vibe-forge 0.8.1 → 0.8.2

package/.claude/hooks/worker-loop.js

@@ -1,217 +1,220 @@
-#!/usr/bin/env node
-/**
- * Vibe Forge Worker Loop - Stop Hook (Cross-Platform)
- *
- * Implements the Ralph Loop technique for Vibe Forge workers.
- * When a worker tries to exit, this hook checks if there are pending tasks
- * and feeds the worker prompt back to continue working.
- *
- * Based on the Ralph Loop plugin by Anthropic.
- *
- * Activation modes:
- * 1. Config-based: worker_loop_enabled=true in .forge/config.json
- * 2. Runtime: State file created by /worker-loop command
- */
-
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-
-// State file location (runtime toggle)
-const claudeLocalDir = process.env.CLAUDE_LOCAL_DIR || path.join(os.homedir(), '.claude');
-const stateFile = path.join(claudeLocalDir, 'forge-worker-loop.json');
-// SEC-005: Validate FORGE_ROOT to prevent path traversal via attacker-controlled env
-const rawForgeRoot = process.env.FORGE_ROOT || process.cwd();
-const forgeRoot = validateForgeRoot(rawForgeRoot) ? rawForgeRoot : null;
-
-function validateForgeRoot(dir) {
-  try {
-    // Must contain tasks/ and .forge/ (or config/) to be a valid forge project
-    const hasTasksDir = fs.existsSync(path.join(dir, 'tasks'));
-    const hasForgeDir = fs.existsSync(path.join(dir, '.forge')) || fs.existsSync(path.join(dir, 'config'));
-    return hasTasksDir && hasForgeDir;
-  } catch (_) {
-    return false;
-  }
-}
-
-// Helper to safely parse JSON
-function safeJsonParse(filePath, defaultValue = {}) {
-  try {
-    if (fs.existsSync(filePath)) {
-      return JSON.parse(fs.readFileSync(filePath, 'utf8'));
-    }
-  } catch (e) {
-    // Ignore parse errors
-  }
-  return defaultValue;
-}
-
-// Helper to count matching files
-function countFiles(dir, pattern = '*.md') {
-  try {
-    if (!fs.existsSync(dir)) return 0;
-    const files = fs.readdirSync(dir);
-    return files.filter(f => f.endsWith('.md')).length;
-  } catch (e) {
-    return 0;
-  }
-}
-
-// Helper to count files with specific content
-function countFilesWithContent(dir, searchPattern) {
-  try {
-    if (!fs.existsSync(dir)) return 0;
-    const files = fs.readdirSync(dir).filter(f => f.endsWith('.md'));
-    let count = 0;
-    for (const file of files) {
-      try {
-        const content = fs.readFileSync(path.join(dir, file), 'utf8');
-        if (content.includes(searchPattern)) {
-          count++;
-        }
-      } catch (e) {
-        // Skip files we can't read
-      }
-    }
-    return count;
-  } catch (e) {
-    return 0;
-  }
-}
-
-// Output result and exit
-function output(result) {
-  console.log(JSON.stringify(result));
-  process.exit(0);
-}
-
-// Main logic
-function main() {
-  // SEC-005: Abort safely if forge root is invalid
-  if (!forgeRoot) {
-    output({ decision: 'allow' });
-    return;
-  }
-
-  let loopActive = false;
-  let workerAgent = '';
-  let maxIdleChecks = 10;
-  let idleCount = 0;
-  let pollInterval = 5;
-
-  // Check for runtime state file first (takes precedence)
-  if (fs.existsSync(stateFile)) {
-    const state = safeJsonParse(stateFile);
-    loopActive = true;
-    workerAgent = state.agent || '';
-    maxIdleChecks = state.max_idle_checks || 10;
-    idleCount = state.idle_count || 0;
-    pollInterval = state.poll_interval || 5;
-  }
-
-  // If no runtime state, check config-based setting
-  if (!loopActive) {
-    const configFile = path.join(forgeRoot, '.forge', 'config.json');
-    const config = safeJsonParse(configFile);
-    if (config.worker_loop_enabled === true) {
-      loopActive = true;
-      workerAgent = 'any';
-    }
-  }
-
-  // Check if worker loop is active
-  if (!loopActive) {
-    return output({ decision: 'approve' });
-  }
-
-  if (!workerAgent) {
-    // Invalid state, clean up and allow exit
-    try { fs.unlinkSync(stateFile); } catch (e) {}
-    return output({ decision: 'approve' });
-  }
-
-  // Determine tasks directory location
-  // When running from vibe-forge repo: tasks are at ./tasks/
-  // When running from a project using vibe-forge as submodule: tasks are at ./_vibe-forge/tasks/
-  let tasksDir = path.join(forgeRoot, 'tasks');
-  if (!fs.existsSync(tasksDir)) {
-    // Fall back to submodule location
-    tasksDir = path.join(forgeRoot, '_vibe-forge', 'tasks');
-  }
-
-  // Check for pending tasks
-  let pendingCount = 0;
-  let needsChangesCount = 0;
-
-  const pendingDir = path.join(tasksDir, 'pending');
-  const needsChangesDir = path.join(tasksDir, 'needs-changes');
-
-  if (workerAgent === 'any') {
-    // Config mode: count all tasks
-    pendingCount = countFiles(pendingDir);
-    needsChangesCount = countFiles(needsChangesDir);
-  } else {
-    // Runtime mode: count only tasks assigned to specific worker
-    const searchPattern = `assigned_to: ${workerAgent}`;
-    pendingCount = countFilesWithContent(pendingDir, searchPattern);
-    needsChangesCount = countFilesWithContent(needsChangesDir, searchPattern);
-  }
-
-  const totalTasks = pendingCount + needsChangesCount;
-
-  // Get relative task path for prompts (relative to forgeRoot)
-  const relativeTasksPath = path.relative(forgeRoot, tasksDir);
-
-  if (totalTasks > 0) {
-    // Tasks found! Reset idle counter and continue
-    if (fs.existsSync(stateFile)) {
-      try {
-        const state = safeJsonParse(stateFile);
-        state.idle_count = 0;
-        fs.writeFileSync(stateFile, JSON.stringify(state, null, 2));
-      } catch (e) {}
-    }
-
-    return output({
-      decision: 'block',
-      message: `[Forge Loop] Found ${totalTasks} pending task(s). Continuing work...`,
-      prompt: `Check ${relativeTasksPath}/pending/ and ${relativeTasksPath}/needs-changes/ for tasks assigned to you and begin working on them immediately.`
-    });
-  }
-
-  // No tasks - handle idle state
-  if (fs.existsSync(stateFile)) {
-    idleCount++;
-
-    try {
-      const state = safeJsonParse(stateFile);
-      state.idle_count = idleCount;
-      fs.writeFileSync(stateFile, JSON.stringify(state, null, 2));
-    } catch (e) {}
-
-    if (idleCount >= maxIdleChecks) {
-      // Max idle checks reached, clean up and allow exit
-      try { fs.unlinkSync(stateFile); } catch (e) {}
-      return output({
-        decision: 'approve',
-        message: `[Forge Loop] No tasks found after ${maxIdleChecks} checks. Exiting.`
-      });
-    }
-
-    // Still within idle limit - wait and check again
-    return output({
-      decision: 'block',
-      message: `[Forge Loop] No tasks available. Idle check ${idleCount}/${maxIdleChecks}. Waiting...`,
-      prompt: `No tasks currently assigned to you. Wait briefly, then check ${relativeTasksPath}/pending/ and ${relativeTasksPath}/needs-changes/ again for new work. If still no tasks, announce you are idle and ready.`
-    });
-  }
-
-  // Config-based mode - no idle tracking, just allow exit when no tasks
-  return output({
-    decision: 'approve',
-    message: '[Forge Loop] No pending tasks. Worker exiting.'
-  });
-}
-
-main();
+#!/usr/bin/env node
+/**
+ * Vibe Forge Worker Loop - Stop Hook (Cross-Platform)
+ *
+ * Implements the Ralph Loop technique for Vibe Forge workers.
+ * When a worker tries to exit, this hook checks if there are pending tasks
+ * and feeds the worker prompt back to continue working.
+ *
+ * Based on the Ralph Loop plugin by Anthropic.
+ *
+ * Activation modes:
+ * 1. Config-based: worker_loop_enabled=true in .forge/config.json
+ * 2. Runtime: State file created by /worker-loop command
+ */
+
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+
+// State file location (runtime toggle)
+const claudeLocalDir = process.env.CLAUDE_LOCAL_DIR || path.join(os.homedir(), '.claude');
+const stateFile = path.join(claudeLocalDir, 'forge-worker-loop.json');
+// SEC-005: Validate FORGE_ROOT to prevent path traversal via attacker-controlled env
+const rawForgeRoot = process.env.FORGE_ROOT || process.cwd();
+const forgeRoot = validateForgeRoot(rawForgeRoot) ? rawForgeRoot : null;
+
+function validateForgeRoot(dir) {
+  try {
+    if (!dir || typeof dir !== 'string') return false;
+    // Must be an absolute path to prevent cwd-relative resolution
+    if (!path.isAbsolute(dir)) return false;
+    // Must contain tasks/ and .forge/ (or config/) to be a valid forge project
+    const hasTasksDir = fs.existsSync(path.join(dir, 'tasks'));
+    const hasForgeDir = fs.existsSync(path.join(dir, '.forge')) || fs.existsSync(path.join(dir, 'config'));
+    return hasTasksDir && hasForgeDir;
+  } catch (_) {
+    return false;
+  }
+}
+
+// Helper to safely parse JSON
+function safeJsonParse(filePath, defaultValue = {}) {
+  try {
+    if (fs.existsSync(filePath)) {
+      return JSON.parse(fs.readFileSync(filePath, 'utf8'));
+    }
+  } catch (e) {
+    // Ignore parse errors
+  }
+  return defaultValue;
+}
+
+// Helper to count matching files
+function countFiles(dir, pattern = '*.md') {
+  try {
+    if (!fs.existsSync(dir)) return 0;
+    const files = fs.readdirSync(dir);
+    return files.filter(f => f.endsWith('.md')).length;
+  } catch (e) {
+    return 0;
+  }
+}
+
+// Helper to count files with specific content
+function countFilesWithContent(dir, searchPattern) {
+  try {
+    if (!fs.existsSync(dir)) return 0;
+    const files = fs.readdirSync(dir).filter(f => f.endsWith('.md'));
+    let count = 0;
+    for (const file of files) {
+      try {
+        const content = fs.readFileSync(path.join(dir, file), 'utf8');
+        if (content.includes(searchPattern)) {
+          count++;
+        }
+      } catch (e) {
+        // Skip files we can't read
+      }
+    }
+    return count;
+  } catch (e) {
+    return 0;
+  }
+}
+
+// Output result and exit
+function output(result) {
+  console.log(JSON.stringify(result));
+  process.exit(0);
+}
+
+// Main logic
+function main() {
+  // SEC-005: Abort safely if forge root is invalid
+  if (!forgeRoot) {
+    output({ decision: 'allow' });
+    return;
+  }
+
+  let loopActive = false;
+  let workerAgent = '';
+  let maxIdleChecks = 10;
+  let idleCount = 0;
+  let pollInterval = 5;
+
+  // Check for runtime state file first (takes precedence)
+  if (fs.existsSync(stateFile)) {
+    const state = safeJsonParse(stateFile);
+    loopActive = true;
+    workerAgent = state.agent || '';
+    maxIdleChecks = state.max_idle_checks || 10;
+    idleCount = state.idle_count || 0;
+    pollInterval = state.poll_interval || 5;
+  }
+
+  // If no runtime state, check config-based setting
+  if (!loopActive) {
+    const configFile = path.join(forgeRoot, '.forge', 'config.json');
+    const config = safeJsonParse(configFile);
+    if (config.worker_loop_enabled === true) {
+      loopActive = true;
+      workerAgent = 'any';
+    }
+  }
+
+  // Check if worker loop is active
+  if (!loopActive) {
+    return output({ decision: 'approve' });
+  }
+
+  if (!workerAgent) {
+    // Invalid state, clean up and allow exit
+    try { fs.unlinkSync(stateFile); } catch (e) {}
+    return output({ decision: 'approve' });
+  }
+
+  // Determine tasks directory location
+  // When running from vibe-forge repo: tasks are at ./tasks/
+  // When running from a project using vibe-forge as submodule: tasks are at ./_vibe-forge/tasks/
+  let tasksDir = path.join(forgeRoot, 'tasks');
+  if (!fs.existsSync(tasksDir)) {
+    // Fall back to submodule location
+    tasksDir = path.join(forgeRoot, '_vibe-forge', 'tasks');
+  }
+
+  // Check for pending tasks
+  let pendingCount = 0;
+  let needsChangesCount = 0;
+
+  const pendingDir = path.join(tasksDir, 'pending');
+  const needsChangesDir = path.join(tasksDir, 'needs-changes');
+
+  if (workerAgent === 'any') {
+    // Config mode: count all tasks
+    pendingCount = countFiles(pendingDir);
+    needsChangesCount = countFiles(needsChangesDir);
+  } else {
+    // Runtime mode: count only tasks assigned to specific worker
+    const searchPattern = `assigned_to: ${workerAgent}`;
+    pendingCount = countFilesWithContent(pendingDir, searchPattern);
+    needsChangesCount = countFilesWithContent(needsChangesDir, searchPattern);
+  }
+
+  const totalTasks = pendingCount + needsChangesCount;
+
+  // Get relative task path for prompts (relative to forgeRoot)
+  const relativeTasksPath = path.relative(forgeRoot, tasksDir);
+
+  if (totalTasks > 0) {
+    // Tasks found! Reset idle counter and continue
+    if (fs.existsSync(stateFile)) {
+      try {
+        const state = safeJsonParse(stateFile);
+        state.idle_count = 0;
+        fs.writeFileSync(stateFile, JSON.stringify(state, null, 2));
+      } catch (e) {}
+    }
+
+    return output({
+      decision: 'block',
+      message: `[Forge Loop] Found ${totalTasks} pending task(s). Continuing work...`,
+      prompt: `Check ${relativeTasksPath}/pending/ and ${relativeTasksPath}/needs-changes/ for tasks assigned to you and begin working on them immediately.`
+    });
+  }
+
+  // No tasks - handle idle state
+  if (fs.existsSync(stateFile)) {
+    idleCount++;
+
+    try {
+      const state = safeJsonParse(stateFile);
+      state.idle_count = idleCount;
+      fs.writeFileSync(stateFile, JSON.stringify(state, null, 2));
+    } catch (e) {}
+
+    if (idleCount >= maxIdleChecks) {
+      // Max idle checks reached, clean up and allow exit
+      try { fs.unlinkSync(stateFile); } catch (e) {}
+      return output({
+        decision: 'approve',
+        message: `[Forge Loop] No tasks found after ${maxIdleChecks} checks. Exiting.`
+      });
+    }
+
+    // Still within idle limit - wait and check again
+    return output({
+      decision: 'block',
+      message: `[Forge Loop] No tasks available. Idle check ${idleCount}/${maxIdleChecks}. Waiting...`,
+      prompt: `No tasks currently assigned to you. Wait briefly, then check ${relativeTasksPath}/pending/ and ${relativeTasksPath}/needs-changes/ again for new work. If still no tasks, announce you are idle and ready.`
+    });
+  }
+
+  // Config-based mode - no idle tracking, just allow exit when no tasks
+  return output({
+    decision: 'approve',
+    message: '[Forge Loop] No pending tasks. Worker exiting.'
+  });
+}
+
+main();

package/.claude/settings.json

@@ -1,89 +1,89 @@
-{
-  "_comment": "Project-level permissions for Vibe Forge agents. These allow agents to work without --dangerously-skip-permissions while still gating destructive operations.",
-  "permissions": {
-    "allow": [
-      "Read",
-      "Edit",
-      "Write",
-      "Glob",
-      "Grep",
-      "Bash(ls:*)",
-      "Bash(cat:*)",
-      "Bash(head:*)",
-      "Bash(tail:*)",
-      "Bash(wc:*)",
-      "Bash(mkdir:*)",
-      "Bash(cp:*)",
-      "Bash(mv:*)",
-      "Bash(node:*)",
-      "Bash(npx:*)",
-      "Bash(npm test*)",
-      "Bash(npm run*)",
-      "Bash(npm ci*)",
-      "Bash(npm install*)",
-      "Bash(npm audit*)",
-      "Bash(npm view*)",
-      "Bash(npm version*)",
-      "Bash(git status*)",
-      "Bash(git diff*)",
-      "Bash(git log*)",
-      "Bash(git branch*)",
-      "Bash(git checkout*)",
-      "Bash(git switch*)",
-      "Bash(git add*)",
-      "Bash(git commit*)",
-      "Bash(git pull*)",
-      "Bash(git push*)",
-      "Bash(git rm*)",
-      "Bash(git stash*)",
-      "Bash(git show*)",
-      "Bash(git merge*)",
-      "Bash(git rebase*)",
-      "Bash(gh pr*)",
-      "Bash(gh run*)",
-      "Bash(gh repo*)",
-      "Bash(gh workflow*)",
-      "Bash(gh secret list*)",
-      "Bash(sqlite3:*)",
-      "Bash(find:*)",
-      "Bash(grep:*)",
-      "Bash(sed:*)",
-      "Bash(awk:*)",
-      "Bash(sort:*)",
-      "Bash(echo:*)",
-      "Bash(printf:*)",
-      "Bash(date:*)",
-      "Bash(basename:*)",
-      "Bash(dirname:*)",
-      "Bash(realpath:*)",
-      "Bash(which:*)",
-      "Bash(command:*)",
-      "Bash(sleep:*)",
-      "Bash(cd:*)"
-    ]
-  },
-  "hooks": {
-    "PreToolUse": [
-      {
-        "matcher": "Bash",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "node bin/lib/heimdall.js"
-          }
-        ]
-      }
-    ],
-    "Stop": [
-      {
-        "matcher": "",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "node .claude/hooks/worker-loop.js"
-          }
-        ]
-      }
-    ]
-  }
-}
+{
+  "_comment": "Project-level permissions for Vibe Forge agents. These allow agents to work without --dangerously-skip-permissions while still gating destructive operations.",
+  "permissions": {
+    "allow": [
+      "Read",
+      "Edit",
+      "Write",
+      "Glob",
+      "Grep",
+      "Bash(ls:*)",
+      "Bash(cat:*)",
+      "Bash(head:*)",
+      "Bash(tail:*)",
+      "Bash(wc:*)",
+      "Bash(mkdir:*)",
+      "Bash(cp:*)",
+      "Bash(mv:*)",
+      "Bash(node:*)",
+      "Bash(npx:*)",
+      "Bash(npm test*)",
+      "Bash(npm run*)",
+      "Bash(npm ci*)",
+      "Bash(npm install*)",
+      "Bash(npm audit*)",
+      "Bash(npm view*)",
+      "Bash(npm version*)",
+      "Bash(git status*)",
+      "Bash(git diff*)",
+      "Bash(git log*)",
+      "Bash(git branch*)",
+      "Bash(git checkout*)",
+      "Bash(git switch*)",
+      "Bash(git add*)",
+      "Bash(git commit*)",
+      "Bash(git pull*)",
+      "Bash(git push*)",
+      "Bash(git rm*)",
+      "Bash(git stash*)",
+      "Bash(git show*)",
+      "Bash(git merge*)",
+      "Bash(git rebase*)",
+      "Bash(gh pr*)",
+      "Bash(gh run*)",
+      "Bash(gh repo*)",
+      "Bash(gh workflow*)",
+      "Bash(gh secret list*)",
+      "Bash(sqlite3:*)",
+      "Bash(find:*)",
+      "Bash(grep:*)",
+      "Bash(sed:*)",
+      "Bash(awk:*)",
+      "Bash(sort:*)",
+      "Bash(echo:*)",
+      "Bash(printf:*)",
+      "Bash(date:*)",
+      "Bash(basename:*)",
+      "Bash(dirname:*)",
+      "Bash(realpath:*)",
+      "Bash(which:*)",
+      "Bash(command:*)",
+      "Bash(sleep:*)",
+      "Bash(cd:*)"
+    ]
+  },
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node src/lib/heimdall.js"
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node .claude/hooks/worker-loop.js"
+          }
+        ]
+      }
+    ]
+  }
+}