@kaitranntt/ccs 7.77.1 → 7.78.0-dev.1

package/dist/web-server/shared-routes-collections.js

@@ -0,0 +1,170 @@
+"use strict";
+/**
+ * Shared Routes — Collection item list builders
+ *
+ * Builds SharedItem arrays for commands, skills, and agents with
+ * a short-lived in-memory cache keyed by collection type.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSharedItems = exports.getSkillOrAgentItem = exports.getCommandItems = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const config_loader_facade_1 = require("../config/config-loader-facade");
+const shared_routes_path_guards_1 = require("./shared-routes-path-guards");
+const shared_routes_markdown_1 = require("./shared-routes-markdown");
+const shared_routes_plugins_1 = require("./shared-routes-plugins");
+const SHARED_ITEMS_CACHE_TTL_MS = 1000;
+const sharedItemsCache = new Map();
+// ---------------------------------------------------------------------------
+// Per-type item builders
+// ---------------------------------------------------------------------------
+function getCommandItems(sharedDir, allowedRoots) {
+    const markdownFiles = (0, shared_routes_markdown_1.collectMarkdownFiles)(sharedDir, allowedRoots);
+    const items = [];
+    for (const markdownFile of markdownFiles) {
+        const description = (0, shared_routes_markdown_1.readMarkdownDescription)(markdownFile.resolvedPath, allowedRoots);
+        if (!description) {
+            continue;
+        }
+        const relativePath = path.relative(sharedDir, markdownFile.displayPath);
+        const normalizedName = relativePath.split(path.sep).join('/').replace(/\.md$/i, '');
+        if (!normalizedName) {
+            continue;
+        }
+        items.push({
+            name: normalizedName,
+            description,
+            path: markdownFile.displayPath,
+            type: 'command',
+        });
+    }
+    return items.sort((a, b) => a.name.localeCompare(b.name));
+}
+exports.getCommandItems = getCommandItems;
+function getSkillOrAgentItem(type, entry, entryPath, resolvedEntryPath, allowedRoots, stats) {
+    if (type === 'skills') {
+        if (!stats.isDirectory()) {
+            return null;
+        }
+        const description = (0, shared_routes_markdown_1.readMarkdownDescription)(path.join(resolvedEntryPath, 'SKILL.md'), allowedRoots);
+        if (!description) {
+            return null;
+        }
+        return { name: entry.name, description, path: entryPath, type: 'skill' };
+    }
+    // agents
+    if (stats.isDirectory()) {
+        const description = (0, shared_routes_markdown_1.readFirstMarkdownDescription)([
+            path.join(resolvedEntryPath, 'prompt.md'),
+            path.join(resolvedEntryPath, 'AGENT.md'),
+            path.join(resolvedEntryPath, 'agent.md'),
+        ], allowedRoots);
+        if (!description) {
+            return null;
+        }
+        return { name: entry.name, description, path: entryPath, type: 'agent' };
+    }
+    if (!stats.isFile() || !entry.name.toLowerCase().endsWith('.md')) {
+        return null;
+    }
+    const description = (0, shared_routes_markdown_1.readMarkdownDescription)(resolvedEntryPath, allowedRoots);
+    if (!description) {
+        return null;
+    }
+    return { name: entry.name.replace(/\.md$/i, ''), description, path: entryPath, type: 'agent' };
+}
+exports.getSkillOrAgentItem = getSkillOrAgentItem;
+// ---------------------------------------------------------------------------
+// Public cache-backed entry point
+// ---------------------------------------------------------------------------
+function getSharedItems(type) {
+    const ccsDir = (0, config_loader_facade_1.getCcsDir)();
+    const sharedDir = path.join(ccsDir, 'shared', type);
+    const now = Date.now();
+    if (!fs.existsSync(sharedDir)) {
+        sharedItemsCache.delete(type);
+        return [];
+    }
+    const cached = sharedItemsCache.get(type);
+    if (cached && cached.sharedDir === sharedDir && cached.expiresAt > now) {
+        return cached.items;
+    }
+    const sharedDirRoot = (0, shared_routes_path_guards_1.safeRealPath)(sharedDir) ?? path.resolve(sharedDir);
+    const allowedRoots = (0, shared_routes_path_guards_1.resolveAllowedRoots)(type, ccsDir, sharedDirRoot);
+    if (type === 'commands') {
+        const commandItems = getCommandItems(sharedDir, allowedRoots);
+        sharedItemsCache.set(type, {
+            items: commandItems,
+            sharedDir,
+            expiresAt: now + SHARED_ITEMS_CACHE_TTL_MS,
+        });
+        return commandItems;
+    }
+    if (type === 'plugins') {
+        const pluginItems = (0, shared_routes_plugins_1.getPluginItems)(sharedDir, allowedRoots);
+        sharedItemsCache.set(type, {
+            items: pluginItems,
+            sharedDir,
+            expiresAt: now + SHARED_ITEMS_CACHE_TTL_MS,
+        });
+        return pluginItems;
+    }
+    // skills | agents
+    const items = [];
+    try {
+        const entries = fs.readdirSync(sharedDir, { withFileTypes: true });
+        for (const entry of entries) {
+            try {
+                const entryPath = path.join(sharedDir, entry.name);
+                const resolvedEntryPath = (0, shared_routes_path_guards_1.safeRealPath)(entryPath);
+                if (!resolvedEntryPath || !(0, shared_routes_path_guards_1.isPathWithinAny)(resolvedEntryPath, allowedRoots)) {
+                    continue;
+                }
+                const stats = fs.statSync(resolvedEntryPath);
+                const item = getSkillOrAgentItem(type, entry, entryPath, resolvedEntryPath, allowedRoots, stats);
+                if (!item) {
+                    continue;
+                }
+                items.push(item);
+            }
+            catch {
+                // Fail soft per entry so one bad item does not hide valid results.
+            }
+        }
+    }
+    catch {
+        // Directory read failed — return empty list
+    }
+    const sortedItems = items.sort((a, b) => a.name.localeCompare(b.name));
+    sharedItemsCache.set(type, {
+        items: sortedItems,
+        sharedDir,
+        expiresAt: now + SHARED_ITEMS_CACHE_TTL_MS,
+    });
+    return sortedItems;
+}
+exports.getSharedItems = getSharedItems;
+//# sourceMappingURL=shared-routes-collections.js.map

package/dist/web-server/shared-routes-collections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-routes-collections.js","sourceRoot":"","sources":["../../src/web-server/shared-routes-collections.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAE7B,yEAA2D;AAC3D,2EAAiG;AACjG,qEAIkC;AAClC,mEAAyD;AAOzD,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA+C,CAAC;AAEhF,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,SAAgB,eAAe,CAAC,SAAiB,EAAE,YAAyB;IAC1E,MAAM,aAAa,GAAG,IAAA,6CAAoB,EAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACpE,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,IAAA,gDAAuB,EAAC,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACrF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC;QACxE,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,cAAc;YACpB,WAAW;YACX,IAAI,EAAE,YAAY,CAAC,WAAW;YAC9B,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC;AAzBD,0CAyBC;AAED,SAAgB,mBAAmB,CACjC,IAAyB,EACzB,KAAgB,EAChB,SAAiB,EACjB,iBAAyB,EACzB,YAAyB,EACzB,KAAe;IAEf,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,WAAW,GAAG,IAAA,gDAAuB,EACzC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,EACxC,YAAY,CACb,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3E,CAAC;IAED,SAAS;IACT,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,IAAA,qDAA4B,EAC9C;YACE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC;SACzC,EACD,YAAY,CACb,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,IAAA,gDAAuB,EAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAC7E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACjG,CAAC;AA/CD,kDA+CC;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,SAAgB,cAAc,CAAC,IAA0B;IACvD,MAAM,MAAM,GAAG,IAAA,gCAAS,GAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QACvE,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,aAAa,GAAG,IAAA,wCAAY,EAAC,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,IAAA,+CAAmB,EAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAEtE,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,YAAY,GAAG,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC9D,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE;YACzB,KAAK,EAAE,YAAY;YACnB,SAAS;YACT,SAAS,EAAE,GAAG,GAAG,yBAAyB;SAC3C,CAAC,CAAC;QACH,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,IAAA,sCAAc,EAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC5D,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE;YACzB,KAAK,EAAE,WAAW;YAClB,SAAS;YACT,SAAS,EAAE,GAAG,GAAG,yBAAyB;SAC3C,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,kBAAkB;IAClB,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnD,MAAM,iBAAiB,GAAG,IAAA,wCAAY,EAAC,SAAS,CAAC,CAAC;gBAClD,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAA,2CAAe,EAAC,iBAAiB,EAAE,YAAY,CAAC,EAAE,CAAC;oBAC5E,SAAS;gBACX,CAAC;gBAED,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;gBAC7C,MAAM,IAAI,GAAG,mBAAmB,CAC9B,IAAI,EACJ,KAAK,EACL,SAAS,EACT,iBAAiB,EACjB,YAAY,EACZ,KAAK,CACN,CAAC;gBACF,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,SAAS;gBACX,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE;QACzB,KAAK,EAAE,WAAW;QAClB,SAAS;QACT,SAAS,EAAE,GAAG,GAAG,yBAAyB;KAC3C,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AA/ED,wCA+EC"}

package/dist/web-server/shared-routes-content.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Shared Routes — Item content readers
+ *
+ * Resolves the full markdown content for a given shared item path,
+ * routing by collection type and enforcing allowed-root checks.
+ */
+import type { SharedContentType } from './shared-routes-types';
+export declare function getSharedSettingsContent(itemPath: string, allowedRoots: Set<string>): {
+    content: string;
+    contentPath: string;
+} | null;
+export declare function getSharedItemContent(type: SharedContentType, itemPath: string, allowedRoots: Set<string>, sharedDir: string): {
+    content: string;
+    contentPath: string;
+} | null;
+//# sourceMappingURL=shared-routes-content.d.ts.map

package/dist/web-server/shared-routes-content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-routes-content.d.ts","sourceRoot":"","sources":["../../src/web-server/shared-routes-content.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAM/D,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,GACxB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAsCjD;AAMD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EACzB,SAAS,EAAE,MAAM,GAChB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAgFjD"}

package/dist/web-server/shared-routes-content.js

@@ -0,0 +1,152 @@
+"use strict";
+/**
+ * Shared Routes — Item content readers
+ *
+ * Resolves the full markdown content for a given shared item path,
+ * routing by collection type and enforcing allowed-root checks.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSharedItemContent = exports.getSharedSettingsContent = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const shared_routes_path_guards_1 = require("./shared-routes-path-guards");
+const shared_routes_markdown_1 = require("./shared-routes-markdown");
+const shared_routes_plugins_1 = require("./shared-routes-plugins");
+const shared_routes_plugin_registry_content_1 = require("./shared-routes-plugin-registry-content");
+// ---------------------------------------------------------------------------
+// Settings
+// ---------------------------------------------------------------------------
+function getSharedSettingsContent(itemPath, allowedRoots) {
+    if (path.basename(itemPath) !== 'settings.json') {
+        return null;
+    }
+    const sharedRoot = Array.from(allowedRoots)[0];
+    if (!sharedRoot) {
+        return null;
+    }
+    const settingsPath = path.join(sharedRoot, 'settings.json');
+    const resolvedSettingsPath = (0, shared_routes_path_guards_1.safeRealPath)(settingsPath);
+    if (!resolvedSettingsPath || !(0, shared_routes_path_guards_1.isPathWithinAny)(resolvedSettingsPath, allowedRoots)) {
+        return null;
+    }
+    let stats;
+    try {
+        stats = fs.statSync(resolvedSettingsPath);
+    }
+    catch {
+        return null;
+    }
+    if (!stats.isFile() || stats.size > shared_routes_markdown_1.MAX_CONTENT_FILE_BYTES) {
+        return null;
+    }
+    try {
+        const rawContent = fs.readFileSync(resolvedSettingsPath, 'utf8');
+        const parsed = JSON.parse(rawContent);
+        return {
+            content: JSON.stringify(parsed, null, 2),
+            contentPath: resolvedSettingsPath,
+        };
+    }
+    catch {
+        const content = (0, shared_routes_markdown_1.readMarkdownContent)(resolvedSettingsPath, allowedRoots);
+        return content ? { content, contentPath: resolvedSettingsPath } : null;
+    }
+}
+exports.getSharedSettingsContent = getSharedSettingsContent;
+// ---------------------------------------------------------------------------
+// Generic item content
+// ---------------------------------------------------------------------------
+function getSharedItemContent(type, itemPath, allowedRoots, sharedDir) {
+    if (type === 'settings') {
+        return getSharedSettingsContent(itemPath, allowedRoots);
+    }
+    if (type === 'plugins') {
+        const pluginRegistryContent = (0, shared_routes_plugin_registry_content_1.getPluginRegistryContent)(itemPath, sharedDir, allowedRoots);
+        if (pluginRegistryContent) {
+            return pluginRegistryContent;
+        }
+    }
+    const resolvedItemPath = (0, shared_routes_path_guards_1.safeRealPath)(itemPath);
+    if (!resolvedItemPath || !(0, shared_routes_path_guards_1.isPathWithinAny)(resolvedItemPath, allowedRoots)) {
+        return null;
+    }
+    let itemStats;
+    try {
+        itemStats = fs.statSync(resolvedItemPath);
+    }
+    catch {
+        return null;
+    }
+    let markdownPath = null;
+    if (type === 'commands') {
+        if (!itemStats.isFile() || !itemPath.toLowerCase().endsWith('.md')) {
+            return null;
+        }
+        markdownPath = resolvedItemPath;
+    }
+    else if (type === 'skills') {
+        if (!itemStats.isDirectory()) {
+            return null;
+        }
+        markdownPath = (0, shared_routes_markdown_1.resolveReadableMarkdownPath)([path.join(resolvedItemPath, 'SKILL.md')], allowedRoots);
+    }
+    else if (type === 'plugins') {
+        if (!itemStats.isDirectory() || (0, shared_routes_plugins_1.isPluginInfrastructurePath)(resolvedItemPath, sharedDir)) {
+            return null;
+        }
+        markdownPath = (0, shared_routes_markdown_1.resolveReadableMarkdownPath)([
+            path.join(resolvedItemPath, 'README.md'),
+            path.join(resolvedItemPath, 'readme.md'),
+            path.join(resolvedItemPath, 'PLUGIN.md'),
+        ], allowedRoots);
+        if (!markdownPath) {
+            return null;
+        }
+    }
+    else {
+        // agents
+        if (itemStats.isDirectory()) {
+            markdownPath = (0, shared_routes_markdown_1.resolveReadableMarkdownPath)([
+                path.join(resolvedItemPath, 'prompt.md'),
+                path.join(resolvedItemPath, 'AGENT.md'),
+                path.join(resolvedItemPath, 'agent.md'),
+            ], allowedRoots);
+        }
+        else if (itemStats.isFile() && itemPath.toLowerCase().endsWith('.md')) {
+            markdownPath = resolvedItemPath;
+        }
+    }
+    if (!markdownPath) {
+        return null;
+    }
+    const content = (0, shared_routes_markdown_1.readMarkdownContent)(markdownPath, allowedRoots);
+    if (!content) {
+        return null;
+    }
+    return { content, contentPath: markdownPath };
+}
+exports.getSharedItemContent = getSharedItemContent;
+//# sourceMappingURL=shared-routes-content.js.map

package/dist/web-server/shared-routes-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-routes-content.js","sourceRoot":"","sources":["../../src/web-server/shared-routes-content.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAE7B,2EAA4E;AAC5E,qEAIkC;AAClC,mEAAqE;AACrE,mGAAmF;AAGnF,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,SAAgB,wBAAwB,CACtC,QAAgB,EAChB,YAAyB;IAEzB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,eAAe,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,oBAAoB,GAAG,IAAA,wCAAY,EAAC,YAAY,CAAC,CAAC;IACxD,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAA,2CAAe,EAAC,oBAAoB,EAAE,YAAY,CAAC,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,+CAAsB,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAY,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,WAAW,EAAE,oBAAoB;SAClC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,GAAG,IAAA,4CAAmB,EAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC;QACxE,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,CAAC;AACH,CAAC;AAzCD,4DAyCC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,SAAgB,oBAAoB,CAClC,IAAuB,EACvB,QAAgB,EAChB,YAAyB,EACzB,SAAiB;IAEjB,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,OAAO,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,qBAAqB,GAAG,IAAA,gEAAwB,EAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QAC1F,IAAI,qBAAqB,EAAE,CAAC;YAC1B,OAAO,qBAAqB,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAA,wCAAY,EAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAA,2CAAe,EAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,SAAmB,CAAC;IACxB,IAAI,CAAC;QACH,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,YAAY,GAAkB,IAAI,CAAC;IAEvC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,YAAY,GAAG,gBAAgB,CAAC;IAClC,CAAC;SAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,YAAY,GAAG,IAAA,oDAA2B,EACxC,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,EACzC,YAAY,CACb,CAAC;IACJ,CAAC;SAAM,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,IAAA,kDAA0B,EAAC,gBAAgB,EAAE,SAAS,CAAC,EAAE,CAAC;YACxF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,YAAY,GAAG,IAAA,oDAA2B,EACxC;YACE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC;SACzC,EACD,YAAY,CACb,CAAC;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;SAAM,CAAC;QACN,SAAS;QACT,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YAC5B,YAAY,GAAG,IAAA,oDAA2B,EACxC;gBACE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC;gBACvC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC;aACxC,EACD,YAAY,CACb,CAAC;QACJ,CAAC;aAAM,IAAI,SAAS,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,YAAY,GAAG,gBAAgB,CAAC;QAClC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,4CAAmB,EAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AAChD,CAAC;AArFD,oDAqFC"}

package/dist/web-server/shared-routes-markdown-walker.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Shared Routes — Markdown directory walker
+ *
+ * Iterative BFS/DFS over a shared directory collecting all .md files
+ * within allowed roots and the configured traversal depth limit.
+ */
+export interface MarkdownFileEntry {
+    displayPath: string;
+    resolvedPath: string;
+}
+export declare function collectMarkdownFiles(sharedDir: string, allowedRoots: Set<string>): MarkdownFileEntry[];
+//# sourceMappingURL=shared-routes-markdown-walker.d.ts.map

package/dist/web-server/shared-routes-markdown-walker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-routes-markdown-walker.d.ts","sourceRoot":"","sources":["../../src/web-server/shared-routes-markdown-walker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,GACxB,iBAAiB,EAAE,CAmErB"}

package/dist/web-server/shared-routes-markdown-walker.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * Shared Routes — Markdown directory walker
+ *
+ * Iterative BFS/DFS over a shared directory collecting all .md files
+ * within allowed roots and the configured traversal depth limit.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.collectMarkdownFiles = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const shared_routes_path_guards_1 = require("./shared-routes-path-guards");
+const MAX_DIRECTORY_TRAVERSAL_DEPTH = 10;
+function collectMarkdownFiles(sharedDir, allowedRoots) {
+    const directoriesToVisit = [
+        { path: sharedDir, depth: 0 },
+    ];
+    const visitedDirectories = new Set();
+    const markdownFiles = [];
+    while (directoriesToVisit.length > 0) {
+        const current = directoriesToVisit.pop();
+        if (!current) {
+            continue;
+        }
+        const currentDir = current.path;
+        const resolvedCurrentDir = (0, shared_routes_path_guards_1.safeRealPath)(currentDir);
+        if (!resolvedCurrentDir || !(0, shared_routes_path_guards_1.isPathWithinAny)(resolvedCurrentDir, allowedRoots)) {
+            continue;
+        }
+        const normalizedDirPath = process.platform === 'win32'
+            ? path.resolve(resolvedCurrentDir).toLowerCase()
+            : path.resolve(resolvedCurrentDir);
+        if (visitedDirectories.has(normalizedDirPath)) {
+            continue;
+        }
+        visitedDirectories.add(normalizedDirPath);
+        let entries = [];
+        try {
+            entries = fs.readdirSync(currentDir, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            const entryPath = path.join(currentDir, entry.name);
+            const resolvedEntryPath = (0, shared_routes_path_guards_1.safeRealPath)(entryPath);
+            if (!resolvedEntryPath || !(0, shared_routes_path_guards_1.isPathWithinAny)(resolvedEntryPath, allowedRoots)) {
+                continue;
+            }
+            let stats;
+            try {
+                stats = fs.statSync(resolvedEntryPath);
+            }
+            catch {
+                continue;
+            }
+            if (stats.isDirectory()) {
+                if (current.depth < MAX_DIRECTORY_TRAVERSAL_DEPTH) {
+                    directoriesToVisit.push({ path: entryPath, depth: current.depth + 1 });
+                }
+                continue;
+            }
+            if (stats.isFile() && entry.name.toLowerCase().endsWith('.md')) {
+                markdownFiles.push({
+                    displayPath: entryPath,
+                    resolvedPath: resolvedEntryPath,
+                });
+            }
+        }
+    }
+    return markdownFiles;
+}
+exports.collectMarkdownFiles = collectMarkdownFiles;
+//# sourceMappingURL=shared-routes-markdown-walker.js.map

package/dist/web-server/shared-routes-markdown-walker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-routes-markdown-walker.js","sourceRoot":"","sources":["../../src/web-server/shared-routes-markdown-walker.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAE7B,2EAA4E;AAE5E,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAOzC,SAAgB,oBAAoB,CAClC,SAAiB,EACjB,YAAyB;IAEzB,MAAM,kBAAkB,GAA2C;QACjE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;KAC9B,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,MAAM,aAAa,GAAwB,EAAE,CAAC;IAE9C,OAAO,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;QAChC,MAAM,kBAAkB,GAAG,IAAA,wCAAY,EAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAA,2CAAe,EAAC,kBAAkB,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9E,SAAS;QACX,CAAC;QAED,MAAM,iBAAiB,GACrB,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,WAAW,EAAE;YAChD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAEvC,IAAI,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAE1C,IAAI,OAAO,GAAgB,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,iBAAiB,GAAG,IAAA,wCAAY,EAAC,SAAS,CAAC,CAAC;YAClD,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAA,2CAAe,EAAC,iBAAiB,EAAE,YAAY,CAAC,EAAE,CAAC;gBAC5E,SAAS;YACX,CAAC;YAED,IAAI,KAAe,CAAC;YACpB,IAAI,CAAC;gBACH,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,OAAO,CAAC,KAAK,GAAG,6BAA6B,EAAE,CAAC;oBAClD,kBAAkB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;gBACzE,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/D,aAAa,CAAC,IAAI,CAAC;oBACjB,WAAW,EAAE,SAAS;oBACtB,YAAY,EAAE,iBAAiB;iBAChC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAtED,oDAsEC"}

package/dist/web-server/shared-routes-markdown.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Shared Routes — Markdown file reading and description extraction
+ *
+ * Handles YAML frontmatter parsing, body-line extraction, and safe
+ * bounded reads for both description snippets and full content.
+ *
+ * Directory walking is in shared-routes-markdown-walker.ts.
+ */
+/** Exported for content module which uses a larger limit. */
+export declare const MAX_CONTENT_FILE_BYTES: number;
+export type { MarkdownFileEntry } from './shared-routes-markdown-walker';
+export { collectMarkdownFiles } from './shared-routes-markdown-walker';
+export declare function extractDescription(content: string): string;
+export declare function readMarkdownDescription(markdownPath: string, allowedRoots: Set<string>): string | null;
+export declare function readFirstMarkdownDescription(markdownPaths: string[], allowedRoots: Set<string>): string | null;
+export declare function readMarkdownContent(markdownPath: string, allowedRoots: Set<string>): string | null;
+export declare function resolveReadableMarkdownPath(markdownPaths: string[], allowedRoots: Set<string>): string | null;
+//# sourceMappingURL=shared-routes-markdown.d.ts.map

package/dist/web-server/shared-routes-markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-routes-markdown.d.ts","sourceRoot":"","sources":["../../src/web-server/shared-routes-markdown.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,QAAkB,CAAC;AAGtD,YAAY,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AA8CvE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAgB1D;AAMD,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,GACxB,MAAM,GAAG,IAAI,CAef;AAED,wBAAgB,4BAA4B,CAC1C,aAAa,EAAE,MAAM,EAAE,EACvB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,GACxB,MAAM,GAAG,IAAI,CAQf;AAED,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,GACxB,MAAM,GAAG,IAAI,CAcf;AAED,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,MAAM,EAAE,EACvB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,GACxB,MAAM,GAAG,IAAI,CAiBf"}