@jsonstudio/rcc 0.90.876 → 0.90.1270

package/node_modules/@jsonstudio/llms/dist/tools/exec-command/normalize.js

@@ -44,21 +44,28 @@ const dropToon = (value) => {
     }
     catch { }
 };
-export function normalizeExecCommandArgs(args) {
-    const base = unwrapExecArgsShape(args);
-    const cmdCandidate = asPrimitiveString(base.cmd) ??
-        asPrimitiveString(base.command) ??
-        asPrimitiveString(base.toon) ??
-        asPrimitiveString(base.script) ??
-        (() => {
-            const arr = asStringArray(base.command) ?? asStringArray(base.cmd);
-            return arr?.join(' ');
-        })();
+export function normalizeExecCommandArgs(args, options) {
+    const canonicalOnly = options?.schemaMode === 'canonical';
+    const base = canonicalOnly
+        ? (isRecord(args) ? { ...args } : {})
+        : unwrapExecArgsShape(args);
+    const cmdCandidate = (canonicalOnly
+        ? asNonEmptyString(base.cmd)
+        : (asPrimitiveString(base.cmd) ??
+            asPrimitiveString(base.command) ??
+            asPrimitiveString(base.toon) ??
+            asPrimitiveString(base.script) ??
+            (() => {
+                const arr = asStringArray(base.command) ?? asStringArray(base.cmd);
+                return arr?.join(' ');
+            })()));
     dropToon(base);
     if (!cmdCandidate)
         return { ok: false, reason: 'missing_cmd', normalized: base };
     const normalized = { cmd: repairFindMeta(cmdCandidate) };
-    const workdir = asNonEmptyString(base.workdir) ?? asNonEmptyString(base.cwd) ?? asNonEmptyString(base.workDir);
+    const workdir = canonicalOnly
+        ? asNonEmptyString(base.workdir)
+        : (asNonEmptyString(base.workdir) ?? asNonEmptyString(base.cwd) ?? asNonEmptyString(base.workDir));
     if (workdir)
         normalized.workdir = workdir;
     const login = asBoolean(base.login);
@@ -67,23 +74,31 @@ export function normalizeExecCommandArgs(args) {
     const tty = asBoolean(base.tty);
     if (tty !== undefined)
         normalized.tty = tty;
-    const timeoutMs = asFiniteNumber(base.timeout_ms) ?? asFiniteNumber(base.timeoutMs);
+    const timeoutMs = canonicalOnly
+        ? asFiniteNumber(base.timeout_ms)
+        : (asFiniteNumber(base.timeout_ms) ?? asFiniteNumber(base.timeoutMs));
     if (timeoutMs !== undefined)
         normalized.timeout_ms = timeoutMs;
     const shell = asNonEmptyString(base.shell);
     if (shell)
         normalized.shell = shell;
-    const sandboxPermissions = asNonEmptyString(base.sandbox_permissions) ??
-        (asBoolean(base.with_escalated_permissions) ? 'require_escalated' : undefined);
+    const sandboxPermissions = canonicalOnly
+        ? asNonEmptyString(base.sandbox_permissions)
+        : (asNonEmptyString(base.sandbox_permissions) ??
+            (asBoolean(base.with_escalated_permissions) ? 'require_escalated' : undefined));
     if (sandboxPermissions)
         normalized.sandbox_permissions = sandboxPermissions;
     const justification = asNonEmptyString(base.justification);
     if (justification)
         normalized.justification = justification;
-    const maxOutput = asFiniteNumber(base.max_output_tokens) ?? asFiniteNumber(base.max_tokens);
+    const maxOutput = canonicalOnly
+        ? asFiniteNumber(base.max_output_tokens)
+        : (asFiniteNumber(base.max_output_tokens) ?? asFiniteNumber(base.max_tokens));
     if (maxOutput !== undefined)
         normalized.max_output_tokens = maxOutput;
-    const yieldTime = asFiniteNumber(base.yield_time_ms) ?? asFiniteNumber(base.yield_ms) ?? asFiniteNumber(base.wait_ms);
+    const yieldTime = canonicalOnly
+        ? asFiniteNumber(base.yield_time_ms)
+        : (asFiniteNumber(base.yield_time_ms) ?? asFiniteNumber(base.yield_ms) ?? asFiniteNumber(base.wait_ms));
     if (yieldTime !== undefined)
         normalized.yield_time_ms = yieldTime;
     return { ok: true, normalized };

package/node_modules/@jsonstudio/llms/dist/tools/exec-command/validator.d.ts

@@ -6,5 +6,6 @@ export type ExecCommandValidationResult = {
 };
 export type ExecCommandValidationOptions = {
     policyFile?: string;
+    schemaMode?: 'compat' | 'canonical';
 };
 export declare function validateExecCommandArgs(argsString: string, rawArgs: unknown, options?: ExecCommandValidationOptions): ExecCommandValidationResult;

package/node_modules/@jsonstudio/llms/dist/tools/exec-command/validator.js

@@ -231,7 +231,9 @@ export function validateExecCommandArgs(argsString, rawArgs, options) {
         : (rawTrimmed && !rawTrimmed.startsWith('{') && !rawTrimmed.startsWith('[')
             ? { cmd: rawTrimmed }
             : parsed);
-    const normalized = normalizeExecCommandArgs(parsedRecord);
+    const normalized = normalizeExecCommandArgs(parsedRecord, {
+        schemaMode: options?.schemaMode === 'canonical' ? 'canonical' : 'compat'
+    });
     if (normalized.ok === false) {
         return { ok: false, reason: normalized.reason };
     }

package/node_modules/@jsonstudio/llms/dist/tools/tool-registry.d.ts

@@ -10,6 +10,7 @@ export interface ToolValidationOptions {
         enabled?: boolean;
         policyFile?: string;
     };
+    schemaMode?: 'compat' | 'canonical';
 }
 export declare function getAllowedToolNames(): string[];
 export declare function validateToolCall(name: string, argsString: string, options?: ToolValidationOptions): ToolValidationResult;

package/node_modules/@jsonstudio/llms/dist/tools/tool-registry.js

@@ -2,7 +2,6 @@
 import { parseToolArgsJson } from './args-json.js';
 import { validateApplyPatchArgs } from './apply-patch/validator.js';
 import { validateExecCommandArgs } from './exec-command/validator.js';
-import { fixApplyPatchToolCallsWithNative } from '../router/virtual-router/engine-selection/native-compat-action-semantics.js';
 const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
 const asString = (value) => {
     if (typeof value === 'string' && value.trim().length > 0) {
@@ -39,28 +38,6 @@ const toJson = (value) => {
         return '{}';
     }
 };
-const tryNormalizeApplyPatchArgsWithNativeCompat = (argsString) => {
-    const raw = typeof argsString === 'string' ? argsString : String(argsString ?? '');
-    if (!raw.trim())
-        return raw;
-    try {
-        const fixed = fixApplyPatchToolCallsWithNative({
-            messages: [],
-            input: [
-                {
-                    type: 'function_call',
-                    name: 'apply_patch',
-                    arguments: raw
-                }
-            ]
-        });
-        const normalized = fixed.input?.[0]?.arguments;
-        return typeof normalized === 'string' && normalized.trim().length > 0 ? normalized : raw;
-    }
-    catch {
-        return raw;
-    }
-};
 const detectForbiddenWrite = (script) => {
     const normalized = script.toLowerCase();
     if (!normalized) {
@@ -117,7 +94,10 @@ export function validateToolCall(name, argsString, options) {
     switch (normalizedName) {
         case 'exec_command': {
             const guard = options?.execCommandGuard;
-            const validation = validateExecCommandArgs(argsString, rawArgsAny, guard && guard.enabled ? { policyFile: guard.policyFile } : undefined);
+            const validation = validateExecCommandArgs(argsString, rawArgsAny, {
+                ...(guard && guard.enabled ? { policyFile: guard.policyFile } : {}),
+                ...(options?.schemaMode ? { schemaMode: options.schemaMode } : {})
+            });
             if (!validation.ok) {
                 const reason = validation.reason || 'unknown';
                 // captureExecCommandRegression({
@@ -142,9 +122,7 @@ export function validateToolCall(name, argsString, options) {
             return { ok: true, normalizedArgs: toJson(rawArgs) };
         }
         case 'apply_patch': {
-            const nativeNormalizedArgs = tryNormalizeApplyPatchArgsWithNativeCompat(argsString);
-            const nativeNormalizedRawArgsAny = parseToolArgsJson(typeof nativeNormalizedArgs === 'string' ? nativeNormalizedArgs : '{}');
-            const validation = validateApplyPatchArgs(nativeNormalizedArgs, nativeNormalizedRawArgsAny);
+            const validation = validateApplyPatchArgs(argsString, rawArgsAny);
             if (!validation.ok) {
                 const reason = validation.reason || 'unknown';
                 // captureApplyPatchRegression({

package/node_modules/@jsonstudio/llms/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jsonstudio/llms",
-  "version": "0.6.4305",
+  "version": "0.6.4413",
   "type": "module",
   "main": "dist/index.js",
   "module": "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jsonstudio/rcc",
-  "version": "0.90.876",
+  "version": "0.90.1270",
   "description": "Multi-provider OpenAI proxy server with anthropic/responses/chat support (release)",
   "type": "module",
   "main": "dist/index.js",
@@ -64,6 +64,8 @@
     "test:webui:coverage": "npm run jest:run -- --runTestsByPath tests/frontend/webui-app.utils.spec.ts tests/frontend/webui-app.render.spec.tsx tests/frontend/webui-app.integration.spec.tsx tests/frontend/webui-app.pages.spec.tsx tests/frontend/webui-app.edge.spec.tsx --coverage --collectCoverageFrom=webui/src/App.tsx",
     "test:performance": "npm run jest:run -- --testPathPattern=performance",
     "test:protocol": "npm run jest:run -- --testPathPattern=protocol-tools-e2e.spec.ts --runInBand --detectOpenHandles --forceExit",
+    "test:protocol-sample-replay": "npm run jest:run -- --runInBand --runTestsByPath tests/sharedmodule/real-sample-hub-io-compare.spec.ts",
+    "test:protocol-compat-regression": "npm run jest:run -- --runInBand --runTestsByPath tests/sharedmodule/anthropic-semantics-stage2.spec.ts tests/sharedmodule/anthropic-client-remap-namespace-fallback.spec.ts tests/sharedmodule/responses-semantics-snapshot.spec.ts tests/sharedmodule/real-sample-hub-io-compare.spec.ts",
     "test:dry-run": "node tests/basic-dry-run.mjs",
     "test:lmstudio-dryrun": "node tests/lmstudio-tools-bidir-dry-run.mjs",
     "test:unified-hub-shadow": "node scripts/tests/unified-hub-shadow-regression.mjs",
@@ -84,7 +86,7 @@
     "verify:e2e-gemini-followup-sample": "node scripts/verify-e2e-gemini-followup-sample.mjs",
     "install:global": "./scripts/install-global.sh",
     "install:release": "./scripts/install-release.sh",
-    "release:rcc": "npm run pack:rcc",
+    "pack:rcc": "node scripts/pack-rcc.mjs",
     "audit:tool-text": "node scripts/audit-tool-text.mjs",
     "start:bg": "bash scripts/run-bg.sh -- 'node dist/index.js'",
     "start:fg": "bash scripts/run-fg-gtimeout.sh 12 -- 'node dist/index.js'",
@@ -154,17 +156,14 @@
     "mock:validate": "node scripts/mock-provider/validate.mjs",
     "mock:regressions": "node scripts/mock-provider/run-regressions.mjs",
     "mock:clean": "node scripts/mock-provider/clean.mjs",
-    "publish:rcc": "node scripts/publish-rcc.mjs",
-    "pack:rcc": "node scripts/pack-rcc.mjs",
     "fix:cli-permission": "node scripts/ensure-cli-executable.mjs",
-    "fix:cli-shim": "node scripts/ensure-cli-command-shim.mjs",
-    "public:rcc": "npm run publish:rcc --"
+    "fix:cli-shim": "node scripts/ensure-cli-command-shim.mjs"
   },
   "dependencies": {
     "@ai-sdk/anthropic": "^3.0.58",
     "@ai-sdk/openai": "^3.0.41",
     "@anthropic-ai/sdk": "^0.65.0",
-    "@jsonstudio/llms": "0.6.4305",
+    "@jsonstudio/llms": "0.6.4413",
     "@lmstudio/sdk": "^1.5.0",
     "@radix-ui/react-switch": "^1.2.6",
     "@types/socket.io": "^3.0.1",

package/scripts/ci/repo-sanity.mjs

@@ -68,6 +68,7 @@ function isForbiddenTrackedPath(p) {
 function checkRootLayout() {
   // Fixed top-level layout. Adding new root entries requires an explicit policy change.
  const allowed = new Set([
+   '.agents',
    'eslint.config.js',
    '.beads',
    '.github',

package/scripts/ci/silent-failure-audit.mjs

@@ -2,15 +2,12 @@
 import fs from 'node:fs';
 import path from 'node:path';
 
-const roots = ['src', 'sharedmodule/llmswitch-core/src'];
 const includeExt = /\.(ts|tsx|js|mjs|cjs|rs)$/;
-const args = new Set(process.argv.slice(2));
-const failOnRisk = args.has('--fail-on-risk');
-const jsonOutput = args.has('--json');
-
 const NOISE_HINT_RE = /\b(ignore|best[- ]effort|non-blocking|swallow|fallback)\b/i;
 const HAS_HANDLED_RE =
   /\b(throw|console\.(warn|error|info)|logger\.(warn|warning|error|info)|report\w*Error|logProcessLifecycle|log\w*NonBlocking|emit\w*|record\w*Error)\b/;
+const RETURN_FALLBACK_RE = /^\s*return\s+(?:null|false|undefined)\s*;?\s*$/m;
+const DIRECT_PROMISE_CATCH_RE = /\.catch\(\s*(?:async\s*)?(?:(?:\([^)]*\))|(?:[A-Za-z_$][\w$]*))?\s*=>\s*(null|false|undefined|\{\s*\})\s*\)/g;
 
 function walk(dir, out) {
   if (!fs.existsSync(dir)) return;
@@ -116,77 +113,122 @@ function findBlockEnd(source, openBraceIndex) {
   return -1;
 }
 
-const files = [];
-for (const root of roots) walk(root, files);
-
-const catchRisk = [];
-const promiseCatchRisk = [];
-const catchRe = /catch\s*(\([^)]*\))?\s*\{/g;
-const promiseCatchRe = /\.catch\(\s*(\([^)]*\)\s*=>\s*)?(\{\s*\}|undefined|null)?\s*\)/g;
-
-for (const file of files) {
-  const source = fs.readFileSync(file, 'utf8');
-
-  let m;
-  while ((m = catchRe.exec(source)) !== null) {
-    const open = source.indexOf('{', m.index);
-    if (open < 0) continue;
-    const end = findBlockEnd(source, open);
-    if (end < 0) continue;
-    const body = source.slice(open + 1, end).trim();
-    const hasHandled = HAS_HANDLED_RE.test(body);
-    const noopOnly = /^(?:\/\*[\s\S]*?\*\/|\/\/.*|\s|;|return\s*;)*$/.test(body);
-    const looksSwallow = !hasHandled && (noopOnly || NOISE_HINT_RE.test(body));
-    if (looksSwallow) {
-      catchRisk.push({
-        file,
-        line: lineOf(source, m.index),
-        snippet: body.split('\n').slice(0, 3).join(' ').slice(0, 180)
-      });
-    }
-    catchRe.lastIndex = end + 1;
+function parseArgs(argv) {
+  const roots = [];
+  let failOnRisk = false;
+  let jsonOutput = false;
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    if (arg === '--fail-on-risk') {
+      failOnRisk = true;
+      continue;
+    }
+    if (arg === '--json') {
+      jsonOutput = true;
+      continue;
+    }
+    if (arg === '--root') {
+      const next = argv[i + 1];
+      if (next) {
+        roots.push(next);
+        i += 1;
+      }
+    }
   }
+  return {
+    roots: roots.length > 0 ? roots : ['src', 'sharedmodule/llmswitch-core/src'],
+    failOnRisk,
+    jsonOutput
+  };
+}
+
+export function analyzeSilentFailureRisks(targetRoots) {
+  const files = [];
+  for (const root of targetRoots) walk(root, files);
+
+  const catchRisk = [];
+  const promiseCatchRisk = [];
+  const catchRe = /catch\s*(\([^)]*\))?\s*\{/g;
 
-  while ((m = promiseCatchRe.exec(source)) !== null) {
-    promiseCatchRisk.push({ file, line: lineOf(source, m.index), snippet: m[0] });
+  for (const file of files) {
+    const source = fs.readFileSync(file, 'utf8');
+
+    let m;
+    while ((m = catchRe.exec(source)) !== null) {
+      const open = source.indexOf('{', m.index);
+      if (open < 0) continue;
+      const end = findBlockEnd(source, open);
+      if (end < 0) continue;
+      const body = source.slice(open + 1, end).trim();
+      const hasHandled = HAS_HANDLED_RE.test(body);
+      const noopOnly = /^(?:\/\*[\s\S]*?\*\/|\/\/.*|\s|;|return\s*;)*$/.test(body);
+      const fallbackOnly = RETURN_FALLBACK_RE.test(body);
+      const looksSwallow = !hasHandled && (noopOnly || fallbackOnly || NOISE_HINT_RE.test(body));
+      if (looksSwallow) {
+        catchRisk.push({
+          file,
+          line: lineOf(source, m.index),
+          snippet: body.split('\n').slice(0, 3).join(' ').slice(0, 180)
+        });
+      }
+      catchRe.lastIndex = end + 1;
+    }
+
+    while ((m = DIRECT_PROMISE_CATCH_RE.exec(source)) !== null) {
+      promiseCatchRisk.push({ file, line: lineOf(source, m.index), snippet: m[0] });
+    }
   }
-}
 
-const byFile = new Map();
-for (const row of catchRisk) {
-  byFile.set(row.file, (byFile.get(row.file) || 0) + 1);
+  const byFile = new Map();
+  for (const row of catchRisk) {
+    byFile.set(row.file, (byFile.get(row.file) || 0) + 1);
+  }
+  const topFiles = [...byFile.entries()]
+    .sort((a, b) => b[1] - a[1])
+    .slice(0, 40)
+    .map(([file, count]) => ({ file, count }));
+
+  return {
+    roots: targetRoots,
+    scannedFiles: files.length,
+    catchRiskCount: catchRisk.length,
+    promiseCatchRiskCount: promiseCatchRisk.length,
+    topFiles,
+    sample: catchRisk.slice(0, 120),
+    promiseSample: promiseCatchRisk.slice(0, 120)
+  };
 }
-const topFiles = [...byFile.entries()]
-  .sort((a, b) => b[1] - a[1])
-  .slice(0, 40)
-  .map(([file, count]) => ({ file, count }));
-
-const report = {
-  roots,
-  scannedFiles: files.length,
-  catchRiskCount: catchRisk.length,
-  promiseCatchRiskCount: promiseCatchRisk.length,
-  topFiles,
-  sample: catchRisk.slice(0, 120)
-};
-
-if (jsonOutput) {
-  process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
-} else {
-  console.log(`[silent-failure-audit] scanned files=${report.scannedFiles}`);
-  console.log(
-    `[silent-failure-audit] risky catch blocks=${report.catchRiskCount}, risky promise.catch=${report.promiseCatchRiskCount}`
-  );
-  console.log('[silent-failure-audit] top files:');
-  for (const row of topFiles) {
-    console.log(`  - ${row.count}  ${row.file}`);
+
+function main() {
+  const { roots, failOnRisk, jsonOutput } = parseArgs(process.argv.slice(2));
+  const report = analyzeSilentFailureRisks(roots);
+
+  if (jsonOutput) {
+    process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
+  } else {
+    console.log(`[silent-failure-audit] scanned files=${report.scannedFiles}`);
+    console.log(
+      `[silent-failure-audit] risky catch blocks=${report.catchRiskCount}, risky promise.catch=${report.promiseCatchRiskCount}`
+    );
+    console.log('[silent-failure-audit] top files:');
+    for (const row of report.topFiles) {
+      console.log(`  - ${row.count}  ${row.file}`);
+    }
+    console.log('[silent-failure-audit] sample:');
+    for (const row of report.sample.slice(0, 30)) {
+      console.log(`  - ${row.file}:${row.line}  ${row.snippet}`);
+    }
+    if (report.promiseSample.length > 0) {
+      console.log('[silent-failure-audit] promise sample:');
+      for (const row of report.promiseSample.slice(0, 30)) {
+        console.log(`  - ${row.file}:${row.line}  ${row.snippet}`);
+      }
+    }
   }
-  console.log('[silent-failure-audit] sample:');
-  for (const row of report.sample.slice(0, 30)) {
-    console.log(`  - ${row.file}:${row.line}  ${row.snippet}`);
+
+  if (failOnRisk && (report.catchRiskCount > 0 || report.promiseCatchRiskCount > 0)) {
+    process.exit(2);
   }
 }
 
-if (failOnRisk && (report.catchRiskCount > 0 || report.promiseCatchRiskCount > 0)) {
-  process.exit(2);
-}
+main();

package/scripts/cleanup-stale-server-pids.mjs

@@ -51,12 +51,6 @@ function isTrustedRouteCodexCommand(command) {
   if (normalized.includes('routecodex/dist/cli.js')) {
     return true;
   }
-  if (normalized.includes('@jsonstudio/rcc') && normalized.includes('/dist/index.js')) {
-    return true;
-  }
-  if (normalized.includes('jsonstudio-rcc') && normalized.includes('/dist/index.js')) {
-    return true;
-  }
   return false;
 }
 

package/scripts/ensure-cli-command-shim.mjs

@@ -3,40 +3,69 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 
-const SHIM_DIR = process.env.ROUTECODEX_SHIM_DIR
-  ? path.resolve(process.env.ROUTECODEX_SHIM_DIR)
-  : path.join(os.homedir(), '.local', 'bin');
-
 const REPO_ROOT = process.cwd();
 
+function resolveShimDirs() {
+  if (process.env.ROUTECODEX_SHIM_DIR) {
+    return [path.resolve(process.env.ROUTECODEX_SHIM_DIR)];
+  }
+  return [path.join(os.homedir(), '.local', 'bin')];
+}
+
 function normalizeCliPath(value) {
   if (!value) return '';
   return value.split(path.sep).join('/');
 }
 
-function writeShim(binName, packageName) {
+function writeShim(shimDir, binName, packageName) {
   if (process.platform === 'win32') {
     return null;
   }
 
-  const shimPath = path.join(SHIM_DIR, binName);
+  const shimPath = path.join(shimDir, binName);
   const repoCliPath = path.join(REPO_ROOT, 'dist', 'cli.js');
   const globalCliPath = packageName.startsWith('@')
     ? path.join('${GLOBAL_ROOT}', ...packageName.split('/'), 'dist', 'cli.js')
     : path.join('${GLOBAL_ROOT}', packageName, 'dist', 'cli.js');
+  const defaultInstallRoot = normalizeCliPath(path.join(os.homedir(), '.rcc', 'install', 'current'));
 
   const content = `#!/bin/sh
 set -eu
 
+resolve_rcc_home() {
+  for candidate in "\${RCC_HOME:-}" "\${ROUTECODEX_USER_DIR:-}" "\${ROUTECODEX_HOME:-}"; do
+    if [ -n "$candidate" ]; then
+      case "$candidate" in
+        ~/*) printf '%s\\n' "$HOME/\${candidate#~/}" ;;
+        *) printf '%s\\n' "$candidate" ;;
+      esac
+      return 0
+    fi
+  done
+  printf '%s\\n' "${normalizeCliPath(path.join(os.homedir(), '.rcc'))}"
+}
+
 GLOBAL_ROOT="$(npm root -g 2>/dev/null || true)"
+RCC_HOME_DIR="$(resolve_rcc_home)"
+CURRENT_INSTALL="$RCC_HOME_DIR/install/current"
+CURRENT_CLI="$CURRENT_INSTALL/dist/cli.js"
 REPO_CLI="${normalizeCliPath(repoCliPath)}"
 GLOBAL_CLI="${normalizeCliPath(globalCliPath)}"
+DEFAULT_INSTALL_ROOT="${defaultInstallRoot}"
 
 if ! command -v node >/dev/null 2>&1; then
   echo "${binName}: node is required but was not found in PATH" >&2
   exit 127
 fi
 
+if [ -f "$CURRENT_CLI" ]; then
+  export ROUTECODEX_INSTALL_ROOT="\${ROUTECODEX_INSTALL_ROOT:-$CURRENT_INSTALL}"
+  export RCC_INSTALL_ROOT="\${RCC_INSTALL_ROOT:-$CURRENT_INSTALL}"
+  export ROUTECODEX_BASEDIR="\${ROUTECODEX_BASEDIR:-$CURRENT_INSTALL}"
+  export RCC_BASEDIR="\${RCC_BASEDIR:-$CURRENT_INSTALL}"
+  exec node "$CURRENT_CLI" "$@"
+fi
+
 if [ -n "$GLOBAL_ROOT" ] && [ -f "$GLOBAL_CLI" ]; then
   exec node "$GLOBAL_CLI" "$@"
 fi
@@ -46,31 +75,36 @@ if [ -f "$REPO_CLI" ]; then
 fi
 
 echo "${binName}: unable to locate CLI entrypoint" >&2
+echo "  tried release snapshot: $CURRENT_CLI" >&2
 echo "  tried global package: $GLOBAL_CLI" >&2
 echo "  tried repo dist: $REPO_CLI" >&2
-echo "  run npm run build && npm run install:global (or install:release for rcc)" >&2
+echo "  default release snapshot root: $DEFAULT_INSTALL_ROOT" >&2
+echo "  run npm run build && npm run install:global (or install:release)" >&2
 exit 127
 `;
 
-  fs.mkdirSync(SHIM_DIR, { recursive: true });
+  fs.mkdirSync(shimDir, { recursive: true });
   fs.writeFileSync(shimPath, content);
   fs.chmodSync(shimPath, 0o755);
   return shimPath;
 }
 
 function main() {
-  const installed = [
-    writeShim('routecodex', 'routecodex'),
-    writeShim('rcc', '@jsonstudio/rcc')
-  ].filter(Boolean);
+  const installed = [];
+  const shimDirs = resolveShimDirs();
+  for (const shimDir of shimDirs) {
+    installed.push(writeShim(shimDir, 'routecodex', 'routecodex'));
+    installed.push(writeShim(shimDir, 'rcc', 'routecodex'));
+  }
 
-  for (const file of installed) {
+  for (const file of installed.filter(Boolean)) {
     console.log(`[cli-shim] wrote ${file}`);
   }
 
   const pathEntries = (process.env.PATH || '').split(path.delimiter).filter(Boolean);
-  if (!pathEntries.includes(SHIM_DIR)) {
-    console.warn(`[cli-shim] warning: ${SHIM_DIR} is not in PATH`);
+  const missing = shimDirs.filter((dir) => !pathEntries.includes(dir));
+  for (const dir of missing) {
+    console.warn(`[cli-shim] warning: ${dir} is not in PATH`);
   }
 }
 

package/scripts/ensure-cli-executable.mjs

@@ -54,7 +54,7 @@ function ensureGlobalBinTarget(binName) {
     return;
   }
 
-  const packageName = binName === 'rcc' ? '@jsonstudio/rcc' : 'routecodex';
+  const packageName = 'routecodex';
   const globalCliPath = path.join(globalRoot, packageName, 'dist', 'cli.js');
   ensureExecutable(globalCliPath);
 }

package/scripts/install-global.sh

@@ -96,14 +96,15 @@ build_project() {
 
     # 构建项目
     echo "🔨 编译TypeScript..."
-    # dev 包：显式使用 BUILD_MODE=dev 以便在编译期区分 dev/release
-   BUILD_MODE=dev ROUTECODEX_SKIP_AUTO_BUMP=1 timeout 300 npm run build || {
+    # 本地全局安装使用最小构建链路，绕开 prebuild 审计脚本，避免与 repo-level 审计耦合。
+    BUILD_MODE=dev ROUTECODEX_SKIP_AUTO_BUMP=1 timeout 300 npm run build:min || {
        echo "❌ 构建超时或失败"
-       echo "💡 尝试手动构建：npm run build"
+       echo "💡 尝试手动构建：BUILD_MODE=dev npm run build:min"
        exit 1
    }
     # 确保CLI可执行（本地 + 全局目标自愈）
     node scripts/ensure-cli-executable.mjs || true
+    ROUTECODEX_SHIM_DIR="$HOME/.local/bin" node scripts/ensure-cli-command-shim.mjs || true
 
     # 检查构建结果
     if [ ! -f "dist/cli.js" ]; then
@@ -139,8 +140,8 @@ global_install() {
         fi
     fi
 
-    # 执行安装（跳过可选依赖，减少体积；允许脚本执行以生成可执行文件）
-    npm install -g . --no-audit --no-fund --omit=optional
+    # 依赖本地已完成的 dist，跳过 install 阶段脚本，避免二次触发 repo 审计/构建。
+    npm install -g . --no-audit --no-fund --omit=optional --ignore-scripts
 
     # 全局安装后再次修复可执行位（解决偶发 permission denied）
     node scripts/ensure-cli-executable.mjs || true
@@ -227,7 +228,7 @@ cleanup_old_install() {
     fi
 
     # 清理旧的可执行文件
-    if [ -L "$NPM_PREFIX/bin/routecodex" ]; then
+    if [ -e "$NPM_PREFIX/bin/routecodex" ]; then
         echo "🗑️  删除旧的routecodex可执行文件..."
         rm -f "$NPM_PREFIX/bin/routecodex"
     fi