@cregis-dev/cckit 0.6.5 → 0.6.6

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2025 cregis-dev
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2025 cregis-dev
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,221 +1,221 @@
-# @cregis-dev/cckit
-
-[![npm version](https://img.shields.io/npm/v/@cregis-dev/cckit.svg)](https://www.npmjs.com/package/@cregis-dev/cckit)
-[![license](https://img.shields.io/npm/l/@cregis-dev/cckit.svg)](LICENSE)
-
-Claude Code 企业级配置工具 — 编排外部工具，一条命令为团队统一 Rules、Skills、MCP、API 网关和 AI 开发方法论。
-
-## 它解决什么问题
-
-企业采用 Claude Code 时面临的核心痛点：
-
-- **配置碎片化** — 每个项目、每个开发者各自为政，编码规范、安全策略、工具链配置不一致
-- **最佳实践缺失** — AI 辅助开发需要精心设计的 Rules、Skills、Agents 才能发挥最大效能
-- **重复劳动** — 新项目需要从零配置 MCP、方法论框架、编码规范
-- **API 管理分散** — 每个开发者自行配置 API 网关和模型，无法统一管控
-
-cckit 将业界验证的 AI 开发最佳实践打包到一个 CLI 中：
-
-| 能力 | 说明 |
-|------|------|
-| **API 网关** | 统一配置企业 API 网关 URL、密钥和大模型（MiniMax、Kimi、Gemini、GPT） |
-| **Rules** | 来自 [ECC](https://github.com/affaan-m/everything-claude-code) 的企业级编码规范 — 覆盖 TypeScript、Python、Go，含安全、测试、性能、Git 工作流 |
-| **Skills** | 44+ 内置技能 + 第三方技能 — TDD、安全审计、前后端模式、数据库优化、API 设计、持续学习等 |
-| **Methodology** | 来自 [BMAD](https://www.npmjs.com/package/bmad-method) 的 AI 驱动敏捷方法论 — 核心 Agent、测试架构、需求管理 |
-| **MCP** | 预配置的 Model Context Protocol 服务器 — 文档查询、浏览器自动化、Cloudflare 集成 |
-| **Plugins** | 7 个默认插件 — ECC、Superpowers、代码简化、提交工作流、CLAUDE.md 管理等 |
-
-cckit 是**编排工具**，不是模板打包器。运行时调用外部工具（npx、git clone），不预置模板文件。
-
-## 快速开始
-
-```bash
-# 直接使用（推荐）
-npx @cregis-dev/cckit install
-
-# 或全局安装
-npm install -g @cregis-dev/cckit
-cckit install
-```
-
-交互式引导会依次：
-
-1. 配置 API 网关（默认 `gateway.cregis.ai`）和 API Key
-2. 选择大模型（MiniMax / Kimi / Gemini / GPT）
-3. 安装 Plugins、Rules、Skills、BMAD、MCP
-
-### 本地测试
-
-```bash
-node bin/cckit.js install
-```
-
-### 企业统一部署
-
-```bash
-# 全默认模式 — 适合 CI/CD 或批量初始化
-npx @cregis-dev/cckit install --yes --api-key sk-your-key
-
-# 企业标准化参数
-cckit install \
-  --user-name "TeamMember" \
-  --lang ts,py \
-  --model kimi \
-  --api-key sk-your-key \
-  --communication-language English \
-  --doc-language English \
-  --yes
-```
-
-## 命令
-
-### `cckit install`
-
-初始化项目，编排安装所有组件。
-
-| 参数 | 简写 | 默认值 | 说明 |
-|------|------|--------|------|
-| `--yes` | `-y` | `false` | 接受所有默认值 |
-| `--dir <path>` | `-d` | 当前目录 | 目标项目目录 |
-| `--user-name <name>` | — | `"User"` | 你的名字 |
-| `--lang <codes>` | `-l` | `ts,py,go` | 编程语言（逗号分隔） |
-| `--communication-language` | — | `"Chinese"` | Agent 沟通语言 |
-| `--doc-language` | — | `"Chinese"` | 文档输出语言 |
-| `--api-url <url>` | — | `gateway.cregis.ai` | API 网关地址 |
-| `--api-key <key>` | — | — | API 密钥（未提供则交互式输入） |
-| `--force-api-key` | — | `false` | 强制覆盖已有 API Key |
-| `--model <name>` | — | `minimax` | 大模型：minimax / kimi / gemini / gpt |
-| `--plugins <ids>` | — | `"default"` | 插件 ID、`"default"` 或 `"none"` |
-| `--no-bmad` | — | — | 跳过 BMAD 安装 |
-| `--no-ecc` | — | — | 跳过 ECC Rules |
-| `--no-mcp` | — | — | 跳过 MCP 配置 |
-| `--no-skills` | — | — | 跳过 Skills 安装 |
-| `--no-plugins` | — | — | 跳过插件启用 |
-| `--debug` | — | `false` | 调试输出 |
-
-### `cckit status`
-
-查看当前安装状态和各步骤执行结果。
-
-```bash
-cckit status
-cckit status -d /path/to/project
-```
-
-### `cckit update`
-
-重新执行所有安装步骤，更新组件到最新版。
-
-```bash
-cckit update            # 重新执行所有步骤
-cckit update --dry-run  # 仅预览，不修改
-cckit update --no-apply # 仅检查，更新时间戳
-cckit update --force    # 强制覆盖已修改的文件
-cckit update --model gpt --api-key sk-new  # 更新模型和密钥
-```
-
-## 安装内容
-
-### 编排步骤
-
-| 步骤 | 工具 | 目标 |
-|------|------|------|
-| **Configure User** | 写入 `~/.claude/settings.json` | API URL + API Key + 模型环境变量（用户级） |
-| **Enable Plugins** | 写入 `.claude/settings.json` | 插件 + 市场源 + 环境变量默认值（项目级） |
-| **Install BMAD** | `npx bmad-method install` | `_bmad/core`、`_bmad/bmm`、`_bmad/tea`、`.claude/commands/` |
-| **Install Rules** | `git clone` + copy | `.claude/rules/`（ECC 编码规范） |
-| **Install Skills** | `npx skills add` | 从注册的技能仓库安装 |
-| **Install MCP** | 文件复制 | `.mcp.json`（MCP 服务器配置） |
-
-### 用户级设置（`~/.claude/settings.json`）
-
-| 环境变量 | 说明 |
-|----------|------|
-| `ANTHROPIC_BASE_URL` | API 网关地址（默认 `https://gateway.cregis.ai`） |
-| `ANTHROPIC_AUTH_TOKEN` | API 密钥 |
-| `ANTHROPIC_MODEL` | 默认模型 |
-| `ANTHROPIC_SMALL_FAST_MODEL` | 快速模型 |
-| `ANTHROPIC_DEFAULT_SONNET_MODEL` | Sonnet 映射 |
-| `ANTHROPIC_DEFAULT_OPUS_MODEL` | Opus 映射 |
-| `ANTHROPIC_DEFAULT_HAIKU_MODEL` | Haiku 映射 |
-
-支持的模型：
-
-| 别名 | 模型 ID |
-|------|---------|
-| `minimax`（默认） | `MiniMax-M2.5` |
-| `kimi` | `Kimi-K2.5` |
-| `gemini` | `gemini-3.1-pro-preview` |
-| `gpt` | `gpt-5.3-codex` |
-
-### 项目级设置（`.claude/settings.json`）
-
-默认写入的环境变量：
-
-| 变量 | 值 | 说明 |
-|------|-----|------|
-| `DISABLE_BUG_COMMAND` | `1` | 禁用 /bug 命令 |
-| `DISABLE_ERROR_REPORTING` | `1` | 禁用 Sentry 错误报告 |
-| `DISABLE_TELEMETRY` | `1` | 禁用 Statsig 遥测 |
-| `MCP_TIMEOUT` | `60000` | MCP 工具超时（毫秒） |
-| `MAX_THINKING_TOKENS` | `31999` | 扩展思考最大 token 数 |
-| `CLAUDE_CODE_MAX_OUTPUT_TOKENS` | `64000` | 输出最大 token 数 |
-
-### 插件体系
-
-cckit 默认启用 7 个 Claude Code marketplace 插件，写入 `.claude/settings.json` 的 `enabledPlugins`：
-
-- **everything-claude-code** — 全套 ECC Skills/Agents/Commands
-- **superpowers** — 结构化开发工作流
-- **claude-code-setup** — 自动化分析与 CLAUDE.md 审计
-- **claude-md-management** — CLAUDE.md 改进工具
-- **code-simplifier** — 代码简化 Agent
-- **commit-commands** — Git 提交工作流
-- **firecrawl** — 网页爬取与搜索
-
-## 生成的目录结构
-
-```
-your-project/
-├── _bmad/                       # BMAD 方法论框架
-│   ├── core/                    #   核心 Agent 与 Task 定义
-│   ├── bmm/                     #   敏捷方法工作流
-│   ├── tea/                     #   测试架构企业版
-│   └── _config/                 #   配置 + manifest.yaml
-├── _bmad-output/                # BMAD 产出物（自动创建）
-│   ├── planning-artifacts/
-│   ├── implementation-artifacts/
-│   └── test-artifacts/
-├── .claude/                     # Claude Code 配置
-│   ├── rules/                   #   ECC 编码规范（按语言分目录）
-│   ├── commands/                #   BMAD 命令
-│   └── settings.json            #   插件 + 市场源 + 环境变量
-├── .mcp.json                    # Claude Code MCP 配置
-└── docs/                        # 项目文档目录
-```
-
-## 上游来源
-
-| 来源 | 类型 | 项目 |
-|------|------|------|
-| BMAD | npm (运行时) | [bmad-method](https://www.npmjs.com/package/bmad-method) |
-| ECC | Git clone (运行时) | [everything-claude-code](https://github.com/affaan-m/everything-claude-code) |
-| Skills | npm (运行时) | 按 `registry.json` 中配置的仓库 |
-
-## 系统要求
-
-- Node.js >= 18.0.0
-- git（ECC Rules 克隆需要）
-
-## 开发
-
-详见 [CONTRIBUTING.md](CONTRIBUTING.md)。
-
-```bash
-npm install
-npm test
-```
-
-## 许可证
-
-[MIT](LICENSE)
+# @cregis-dev/cckit
+
+[![npm version](https://img.shields.io/npm/v/@cregis-dev/cckit.svg)](https://www.npmjs.com/package/@cregis-dev/cckit)
+[![license](https://img.shields.io/npm/l/@cregis-dev/cckit.svg)](LICENSE)
+
+Claude Code 企业级配置工具 — 编排外部工具，一条命令为团队统一 Rules、Skills、MCP、API 网关和 AI 开发方法论。
+
+## 它解决什么问题
+
+企业采用 Claude Code 时面临的核心痛点：
+
+- **配置碎片化** — 每个项目、每个开发者各自为政，编码规范、安全策略、工具链配置不一致
+- **最佳实践缺失** — AI 辅助开发需要精心设计的 Rules、Skills、Agents 才能发挥最大效能
+- **重复劳动** — 新项目需要从零配置 MCP、方法论框架、编码规范
+- **API 管理分散** — 每个开发者自行配置 API 网关和模型，无法统一管控
+
+cckit 将业界验证的 AI 开发最佳实践打包到一个 CLI 中：
+
+| 能力 | 说明 |
+|------|------|
+| **API 网关** | 统一配置企业 API 网关 URL、密钥和大模型（MiniMax、Kimi、Gemini、GPT） |
+| **Rules** | 来自 [ECC](https://github.com/affaan-m/everything-claude-code) 的企业级编码规范 — 覆盖 TypeScript、Python、Go，含安全、测试、性能、Git 工作流 |
+| **Skills** | 44+ 内置技能 + 第三方技能 — TDD、安全审计、前后端模式、数据库优化、API 设计、持续学习等 |
+| **Methodology** | 来自 [BMAD](https://www.npmjs.com/package/bmad-method) 的 AI 驱动敏捷方法论 — 核心 Agent、测试架构、需求管理 |
+| **MCP** | 预配置的 Model Context Protocol 服务器 — 文档查询、浏览器自动化、Cloudflare 集成 |
+| **Plugins** | 7 个默认插件 — ECC、Superpowers、代码简化、提交工作流、CLAUDE.md 管理等 |
+
+cckit 是**编排工具**，不是模板打包器。运行时调用外部工具（npx、git clone），不预置模板文件。
+
+## 快速开始
+
+```bash
+# 直接使用（推荐）
+npx @cregis-dev/cckit install
+
+# 或全局安装
+npm install -g @cregis-dev/cckit
+cckit install
+```
+
+交互式引导会依次：
+
+1. 配置 API 网关（默认 `gateway.cregis.ai`）和 API Key
+2. 选择大模型（MiniMax / Kimi / Gemini / GPT）
+3. 安装 Plugins、Rules、Skills、BMAD、MCP
+
+### 本地测试
+
+```bash
+node bin/cckit.js install
+```
+
+### 企业统一部署
+
+```bash
+# 全默认模式 — 适合 CI/CD 或批量初始化
+npx @cregis-dev/cckit install --yes --api-key sk-your-key
+
+# 企业标准化参数
+cckit install \
+  --user-name "TeamMember" \
+  --lang ts,py \
+  --model kimi \
+  --api-key sk-your-key \
+  --communication-language English \
+  --doc-language English \
+  --yes
+```
+
+## 命令
+
+### `cckit install`
+
+初始化项目，编排安装所有组件。
+
+| 参数 | 简写 | 默认值 | 说明 |
+|------|------|--------|------|
+| `--yes` | `-y` | `false` | 接受所有默认值 |
+| `--dir <path>` | `-d` | 当前目录 | 目标项目目录 |
+| `--user-name <name>` | — | `"User"` | 你的名字 |
+| `--lang <codes>` | `-l` | `ts,py,go` | 编程语言（逗号分隔） |
+| `--communication-language` | — | `"Chinese"` | Agent 沟通语言 |
+| `--doc-language` | — | `"Chinese"` | 文档输出语言 |
+| `--api-url <url>` | — | `gateway.cregis.ai` | API 网关地址 |
+| `--api-key <key>` | — | — | API 密钥（未提供则交互式输入） |
+| `--force-api-key` | — | `false` | 强制覆盖已有 API Key |
+| `--model <name>` | — | `minimax` | 大模型：minimax / kimi / gemini / gpt |
+| `--plugins <ids>` | — | `"default"` | 插件 ID、`"default"` 或 `"none"` |
+| `--no-bmad` | — | — | 跳过 BMAD 安装 |
+| `--no-ecc` | — | — | 跳过 ECC Rules |
+| `--no-mcp` | — | — | 跳过 MCP 配置 |
+| `--no-skills` | — | — | 跳过 Skills 安装 |
+| `--no-plugins` | — | — | 跳过插件启用 |
+| `--debug` | — | `false` | 调试输出 |
+
+### `cckit status`
+
+查看当前安装状态和各步骤执行结果。
+
+```bash
+cckit status
+cckit status -d /path/to/project
+```
+
+### `cckit update`
+
+重新执行所有安装步骤，更新组件到最新版。
+
+```bash
+cckit update            # 重新执行所有步骤
+cckit update --dry-run  # 仅预览，不修改
+cckit update --no-apply # 仅检查，更新时间戳
+cckit update --force    # 强制覆盖已修改的文件
+cckit update --model gpt --api-key sk-new  # 更新模型和密钥
+```
+
+## 安装内容
+
+### 编排步骤
+
+| 步骤 | 工具 | 目标 |
+|------|------|------|
+| **Configure User** | 写入 `~/.claude/settings.json` | API URL + API Key + 模型环境变量（用户级） |
+| **Enable Plugins** | 写入 `.claude/settings.json` | 插件 + 市场源 + 环境变量默认值（项目级） |
+| **Install BMAD** | `npx bmad-method install` | `_bmad/core`、`_bmad/bmm`、`_bmad/tea`、`.claude/commands/` |
+| **Install Rules** | `git clone` + copy | `.claude/rules/`（ECC 编码规范） |
+| **Install Skills** | `npx skills add` | 从注册的技能仓库安装 |
+| **Install MCP** | 文件复制 | `.mcp.json`（MCP 服务器配置） |
+
+### 用户级设置（`~/.claude/settings.json`）
+
+| 环境变量 | 说明 |
+|----------|------|
+| `ANTHROPIC_BASE_URL` | API 网关地址（默认 `https://gateway.cregis.ai`） |
+| `ANTHROPIC_AUTH_TOKEN` | API 密钥 |
+| `ANTHROPIC_MODEL` | 默认模型 |
+| `ANTHROPIC_SMALL_FAST_MODEL` | 快速模型 |
+| `ANTHROPIC_DEFAULT_SONNET_MODEL` | Sonnet 映射 |
+| `ANTHROPIC_DEFAULT_OPUS_MODEL` | Opus 映射 |
+| `ANTHROPIC_DEFAULT_HAIKU_MODEL` | Haiku 映射 |
+
+支持的模型：
+
+| 别名 | 模型 ID |
+|------|---------|
+| `minimax`（默认） | `MiniMax-M2.5` |
+| `kimi` | `Kimi-K2.5` |
+| `gemini` | `gemini-3.1-pro-preview` |
+| `gpt` | `gpt-5.3-codex` |
+
+### 项目级设置（`.claude/settings.json`）
+
+默认写入的环境变量：
+
+| 变量 | 值 | 说明 |
+|------|-----|------|
+| `DISABLE_BUG_COMMAND` | `1` | 禁用 /bug 命令 |
+| `DISABLE_ERROR_REPORTING` | `1` | 禁用 Sentry 错误报告 |
+| `DISABLE_TELEMETRY` | `1` | 禁用 Statsig 遥测 |
+| `MCP_TIMEOUT` | `60000` | MCP 工具超时（毫秒） |
+| `MAX_THINKING_TOKENS` | `31999` | 扩展思考最大 token 数 |
+| `CLAUDE_CODE_MAX_OUTPUT_TOKENS` | `64000` | 输出最大 token 数 |
+
+### 插件体系
+
+cckit 默认启用 7 个 Claude Code marketplace 插件，写入 `.claude/settings.json` 的 `enabledPlugins`：
+
+- **everything-claude-code** — 全套 ECC Skills/Agents/Commands
+- **superpowers** — 结构化开发工作流
+- **claude-code-setup** — 自动化分析与 CLAUDE.md 审计
+- **claude-md-management** — CLAUDE.md 改进工具
+- **code-simplifier** — 代码简化 Agent
+- **commit-commands** — Git 提交工作流
+- **firecrawl** — 网页爬取与搜索
+
+## 生成的目录结构
+
+```
+your-project/
+├── _bmad/                       # BMAD 方法论框架
+│   ├── core/                    #   核心 Agent 与 Task 定义
+│   ├── bmm/                     #   敏捷方法工作流
+│   ├── tea/                     #   测试架构企业版
+│   └── _config/                 #   配置 + manifest.yaml
+├── _bmad-output/                # BMAD 产出物（自动创建）
+│   ├── planning-artifacts/
+│   ├── implementation-artifacts/
+│   └── test-artifacts/
+├── .claude/                     # Claude Code 配置
+│   ├── rules/                   #   ECC 编码规范（按语言分目录）
+│   ├── commands/                #   BMAD 命令
+│   └── settings.json            #   插件 + 市场源 + 环境变量
+├── .mcp.json                    # Claude Code MCP 配置
+└── docs/                        # 项目文档目录
+```
+
+## 上游来源
+
+| 来源 | 类型 | 项目 |
+|------|------|------|
+| BMAD | npm (运行时) | [bmad-method](https://www.npmjs.com/package/bmad-method) |
+| ECC | Git clone (运行时) | [everything-claude-code](https://github.com/affaan-m/everything-claude-code) |
+| Skills | npm (运行时) | 按 `registry.json` 中配置的仓库 |
+
+## 系统要求
+
+- Node.js >= 18.0.0
+- git（ECC Rules 克隆需要）
+
+## 开发
+
+详见 [CONTRIBUTING.md](CONTRIBUTING.md)。
+
+```bash
+npm install
+npm test
+```
+
+## 许可证
+
+[MIT](LICENSE)

package/bin/cckit.js

@@ -1,3 +1,3 @@
-#!/usr/bin/env node
-import { run } from '../src/cli.js'
-run(process.argv)
+#!/usr/bin/env node
+import { run } from '../src/cli.js'
+run(process.argv)

package/package.json

@@ -1,53 +1,53 @@
-{
-  "name": "@cregis-dev/cckit",
-  "version": "0.6.5",
-  "description": "Enterprise-grade Claude Code configuration toolkit — orchestrates external tools to set up unified rules, skills, MCP and methodology for teams",
-  "type": "module",
-  "bin": {
-    "cckit": "./bin/cckit.js"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "files": [
-    "bin/",
-    "src/",
-    "templates/mcp/",
-    "registry.json",
-    "templates/rules/"
-  ],
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "scripts": {
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage",
-    "release": "node scripts/release.js",
-    "release:dry": "node scripts/release.js --dry-run"
-  },
-  "keywords": [
-    "claude-code",
-    "enterprise",
-    "configuration",
-    "bmad",
-    "ecc",
-    "mcp",
-    "cli",
-    "rules",
-    "ai-coding",
-    "developer-tools",
-    "team"
-  ],
-  "license": "MIT",
-  "dependencies": {
-    "chalk": "^5.6.2",
-    "commander": "^14.0.3",
-    "fs-extra": "^11.3.3",
-    "glob": "^13.0.3",
-    "yaml": "^2.8.2"
-  },
-  "devDependencies": {
-    "vitest": "^4.0.18"
-  }
-}
+{
+  "name": "@cregis-dev/cckit",
+  "version": "0.6.6",
+  "description": "Enterprise-grade Claude Code configuration toolkit — orchestrates external tools to set up unified rules, skills, MCP and methodology for teams",
+  "type": "module",
+  "bin": {
+    "cckit": "./bin/cckit.js"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "bin/",
+    "src/",
+    "templates/mcp/",
+    "registry.json",
+    "templates/rules/"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "scripts": {
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "release": "node scripts/release.js",
+    "release:dry": "node scripts/release.js --dry-run"
+  },
+  "keywords": [
+    "claude-code",
+    "enterprise",
+    "configuration",
+    "bmad",
+    "ecc",
+    "mcp",
+    "cli",
+    "rules",
+    "ai-coding",
+    "developer-tools",
+    "team"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "chalk": "^5.6.2",
+    "commander": "^14.0.3",
+    "fs-extra": "^11.3.3",
+    "glob": "^13.0.3",
+    "yaml": "^2.8.2"
+  },
+  "devDependencies": {
+    "vitest": "^4.0.18"
+  }
+}

package/registry.json

@@ -1,5 +1,13 @@
 {
   "version": "2.0.0",
+  "versions": {
+    "plugins": "1.0.0",
+    "rules": "1.0.0",
+    "skills": "1.0.0",
+    "bmad": "1.0.0",
+    "mcp": "1.0.0",
+    "userSettings": "1.0.0"
+  },
   "plugins": {
     "everything-claude-code": {
       "name": "Everything Claude Code",
@@ -8,54 +16,63 @@
         "source": "github",
         "repo": "affaan-m/everything-claude-code"
       },
+      "scope": "project",
       "default": true,
       "description": "Rules, agents, commands, skills, and hooks for Claude Code"
     },
     "superpowers": {
       "name": "Superpowers",
       "marketplace": "claude-plugins-official",
+      "scope": "project",
       "default": true,
       "description": "Structured workflows with brainstorming, debugging, TDD, and code review skills"
     },
     "claude-code-setup": {
       "name": "Claude Code Setup",
       "marketplace": "claude-plugins-official",
+      "scope": "project",
       "default": true,
       "description": "Analyze codebases and recommend Claude Code automations, audit and improve CLAUDE.md files"
     },
     "claude-md-management": {
       "name": "Claude MD Management",
       "marketplace": "claude-plugins-official",
+      "scope": "project",
       "default": true,
       "description": "Audit, improve, and update CLAUDE.md documentation files"
     },
     "code-simplifier": {
       "name": "Code Simplifier",
       "marketplace": "claude-plugins-official",
+      "scope": "project",
       "default": true,
       "description": "Simplify and refine code for clarity, consistency, and maintainability"
     },
     "commit-commands": {
       "name": "Commit Commands",
       "marketplace": "claude-plugins-official",
+      "scope": "project",
       "default": true,
       "description": "Git commit workflows: commit, push, PR creation, and branch cleanup"
     },
     "firecrawl": {
       "name": "Firecrawl",
       "marketplace": "claude-plugins-official",
+      "scope": "project",
       "default": true,
       "description": "Web scraping, search, and skill generation using Firecrawl"
     },
     "typescript-lsp": {
       "name": "TypeScript LSP",
       "marketplace": "claude-plugins-official",
+      "scope": "project",
       "default": true,
       "description": "TypeScript language server protocol integration for enhanced TypeScript development"
     },
     "pr-review-toolkit": {
       "name": "PR Review Toolkit",
       "marketplace": "claude-plugins-official",
+      "scope": "project",
       "default": true,
       "description": "Comprehensive PR review using specialized agents"
     }

package/src/commands/init.js

@@ -12,6 +12,7 @@ import { orchestrate } from '../core/orchestrator.js'
 import { MANIFEST_REL, buildManifest, writeManifest } from '../utils/manifest.js'
 import { createLogger } from '../utils/logger.js'
 import { enablePlugins } from '../steps/enable-plugins.js'
+import { addPlugin } from '../steps/add-plugin.js'
 import { installBmad } from '../steps/install-bmad.js'
 import { installRules } from '../steps/install-rules.js'
 import { installSkills } from '../steps/install-skills.js'
@@ -53,7 +54,9 @@ export async function runInit(opts = {}, _deps = {}) {
   // Load registry and merge config
   const registry = _deps.registry || await loadRegistry()
   const config = mergeConfig(opts)
+  const versions = registry.versions || {}
   logger.debug(`Config: ${JSON.stringify(config, null, 2)}`)
+  logger.debug(`Versions: ${JSON.stringify(versions, null, 2)}`)
 
   // Resolve plugins
   const plugins = resolvePlugins(registry, config)
@@ -87,6 +90,16 @@ export async function runInit(opts = {}, _deps = {}) {
         skip: config.plugins === 'none',
       },
     },
+    // Test: CLI-based plugin installation for project-scoped plugins
+    {
+      id: 'add-plugin',
+      fn: _deps.addPlugin || addPlugin,
+      opts: {
+        targetDir,
+        plugins,
+        skip: config.plugins === 'none' || !config.cliPlugins,
+      },
+    },
     {
       id: 'install-bmad',
       fn: _deps.installBmad || installBmad,
@@ -140,7 +153,7 @@ export async function runInit(opts = {}, _deps = {}) {
   }))
 
   // Write manifest
-  const manifest = buildManifest({ config, report, version: VERSION })
+  const manifest = buildManifest({ config, report, version: VERSION, versions })
   await writeManifest(targetDir, manifest)
   logger.success(`Manifest written to ${MANIFEST_REL}`)
 

package/src/commands/status.js

@@ -5,6 +5,8 @@
 import path from 'node:path'
 import chalk from 'chalk'
 import { readManifest, isLegacyManifest } from '../utils/manifest.js'
+import { compareVersions } from '../utils/compare-versions.js'
+import { loadRegistry } from '../core/registry.js'
 
 /**
  * @param {object} opts
@@ -30,17 +32,55 @@ export async function runStatus(opts = {}) {
     return { installed: true, legacy: true, output: msg }
   }
 
+  // Load registry and compare versions
+  let registry
+  let needsUpdate = false
+  let components = {}
+  try {
+    registry = await loadRegistry()
+    const result = compareVersions(manifest, registry)
+    needsUpdate = result.needsUpdate
+    components = result.components
+  } catch {
+    // Registry load failed - skip version check
+  }
+
   const lines = []
   lines.push('')
   lines.push(chalk.bold('cckit installation status'))
   lines.push('')
 
-  // Step results
-  const steps = manifest.cckit?.steps || []
+  // Component versions
+  const installedVersions = manifest.cckit?.config?.versions || {}
+  const versionHeader = `${'Component'.padEnd(22)} ${'Installed'.padEnd(12)} ${'Latest'.padEnd(12)} ${'Status'.padEnd(24)}`
+  lines.push(chalk.bold(versionHeader))
+  lines.push('-'.repeat(70))
+
+  for (const [stepId, info] of Object.entries(components)) {
+    const current = installedVersions[info.versionKey] || 'none'
+    const latest = info.latest
+    const hasUpdate = current !== latest
+
+    const versionStatus = hasUpdate
+      ? chalk.yellow(`update (${current} -> ${latest})`)
+      : chalk.green('up to date')
+
+    lines.push(`${stepId.padEnd(22)} ${current.padEnd(12)} ${latest.padEnd(12)} ${versionStatus}`)
+  }
+
+  if (needsUpdate) {
+    lines.push('')
+    lines.push(chalk.yellow('  Updates available. Run "cckit update" to update.'))
+  }
+
+  lines.push('')
+  lines.push(chalk.bold('Step Results:'))
   const header = `${'Step'.padEnd(20)} ${'Status'.padEnd(12)} ${'Details'.padEnd(40)}`
   lines.push(header)
   lines.push('-'.repeat(72))
 
+  // Step results
+  const steps = manifest.cckit?.steps || []
   for (const step of steps) {
     const status = step.skipped
       ? chalk.gray('skipped')
@@ -81,5 +121,5 @@ export async function runStatus(opts = {}) {
   const output = lines.join('\n')
   console.log(output)
 
-  return { installed: true, cckit: manifest.cckit, output }
+  return { installed: true, cckit: manifest.cckit, output, needsUpdate, components }
 }

package/src/commands/update.js

@@ -7,11 +7,12 @@
  */
 
 import path from 'node:path'
-import fse from 'fs-extra'
+import chalk from 'chalk'
 import { loadRegistry, resolvePlugins, resolveModelId } from '../core/registry.js'
 import { DEFAULT_API_URL } from '../core/config.js'
 import { orchestrate } from '../core/orchestrator.js'
 import { readManifest, writeManifest, isLegacyManifest, serializeSteps } from '../utils/manifest.js'
+import { compareVersions } from '../utils/compare-versions.js'
 import { createLogger } from '../utils/logger.js'
 import { enablePlugins } from '../steps/enable-plugins.js'
 import { installBmad } from '../steps/install-bmad.js'
@@ -33,6 +34,7 @@ import { configureUser } from '../steps/configure-user.js'
 export async function runUpdate(opts = {}, _deps = {}) {
   const logger = _deps.logger || createLogger({ debug: opts.debug })
   const targetDir = path.resolve(opts.dir || process.cwd())
+  const registry = _deps.registry || await loadRegistry()
 
   const manifest = await readManifest(targetDir)
 
@@ -45,16 +47,38 @@ export async function runUpdate(opts = {}, _deps = {}) {
 
   logger.banner('cckit update')
 
-  // Show current step status
+  // Compare versions
+  const { needsUpdate, components } = compareVersions(manifest, registry)
+
+  // Show current step status with version info
   const steps = manifest.cckit?.steps || []
-  for (const step of steps) {
-    const status = step.skipped ? 'skipped' : step.success ? 'ok' : 'FAILED'
-    logger.info(`  ${step.stepId}: ${status}`)
+  const installedVersions = manifest.cckit?.config?.versions || {}
+
+  logger.info('')
+  logger.info(chalk.bold('Component Versions:'))
+  logger.info('')
+
+  for (const [stepId, info] of Object.entries(components)) {
+    const current = installedVersions[info.versionKey] || 'none'
+    const latest = info.latest
+    const needsUpdate = current !== latest
+
+    const status = needsUpdate
+      ? chalk.yellow(`update available (${current} -> ${latest})`)
+      : chalk.green('up to date')
+
+    logger.info(`  ${stepId}: ${status}`)
+  }
+
+  if (needsUpdate) {
+    logger.info('')
+    logger.info(chalk.yellow('  Some components have updates available.'))
+    logger.info(chalk.gray('  Run "cckit update" to apply updates.'))
   }
 
   if (opts.dryRun) {
     logger.info('\n  (dry run - no changes made)')
-    return { dryRun: true, steps }
+    return { dryRun: true, steps, needsUpdate, components }
   }
 
   if (opts.apply === false) {
@@ -62,11 +86,24 @@ export async function runUpdate(opts = {}, _deps = {}) {
     manifest.cckit.lastUpdated = new Date().toISOString()
     await writeManifest(targetDir, manifest)
     logger.success('Check complete.')
-    return { checked: true, steps }
+    return { checked: true, steps, needsUpdate, components }
+  }
+
+  // Show step status
+  logger.info('')
+  logger.info(chalk.bold('Step Status:'))
+  for (const step of steps) {
+    const status = step.skipped ? 'skipped' : step.success ? 'ok' : 'FAILED'
+    logger.info(`  ${step.stepId}: ${status}`)
+  }
+
+  if (!needsUpdate) {
+    logger.info('')
+    logger.success('All components are up to date. No update needed.')
+    return { applied: false, reason: 'already_up_to_date', needsUpdate: false }
   }
 
   // Apply mode: re-run orchestrator
-  const registry = _deps.registry || await loadRegistry()
   const config = manifest.cckit?.config || {}
   const plugins = resolvePlugins(registry, { plugins: config.plugins || 'default' })
 
@@ -136,7 +173,11 @@ export async function runUpdate(opts = {}, _deps = {}) {
 
   const report = await orchestrate(stepSpecs, logger)
 
-  // Update manifest
+  // Update manifest with new versions
+  manifest.cckit.config.versions = {
+    ...(manifest.cckit.config.versions || {}),
+    ...registry.versions,
+  }
   manifest.cckit.steps = serializeSteps(report.steps)
   manifest.cckit.fileRegistry = {
     ...(manifest.cckit.fileRegistry || {}),

package/src/core/config.js

@@ -14,6 +14,7 @@ export const DEFAULT_CONFIG = {
   document_output_language: 'Chinese',
   languages: ['typescript', 'python', 'golang'],
   plugins: 'default',
+  cliPlugins: true,  // Use Claude CLI for project-scoped plugins
   excludeGroups: []
 }
 

package/src/steps/add-plugin.js

@@ -0,0 +1,116 @@
+/**
+ * Step: Install plugins using Claude Code CLI.
+ *
+ * Uses `claude plugin install <plugin>@<marketplace> --scope <scope>` commands
+ * to install plugins at project scope.
+ */
+
+import { spawn } from 'node:child_process'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+
+/**
+ * @param {object} opts
+ * @param {string} opts.targetDir - Project root
+ * @param {Array<{id: string, def: object}>} opts.plugins - Resolved plugins with scope
+ * @param {boolean} opts.skip - Skip this step
+ * @param {object} logger
+ * @returns {Promise<import('../core/orchestrator.js').StepResult>}
+ */
+export async function addPlugin(opts, logger) {
+  if (opts.skip) {
+    return { stepId: 'add-plugin', name: 'Add Plugin (CLI)', success: true, skipped: true, details: {} }
+  }
+
+  const projectPlugins = opts.plugins.filter(p => p.def.scope === 'project' || !p.def.scope)
+
+  if (projectPlugins.length === 0) {
+    logger.debug('No project-scoped plugins to install via CLI')
+    return {
+      stepId: 'add-plugin',
+      name: 'Add Plugin (CLI)',
+      success: true,
+      skipped: false,
+      details: { installed: [], errors: [] },
+    }
+  }
+
+  const installed = []
+  const errors = []
+
+  for (const { id, def } of projectPlugins) {
+    const pluginKey = `${id}@${def.marketplace}`
+    const scope = def.scope || 'project'
+
+    try {
+      logger.info(`  Installing ${pluginKey} (scope: ${scope})...`)
+
+      await execCommand('claude', [
+        'plugin',
+        'install',
+        pluginKey,
+        '--scope',
+        scope,
+      ], logger)
+
+      installed.push({ id: pluginKey, scope })
+      logger.success(`  ✓ ${pluginKey} installed`)
+    } catch (err) {
+      errors.push({ id: pluginKey, error: err.message })
+      logger.warn(`  ✗ Failed to install ${pluginKey}: ${err.message}`)
+    }
+  }
+
+  return {
+    stepId: 'add-plugin',
+    name: 'Add Plugin (CLI)',
+    success: errors.length === 0,
+    skipped: false,
+    details: {
+      installed,
+      errors,
+    },
+  }
+}
+
+/**
+ * Execute a command and return a promise.
+ *
+ * @param {string} command - Command to run
+ * @param {string[]} args - Command arguments
+ * @param {object} logger - Logger instance
+ * @returns {Promise<void>}
+ */
+function execCommand(command, args, logger) {
+  return new Promise((resolve, reject) => {
+    const proc = spawn(command, args, {
+      shell: true,
+      stdio: 'pipe',
+    })
+
+    let stdout = ''
+    let stderr = ''
+
+    proc.stdout.on('data', (data) => {
+      stdout += data.toString()
+    })
+
+    proc.stderr.on('data', (data) => {
+      stderr += data.toString()
+    })
+
+    proc.on('close', (code) => {
+      if (code === 0) {
+        resolve()
+      } else {
+        reject(new Error(stderr || stdout || `Exit code: ${code}`))
+      }
+    })
+
+    proc.on('error', (err) => {
+      reject(err)
+    })
+  })
+}

package/src/utils/compare-versions.js

@@ -0,0 +1,106 @@
+/**
+ * Version comparison utilities for detecting configuration changes.
+ *
+ * Compares installed versions (from manifest) with registry versions
+ * to determine which components need updating.
+ */
+
+import { loadRegistry } from '../core/registry.js'
+
+/**
+ * Component map: stepId -> version key in registry.versions
+ */
+const COMPONENT_MAP = {
+  'configure-user': 'userSettings',
+  'enable-plugins': 'plugins',
+  'install-rules': 'rules',
+  'install-skills': 'skills',
+  'install-bmad': 'bmad',
+  'install-mcp': 'mcp',
+}
+
+/**
+ * Compare installed versions against registry versions.
+ *
+ * @param {object} manifest - Installed manifest with config.versions
+ * @param {object} registry - Current registry with versions
+ * @returns {object} - { needsUpdate: boolean, components: { [stepId]: { current, latest, needsUpdate } } }
+ */
+export function compareVersions(manifest, registry) {
+  const installedVersions = manifest.cckit?.config?.versions || {}
+  const latestVersions = registry.versions || {}
+
+  const components = {}
+  let needsUpdate = false
+
+  // Compare each component
+  for (const [stepId, versionKey] of Object.entries(COMPONENT_MAP)) {
+    const current = installedVersions[versionKey]
+    const latest = latestVersions[versionKey]
+
+    // If either version is missing, consider it needs update
+    const componentNeedsUpdate = !current || !latest || current !== latest
+
+    components[stepId] = {
+      versionKey,
+      current: current || 'none',
+      latest: latest || 'none',
+      needsUpdate: componentNeedsUpdate,
+    }
+
+    if (componentNeedsUpdate) {
+      needsUpdate = true
+    }
+  }
+
+  return { needsUpdate, components }
+}
+
+/**
+ * Check if specific component needs update.
+ *
+ * @param {object} manifest - Installed manifest
+ * @param {object} registry - Current registry
+ * @param {string} stepId - Step ID to check
+ * @returns {boolean}
+ */
+export function needsComponentUpdate(manifest, registry, stepId) {
+  const versionKey = COMPONENT_MAP[stepId]
+  if (!versionKey) return false
+
+  const current = manifest.cckit?.config?.versions?.[versionKey]
+  const latest = registry.versions?.[versionKey]
+
+  return !current || !latest || current !== latest
+}
+
+/**
+ * Get version info for a specific component.
+ *
+ * @param {object} registry - Current registry
+ * @returns {object} - { plugins, rules, skills, bmad, mcp, userSettings }
+ */
+export function getRegistryVersions(registry) {
+  return registry.versions || {}
+}
+
+/**
+ * Load registry and compare versions (async).
+ *
+ * @param {string} targetDir - Project directory
+ * @returns {Promise<{ needsUpdate: boolean, components: object }>}
+ */
+export async function checkForUpdates(targetDir) {
+  const { readManifest } = await import('../utils/manifest.js')
+  const registry = await loadRegistry()
+
+  let manifest
+  try {
+    manifest = await readManifest(targetDir)
+  } catch {
+    // Not installed yet
+    return { needsUpdate: true, components: {}, notInstalled: true }
+  }
+
+  return compareVersions(manifest, registry)
+}

package/src/utils/logger.js

@@ -1,16 +1,16 @@
-import chalk from 'chalk'
-
-export function createLogger(options = {}) {
-  const { write = (msg) => console.log(msg), debug: debugEnabled = false } = options
-
-  return {
-    info: (msg) => write(msg),
-    success: (msg) => write(chalk.green(`  \u2713 ${msg}`)),
-    error: (msg) => write(chalk.red(`  \u2717 ${msg}`)),
-    warn: (msg) => write(chalk.yellow(`  \u26A0 ${msg}`)),
-    debug: (msg) => { if (debugEnabled) write(chalk.gray(`  [debug] ${msg}`)) },
-    step: (current, total, msg) => write(chalk.blue(`  [${current}/${total}] ${msg}`)),
-    banner: (msg) => write(chalk.bold.green(`\n${msg}\n`)),
-    newline: () => write('')
-  }
-}
+import chalk from 'chalk'
+
+export function createLogger(options = {}) {
+  const { write = (msg) => console.log(msg), debug: debugEnabled = false } = options
+
+  return {
+    info: (msg) => write(msg),
+    success: (msg) => write(chalk.green(`  \u2713 ${msg}`)),
+    error: (msg) => write(chalk.red(`  \u2717 ${msg}`)),
+    warn: (msg) => write(chalk.yellow(`  \u26A0 ${msg}`)),
+    debug: (msg) => { if (debugEnabled) write(chalk.gray(`  [debug] ${msg}`)) },
+    step: (current, total, msg) => write(chalk.blue(`  [${current}/${total}] ${msg}`)),
+    banner: (msg) => write(chalk.bold.green(`\n${msg}\n`)),
+    newline: () => write('')
+  }
+}

package/src/utils/manifest.js

@@ -69,9 +69,10 @@ export function serializeSteps(steps) {
  * @param {object} params.config - Merged config
  * @param {import('../core/orchestrator.js').RunReport} params.report - Orchestration report
  * @param {string} params.version - cckit version
+ * @param {object} [params.versions] - Component versions from registry
  * @returns {object} Manifest object
  */
-export function buildManifest({ config, report, version }) {
+export function buildManifest({ config, report, version, versions = {} }) {
   return {
     cckit: {
       version,
@@ -81,6 +82,7 @@ export function buildManifest({ config, report, version }) {
         communication_language: config.communication_language,
         document_output_language: config.document_output_language,
         languages: config.languages,
+        versions,
       },
       steps: serializeSteps(report.steps),
       fileRegistry: report.fileRegistry,