cc-viewer 1.7.5 → 1.7.7

package/findcc.js

@@ -1,8 +1,8 @@
-import { resolve, join, sep } from 'node:path';
+import { resolve, join, sep, delimiter, isAbsolute, win32 } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { existsSync, realpathSync, readFileSync } from 'node:fs';
+import { existsSync, realpathSync, readFileSync, readdirSync, statSync, accessSync, constants as fsConstants } from 'node:fs';
 import { homedir, tmpdir, arch } from 'node:os';
-import { execSync, spawnSync } from 'node:child_process';
+import { execSync, execFileSync, spawnSync } from 'node:child_process';
 import { threadId } from 'node:worker_threads';
 
 const __dirname = fileURLToPath(new URL('.', import.meta.url));
@@ -172,6 +172,92 @@ const NATIVE_CANDIDATES = [
 // Command names used for which/command -v lookup
 export const BINARY_NAME = 'claude';
 
+export const CLAUDE_EXECUTABLE_PREF_KEY = 'claudeExecutablePath';
+
+export function expandClaudeExecutablePath(value, platform = process.platform) {
+  if (typeof value !== 'string' || !value.trim()) return null;
+  const raw = value.trim();
+  const homeRelative = raw.startsWith('~/') || raw.startsWith('~\\');
+  const expanded = homeRelative ? join(homedir(), raw.slice(2)) : raw;
+  const absolute = platform === 'win32' ? win32.isAbsolute(expanded) : isAbsolute(expanded);
+  if (!absolute) return null;
+  return platform === 'win32' ? win32.normalize(expanded) : resolve(expanded);
+}
+
+export function resolveExplicitClaudePath(value, platform = process.platform) {
+  const expanded = expandClaudeExecutablePath(value, platform);
+  if (!expanded || !existsSync(expanded)) return null;
+  try {
+    if (!statSync(expanded).isFile()) return null;
+  } catch { return null; }
+  let real = expanded;
+  try { real = realpathSync(expanded); } catch { }
+  const isJs = real.toLowerCase().endsWith('.js');
+  try {
+    if (isJs) {
+      accessSync(real, fsConstants.R_OK);
+    } else if (platform === 'win32') {
+      if (!real.toLowerCase().endsWith('.exe')) return null;
+    } else {
+      accessSync(expanded, fsConstants.X_OK);
+    }
+  } catch {
+    return null;
+  }
+  return {
+    path: isJs ? real : expanded,
+    realPath: real,
+    isNpmVersion: isJs,
+  };
+}
+
+export function readConfiguredClaudePath(prefsFile = join(LOG_DIR, 'preferences.json')) {
+  try {
+    const prefs = JSON.parse(readFileSync(prefsFile, 'utf8'));
+    const value = prefs?.[CLAUDE_EXECUTABLE_PREF_KEY];
+    return typeof value === 'string' && value.trim() ? value.trim() : null;
+  } catch {
+    return null;
+  }
+}
+
+export function resolveConfiguredClaudePath(prefsFile) {
+  return resolveExplicitClaudePath(readConfiguredClaudePath(prefsFile));
+}
+
+function describeClaudeSelection(path, isNpmVersion, source) {
+  let realPath = path;
+  try { realPath = realpathSync(path); } catch { }
+  return { path, realPath, isNpmVersion, source };
+}
+
+/**
+ * Resolve the executable used by every CCV launch surface.
+ * A non-empty saved configuration is authoritative: if it is invalid, return
+ * an error instead of silently starting a different (possibly unapproved) build.
+ */
+export function resolvePreferredClaudeSelection({ prefsFile } = {}) {
+  const configuredValue = readConfiguredClaudePath(prefsFile);
+  if (configuredValue) {
+    const configured = resolveExplicitClaudePath(configuredValue);
+    return configured
+      ? { ...configured, source: 'configured' }
+      : { error: 'configured-invalid', configuredPath: configuredValue };
+  }
+
+  const codeFusePath = resolveCodeFuseClaudePath();
+  if (codeFusePath) return describeClaudeSelection(codeFusePath, false, 'codefuse');
+
+  const pathSelection = resolveClaudeFromPath();
+  if (pathSelection) return describeClaudeSelection(pathSelection.path, pathSelection.isNpmVersion, 'path');
+
+  const npmPath = resolveNpmClaudePath();
+  if (npmPath) return describeClaudeSelection(npmPath, true, 'npm');
+
+  const nativePath = resolveNativePath();
+  return nativePath ? describeClaudeSelection(nativePath, false, 'native') : null;
+}
+
 // The import statement injected at the top of @anthropic-ai/claude-code/cli.js.
 // EXTERNAL CONTRACT: uses bare specifier resolved via package.json `exports` —
 // the physical path can change without touching this line; keep in sync with
@@ -217,7 +303,12 @@ export function isBrowserOpenSuppressed() {
 
 export function getGlobalNodeModulesDir() {
   try {
-    return execSync('npm root -g', { encoding: 'utf-8', windowsHide: true }).trim();
+    return execFileSync(process.platform === 'win32' ? 'npm.cmd' : 'npm', ['root', '-g'], {
+      encoding: 'utf-8',
+      windowsHide: true,
+      timeout: 2000,
+      maxBuffer: 1024 * 1024,
+    }).trim();
   } catch {
     return null;
   }
@@ -351,6 +442,64 @@ export function pickSpawnableLookupResult(rawOut, platform = process.platform) {
   return lines[0] || null;
 }
 
+/**
+ * Resolve the `claude` executable explicitly selected by the caller's PATH.
+ *
+ * Wrappers such as CodeFuse's `cfuse --ccv` prepend their managed Claude Code
+ * directory to PATH before launching ccv. This lookup must happen before any
+ * global npm fallback, otherwise an unrelated global @anthropic-ai install wins
+ * and the wrapper-provided (and potentially enterprise-approved) binary is lost.
+ *
+ * Returns both the path and whether Node is required for a legacy cli.js entry.
+ */
+export function resolveClaudeFromPath() {
+  const lookupCmds = process.platform === 'win32'
+    ? [`where ${BINARY_NAME}`]
+    : [`which ${BINARY_NAME}`, `command -v ${BINARY_NAME}`];
+
+  for (const cmd of lookupCmds) {
+    try {
+      const rawOut = execSync(cmd, { encoding: 'utf-8', shell: true, env: process.env, windowsHide: true });
+      const result = pickSpawnableLookupResult(rawOut);
+      if (!result || !existsSync(result)) continue;
+
+      let real = result;
+      try { real = realpathSync(result); } catch { }
+      if (real.endsWith('.js')) return { path: real, isNpmVersion: true };
+      return { path: result, isNpmVersion: false };
+    } catch {
+      // Try the next lookup command.
+    }
+  }
+
+  return null;
+}
+
+// Starpoint currently approves the CodeFuse-managed Claude Code 2.1.199 build.
+// Keep standalone `ccv` on the same binary as `cfuse --ccv`; callers can move
+// the pin deliberately after a new enterprise build has been approved.
+export const DEFAULT_CODEFUSE_CLAUDE_VERSION = '2.1.199';
+
+export function resolveCodeFuseClaudePath(
+  codeFuseClaudeRoot = null,
+  version = process.env.CCV_CODEFUSE_CLAUDE_VERSION?.trim() || DEFAULT_CODEFUSE_CLAUDE_VERSION,
+) {
+  // Never let a test process escape its disposable fixtures into the real home.
+  // Tests exercise this resolver by passing an explicit temporary root.
+  if (!codeFuseClaudeRoot) {
+    if (isRealClaudeLookupBlocked()) return null;
+    codeFuseClaudeRoot = join(homedir(), '.codefuse', 'fuse', 'engine', 'bin', 'claude');
+  }
+  if (!version || !/^\d+\.\d+\.\d+$/.test(version)) return null;
+  const versionDir = join(codeFuseClaudeRoot, version);
+  const names = process.platform === 'win32' ? ['claude.exe'] : ['claude', 'claude.exe'];
+  for (const name of names) {
+    const candidate = join(versionDir, name);
+    if (existsSync(candidate)) return candidate;
+  }
+  return null;
+}
+
 export function resolveNativePath() {
   // L7: steps 1 & 4 (platform/packaged binaries under `npm root -g`) ignore PATH isolation —
   // neutralized under test context via a null globalRoot (both helpers null-guard).
@@ -503,6 +652,99 @@ export function findPlatformBinary(nodeModulesRoot) {
   return null;
 }
 
+/**
+ * Collect spawnable Claude Code entry points for the machine-level selector.
+ * This is intentionally read-only and never executes a discovered binary.
+ */
+export function discoverClaudeExecutables({ configuredPath = null, allowReal = false, includeDefaults = true } = {}) {
+  const found = [];
+  const seen = new Set();
+  const inferNpmVersion = (realPath) => {
+    const normalized = String(realPath).replace(/\\/g, '/');
+    const match = normalized.match(/^(.*\/node_modules\/@(?:anthropic-ai|ali)\/claude-code)(?:\/|$)/);
+    if (!match) return null;
+    try {
+      const pkg = JSON.parse(readFileSync(join(match[1], 'package.json'), 'utf8'));
+      return typeof pkg.version === 'string' ? pkg.version : null;
+    } catch { return null; }
+  };
+  const add = (value, source, version = null) => {
+    const expanded = expandClaudeExecutablePath(value);
+    const resolved = resolveExplicitClaudePath(expanded);
+    if (!resolved || seen.has(resolved.realPath)) return;
+    const { realPath } = resolved;
+    seen.add(realPath);
+    found.push({
+      path: expanded,
+      realPath,
+      source,
+      version: version || inferNpmVersion(realPath),
+      isNpmVersion: resolved.isNpmVersion,
+    });
+  };
+
+  // Keep the saved value first so the UI does not jump when it is also found
+  // through PATH or a package scan.
+  if (configuredPath) add(configuredPath, 'configured');
+  if (!includeDefaults || (isRealClaudeLookupBlocked() && !allowReal)) return found;
+
+  // CodeFuse keeps one directory per managed Claude version.
+  const codeFuseRoot = join(homedir(), '.codefuse', 'fuse', 'engine', 'bin', 'claude');
+  try {
+    const versions = readdirSync(codeFuseRoot, { withFileTypes: true })
+      .filter((e) => e.isDirectory() && /^\d+\.\d+\.\d+$/.test(e.name))
+      .map((e) => e.name)
+      .sort((a, b) => b.localeCompare(a, undefined, { numeric: true }));
+    for (const version of versions) {
+      const names = process.platform === 'win32' ? ['claude.exe'] : ['claude', 'claude.exe'];
+      for (const name of names) add(join(codeFuseRoot, version, name), 'codefuse', version);
+    }
+  } catch { /* CodeFuse is optional. */ }
+
+  // Scan PATH directly. Avoid shelling out to `which`/`where` from the HTTP
+  // request path: a wrapper or slow shell startup must not block the viewer.
+  const pathNames = process.platform === 'win32' ? [`${BINARY_NAME}.exe`] : [BINARY_NAME];
+  for (const dir of String(process.env.PATH || '').split(delimiter).filter(Boolean)) {
+    for (const name of pathNames) add(resolve(dir, name), 'path');
+  }
+
+  // npm wrapper, its 2.x bin entry, and the platform-specific optional package.
+  const npmRoots = new Set([NODE_MODULES]);
+  const globalRoot = getGlobalNodeModulesDir();
+  if (globalRoot) npmRoots.add(globalRoot);
+  for (const root of npmRoots) {
+    for (const pkg of PACKAGES) {
+      const pkgDir = join(root, pkg);
+      add(join(pkgDir, CLI_ENTRY), 'npm');
+      add(join(pkgDir, 'bin', 'claude.exe'), 'npm');
+      add(join(pkgDir, 'bin', 'claude'), 'npm');
+    }
+    const platformBin = findPlatformBinary(root);
+    if (platformBin) add(platformBin, 'npm-platform');
+  }
+
+  // Native installer defaults and common package-manager locations.
+  const home = homedir();
+  const claudeDir = getClaudeConfigDir();
+  for (const value of NATIVE_CANDIDATES) {
+    const expanded = value.startsWith('~/.claude/')
+      ? join(claudeDir, value.slice('~/.claude/'.length))
+      : value.startsWith('~/') ? join(home, value.slice(2)) : value;
+    add(expanded, 'native');
+    if (process.platform === 'win32') add(expanded + '.exe', 'native');
+  }
+  if (process.platform === 'win32') {
+    const userProfile = process.env.USERPROFILE || home;
+    const localAppData = process.env.LOCALAPPDATA;
+    const appData = process.env.APPDATA;
+    add(join(userProfile, '.local', 'bin', 'claude.exe'), 'native');
+    if (localAppData) add(join(localAppData, 'Programs', 'claude', 'claude.exe'), 'native');
+    if (appData) add(join(appData, 'npm', 'node_modules', '@anthropic-ai', 'claude-code', 'bin', 'claude.exe'), 'npm');
+  }
+
+  return found;
+}
+
 export function buildShellCandidates() {
   const globalRoot = getGlobalNodeModulesDir();
   // 使用 $HOME 而非硬编码绝对路径，保证 shell 可移植性

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-viewer",
-  "version": "1.7.5",
+  "version": "1.7.7",
   "description": "Claude Code logging, visualization, and management toolkit — launch a web viewer alongside Claude Code with full request/response tracing, proxy, and mobile support",
   "license": "MIT",
   "main": "server.js",

package/server/lib/interceptor-core.js

@@ -400,34 +400,45 @@ export function replaceTopLevelModel(jsonStr, oldModel, newModel) {
 // 家族用**大小写不敏感子串**匹配（/opus/i 等），只认这几个已知家族单词——
 // 因此 claude-opus-4-8、未来的 claude-opus-5 等任何版本都命中同一家族，版本升级无需重配。
 // 字段直接沿用 Claude Code 的环境变量名以保持一致：
-//   ANTHROPIC_MODEL              —— 主模型；body.model 含 "fable" / "mythos" 时映射到它
+//   ANTHROPIC_MODEL              —— 主模型（catch-all 兜底；body.model 含 "fable"/"mythos"
+//                                   及所有未识别家族均回落到它）
 //   ANTHROPIC_DEFAULT_OPUS_MODEL   —— body.model 含 "opus"
 //   ANTHROPIC_DEFAULT_SONNET_MODEL —— 含 "sonnet"
 //   ANTHROPIC_DEFAULT_HAIKU_MODEL  —— 含 "haiku"
-// 家族字段留空 = 该家族不改写（透传原始 model）。
-// 未识别家族（既不是 opus/sonnet/haiku 也不是 fable/mythos）不做兜底替换，原样透传。
+// 家族字段优先：opus/sonnet/haiku 各自命中专属字段；字段留空则回落到 ANTHROPIC_MODEL。
+// 未识别家族（既不是 opus/sonnet/haiku 也不是 fable/mythos）→ ANTHROPIC_MODEL 兜底。
 // 兼容旧数据：profile 未设任何新字段但有 activeModel（老结构）时，回退为旧的整体替换语义。
-// 返回目标模型字符串；无需改写（无目标 / 目标同旧值 / 入参非法 / 未识别家族）时返回 null。
+// 返回目标模型字符串；无需改写（无目标 / 目标同旧值 / 入参非法）时返回 null。
+// [1m] 后缀（Claude Code 1M context 标记）默认忽略：所有 profile 模型字段值在比较前先剥除。
 export function resolveProfileModel(oldModel, profile) {
   if (typeof oldModel !== 'string' || !oldModel || !profile || typeof profile !== 'object') return null;
-  const opus = typeof profile.ANTHROPIC_DEFAULT_OPUS_MODEL === 'string' ? profile.ANTHROPIC_DEFAULT_OPUS_MODEL.trim() : '';
-  const sonnet = typeof profile.ANTHROPIC_DEFAULT_SONNET_MODEL === 'string' ? profile.ANTHROPIC_DEFAULT_SONNET_MODEL.trim() : '';
-  const haiku = typeof profile.ANTHROPIC_DEFAULT_HAIKU_MODEL === 'string' ? profile.ANTHROPIC_DEFAULT_HAIKU_MODEL.trim() : '';
-  const primary = typeof profile.ANTHROPIC_MODEL === 'string' ? profile.ANTHROPIC_MODEL.trim() : '';
+
+  // Strip [1m] suffix (case-insensitive) from model names; Claude Code appends it
+  // for 1M-context variants and it should not affect model matching/replacement.
+  const strip1m = (s) => (typeof s === 'string' ? s.replace(/\[1m\]/gi, '').trim() : '');
+
+  const opus = strip1m(profile.ANTHROPIC_DEFAULT_OPUS_MODEL);
+  const sonnet = strip1m(profile.ANTHROPIC_DEFAULT_SONNET_MODEL);
+  const haiku = strip1m(profile.ANTHROPIC_DEFAULT_HAIKU_MODEL);
+  const primary = strip1m(profile.ANTHROPIC_MODEL);
   const hasNew = !!(primary || opus || sonnet || haiku);
 
   let target = '';
   if (hasNew) {
-    if (/opus/i.test(oldModel)) target = opus;
-    else if (/sonnet/i.test(oldModel)) target = sonnet;
-    else if (/haiku/i.test(oldModel)) target = haiku;
-    else if (/fable/i.test(oldModel) || /mythos/i.test(oldModel)) target = primary; // 显式家族 → 主模型
-    // 未识别家族：target 保持 ''，下方返回 null（不替换、原样透传）
+    // Family-specific fields take precedence; fall back to ANTHROPIC_MODEL when
+    // the family field is empty/unset. ANTHROPIC_MODEL itself acts as the
+    // catch-all default for any unrecognized family (including third-party models
+    // like gpt-4o, deepseek-v4, K3/kimi, etc.).
+    if (/opus/i.test(oldModel)) target = opus || primary;
+    else if (/sonnet/i.test(oldModel)) target = sonnet || primary;
+    else if (/haiku/i.test(oldModel)) target = haiku || primary;
+    else if (/fable/i.test(oldModel) || /mythos/i.test(oldModel)) target = primary;
+    else target = primary; // unrecognized family → ANTHROPIC_MODEL catch-all
   } else if (typeof profile.activeModel === 'string') {
-    target = profile.activeModel.trim(); // 旧数据整体替换语义
+    target = strip1m(profile.activeModel); // 旧数据整体替换语义
   }
 
-  if (!target || target === oldModel) return null;
+  if (!target || target === strip1m(oldModel)) return null;
   return target;
 }
 

package/server/pty-manager.js

@@ -231,6 +231,9 @@ async function _spawnClaudeImpl(proxyPort, cwd, extraArgs = [], claudePath = nul
   }
 
   const env = { ...process.env };
+  // CCV owns executable selection. Never let the selected Claude replace itself
+  // behind that configuration (especially on enterprise allowlisted machines).
+  env.DISABLE_AUTOUPDATER = '1';
   env.ANTHROPIC_BASE_URL = `http://127.0.0.1:${proxyPort}`;
   env.CCV_PROXY_MODE = '1'; // 告诉 interceptor.js 不要再启动 server
   env.CCV_LOG_DIR = LOG_DIR; // 让 fork 出的 Claude Code 进程找到同一份 profile.json 等资源

package/server/routes/preferences.js

@@ -2,7 +2,7 @@
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 import { homedir } from 'node:os';
-import { LOG_DIR, setLogDir, getClaudeConfigDir } from '../../findcc.js';
+import { LOG_DIR, setLogDir, getClaudeConfigDir, discoverClaudeExecutables, resolveExplicitClaudePath, CLAUDE_EXECUTABLE_PREF_KEY } from '../../findcc.js';
 import { PROFILE_PATH, _defaultConfig, getActiveProfileId, setActiveProfileForWorkspace, _loadProxyProfile, RETRY_CONFIG_PATH, _retryConfigState, _loadRetryConfigState } from '../interceptor.js';
 import { migrateProxyProfileList } from '../lib/interceptor-core.js';
 import { DEFAULT_RETRY_CONFIG, validateRetryConfig, resolveRetryConfig } from '../lib/proxy-retry.js';
@@ -25,6 +25,22 @@ function stripImConfigs(obj) {
   if (obj) for (const id of listPlatforms()) delete obj[id];
 }
 
+// Loopback identifies the socket peer, not the browser page that initiated a
+// request. Since the server intentionally has permissive CORS for legacy APIs,
+// sensitive executable-selection endpoints need their own same-origin guard.
+function isSameOriginBrowserRequest(req, parsedUrl) {
+  const origin = req.headers?.origin;
+  if (!origin) return true; // CLI/native clients do not send Origin.
+  if (req.headers?.['sec-fetch-site'] === 'cross-site') return false;
+  try {
+    const originUrl = new URL(origin);
+    if (parsedUrl?.origin) return originUrl.origin.toLowerCase() === parsedUrl.origin.toLowerCase();
+    return originUrl.host.toLowerCase() === String(req.headers?.host || '').toLowerCase();
+  } catch {
+    return false;
+  }
+}
+
 // /theme 选择器特征：选项文案高特异、不太可能出现在普通生成输出里（ESC 兜底的门控签名）
 const THEME_PICKER_RE = /Auto \(match terminal\)|colorblind-friendly/;
 
@@ -41,6 +57,9 @@ function preferencesGet(req, res, parsedUrl, isLocal, deps) {
   // 全局 auth 与每个项目的 authByProject 覆盖都要剥离(后者同样含明文密码)。
   delete prefs.auth;
   delete prefs.authByProject;
+  if (!isLocal || !isSameOriginBrowserRequest(req, parsedUrl)) {
+    delete prefs[CLAUDE_EXECUTABLE_PREF_KEY];
+  }
   stripImConfigs(prefs); // dingtalk / feishu / … — admin-only, never to a LAN client
   // 项目独立配置（多人共用一台 server 时按项目隔离偏好）：非本机(LAN)客户端若当前项目有 fork，
   // 解析出该项目的有效偏好；本机(admin)始终看全局。forks blob 绝不下发，仅以 _projectPrefsKeys
@@ -99,6 +118,30 @@ function preferencesPost(req, res, parsedUrl, isLocal, deps) {
       // 任意项目的覆盖,绕过 admin 门禁。
       delete incoming.auth;
       delete incoming.authByProject;
+      // Claude executable selection controls which local program CCV executes.
+      // It is machine-global and therefore writable only by the loopback admin,
+      // never by a remote/project-scoped preferences client.
+      if (!isLocal) {
+        delete incoming[CLAUDE_EXECUTABLE_PREF_KEY];
+      } else if (Object.prototype.hasOwnProperty.call(incoming, CLAUDE_EXECUTABLE_PREF_KEY)) {
+        const value = incoming[CLAUDE_EXECUTABLE_PREF_KEY];
+        if (!isSameOriginBrowserRequest(req, parsedUrl)) {
+          res.writeHead(403, { 'Content-Type': 'application/json' });
+          res.end(JSON.stringify({ error: 'Same-origin request required' }));
+          return;
+        }
+        if (typeof value === 'string' && value.trim()) {
+          const resolved = resolveExplicitClaudePath(value.trim().slice(0, 4096));
+          if (!resolved) {
+            res.writeHead(422, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Claude executable path is not launchable' }));
+            return;
+          }
+          incoming[CLAUDE_EXECUTABLE_PREF_KEY] = resolved.path;
+        } else {
+          incoming[CLAUDE_EXECUTABLE_PREF_KEY] = null;
+        }
+      }
       // prefsByProject(项目独立配置 fork)只能经 admin-only 的 /api/project-prefs/* 修改；元字段
       // (_isLocal/_projectScoped/…)仅 GET 回包，绝不让它们经 /api/preferences 落盘污染。
       delete incoming.prefsByProject;
@@ -168,6 +211,9 @@ function preferencesPost(req, res, parsedUrl, isLocal, deps) {
       delete prefs.auth;
       delete prefs.authByProject;
       delete prefs.prefsByProject; // fork blob 绝不回显（与 GET 一致）
+      if (!isLocal || !isSameOriginBrowserRequest(req, parsedUrl)) {
+        delete prefs[CLAUDE_EXECUTABLE_PREF_KEY];
+      }
       stripImConfigs(prefs);
       prefs.logDir = LOG_DIR;
       res.writeHead(200, { 'Content-Type': 'application/json' });
@@ -181,6 +227,29 @@ function preferencesPost(req, res, parsedUrl, isLocal, deps) {
   });
 }
 
+function claudeExecutablesGet(req, res, parsedUrl, isLocal, deps) {
+  if (!isLocal || !isSameOriginBrowserRequest(req, parsedUrl)) {
+    res.writeHead(403, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({ error: isLocal ? 'Same-origin request required' : 'Loopback only' }));
+    return;
+  }
+  let configuredPath = null;
+  try {
+    const prefs = readPrefsRaw(deps.getPrefsFile());
+    const value = prefs?.[CLAUDE_EXECUTABLE_PREF_KEY];
+    if (typeof value === 'string' && value.trim()) configuredPath = value.trim();
+  } catch { }
+  const candidates = discoverClaudeExecutables({ configuredPath }).map(({
+    path, source, version, isNpmVersion,
+  }) => ({ path, source, version, isNpmVersion }));
+  res.writeHead(200, { 'Content-Type': 'application/json' });
+  res.end(JSON.stringify({
+    configuredPath,
+    effectivePath: process.env.CCV_CLAUDE_EXECUTABLE || null,
+    candidates,
+  }));
+}
+
 function claudeSettingsGet(req, res, parsedUrl, isLocal, deps) {
   res.writeHead(200, { 'Content-Type': 'application/json' });
   const fileEnv = deps.claudeSettings.env || {};
@@ -481,6 +550,7 @@ async function ccswitchImportPost(req, res, _parsedUrl, isLocal, deps) {
 export const preferencesRoutes = [
   { method: 'GET', match: 'exact', path: '/api/preferences', handler: preferencesGet },
   { method: 'POST', match: 'exact', path: '/api/preferences', handler: preferencesPost },
+  { method: 'GET', match: 'exact', path: '/api/claude-executables', handler: claudeExecutablesGet },
   { method: 'GET', match: 'exact', path: '/api/claude-settings', handler: claudeSettingsGet },
   { method: 'POST', match: 'exact', path: '/api/claude-settings', handler: claudeSettingsPost },
   { method: 'GET', match: 'exact', path: '/api/proxy-profiles', handler: proxyProfilesGet },

package/server/system-prompt-templates/presets/index.json

@@ -41,6 +41,14 @@
         "description": "Coding agent prompt tuned for Kimi K2.7 Code: deliver exactly what was asked (no over-engineering), act through tools, explain briefly.",
         "match": "kimi-k2.7-code",
         "defaultMode": "override"
+      },
+      {
+        "id": "kimi-k3",
+        "title": "Kimi K3",
+        "file": "kimi-k3.md",
+        "description": "Coding agent prompt tuned for Kimi K3: deliver exactly what was asked (no over-engineering), act through tools, explain briefly.",
+        "match": "kimi-k3",
+        "defaultMode": "override"
       }
     ]
   }

package/server/system-prompt-templates/presets/kimi-k3.md

@@ -0,0 +1,68 @@
+<!--
+Preset: kimi-k3  (category: Global)
+Self-contained template: a tuned preamble plus its own dynamic sections
+(a boundary marker, an OS-only # Environment, and a verbatim # Memory; no Git).
+Edit this file directly. Forked from the Kimi K2.7 Code preset and tuned for
+Kimi K3: keep scope tight, act through tools, and explain briefly.
+-->
+
+You are ${model.name}, an interactive coding agent that helps users with software engineering tasks by taking action. Use the instructions below and the tools available to you to make real changes in the user's project.
+
+IMPORTANT: Assist with defensive software engineering work. Refuse requests to deploy, facilitate, or hide malware, credential theft, destructive behavior, or other cyber abuse.
+IMPORTANT: Never generate or guess URLs unless you are confident they help the user with programming. Prefer URLs the user provides or ones found in local files.
+
+# Doing tasks
+ - Read the relevant files before acting or answering; ground every claim and change in code you have actually looked at.
+ - When a request could be read either as a question or as a change to make, treat it as a task and carry it out. When the user clearly asks a question or how to approach something, answer that first.
+ - Deliver exactly what was asked and nothing more: no unrequested CLI wrappers, configuration options, logging, progress output, or abstractions. This is very important to your performance.
+ - Never assume a library or framework is available — check the project's manifest or neighboring files before using it.
+ - Do not introduce security vulnerabilities (injection, XSS, path traversal, and the rest of the OWASP top 10); fix insecure code you write immediately.
+ - Iterate to green: run the relevant tests or code path, read the failure, fix the cause, and run again.
+ - When an approach is blocked, try a different one before handing the problem back to the user.
+
+# Using tools
+ - A change shown only in your reply does not exist on disk — create and edit files with tools, never by pasting code into the conversation.
+ - Do not narrate tool calls; the calls themselves show the user what you are doing.
+ - Send independent tool calls together in one response instead of one at a time.
+ - Track multi-step work explicitly and mark each step done as you finish it.
+ - Tool results and user messages may include <system-reminder> tags. They carry information from the system, not from the user.
+
+# Executing actions with care
+Consider the reversibility and blast radius of each action. Local, reversible actions (editing files, running tests) are fine to take freely. For hard-to-reverse or shared-system actions — deleting files or branches, force-pushing, sending messages, posting to external services — confirm with the user first. Never run git mutations (commit, push, reset, rebase) unless the user explicitly asks, and re-confirm each time even if the user approved one earlier. Investigate unexpected state before overwriting it.
+
+# Tone and style
+ - Be thorough in your actions, not in your explanations: report what changed and where, and stop.
+ - Keep text output brief and direct; lead with the answer or action. No filler, and no emojis unless the user asks.
+ - Reference code with the `file_path:line_number` pattern.
+ - Always respond in the same language as the user, using the `${environment.lang}` locale when the language is not otherwise clear.
+
+__SYSTEM_PROMPT_DYNAMIC_BOUNDARY__
+
+# Environment
+ - Platform: ${os.platform}
+ - OS Version: ${os.version}
+ - Architecture: ${os.arch}
+ - Shell: ${os.shell}
+
+# Memory
+
+You have a persistent file-based memory at `${memory.dir}`. This directory already exists — write to it directly with the Write tool (do not run mkdir or check for its existence). Each memory is one file holding one fact, with frontmatter:
+
+```markdown
+---
+name: <short-kebab-case-slug>
+description: <one-line summary — used to decide relevance during recall>
+metadata:
+  type: user | feedback | project | reference
+---
+
+<the fact; for feedback/project, follow with **Why:** and **How to apply:** lines. Link related memories with [[their-name]].>
+```
+
+In the body, link to related memories with `[[name]]`, where `name` is the other memory's `name:` slug. Link liberally — a `[[name]]` that doesn't match an existing memory yet is fine; it marks something worth writing later, not an error.
+
+`user` — who the user is (role, expertise, preferences). `feedback` — guidance the user has given on how you should work, both corrections and confirmed approaches; include the why. `project` — ongoing work, goals, or constraints not derivable from the code or git history; convert relative dates to absolute. `reference` — pointers to external resources (URLs, dashboards, tickets).
+
+After writing the file, add a one-line pointer in `MEMORY.md` (`- [Title](file.md) — hook`). `MEMORY.md` is the index loaded into context each session — one line per memory, no frontmatter, never put memory content there.
+
+Before saving, check for an existing file that already covers it — update that file rather than creating a duplicate; delete memories that turn out to be wrong. Don't save what the repo already records (code structure, past fixes, git history, project instructions) or what only matters to this conversation; if asked to remember one of those, ask what was non-obvious about it and save that instead. Recalled memories reflect what was true when written — if one names a file, function, or flag, verify it still exists before recommending it.

package/src/utils/helpers.js

@@ -75,11 +75,16 @@ export function resolveCalibrationTokens(calibrationModel, lastMainAgent, projec
 // (If a stale localStorage value misses both this map and calibrationModels, fall back to 'auto'.)
 export const LEGACY_CALIBRATION_MIGRATION = {
   'opus-4.7-1m': '1m',
+  'opus-4.8[1m]': '1m',
   'sonnet-4.6': '200k',
   'glm5': '200k',
   'kimi-k2.5': '200k',
   'minimax-2.1': '200k',
   'Qwen 3.5': '200k',
+  'sonnet-5': '1m',
+  'glm5.2': '1m',
+  'kimi-k3': '1m',
+  'Qwen 3.8': '1m'
 };
 
 /**
@@ -326,7 +331,7 @@ const MODEL_PROVIDERS = [
     svg: '<svg t="1771495640319" class="icon" viewBox="0 0 1024 1024" version="1.1" xmlns="http://www.w3.org/2000/svg" p-id="5634" width="200" height="200"><path d="M537.782857 57.161143c16.749714 29.44 33.426286 58.953143 50.102857 88.502857a7.68 7.68 0 0 0 6.692572 3.913143h236.873143c7.424 0 13.750857 4.681143 19.017142 13.933714l62.061715 109.677714c8.082286 14.372571 10.24 20.370286 1.024 35.693715a2262.893714 2262.893714 0 0 0-32.438857 55.478857l-15.652572 28.086857c-4.534857 8.338286-9.508571 11.922286-1.718857 21.833143l113.152 197.851428c7.314286 12.8 4.754286 21.065143-1.828571 32.841143-18.651429 33.499429-37.632 66.742857-56.978286 99.84-6.765714 11.593143-14.994286 16.018286-29.001143 15.798857a1833.398857 1833.398857 0 0 0-99.291429 0.658286 4.242286 4.242286 0 0 0-3.437714 2.157714 24571.830857 24571.830857 0 0 1-115.419428 202.24c-7.204571 12.507429-16.201143 15.469714-30.939429 15.506286-42.532571 0.146286-85.430857 0.182857-128.731429 0.109714a22.930286 22.930286 0 0 1-19.821714-11.556571l-56.978286-99.108571a3.84 3.84 0 0 0-3.547428-2.121143h-218.331429a76.288 76.288 0 0 1-34.377143-3.913143l-68.388571-118.198857a23.149714 23.149714 0 0 1-0.073143-23.04l51.492572-90.441143a8.448 8.448 0 0 0 0-8.411429 23594.496 23594.496 0 0 1-80.018286-139.593143L47.542857 425.325714c-6.838857-13.202286-7.387429-21.138286 4.022857-41.179428 19.858286-34.669714 39.570286-69.302857 59.209143-103.936 5.632-9.984 12.946286-14.262857 24.905143-14.262857 36.827429-0.182857 73.654857-0.182857 110.445714-0.073143 1.901714 0 3.657143-1.024 4.571429-2.669715l119.734857-208.859428a20.845714 20.845714 0 0 1 17.993143-10.496c22.381714-0.036571 44.946286 0 67.547428-0.256l43.410286-0.987429c14.555429-0.109714 30.866286 1.389714 38.4 14.518857z m-146.432 17.188571a2.56 2.56 0 0 0-2.194286 1.28l-122.331428 213.942857a6.692571 6.692571 0 0 1-5.741714 3.364572H138.788571c-2.377143 0-2.962286 1.060571-1.755428 3.145143l247.917714 433.334857c1.060571 1.792 0.548571 2.633143-1.462857 2.669714l-119.222857 0.658286a9.289143 9.289143 0 0 0-8.557714 4.937143l-56.32 98.56c-1.865143 3.328-0.914286 5.046857 2.925714 5.046857l243.858286 0.365714c1.974857 0 3.401143 0.841143 4.425142 2.56l59.867429 104.704c1.974857 3.474286 3.913143 3.510857 5.924571 0l213.577143-373.76 33.426286-58.953143a2.340571 2.340571 0 0 1 4.096 0l60.745143 107.958857a5.193143 5.193143 0 0 0 4.571428 2.633143l117.906286-0.841143a1.718857 1.718857 0 0 0 1.462857-2.56l-123.721143-217.014857a4.608 4.608 0 0 1 0-4.827428l12.507429-21.613715 47.798857-84.370285c1.024-1.755429 0.512-2.633143-1.499428-2.633143H392.521143c-2.486857 0-3.108571-1.097143-1.828572-3.291429l61.184-106.861714a4.571429 4.571429 0 0 0 0-4.864l-58.258285-102.253714a2.56 2.56 0 0 0-2.267429-1.316572z m268.361143 342.198857c1.974857 0 2.486857 0.841143 1.462857 2.56l-35.474286 62.500572-111.542857 195.620571a2.377143 2.377143 0 0 1-2.121143 1.243429 2.486857 2.486857 0 0 1-2.121142-1.243429l-147.346286-257.353143c-0.841143-1.462857-0.402286-2.230857 1.206857-2.304l9.216-0.512 286.793143-0.512h-0.073143z" fill="#7D5DED" p-id="5635"></path></svg>',
   },
   {
-    match: /kimi|moonshot/i,
+    match: /kimi|moonshot|^k3$/i,
     name: 'Kimi',
     color: 'var(--bg-model-avatar)',
     svg: '<svg t="1771495664798" class="icon" viewBox="0 0 1024 1024" version="1.1" xmlns="http://www.w3.org/2000/svg" p-id="6649" width="200" height="200"><path d="M731.062857 590.262857v318.317714h-148.589714V443.977143a146.285714 146.285714 0 0 1-146.285714 146.285714l-214.491429-0.036571v318.354285H73.142857V165.814857h148.553143v275.858286h180.882286l119.771428-275.858286h167.753143l-67.84 156.269714a255.524571 255.524571 0 0 1-106.678857 119.588572h66.925714a148.553143 148.553143 0 0 1 148.516572 148.589714z m120.758857-473.965714a99.035429 99.035429 0 0 1 0 198.070857h-99.035428V215.332571a99.035429 99.035429 0 0 1 99.035428-99.035428z" fill="currentColor" p-id="6650"></path></svg>',