@weavecode/weave 0.0.0-stage → 0.1.1

package/node_modules/@weavecode/server/dist/install/global-file-assets.js

@@ -0,0 +1 @@
+import{lstat as S,readdir as _,stat as P}from"node:fs/promises";import{homedir as g}from"node:os";import c from"node:path";import{classifyAgent as w,classifyAsset as h}from"../watch/classifier.js";import{PluginModsSniffer as I}from"../watch/plugin-mods.js";import{installedPluginNamespaces as D}from"./global-config.js";const L=["commands","agents","workflows","rules","output-styles","hooks","themes","routines","plugins"],A=["CLAUDE.md","settings.json","settings.local.json"],k=["prompts"],R=["config.toml","AGENTS.md"],T=new Set(["skills","node_modules",".git"]),U=new Set(["marketplaces","data",".in_use"]),y=".claude/plugins",F=`${y}/`,N=6,O=10,$=5e3,j=[{prefix:".claude",dirs:L,files:A},{prefix:".codex",dirs:k,files:R}];async function d(s,n,o){try{const e=await S(s),a=e.isSymbolicLink(),t=a?await P(s):e;if(!t.isFile())return null;let i=h(n);return i==="plugin"&&(i=o.refine(i,n,s)),{absPath:s,relPath:n,category:i,agent:w(n),mtimeMs:t.mtimeMs,...a?{isSymlink:!0}:{}}}catch{return null}}async function f(s,n,o,e,a){if(o>e)return[];let t;try{t=await _(s,{withFileTypes:!0})}catch{return[]}return(await Promise.all(t.map(async l=>{const u=c.join(s,l.name),r=`${n}/${l.name}`;if(l.isDirectory())return E(r,l.name)?[]:f(u,r,o+1,e,a);if(l.isSymbolicLink())try{if((await P(u)).isDirectory())return E(r,l.name)?[]:f(u,r,o+1,e,a)}catch{return[]}const m=await d(u,r,a);return m?[m]:[]}))).flat()}function E(s,n){return T.has(n)?!0:s.startsWith(F)&&U.has(n)}export async function listGlobalFileAssets(s=g()){const n=new I({revalidate:!1}),e=(await Promise.all(j.map(async t=>{const i=c.join(s,...t.prefix.split("/")),[l,u]=await Promise.all([Promise.all(t.files.map(r=>d(c.join(i,r),`${t.prefix}/${r}`,n))),Promise.all(t.dirs.map(r=>{const m=`${t.prefix}/${r}`,p=m===y?O:N;return f(c.join(i,r),m,1,p,n)}))]);return[...l.filter(r=>r!==null),...u.flat()]}))).flat(),a=await D(s);return e.sort((t,i)=>t.relPath.localeCompare(i.relPath)),e.slice(0,$).map(t=>{const i=x(t.absPath,a);return i?{...t,namespace:i}:t})}function x(s,n){let o;for(const e of n){const a=c.relative(c.resolve(e.dir),c.resolve(s));a===""||a.startsWith("..")||c.isAbsolute(a)||(!o||e.dir.length>o.dir.length)&&(o=e)}return o?.namespace}

package/node_modules/@weavecode/server/dist/install/init-files.d.ts

@@ -0,0 +1,46 @@
+import { type Harness, type HooksConfig, type InitComponents, type MCPConfig, type Preset } from '@weavecode/core';
+import { type SyncClass } from './git-classify.js';
+/**
+ * init 生成物的漂移检测与自动落盘——`weave init` 写过的文件里，**不进 git 的**
+ * 由同步域自动刷新（自愈），**会进 git 的**只报不写、dashboard 提醒用户去终端
+ * 跑 `weave init`（保留「生成 + commit」流程）。
+ *
+ * 期望态不在此处拼：落点与内容全经 harness 的 `generateInitFiles`（与 init 落盘
+ * 同一套生成器），statusline 那条走 statusline 模块自己的生成器与落点。本模块只
+ * 做「盘上 vs 期望」的比对与按 git 归类分流。
+ */
+export interface InitFileUpdate {
+    /** 项目根相对路径（posix）。 */
+    relPath: string;
+    targetPath: string;
+    /** 盘上缺失或内容与期望不同。 */
+    outdated: boolean;
+    /** `auto` = 可代写自愈；`manual` = 会进 git，只报不写；null = 没漂移，未归类。 */
+    syncClass: SyncClass | null;
+    /** 期望全文；null = 判不出来（盘上不可合并等）→ 不写。 */
+    expectedContent: string | null;
+}
+/** `.weave/config.yaml` 的解析结果（手写 k:v 行，对象值是 JSON 一行）。 */
+interface InitRuntime {
+    initVersion: string | null;
+    preset: Preset;
+    harnesses: Harness[];
+    components: InitComponents;
+    hooks: HooksConfig;
+    mcp: MCPConfig;
+}
+/**
+ * 读 init 落档的运行时配置。旧项目没有 `hooks`/`mcp`/`components` 字段——
+ * 回落 DEFAULT_*（正是未加 `--hooks`/`--mcp` 时 init 的取值）。
+ */
+export declare function readInitRuntime(projectPath: string): Promise<InitRuntime>;
+/** 一个项目的 init 生成物漂移清单（含全部条目，`outdated` 标注是否需同步）。 */
+export declare function detectInitFileUpdates(projectPath: string): Promise<InitFileUpdate[]>;
+/**
+ * 落一条生成物——**只写 `auto` 归类的**（不进 git）；会进 git 的写下去会改掉用户
+ * 正要 commit 的文件，一律拒绝。返回是否真的写了。
+ */
+export declare function applyInitFile(update: InitFileUpdate): Promise<boolean>;
+/** 会进 git、因此只能提醒用户跑 `weave init` 的漂移条目。 */
+export declare function needsInit(updates: readonly InitFileUpdate[]): boolean;
+export {};

package/node_modules/@weavecode/server/dist/install/init-files.js

@@ -0,0 +1,2 @@
+import{mkdir as y,readFile as m,writeFile as g}from"node:fs/promises";import l from"node:path";import{DEFAULT_HOOKS as f,DEFAULT_MCP as w,HARNESS_KEYS as C,detectPlatform as E,isHarness as x,resolveComponents as O}from"@weavecode/core";import{WEAVE_CONTENT_MARKER as h,generateInitFiles as S}from"@weavecode/harness";import{gitClassify as k}from"./git-classify.js";import{generateStatuslineScript as F}from"../statusline/generator.js";import{readStatuslineConfig as v,statuslineScriptRelPath as A}from"../statusline/manager.js";import{WEAVE_VERSION as P}from"../version.js";function b(t){const e={};for(const o of t.split(`
+`)){const n=o.indexOf(":");if(n<=0)continue;const s=o.slice(0,n).trim(),i=o.slice(n+1).trim();if(s)try{e[s]=JSON.parse(i)}catch{e[s]=i}}return e}function I(t){if(typeof t!="object"||t===null)return f;const e=t,o=Object.fromEntries(Object.keys(f).filter(n=>typeof f[n]=="boolean"&&!(n in e)).map(n=>[n,!1]));return{...f,...o,...e}}export async function readInitRuntime(t){let e;try{e=await m(l.join(t,".weave","config.yaml"),"utf-8")}catch{e=""}const o=b(e),n=o.preset,s=o.components,i=o.hooks,a=o.mcp,c=o.harnesses;return{initVersion:typeof o.initVersion=="string"?o.initVersion:null,preset:n==="minimal"||n==="full"||n==="default"?n:"default",harnesses:Array.isArray(c)?c.filter(x):[],components:O(n==="minimal"||n==="full"||n==="default"?n:"default",typeof s=="object"&&s!==null?s:void 0),hooks:I(i),mcp:{...w,...typeof a=="object"&&a!==null?a:{}}}}function R(){return E()}function V(t,e){return{projectPath:t,version:P,platform:R(),components:e.components,hooks:e.hooks,mcp:e.mcp}}async function _(t,e){if(!e.components.helpers)return[];const o=await v(t);return[{relPath:A(),weaveMarker:h,content:F(o)}]}async function N(t){try{return await m(t,"utf-8")}catch{return null}}function H(t,e){return t.merge?e===null?t.content:t.merge(e,t.content):e!==null&&!e.includes(t.weaveMarker??h)?null:t.content}async function M(t){try{return await m(l.join(t,".weave","config.yaml"),"utf-8"),!0}catch{return!1}}export async function detectInitFileUpdates(t){if(!await M(t))return[];const e=await readInitRuntime(t),o=V(t,e),n=e.harnesses.length>0?e.harnesses:[C[0]],s=[...await _(t,e)];for(const r of n)s.push(...await S(r,o));const i=[];for(const r of s){const p=l.join(t,...r.relPath.split("/")),d=await N(p),u=H(r,d);i.push({relPath:r.relPath,targetPath:p,outdated:u!==null&&u!==d,syncClass:null,expectedContent:u})}const a=i.filter(r=>r.outdated),c=await k(t,a.map(r=>r.relPath));for(const r of a)r.syncClass=c.classOf(r.relPath);return i}export async function applyInitFile(t){return t.syncClass!=="auto"||!t.outdated||t.expectedContent===null?!1:(await y(l.dirname(t.targetPath),{recursive:!0}),await g(t.targetPath,t.expectedContent,"utf-8"),!0)}export function needsInit(t){return t.some(e=>e.syncClass==="manual"&&e.outdated)}

package/node_modules/@weavecode/server/dist/install/install-ledger.d.ts

@@ -0,0 +1,20 @@
+import type { Harness } from '@weavecode/core';
+import type { FileAssetCategory } from './file-assets.js';
+/**
+ * 安装意图账本（`.weave/installed.json`）——"本该装着"的资产清单。
+ *
+ * 扫盘只能看到现存的东西：**被删掉的和从没装过的在报告里长得一模一样**，自动同步
+ * 因此无从补齐。安装时登记、卸载时删账（主动卸载不该被补齐逆回），账本损坏一律
+ * 当空（读侧口径同 server 其它 JSON 读）。只收 project scope —— 全局资产是用户级
+ * 共享，不随某个项目的同步走。
+ */
+export interface InstalledAssetRecord {
+    category: 'skill' | 'mcp' | 'file';
+    name: string;
+    agent: Harness;
+    /** file 资产必填（FILE_ASSET_SPECS 的键）。 */
+    assetCategory?: FileAssetCategory;
+}
+export declare function readInstalledLedger(projectPath: string): Promise<InstalledAssetRecord[]>;
+export declare function recordInstalled(projectPath: string, record: InstalledAssetRecord): Promise<void>;
+export declare function forgetInstalled(projectPath: string, record: InstalledAssetRecord): Promise<void>;

package/node_modules/@weavecode/server/dist/install/install-ledger.js

@@ -0,0 +1,2 @@
+import{mkdir as c,readFile as l,writeFile as y}from"node:fs/promises";import r from"node:path";const i=r.join(".weave","installed.json"),s=t=>[t.category,t.name,t.agent,t.assetCategory??""].join("\0");function g(t){if(!t||typeof t!="object")return!1;const e=t;return(e.category==="skill"||e.category==="mcp"||e.category==="file")&&typeof e.name=="string"&&e.name!==""&&typeof e.agent=="string"}export async function readInstalledLedger(t){try{const e=JSON.parse(await l(r.join(t,i),"utf-8"));return Array.isArray(e.assets)?e.assets.filter(g):[]}catch{return[]}}export async function recordInstalled(t,e){const n=await readInstalledLedger(t);n.some(a=>s(a)===s(e))||await o(t,[...n,e])}export async function forgetInstalled(t,e){const n=await readInstalledLedger(t),a=n.filter(f=>s(f)!==s(e));a.length!==n.length&&await o(t,a)}async function o(t,e){const n=r.join(t,i);await c(r.dirname(n),{recursive:!0}),await y(n,`${JSON.stringify({version:1,assets:e},null,2)}
+`,"utf-8")}

package/node_modules/@weavecode/server/dist/install/installer.d.ts

@@ -0,0 +1,46 @@
+import type { Harness } from '@weavecode/core';
+import { type FileAssetCategory } from './file-assets.js';
+/**
+ * Asset install/uninstall — pure filesystem operations, no sqlite writes.
+ *
+ * The watch service observes `.claude/`, `.codex/`, `.mcp.json` and the two
+ * instruction files, so after install/uninstall returns, chokidar fires
+ * add/unlink → the cache + SSE stream update the dashboard automatically. The
+ * API layer therefore does not push asset changes itself.
+ */
+export declare class InstallConflictError extends Error {
+    constructor(message: string);
+}
+export declare class AssetNotFoundError extends Error {
+    constructor(message: string);
+}
+export interface McpServerConfig {
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+}
+/** Which coding agent an install targets — Claude Code or Codex surfaces. */
+export type InstallAgent = Harness;
+/** Copy an entire skill directory into the agent's `<skills>/<name>/`. */
+export declare function installSkill(projectPath: string, sourceDir: string, name: string, agent?: InstallAgent): Promise<string>;
+/** Remove the agent's skill directory `<skills>/<name>/`. */
+export declare function uninstallSkill(projectPath: string, name: string, agent?: InstallAgent): Promise<void>;
+/**
+ * Copy a single template file to the agent/scope-resolved target directory
+ * (see file-assets.ts for the surface table). The file is renamed to
+ * `<name><ext>` — the library's file stem and the install name agree in
+ * practice, but the install name wins so renames stay explicit.
+ */
+export declare function installFileAsset(projectPath: string, category: FileAssetCategory, name: string, sourceFile: string, agent?: InstallAgent, scope?: 'project' | 'user'): Promise<string>;
+/** Remove a single installed file asset (agent/scope-resolved path). */
+export declare function uninstallFileAsset(projectPath: string, category: FileAssetCategory, name: string, agent?: InstallAgent, scope?: 'project' | 'user'): Promise<void>;
+/** Add a `mcpServers[name]` entry to `.mcp.json`, preserving existing entries. */
+export declare function installMcp(projectPath: string, name: string, config: McpServerConfig): Promise<void>;
+/** Remove the `mcpServers[name]` entry from `.mcp.json`. */
+export declare function uninstallMcp(projectPath: string, name: string): Promise<void>;
+/** Read and parse `.mcp.json`; a missing/invalid file yields an empty object. */
+export declare function readMcpJson(file: string): Promise<{
+    mcpServers?: Record<string, unknown>;
+}>;
+/** Read the `mcpServers` map from a project's `.mcp.json` (empty if absent). */
+export declare function readMcpServers(projectPath: string): Promise<Record<string, McpServerConfig>>;

package/node_modules/@weavecode/server/dist/install/installer.js

@@ -0,0 +1,3 @@
+import{cp as p,rm as S,readFile as E,writeFile as x,access as g,mkdir as C}from"node:fs/promises";import{homedir as y}from"node:os";import n from"node:path";import{FILE_ASSET_SPECS as $,fileAssetTargetDir as v}from"./file-assets.js";import{assetSurfaceFor as F}from"../surfaces.js";import{forgetInstalled as f,recordInstalled as d}from"./install-ledger.js";export class InstallConflictError extends Error{constructor(t){super(t),this.name="InstallConflictError"}}export class AssetNotFoundError extends Error{constructor(t){super(t),this.name="AssetNotFoundError"}}const w=".mcp.json";function c(r){if(!r||r.includes("/")||r.includes("\\")||r.includes("..")||r.includes(n.sep))throw new Error(`Invalid asset name: "${r}"`)}async function l(r){try{return await g(r),!0}catch{return!1}}function j(r){return F(r).projectSkillsDir()}export async function installSkill(r,t,i,s="claude"){c(i);const e=n.join(r,j(s),i);if(await l(e))throw new InstallConflictError(`Skill "${i}" is already installed${s==="codex"?" (Codex)":""}`);return await p(t,e,{recursive:!0}),await d(r,{category:"skill",name:i,agent:s}),e}export async function uninstallSkill(r,t,i="claude"){c(t);const s=n.join(r,j(i),t);if(!await l(s))throw new AssetNotFoundError(`Skill "${t}" is not installed${i==="codex"?" (Codex)":""}`);await S(s,{recursive:!0,force:!0}),await f(r,{category:"skill",name:t,agent:i})}export async function installFileAsset(r,t,i,s,e="claude",o="project"){c(i);const a=v(t,e,o,r,y()),u=n.join(a,`${i}${$[t].ext}`);if(await l(u))throw new InstallConflictError(`${t} "${i}" is already installed`);return await C(a,{recursive:!0}),await p(s,u),o==="project"&&await d(r,{category:"file",name:i,agent:e,assetCategory:t}),u}export async function uninstallFileAsset(r,t,i,s="claude",e="project"){c(i);const o=v(t,s,e,r,y()),a=n.join(o,`${i}${$[t].ext}`);if(!await l(a))throw new AssetNotFoundError(`${t} "${i}" is not installed`);await S(a,{force:!0}),e==="project"&&await f(r,{category:"file",name:i,agent:s,assetCategory:t})}export async function installMcp(r,t,i){c(t);const s=n.join(r,w),e=await readMcpJson(s),o=e.mcpServers??{};if(t in o)throw new InstallConflictError(`MCP server "${t}" is already configured`);o[t]=i,e.mcpServers=o,await x(s,`${JSON.stringify(e,null,2)}
+`,"utf-8"),await d(r,{category:"mcp",name:t,agent:"claude"})}export async function uninstallMcp(r,t){c(t);const i=n.join(r,w),s=await readMcpJson(i),e=s.mcpServers??{};if(!(t in e))throw new AssetNotFoundError(`MCP server "${t}" is not configured`);delete e[t],s.mcpServers=e,await x(i,`${JSON.stringify(s,null,2)}
+`,"utf-8"),await f(r,{category:"mcp",name:t,agent:"claude"})}export async function readMcpJson(r){try{const t=await E(r,"utf-8"),i=JSON.parse(t);return i&&typeof i=="object"?i:{}}catch{return{}}}export async function readMcpServers(r){return(await readMcpJson(n.join(r,w))).mcpServers??{}}

package/node_modules/@weavecode/server/dist/install/library-index.d.ts

@@ -0,0 +1,71 @@
+import type { FileAssetCategory } from './file-assets.js';
+import type { LibraryRow } from '../repositories/libraries.js';
+import type { McpServerConfig } from './installer.js';
+/**
+ * Library source index — resolves "where did this installed asset come from?"
+ * WITHOUT persisting a source mapping to sqlite.
+ *
+ * The join key is the asset's *name*: a skill installed at
+ * `.claude/skills/<name>/` is matched against every registered library's
+ * `scanLibrarySkills` output (which also keys by directory basename). MCP
+ * entries (`.mcp.json` key = name) are matched the same way against library
+ * MCP templates. This keeps the filesystem the single source of truth: we
+ * never store "skill X came from library Y" as state — we recompute it on
+ * demand from the live library directories.
+ *
+ * Scope is likewise inferred from path, not stored:
+ *   project → `<project>/.claude/skills/`
+ *   user    → `~/.claude/skills/`
+ *
+ * Multi-source edge case: if two libraries both define `<name>`, the first one
+ * (by `libraries.list()` order) wins for update-checking. Any matching source
+ * is sufficient to detect "outdated"; a precise multi-source UI can be layered
+ * on later without a schema change.
+ *
+ * 批 9（R11）：传入的 `LibraryRow[]` 假定已由 `LibraryRepository` 读侧经
+ * `market/resolve` 解析为绝对路径（最浅接入——收编在 repo 读侧，本模块不逐处
+ * resolve）；测试直构的行本就是绝对路径，行为不变。
+ */
+export interface SkillSource {
+    name: string;
+    libraryId: number;
+    libraryPath: string;
+    /** Absolute path to the skill directory in the library (copy source). */
+    dirPath: string;
+}
+export interface McpSource {
+    name: string;
+    libraryId: number;
+    libraryPath: string;
+    config: McpServerConfig;
+    /** Absolute path to the JSON file this template was loaded from. */
+    sourcePath: string;
+}
+export interface FileAssetSource {
+    name: string;
+    category: FileAssetCategory;
+    libraryId: number;
+    libraryPath: string;
+    /** Absolute path to the template file (copy source). */
+    filePath: string;
+}
+export interface LibraryIndex {
+    /** name → source (first library wins on collision). */
+    skills: Map<string, SkillSource>;
+    /** name → source (first library wins on collision). */
+    mcp: Map<string, McpSource>;
+    /** `${category}/${name}` → source (first library wins on collision). */
+    files: Map<string, FileAssetSource>;
+}
+/**
+ * Scan every registered library and build name→source indexes for skills and
+ * MCP templates. Libraries whose kind excludes a category, or that are
+ * unreadable, are skipped for that category.
+ */
+export declare function buildLibraryIndex(libraries: LibraryRow[]): Promise<LibraryIndex>;
+/** Resolve the library source for an installed skill by name, if any. */
+export declare function findSkillSource(index: LibraryIndex, name: string): SkillSource | undefined;
+/** Resolve the library source for an installed MCP server by name, if any. */
+export declare function findMcpSource(index: LibraryIndex, name: string): McpSource | undefined;
+/** Resolve the library source for an installed file asset, if any. */
+export declare function findFileAssetSource(index: LibraryIndex, category: FileAssetCategory, name: string): FileAssetSource | undefined;

package/node_modules/@weavecode/server/dist/install/library-index.js

@@ -0,0 +1 @@
+import{getLibraryScan as u}from"./scan-cache.js";export async function buildLibraryIndex(e){const a=new Map,r=new Map,s=new Map;for(const t of e){const m=t.kind==="skill"||t.kind==="both",p=t.kind==="mcp"||t.kind==="both";let o;try{o=await u(t.path)}catch{continue}if(m){for(const n of o.skills)a.has(n.name)||a.set(n.name,{name:n.name,libraryId:t.id,libraryPath:t.path,dirPath:n.dirPath});for(const n of Object.values(o.files))for(const i of n){const c=`${i.category}/${i.name}`;s.has(c)||s.set(c,{name:i.name,category:i.category,libraryId:t.id,libraryPath:t.path,filePath:i.filePath})}}if(p){for(const n of o.mcp)if(!r.has(n.name)){const{name:i,command:c,args:f,env:l,sourcePath:d}=n,h={command:c,...f&&{args:f},...l&&{env:l}};r.set(n.name,{name:i,libraryId:t.id,libraryPath:t.path,config:h,sourcePath:d})}}}return{skills:a,mcp:r,files:s}}export function findSkillSource(e,a){return e.skills.get(a)}export function findMcpSource(e,a){return e.mcp.get(a)}export function findFileAssetSource(e,a,r){return e.files.get(`${a}/${r}`)}

package/node_modules/@weavecode/server/dist/install/mcp-rows.d.ts

@@ -0,0 +1,11 @@
+import type { ToolStateRow } from '@weavecode/core';
+import { type McpServerConfig } from './installer.js';
+export type McpToolRow = ToolStateRow<McpServerConfig>;
+/**
+ * MCP 工具行装配（工具对象模型首个产消方）：三处表示法（项目 `.mcp.json` /
+ * `~/.claude.json` / `~/.codex/config.toml`）读出的服务器映射展平成
+ * harness × scope 状态行。范围来自 `AssetSurface.mcpScopes`；启停覆写与
+ * 生效态由服务端解析（词表桥在 settings-mcp，文件表示法不出 server）。
+ * 行行携带 installScopes——web 的视图选择与安装控制不依赖能力表二次拉取。
+ */
+export declare function readMcpRows(projectPath: string): Promise<McpToolRow[]>;

package/node_modules/@weavecode/server/dist/install/mcp-rows.js

@@ -0,0 +1 @@
+import{readMcpServers as d}from"./installer.js";import{readGlobalMcpServers as v}from"./global-config.js";import{readCodexMcpServers as M}from"./codex-toml.js";import{readMcpEnableMap as S,mcpOverrideOf as h,resolveMcpEffective as w}from"./settings-mcp.js";import{assetSurfaces as x}from"../surfaces.js";export async function readMcpRows(s){const[p,a,n,f]=await Promise.all([d(s).catch(()=>({})),v().catch(()=>({})),M().catch(()=>({})),S(s)]),l=new Map(x().map(e=>[e.harness,e.mcpScopes()])),t=[],c=(e,m,i,r)=>{for(const[o,u]of Object.entries(i))t.push({key:o,category:"mcp",harness:e,scope:m,installScopes:l.get(e)??[],enable:r?h(r,o):null,effective:r?w(r,o):!0,detail:u})};return c("claude","project",p,f),c("claude","user",a,null),c("codex","user",n,null),t}

package/node_modules/@weavecode/server/dist/install/plugin-install.d.ts

@@ -0,0 +1,12 @@
+import type { PluginInstallInfo, PluginSurface } from '@weavecode/harness';
+/**
+ * user 档安装（globalInstall）的服务端唯一编排：市场身份判据（marketIdOf 的
+ * 唯一实现）+ marketplace 落点拼装收在此——toolkit 管线与安装路由同源取用，
+ * 不得各自内联。server 只给面传语义参数（包名 + 市场身份），表示法留 harness。
+ */
+export declare function installPluginPack(surface: PluginSurface, pack: {
+    dir: string;
+    name: string;
+    version?: string;
+    description?: string;
+}): Promise<PluginInstallInfo>;

package/node_modules/@weavecode/server/dist/install/plugin-install.js

@@ -0,0 +1 @@
+import t from"node:path";import{marketIdOf as o}from"../market/identity.js";import{marketDir as e}from"../market/manifest.js";export async function installPluginPack(n,r){const i=o(r.dir);return n.globalInstall(r.dir,{name:r.name,version:r.version,description:r.description,...i?{marketplace:{name:i,dir:t.join(e(),i)}}:{}})}

package/node_modules/@weavecode/server/dist/install/plugin-rows.d.ts

@@ -0,0 +1,9 @@
+import type { ToolStateRow } from '@weavecode/core';
+/**
+ * 插件工具行装配（工具对象模型 §2，PluginEnabledMap 的替换面）：行 = 每键 ×
+ * 每可装档一行，install/enable 逐档独立，effective 由本模块唯一解析
+ * （档序弱→强 = local > project > user；全链无覆写 = 不加载，CC 三阶段模型）。
+ * 依赖注入与 mcp-rows 同式：无——测试经 HOME/USERPROFILE 假家目录控文件。
+ */
+export type PluginToolRow = ToolStateRow;
+export declare function readPluginRows(projectPath: string): Promise<PluginToolRow[]>;

package/node_modules/@weavecode/server/dist/install/plugin-rows.js

@@ -0,0 +1 @@
+import{pluginSurfaces as b,pluginStateSurfaces as g}from"../surfaces.js";const u=["user","project","local"],v=(s,e)=>e in s?s[e]?"on":"off":"inherit";function y(s,e){for(let n=u.length-1;n>=0;n--){const o=s[u[n]][e];if(o!==void 0)return o}return!1}export async function readPluginRows(s){const e=[],n=b();for(const{harness:o,surface:a}of n){const l=a.pluginScopes(),[t,c]=await Promise.all([a.readInstalled().catch(()=>({})),a.readEnabledOverrides(s).catch(()=>({user:{},project:{},local:{}}))]),p=new Set(Object.keys(t));for(const r of u)for(const f of Object.keys(c[r]))p.add(f);for(const r of p){const f=t[r],d=y(c,r);for(const i of l)e.push({key:r,category:"plugin",harness:o,scope:i,installScopes:l,install:f?.some(h=>(h.scope??"user")===i)?"installed":"absent",enable:v(c[i],r),effective:d})}}for(const{harness:o,state:a}of g()){if(n.some(t=>t.harness===o))continue;const l=await a.readGlobalEnabled().catch(()=>({}));for(const[t,c]of Object.entries(l))e.push({key:t,category:"plugin",harness:o,scope:"user",installScopes:[],enable:c?"on":"off",effective:c})}return e}

package/node_modules/@weavecode/server/dist/install/plugin-templates.d.ts

@@ -0,0 +1,19 @@
+import type { FingerprintCache } from './fingerprint.js';
+export type PluginTemplateCategory = 'skill' | 'command' | 'agent';
+export interface PluginTemplateUpdate {
+    pluginId: string;
+    category: PluginTemplateCategory;
+    /** 模板名（basename 去 `.md`）。 */
+    name: string;
+    sourcePath: string;
+    targetPath: string;
+    /** 目标缺失或内容与源不同。 */
+    outdated: boolean;
+}
+/** 项目插件模板的漂移清单（含全部声明，`outdated` 标注是否需同步）。 */
+export declare function detectPluginTemplateUpdates(projectPath: string, cache: FingerprintCache): Promise<PluginTemplateUpdate[]>;
+/**
+ * 覆盖物化一个模板副本——显式同步动作，已存在的副本被源覆盖（init 侧的
+ * `writeFileIfAbsent` 不覆盖语义不适用于用户点同步）。
+ */
+export declare function materializePluginTemplate(t: PluginTemplateUpdate): Promise<void>;

package/node_modules/@weavecode/server/dist/install/plugin-templates.js

@@ -0,0 +1 @@
+import{cp as f,mkdir as d,readdir as P,readFile as h,rm as w}from"node:fs/promises";import{homedir as y}from"node:os";import a from"node:path";import{WEAVE_PLUGIN_MANIFEST as k,WeavePluginManifestSchema as v}from"@weavecode/core";import{assetSurfaceFor as E}from"../surfaces.js";const T={skills:"skill",commands:"command",agents:"agent"};async function j(t){const e=[];let s;try{s=await P(t)}catch{return e}for(const o of s){const i=a.join(t,o);try{const c=JSON.parse(await h(a.join(i,k),"utf8")),r=v.safeParse(c);r.success&&e.push({dir:i,manifest:r.data})}catch{}}return e}function S(t,e,s){const o=[];if(!s.templates)return o;const i=E("claude"),c=a.join(t,...i.projectSkillsDir().split("/"));for(const[r,l]of Object.entries(s.templates)){const n=T[r];if(n)for(const p of l??[]){const u=a.resolve(e,p);if(!u.startsWith(a.resolve(e)+a.sep))continue;const m=a.basename(u),g=n==="skill"?c:i.targetDir(n,"project",t,y());o.push({pluginId:s.id,category:n,name:m.replace(/\.md$/,""),sourcePath:u,targetPath:a.join(g,m)})}}return o}export async function detectPluginTemplateUpdates(t,e){const s=[],o=a.join(t,".weave","plugins");for(const{dir:i,manifest:c}of await j(o))for(const r of S(t,i,c)){const[l,n]=r.category==="skill"?await Promise.all([e.get(r.sourcePath),e.get(r.targetPath)]):await Promise.all([e.getFile(r.sourcePath),e.getFile(r.targetPath)]);s.push({...r,outdated:l!==n})}return s}export async function materializePluginTemplate(t){if(t.category==="skill"){await w(t.targetPath,{recursive:!0,force:!0}),await f(t.sourcePath,t.targetPath,{recursive:!0});return}await d(a.dirname(t.targetPath),{recursive:!0}),await f(t.sourcePath,t.targetPath)}

package/node_modules/@weavecode/server/dist/install/project-config.d.ts

@@ -0,0 +1,11 @@
+export interface ProjectConfig {
+    /** ISO timestamp of the last successful sync (null if never). */
+    lastSyncAt: string | null;
+}
+export declare const DEFAULT_PROJECT_CONFIG: ProjectConfig;
+/** Read the project's weave config; falls back to defaults when absent. */
+export declare function readProjectConfig(projectPath: string): Promise<ProjectConfig>;
+/** Persist the project config, creating `.weave/` if needed. */
+export declare function writeProjectConfig(projectPath: string, config: ProjectConfig): Promise<void>;
+/** Mark a sync as having happened at the given ISO timestamp. */
+export declare function markSynced(projectPath: string, iso: string): Promise<void>;

package/node_modules/@weavecode/server/dist/install/project-config.js

@@ -0,0 +1,2 @@
+import{readFile as a,writeFile as e,mkdir as s}from"node:fs/promises";import i from"node:path";const c=".weave",f="config.json";export const DEFAULT_PROJECT_CONFIG={lastSyncAt:null};function o(t){return i.join(t,c,f)}function u(t){return{lastSyncAt:t.lastSyncAt??DEFAULT_PROJECT_CONFIG.lastSyncAt}}export async function readProjectConfig(t){try{const n=await a(o(t),"utf-8");return u(JSON.parse(n))}catch{return DEFAULT_PROJECT_CONFIG}}export async function writeProjectConfig(t,n){const r=i.join(t,c);await s(r,{recursive:!0}),await e(o(t),`${JSON.stringify(n,null,2)}
+`,"utf-8")}export async function markSynced(t,n){const r=await readProjectConfig(t);await writeProjectConfig(t,{...r,lastSyncAt:n})}

package/node_modules/@weavecode/server/dist/install/reader.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Project file reader — serves text content of Claude Code assets for the
+ * dashboard (e.g. a skill's `SKILL.md`). Pure read: the watch service observes
+ * `.claude/` and `.mcp.json`, so edits made elsewhere still flow through SSE.
+ *
+ * Access is confined to the allowed roots: `.claude/` and `.codex/` (any
+ * depth), `.weave/` (weave's own surface — the watch service observes it, so
+ * the dashboard must be able to open what it lists), the MCP config
+ * (`.mcp.json`), and the instruction files (`CLAUDE.md` / `AGENTS.md`).
+ * Path traversal and absolute paths are rejected before touching the
+ * filesystem.
+ */
+/** A project-relative path tried to escape its allowed roots. */
+export declare class PathEscapeError extends Error {
+    constructor(message: string);
+}
+/** A requested file exceeds the size cap. */
+export declare class FileTooLargeError extends Error {
+    constructor(message: string);
+}
+export interface ProjectFile {
+    content: string;
+    size: number;
+}
+/** Maximum bytes returned by the reader (keep payloads small for the browser). */
+export declare const MAX_BYTES: number;
+/**
+ * Resolve a project-relative path and ensure it stays inside the allowed roots.
+ * Rejects absolute paths and any segment equal to `..`.
+ */
+export declare function resolveProjectFile(projectPath: string, relPath: string): string;
+/** Read a text file from the project, enforcing the allowed-root + size limits. */
+export declare function readProjectFile(projectPath: string, relPath: string): Promise<ProjectFile>;
+/** Read a machine-level harness file (`~/.claude/…`, `~/.codex/…`).
+ * Same allowed roots as the project reader — only the base changes to the
+ * user's home directory. */
+export declare function readGlobalFile(relPath: string): Promise<ProjectFile>;

package/node_modules/@weavecode/server/dist/install/reader.js

@@ -0,0 +1 @@
+import{readFile as l,stat as d}from"node:fs/promises";import{homedir as w}from"node:os";import s from"node:path";import{AssetNotFoundError as n}from"./installer.js";export class PathEscapeError extends Error{constructor(e){super(e),this.name="PathEscapeError"}}export class FileTooLargeError extends Error{constructor(e){super(e),this.name="FileTooLargeError"}}export const MAX_BYTES=512*1024;export function resolveProjectFile(t,e){const o=s.normalize(e).replace(/\\/g,"/");if(s.isAbsolute(e))throw new PathEscapeError(`Absolute paths are not allowed: "${e}"`);if(o.split("/").some(c=>c===".."))throw new PathEscapeError(`Path traversal is not allowed: "${e}"`);if(!(o===".mcp.json"||o==="CLAUDE.md"||o==="AGENTS.md"||o===".claude"||o.startsWith(".claude/")||o===".codex"||o.startsWith(".codex/")||o===".weave"||o.startsWith(".weave/")))throw new PathEscapeError(`Path is outside the allowed roots: "${e}"`);const i=s.join(t,o),a=t.endsWith(s.sep)?t:t+s.sep;if(i!==t&&!i.startsWith(a))throw new PathEscapeError(`Resolved path escapes the project: "${e}"`);return i}export async function readProjectFile(t,e){const o=resolveProjectFile(t,e);let r;try{r=await d(o)}catch{throw new n(`File not found: "${e}"`)}if(!r.isFile())throw new n(`Not a file: "${e}"`);if(r.size>MAX_BYTES)throw new FileTooLargeError(`File exceeds ${MAX_BYTES} bytes: "${e}"`);return{content:await l(o,"utf-8"),size:r.size}}export async function readGlobalFile(t){return readProjectFile(w(),t)}

package/node_modules/@weavecode/server/dist/install/scan-cache.d.ts

@@ -0,0 +1,20 @@
+import { type FileAssetTemplate, type MarketPluginAsset, type McpTemplate, type SkillAsset } from './scanner.js';
+import type { FileAssetCategory } from './file-assets.js';
+/** 四扫描全量原料（不带 kind 门控——门控是调用方的事，缓存只存原料）。 */
+export interface LibraryScan {
+    plugins: MarketPluginAsset[];
+    packRoots: string[];
+    skills: SkillAsset[];
+    mcp: McpTemplate[];
+    files: Record<FileAssetCategory, FileAssetTemplate[]>;
+}
+/** 四扫描编排唯一出口：plugins 先行定 packRoots（包内资源排除），再三线并扫。 */
+export declare function scanLibrary(libPath: string): Promise<LibraryScan>;
+/**
+ * 缓存读取：内存 → 旁挂 `scans.json` → 扫描（write-through）。
+ * 只有导入覆盖/刷新/检查更新等事件失效，开页读路径一律走这里不扫树。
+ */
+export declare function getLibraryScan(libPath: string): Promise<LibraryScan>;
+/** 热层删键 + 删该库的 `.weave-scans/<名>/`；等在途扫描落地再删，防旧结果回写。 */
+export declare function invalidateScan(dir: string): Promise<void>;
+export declare function clearScanCache(): void;

package/node_modules/@weavecode/server/dist/install/scan-cache.js

@@ -0,0 +1 @@
+import{mkdir as f,readFile as p,rm as w,writeFile as m}from"node:fs/promises";import t from"node:path";import{scanLibraryFileAssets as d,scanLibraryMcp as g,scanLibraryPlugins as A,scanLibrarySkills as v}from"./scanner.js";const u="scans.json",y=1;function c(n){const r=t.resolve(n);return t.join(t.dirname(r),".weave-scans",t.basename(r))}const a=new Map,o=new Map;export async function scanLibrary(n){const{plugins:r,packRoots:e}=await A(n),[s,i,l]=await Promise.all([v(n,e),g(n,e),d(n,e)]);return{plugins:r,packRoots:e,skills:s,mcp:i,files:l}}export async function getLibraryScan(n){const r=t.resolve(n),e=a.get(r);if(e)return e;const s=o.get(r);if(s)return s;const i=S(r);o.set(r,i);try{return await i}finally{o.delete(r)}}async function S(n){const r=await k(n);if(r)return a.set(n,r),r;const e=await scanLibrary(n);return await L(n,e),a.set(n,e),e}async function k(n){try{const r=JSON.parse(await p(t.join(c(n),u),"utf8"));return!r||r.version!==y||!Array.isArray(r.plugins)||!Array.isArray(r.packRoots)||!Array.isArray(r.skills)||!Array.isArray(r.mcp)||!r.files||typeof r.files!="object"?null:r}catch{return null}}async function L(n,r){try{await f(c(n),{recursive:!0}),await m(t.join(c(n),u),JSON.stringify({version:y,...r}),"utf8")}catch{}}export async function invalidateScan(n){const r=t.resolve(n);a.delete(r);const e=o.get(r);e&&await e.catch(()=>{}),await w(c(r),{recursive:!0,force:!0}),a.delete(r)}export function clearScanCache(){a.clear()}

package/node_modules/@weavecode/server/dist/install/scanner.d.ts

@@ -0,0 +1,111 @@
+import type { Harness } from '@weavecode/core';
+import { type FileAssetCategory } from './file-assets.js';
+import { type ToolkitKind, type ToolkitComponent } from '../hooks/toolkit-scan.js';
+export interface SkillAsset {
+    /** Skill name — the containing directory's basename. */
+    name: string;
+    /** Absolute path to the skill directory (copy this whole tree). */
+    dirPath: string;
+    /** Path relative to the library root (for display). */
+    relPath: string;
+    /**
+     * The skill's parent directory (typically a `skills/` folder) relative to the
+     * library root. Skills sharing a parent group together in the panel; an empty
+     * string means the skill sits directly under the library root.
+     */
+    group: string;
+}
+/** Minimal MCP server template (matches Claude Code `.mcp.json` entry shape). */
+export interface McpTemplate {
+    name: string;
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+    /** Absolute path to the JSON file this template was loaded from. */
+    sourcePath: string;
+    /** Path relative to the library root (for display). */
+    relPath: string;
+}
+/** A single-file asset template (command / agent / workflow / rule / output-style). */
+export interface FileAssetTemplate {
+    /** Asset name — the file stem (e.g. "review" for review.md). */
+    name: string;
+    /** Absolute path to the template file (install = copy this one file). */
+    filePath: string;
+    /** Path relative to the library root (for display). */
+    relPath: string;
+    /** The kind directory's parent relative to the library root, for grouping. */
+    group: string;
+    category: FileAssetCategory;
+}
+/** 插件包发现于注册库内（市场扫描出口；web/src/lib/api.ts 镜像同形）。 */
+export interface MarketPluginAsset {
+    name: string;
+    version: string;
+    description?: string;
+    /** CC 注册键 `name@<市场>`（仅 CC 落地包有）：UI 直接展示「是哪个市场的插件」。
+     *  键形由 harness 的 `pluginKey` 拼（server 不写 harness 硬编码）；非市场来源
+     *  落 weave 自建市场。 */
+    key?: string;
+    /** Absolute path to the pack directory (install / enable source). */
+    dirPath: string;
+    /** Pack dir relative to the library root (posix; 包子树排除根的匹配键). */
+    relPath: string;
+    ccPack: boolean;
+    weavePack: boolean;
+    kind: ToolkitKind;
+    components: ToolkitComponent[];
+    targets: Harness[];
+    /** Pack-internal skills carrying a SKILL.md（隶属包，随包启停，不独立安装）。 */
+    skills: string[];
+}
+/** `scanLibraryPlugins` 出参：可展示的包 + 全部排除根（见 packRoots 语义）。 */
+export interface LibraryPluginsScan {
+    /** 可装载成分解析成功的包（web plugin 区展示用）。 */
+    plugins: MarketPluginAsset[];
+    /**
+     * 谓词命中的全部包根 relPath——**含 `parseToolkitPack` 返回 null 的空成分包**
+     * （manifest-only 外壳：plugins 不产出，但其子树资源仍隶属包，必须排除，
+     * 否则壳内嵌套的 skill/表面成分会从 skill 区泄漏）。空串 = 根即包（整库排除）。
+     */
+    packRoots: string[];
+}
+/**
+ * 扫描库内插件包：**全递归**遍历任意深度子目录做窄谓词命中 → 解析委托
+ * `parseToolkitPack` → 停钻（包是原子单元，不进包内找嵌套包）。`.claude`/
+ * `.codex` 等点目录与 SKIP_DIRS 由 walk 跳过。
+ *
+ * 包内资源（skill/表面成分/mcp）**隶属该包**——不独立安装、随包启停；
+ * 路由侧把 `packRoots` 作为 excludeRelRoots 传给其余三条扫描。
+ */
+export declare function scanLibraryPlugins(libPath: string): Promise<LibraryPluginsScan>;
+/**
+ * Recursively scan a library directory for skills. A skill is any directory
+ * that directly contains a `SKILL.md` file. Once a skill directory is found we
+ * do NOT descend into it (its `assets/`, `scripts/`, `references/` subtrees are
+ * part of the skill, not separate skills).
+ *
+ * Handles both library layouts: weave-templates (`templates/skills/<name>/SKILL.md`)
+ * and personal libraries like zj-skills (`<name>/SKILL.md` at the top level).
+ *
+ * `excludeRelRoots`：位于插件包子树内的 skill 不产出——skill 隶属 plugin，
+ * 随包启停、不独立安装（缺省空数组 = 现状行为，存量调用零改）。
+ */
+export declare function scanLibrarySkills(libPath: string, excludeRelRoots?: string[]): Promise<SkillAsset[]>;
+/**
+ * Scan a library for MCP server templates. A template is a JSON file that
+ * either (a) IS a single server config `{ command, args?, env? }` named after
+ * its file stem, or (b) wraps multiple servers under `mcpServers`. Two file
+ * layouts are recognised: `<lib>/mcp/<name>.json` and `<lib>/<name>.mcp.json`.
+ * Files that fail to parse are skipped (never throw).
+ */
+export declare function scanLibraryMcp(libPath: string, excludeRelRoots?: string[]): Promise<McpTemplate[]>;
+/**
+ * Scan a library for single-file asset templates. A directory whose basename
+ * matches a kind dir ("commands", "agents", "workflows", "rules",
+ * "output-styles") contributes its direct files of the matching extension;
+ * the kind dir is not descended into. Directories containing SKILL.md are
+ * always skipped — they are skill dirs, even if coincidentally named like a
+ * kind dir. Results are grouped per kind.
+ */
+export declare function scanLibraryFileAssets(libPath: string, excludeRelRoots?: string[]): Promise<Record<FileAssetCategory, FileAssetTemplate[]>>;

package/node_modules/@weavecode/server/dist/install/scanner.js

@@ -0,0 +1 @@
+import{readdir as l,readFile as j,stat as E}from"node:fs/promises";import{join as o,basename as p,relative as f,dirname as S}from"node:path";import{FILE_ASSET_SPECS as A,FILE_ASSET_CATEGORIES as h}from"./file-assets.js";import{hasNonEmptyModules as L}from"../watch/plugin-mods.js";import{parseToolkitPack as I}from"../hooks/toolkit-scan.js";import{marketIdOf as T}from"../market/identity.js";import{pluginSurfaceFor as d}from"../surfaces.js";function _(t){if(!(!(t.ccPack||t.kind==="mod")||!t.targets.includes("claude")))return d("claude").pluginKey(t.name,T(t.dir))}const y=new Set(["node_modules",".git","dist","build",".next","coverage",".cache"]);async function g(t){try{return(await E(t)).isFile()}catch{return!1}}async function D(t){if(await g(o(t,".claude-plugin","plugin.json"))||await g(o(t,"weave-plugin.json")))return!0;try{const e=JSON.parse(await j(o(t,"hooks","hooks.json"),"utf8"));return L(e)}catch{return!1}}const M=10;export async function scanLibraryPlugins(t){const e=[],r=[],c=async(a,n)=>{if(await D(a)){r.push(f(t,a).replace(/\\/g,"/"));const s=await I(a,{root:t,provenance:"market"},"");if(s){const u=[];for(const k of s.skills)await g(o(a,"skills",k,"SKILL.md"))&&u.push(k);const m=_(s);e.push({name:s.name,version:s.version,...s.description?{description:s.description}:{},...m?{key:m}:{},dirPath:s.dir,relPath:f(t,a).replace(/\\/g,"/"),ccPack:s.ccPack,weavePack:s.weavePack,kind:s.kind,components:s.components,targets:s.targets,skills:u})}return}if(n>=M)return;let i;try{i=await l(a,{withFileTypes:!0})}catch{return}for(const s of i)s.isDirectory()&&(s.name.startsWith(".")||y.has(s.name)||await c(o(a,s.name),n+1))};return await c(t,0),{plugins:e.sort((a,n)=>a.relPath.localeCompare(n.relPath)),packRoots:r.sort((a,n)=>a.localeCompare(n))}}function w(t,e){return!e||e.length===0?!1:e.some(r=>r===""||t===r||t.startsWith(`${r}/`))}export async function scanLibrarySkills(t,e){const r=[];return await P(t,t,r,e),r.sort((c,a)=>c.name.localeCompare(a.name))}async function P(t,e,r,c){if(w(f(t,e).replace(/\\/g,"/"),c))return;let a;try{a=await l(e,{withFileTypes:!0})}catch{return}if(a.some(n=>n.isFile()&&n.name==="SKILL.md")){r.push({name:p(e),dirPath:e,relPath:f(t,e).replace(/\\/g,"/"),group:f(t,S(e)).replace(/\\/g,"/")});return}for(const n of a)n.isDirectory()&&(n.name.startsWith(".")||y.has(n.name)||await P(t,o(e,n.name),r,c))}export async function scanLibraryMcp(t,e){const r=[];await v(t,t,r,e);const c=[];for(const a of r)try{const n=JSON.parse(await j(a.abs,"utf-8"));O(n,a,c)}catch{}return c.sort((a,n)=>a.name.localeCompare(n.name))}async function v(t,e,r,c){if(w(f(t,e).replace(/\\/g,"/"),c))return;let a;try{a=await l(e,{withFileTypes:!0})}catch{return}for(const n of a)if(n.isDirectory()){if(n.name.startsWith(".")||y.has(n.name))continue;await v(t,o(e,n.name),r,c)}else if(n.isFile()){const i=n.name.replace(/\.mcp\.json$/i,"").replace(/\.json$/i,""),s=/\.mcp\.json$/i.test(n.name),u=p(e)==="mcp"&&/\.json$/i.test(n.name);(s||u)&&i&&r.push({abs:o(e,n.name),rel:f(t,o(e,n.name)).replace(/\\/g,"/")})}}function O(t,e,r){const c=e.rel.replace(/\.mcp\.json$/i,"").replace(/\.json$/i,"").replace(/^.*\//,"");if(t&&typeof t=="object"&&!Array.isArray(t)){const a=t,n=a.mcpServers;if(n&&typeof n=="object"&&!Array.isArray(n)){for(const[s,u]of Object.entries(n)){const m=F(s,u);m&&r.push({...m,sourcePath:e.abs,relPath:e.rel})}return}const i=F(c,a);i&&r.push({...i,sourcePath:e.abs,relPath:e.rel})}}function F(t,e){if(!e||typeof e!="object"||Array.isArray(e))return null;const r=e;if(typeof r.command!="string"||!r.command)return null;const c={name:t,command:r.command};if(Array.isArray(r.args)&&(c.args=r.args.filter(a=>typeof a=="string")),r.env&&typeof r.env=="object"&&!Array.isArray(r.env)){const a={};for(const[n,i]of Object.entries(r.env))typeof i=="string"&&(a[n]=i);Object.keys(a).length&&(c.env=a)}return c}const C=Object.fromEntries(h.flatMap(t=>Object.values(A[t].dirs).map(e=>e?.project).filter(e=>e!==void 0).map(e=>[p(e),t])));export async function scanLibraryFileAssets(t,e){const r={};for(const c of h)r[c]=[];await b(t,t,r,e);for(const c of h)r[c].sort((a,n)=>a.name.localeCompare(n.name));return r}async function b(t,e,r,c){if(w(f(t,e).replace(/\\/g,"/"),c))return;let a;try{a=await l(e,{withFileTypes:!0})}catch{return}if(a.some(i=>i.isFile()&&i.name==="SKILL.md"))return;const n=C[p(e)];if(n){const i=A[n];for(const s of a){if(!s.isFile()||!s.name.endsWith(i.ext))continue;const u=s.name.slice(0,-i.ext.length);if(!u)continue;const m=o(e,s.name);r[n].push({name:u,filePath:m,relPath:f(t,m).replace(/\\/g,"/"),group:f(t,S(e)).replace(/\\/g,"/"),category:n})}return}for(const i of a)i.isDirectory()&&(i.name.startsWith(".")||y.has(i.name)||await b(t,o(e,i.name),r,c))}

package/node_modules/@weavecode/server/dist/install/settings-mcp.d.ts

@@ -0,0 +1,18 @@
+import type { EnableOverride } from '@weavecode/core';
+export type McpEnableState = 'enabled' | 'disabled' | 'default';
+export interface McpEnableMap {
+    /** name → enable state for servers with an explicit override. */
+    overrides: Record<string, McpEnableState>;
+    /** Whether `enableAllProjectMcpServers` is set true. */
+    enableAll: boolean;
+}
+/** Read the MCP enable map from settings.json. */
+export declare function readMcpEnableMap(projectPath: string): Promise<McpEnableMap>;
+/** 某服务器的覆写态，以模型词表返回（无覆写 = inherit）。 */
+export declare function mcpOverrideOf(map: McpEnableMap, name: string): EnableOverride;
+/** 生效态解析（服务端唯一）：显式覆写优先，未覆写跟随 enableAll。 */
+export declare function resolveMcpEffective(map: McpEnableMap, name: string): boolean;
+/** Set the enable state for one project MCP server, then persist settings.json. */
+export declare function setMcpEnableState(projectPath: string, name: string, state: McpEnableState): Promise<void>;
+/** 以模型词表（on/off/inherit）覆写某服务器的启停，落 settings 三键。 */
+export declare function setMcpEnableOverride(projectPath: string, name: string, state: EnableOverride): Promise<void>;

package/node_modules/@weavecode/server/dist/install/settings-mcp.js

@@ -0,0 +1,2 @@
+import{readFile as f,writeFile as u,mkdir as b,access as p}from"node:fs/promises";import o from"node:path";const c=".claude/settings.json";async function S(t){try{return await p(t),!0}catch{return!1}}async function d(t){const e=o.join(t,c);if(!await S(e))return{};try{const r=JSON.parse(await f(e,"utf-8"));return r&&typeof r=="object"&&!Array.isArray(r)?r:{}}catch{return{}}}async function v(t,e){const r=o.join(t,c);await b(o.dirname(r),{recursive:!0}),await u(r,`${JSON.stringify(e,null,2)}
+`,"utf-8")}export async function readMcpEnableMap(t){const e=await d(t),r=i(e.enabledMcpjsonServers),n=i(e.disabledMcpjsonServers),s={};for(const a of r)s[a]="enabled";for(const a of n)s[a]="disabled";return{overrides:s,enableAll:e.enableAllProjectMcpServers===!0}}const y={enabled:"on",disabled:"off",default:"inherit"},M={on:"enabled",off:"disabled",inherit:"default"};export function mcpOverrideOf(t,e){return y[t.overrides[e]??"default"]}export function resolveMcpEffective(t,e){const r=t.overrides[e];return r==="enabled"?!0:r==="disabled"?!1:t.enableAll}export async function setMcpEnableState(t,e,r){const n=await d(t),s=new Set(i(n.enabledMcpjsonServers)),a=new Set(i(n.disabledMcpjsonServers));s.delete(e),a.delete(e),r==="enabled"?s.add(e):r==="disabled"&&a.add(e),l(n,"enabledMcpjsonServers",s),l(n,"disabledMcpjsonServers",a),await v(t,n)}export function setMcpEnableOverride(t,e,r){return setMcpEnableState(t,e,M[r])}function i(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"):[]}function l(t,e,r){r.size===0?delete t[e]:t[e]=[...r].sort()}