
+
+    const analysis = analyzeInput(toolInput);
+    if (analysis.keywords.length === 0) {
+      process.exit(0);
+    }
+
+    const matches = matchSkills(analysis, skillIndex);
+    if (matches.length === 0) {
+      process.exit(0);
+    }
+
+    // 将提示写入文件供 AI 阅读
+    const hint = generateSkillLoadHint(matches);
+    const hintFile = path.join(RAG_DIR, '.skill-hint.txt');
+    fs.writeFileSync(hintFile, hint + '\n');
+
+  } catch (e) {
+    // 完全静默
+  }
+
+  process.exit(0);
+}
+
+main();

package/.claude/hooks/session-end.sh

@@ -0,0 +1,61 @@
+#!/bin/bash
+# 会话结束 Hook - 自动生成对话摘要并同步到 PROJECT_LOG.md
+#
+# 用法：在 shell 中 source 此文件
+# source .claude/hooks/session-end.sh
+#
+# 或者添加到 ~/.zshrc 或 ~/.bashrc：
+#   source /path/to/project/.claude/hooks/session-end.sh
+
+# 检测是否在项目目录中
+CLAUDE_PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+
+# 会话数据文件
+THINKING_DIR="$CLAUDE_PROJECT_DIR/.claude/thinking-routes"
+ACTIVITY_FILE="$THINKING_DIR/.conversation-flow.json"
+PROJECT_LOG="$CLAUDE_PROJECT_DIR/.claude/PROJECT_LOG.md"
+
+# 生成会话摘要并追加到 PROJECT_LOG.md
+save_session_summary() {
+    # 只在项目目录内执行
+    if [[ ! -f "$ACTIVITY_FILE" ]]; then
+        return
+    fi
+
+    local today=$(date +%Y-%m-%d)
+    local time=$(date +%H:%M:%S)
+    local turn_count=0
+
+    # 读取对话流数据
+    if [[ -f "$ACTIVITY_FILE" ]]; then
+        turn_count=$(node -e "
+            const fs = require('fs');
+            try {
+                const flow = JSON.parse(fs.readFileSync('$ACTIVITY_FILE', 'utf-8'));
+                console.log(flow.turns ? flow.turns.length : 0);
+            } catch(e) {
+                console.log(0);
+            }
+        " 2>/dev/null || echo "0")
+    fi
+
+    # 只在有对话记录时保存
+    if [[ "$turn_count" -gt 0 ]]; then
+        # 追加到 PROJECT_LOG.md
+        cat >> "$PROJECT_LOG" << EOF
+
+## $today $time - 会话结束
+- 对话轮次: $turn_count
+- 会话文件: .claude/thinking-routes/.conversation-flow.json
+- 查看摘要: 运行 \`.claude/hooks/tl-summary.sh\`
+
+---
+EOF
+    fi
+}
+
+# 注册退出时的处理
+trap 'save_session_summary' EXIT INT TERM
+
+# 导出函数供手动调用
+export -f save_session_summary

package/.claude/hooks/sync-to-log.sh

@@ -0,0 +1,83 @@
+#!/bin/bash
+# 对话摘要同步脚本 - 将对话摘要追加到 PROJECT_LOG.md
+# 用法: .claude/hooks/sync-to-log.sh
+
+set -e
+
+# 自动检测项目目录
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+CLAUDE_PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(cd "$SCRIPT_DIR/../.." && pwd)}"
+
+THINKING_DIR="$CLAUDE_PROJECT_DIR/.claude/thinking-routes"
+ACTIVITY_FILE="$THINKING_DIR/.conversation-flow.json"
+PROJECT_LOG="$CLAUDE_PROJECT_DIR/.claude/PROJECT_LOG.md"
+SESSION_FILE="$THINKING_DIR/.current-session"
+
+# 确保目录存在
+mkdir -p "$THINKING_DIR"
+
+# 获取对话数据
+if [[ ! -f "$ACTIVITY_FILE" ]]; then
+    echo "❌ 没有对话记录"
+    exit 0
+fi
+
+# 生成摘要
+SUMMARY=$(node -e "
+const fs = require('fs');
+const flow = JSON.parse(fs.readFileSync('$ACTIVITY_FILE', 'utf-8'));
+
+const turns = flow.turns || [];
+const today = new Date().toISOString().split('T')[0];
+
+// 统计今天的对话
+const todayTurns = turns.filter(t => t.time && t.time.startsWith(today));
+
+// 统计工具使用
+const toolCounts = {};
+todayTurns.forEach(t => {
+    const tool = t.toolName || 'unknown';
+    toolCounts[tool] = (toolCounts[tool] || 0) + 1;
+});
+
+// 生成工具使用统计
+const toolStats = Object.entries(toolCounts)
+    .sort((a, b) => b[1] - a[1])
+    .slice(0, 5)
+    .map(([tool, count]) => \`  - \${tool}: \${count}\`)
+    .join('\\n');
+
+// 获取最近活动
+const recent = todayTurns.slice(-3).map(t => {
+    const time = t.time ? t.time.split('T')[1].split(':')[0] + ':' + t.time.split('T')[1].split(':')[1] : '??:??';
+    return \`  - \${time} \${t.toolName || 'unknown'}\`;
+}).join('\\n');
+
+console.log('## ' + today + ' - 对话摘要');
+console.log('');
+console.log('### 统计');
+console.log('- 对话轮次: ' + todayTurns.length);
+console.log('- 会话 ID: ' + (flow.sessionId || 'unknown'));
+console.log('');
+console.log('### 工具使用');
+console.log(toolStats || '  (无)');
+console.log('');
+console.log('### 最近活动');
+console.log(recent || '  (无)');
+console.log('');
+console.log('---');
+" 2>/dev/null || echo "生成摘要失败")
+
+# 追加到 PROJECT_LOG.md
+if [[ -n "$SUMMARY" ]]; then
+    # 检查今天是否已有记录
+    today=$(date +%Y-%m-%d)
+    if grep -q "^## $today" "$PROJECT_LOG" 2>/dev/null; then
+        # 更新今天的记录（删除旧记录，追加新的）
+        # 简单处理：直接追加
+        echo "$SUMMARY" >> "$PROJECT_LOG"
+    else
+        echo "$SUMMARY" >> "$PROJECT_LOG"
+    fi
+    echo "✅ 已同步到 PROJECT_LOG.md"
+fi