vibe-forge 0.3.12 → 0.8.1

package/.claude/hooks/worker-loop.js

@@ -0,0 +1,217 @@
+#!/usr/bin/env node
+/**
+ * Vibe Forge Worker Loop - Stop Hook (Cross-Platform)
+ *
+ * Implements the Ralph Loop technique for Vibe Forge workers.
+ * When a worker tries to exit, this hook checks if there are pending tasks
+ * and feeds the worker prompt back to continue working.
+ *
+ * Based on the Ralph Loop plugin by Anthropic.
+ *
+ * Activation modes:
+ * 1. Config-based: worker_loop_enabled=true in .forge/config.json
+ * 2. Runtime: State file created by /worker-loop command
+ */
+
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+
+// State file location (runtime toggle)
+const claudeLocalDir = process.env.CLAUDE_LOCAL_DIR || path.join(os.homedir(), '.claude');
+const stateFile = path.join(claudeLocalDir, 'forge-worker-loop.json');
+// SEC-005: Validate FORGE_ROOT to prevent path traversal via attacker-controlled env
+const rawForgeRoot = process.env.FORGE_ROOT || process.cwd();
+const forgeRoot = validateForgeRoot(rawForgeRoot) ? rawForgeRoot : null;
+
+function validateForgeRoot(dir) {
+  try {
+    // Must contain tasks/ and .forge/ (or config/) to be a valid forge project
+    const hasTasksDir = fs.existsSync(path.join(dir, 'tasks'));
+    const hasForgeDir = fs.existsSync(path.join(dir, '.forge')) || fs.existsSync(path.join(dir, 'config'));
+    return hasTasksDir && hasForgeDir;
+  } catch (_) {
+    return false;
+  }
+}
+
+// Helper to safely parse JSON
+function safeJsonParse(filePath, defaultValue = {}) {
+  try {
+    if (fs.existsSync(filePath)) {
+      return JSON.parse(fs.readFileSync(filePath, 'utf8'));
+    }
+  } catch (e) {
+    // Ignore parse errors
+  }
+  return defaultValue;
+}
+
+// Helper to count matching files
+function countFiles(dir, pattern = '*.md') {
+  try {
+    if (!fs.existsSync(dir)) return 0;
+    const files = fs.readdirSync(dir);
+    return files.filter(f => f.endsWith('.md')).length;
+  } catch (e) {
+    return 0;
+  }
+}
+
+// Helper to count files with specific content
+function countFilesWithContent(dir, searchPattern) {
+  try {
+    if (!fs.existsSync(dir)) return 0;
+    const files = fs.readdirSync(dir).filter(f => f.endsWith('.md'));
+    let count = 0;
+    for (const file of files) {
+      try {
+        const content = fs.readFileSync(path.join(dir, file), 'utf8');
+        if (content.includes(searchPattern)) {
+          count++;
+        }
+      } catch (e) {
+        // Skip files we can't read
+      }
+    }
+    return count;
+  } catch (e) {
+    return 0;
+  }
+}
+
+// Output result and exit
+function output(result) {
+  console.log(JSON.stringify(result));
+  process.exit(0);
+}
+
+// Main logic
+function main() {
+  // SEC-005: Abort safely if forge root is invalid
+  if (!forgeRoot) {
+    output({ decision: 'allow' });
+    return;
+  }
+
+  let loopActive = false;
+  let workerAgent = '';
+  let maxIdleChecks = 10;
+  let idleCount = 0;
+  let pollInterval = 5;
+
+  // Check for runtime state file first (takes precedence)
+  if (fs.existsSync(stateFile)) {
+    const state = safeJsonParse(stateFile);
+    loopActive = true;
+    workerAgent = state.agent || '';
+    maxIdleChecks = state.max_idle_checks || 10;
+    idleCount = state.idle_count || 0;
+    pollInterval = state.poll_interval || 5;
+  }
+
+  // If no runtime state, check config-based setting
+  if (!loopActive) {
+    const configFile = path.join(forgeRoot, '.forge', 'config.json');
+    const config = safeJsonParse(configFile);
+    if (config.worker_loop_enabled === true) {
+      loopActive = true;
+      workerAgent = 'any';
+    }
+  }
+
+  // Check if worker loop is active
+  if (!loopActive) {
+    return output({ decision: 'approve' });
+  }
+
+  if (!workerAgent) {
+    // Invalid state, clean up and allow exit
+    try { fs.unlinkSync(stateFile); } catch (e) {}
+    return output({ decision: 'approve' });
+  }
+
+  // Determine tasks directory location
+  // When running from vibe-forge repo: tasks are at ./tasks/
+  // When running from a project using vibe-forge as submodule: tasks are at ./_vibe-forge/tasks/
+  let tasksDir = path.join(forgeRoot, 'tasks');
+  if (!fs.existsSync(tasksDir)) {
+    // Fall back to submodule location
+    tasksDir = path.join(forgeRoot, '_vibe-forge', 'tasks');
+  }
+
+  // Check for pending tasks
+  let pendingCount = 0;
+  let needsChangesCount = 0;
+
+  const pendingDir = path.join(tasksDir, 'pending');
+  const needsChangesDir = path.join(tasksDir, 'needs-changes');
+
+  if (workerAgent === 'any') {
+    // Config mode: count all tasks
+    pendingCount = countFiles(pendingDir);
+    needsChangesCount = countFiles(needsChangesDir);
+  } else {
+    // Runtime mode: count only tasks assigned to specific worker
+    const searchPattern = `assigned_to: ${workerAgent}`;
+    pendingCount = countFilesWithContent(pendingDir, searchPattern);
+    needsChangesCount = countFilesWithContent(needsChangesDir, searchPattern);
+  }
+
+  const totalTasks = pendingCount + needsChangesCount;
+
+  // Get relative task path for prompts (relative to forgeRoot)
+  const relativeTasksPath = path.relative(forgeRoot, tasksDir);
+
+  if (totalTasks > 0) {
+    // Tasks found! Reset idle counter and continue
+    if (fs.existsSync(stateFile)) {
+      try {
+        const state = safeJsonParse(stateFile);
+        state.idle_count = 0;
+        fs.writeFileSync(stateFile, JSON.stringify(state, null, 2));
+      } catch (e) {}
+    }
+
+    return output({
+      decision: 'block',
+      message: `[Forge Loop] Found ${totalTasks} pending task(s). Continuing work...`,
+      prompt: `Check ${relativeTasksPath}/pending/ and ${relativeTasksPath}/needs-changes/ for tasks assigned to you and begin working on them immediately.`
+    });
+  }
+
+  // No tasks - handle idle state
+  if (fs.existsSync(stateFile)) {
+    idleCount++;
+
+    try {
+      const state = safeJsonParse(stateFile);
+      state.idle_count = idleCount;
+      fs.writeFileSync(stateFile, JSON.stringify(state, null, 2));
+    } catch (e) {}
+
+    if (idleCount >= maxIdleChecks) {
+      // Max idle checks reached, clean up and allow exit
+      try { fs.unlinkSync(stateFile); } catch (e) {}
+      return output({
+        decision: 'approve',
+        message: `[Forge Loop] No tasks found after ${maxIdleChecks} checks. Exiting.`
+      });
+    }
+
+    // Still within idle limit - wait and check again
+    return output({
+      decision: 'block',
+      message: `[Forge Loop] No tasks available. Idle check ${idleCount}/${maxIdleChecks}. Waiting...`,
+      prompt: `No tasks currently assigned to you. Wait briefly, then check ${relativeTasksPath}/pending/ and ${relativeTasksPath}/needs-changes/ again for new work. If still no tasks, announce you are idle and ready.`
+    });
+  }
+
+  // Config-based mode - no idle tracking, just allow exit when no tasks
+  return output({
+    decision: 'approve',
+    message: '[Forge Loop] No pending tasks. Worker exiting.'
+  });
+}
+
+main();

package/.claude/scripts/setup-worker-loop.sh

@@ -1,45 +1,45 @@
-#!/usr/bin/env bash
-#
-# Setup Worker Loop
-# Creates state file to enable the worker loop stop hook
-#
-
-set -euo pipefail
-
-AGENT="${1:-}"
-MAX_IDLE="${2:-10}"
-STATE_DIR="${CLAUDE_LOCAL_DIR:-$HOME/.claude}"
-STATE_FILE="$STATE_DIR/forge-worker-loop.json"
-
-if [[ "$AGENT" == "stop" ]]; then
-    if [[ -f "$STATE_FILE" ]]; then
-        rm -f "$STATE_FILE"
-        echo "Worker loop stopped."
-    else
-        echo "No active worker loop."
-    fi
-    exit 0
-fi
-
-if [[ -z "$AGENT" ]]; then
-    echo "Usage: setup-worker-loop.sh <agent> [max-idle-checks]"
-    echo "       setup-worker-loop.sh stop"
-    exit 1
-fi
-
-# Ensure state directory exists
-mkdir -p "$STATE_DIR"
-
-# Create state file
-cat > "$STATE_FILE" << EOF
-{
-  "agent": "$AGENT",
-  "max_idle_checks": $MAX_IDLE,
-  "idle_count": 0,
-  "poll_interval": 5,
-  "started_at": "$(date -u +%Y-%m-%dT%H:%M:%SZ)"
-}
-EOF
-
-echo "Worker loop started for $AGENT (max idle: $MAX_IDLE checks)"
-echo "State file: $STATE_FILE"
+#!/usr/bin/env bash
+#
+# Setup Worker Loop
+# Creates state file to enable the worker loop stop hook
+#
+
+set -euo pipefail
+
+AGENT="${1:-}"
+MAX_IDLE="${2:-10}"
+STATE_DIR="${CLAUDE_LOCAL_DIR:-$HOME/.claude}"
+STATE_FILE="$STATE_DIR/forge-worker-loop.json"
+
+if [[ "$AGENT" == "stop" ]]; then
+    if [[ -f "$STATE_FILE" ]]; then
+        rm -f "$STATE_FILE"
+        echo "Worker loop stopped."
+    else
+        echo "No active worker loop."
+    fi
+    exit 0
+fi
+
+if [[ -z "$AGENT" ]]; then
+    echo "Usage: setup-worker-loop.sh <agent> [max-idle-checks]"
+    echo "       setup-worker-loop.sh stop"
+    exit 1
+fi
+
+# Ensure state directory exists
+mkdir -p "$STATE_DIR"
+
+# Create state file
+cat > "$STATE_FILE" << EOF
+{
+  "agent": "$AGENT",
+  "max_idle_checks": $MAX_IDLE,
+  "idle_count": 0,
+  "poll_interval": 5,
+  "started_at": "$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+}
+EOF
+
+echo "Worker loop started for $AGENT (max idle: $MAX_IDLE checks)"
+echo "State file: $STATE_FILE"

package/.claude/settings.json

@@ -0,0 +1,89 @@
+{
+  "_comment": "Project-level permissions for Vibe Forge agents. These allow agents to work without --dangerously-skip-permissions while still gating destructive operations.",
+  "permissions": {
+    "allow": [
+      "Read",
+      "Edit",
+      "Write",
+      "Glob",
+      "Grep",
+      "Bash(ls:*)",
+      "Bash(cat:*)",
+      "Bash(head:*)",
+      "Bash(tail:*)",
+      "Bash(wc:*)",
+      "Bash(mkdir:*)",
+      "Bash(cp:*)",
+      "Bash(mv:*)",
+      "Bash(node:*)",
+      "Bash(npx:*)",
+      "Bash(npm test*)",
+      "Bash(npm run*)",
+      "Bash(npm ci*)",
+      "Bash(npm install*)",
+      "Bash(npm audit*)",
+      "Bash(npm view*)",
+      "Bash(npm version*)",
+      "Bash(git status*)",
+      "Bash(git diff*)",
+      "Bash(git log*)",
+      "Bash(git branch*)",
+      "Bash(git checkout*)",
+      "Bash(git switch*)",
+      "Bash(git add*)",
+      "Bash(git commit*)",
+      "Bash(git pull*)",
+      "Bash(git push*)",
+      "Bash(git rm*)",
+      "Bash(git stash*)",
+      "Bash(git show*)",
+      "Bash(git merge*)",
+      "Bash(git rebase*)",
+      "Bash(gh pr*)",
+      "Bash(gh run*)",
+      "Bash(gh repo*)",
+      "Bash(gh workflow*)",
+      "Bash(gh secret list*)",
+      "Bash(sqlite3:*)",
+      "Bash(find:*)",
+      "Bash(grep:*)",
+      "Bash(sed:*)",
+      "Bash(awk:*)",
+      "Bash(sort:*)",
+      "Bash(echo:*)",
+      "Bash(printf:*)",
+      "Bash(date:*)",
+      "Bash(basename:*)",
+      "Bash(dirname:*)",
+      "Bash(realpath:*)",
+      "Bash(which:*)",
+      "Bash(command:*)",
+      "Bash(sleep:*)",
+      "Bash(cd:*)"
+    ]
+  },
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node bin/lib/heimdall.js"
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node .claude/hooks/worker-loop.js"
+          }
+        ]
+      }
+    ]
+  }
+}

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 SpasticPalate
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 sugar-crash-studios
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.