@weavecode/weave 0.1.2 → 0.1.3

package/node_modules/@weavecode/server/dist/install/installer.js

@@ -1 +1 @@
-import{cp as x,rm as y,readFile as k,access as C,mkdir as g}from"node:fs/promises";import{homedir as a}from"node:os";import c from"node:path";import{FILE_ASSET_SPECS as $,fileAssetTargetDir as S}from"./file-assets.js";import{assetSurfaceFor as n}from"../surfaces.js";import{forgetInstalled as w,recordInstalled as p}from"./install-ledger.js";export class InstallConflictError extends Error{constructor(r){super(r),this.name="InstallConflictError"}}export class AssetNotFoundError extends Error{constructor(r){super(r),this.name="AssetNotFoundError"}}function u(t){if(!t||t.includes("/")||t.includes("\\")||t.includes("..")||t.includes(c.sep))throw new Error(`Invalid asset name: "${t}"`)}async function d(t){try{return await C(t),!0}catch{return!1}}function E(t){return n(t).projectSkillsDir()}export async function installSkill(t,r,i,e="claude"){u(i);const s=c.join(t,E(e),i);if(await d(s))throw new InstallConflictError(`Skill "${i}" is already installed${e==="codex"?" (Codex)":""}`);return await x(r,s,{recursive:!0}),await p(t,{category:"skill",name:i,agent:e}),s}export async function uninstallSkill(t,r,i="claude"){u(r);const e=c.join(t,E(i),r);if(!await d(e))throw new AssetNotFoundError(`Skill "${r}" is not installed${i==="codex"?" (Codex)":""}`);await y(e,{recursive:!0,force:!0}),await w(t,{category:"skill",name:r,agent:i})}export async function installFileAsset(t,r,i,e,s="claude",l="project"){u(i);const o=S(r,s,l,t,a()),f=c.join(o,`${i}${$[r].ext}`);if(await d(f))throw new InstallConflictError(`${r} "${i}" is already installed`);return await g(o,{recursive:!0}),await x(e,f),l==="project"&&await p(t,{category:"file",name:i,agent:s,assetCategory:r}),f}export async function uninstallFileAsset(t,r,i,e="claude",s="project"){u(i);const l=S(r,e,s,t,a()),o=c.join(l,`${i}${$[r].ext}`);if(!await d(o))throw new AssetNotFoundError(`${r} "${i}" is not installed`);await y(o,{force:!0}),s==="project"&&await w(t,{category:"file",name:i,agent:e,assetCategory:r})}export async function installMcp(t,r,i){if(r in await readMcpServers(t))throw new InstallConflictError(`MCP server "${r}" is already configured`);await n("claude").mcpWrite("project",t,a(),r,i),await p(t,{category:"mcp",name:r,agent:"claude"})}export async function uninstallMcp(t,r){if(!await n("claude").mcpRemove("project",t,a(),r))throw new AssetNotFoundError(`MCP server "${r}" is not configured`);await w(t,{category:"mcp",name:r,agent:"claude"})}export async function readMcpJson(t){try{const r=await k(t,"utf-8"),i=JSON.parse(r);return i&&typeof i=="object"?i:{}}catch{return{}}}export async function readMcpServers(t){return n("claude").mcpRead("project",t,a())}
+import{cp as w,rm as j,readFile as S,access as h,mkdir as E}from"node:fs/promises";import{homedir as c}from"node:os";import i from"node:path";import{FILE_ASSET_SPECS as m,fileAssetTargetDir as y}from"./file-assets.js";import{assetSurfaceFor as l}from"../surfaces.js";import{forgetInstalled as d,recordInstalled as p}from"./install-ledger.js";import{installForm as g,removeInstalled as k}from"../market/install-link.js";export class InstallConflictError extends Error{constructor(a){super(a),this.name="InstallConflictError"}}export class AssetNotFoundError extends Error{constructor(a){super(a),this.name="AssetNotFoundError"}}function u(e){if(!e||e.includes("/")||e.includes("\\")||e.includes("..")||e.includes(i.sep))throw new Error(`Invalid asset name: "${e}"`)}async function x(e){try{return await h(e),!0}catch{return!1}}function $(e){return l(e).projectSkillsRoots()}export async function installSkill(e,a,t,n="claude"){u(t);const r=$(n);for(const o of r)if(await g(i.join(e,o,t))!=="absent")throw new InstallConflictError(`Skill "${t}" is already installed${n==="codex"?" (Codex)":""}`);const s=i.join(e,r[0],t);return await w(a,s,{recursive:!0}),await p(e,{category:"skill",name:t,agent:n}),s}export async function uninstallSkill(e,a,t="claude"){u(a);let n;for(const r of $(t)){const s=i.join(e,r,a);if(await g(s)!=="absent"){n=s;break}}if(!n)throw new AssetNotFoundError(`Skill "${a}" is not installed${t==="codex"?" (Codex)":""}`);await k(n),await d(e,{category:"skill",name:a,agent:t})}export async function installFileAsset(e,a,t,n,r="claude",s="project"){u(t);const o=y(a,r,s,e,c()),f=i.join(o,`${t}${m[a].ext}`);if(await x(f))throw new InstallConflictError(`${a} "${t}" is already installed`);return await E(o,{recursive:!0}),await w(n,f),s==="project"&&await p(e,{category:"file",name:t,agent:r,assetCategory:a}),f}export async function uninstallFileAsset(e,a,t,n="claude",r="project"){u(t);const s=y(a,n,r,e,c()),o=i.join(s,`${t}${m[a].ext}`);if(!await x(o))throw new AssetNotFoundError(`${a} "${t}" is not installed`);await j(o,{force:!0}),r==="project"&&await d(e,{category:"file",name:t,agent:n,assetCategory:a})}export async function installMcp(e,a,t){if(a in await readMcpServers(e))throw new InstallConflictError(`MCP server "${a}" is already configured`);await l("claude").mcpWrite("project",e,c(),a,t),await p(e,{category:"mcp",name:a,agent:"claude"})}export async function uninstallMcp(e,a){if(!await l("claude").mcpRemove("project",e,c(),a))throw new AssetNotFoundError(`MCP server "${a}" is not configured`);await d(e,{category:"mcp",name:a,agent:"claude"})}export async function readMcpJson(e){try{const a=await S(e,"utf-8"),t=JSON.parse(a);return t&&typeof t=="object"?t:{}}catch{return{}}}export async function readMcpServers(e){return l("claude").mcpRead("project",e,c())}

package/node_modules/@weavecode/server/dist/install/library-index.js

@@ -1 +1 @@
-import{getLibraryScan as u}from"./scan-cache.js";export async function buildLibraryIndex(e){const a=new Map,r=new Map,s=new Map;for(const t of e){const m=t.kind==="skill"||t.kind==="both",p=t.kind==="mcp"||t.kind==="both";let o;try{o=await u(t.path)}catch{continue}if(m){for(const n of o.skills)a.has(n.name)||a.set(n.name,{name:n.name,libraryId:t.id,libraryPath:t.path,dirPath:n.dirPath});for(const n of Object.values(o.files))for(const i of n){const c=`${i.category}/${i.name}`;s.has(c)||s.set(c,{name:i.name,category:i.category,libraryId:t.id,libraryPath:t.path,filePath:i.filePath})}}if(p){for(const n of o.mcp)if(!r.has(n.name)){const{name:i,command:c,args:f,env:l,sourcePath:d}=n,h={command:c,...f&&{args:f},...l&&{env:l}};r.set(n.name,{name:i,libraryId:t.id,libraryPath:t.path,config:h,sourcePath:d})}}}return{skills:a,mcp:r,files:s}}export function findSkillSource(e,a){return e.skills.get(a)}export function findMcpSource(e,a){return e.mcp.get(a)}export function findFileAssetSource(e,a,r){return e.files.get(`${a}/${r}`)}
+import{getLibraryScan as u}from"./scan-cache.js";export async function buildLibraryIndex(e){const a=new Map,i=new Map,s=new Map;for(const n of e){const m=n.kind==="skill"||n.kind==="both",d=n.kind==="mcp"||n.kind==="both";let o;try{o=await u(n.path)}catch{continue}if(m){for(const t of o.skills)a.has(t.name)||a.set(t.name,{name:t.name,libraryId:n.id,libraryPath:n.path,dirPath:t.dirPath});for(const t of Object.values(o.files))for(const r of t){const c=`${r.category}/${r.name}`;s.has(c)||s.set(c,{name:r.name,category:r.category,libraryId:n.id,libraryPath:n.path,filePath:r.filePath})}}if(d){for(const t of o.mcp)if(!i.has(t.name)){const{name:r,command:c,args:f,env:l,sourcePath:h}=t,p={command:c,...f&&{args:f},...l&&{env:l}};i.set(t.name,{name:r,libraryId:n.id,libraryPath:n.path,config:p,sourcePath:h})}}}return{skills:a,mcp:i,files:s}}export function findSkillSource(e,a){return e.skills.get(a)}export function findMcpSource(e,a){return e.mcp.get(a)}export function findFileAssetSource(e,a,i){return e.files.get(`${a}/${i}`)}

package/node_modules/@weavecode/server/dist/install/mcp-rows.js

@@ -1 +1 @@
-import{homedir as i}from"node:os";import{readMcpEnableMap as l,mcpOverrideOf as m,resolveMcpEffective as u}from"./settings-mcp.js";import{assetSurfaces as d}from"../surfaces.js";export async function readMcpRows(r){const t=await l(r),a=[];for(const e of d()){const n=e.mcpScopes();for(const s of n){const o=e.harness==="claude"&&s==="project"?t:null,f=await e.mcpRead(s,r,i()).catch(()=>({}));for(const[c,p]of Object.entries(f))a.push({key:c,category:"mcp",harness:e.harness,scope:s,installScopes:n,enable:o?m(o,c):null,effective:o?u(o,c):!0,detail:p})}}return a}
+import{homedir as m}from"node:os";import{readMcpEnableMap as u,mcpOverrideOf as d,resolveMcpEffective as h}from"./settings-mcp.js";import{assetSurfaces as n}from"../surfaces.js";import{BUILTIN_MCP_SERVERS as S}from"./builtin-mcp.js";import{readDaemonState as b}from"../daemon/state.js";export async function readMcpRows(c){const p=await u(c),o=[];for(const e of n()){const s=e.mcpScopes();for(const a of s){const t=e.harness==="claude"&&a==="project"?p:null,l=await e.mcpRead(a,c,m()).catch(()=>({}));for(const[r,i]of Object.entries(l))o.push({key:r,category:"mcp",harness:e.harness,scope:a,installScopes:s,enable:t?d(t,r):null,effective:t?h(t,r):!0,detail:i})}}const f=b()?.port;for(const e of n())for(const s of S)e.harness==="claude"&&(o.some(a=>a.harness==="claude"&&a.key===s.name)||o.push({key:s.name,category:"mcp",harness:"claude",scope:"user",installScopes:["user"],install:"absent",enable:null,effective:!1,detail:{url:`http://127.0.0.1:${f??6420}${s.path}`},builtin:!0}));return o}

package/node_modules/@weavecode/server/dist/install/plugin-install.js

@@ -1 +1 @@
-import t from"node:path";import{marketIdOf as o}from"../market/identity.js";import{marketDir as e}from"../market/manifest.js";export async function installPluginPack(n,r){const i=o(r.dir);return n.globalInstall(r.dir,{name:r.name,version:r.version,description:r.description,...i?{marketplace:{name:i,dir:t.join(e(),i)}}:{}})}
+import r from"node:path";import{marketIdOf as t}from"../market/identity.js";import{marketDir as a}from"../market/manifest.js";export async function installPluginPack(o,i){const n=t(i.dir);return o.globalInstall(i.dir,{name:i.name,version:i.version,description:i.description,...n?{marketplace:{name:n,dir:r.join(a(),n)}}:{}})}

package/node_modules/@weavecode/server/dist/install/plugin-rows.js

@@ -1 +1 @@
-import{pluginSurfaces as b,pluginStateSurfaces as g}from"../surfaces.js";const u=["user","project","local"],v=(s,e)=>e in s?s[e]?"on":"off":"inherit";function y(s,e){for(let n=u.length-1;n>=0;n--){const o=s[u[n]][e];if(o!==void 0)return o}return!1}export async function readPluginRows(s){const e=[],n=b();for(const{harness:o,surface:a}of n){const l=a.pluginScopes(),[t,c]=await Promise.all([a.readInstalled().catch(()=>({})),a.readEnabledOverrides(s).catch(()=>({user:{},project:{},local:{}}))]),p=new Set(Object.keys(t));for(const r of u)for(const f of Object.keys(c[r]))p.add(f);for(const r of p){const f=t[r],d=y(c,r);for(const i of l)e.push({key:r,category:"plugin",harness:o,scope:i,installScopes:l,install:f?.some(h=>(h.scope??"user")===i)?"installed":"absent",enable:v(c[i],r),effective:d})}}for(const{harness:o,state:a}of g()){if(n.some(t=>t.harness===o))continue;const l=await a.readGlobalEnabled().catch(()=>({}));for(const[t,c]of Object.entries(l))e.push({key:t,category:"plugin",harness:o,scope:"user",installScopes:[],enable:c?"on":"off",effective:c})}return e}
+import{pluginSurfaces as b,pluginStateSurfaces as g}from"../surfaces.js";const u=["user","project","local"],y=(s,e)=>e in s?s[e]?"on":"off":"inherit";function S(s,e){for(let n=u.length-1;n>=0;n--){const o=s[u[n]][e];if(o!==void 0)return o}return!1}export async function readPluginRows(s){const e=[],n=b();for(const{harness:o,surface:a}of n){const f=a.pluginScopes(),[t,c]=await Promise.all([a.readInstalled().catch(()=>({})),a.readEnabledOverrides(s).catch(()=>({user:{},project:{},local:{}}))]),p=new Set(Object.keys(t));for(const r of u)for(const l of Object.keys(c[r]))p.add(l);for(const r of p){const l=t[r],d=S(c,r);for(const i of f)e.push({key:r,category:"plugin",harness:o,scope:i,installScopes:f,install:l?.some(h=>(h.scope??"user")===i)?"installed":"absent",enable:y(c[i],r),effective:d})}}for(const{harness:o,state:a}of g()){if(n.some(t=>t.harness===o))continue;const f=await a.readGlobalEnabled().catch(()=>({}));for(const[t,c]of Object.entries(f))e.push({key:t,category:"plugin",harness:o,scope:"user",installScopes:[],enable:c?"on":"off",effective:c})}return e}

package/node_modules/@weavecode/server/dist/install/plugin-templates.js

@@ -1 +1 @@
-import{cp as f,mkdir as d,readdir as P,readFile as h,rm as w}from"node:fs/promises";import{homedir as y}from"node:os";import a from"node:path";import{WEAVE_PLUGIN_MANIFEST as k,WeavePluginManifestSchema as v}from"@weavecode/core";import{assetSurfaceFor as E}from"../surfaces.js";const T={skills:"skill",commands:"command",agents:"agent"};async function j(t){const e=[];let s;try{s=await P(t)}catch{return e}for(const o of s){const i=a.join(t,o);try{const c=JSON.parse(await h(a.join(i,k),"utf8")),r=v.safeParse(c);r.success&&e.push({dir:i,manifest:r.data})}catch{}}return e}function S(t,e,s){const o=[];if(!s.templates)return o;const i=E("claude"),c=a.join(t,...i.projectSkillsDir().split("/"));for(const[r,l]of Object.entries(s.templates)){const n=T[r];if(n)for(const p of l??[]){const u=a.resolve(e,p);if(!u.startsWith(a.resolve(e)+a.sep))continue;const m=a.basename(u),g=n==="skill"?c:i.targetDir(n,"project",t,y());o.push({pluginId:s.id,category:n,name:m.replace(/\.md$/,""),sourcePath:u,targetPath:a.join(g,m)})}}return o}export async function detectPluginTemplateUpdates(t,e){const s=[],o=a.join(t,".weave","plugins");for(const{dir:i,manifest:c}of await j(o))for(const r of S(t,i,c)){const[l,n]=r.category==="skill"?await Promise.all([e.get(r.sourcePath),e.get(r.targetPath)]):await Promise.all([e.getFile(r.sourcePath),e.getFile(r.targetPath)]);s.push({...r,outdated:l!==n})}return s}export async function materializePluginTemplate(t){if(t.category==="skill"){await w(t.targetPath,{recursive:!0,force:!0}),await f(t.sourcePath,t.targetPath,{recursive:!0});return}await d(a.dirname(t.targetPath),{recursive:!0}),await f(t.sourcePath,t.targetPath)}
+import{cp as f,mkdir as h,readdir as d,readFile as P,rm as w}from"node:fs/promises";import{homedir as j}from"node:os";import r from"node:path";import{WEAVE_PLUGIN_MANIFEST as y,WeavePluginManifestSchema as k}from"@weavecode/core";import{assetSurfaceFor as v}from"../surfaces.js";const S={skills:"skill",commands:"command",agents:"agent"};async function F(t){const a=[];let s;try{s=await d(t)}catch{return a}for(const o of s){const i=r.join(t,o);try{const c=JSON.parse(await P(r.join(i,y),"utf8")),e=k.safeParse(c);e.success&&a.push({dir:i,manifest:e.data})}catch{}}return a}function E(t,a,s){const o=[];if(!s.templates)return o;const i=v("claude"),c=r.join(t,...i.projectSkillsRoots()[0].split("/"));for(const[e,l]of Object.entries(s.templates)){const n=S[e];if(n)for(const p of l??[]){const u=r.resolve(a,p);if(!u.startsWith(r.resolve(a)+r.sep))continue;const m=r.basename(u),g=n==="skill"?c:i.targetDir(n,"project",t,j());o.push({pluginId:s.id,category:n,name:m.replace(/\.md$/,""),sourcePath:u,targetPath:r.join(g,m)})}}return o}export async function detectPluginTemplateUpdates(t,a){const s=[],o=r.join(t,".weave","plugins");for(const{dir:i,manifest:c}of await F(o))for(const e of E(t,i,c)){const[l,n]=e.category==="skill"?await Promise.all([a.get(e.sourcePath),a.get(e.targetPath)]):await Promise.all([a.getFile(e.sourcePath),a.getFile(e.targetPath)]);s.push({...e,outdated:l!==n})}return s}export async function materializePluginTemplate(t){if(t.category==="skill"){await w(t.targetPath,{recursive:!0,force:!0}),await f(t.sourcePath,t.targetPath,{recursive:!0});return}await h(r.dirname(t.targetPath),{recursive:!0}),await f(t.sourcePath,t.targetPath)}

package/node_modules/@weavecode/server/dist/install/project-config.js

@@ -1,2 +1,2 @@
-import{readFile as a,writeFile as e,mkdir as s}from"node:fs/promises";import i from"node:path";const c=".weave",f="config.json";export const DEFAULT_PROJECT_CONFIG={lastSyncAt:null};function o(t){return i.join(t,c,f)}function u(t){return{lastSyncAt:t.lastSyncAt??DEFAULT_PROJECT_CONFIG.lastSyncAt}}export async function readProjectConfig(t){try{const n=await a(o(t),"utf-8");return u(JSON.parse(n))}catch{return DEFAULT_PROJECT_CONFIG}}export async function writeProjectConfig(t,n){const r=i.join(t,c);await s(r,{recursive:!0}),await e(o(t),`${JSON.stringify(n,null,2)}
+import{readFile as i,writeFile as e,mkdir as s}from"node:fs/promises";import a from"node:path";const o=".weave",u="config.json";export const DEFAULT_PROJECT_CONFIG={lastSyncAt:null};function c(t){return a.join(t,o,u)}function f(t){return{lastSyncAt:t.lastSyncAt??DEFAULT_PROJECT_CONFIG.lastSyncAt}}export async function readProjectConfig(t){try{const n=await i(c(t),"utf-8");return f(JSON.parse(n))}catch{return DEFAULT_PROJECT_CONFIG}}export async function writeProjectConfig(t,n){const r=a.join(t,o);await s(r,{recursive:!0}),await e(c(t),`${JSON.stringify(n,null,2)}
 `,"utf-8")}export async function markSynced(t,n){const r=await readProjectConfig(t);await writeProjectConfig(t,{...r,lastSyncAt:n})}

package/node_modules/@weavecode/server/dist/install/reader.d.ts

@@ -25,8 +25,14 @@ export interface ProjectFile {
 /** Maximum bytes returned by the reader (keep payloads small for the browser). */
 export declare const MAX_BYTES: number;
 /**
- * Resolve a project-relative path and ensure it stays inside the allowed roots.
- * Rejects absolute paths and any segment equal to `..`.
+ * Resolve a project-relative path and keep it inside the project root. Rejects
+ * absolute paths and any segment equal to `..`. No allowed-root narrowing —
+ * callers that need it (`resolveProjectFile`) apply their own whitelist on top.
+ */
+export declare function resolveWithinProject(projectPath: string, relPath: string): string;
+/**
+ * Resolve a project-relative path and ensure it stays inside the allowed roots
+ * (`.claude/`, `.codex/`, `.weave/`, the MCP config and the instruction files).
  */
 export declare function resolveProjectFile(projectPath: string, relPath: string): string;
 /** Read a text file from the project, enforcing the allowed-root + size limits. */

package/node_modules/@weavecode/server/dist/install/reader.js

@@ -1 +1 @@
-import{readFile as l,stat as d}from"node:fs/promises";import{homedir as w}from"node:os";import s from"node:path";import{AssetNotFoundError as n}from"./installer.js";export class PathEscapeError extends Error{constructor(e){super(e),this.name="PathEscapeError"}}export class FileTooLargeError extends Error{constructor(e){super(e),this.name="FileTooLargeError"}}export const MAX_BYTES=512*1024;export function resolveProjectFile(t,e){const o=s.normalize(e).replace(/\\/g,"/");if(s.isAbsolute(e))throw new PathEscapeError(`Absolute paths are not allowed: "${e}"`);if(o.split("/").some(c=>c===".."))throw new PathEscapeError(`Path traversal is not allowed: "${e}"`);if(!(o===".mcp.json"||o==="CLAUDE.md"||o==="AGENTS.md"||o===".claude"||o.startsWith(".claude/")||o===".codex"||o.startsWith(".codex/")||o===".weave"||o.startsWith(".weave/")))throw new PathEscapeError(`Path is outside the allowed roots: "${e}"`);const i=s.join(t,o),a=t.endsWith(s.sep)?t:t+s.sep;if(i!==t&&!i.startsWith(a))throw new PathEscapeError(`Resolved path escapes the project: "${e}"`);return i}export async function readProjectFile(t,e){const o=resolveProjectFile(t,e);let r;try{r=await d(o)}catch{throw new n(`File not found: "${e}"`)}if(!r.isFile())throw new n(`Not a file: "${e}"`);if(r.size>MAX_BYTES)throw new FileTooLargeError(`File exceeds ${MAX_BYTES} bytes: "${e}"`);return{content:await l(o,"utf-8"),size:r.size}}export async function readGlobalFile(t){return readProjectFile(w(),t)}
+import{readFile as c,stat as p}from"node:fs/promises";import{homedir as h}from"node:os";import s from"node:path";import{AssetNotFoundError as n}from"./installer.js";import{assetSurfaces as w}from"../surfaces.js";export class PathEscapeError extends Error{constructor(t){super(t),this.name="PathEscapeError"}}export class FileTooLargeError extends Error{constructor(t){super(t),this.name="FileTooLargeError"}}export const MAX_BYTES=512*1024;export function resolveWithinProject(e,t){const r=s.normalize(t).replace(/\\/g,"/");if(s.isAbsolute(t))throw new PathEscapeError(`Absolute paths are not allowed: "${t}"`);if(r.split("/").some(i=>i===".."))throw new PathEscapeError(`Path traversal is not allowed: "${t}"`);const o=s.join(e,r),a=e.endsWith(s.sep)?e:e+s.sep;if(o!==e&&!o.startsWith(a))throw new PathEscapeError(`Resolved path escapes the project: "${t}"`);return o}export function resolveProjectFile(e,t){const r=s.normalize(t).replace(/\\/g,"/"),o=w().flatMap(i=>i.projectSkillsRoots().map(l=>l.split("/")[0])),a=r.split("/")[0]??"";if(!(r===".mcp.json"||r==="CLAUDE.md"||r==="AGENTS.md"||o.includes(a)||r===".weave"||r.startsWith(".weave/")))throw new PathEscapeError(`Path is outside the allowed roots: "${t}"`);return resolveWithinProject(e,r)}export async function readProjectFile(e,t){const r=resolveProjectFile(e,t);let o;try{o=await p(r)}catch{throw new n(`File not found: "${t}"`)}if(!o.isFile())throw new n(`Not a file: "${t}"`);if(o.size>MAX_BYTES)throw new FileTooLargeError(`File exceeds ${MAX_BYTES} bytes: "${t}"`);return{content:await c(r,"utf-8"),size:o.size}}export async function readGlobalFile(e){return readProjectFile(h(),e)}

package/node_modules/@weavecode/server/dist/install/scan-cache.js

@@ -1 +1 @@
-import{mkdir as f,readFile as p,rm as w,writeFile as m}from"node:fs/promises";import t from"node:path";import{scanLibraryFileAssets as d,scanLibraryMcp as g,scanLibraryPlugins as A,scanLibrarySkills as v}from"./scanner.js";const u="scans.json",y=1;function c(n){const r=t.resolve(n);return t.join(t.dirname(r),".weave-scans",t.basename(r))}const a=new Map,o=new Map;export async function scanLibrary(n){const{plugins:r,packRoots:e}=await A(n),[s,i,l]=await Promise.all([v(n,e),g(n,e),d(n,e)]);return{plugins:r,packRoots:e,skills:s,mcp:i,files:l}}export async function getLibraryScan(n){const r=t.resolve(n),e=a.get(r);if(e)return e;const s=o.get(r);if(s)return s;const i=S(r);o.set(r,i);try{return await i}finally{o.delete(r)}}async function S(n){const r=await k(n);if(r)return a.set(n,r),r;const e=await scanLibrary(n);return await L(n,e),a.set(n,e),e}async function k(n){try{const r=JSON.parse(await p(t.join(c(n),u),"utf8"));return!r||r.version!==y||!Array.isArray(r.plugins)||!Array.isArray(r.packRoots)||!Array.isArray(r.skills)||!Array.isArray(r.mcp)||!r.files||typeof r.files!="object"?null:r}catch{return null}}async function L(n,r){try{await f(c(n),{recursive:!0}),await m(t.join(c(n),u),JSON.stringify({version:y,...r}),"utf8")}catch{}}export async function invalidateScan(n){const r=t.resolve(n);a.delete(r);const e=o.get(r);e&&await e.catch(()=>{}),await w(c(r),{recursive:!0,force:!0}),a.delete(r)}export function clearScanCache(){a.clear()}
+import{mkdir as f,readFile as p,rm as w,writeFile as m}from"node:fs/promises";import s from"node:path";import{scanLibraryFileAssets as g,scanLibraryMcp as v,scanLibraryPlugins as A,scanLibrarySkills as b}from"./scanner.js";const l="scans.json",u=1;function c(a){const r=s.resolve(a);return s.join(s.dirname(r),".weave-scans",s.basename(r))}const e=new Map,o=new Map;export async function scanLibrary(a){const{plugins:r,packRoots:t}=await A(a),[i,n,y]=await Promise.all([b(a,t),v(a,t),g(a,t)]);return{plugins:r,packRoots:t,skills:i,mcp:n,files:y}}export async function getLibraryScan(a){const r=s.resolve(a),t=e.get(r);if(t)return t;const i=o.get(r);if(i)return i;const n=d(r);o.set(r,n);try{return await n}finally{o.delete(r)}}async function d(a){const r=await k(a);if(r)return e.set(a,r),r;const t=await scanLibrary(a);return await L(a,t),e.set(a,t),t}async function k(a){try{const r=JSON.parse(await p(s.join(c(a),l),"utf8"));return!r||r.version!==u||r.root!==a||!Array.isArray(r.plugins)||!Array.isArray(r.packRoots)||!Array.isArray(r.skills)||!Array.isArray(r.mcp)||!r.files||typeof r.files!="object"?null:r}catch{return null}}async function L(a,r){try{await f(c(a),{recursive:!0}),await m(s.join(c(a),l),JSON.stringify({version:u,root:a,...r}),"utf8")}catch{}}export async function invalidateScan(a){const r=s.resolve(a);e.delete(r);const t=o.get(r);t&&await t.catch(()=>{}),await w(c(r),{recursive:!0,force:!0}),e.delete(r)}export function clearScanCache(){e.clear()}

package/node_modules/@weavecode/server/dist/install/scanner.js

@@ -1 +1 @@
-import{readdir as l,readFile as j,stat as E}from"node:fs/promises";import{join as o,basename as p,relative as f,dirname as S}from"node:path";import{FILE_ASSET_SPECS as A,FILE_ASSET_CATEGORIES as h}from"./file-assets.js";import{hasNonEmptyModules as L}from"../watch/plugin-mods.js";import{parseToolkitPack as I}from"../hooks/toolkit-scan.js";import{marketIdOf as T}from"../market/identity.js";import{pluginSurfaceFor as d}from"../surfaces.js";function _(t){if(!(!(t.ccPack||t.kind==="mod")||!t.targets.includes("claude")))return d("claude").pluginKey(t.name,T(t.dir))}const y=new Set(["node_modules",".git","dist","build",".next","coverage",".cache"]);async function g(t){try{return(await E(t)).isFile()}catch{return!1}}async function D(t){if(await g(o(t,".claude-plugin","plugin.json"))||await g(o(t,"weave-plugin.json")))return!0;try{const e=JSON.parse(await j(o(t,"hooks","hooks.json"),"utf8"));return L(e)}catch{return!1}}const M=10;export async function scanLibraryPlugins(t){const e=[],r=[],c=async(a,n)=>{if(await D(a)){r.push(f(t,a).replace(/\\/g,"/"));const s=await I(a,{root:t,provenance:"market"},"");if(s){const u=[];for(const k of s.skills)await g(o(a,"skills",k,"SKILL.md"))&&u.push(k);const m=_(s);e.push({name:s.name,version:s.version,...s.description?{description:s.description}:{},...m?{key:m}:{},dirPath:s.dir,relPath:f(t,a).replace(/\\/g,"/"),ccPack:s.ccPack,weavePack:s.weavePack,kind:s.kind,components:s.components,targets:s.targets,skills:u})}return}if(n>=M)return;let i;try{i=await l(a,{withFileTypes:!0})}catch{return}for(const s of i)s.isDirectory()&&(s.name.startsWith(".")||y.has(s.name)||await c(o(a,s.name),n+1))};return await c(t,0),{plugins:e.sort((a,n)=>a.relPath.localeCompare(n.relPath)),packRoots:r.sort((a,n)=>a.localeCompare(n))}}function w(t,e){return!e||e.length===0?!1:e.some(r=>r===""||t===r||t.startsWith(`${r}/`))}export async function scanLibrarySkills(t,e){const r=[];return await P(t,t,r,e),r.sort((c,a)=>c.name.localeCompare(a.name))}async function P(t,e,r,c){if(w(f(t,e).replace(/\\/g,"/"),c))return;let a;try{a=await l(e,{withFileTypes:!0})}catch{return}if(a.some(n=>n.isFile()&&n.name==="SKILL.md")){r.push({name:p(e),dirPath:e,relPath:f(t,e).replace(/\\/g,"/"),group:f(t,S(e)).replace(/\\/g,"/")});return}for(const n of a)n.isDirectory()&&(n.name.startsWith(".")||y.has(n.name)||await P(t,o(e,n.name),r,c))}export async function scanLibraryMcp(t,e){const r=[];await v(t,t,r,e);const c=[];for(const a of r)try{const n=JSON.parse(await j(a.abs,"utf-8"));O(n,a,c)}catch{}return c.sort((a,n)=>a.name.localeCompare(n.name))}async function v(t,e,r,c){if(w(f(t,e).replace(/\\/g,"/"),c))return;let a;try{a=await l(e,{withFileTypes:!0})}catch{return}for(const n of a)if(n.isDirectory()){if(n.name.startsWith(".")||y.has(n.name))continue;await v(t,o(e,n.name),r,c)}else if(n.isFile()){const i=n.name.replace(/\.mcp\.json$/i,"").replace(/\.json$/i,""),s=/\.mcp\.json$/i.test(n.name),u=p(e)==="mcp"&&/\.json$/i.test(n.name);(s||u)&&i&&r.push({abs:o(e,n.name),rel:f(t,o(e,n.name)).replace(/\\/g,"/")})}}function O(t,e,r){const c=e.rel.replace(/\.mcp\.json$/i,"").replace(/\.json$/i,"").replace(/^.*\//,"");if(t&&typeof t=="object"&&!Array.isArray(t)){const a=t,n=a.mcpServers;if(n&&typeof n=="object"&&!Array.isArray(n)){for(const[s,u]of Object.entries(n)){const m=F(s,u);m&&r.push({...m,sourcePath:e.abs,relPath:e.rel})}return}const i=F(c,a);i&&r.push({...i,sourcePath:e.abs,relPath:e.rel})}}function F(t,e){if(!e||typeof e!="object"||Array.isArray(e))return null;const r=e;if(typeof r.command!="string"||!r.command)return null;const c={name:t,command:r.command};if(Array.isArray(r.args)&&(c.args=r.args.filter(a=>typeof a=="string")),r.env&&typeof r.env=="object"&&!Array.isArray(r.env)){const a={};for(const[n,i]of Object.entries(r.env))typeof i=="string"&&(a[n]=i);Object.keys(a).length&&(c.env=a)}return c}const C=Object.fromEntries(h.flatMap(t=>Object.values(A[t].dirs).map(e=>e?.project).filter(e=>e!==void 0).map(e=>[p(e),t])));export async function scanLibraryFileAssets(t,e){const r={};for(const c of h)r[c]=[];await b(t,t,r,e);for(const c of h)r[c].sort((a,n)=>a.name.localeCompare(n.name));return r}async function b(t,e,r,c){if(w(f(t,e).replace(/\\/g,"/"),c))return;let a;try{a=await l(e,{withFileTypes:!0})}catch{return}if(a.some(i=>i.isFile()&&i.name==="SKILL.md"))return;const n=C[p(e)];if(n){const i=A[n];for(const s of a){if(!s.isFile()||!s.name.endsWith(i.ext))continue;const u=s.name.slice(0,-i.ext.length);if(!u)continue;const m=o(e,s.name);r[n].push({name:u,filePath:m,relPath:f(t,m).replace(/\\/g,"/"),group:f(t,S(e)).replace(/\\/g,"/"),category:n})}return}for(const i of a)i.isDirectory()&&(i.name.startsWith(".")||y.has(i.name)||await b(t,o(e,i.name),r,c))}
+import{readdir as p,readFile as k,stat as F}from"node:fs/promises";import{join as c,basename as u,relative as l,dirname as j}from"node:path";import{FILE_ASSET_SPECS as P,FILE_ASSET_CATEGORIES as h}from"./file-assets.js";import{hasNonEmptyModules as L}from"../watch/plugin-mods.js";import{parseToolkitPack as E}from"../hooks/toolkit-scan.js";import{marketIdOf as O}from"../market/identity.js";import{pluginSurfaceFor as T}from"../surfaces.js";function C(e){if(!(!(e.ccPack||e.kind==="mod")||!e.targets.includes("claude")))return T("claude").pluginKey(e.name,O(e.dir))}const y=new Set(["node_modules",".git","dist","build",".next","coverage",".cache"]);async function d(e){try{return(await F(e)).isFile()}catch{return!1}}async function I(e){if(await d(c(e,".claude-plugin","plugin.json"))||await d(c(e,"weave-plugin.json")))return!0;try{const a=JSON.parse(await k(c(e,"hooks","hooks.json"),"utf8"));return L(a)}catch{return!1}}const x=10;export async function scanLibraryPlugins(e){const a=[],n=[],o=async(t,r)=>{if(await I(t)){n.push(l(e,t).replace(/\\/g,"/"));const s=await E(t,{root:e,provenance:"market"},"");if(s){const m=[];for(const w of s.skills)await d(c(t,"skills",w,"SKILL.md"))&&m.push(w);const f=C(s);a.push({name:s.name,version:s.version,...s.description?{description:s.description}:{},...f?{key:f}:{},dirPath:s.dir,relPath:l(e,t).replace(/\\/g,"/"),ccPack:s.ccPack,weavePack:s.weavePack,kind:s.kind,components:s.components,targets:s.targets,skills:m})}return}if(r>=x)return;let i;try{i=await p(t,{withFileTypes:!0})}catch{return}for(const s of i)s.isDirectory()&&(s.name.startsWith(".")||y.has(s.name)||await o(c(t,s.name),r+1))};return await o(e,0),{plugins:a.sort((t,r)=>t.relPath.localeCompare(r.relPath)),packRoots:n.sort((t,r)=>t.localeCompare(r))}}function g(e,a){return!a||a.length===0?!1:a.some(n=>n===""||e===n||e.startsWith(`${n}/`))}export async function scanLibrarySkills(e,a){const n=[];return await b(e,e,n,a),n.sort((o,t)=>o.name.localeCompare(t.name))}async function b(e,a,n,o){if(g(l(e,a).replace(/\\/g,"/"),o))return;let t;try{t=await p(a,{withFileTypes:!0})}catch{return}if(t.some(r=>r.isFile()&&r.name==="SKILL.md")){n.push({name:u(a),dirPath:a,relPath:l(e,a).replace(/\\/g,"/"),group:l(e,j(a)).replace(/\\/g,"/")});return}for(const r of t)r.isDirectory()&&(r.name.startsWith(".")||y.has(r.name)||await b(e,c(a,r.name),n,o))}export async function scanLibraryMcp(e,a){const n=[];await v(e,e,n,a);const o=[];for(const t of n)try{const r=JSON.parse(await k(t.abs,"utf-8"));$(r,t,o)}catch{}return o.sort((t,r)=>t.name.localeCompare(r.name))}async function v(e,a,n,o){if(g(l(e,a).replace(/\\/g,"/"),o))return;let t;try{t=await p(a,{withFileTypes:!0})}catch{return}for(const r of t)if(r.isDirectory()){if(r.name.startsWith(".")||y.has(r.name))continue;await v(e,c(a,r.name),n,o)}else if(r.isFile()){const i=r.name.replace(/\.mcp\.json$/i,"").replace(/\.json$/i,""),s=/\.mcp\.json$/i.test(r.name),m=u(a)==="mcp"&&/\.json$/i.test(r.name);(s||m)&&i&&n.push({abs:c(a,r.name),rel:l(e,c(a,r.name)).replace(/\\/g,"/")})}}function $(e,a,n){const o=a.rel.replace(/\.mcp\.json$/i,"").replace(/\.json$/i,"").replace(/^.*\//,"");if(e&&typeof e=="object"&&!Array.isArray(e)){const t=e,r=t.mcpServers;if(r&&typeof r=="object"&&!Array.isArray(r)){for(const[s,m]of Object.entries(r)){const f=S(s,m);f&&n.push({...f,sourcePath:a.abs,relPath:a.rel})}return}const i=S(o,t);i&&n.push({...i,sourcePath:a.abs,relPath:a.rel})}}function S(e,a){if(!a||typeof a!="object"||Array.isArray(a))return null;const n=a;if(typeof n.command!="string"||!n.command)return null;const o={name:e,command:n.command};if(Array.isArray(n.args)&&(o.args=n.args.filter(t=>typeof t=="string")),n.env&&typeof n.env=="object"&&!Array.isArray(n.env)){const t={};for(const[r,i]of Object.entries(n.env))typeof i=="string"&&(t[r]=i);Object.keys(t).length&&(o.env=t)}return o}const W=Object.fromEntries(h.flatMap(e=>Object.values(P[e].dirs).map(a=>a?.project).filter(a=>a!==void 0).map(a=>[u(a),e])));export async function scanLibraryFileAssets(e,a){const n={};for(const o of h)n[o]=[];await A(e,e,n,a);for(const o of h)n[o].sort((t,r)=>t.name.localeCompare(r.name));return n}async function A(e,a,n,o){if(g(l(e,a).replace(/\\/g,"/"),o))return;let t;try{t=await p(a,{withFileTypes:!0})}catch{return}if(t.some(i=>i.isFile()&&i.name==="SKILL.md"))return;const r=W[u(a)];if(r){const i=P[r];for(const s of t){if(!s.isFile()||!s.name.endsWith(i.ext))continue;const m=s.name.slice(0,-i.ext.length);if(!m)continue;const f=c(a,s.name);n[r].push({name:m,filePath:f,relPath:l(e,f).replace(/\\/g,"/"),group:l(e,j(a)).replace(/\\/g,"/"),category:r})}return}for(const i of t)i.isDirectory()&&(i.name.startsWith(".")||y.has(i.name)||await A(e,c(a,i.name),n,o))}

package/node_modules/@weavecode/server/dist/install/settings-mcp.js

@@ -1,2 +1,2 @@
-import{readFile as f,writeFile as u,mkdir as b,access as p}from"node:fs/promises";import o from"node:path";const c=".claude/settings.json";async function S(t){try{return await p(t),!0}catch{return!1}}async function d(t){const e=o.join(t,c);if(!await S(e))return{};try{const r=JSON.parse(await f(e,"utf-8"));return r&&typeof r=="object"&&!Array.isArray(r)?r:{}}catch{return{}}}async function v(t,e){const r=o.join(t,c);await b(o.dirname(r),{recursive:!0}),await u(r,`${JSON.stringify(e,null,2)}
-`,"utf-8")}export async function readMcpEnableMap(t){const e=await d(t),r=i(e.enabledMcpjsonServers),n=i(e.disabledMcpjsonServers),s={};for(const a of r)s[a]="enabled";for(const a of n)s[a]="disabled";return{overrides:s,enableAll:e.enableAllProjectMcpServers===!0}}const y={enabled:"on",disabled:"off",default:"inherit"},M={on:"enabled",off:"disabled",inherit:"default"};export function mcpOverrideOf(t,e){return y[t.overrides[e]??"default"]}export function resolveMcpEffective(t,e){const r=t.overrides[e];return r==="enabled"?!0:r==="disabled"?!1:t.enableAll}export async function setMcpEnableState(t,e,r){const n=await d(t),s=new Set(i(n.enabledMcpjsonServers)),a=new Set(i(n.disabledMcpjsonServers));s.delete(e),a.delete(e),r==="enabled"?s.add(e):r==="disabled"&&a.add(e),l(n,"enabledMcpjsonServers",s),l(n,"disabledMcpjsonServers",a),await v(t,n)}export function setMcpEnableOverride(t,e,r){return setMcpEnableState(t,e,M[r])}function i(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"):[]}function l(t,e,r){r.size===0?delete t[e]:t[e]=[...r].sort()}
+import{readFile as f,writeFile as u,mkdir as b,access as p}from"node:fs/promises";import o from"node:path";const c=".claude/settings.json";async function v(r){try{return await p(r),!0}catch{return!1}}async function d(r){const e=o.join(r,c);if(!await v(e))return{};try{const n=JSON.parse(await f(e,"utf-8"));return n&&typeof n=="object"&&!Array.isArray(n)?n:{}}catch{return{}}}async function y(r,e){const n=o.join(r,c);await b(o.dirname(n),{recursive:!0}),await u(n,`${JSON.stringify(e,null,2)}
+`,"utf-8")}export async function readMcpEnableMap(r){const e=await d(r),n=i(e.enabledMcpjsonServers),t=i(e.disabledMcpjsonServers),a={};for(const s of n)a[s]="enabled";for(const s of t)a[s]="disabled";return{overrides:a,enableAll:e.enableAllProjectMcpServers===!0}}const M={enabled:"on",disabled:"off",default:"inherit"},S={on:"enabled",off:"disabled",inherit:"default"};export function mcpOverrideOf(r,e){return M[r.overrides[e]??"default"]}export function resolveMcpEffective(r,e){const n=r.overrides[e];return n==="enabled"?!0:n==="disabled"?!1:r.enableAll}export async function setMcpEnableState(r,e,n){const t=await d(r),a=new Set(i(t.enabledMcpjsonServers)),s=new Set(i(t.disabledMcpjsonServers));a.delete(e),s.delete(e),n==="enabled"?a.add(e):n==="disabled"&&s.add(e),l(t,"enabledMcpjsonServers",a),l(t,"disabledMcpjsonServers",s),await y(r,t)}export function setMcpEnableOverride(r,e,n){return setMcpEnableState(r,e,S[n])}function i(r){return Array.isArray(r)?r.filter(e=>typeof e=="string"):[]}function l(r,e,n){n.size===0?delete r[e]:r[e]=[...n].sort()}

package/node_modules/@weavecode/server/dist/install/updates.js

@@ -1 +1 @@
-import{readdir as g,stat as w}from"node:fs/promises";import{homedir as F}from"node:os";import f from"node:path";import{hashMcpConfig as p}from"./fingerprint.js";import{buildLibraryIndex as h,findSkillSource as y,findMcpSource as m,findFileAssetSource as S}from"./library-index.js";import{readMcpServers as k}from"./installer.js";import{readGlobalMcpServers as x,readGlobalSkills as v}from"./global-config.js";import{readCodexMcpServers as C}from"./codex-toml.js";import{FILE_ASSET_CATEGORIES as E,FILE_ASSET_SPECS as M}from"./file-assets.js";import{assetSurfaces as b}from"../surfaces.js";import{readInstalledLedger as T}from"./install-ledger.js";import{detectPluginTemplateUpdates as U}from"./plugin-templates.js";import{detectInitFileUpdates as D,needsInit as L}from"./init-files.js";export async function detectUpdates(a,o,l,t){const n=t??await h(o),[s,e,r,i,u]=await Promise.all([detectSkillUpdates(a,l,n),H(a,n),detectFileAssetUpdates(a,l,n),U(a,l),D(a)]);await A(a,{skills:s,mcp:e,files:r},n);const d=s.filter(c=>!c.custom&&c.outdated).length+e.filter(c=>!c.custom&&c.outdated).length+r.filter(c=>!c.custom&&c.outdated).length+i.filter(c=>c.outdated).length+u.filter(c=>c.outdated&&c.syncClass==="auto").length;return{skills:s,mcp:e,files:r,pluginTemplates:i,initFiles:u,available:d,needsInit:L(u)}}export async function detectProjectUpdateCounts(a,o,l){const t=await h(o),n={};for(const s of a){const e=await detectUpdates(s.path,o,l,t);n[s.id]={available:e.available,needsInit:e.needsInit}}return n}async function A(a,o,l){for(const t of await T(a)){if(t.category==="skill"){if(!y(l,t.name)||o.skills.some(r=>r.scope==="project"&&r.name===t.name&&r.agent===t.agent))continue;o.skills.push({name:t.name,scope:"project",agent:t.agent,outdated:!0,custom:!1,missing:!0});continue}if(t.category==="mcp"){if(!m(l,t.name)||o.mcp.some(e=>e.scope==="project"&&e.name===t.name))continue;o.mcp.push({name:t.name,scope:"project",outdated:!0,custom:!1,missing:!0});continue}const n=t.assetCategory;n===void 0||!S(l,n,t.name)||o.files.some(e=>e.scope==="project"&&e.category===n&&e.name===t.name)||o.files.push({category:n,name:t.name,scope:"project",outdated:!0,custom:!1,missing:!0})}}async function P(a){let o;try{o=await g(a,{withFileTypes:!0})}catch{return[]}const l=[];for(const t of o)if(!(!t.isDirectory()&&!t.isSymbolicLink()))try{(await w(f.join(a,t.name))).isDirectory()&&l.push(t.name)}catch{}return l}export async function detectSkillUpdates(a,o,l){const t=F(),n=[...b().map(e=>({dir:f.join(a,...e.projectSkillsDir().split("/")),scope:"project",agent:e.harness})),...b().map(e=>({dir:e.globalSkillsRoots(t)[0],scope:"user",agent:e.harness}))],s=[];for(const e of n)for(const r of await P(e.dir)){const i=f.join(e.dir,r),u=y(l,r);if(!u){s.push({name:r,scope:e.scope,agent:e.agent,outdated:!1,custom:!0});continue}const[d,c]=await Promise.all([o.get(i),o.get(u.dirPath)]);s.push({name:r,scope:e.scope,agent:e.agent,outdated:d!==c,custom:!1,sourceDir:u.dirPath,libraryId:u.libraryId})}return s}export async function detectFileAssetUpdates(a,o,l){const t=[];for(const n of E){const s=M[n],e=s.dirs.claude?.project;if(!e)continue;const r=f.join(a,...e.split("/"));let i;try{i=(await g(r,{withFileTypes:!0})).filter(u=>u.isFile()&&u.name.endsWith(s.ext)).map(u=>u.name)}catch{continue}for(const u of i){const d=u.slice(0,-s.ext.length),c=S(l,n,d);if(!c){t.push({category:n,name:d,scope:"project",outdated:!1,custom:!0});continue}const[j,I]=await Promise.all([o.getFile(f.join(r,u)),o.getFile(c.filePath)]);t.push({category:n,name:d,scope:"project",outdated:j!==I,custom:!1,libraryId:c.libraryId})}}return t}async function H(a,o){const[l,t,n]=await Promise.all([k(a).catch(()=>({})),x().catch(()=>({})),C().catch(()=>({}))]),s=[];for(const[e,r]of Object.entries(l)){const i=m(o,e);i?s.push({name:e,scope:"project",outdated:p(r)!==p(i.config),custom:!1,libraryId:i.libraryId}):s.push({name:e,scope:"project",outdated:!1,custom:!0})}for(const[e,r]of Object.entries(t)){const i=m(o,e);i?s.push({name:e,scope:"user",outdated:p(r)!==p(i.config),custom:!1,libraryId:i.libraryId}):s.push({name:e,scope:"user",outdated:!1,custom:!0})}for(const[e,r]of Object.entries(n)){const i=m(o,e);i?s.push({name:e,scope:"user",agent:"codex",outdated:p(r)!==p(i.config),custom:!1,libraryId:i.libraryId}):s.push({name:e,scope:"user",agent:"codex",outdated:!1,custom:!0})}return s}export{v as readGlobalSkills};
+import{readdir as g,stat as w}from"node:fs/promises";import{homedir as k}from"node:os";import u from"node:path";import{hashMcpConfig as p}from"./fingerprint.js";import{buildLibraryIndex as h,findSkillSource as y,findMcpSource as f,findFileAssetSource as b}from"./library-index.js";import{readMcpServers as x}from"./installer.js";import{readGlobalMcpServers as F,readGlobalSkills as P}from"./global-config.js";import{readCodexMcpServers as v}from"./codex-toml.js";import{FILE_ASSET_CATEGORIES as C,FILE_ASSET_SPECS as E}from"./file-assets.js";import{assetSurfaces as j}from"../surfaces.js";import{readInstalledLedger as T}from"./install-ledger.js";import{detectPluginTemplateUpdates as U}from"./plugin-templates.js";import{detectInitFileUpdates as A,needsInit as L}from"./init-files.js";export async function detectUpdates(n,s,i,o){const a=o??await h(s),[e,t,d,c,m]=await Promise.all([detectSkillUpdates(n,i,a),G(n,a),detectFileAssetUpdates(n,i,a),U(n,i),A(n)]);await M(n,{skills:e,mcp:t,files:d},a);const l=e.filter(r=>!r.custom&&r.outdated).length+t.filter(r=>!r.custom&&r.outdated).length+d.filter(r=>!r.custom&&r.outdated).length+c.filter(r=>r.outdated).length+m.filter(r=>r.outdated&&r.syncClass==="auto").length;return{skills:e,mcp:t,files:d,pluginTemplates:c,initFiles:m,available:l,needsInit:L(m)}}export async function detectProjectUpdateCounts(n,s,i){const o=await h(s),a={};for(const e of n){const t=await detectUpdates(e.path,s,i,o);a[e.id]={available:t.available,needsInit:t.needsInit}}return a}async function M(n,s,i){for(const o of await T(n)){if(o.category==="skill"){if(!y(i,o.name)||s.skills.some(e=>e.scope==="project"&&e.name===o.name&&e.agent===o.agent))continue;s.skills.push({name:o.name,scope:"project",agent:o.agent,outdated:!0,custom:!1,missing:!0});continue}if(o.category==="mcp"){if(!f(i,o.name)||s.mcp.some(e=>e.scope==="project"&&e.name===o.name))continue;s.mcp.push({name:o.name,scope:"project",outdated:!0,custom:!1,missing:!0});continue}const a=o.assetCategory;a===void 0||!b(i,a,o.name)||s.files.some(e=>e.scope==="project"&&e.category===a&&e.name===o.name)||s.files.push({category:a,name:o.name,scope:"project",outdated:!0,custom:!1,missing:!0})}}async function D(n){let s;try{s=await g(n,{withFileTypes:!0})}catch{return[]}const i=[];for(const o of s)if(!(!o.isDirectory()&&!o.isSymbolicLink()))try{(await w(u.join(n,o.name))).isDirectory()&&i.push(o.name)}catch{}return i}export async function detectSkillUpdates(n,s,i){const o=k(),a=[...j().map(t=>({dir:u.join(n,...t.projectSkillsRoots()[0].split("/")),scope:"project",agent:t.harness})),...j().map(t=>({dir:t.globalSkillsRoots(o)[0],scope:"user",agent:t.harness}))],e=[];for(const t of a)for(const d of await D(t.dir)){const c=u.join(t.dir,d),m=y(i,d);if(!m){e.push({name:d,scope:t.scope,agent:t.agent,outdated:!1,custom:!0});continue}const[l,r]=await Promise.all([s.get(c),s.get(m.dirPath)]);e.push({name:d,scope:t.scope,agent:t.agent,outdated:l!==r,custom:!1,sourceDir:m.dirPath,libraryId:m.libraryId})}return e}export async function detectFileAssetUpdates(n,s,i){const o=[];for(const a of C){const e=E[a],t=e.dirs.claude?.project;if(!t)continue;const d=u.join(n,...t.split("/"));let c;try{c=(await g(d,{withFileTypes:!0})).filter(m=>m.isFile()&&m.name.endsWith(e.ext)).map(m=>m.name)}catch{continue}for(const m of c){const l=m.slice(0,-e.ext.length),r=b(i,a,l);if(!r){o.push({category:a,name:l,scope:"project",outdated:!1,custom:!0});continue}const[S,I]=await Promise.all([s.getFile(u.join(d,m)),s.getFile(r.filePath)]);o.push({category:a,name:l,scope:"project",outdated:S!==I,custom:!1,libraryId:r.libraryId})}}return o}async function G(n,s){const[i,o,a]=await Promise.all([x(n).catch(()=>({})),F().catch(()=>({})),v().catch(()=>({}))]),e=[];for(const[t,d]of Object.entries(i)){const c=f(s,t);c?e.push({name:t,scope:"project",outdated:p(d)!==p(c.config),custom:!1,libraryId:c.libraryId}):e.push({name:t,scope:"project",outdated:!1,custom:!0})}for(const[t,d]of Object.entries(o)){const c=f(s,t);c?e.push({name:t,scope:"user",outdated:p(d)!==p(c.config),custom:!1,libraryId:c.libraryId}):e.push({name:t,scope:"user",outdated:!1,custom:!0})}for(const[t,d]of Object.entries(a)){const c=f(s,t);c?e.push({name:t,scope:"user",agent:"codex",outdated:p(d)!==p(c.config),custom:!1,libraryId:c.libraryId}):e.push({name:t,scope:"user",agent:"codex",outdated:!1,custom:!0})}return e}export{P as readGlobalSkills};

package/node_modules/@weavecode/server/dist/market/builtin.d.ts

@@ -3,18 +3,18 @@ import type { LibraryRepository } from '../repositories/libraries.js';
 /**
  * 内置仓在市场里的 id。它**必须**等于 harness 的注册键缺省市场
  * （`PluginSurface.pluginKey` 的 `name@weave` 里那个 `weave`）——`marketIdOf`
- * 会把 `<dataDir>/market/weave/<...>` 下的包判成 `name@weave`，两边同名才使得
+ * 会把 `<dataRoot>/market/weave/<...>` 下的包判成 `name@weave`，两边同名才使得
  * 「内置仓落地前回落自建市场 / 落地后判成 weaver 市场」得到**同一个键**。
  * 故这里直接引 harness 的常量，不另抄一个字符串。
  */
 export declare const BUILTIN_MARKET_ID = "weave";
-/** 内置仓在数据目录里的落点：`<dataDir>/market/weave/`。 */
-export declare function builtinMarketDir(dataDir: string): string;
+/** 内置仓在数据目录里的落点：`<dataRoot>/market/weave/`。 */
+export declare function builtinMarketDir(dataRoot: string): string;
 /** 内置工具包扫描根（仓内 `plugins/`）——`ToolkitSource.root` 用。 */
-export declare function builtinPacksDir(dataDir: string): string;
+export declare function builtinPacksDir(dataRoot: string): string;
 /** 内置 SPI 规则包装载根（仓内 `rules/`）。 */
-export declare function builtinRulesDir(dataDir: string): string;
-export declare function isBuiltinMarketDir(candidate: string, dataDir: string): boolean;
+export declare function builtinRulesDir(dataRoot: string): string;
+export declare function isBuiltinMarketDir(candidate: string, dataRoot: string): boolean;
 export interface BuiltinMarketResult {
     /** 本次是否重铺（false = 既有落点已指向当前源，未动盘）。 */
     changed: boolean;
@@ -23,13 +23,13 @@ export interface BuiltinMarketResult {
     error?: string;
 }
 /**
- * 把 `@weavecode/templates` 随包发布的内置仓落到 `<dataDir>/market/weave/`，
+ * 把 `@weavecode/templates` 随包发布的内置仓落到 `<dataRoot>/market/weave/`，
  * 并登记为一条 `libraries` 行（`/market` 与资源管理页据此把它当一个仓库渲染）。
  *
  * **落点用链接（失败回退复制）**：这是「公共全局位置优先链接」的直接落实 ——
  * 落点不是数据，而是随包发布的只读内容，链接既不复制一份、也让「改仓即改内置」
  * 在开发态（源 = `src/resources`）真正即时生效。故**不得**往落点写任何东西
- * （清单/扫描缓存都不落这里：扫描缓存写 `<dataDir>/market/.weave-scans/`，
+ * （清单/扫描缓存都不落这里：扫描缓存写 `<dataRoot>/market/.weave-scans/`，
  * 是市场根的**兄弟**目录）。
  *
  * 幂等：落点已是指向当前源的链接则不动盘；源变更（换包版本 / 开发态换目录）或
@@ -37,5 +37,5 @@ export interface BuiltinMarketResult {
  * 绝不会把链接当目录递归删而删穿到包内。
  */
 export declare function ensureBuiltinMarket(deps: {
-    libraries: Pick<LibraryRepository, 'add' | 'dataDir'>;
+    libraries: Pick<LibraryRepository, 'add' | 'dataRoot'>;
 }): Promise<BuiltinMarketResult>;

package/node_modules/@weavecode/server/dist/market/builtin.js

@@ -1 +1 @@
-import n from"node:path";import{lstat as l,realpath as s}from"node:fs/promises";import{builtinMarketRoot as u}from"@weavecode/templates";import{WEAVE_MARKETPLACE as f}from"@weavecode/harness";import{marketDir as m}from"./manifest.js";import{linkOrCopy as p,removeInstalled as h}from"./install-link.js";export const BUILTIN_MARKET_ID=f;export function builtinMarketDir(t){return n.join(m(t),BUILTIN_MARKET_ID)}export function builtinPacksDir(t){return n.join(builtinMarketDir(t),"plugins")}export function builtinRulesDir(t){return n.join(builtinMarketDir(t),"rules")}export function isBuiltinMarketDir(t,o){return n.resolve(t)===n.resolve(builtinMarketDir(o))}export async function ensureBuiltinMarket(t){const o=t.libraries.dataDir,e=u(),r=builtinMarketDir(o);t.libraries.add({path:r,kind:"both"});const c=await s(e),a=await l(r).catch(()=>null);if(a){if(a.isSymbolicLink()&&await s(r).catch(()=>null)===c)return{changed:!1,form:"link"};await h(r)}try{return{changed:!0,form:await p(e,r)}}catch(i){return{changed:!1,error:i instanceof Error?i.message:String(i)}}}
+import i from"node:path";import{lstat as u,realpath as s}from"node:fs/promises";import{builtinMarketRoot as c}from"@weavecode/templates";import{WEAVE_MARKETPLACE as m}from"@weavecode/harness";import{marketDir as f}from"./manifest.js";import{linkOrCopy as p,removeInstalled as h}from"./install-link.js";export const BUILTIN_MARKET_ID=m;export function builtinMarketDir(r){return i.join(f(r),BUILTIN_MARKET_ID)}export function builtinPacksDir(r){return i.join(builtinMarketDir(r),"plugins")}export function builtinRulesDir(r){return i.join(builtinMarketDir(r),"rules")}export function isBuiltinMarketDir(r,n){return i.resolve(r)===i.resolve(builtinMarketDir(n))}export async function ensureBuiltinMarket(r){const n=r.libraries.dataRoot,a=c(),t=builtinMarketDir(n);r.libraries.add({path:t,kind:"both"});const l=await s(a),e=await u(t).catch(()=>null);if(e){if(e.isSymbolicLink()&&await s(t).catch(()=>null)===l)return{changed:!1,form:"link"};await h(t)}try{return{changed:!0,form:await p(a,t)}}catch(o){return{changed:!1,error:o instanceof Error?o.message:String(o)}}}

package/node_modules/@weavecode/server/dist/market/identity.js

@@ -1 +1 @@
-import e from"node:path";import{marketDir as n}from"./manifest.js";export function marketIdOf(i,o=n()){const r=e.relative(e.resolve(o),e.resolve(i));if(r===""||r.startsWith("..")||e.isAbsolute(r))return;const t=r.split(e.sep)[0];return t||void 0}
+import t from"node:path";import{marketDir as s}from"./manifest.js";export function marketIdOf(e,o=s()){const r=t.relative(t.resolve(o),t.resolve(e));return r===""||r.startsWith("..")||t.isAbsolute(r)?void 0:r.split(t.sep)[0]||void 0}

package/node_modules/@weavecode/server/dist/market/import.d.ts

@@ -13,8 +13,8 @@ export type GitResult = {
 export type GitExec = (file: string, args: string[], options: GitExecOptions) => Promise<GitResult>;
 export interface ImportDeps {
     libraries: LibraryRepository;
-    /** 覆盖 dataDir（测试注入）；默认 getDataDir()。 */
-    dataDir?: string;
+    /** 覆盖 dataRoot（测试注入）；默认 getDataRoot()。 */
+    dataRoot?: string;
     /** 覆盖 git 执行（测试注入假 exec）。 */
     execGit?: GitExec;
 }
@@ -23,7 +23,7 @@ export interface ImportedResource {
     id: string;
     /** 市场内绝对路径。 */
     dir: string;
-    /** 相对 dataDir 的 posix 形（libraries.path 规范存储形）。 */
+    /** 相对 dataRoot 的 posix 形（libraries.path 规范存储形）。 */
     relPath: string;
     manifest: MarketManifest;
     libraryId: number;

package/node_modules/@weavecode/server/dist/market/import.js

@@ -1,2 +1,2 @@
-import{execFile as G}from"node:child_process";import{cp as x,mkdir as D,readdir as R,rename as k,rm as p,stat as A}from"node:fs/promises";import s from"node:path";import{promisify as _}from"node:util";import{getDataDir as h}from"../db/paths.js";import{isInsideDir as E,toRelPosix as g}from"./resolve.js";import{isBuiltinMarketDir as B}from"./builtin.js";import{marketDir as I,readManifest as y,writeManifest as d}from"./manifest.js";const C=_(G),M=6e4,S=2e3;export function slugifyResourceId(r){const t=r.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"");return/^[a-z0-9][a-z0-9-]*$/.test(t)?t:"resource"}export function assertSafeGitUrl(r){const t=r.trim();if(!t)throw new Error("Missing git URL");if(t.includes("--upload-pack"))throw new Error("Invalid git URL (--upload-pack rejected)");if(!(t.startsWith("https://")||t.startsWith("ssh://")||/^git@[^:/\s]+:/.test(t)))throw new Error(`Unsupported git URL (allowed: https/ssh): ${t}`);if(/[\s\r\n\t]/.test(t))throw new Error("Invalid git URL (whitespace)");return t}function w(){return new Date().toISOString()}function U(r){return r.length>S?`${r.slice(0,S)}\u2026(truncated)`:r}function l(r,t){if(!E(r,t))throw new Error(`Import target escapes the market directory: ${r}`)}async function L(r){try{return await A(r),!0}catch{return!1}}async function b(r,t){let i=s.join(t,r),e=1;for(;await L(i);)e+=1,i=s.join(t,`${r}-${e}`);return i}async function O(r,t){let i;try{i=await R(r,{withFileTypes:!0})}catch{return null}for(const e of i){if(!e.isDirectory())continue;const a=s.join(r,e.name);if((await y(a))?.origin===t)return a}return null}async function v(r,t,i,e,a=!1){const o=i.dataDir??h(),n=g(r,o),c=i.libraries.add({path:n,kind:"both"});return{id:s.basename(r),dir:r,relPath:n,manifest:t,libraryId:c.id,reused:e,refreshed:a}}async function P(r,t,i){const e=`${t}.refresh-tmp`;await p(e,{recursive:!0,force:!0}),await x(r,e,{recursive:!0}),l(s.resolve(e),i),await p(t,{recursive:!0,force:!0}),await k(e,t)}export async function importFromDir(r,t){const i=t.dataDir??h(),e=s.resolve(r);if(!(await A(e).catch(()=>null))?.isDirectory())throw new Error(`Not a directory: ${r}`);const o=I(i);if(E(e,o))throw new Error("\u4E0D\u80FD\u628A\u8D44\u6E90\u5E02\u573A\u7684\u5B58\u50A8\u76EE\u5F55\u5F53\u6765\u6E90\u5BFC\u5165\uFF1A\u5176\u4E2D\u7684\u8D44\u6E90\u5DF2\u5728\u5217\u8868\u4E2D\uFF08\u5185\u7F6E\u4ED3\u843D\u70B9 / \u5DF2\u5BFC\u5165\u7684\u526F\u672C\uFF09");const n=await O(o,e);if(n){const m=await y(n);await P(e,n,o);const f={...m,importedAt:w()};return await d(n,f),v(n,f,t,!0,!0)}const c=await b(slugifyResourceId(s.basename(e)),o);l(c,o),await D(s.dirname(c),{recursive:!0}),await x(e,c,{recursive:!0});const u={source:"dir",origin:e,importedAt:w()};return await d(c,u),l(s.resolve(c),o),v(c,u,t,!1)}export async function importFromGit(r,t){const i=t.dataDir??h(),e=assertSafeGitUrl(r),a=I(i),o=await O(a,e);if(o){const m=await y(o),f=`${o}.refresh-tmp`;await p(f,{recursive:!0,force:!0});const j=["clone","--depth","1",e,f];try{await(t.execGit??defaultGitExec)("git",j,{timeout:M,maxBuffer:4*1024*1024,windowsHide:!0})}catch(F){throw new Error(`git clone failed: ${U(T(F))}`)}l(s.resolve(f),a),await p(o,{recursive:!0,force:!0}),await k(f,o);const $={...m,importedAt:w()};return await d(o,$),v(o,$,t,!0,!0)}const n=await b(slugifyResourceId(z(e)),a);l(n,a),await D(a,{recursive:!0});const c=["clone","--depth","1",e,n];try{await(t.execGit??defaultGitExec)("git",c,{timeout:M,maxBuffer:4*1024*1024,windowsHide:!0})}catch(m){throw new Error(`git clone failed: ${U(T(m))}`)}l(s.resolve(n),a);const u={source:"git",origin:e,importedAt:w()};return await d(n,u),v(n,u,t,!1)}export async function importLibraryIntoMarket(r,t){const i=t.dataDir??h(),e=s.isAbsolute(r.path)?r.path:s.join(i,r.path),a=s.resolve(e),o=I(i);if(!await L(a))throw new Error(`Source directory not found: ${a}`);if(B(a,i))throw new Error("\u5185\u7F6E\u4ED3\u4E0D\u53EF\u8FC1\u5165\uFF1A\u5B83\u968F\u5305\u53D1\u5E03\u3001\u65E0\u5916\u90E8\u6765\u6E90\uFF0C\u4E14\u843D\u70B9\u662F\u94FE\u63A5\uFF08\u5199\u5165\u4F1A\u6539\u5230\u5305\u5185\u5BB9\uFF09");if(E(a,o)){let u=await y(a);return u||(u={source:"dir",origin:a,importedAt:w()},await d(a,u)),{id:s.basename(a),dir:a,relPath:g(a,i),manifest:u,libraryId:r.id,reused:!0,refreshed:!1}}const n=await b(slugifyResourceId(s.basename(a)),o);l(n,o),await D(s.dirname(n),{recursive:!0}),await x(a,n,{recursive:!0});const c={source:"dir",origin:a,importedAt:w()};return await d(n,c),t.libraries.setPath(r.id,g(n,i)),{id:s.basename(n),dir:n,relPath:g(n,i),manifest:c,libraryId:r.id,reused:!1,refreshed:!1}}function z(r){const t=r.split(/[?#]/)[0],i=t.lastIndexOf("/"),e=t.lastIndexOf(":");return(i>e?t.slice(i+1):t.slice(e+1)).replace(/\.git$/,"")||"repo"}function T(r){const t=r,i=[t?.stderr,t?.stdout].filter(Boolean).map(String);return(i.length?i.join(`
-`):r instanceof Error?r.message:String(r)).trim()||"unknown error"}export const defaultGitExec=async(r,t,i)=>{const{stdout:e,stderr:a}=await C(r,t,i);return{stdout:String(e),stderr:String(a)}};
+import{execFile as G}from"node:child_process";import{cp as y,mkdir as D,readdir as M,rename as b,rm as p,stat as B}from"node:fs/promises";import u from"node:path";import{promisify as P}from"node:util";import{getDataRoot as h}from"../db/paths.js";import{isInsideDir as v,toRelPosix as E}from"./resolve.js";import{isBuiltinMarketDir as z}from"./builtin.js";import{marketDir as x,readManifest as F,writeManifest as w}from"./manifest.js";const O=P(G),I=6e4,R=2e3;export function slugifyResourceId(r){const t=r.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"");return/^[a-z0-9][a-z0-9-]*$/.test(t)?t:"resource"}export function assertSafeGitUrl(r){const t=r.trim();if(!t)throw new Error("Missing git URL");if(t.includes("--upload-pack"))throw new Error("Invalid git URL (--upload-pack rejected)");if(!(t.startsWith("https://")||t.startsWith("ssh://")||/^git@[^:/\s]+:/.test(t)))throw new Error(`Unsupported git URL (allowed: https/ssh): ${t}`);if(/[\s\r\n\t]/.test(t))throw new Error("Invalid git URL (whitespace)");return t}function l(){return new Date().toISOString()}function k(r){return r.length>R?`${r.slice(0,R)}\u2026(truncated)`:r}function d(r,t){if(!v(r,t))throw new Error(`Import target escapes the market directory: ${r}`)}async function S(r){try{return await B(r),!0}catch{return!1}}async function A(r,t){let a=u.join(t,r),i=1;for(;await S(a);)i+=1,a=u.join(t,`${r}-${i}`);return a}async function j(r,t){let a;try{a=await M(r,{withFileTypes:!0})}catch{return null}for(const i of a){if(!i.isDirectory())continue;const e=u.join(r,i.name);if((await F(e))?.origin===t)return e}return null}async function g(r,t,a,i,e=!1){const n=a.dataRoot??h(),o=E(r,n),s=a.libraries.add({path:o,kind:"both"});return{id:u.basename(r),dir:r,relPath:o,manifest:t,libraryId:s.id,reused:i,refreshed:e}}async function H(r,t,a){const i=`${t}.refresh-tmp`;await p(i,{recursive:!0,force:!0}),await y(r,i,{recursive:!0}),d(u.resolve(i),a),await p(t,{recursive:!0,force:!0}),await b(i,t)}export async function importFromDir(r,t){const a=t.dataRoot??h(),i=u.resolve(r);if(!(await B(i).catch(()=>null))?.isDirectory())throw new Error(`Not a directory: ${r}`);const e=x(a);if(v(i,e))throw new Error("\u4E0D\u80FD\u628A\u8D44\u6E90\u5E02\u573A\u7684\u5B58\u50A8\u76EE\u5F55\u5F53\u6765\u6E90\u5BFC\u5165\uFF1A\u5176\u4E2D\u7684\u8D44\u6E90\u5DF2\u5728\u5217\u8868\u4E2D\uFF08\u5185\u7F6E\u4ED3\u843D\u70B9 / \u5DF2\u5BFC\u5165\u7684\u526F\u672C\uFF09");const n=await j(e,i);if(n){const c=await F(n);await H(i,n,e);const f={...c,importedAt:l()};return await w(n,f),g(n,f,t,!0,!0)}const o=await A(slugifyResourceId(u.basename(i)),e);d(o,e),await D(u.dirname(o),{recursive:!0}),await y(i,o,{recursive:!0});const s={source:"dir",origin:i,importedAt:l()};return await w(o,s),d(u.resolve(o),e),g(o,s,t,!1)}export async function importFromGit(r,t){const a=t.dataRoot??h(),i=assertSafeGitUrl(r),e=x(a),n=await j(e,i);if(n){const f=await F(n),m=`${n}.refresh-tmp`;await p(m,{recursive:!0,force:!0});const L=["clone","--depth","1",i,m];try{await(t.execGit??defaultGitExec)("git",L,{timeout:I,maxBuffer:4*1024*1024,windowsHide:!0})}catch(U){throw new Error(`git clone failed: ${k(C(U))}`)}d(u.resolve(m),e),await p(n,{recursive:!0,force:!0}),await b(m,n);const $={...f,importedAt:l()};return await w(n,$),g(n,$,t,!0,!0)}const o=await A(slugifyResourceId(T(i)),e);d(o,e),await D(e,{recursive:!0});const s=["clone","--depth","1",i,o];try{await(t.execGit??defaultGitExec)("git",s,{timeout:I,maxBuffer:4*1024*1024,windowsHide:!0})}catch(f){throw new Error(`git clone failed: ${k(C(f))}`)}d(u.resolve(o),e);const c={source:"git",origin:i,importedAt:l()};return await w(o,c),g(o,c,t,!1)}export async function importLibraryIntoMarket(r,t){const a=t.dataRoot??h(),i=u.isAbsolute(r.path)?r.path:u.join(a,r.path),e=u.resolve(i),n=x(a);if(!await S(e))throw new Error(`Source directory not found: ${e}`);if(z(e,a))throw new Error("\u5185\u7F6E\u4ED3\u4E0D\u53EF\u8FC1\u5165\uFF1A\u5B83\u968F\u5305\u53D1\u5E03\u3001\u65E0\u5916\u90E8\u6765\u6E90\uFF0C\u4E14\u843D\u70B9\u662F\u94FE\u63A5\uFF08\u5199\u5165\u4F1A\u6539\u5230\u5305\u5185\u5BB9\uFF09");if(v(e,n)){let c=await F(e);return c||(c={source:"dir",origin:e,importedAt:l()},await w(e,c)),{id:u.basename(e),dir:e,relPath:E(e,a),manifest:c,libraryId:r.id,reused:!0,refreshed:!1}}const o=await A(slugifyResourceId(u.basename(e)),n);d(o,n),await D(u.dirname(o),{recursive:!0}),await y(e,o,{recursive:!0});const s={source:"dir",origin:e,importedAt:l()};return await w(o,s),t.libraries.setPath(r.id,E(o,a)),{id:u.basename(o),dir:o,relPath:E(o,a),manifest:s,libraryId:r.id,reused:!1,refreshed:!1}}function T(r){const t=r.split(/[?#]/)[0],a=t.lastIndexOf("/"),i=t.lastIndexOf(":");return(a>i?t.slice(a+1):t.slice(i+1)).replace(/\.git$/,"")||"repo"}function C(r){const t=r,a=[t?.stderr,t?.stdout].filter(Boolean).map(String);return(a.length?a.join(`
+`):r instanceof Error?r.message:String(r)).trim()||"unknown error"}export const defaultGitExec=async(r,t,a)=>{const{stdout:i,stderr:e}=await O(r,t,a);return{stdout:String(i),stderr:String(e)}};

package/node_modules/@weavecode/server/dist/market/manifest.d.ts

@@ -8,8 +8,8 @@ export interface MarketManifest {
     /** 预留给 git 更新检查（BACKLOG）——当前恒为空。 */
     commit?: string;
 }
-/** 资源市场收纳根：`<getDataDir()>/market/`。 */
-export declare function marketDir(dataDir?: string): string;
+/** 资源市场收纳根：`<dataDir>/data/market/`（随数据迁移）。 */
+export declare function marketDir(dataRoot?: string): string;
 export declare function manifestPath(resourceDir: string): string;
 /** 读清单；缺失或不合法返回 null（legacy 目录没有清单）。 */
 export declare function readManifest(resourceDir: string): Promise<MarketManifest | null>;

package/node_modules/@weavecode/server/dist/market/manifest.js

@@ -1,2 +1,2 @@
-import e from"node:path";import{readFile as n,writeFile as i}from"node:fs/promises";import{getDataDir as o}from"../db/paths.js";export const MANIFEST_FILE=".weave-market.json";export function marketDir(t=o()){return e.join(t,"market")}export function manifestPath(t){return e.join(t,MANIFEST_FILE)}export async function readManifest(t){try{const r=JSON.parse(await n(manifestPath(t),"utf-8"));return r&&typeof r=="object"&&(r.source==="dir"||r.source==="git")?r:null}catch{return null}}export async function writeManifest(t,r){await i(manifestPath(t),`${JSON.stringify(r,null,2)}
+import e from"node:path";import{readFile as n,writeFile as o}from"node:fs/promises";import{getDataRoot as i}from"../db/paths.js";export const MANIFEST_FILE=".weave-market.json";export function marketDir(t=i()){return e.join(t,"market")}export function manifestPath(t){return e.join(t,MANIFEST_FILE)}export async function readManifest(t){try{const r=JSON.parse(await n(manifestPath(t),"utf-8"));return r&&typeof r=="object"&&(r.source==="dir"||r.source==="git")?r:null}catch{return null}}export async function writeManifest(t,r){await o(manifestPath(t),`${JSON.stringify(r,null,2)}
 `,"utf-8")}

package/node_modules/@weavecode/server/dist/market/refresh.d.ts

@@ -15,8 +15,8 @@ export interface RefreshResult {
 }
 export interface RefreshDeps {
     libraries: LibraryRepository;
-    /** 覆盖 dataDir（测试注入）；默认 getDataDir()。 */
-    dataDir?: string;
+    /** 覆盖数据根（测试注入）；默认 getDataRoot()。 */
+    dataRoot?: string;
     /** 覆盖 git 执行（测试注入假 exec）。 */
     execGit?: GitExec;
 }

package/node_modules/@weavecode/server/dist/market/refresh.js

@@ -1 +1 @@
-import{stat as d}from"node:fs/promises";import{defaultGitExec as u,importFromDir as c,importFromGit as f}from"./import.js";import{readManifest as n,writeManifest as m}from"./manifest.js";async function w(t){try{return(await d(t)).isDirectory()}catch{return!1}}export async function refreshMarketItems(t,e){return Promise.all(t.map(async i=>{const r=await n(i.dir);if(!r)return{id:i.id,status:"skipped"};if(r.source==="dir"&&!await w(r.origin))return{id:i.id,status:"origin-missing"};try{if(r.source==="git"){const a=await f(r.origin,e),s=await h(a.dir,e.execGit??u);if(s){const o={...await n(a.dir),commit:s};return await m(a.dir,o),{id:i.id,status:"refreshed",commit:s}}return{id:i.id,status:"refreshed"}}return await c(r.origin,e),{id:i.id,status:"refreshed"}}catch{return{id:i.id,status:"failed"}}}))}async function h(t,e){try{return(await e("git",["-C",t,"rev-parse","HEAD"],{timeout:15e3,maxBuffer:1048576,windowsHide:!0})).stdout.trim()||void 0}catch{return}}
+import{stat as d}from"node:fs/promises";import{defaultGitExec as u,importFromDir as c,importFromGit as m}from"./import.js";import{readManifest as n,writeManifest as f}from"./manifest.js";async function w(i){try{return(await d(i)).isDirectory()}catch{return!1}}export async function refreshMarketItems(i,a){return Promise.all(i.map(async t=>{const r=await n(t.dir);if(!r)return{id:t.id,status:"skipped"};if(r.source==="dir"&&!await w(r.origin))return{id:t.id,status:"origin-missing"};try{if(r.source==="git"){const s=await m(r.origin,a),e=await p(s.dir,a.execGit??u);if(e){const o={...await n(s.dir),commit:e};return await f(s.dir,o),{id:t.id,status:"refreshed",commit:e}}return{id:t.id,status:"refreshed"}}return await c(r.origin,a),{id:t.id,status:"refreshed"}}catch{return{id:t.id,status:"failed"}}}))}async function p(i,a){try{return(await a("git",["-C",i,"rev-parse","HEAD"],{timeout:15e3,maxBuffer:1048576,windowsHide:!0})).stdout.trim()||void 0}catch{return}}

package/node_modules/@weavecode/server/dist/market/resolve.d.ts

@@ -2,23 +2,26 @@ import type { LibraryRepository } from '../repositories/libraries.js';
 /**
  * 批 9（R11 迁移兼容闸）：`libraries.path` 的读侧单点。
  *
- * - 相对路径（posix 分隔符入库）→ `path.join(dataDir, rel)` 还原（Windows 下分隔符/盘符经 join 归一）；
- * - 绝对路径且在 dataDir 内 → 旧写法，返回解析值；`LibraryRepository` 读侧据此惰性 UPDATE 为相对形；
- * - 绝对路径且在 dataDir 外 → legacy 外部源，原样返回（永不改写、不自动复制，显式迁入才进市场）。
+ * 相对基 = **数据根**（`<dataDir>/data`，见 `getDataRoot`），故市场副本从
+ * dataDir 顶层搬进 `data/` 后，存量行 `market/<id>` 一字不改仍然成立。
+ *
+ * - 相对路径（posix 分隔符入库）→ `path.join(dataRoot, rel)` 还原（Windows 下分隔符/盘符经 join 归一）；
+ * - 绝对路径且在数据根内 → 旧写法，返回解析值；`LibraryRepository` 读侧据此惰性 UPDATE 为相对形；
+ * - 绝对路径且在数据根外 → legacy 外部源，原样返回（永不改写、不自动复制，显式迁入才进市场）。
  */
 export declare function resolveLibraryPath(row: {
     path: string;
-}, dataDir?: string): string;
+}, dataRoot?: string): string;
 /** `target` 是否落在 `dir` 内（path.resolve 归一后比较，Windows 盘符差异视为界外）。 */
 export declare function isInsideDir(target: string, dir: string): boolean;
-/** 绝对路径 → 相对 dataDir 的 posix 形（markets.path 的规范存储形）。 */
-export declare function toRelPosix(absPath: string, dataDir?: string): string;
+/** 绝对路径 → 相对数据根的 posix 形（libraries.path 的规范存储形）。 */
+export declare function toRelPosix(absPath: string, dataRoot?: string): string;
 /**
- * managed 市场资源根（位于 `<dataDir>/market/` 内的库行）——toolkit 扫描源与
+ * managed 市场资源根（位于 `<dataRoot>/market/` 内的库行）——toolkit 扫描源与
  * plugin-loader 装载源共用的同一口径（M3 装载桥）；legacy 外部源不入内。
  *
  * **内置仓排除在外**：它的根由 `discoverToolkitSources()` 以 `provenance:'builtin'`
  * 单独提供；若这里也返回，同一棵树会被两遍扫描、同一个包出现两条（一遍 builtin
  * 一遍 market），开关与列表都会重复。
  */
-export declare function marketLibraryRoots(libraries: Pick<LibraryRepository, 'list'>, dataDir?: string): string[];
+export declare function marketLibraryRoots(libraries: Pick<LibraryRepository, 'list'>, dataRoot?: string): string[];

package/node_modules/@weavecode/server/dist/market/resolve.js

@@ -1 +1 @@
-import t from"node:path";import{getDataDir as s}from"../db/paths.js";import{marketDir as a}from"./manifest.js";import{isBuiltinMarketDir as p}from"./builtin.js";export function resolveLibraryPath(e,o=s()){if(!t.isAbsolute(e.path))return t.join(o,e.path);const r=t.resolve(e.path);return isInsideDir(r,o)?r:e.path}export function isInsideDir(e,o){const r=t.relative(t.resolve(o),t.resolve(e));return t.isAbsolute(r)?!1:r===""||r!==".."&&!r.startsWith(`..${t.sep}`)}export function toRelPosix(e,o=s()){return t.relative(t.resolve(o),t.resolve(e)).split(t.sep).join("/")}export function marketLibraryRoots(e,o=s()){const r=t.resolve(a(o)),n=new Set;for(const l of e.list()){const i=t.resolve(l.path);i===r||p(i,o)||isInsideDir(i,r)&&n.add(i)}return[...n]}
+import t from"node:path";import{getDataRoot as i}from"../db/paths.js";import{marketDir as l}from"./manifest.js";import{isBuiltinMarketDir as p}from"./builtin.js";export function resolveLibraryPath(r,e=i()){if(!t.isAbsolute(r.path))return t.join(e,r.path);const o=t.resolve(r.path);return isInsideDir(o,e)?o:r.path}export function isInsideDir(r,e){const o=t.relative(t.resolve(e),t.resolve(r));return t.isAbsolute(o)?!1:o===""||o!==".."&&!o.startsWith(`..${t.sep}`)}export function toRelPosix(r,e=i()){return t.relative(t.resolve(e),t.resolve(r)).split(t.sep).join("/")}export function marketLibraryRoots(r,e=i()){const o=t.resolve(l(e)),n=new Set;for(const a of r.list()){const s=t.resolve(a.path);s===o||p(s,e)||isInsideDir(s,o)&&n.add(s)}return[...n]}

package/node_modules/@weavecode/server/dist/market/updates.js

@@ -1 +1 @@
-import{stat as u}from"node:fs/promises";import m from"node:path";import{hashSkillDir as c}from"../install/fingerprint.js";import{defaultGitExec as l}from"./import.js";import{readManifest as d}from"./manifest.js";const f=15e3;export const MARKET_SKIP_NAMES=new Set([".weave",".git","node_modules",".weave-market.json"]);async function p(i){try{return(await u(i)).isDirectory()}catch{return!1}}async function w(i,o){const r=m.resolve(o);if(!await p(r))return"origin-missing";const[t,e]=await Promise.all([c(i,MARKET_SKIP_NAMES),c(r,MARKET_SKIP_NAMES)]);return t===e?"uptodate":"update-available"}async function h(i,o,r){const t={timeout:f,maxBuffer:1048576,windowsHide:!0};try{const e=await r("git",["-C",i,"rev-parse","HEAD"],t),a=await r("git",["ls-remote",o,"HEAD"],t),n=e.stdout.trim(),s=a.stdout.trim().split(/\s+/)[0]??"";return!n||!s?"unknown":n===s?"uptodate":"update-available"}catch{return"unknown"}}export async function checkMarketUpdates(i,o){const r=o?.execGit??l;return Promise.all(i.map(async t=>{const e=await d(t.dir);let a;return e?e.source==="git"?a=await h(t.dir,e.origin,r):a=await w(t.dir,e.origin):a="unknown",{id:t.id,status:a,checkedAt:new Date().toISOString()}}))}
+import{stat as u}from"node:fs/promises";import m from"node:path";import{hashSkillDir as c}from"../install/fingerprint.js";import{defaultGitExec as d}from"./import.js";import{readManifest as w}from"./manifest.js";const l=15e3;export const MARKET_SKIP_NAMES=new Set([".weave",".git","node_modules",".weave-market.json"]);async function p(e){try{return(await u(e)).isDirectory()}catch{return!1}}async function f(e,n){const r=m.resolve(n);if(!await p(r))return"origin-missing";const[t,a]=await Promise.all([c(e,MARKET_SKIP_NAMES),c(r,MARKET_SKIP_NAMES)]);return t===a?"uptodate":"update-available"}async function g(e,n,r){const t={timeout:l,maxBuffer:1048576,windowsHide:!0};try{const a=await r("git",["-C",e,"rev-parse","HEAD"],t),i=await r("git",["ls-remote",n,"HEAD"],t),o=a.stdout.trim(),s=i.stdout.trim().split(/\s+/)[0]??"";return!o||!s?"unknown":o===s?"uptodate":"update-available"}catch{return"unknown"}}export async function checkMarketUpdates(e,n){const r=n?.execGit??d;return Promise.all(e.map(async t=>{const a=await w(t.dir);let i;return a?a.source==="git"?i=await g(t.dir,a.origin,r):i=await f(t.dir,a.origin):i="unknown",{id:t.id,status:i,checkedAt:new Date().toISOString()}}))}

package/node_modules/@weavecode/server/dist/registry.js

@@ -1,2 +1,2 @@
-import{basename as a,join as c}from"node:path";import{mkdirSync as f,writeFileSync as l}from"node:fs";import{openDatabase as m}from"./db/db.js";import{ProjectRepository as d}from"./repositories/projects.js";import{HookDispatchRepository as u}from"./repositories/hook-dispatches.js";import{HookEventRepository as j}from"./repositories/hook-events.js";import{SessionRepository as w}from"./repositories/sessions.js";import{SessionWatchRepository as P}from"./repositories/session-watches.js";import{SessionSequenceRepository as h}from"./repositories/session-sequences.js";import{SideQuestionRepository as k}from"./repositories/side-questions.js";import{generateToken as B}from"./daemon/auth.js";import{purgeProjectPipeline as R}from"./daemon/hook-pipeline.js";import{hooksRoot as v}from"./hooks/mirror.js";export function registerProject(t,s,p){const o=m(p);try{const r=new d(o),n=r.getByPath(t)?.token??B(),i=r.register({path:t,name:a(t),token:n,source:s});return f(c(t,".weave"),{recursive:!0}),l(c(t,".weave","token"),n+`
-`,"utf-8"),{id:i.id,token:n,path:i.path}}finally{o.close()}}export function unregisterProject(t,s,p){const o=m(s);try{const r=new d(o),e=r.getByPath(t);if(!e)return null;const n=new u(o).deleteByProject(e.id),i=new j(o).deleteByProject(e.id);new P(o).deleteByProject(e.id),new h(o).deleteByProject(e.id),new k(o).deleteByProject(e.id);const y=new w(o).removeByProject(e.id);return R(p??v(),e.token),r.remove(e.id),{id:e.id,name:e.name,path:e.path,purged:{events:i,dispatches:n,sessions:y}}}finally{o.close()}}
+import{basename as d,join as a}from"node:path";import{mkdirSync as f,writeFileSync as l}from"node:fs";import{openDatabase as p}from"./db/db.js";import{ProjectRepository as m}from"./repositories/projects.js";import{HookDispatchRepository as u}from"./repositories/hook-dispatches.js";import{HookEventRepository as h}from"./repositories/hook-events.js";import{SessionRepository as P}from"./repositories/sessions.js";import{SessionWatchRepository as w}from"./repositories/session-watches.js";import{OrchestrationRepository as j,OrchestrationRunRepository as k}from"./repositories/orchestrations.js";import{SideQuestionRepository as R}from"./repositories/side-questions.js";import{generateToken as g}from"./daemon/auth.js";import{purgeProjectPipeline as B}from"./daemon/hook-pipeline.js";import{hooksRoot as v}from"./hooks/mirror.js";export function registerProject(t,s,n){const o=p(n);try{const r=new m(o),e=r.getByPath(t)?.token??g(),i=r.register({path:t,name:d(t),token:e,source:s});return f(a(t,".weave"),{recursive:!0}),l(a(t,".weave","token"),e+`
+`,"utf-8"),{id:i.id,token:e,path:i.path}}finally{o.close()}}export function unregisterProject(t,s,n){const o=p(s);try{const r=new m(o),e=r.getByPath(t);if(!e)return null;const i=new u(o).deleteByProject(e.id),c=new h(o).deleteByProject(e.id);new w(o).deleteByProject(e.id),new j(o).deleteByProject(e.id),new R(o).deleteByProject(e.id),new k(o).clear("all",e.id);const y=new P(o).removeByProject(e.id);return B(n??v(),e.token),r.remove(e.id),{id:e.id,name:e.name,path:e.path,purged:{events:c,dispatches:i,sessions:y}}}finally{o.close()}}

package/node_modules/@weavecode/server/dist/repositories/hook-dispatches.js

@@ -1,8 +1,8 @@
-export class HookDispatchRepository{db;constructor(t){this.db=t}insert(t){const e=this.db.prepare(`INSERT INTO hook_dispatches (rule_id, event_id, session_id, prompt, status, mode, started_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?)`).run(t.ruleId,t.eventId??null,t.sessionId??null,t.prompt,t.status,t.mode,new Date().toISOString());return this.getById(Number(e.lastInsertRowid))}getById(t){const e=this.db.prepare("SELECT * FROM hook_dispatches WHERE id = ?").get(t);return e?r(e):void 0}updateStatus(t,e){const n=new Date().toISOString();return this.db.prepare(`UPDATE hook_dispatches
+export class HookDispatchRepository{db;constructor(t){this.db=t}insert(t){const s=this.db.prepare(`INSERT INTO hook_dispatches (rule_id, event_id, session_id, prompt, status, mode, started_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`).run(t.ruleId,t.eventId??null,t.sessionId??null,t.prompt,t.status,t.mode,new Date().toISOString());return this.getById(Number(s.lastInsertRowid))}getById(t){const s=this.db.prepare("SELECT * FROM hook_dispatches WHERE id = ?").get(t);return s?n(s):void 0}updateStatus(t,s){const r=new Date().toISOString();return this.db.prepare(`UPDATE hook_dispatches
          SET status = ?, output = COALESCE(?, output), error = COALESCE(?, error),
              finished_at = CASE WHEN ? = 1 THEN ? ELSE finished_at END
-         WHERE id = ?`).run(e.status,e.output??null,e.error??null,e.finished?1:0,n,t),this.getById(t)}list(t={}){const e=Math.min(Math.max(t.limit??50,1),200),n=[],i=[];t.ruleId&&(n.push("rule_id = ?"),i.push(t.ruleId)),t.status&&(n.push("status = ?"),i.push(t.status)),t.sessionId&&(n.push("session_id = ?"),i.push(t.sessionId));const d=n.length>0?`WHERE ${n.join(" AND ")}`:"";return this.db.prepare(`SELECT * FROM hook_dispatches ${d} ORDER BY started_at DESC, id DESC LIMIT ?`).all(...i,e).map(r)}deleteBySession(t){return Number(this.db.prepare("DELETE FROM hook_dispatches WHERE session_id = ?").run(t).changes)}deleteByProject(t){return Number(this.db.prepare(`DELETE FROM hook_dispatches WHERE session_id IN (SELECT session_id FROM sessions WHERE project_id = ?)
-             OR event_id IN (SELECT id FROM hook_events WHERE project_id = ?)`).run(t,t).changes)}findRecentAuto(t,e,n){const i=this.db.prepare(`SELECT * FROM hook_dispatches
+         WHERE id = ?`).run(s.status,s.output??null,s.error??null,s.finished?1:0,r,t),this.getById(t)}list(t={}){const s=Math.min(Math.max(t.limit??50,1),200),r=[],i=[];t.ruleId&&(r.push("rule_id = ?"),i.push(t.ruleId)),t.status&&(r.push("status = ?"),i.push(t.status)),t.sessionId&&(r.push("session_id = ?"),i.push(t.sessionId));const d=r.length>0?`WHERE ${r.join(" AND ")}`:"";return this.db.prepare(`SELECT * FROM hook_dispatches ${d} ORDER BY started_at DESC, id DESC LIMIT ?`).all(...i,s).map(n)}deleteBySession(t){return Number(this.db.prepare("DELETE FROM hook_dispatches WHERE session_id = ?").run(t).changes)}deleteByProject(t){return Number(this.db.prepare(`DELETE FROM hook_dispatches WHERE session_id IN (SELECT session_id FROM sessions WHERE project_id = ?)
+             OR event_id IN (SELECT id FROM hook_events WHERE project_id = ?)`).run(t,t).changes)}findRecentAuto(t,s,r){const i=this.db.prepare(`SELECT * FROM hook_dispatches
          WHERE rule_id = ? AND session_id = ? AND mode = 'auto' AND started_at >= ?
-         ORDER BY started_at DESC LIMIT 1`).get(t,e,n);return i?r(i):void 0}}function r(s){return{id:Number(s.id),ruleId:String(s.rule_id),eventId:s.event_id==null?null:Number(s.event_id),sessionId:s.session_id==null?null:String(s.session_id),prompt:String(s.prompt),status:String(s.status),mode:String(s.mode),output:s.output==null?null:String(s.output),error:s.error==null?null:String(s.error),startedAt:String(s.started_at),finishedAt:s.finished_at==null?null:String(s.finished_at)}}
+         ORDER BY started_at DESC LIMIT 1`).get(t,s,r);return i?n(i):void 0}}function n(e){return{id:Number(e.id),ruleId:String(e.rule_id),eventId:e.event_id==null?null:Number(e.event_id),sessionId:e.session_id==null?null:String(e.session_id),prompt:String(e.prompt),status:String(e.status),mode:String(e.mode),output:e.output==null?null:String(e.output),error:e.error==null?null:String(e.error),startedAt:String(e.started_at),finishedAt:e.finished_at==null?null:String(e.finished_at)}}

package/node_modules/@weavecode/server/dist/repositories/hook-events.d.ts

@@ -7,6 +7,11 @@ export interface HookEventInput {
     sessionId?: string;
     /** Serialized JSON payload captured from the agent hook. */
     payload: string;
+    /**
+     * 事件真实时刻（ISO）。缺省 = 插入时刻。只有**拉取式**采集（`logs` 槽）会带：
+     * 回填的历史行若印成插入时刻，会话列表与对话气泡的时序会全糊在一起。
+     */
+    createdAt?: string;
 }
 export interface HookEventRow {
     id: number;
@@ -52,6 +57,21 @@ export declare class HookEventRepository {
     deleteBySession(sessionId: string): number;
     /** 归档项目时清空其全部采集事件（含 session_id 为空的散行）。 */
     deleteByProject(projectId: number): number;
+    /** 仪表盘：事件总数（整表，COUNT(*) 走索引）。 */
+    countAll(): number;
+    /**
+     * 某时刻以来的事件数。按项目循环查——只有 `(project_id, created_at)` 这条
+     * 索引，裸 `WHERE created_at >= ?` 会整表扫（实测 12 万行）。
+     */
+    countSince(projectIds: readonly number[], sinceIso: string): number;
+    /**
+     * 仪表盘速率的**回填源**：窗口内逐秒分布（UTC 秒键，`YYYY-MM-DDTHH:MM:SS`）。
+     * 只在 daemon 启动后首次读图时调一次，之后由 `DashboardRateCache` 增量维护。
+     */
+    seriesBySecond(projectIds: readonly number[], sinceIso: string): Array<{
+        at: string;
+        n: number;
+    }>;
     /**
      * 按工具名择行（最近的 limit 条，倒序）：计划正文只藏在 ExitPlanMode 与「写计划
      * 文件」两类调用里，`needle` 再按路径特征收一道——不筛就得把整轮工具调用连同

package/node_modules/@weavecode/server/dist/repositories/hook-events.js

@@ -1,2 +1,3 @@
-import{readDaemonSettingsSync as E,DEFAULT_EVENT_RETENTION_DAYS as d}from"../daemon/settings.js";export class HookEventRepository{db;lastPruneDay=-1;insertEvent;pruneByCutoff;constructor(e){this.db=e,this.insertEvent=e.prepare(`INSERT INTO hook_events (project_id, source, event_type, session_id, payload, created_at)
-       VALUES (?, ?, ?, ?, ?, ?)`),this.pruneByCutoff=e.prepare("DELETE FROM hook_events WHERE created_at < ?")}resetPrune(){this.lastPruneDay=-1}insert(e){this.pruneExpired();const s=this.insertEvent.run(e.projectId,e.source,e.eventType,e.sessionId??null,e.payload,new Date().toISOString());return Number(s.lastInsertRowid)}insertMany(e){this.pruneExpired();const s=[];this.db.exec("BEGIN");try{for(const t of e){const r=this.insertEvent.run(t.projectId,t.source,t.eventType,t.sessionId??null,t.payload,new Date().toISOString());s.push(Number(r.lastInsertRowid))}this.db.exec("COMMIT")}catch(t){throw this.db.exec("ROLLBACK"),t}return s}pruneExpired(){const e=Math.floor(Date.now()/864e5);if(e===this.lastPruneDay)return;this.lastPruneDay=e;const s=E().events?.retentionDays??d,t=new Date((e-s)*864e5).toISOString();this.pruneByCutoff.run(t)}listByProject(e,s=100){return this.db.prepare("SELECT * FROM hook_events WHERE project_id = ? ORDER BY created_at DESC LIMIT ?").all(e,s).map(t=>p(t))}deleteBySession(e){return Number(this.db.prepare("DELETE FROM hook_events WHERE session_id = ?").run(e).changes)}deleteByProject(e){return Number(this.db.prepare("DELETE FROM hook_events WHERE project_id = ?").run(e).changes)}listByTools(e,s,t,r){if(s.length===0)return[];const o=["session_id = ?","event_type IN ('PreToolUse','PostToolUse')",`(${s.map(()=>"payload LIKE ?").join(" OR ")})`],i=[e,...s.map(a=>`%"toolName":"${a}"%`)];return t&&(o.push("payload LIKE ?"),i.push(`%${t}%`)),this.db.prepare(`SELECT * FROM hook_events WHERE ${o.join(" AND ")} ORDER BY id DESC LIMIT ?`).all(...i,r).map(a=>p(a))}listBySession(e,s=300,t,r){const o=["session_id = ?"],i=[e];return t!=null&&(o.push("id < ?"),i.push(t)),r?.length&&(o.push(`event_type IN (${r.map(()=>"?").join(",")})`),i.push(...r)),this.db.prepare(`SELECT * FROM hook_events WHERE ${o.join(" AND ")} ORDER BY id DESC LIMIT ?`).all(...i,s).map(a=>p(a)).reverse()}}function p(n){return{id:Number(n.id),projectId:Number(n.project_id),source:String(n.source),eventType:String(n.event_type),sessionId:n.session_id==null?null:String(n.session_id),payload:String(n.payload),createdAt:String(n.created_at)}}
+import{readDaemonSettingsSync as u,DEFAULT_EVENT_RETENTION_DAYS as d}from"../daemon/settings.js";export class HookEventRepository{db;lastPruneDay=-1;insertEvent;pruneByCutoff;constructor(e){this.db=e,this.insertEvent=e.prepare(`INSERT INTO hook_events (project_id, source, event_type, session_id, payload, created_at)
+       VALUES (?, ?, ?, ?, ?, ?)`),this.pruneByCutoff=e.prepare("DELETE FROM hook_events WHERE created_at < ?")}resetPrune(){this.lastPruneDay=-1}insert(e){this.pruneExpired();const r=this.insertEvent.run(e.projectId,e.source,e.eventType,e.sessionId??null,e.payload,e.createdAt??new Date().toISOString());return Number(r.lastInsertRowid)}insertMany(e){this.pruneExpired();const r=[];this.db.exec("BEGIN");try{for(const t of e){const n=this.insertEvent.run(t.projectId,t.source,t.eventType,t.sessionId??null,t.payload,t.createdAt??new Date().toISOString());r.push(Number(n.lastInsertRowid))}this.db.exec("COMMIT")}catch(t){throw this.db.exec("ROLLBACK"),t}return r}pruneExpired(){const e=Math.floor(Date.now()/864e5);if(e===this.lastPruneDay)return;this.lastPruneDay=e;const r=u().events?.retentionDays??d,t=new Date((e-r)*864e5).toISOString();this.pruneByCutoff.run(t)}listByProject(e,r=100){return this.db.prepare("SELECT * FROM hook_events WHERE project_id = ? ORDER BY created_at DESC LIMIT ?").all(e,r).map(t=>p(t))}deleteBySession(e){return Number(this.db.prepare("DELETE FROM hook_events WHERE session_id = ?").run(e).changes)}deleteByProject(e){return Number(this.db.prepare("DELETE FROM hook_events WHERE project_id = ?").run(e).changes)}countAll(){return Number(this.db.prepare("SELECT COUNT(*) AS n FROM hook_events").get().n)}countSince(e,r){const t=this.db.prepare("SELECT COUNT(*) AS n FROM hook_events WHERE project_id = ? AND created_at >= ?");let n=0;for(const s of e)n+=Number(t.get(s,r).n);return n}seriesBySecond(e,r){const t=this.db.prepare(`SELECT substr(created_at, 1, 19) AS at, COUNT(*) AS n
+       FROM hook_events WHERE project_id = ? AND created_at >= ? GROUP BY at`),n=new Map;for(const s of e)for(const o of t.all(s,r))n.set(o.at,(n.get(o.at)??0)+Number(o.n));return[...n].map(([s,o])=>({at:s,n:o})).sort((s,o)=>s.at<o.at?-1:1)}listByTools(e,r,t,n){if(r.length===0)return[];const s=["session_id = ?","event_type IN ('PreToolUse','PostToolUse')",`(${r.map(()=>"payload LIKE ?").join(" OR ")})`],o=[e,...r.map(a=>`%"toolName":"${a}"%`)];return t&&(s.push("payload LIKE ?"),o.push(`%${t}%`)),this.db.prepare(`SELECT * FROM hook_events WHERE ${s.join(" AND ")} ORDER BY id DESC LIMIT ?`).all(...o,n).map(a=>p(a))}listBySession(e,r=300,t,n){const s=["session_id = ?"],o=[e];return t!=null&&(s.push("id < ?"),o.push(t)),n?.length&&(s.push(`event_type IN (${n.map(()=>"?").join(",")})`),o.push(...n)),this.db.prepare(`SELECT * FROM hook_events WHERE ${s.join(" AND ")} ORDER BY id DESC LIMIT ?`).all(...o,r).map(a=>p(a)).reverse()}}function p(i){return{id:Number(i.id),projectId:Number(i.project_id),source:String(i.source),eventType:String(i.event_type),sessionId:i.session_id==null?null:String(i.session_id),payload:String(i.payload),createdAt:String(i.created_at)}}