@cjhyy/code-shell-core 0.7.1 → 0.8.0

package/dist/model-catalog/types.d.ts

@@ -6,10 +6,10 @@
  * create a configured instance (stored in settings.imageGen/videoGen.providers[]).
  * Catalog = "能配哪些"; providers[] = "配了哪些". The two are decoupled.
  *
- * `adapterKind` reuses the existing adapter selectors ("openai"/"google"/"fal")
- * — the runtime getImageProvider/getVideoProvider switches and adapter classes
- * are unchanged; the catalog only declares which template points at which
- * already-wired adapter. `shape` is documentation/future only.
+ * For text entries, `adapterKind` is the provider/gateway capability identity
+ * ("openai"/"openrouter"/"deepseek"/…), while `protocol` selects the wire
+ * client. For image/video it remains the concrete runtime adapter selector
+ * ("openai"/"google"/"fal"). `shape` is documentation/future only.
  */
 import { z } from "zod";
 /**
@@ -59,8 +59,8 @@ export declare const paramSpecSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     name: string;
     control: "number" | "text" | "enum" | "toggle";
-    options?: string[] | undefined;
     default?: string | number | boolean | undefined;
+    options?: string[] | undefined;
     label?: string | undefined;
     min?: number | undefined;
     max?: number | undefined;
@@ -71,8 +71,8 @@ export declare const paramSpecSchema: z.ZodObject<{
 }, {
     name: string;
     control: "number" | "text" | "enum" | "toggle";
-    options?: string[] | undefined;
     default?: string | number | boolean | undefined;
+    options?: string[] | undefined;
     label?: string | undefined;
     min?: number | undefined;
     max?: number | undefined;
@@ -119,8 +119,8 @@ export declare const modelPresetSchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         name: string;
         control: "number" | "text" | "enum" | "toggle";
-        options?: string[] | undefined;
         default?: string | number | boolean | undefined;
+        options?: string[] | undefined;
         label?: string | undefined;
         min?: number | undefined;
         max?: number | undefined;
@@ -131,8 +131,8 @@ export declare const modelPresetSchema: z.ZodObject<{
     }, {
         name: string;
         control: "number" | "text" | "enum" | "toggle";
-        options?: string[] | undefined;
         default?: string | number | boolean | undefined;
+        options?: string[] | undefined;
         label?: string | undefined;
         min?: number | undefined;
         max?: number | undefined;
@@ -146,8 +146,8 @@ export declare const modelPresetSchema: z.ZodObject<{
     params?: {
         name: string;
         control: "number" | "text" | "enum" | "toggle";
-        options?: string[] | undefined;
         default?: string | number | boolean | undefined;
+        options?: string[] | undefined;
         label?: string | undefined;
         min?: number | undefined;
         max?: number | undefined;
@@ -156,17 +156,17 @@ export declare const modelPresetSchema: z.ZodObject<{
             field: string;
         } | undefined;
     }[] | undefined;
-    supportsVision?: boolean | undefined;
-    maxOutputTokens?: number | undefined;
     label?: string | undefined;
     maxContextTokens?: number | undefined;
+    maxOutputTokens?: number | undefined;
+    supportsVision?: boolean | undefined;
 }, {
     value: string;
     params?: {
         name: string;
         control: "number" | "text" | "enum" | "toggle";
-        options?: string[] | undefined;
         default?: string | number | boolean | undefined;
+        options?: string[] | undefined;
         label?: string | undefined;
         min?: number | undefined;
         max?: number | undefined;
@@ -175,10 +175,10 @@ export declare const modelPresetSchema: z.ZodObject<{
             field: string;
         } | undefined;
     }[] | undefined;
-    supportsVision?: boolean | undefined;
-    maxOutputTokens?: number | undefined;
     label?: string | undefined;
     maxContextTokens?: number | undefined;
+    maxOutputTokens?: number | undefined;
+    supportsVision?: boolean | undefined;
 }>;
 export type ModelPreset = z.infer<typeof modelPresetSchema>;
 export declare const catalogEntrySchema: z.ZodObject<{
@@ -186,7 +186,11 @@ export declare const catalogEntrySchema: z.ZodObject<{
     id: z.ZodString;
     /** Which 连接 page group this lands in. (audio = speech-to-text / voice input.) */
     tag: z.ZodEnum<["text", "image", "video", "audio"]>;
-    /** Runtime adapter selector — reuses existing "openai" | "anthropic" | "google" | "fal". */
+    /**
+     * Provider/gateway identity for text (distinct from `protocol`), or concrete
+     * runtime adapter for image/video. OpenRouter is `openrouter` even though its
+     * text protocol is `openai-compat`.
+     */
     adapterKind: z.ZodString;
     /** LLM client protocol (text entries). */
     protocol: z.ZodOptional<z.ZodEnum<["openai-compat", "anthropic-style"]>>;
@@ -198,6 +202,13 @@ export declare const catalogEntrySchema: z.ZodObject<{
     defaultModel: z.ZodOptional<z.ZodString>;
     /** Whether this provider needs an API key (ollama/local = false). */
     needsKey: z.ZodOptional<z.ZodBoolean>;
+    /**
+     * How a user entry with the same id as a built-in provider contributes model
+     * presets. Absent/"replace" preserves the legacy full-override behavior;
+     * "merge" treats modelPresets as per-model additions/overrides keyed by
+     * `value`, so future built-in models remain visible.
+     */
+    modelPresetsMode: z.ZodOptional<z.ZodEnum<["replace", "merge"]>>;
     modelPresets: z.ZodOptional<z.ZodArray<z.ZodObject<{
         value: z.ZodString;
         label: z.ZodOptional<z.ZodString>;
@@ -230,8 +241,8 @@ export declare const catalogEntrySchema: z.ZodObject<{
         }, "strip", z.ZodTypeAny, {
             name: string;
             control: "number" | "text" | "enum" | "toggle";
-            options?: string[] | undefined;
             default?: string | number | boolean | undefined;
+            options?: string[] | undefined;
             label?: string | undefined;
             min?: number | undefined;
             max?: number | undefined;
@@ -242,8 +253,8 @@ export declare const catalogEntrySchema: z.ZodObject<{
         }, {
             name: string;
             control: "number" | "text" | "enum" | "toggle";
-            options?: string[] | undefined;
             default?: string | number | boolean | undefined;
+            options?: string[] | undefined;
             label?: string | undefined;
             min?: number | undefined;
             max?: number | undefined;
@@ -257,8 +268,8 @@ export declare const catalogEntrySchema: z.ZodObject<{
         params?: {
             name: string;
             control: "number" | "text" | "enum" | "toggle";
-            options?: string[] | undefined;
             default?: string | number | boolean | undefined;
+            options?: string[] | undefined;
             label?: string | undefined;
             min?: number | undefined;
             max?: number | undefined;
@@ -267,17 +278,17 @@ export declare const catalogEntrySchema: z.ZodObject<{
                 field: string;
             } | undefined;
         }[] | undefined;
-        supportsVision?: boolean | undefined;
-        maxOutputTokens?: number | undefined;
         label?: string | undefined;
         maxContextTokens?: number | undefined;
+        maxOutputTokens?: number | undefined;
+        supportsVision?: boolean | undefined;
     }, {
         value: string;
         params?: {
             name: string;
             control: "number" | "text" | "enum" | "toggle";
-            options?: string[] | undefined;
             default?: string | number | boolean | undefined;
+            options?: string[] | undefined;
             label?: string | undefined;
             min?: number | undefined;
             max?: number | undefined;
@@ -286,10 +297,10 @@ export declare const catalogEntrySchema: z.ZodObject<{
                 field: string;
             } | undefined;
         }[] | undefined;
-        supportsVision?: boolean | undefined;
-        maxOutputTokens?: number | undefined;
         label?: string | undefined;
         maxContextTokens?: number | undefined;
+        maxOutputTokens?: number | undefined;
+        supportsVision?: boolean | undefined;
     }>, "many">>;
     signupUrl: z.ZodOptional<z.ZodString>;
     /** Whether the 连接 card offers a "测试" button (image=true, video=false). */
@@ -303,22 +314,23 @@ export declare const catalogEntrySchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     id: string;
     tag: "text" | "image" | "video" | "audio";
+    description: string;
     adapterKind: string;
     displayName: string;
-    description: string;
     defaultBaseUrl: string;
     shape?: "generic-sync" | "fal-queue" | undefined;
     test?: boolean | undefined;
     defaultModel?: string | undefined;
     protocol?: "openai-compat" | "anthropic-style" | undefined;
     needsKey?: boolean | undefined;
+    modelPresetsMode?: "replace" | "merge" | undefined;
     modelPresets?: {
         value: string;
         params?: {
             name: string;
             control: "number" | "text" | "enum" | "toggle";
-            options?: string[] | undefined;
             default?: string | number | boolean | undefined;
+            options?: string[] | undefined;
             label?: string | undefined;
             min?: number | undefined;
             max?: number | undefined;
@@ -327,32 +339,33 @@ export declare const catalogEntrySchema: z.ZodObject<{
                 field: string;
             } | undefined;
         }[] | undefined;
-        supportsVision?: boolean | undefined;
-        maxOutputTokens?: number | undefined;
         label?: string | undefined;
         maxContextTokens?: number | undefined;
+        maxOutputTokens?: number | undefined;
+        supportsVision?: boolean | undefined;
     }[] | undefined;
     signupUrl?: string | undefined;
     paramsDoc?: string | undefined;
 }, {
     id: string;
     tag: "text" | "image" | "video" | "audio";
+    description: string;
     adapterKind: string;
     displayName: string;
-    description: string;
     defaultBaseUrl: string;
     shape?: "generic-sync" | "fal-queue" | undefined;
     test?: boolean | undefined;
     defaultModel?: string | undefined;
     protocol?: "openai-compat" | "anthropic-style" | undefined;
     needsKey?: boolean | undefined;
+    modelPresetsMode?: "replace" | "merge" | undefined;
     modelPresets?: {
         value: string;
         params?: {
             name: string;
             control: "number" | "text" | "enum" | "toggle";
-            options?: string[] | undefined;
             default?: string | number | boolean | undefined;
+            options?: string[] | undefined;
             label?: string | undefined;
             min?: number | undefined;
             max?: number | undefined;
@@ -361,10 +374,10 @@ export declare const catalogEntrySchema: z.ZodObject<{
                 field: string;
             } | undefined;
         }[] | undefined;
-        supportsVision?: boolean | undefined;
-        maxOutputTokens?: number | undefined;
         label?: string | undefined;
         maxContextTokens?: number | undefined;
+        maxOutputTokens?: number | undefined;
+        supportsVision?: boolean | undefined;
     }[] | undefined;
     signupUrl?: string | undefined;
     paramsDoc?: string | undefined;
@@ -376,7 +389,11 @@ export declare const userCatalogFileSchema: z.ZodArray<z.ZodObject<{
     id: z.ZodString;
     /** Which 连接 page group this lands in. (audio = speech-to-text / voice input.) */
     tag: z.ZodEnum<["text", "image", "video", "audio"]>;
-    /** Runtime adapter selector — reuses existing "openai" | "anthropic" | "google" | "fal". */
+    /**
+     * Provider/gateway identity for text (distinct from `protocol`), or concrete
+     * runtime adapter for image/video. OpenRouter is `openrouter` even though its
+     * text protocol is `openai-compat`.
+     */
     adapterKind: z.ZodString;
     /** LLM client protocol (text entries). */
     protocol: z.ZodOptional<z.ZodEnum<["openai-compat", "anthropic-style"]>>;
@@ -388,6 +405,13 @@ export declare const userCatalogFileSchema: z.ZodArray<z.ZodObject<{
     defaultModel: z.ZodOptional<z.ZodString>;
     /** Whether this provider needs an API key (ollama/local = false). */
     needsKey: z.ZodOptional<z.ZodBoolean>;
+    /**
+     * How a user entry with the same id as a built-in provider contributes model
+     * presets. Absent/"replace" preserves the legacy full-override behavior;
+     * "merge" treats modelPresets as per-model additions/overrides keyed by
+     * `value`, so future built-in models remain visible.
+     */
+    modelPresetsMode: z.ZodOptional<z.ZodEnum<["replace", "merge"]>>;
     modelPresets: z.ZodOptional<z.ZodArray<z.ZodObject<{
         value: z.ZodString;
         label: z.ZodOptional<z.ZodString>;
@@ -420,8 +444,8 @@ export declare const userCatalogFileSchema: z.ZodArray<z.ZodObject<{
         }, "strip", z.ZodTypeAny, {
             name: string;
             control: "number" | "text" | "enum" | "toggle";
-            options?: string[] | undefined;
             default?: string | number | boolean | undefined;
+            options?: string[] | undefined;
             label?: string | undefined;
             min?: number | undefined;
             max?: number | undefined;
@@ -432,8 +456,8 @@ export declare const userCatalogFileSchema: z.ZodArray<z.ZodObject<{
         }, {
             name: string;
             control: "number" | "text" | "enum" | "toggle";
-            options?: string[] | undefined;
             default?: string | number | boolean | undefined;
+            options?: string[] | undefined;
             label?: string | undefined;
             min?: number | undefined;
             max?: number | undefined;
@@ -447,8 +471,8 @@ export declare const userCatalogFileSchema: z.ZodArray<z.ZodObject<{
         params?: {
             name: string;
             control: "number" | "text" | "enum" | "toggle";
-            options?: string[] | undefined;
             default?: string | number | boolean | undefined;
+            options?: string[] | undefined;
             label?: string | undefined;
             min?: number | undefined;
             max?: number | undefined;
@@ -457,17 +481,17 @@ export declare const userCatalogFileSchema: z.ZodArray<z.ZodObject<{
                 field: string;
             } | undefined;
         }[] | undefined;
-        supportsVision?: boolean | undefined;
-        maxOutputTokens?: number | undefined;
         label?: string | undefined;
         maxContextTokens?: number | undefined;
+        maxOutputTokens?: number | undefined;
+        supportsVision?: boolean | undefined;
     }, {
         value: string;
         params?: {
             name: string;
             control: "number" | "text" | "enum" | "toggle";
-            options?: string[] | undefined;
             default?: string | number | boolean | undefined;
+            options?: string[] | undefined;
             label?: string | undefined;
             min?: number | undefined;
             max?: number | undefined;
@@ -476,10 +500,10 @@ export declare const userCatalogFileSchema: z.ZodArray<z.ZodObject<{
                 field: string;
             } | undefined;
         }[] | undefined;
-        supportsVision?: boolean | undefined;
-        maxOutputTokens?: number | undefined;
         label?: string | undefined;
         maxContextTokens?: number | undefined;
+        maxOutputTokens?: number | undefined;
+        supportsVision?: boolean | undefined;
     }>, "many">>;
     signupUrl: z.ZodOptional<z.ZodString>;
     /** Whether the 连接 card offers a "测试" button (image=true, video=false). */
@@ -493,22 +517,23 @@ export declare const userCatalogFileSchema: z.ZodArray<z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     id: string;
     tag: "text" | "image" | "video" | "audio";
+    description: string;
     adapterKind: string;
     displayName: string;
-    description: string;
     defaultBaseUrl: string;
     shape?: "generic-sync" | "fal-queue" | undefined;
     test?: boolean | undefined;
     defaultModel?: string | undefined;
     protocol?: "openai-compat" | "anthropic-style" | undefined;
     needsKey?: boolean | undefined;
+    modelPresetsMode?: "replace" | "merge" | undefined;
     modelPresets?: {
         value: string;
         params?: {
             name: string;
             control: "number" | "text" | "enum" | "toggle";
-            options?: string[] | undefined;
             default?: string | number | boolean | undefined;
+            options?: string[] | undefined;
             label?: string | undefined;
             min?: number | undefined;
             max?: number | undefined;
@@ -517,32 +542,33 @@ export declare const userCatalogFileSchema: z.ZodArray<z.ZodObject<{
                 field: string;
             } | undefined;
         }[] | undefined;
-        supportsVision?: boolean | undefined;
-        maxOutputTokens?: number | undefined;
         label?: string | undefined;
         maxContextTokens?: number | undefined;
+        maxOutputTokens?: number | undefined;
+        supportsVision?: boolean | undefined;
     }[] | undefined;
     signupUrl?: string | undefined;
     paramsDoc?: string | undefined;
 }, {
     id: string;
     tag: "text" | "image" | "video" | "audio";
+    description: string;
     adapterKind: string;
     displayName: string;
-    description: string;
     defaultBaseUrl: string;
     shape?: "generic-sync" | "fal-queue" | undefined;
     test?: boolean | undefined;
     defaultModel?: string | undefined;
     protocol?: "openai-compat" | "anthropic-style" | undefined;
     needsKey?: boolean | undefined;
+    modelPresetsMode?: "replace" | "merge" | undefined;
     modelPresets?: {
         value: string;
         params?: {
             name: string;
             control: "number" | "text" | "enum" | "toggle";
-            options?: string[] | undefined;
             default?: string | number | boolean | undefined;
+            options?: string[] | undefined;
             label?: string | undefined;
             min?: number | undefined;
             max?: number | undefined;
@@ -551,10 +577,10 @@ export declare const userCatalogFileSchema: z.ZodArray<z.ZodObject<{
                 field: string;
             } | undefined;
         }[] | undefined;
-        supportsVision?: boolean | undefined;
-        maxOutputTokens?: number | undefined;
         label?: string | undefined;
         maxContextTokens?: number | undefined;
+        maxOutputTokens?: number | undefined;
+        supportsVision?: boolean | undefined;
     }[] | undefined;
     signupUrl?: string | undefined;
     paramsDoc?: string | undefined;

package/dist/model-catalog/types.js

@@ -6,10 +6,10 @@
  * create a configured instance (stored in settings.imageGen/videoGen.providers[]).
  * Catalog = "能配哪些"; providers[] = "配了哪些". The two are decoupled.
  *
- * `adapterKind` reuses the existing adapter selectors ("openai"/"google"/"fal")
- * — the runtime getImageProvider/getVideoProvider switches and adapter classes
- * are unchanged; the catalog only declares which template points at which
- * already-wired adapter. `shape` is documentation/future only.
+ * For text entries, `adapterKind` is the provider/gateway capability identity
+ * ("openai"/"openrouter"/"deepseek"/…), while `protocol` selects the wire
+ * client. For image/video it remains the concrete runtime adapter selector
+ * ("openai"/"google"/"fal"). `shape` is documentation/future only.
  */
 import { z } from "zod";
 /**
@@ -66,7 +66,11 @@ export const catalogEntrySchema = z.object({
     id: z.string(),
     /** Which 连接 page group this lands in. (audio = speech-to-text / voice input.) */
     tag: z.enum(["text", "image", "video", "audio"]),
-    /** Runtime adapter selector — reuses existing "openai" | "anthropic" | "google" | "fal". */
+    /**
+     * Provider/gateway identity for text (distinct from `protocol`), or concrete
+     * runtime adapter for image/video. OpenRouter is `openrouter` even though its
+     * text protocol is `openai-compat`.
+     */
     adapterKind: z.string(),
     /** LLM client protocol (text entries). */
     protocol: z.enum(["openai-compat", "anthropic-style"]).optional(),
@@ -78,6 +82,13 @@ export const catalogEntrySchema = z.object({
     defaultModel: z.string().optional(),
     /** Whether this provider needs an API key (ollama/local = false). */
     needsKey: z.boolean().optional(),
+    /**
+     * How a user entry with the same id as a built-in provider contributes model
+     * presets. Absent/"replace" preserves the legacy full-override behavior;
+     * "merge" treats modelPresets as per-model additions/overrides keyed by
+     * `value`, so future built-in models remain visible.
+     */
+    modelPresetsMode: z.enum(["replace", "merge"]).optional(),
     modelPresets: z.array(modelPresetSchema).optional(),
     signupUrl: z.string().optional(),
     /** Whether the 连接 card offers a "测试" button (image=true, video=false). */

package/dist/model-catalog/upsert.d.ts

@@ -5,5 +5,7 @@
  * wraps this with backup + zod validate + atomic write.
  * See docs/superpowers/specs/2026-06-15-unified-model-catalog-design.md §7.
  */
-import type { CatalogEntry } from "./types.js";
+import type { CatalogEntry, ModelPreset } from "./types.js";
 export declare function upsertCatalogEntry(existing: CatalogEntry[], entry: CatalogEntry): CatalogEntry[];
+/** Add or replace one model preset by its provider-scoped model id. */
+export declare function upsertModelPreset(existing: ModelPreset[], preset: ModelPreset): ModelPreset[];

package/dist/model-catalog/upsert.js

@@ -6,3 +6,12 @@ export function upsertCatalogEntry(existing, entry) {
     next[idx] = entry;
     return next;
 }
+/** Add or replace one model preset by its provider-scoped model id. */
+export function upsertModelPreset(existing, preset) {
+    const idx = existing.findIndex((candidate) => candidate.value === preset.value);
+    if (idx === -1)
+        return [...existing, preset];
+    const next = existing.slice();
+    next[idx] = preset;
+    return next;
+}

package/dist/onboarding.d.ts

@@ -116,4 +116,3 @@ export declare function appendOnboardingResult(opts: {
     activeId: string;
     tag?: "text" | "image" | "video";
 }): void;
-export declare function saveArenaSettingsByKeys(keys: string[]): void;

package/dist/onboarding.js

@@ -4,7 +4,7 @@
  * (see src/ui/components/OnboardingPrompt.tsx); this module only exposes
  * pure(-ish) helpers it consumes, so there's a single input stack.
  */
-import { mkdirSync, writeFileSync, readFileSync, existsSync, renameSync, rmSync, chmodSync } from "node:fs";
+import { mkdirSync, writeFileSync, readFileSync, existsSync, renameSync, rmSync } from "node:fs";
 import { join } from "node:path";
 import { userHome } from "./settings/manager.js";
 import { getOpenRouterModels } from "./data/openrouter-models.js";
@@ -344,24 +344,3 @@ export function appendOnboardingResult(opts) {
         rmSync(tmp, { force: true });
     }
 }
-// saveArenaSettings removed — replaced by saveArenaSettingsByKeys
-export function saveArenaSettingsByKeys(keys) {
-    const dir = join(userHome(), ".code-shell");
-    const file = join(dir, "settings.json");
-    let existing = {};
-    if (existsSync(file)) {
-        try {
-            existing = JSON.parse(readFileSync(file, "utf-8"));
-        }
-        catch { }
-    }
-    const updated = {
-        ...existing,
-        arena: { participants: keys },
-    };
-    writeFileSync(file, JSON.stringify(updated, null, 2) + "\n", { encoding: "utf-8", mode: 0o600 });
-    try {
-        chmodSync(file, 0o600);
-    }
-    catch { /* best-effort */ }
-}

package/dist/panel-apps/bindings.d.ts

@@ -0,0 +1,24 @@
+export interface PanelAppBindingPolicy {
+    /** Panel Apps are unavailable without a concrete project. */
+    hasProject: boolean;
+    /** Apps explicitly bound by this project's settings. */
+    boundApps: ReadonlySet<string>;
+    /** User-level emergency/master disable switch. */
+    globalDisabledApps: ReadonlySet<string>;
+}
+/**
+ * Resolve a session/worktree cwd back to the project whose Panel App bindings
+ * it owns. Git worktrees point at `<project>/.git/worktrees/<name>` from their
+ * `.git` file; normal repositories and non-git projects use their own root.
+ */
+export declare function resolvePanelAppBindingProjectPath(cwd: string): string;
+/**
+ * Resolve the one policy shared by Desktop discovery and Skill scanning.
+ *
+ * Installed Panel Apps are a global catalog, but they contribute no UI, tools,
+ * Skills, or storage to a project until that project explicitly binds them.
+ * Legacy `panelAppOverrides.on` entries count as an explicit binding so
+ * projects that already opted in do not silently lose their app.
+ */
+export declare function resolvePanelAppBindingPolicy(userSettings: Record<string, unknown> | undefined, projectSettings: Record<string, unknown> | undefined, hasProject: boolean): PanelAppBindingPolicy;
+export declare function isPanelAppBound(appId: string, policy: PanelAppBindingPolicy): boolean;

package/dist/panel-apps/bindings.js

@@ -0,0 +1,69 @@
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { dirname, join, resolve, sep } from "node:path";
+/**
+ * Resolve a session/worktree cwd back to the project whose Panel App bindings
+ * it owns. Git worktrees point at `<project>/.git/worktrees/<name>` from their
+ * `.git` file; normal repositories and non-git projects use their own root.
+ */
+export function resolvePanelAppBindingProjectPath(cwd) {
+    if (typeof cwd !== "string" || cwd.trim().length === 0)
+        return "";
+    let current = resolve(cwd);
+    while (true) {
+        const gitEntry = join(current, ".git");
+        if (existsSync(gitEntry)) {
+            try {
+                if (statSync(gitEntry).isDirectory())
+                    return current;
+                const match = /^gitdir:\s*(.+)\s*$/i.exec(readFileSync(gitEntry, "utf8"));
+                if (!match)
+                    return current;
+                const gitDir = resolve(current, match[1]);
+                const marker = `${sep}.git${sep}worktrees${sep}`;
+                const markerIndex = gitDir.lastIndexOf(marker);
+                return markerIndex >= 0 ? gitDir.slice(0, markerIndex) : current;
+            }
+            catch {
+                return current;
+            }
+        }
+        const parent = dirname(current);
+        if (parent === current)
+            return resolve(cwd);
+        current = parent;
+    }
+}
+function stringSet(value) {
+    return new Set(Array.isArray(value)
+        ? value.filter((candidate) => typeof candidate === "string" && candidate.length > 0)
+        : []);
+}
+/**
+ * Resolve the one policy shared by Desktop discovery and Skill scanning.
+ *
+ * Installed Panel Apps are a global catalog, but they contribute no UI, tools,
+ * Skills, or storage to a project until that project explicitly binds them.
+ * Legacy `panelAppOverrides.on` entries count as an explicit binding so
+ * projects that already opted in do not silently lose their app.
+ */
+export function resolvePanelAppBindingPolicy(userSettings, projectSettings, hasProject) {
+    const globalDisabledApps = stringSet(userSettings?.disabledPanelApps);
+    const boundApps = hasProject ? stringSet(projectSettings?.panelAppBindings) : new Set();
+    const legacyOverrides = projectSettings?.panelAppOverrides &&
+        typeof projectSettings.panelAppOverrides === "object" &&
+        !Array.isArray(projectSettings.panelAppOverrides)
+        ? projectSettings.panelAppOverrides
+        : {};
+    if (hasProject) {
+        for (const [id, value] of Object.entries(legacyOverrides)) {
+            if (value === "on")
+                boundApps.add(id);
+            else if (value === "off")
+                boundApps.delete(id);
+        }
+    }
+    return { hasProject, boundApps, globalDisabledApps };
+}
+export function isPanelAppBound(appId, policy) {
+    return policy.hasProject && policy.boundApps.has(appId) && !policy.globalDisabledApps.has(appId);
+}

package/dist/panel-apps/github-archive.d.ts

@@ -0,0 +1,21 @@
+/**
+ * 只描述这里真正用到的能力：「用一个 URL 和 init 调用它，拿回 Response」。
+ *
+ * 刻意不写成 `typeof globalThis.fetch`。那是**完整**的运行时 fetch，包含
+ * 实现自带的挂载属性——Bun 1.3 加了 `fetch.preconnect` 之后，每个只提供函数
+ * 的测试 stub 都不再满足这个类型（`Property 'preconnect' is missing`），
+ * 尽管本文件从头到尾只调用它。绑定到实际契约上，让运行时给 fetch 加静态属性
+ * 不再变成下游的类型破坏。
+ */
+export type PanelAppArchiveFetch = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+export interface GitHubPanelAppArchiveSource {
+    url: string;
+    ref?: string;
+}
+/**
+ * Download one atomic GitHub source snapshot with bounded memory and disk use.
+ * Codeload avoids the smart-Git checkout path that can strand git-remote-https
+ * helpers on poor networks. The caller selectively extracts the requested
+ * Panel App subdirectory afterward.
+ */
+export declare function downloadGitHubPanelAppArchive(source: GitHubPanelAppArchiveSource, targetPath: string, fetchImpl?: PanelAppArchiveFetch): Promise<void>;