ccem 2.5.0 → 2.21.0

package/dist/index.js

@@ -7,11 +7,11 @@ import inquirer from "inquirer";
 import chalk7 from "chalk";
 import Table3 from "cli-table3";
 import { spawn as spawn3 } from "child_process";
-import * as fs9 from "fs";
-import * as path7 from "path";
+import * as fs10 from "fs";
+import * as path8 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
-// ../../packages/core/dist/chunk-25EB45SM.js
+// ../../packages/core/dist/chunk-DFS6BUXP.js
 var TIER_MODEL_ALIASES = /* @__PURE__ */ new Set(["opus", "sonnet", "haiku"]);
 function normalizeEnvConfig(envConfig, defaultRuntimeModel = "opus") {
   const hasTierDefaults = Boolean(envConfig.ANTHROPIC_DEFAULT_OPUS_MODEL) || Boolean(envConfig.ANTHROPIC_DEFAULT_SONNET_MODEL) || Boolean(envConfig.ANTHROPIC_DEFAULT_HAIKU_MODEL);
@@ -151,16 +151,16 @@ var PERMISSION_PRESETS = {
     permissionMode: "bypassPermissions",
     permissions: {
       allow: [
-        "Bash(*)",
-        "Read(*)",
-        "Edit(*)",
-        "Write(*)",
-        "WebFetch(*)",
-        "WebSearch(*)",
-        "Glob(*)",
-        "Grep(*)",
-        "LSP(*)",
-        "NotebookEdit(*)"
+        "Bash",
+        "Read",
+        "Edit",
+        "Write",
+        "WebFetch",
+        "WebSearch",
+        "Glob",
+        "Grep",
+        "LSP",
+        "NotebookEdit"
       ],
       deny: []
     }
@@ -171,13 +171,13 @@ var PERMISSION_PRESETS = {
     permissionMode: "acceptEdits",
     permissions: {
       allow: [
-        "Read(*)",
-        "Edit(*)",
-        "Write(*)",
-        "Glob(*)",
-        "Grep(*)",
-        "LSP(*)",
-        "NotebookEdit(*)",
+        "Read",
+        "Edit",
+        "Write",
+        "Glob",
+        "Grep",
+        "LSP",
+        "NotebookEdit",
         "Bash(npm:*)",
         "Bash(pnpm:*)",
         "Bash(yarn:*)",
@@ -229,10 +229,10 @@ var PERMISSION_PRESETS = {
     permissionMode: "plan",
     permissions: {
       allow: [
-        "Read(*)",
-        "Glob(*)",
-        "Grep(*)",
-        "LSP(*)",
+        "Read",
+        "Glob",
+        "Grep",
+        "LSP",
         "Bash(git status:*)",
         "Bash(git log:*)",
         "Bash(git diff:*)",
@@ -273,10 +273,10 @@ var PERMISSION_PRESETS = {
     permissionMode: "default",
     permissions: {
       allow: [
-        "Read(*)",
-        "Glob(*)",
-        "Grep(*)",
-        "LSP(*)",
+        "Read",
+        "Glob",
+        "Grep",
+        "LSP",
         "Bash(git status:*)",
         "Bash(git log:*)",
         "Bash(git diff:*)",
@@ -314,12 +314,12 @@ var PERMISSION_PRESETS = {
     permissionMode: "default",
     permissions: {
       allow: [
-        "Read(*)",
-        "Edit(*)",
-        "Write(*)",
-        "Glob(*)",
-        "Grep(*)",
-        "LSP(*)",
+        "Read",
+        "Edit",
+        "Write",
+        "Glob",
+        "Grep",
+        "LSP",
         "Bash(npm:*)",
         "Bash(pnpm:*)",
         "Bash(yarn:*)",
@@ -352,10 +352,10 @@ var PERMISSION_PRESETS = {
     permissionMode: "plan",
     permissions: {
       allow: [
-        "Read(*)",
-        "Glob(*)",
-        "Grep(*)",
-        "LSP(*)",
+        "Read",
+        "Glob",
+        "Grep",
+        "LSP",
         "Bash(git log:*)",
         "Bash(git blame:*)",
         "Bash(git show:*)",
@@ -381,6 +381,16 @@ var PERMISSION_PRESETS = {
     }
   }
 };
+var LEGACY_ALLOW_ALL_RULE = /^([A-Za-z][A-Za-z0-9_]*?)\(\*\)$/;
+var normalizePermissionAllowRule = (rule) => {
+  const trimmed = rule.trim();
+  const match = trimmed.match(LEGACY_ALLOW_ALL_RULE);
+  return match ? match[1] : trimmed;
+};
+var normalizePermissionAllowRules = (rules) => {
+  const normalized = rules.map(normalizePermissionAllowRule).filter((rule) => rule.length > 0);
+  return [...new Set(normalized)];
+};
 var getPermissionModeNames = () => {
   return Object.keys(PERMISSION_PRESETS);
 };
@@ -388,6 +398,7 @@ var getPermissionModeNames = () => {
 // ../../packages/core/dist/index.js
 import crypto from "crypto";
 import fs from "fs";
+import os from "os";
 import path from "path";
 var ALGORITHM = "aes-256-cbc";
 var SECRET_KEY = crypto.scryptSync("claude-code-env-manager-secret", "salt", 32);
@@ -415,7 +426,7 @@ var decrypt = (text) => {
   }
 };
 var getHomeDir = () => {
-  return process.env.HOME || process.env.USERPROFILE || "";
+  return process.env.HOME || process.env.USERPROFILE || os.homedir() || "";
 };
 var getCcemConfigDir = () => {
   return path.join(getHomeDir(), ".ccem");
@@ -446,13 +457,13 @@ import Table from "cli-table3";
 import * as fs2 from "fs";
 import * as fsPromises from "fs/promises";
 import * as path2 from "path";
-import * as os from "os";
+import * as os2 from "os";
 import * as readline from "readline";
 import { fileURLToPath } from "url";
 var __filename = fileURLToPath(import.meta.url);
 var __dirname = path2.dirname(__filename);
-var CLAUDE_PROJECTS_DIR = path2.join(os.homedir(), ".claude", "projects");
-var CCEM_DIR = path2.join(os.homedir(), ".ccem");
+var CLAUDE_PROJECTS_DIR = path2.join(os2.homedir(), ".claude", "projects");
+var CCEM_DIR = path2.join(os2.homedir(), ".ccem");
 var CACHE_VERSION = 1;
 var getCachePath = () => path2.join(CCEM_DIR, "usage-cache.json");
 var getPricesPath = () => path2.join(CCEM_DIR, "model-prices.json");
@@ -667,7 +678,7 @@ async function parseJSONLFileAsync(filePath, prices, signal) {
           throw new Error("Aborted");
         }
         if (lineCount % 1e3 === 0) {
-          await new Promise((resolve2) => setTimeout(resolve2, 0));
+          await new Promise((resolve3) => setTimeout(resolve3, 0));
         }
       }
       if (!line.trim()) continue;
@@ -756,7 +767,7 @@ async function getUsageStats(signal) {
         fileStats = cachedFile.stats;
       } else {
         fileStats = await parseJSONLFileAsync(file, prices, signal);
-        await new Promise((resolve2) => setTimeout(resolve2, 0));
+        await new Promise((resolve3) => setTimeout(resolve3, 0));
       }
       return {
         file,
@@ -935,10 +946,10 @@ var renderLogoWithEnvPanel = (envName, env, defaultMode) => {
       const parsed = new URL(url);
       const protocol = parsed.protocol + "//";
       const host = parsed.host;
-      const path8 = parsed.pathname + parsed.search;
+      const path9 = parsed.pathname + parsed.search;
       const hostStart = host.slice(0, 8);
       const hostEnd = host.slice(-4);
-      const pathPart = path8.length > 10 ? path8.slice(0, 7) + "..." : path8;
+      const pathPart = path9.length > 10 ? path9.slice(0, 7) + "..." : path9;
       return `${protocol}${hostStart}...${hostEnd}${pathPart}`;
     } catch {
       return truncate(url, max);
@@ -1268,7 +1279,7 @@ var renderFooterHints = (hints) => {
   return minimal;
 };
 var selectEnvWithKeys = (registries, current) => {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     const envNames = Object.keys(registries);
     let selectedIndex = envNames.indexOf(current);
     if (selectedIndex === -1) selectedIndex = 0;
@@ -1330,7 +1341,7 @@ var selectEnvWithKeys = (registries, current) => {
       }
       if (char === "\x1B" && key.length === 1) {
         cleanup();
-        resolve2({ action: "cancel" });
+        resolve3({ action: "cancel" });
         return;
       }
       if (char === "\x1B[A" || char === "k") {
@@ -1347,27 +1358,27 @@ var selectEnvWithKeys = (registries, current) => {
       }
       if (char === "\r" || char === "\n") {
         cleanup();
-        resolve2({ action: "select", name: envNames[selectedIndex] });
+        resolve3({ action: "select", name: envNames[selectedIndex] });
         return;
       }
       if (char === "e" || char === "E") {
         cleanup();
-        resolve2({ action: "edit", name: envNames[selectedIndex] });
+        resolve3({ action: "edit", name: envNames[selectedIndex] });
         return;
       }
       if (char === "r" || char === "R") {
         cleanup();
-        resolve2({ action: "rename", name: envNames[selectedIndex] });
+        resolve3({ action: "rename", name: envNames[selectedIndex] });
         return;
       }
       if (char === "c" || char === "C") {
         cleanup();
-        resolve2({ action: "copy", name: envNames[selectedIndex] });
+        resolve3({ action: "copy", name: envNames[selectedIndex] });
         return;
       }
       if (char === "d" || char === "D") {
         cleanup();
-        resolve2({ action: "delete", name: envNames[selectedIndex] });
+        resolve3({ action: "delete", name: envNames[selectedIndex] });
         return;
       }
     };
@@ -1383,6 +1394,7 @@ import Table2 from "cli-table3";
 // src/utils.ts
 import crypto2 from "crypto";
 import fs3 from "fs";
+import os3 from "os";
 import path3 from "path";
 var SECRET_KEY2 = crypto2.scryptSync("claude-code-env-manager-secret", "salt", 32);
 var findProjectRoot = () => {
@@ -1411,7 +1423,7 @@ var ensureClaudeDir = () => {
   return claudeDir;
 };
 var getHomeDir2 = () => {
-  return process.env.HOME || process.env.USERPROFILE || "";
+  return process.env.HOME || process.env.USERPROFILE || os3.homedir() || "";
 };
 var getGlobalClaudeConfigPath = () => {
   return path3.join(getHomeDir2(), ".claude.json");
@@ -1437,7 +1449,7 @@ import chalk2 from "chalk";
 import { execFileSync } from "child_process";
 import fs4 from "fs";
 import { createRequire } from "module";
-import os2 from "os";
+import os4 from "os";
 import path4 from "path";
 var DEFAULT_CONFIG_SOURCE = "ccem";
 var STATE_DB_FILE_NAME = "state.sqlite";
@@ -1674,7 +1686,7 @@ function getStateDbPath() {
   if (override) {
     return override;
   }
-  return path4.join(os2.homedir(), ".ccem", STATE_DB_FILE_NAME);
+  return path4.join(os4.homedir(), ".ccem", STATE_DB_FILE_NAME);
 }
 function schemaSql() {
   return `
@@ -1700,7 +1712,7 @@ function schemaSql() {
   `;
 }
 function discoverClaudeJsonlPath(projectDir, startedAtMs) {
-  const projectsDir = path4.join(os2.homedir(), ".claude", "projects");
+  const projectsDir = path4.join(os4.homedir(), ".claude", "projects");
   const earliestModifiedAt = startedAtMs - 15e3;
   for (const key of projectDirKeys(projectDir)) {
     const baseDir = path4.join(projectsDir, key);
@@ -1796,13 +1808,12 @@ function buildPermArgs(modeName) {
   const preset = PERMISSION_PRESETS[modeName];
   if (!preset) return [];
   const args = ["--permission-mode", preset.permissionMode];
-  if (preset.permissions.allow.length > 0) {
-    const quoted = preset.permissions.allow.map((t) => `"${t}"`).join(" ");
-    args.push("--allowedTools", quoted);
+  const allowRules = normalizePermissionAllowRules(preset.permissions.allow);
+  if (allowRules.length > 0) {
+    args.push("--allowedTools", ...allowRules);
   }
   if (preset.permissions.deny.length > 0) {
-    const quoted = preset.permissions.deny.map((t) => `"${t}"`).join(" ");
-    args.push("--disallowedTools", quoted);
+    args.push("--disallowedTools", ...preset.permissions.deny);
   }
   return args;
 }
@@ -1846,7 +1857,7 @@ async function launchClaude(options) {
     console.log(renderStarting());
   }
   const sessionsDir = ensureSessionsDir();
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     let provenanceTracking = null;
     const child = spawn("claude", args, {
       stdio: "inherit",
@@ -1923,9 +1934,10 @@ var writeSettings = (settingsPath, config3) => {
   fs6.writeFileSync(settingsPath, JSON.stringify(config3, null, 2) + "\n");
 };
 var mergePermissions = (existing, preset) => {
-  const existingAllow = existing.permissions?.allow || [];
+  const existingAllow = normalizePermissionAllowRules(existing.permissions?.allow || []);
   const existingDeny = existing.permissions?.deny || [];
-  const mergedAllow = [.../* @__PURE__ */ new Set([...preset.allow, ...existingAllow])];
+  const presetAllow = normalizePermissionAllowRules(preset.allow);
+  const mergedAllow = [.../* @__PURE__ */ new Set([...presetAllow, ...existingAllow])];
   const mergedDeny = [.../* @__PURE__ */ new Set([...preset.deny, ...existingDeny])];
   return {
     ...existing,
@@ -2102,7 +2114,7 @@ var setupEnvSettings = () => {
   }
 };
 var setupMcpTool = () => {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     console.log(chalk4.cyan("  \u2192 \u6B63\u5728\u6DFB\u52A0 chrome-devtools MCP \u5DE5\u5177..."));
     const child = spawn2("claude", [
       "mcp",
@@ -2127,22 +2139,22 @@ var setupMcpTool = () => {
     child.on("exit", (code) => {
       if (code === 0) {
         console.log(chalk4.green("  \u2713 \u5DF2\u6DFB\u52A0 chrome-devtools MCP \u5DE5\u5177"));
-        resolve2(true);
+        resolve3(true);
       } else {
         if (stderr.includes("already exists") || stdout.includes("already exists")) {
           console.log(chalk4.gray("  \u2713 chrome-devtools MCP \u5DE5\u5177\u5DF2\u5B58\u5728"));
-          resolve2(true);
+          resolve3(true);
         } else {
           console.error(chalk4.red(`  \u2717 \u6DFB\u52A0 MCP \u5DE5\u5177\u5931\u8D25 (code: ${code})`));
           if (stderr) console.error(chalk4.gray(`      ${stderr.trim()}`));
-          resolve2(false);
+          resolve3(false);
         }
       }
     });
     child.on("error", (err) => {
       console.error(chalk4.red(`  \u2717 \u6267\u884C claude \u547D\u4EE4\u5931\u8D25: ${err.message}`));
       console.log(chalk4.yellow("      \u8BF7\u786E\u4FDD\u5DF2\u5B89\u88C5 Claude Code CLI"));
-      resolve2(false);
+      resolve3(false);
     });
   });
 };
@@ -2611,7 +2623,7 @@ function SkillSelector({ onSelect, onCancel }) {
 
 // src/components/index.tsx
 async function runSkillSelector() {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     let resolved = false;
     const { unmount, waitUntilExit } = render(
       /* @__PURE__ */ React2.createElement(
@@ -2622,23 +2634,23 @@ async function runSkillSelector() {
             resolved = true;
             unmount();
             if (result === "custom") {
-              resolve2({ type: "custom" });
+              resolve3({ type: "custom" });
             } else {
-              resolve2({ type: "skill", skill: result });
+              resolve3({ type: "skill", skill: result });
             }
           },
           onCancel: () => {
             if (resolved) return;
             resolved = true;
             unmount();
-            resolve2({ type: "cancelled" });
+            resolve3({ type: "cancelled" });
           }
         }
       )
     );
     waitUntilExit().then(() => {
       if (!resolved) {
-        resolve2({ type: "cancelled" });
+        resolve3({ type: "cancelled" });
       }
     });
   });
@@ -2760,150 +2772,279 @@ Loaded ${results.length} environment(s) from remote:`));
 // src/cron-skill.ts
 var CCEM_CRON_SKILL_CONTENT = `# ccem-cron
 
-Manage scheduled tasks for Claude Code via \\\`~/.ccem/cron-tasks.json\\\`. Supports creating, listing, and deleting cron tasks through conversational interaction.
-
-## Storage
-
-All tasks are stored in \\\`~/.ccem/cron-tasks.json\\\` as a JSON array. Each task follows this schema:
-
-\\\`\\\`\\\`json
-{
-  "id": "uuid-v4",
-  "name": "task name",
-  "cronExpression": "0 9 * * *",
-  "prompt": "Claude prompt to execute",
-  "workingDir": "/absolute/path",
-  "envName": null,
-  "enabled": true,
-  "timeoutSecs": 300,
-  "templateId": null,
-  "triggerType": "schedule",
-  "parentTaskId": null,
-  "createdAt": "ISO-8601",
-  "updatedAt": "ISO-8601"
-}
-\\\`\\\`\\\`
+Manage scheduled tasks for Claude Code/Codex through the structured \`ccem cron\` CLI. Do not edit \`~/.ccem/cron-tasks.json\` directly.
 
 ## Instructions
 
 Determine the user's intent from their message:
+
 - **List/view**: user says "list", "show", "view", "\u67E5\u770B", "\u5217\u51FA"
 - **Delete/remove**: user says "delete", "remove", "\u5220\u9664", "\u79FB\u9664"
 - **Create**: default for anything else
 
-### Creating a Task
-
-1. Ask the user for:
-   - Task name (short descriptive label)
-   - What they want Claude to do (natural language; derive the \\\`prompt\\\` field from this)
-   - When to run it (derive the \\\`cronExpression\\\`; show common examples below)
-   - Working directory (default: current directory via \\\`pwd\\\`)
-   - Timeout in seconds (default: 300)
+## Creating A Task
 
-2. Show common cron patterns to help the user choose:
+If the request is specific enough, create the task directly. Ask a follow-up only when the schedule, action, or working directory is genuinely ambiguous.
 
-\\\`\\\`\\\`
-Every minute:        * * * * *
-Every 30 minutes:    */30 * * * *
-Every hour:          0 * * * *
-Every day at 9am:    0 9 * * *
-Every day at midnight: 0 0 * * *
-Weekdays at 9am:     0 9 * * 1-5
-Every Monday 8am:    0 8 * * 1
-Every 1st of month:  0 0 1 * *
-\\\`\\\`\\\`
-
-3. Generate the task and write it:
+- Task name: derive a short descriptive label.
+- Prompt: derive a directly executable Claude/Codex instruction from the user's request.
+- Schedule: derive a standard 5-field \`cronExpression\`.
+- Working directory: default to the current directory via \`pwd\`.
+- Timeout: default to 300 seconds unless the task clearly needs longer.
+- Execution profile: use \`conservative\`, \`standard\`, or \`autonomous\` based on risk.
 
-\\\`\\\`\\\`bash
-# Generate UUID and timestamp
-TASK_ID=\\$(uuidgen | tr '[:upper:]' '[:lower:]')
-NOW=\\$(date -u +"%Y-%m-%dT%H:%M:%S.000Z")
-WORK_DIR=\\$(pwd)
+Common cron patterns:
 
-# Read existing file or initialize empty array
-if [ -f ~/.ccem/cron-tasks.json ]; then
-  EXISTING=\\$(cat ~/.ccem/cron-tasks.json)
-else
-  mkdir -p ~/.ccem
-  EXISTING="[]"
-fi
+\`\`\`text
+Every minute:          * * * * *
+Every 30 minutes:      */30 * * * *
+Every hour:            0 * * * *
+Every day at 9am:      0 9 * * *
+Every day at midnight: 0 0 * * *
+Weekdays at 9am:       0 9 * * 1-5
+Every Monday 8am:      0 8 * * 1
+Every 1st of month:    0 0 1 * *
+\`\`\`
 
-# Build new task JSON and append using python3 for safe JSON manipulation
-python3 -c "
-import json, sys
-tasks = json.loads('''\\$EXISTING''')
-tasks.append({
-    'id': '\\$TASK_ID',
-    'name': 'TASK_NAME_HERE',
-    'cronExpression': 'CRON_EXPR_HERE',
-    'prompt': 'PROMPT_HERE',
-    'workingDir': '\\$WORK_DIR',
-    'envName': None,
-    'enabled': True,
-    'timeoutSecs': TIMEOUT_HERE,
-    'templateId': None,
-    'triggerType': 'schedule',
-    'parentTaskId': None,
-    'createdAt': '\\$NOW',
-    'updatedAt': '\\$NOW'
-})
-print(json.dumps(tasks, indent=2, ensure_ascii=False))
-" > ~/.ccem/cron-tasks.json
-\\\`\\\`\\\`
+Create the task with the CLI and JSON input:
 
-Replace \\\`TASK_NAME_HERE\\\`, \\\`CRON_EXPR_HERE\\\`, \\\`PROMPT_HERE\\\`, and \\\`TIMEOUT_HERE\\\` with actual values. Escape any quotes or special characters in the prompt string properly for Python.
+\`\`\`bash
+ccem cron create --from-json - --json <<'JSON'
+{
+  "name": "TASK_NAME_HERE",
+  "cronExpression": "CRON_EXPR_HERE",
+  "prompt": "PROMPT_HERE",
+  "workingDir": "ABSOLUTE_WORKING_DIR_HERE",
+  "envName": null,
+  "executionProfile": "conservative",
+  "maxBudgetUsd": null,
+  "allowedTools": [],
+  "disallowedTools": [],
+  "enabled": true,
+  "timeoutSecs": 300,
+  "templateId": null
+}
+JSON
+\`\`\`
 
-4. Confirm creation by reading back the file and showing the new task.
+Replace the placeholder values with real values. The CLI owns validation, ID generation, defaults, and persistence.
 
-### Listing Tasks
+Confirm creation by reading back the structured task list:
 
-\\\`\\\`\\\`bash
-if [ -f ~/.ccem/cron-tasks.json ]; then
-  cat ~/.ccem/cron-tasks.json
-else
-  echo "No tasks found. File ~/.ccem/cron-tasks.json does not exist."
-fi
-\\\`\\\`\\\`
+\`\`\`bash
+ccem cron list --json
+\`\`\`
 
-Format the output as a readable table with columns: name, cron expression, enabled status, working directory, and creation date. If the list is empty, tell the user.
+## Listing Tasks
 
-### Deleting a Task
+\`\`\`bash
+ccem cron list
+\`\`\`
 
-1. First list all tasks so the user can identify which to delete.
-2. Ask the user to confirm by name or ID.
-3. Remove the matching task:
+Use \`ccem cron list --json\` when you need exact fields.
 
-\\\`\\\`\\\`bash
-python3 -c "
-import json
-with open('\\$HOME/.ccem/cron-tasks.json') as f:
-    tasks = json.load(f)
-tasks = [t for t in tasks if t['id'] != 'TARGET_ID' and t['name'] != 'TARGET_NAME']
-with open('\\$HOME/.ccem/cron-tasks.json', 'w') as f:
-    json.dump(tasks, f, indent=2, ensure_ascii=False)
-print(json.dumps(tasks, indent=2, ensure_ascii=False))
-"
-\\\`\\\`\\\`
+## Deleting A Task
 
-Replace \\\`TARGET_ID\\\` or \\\`TARGET_NAME\\\` with the user's selection.
+1. List all tasks first so the user can identify which one to delete.
+2. Ask the user to confirm by exact name or ID.
+3. Delete through the CLI:
 
-4. Confirm deletion by showing the remaining tasks.
+\`\`\`bash
+ccem cron delete "TASK_ID_OR_EXACT_NAME"
+\`\`\`
 
 ## Safety Rules
 
-- Always read the existing file before writing to avoid data loss.
-- Use \\\`python3\\\` for JSON manipulation to ensure valid output (never hand-construct JSON with echo/cat).
-- Create \\\`~/.ccem/\\\` directory if it does not exist.
-- When the file is missing or empty, start with an empty array \\\`[]\\\`.
-- Always show the user what will be written before confirming.
+- Do not directly read, write, or hand-edit \`~/.ccem/cron-tasks.json\`.
+- Use \`ccem cron create/list/delete\` as the stable contract.
+- Never construct JSON by string concatenation; pass valid JSON to \`--from-json\`.
+- After creating or deleting a task, read back with \`ccem cron list --json\` and report the actual stored task.
+- Ask for confirmation first only when the request is ambiguous or destructive.
 `;
 
+// src/cron.ts
+import crypto4 from "crypto";
+import * as fs9 from "fs";
+import * as os5 from "os";
+import * as path7 from "path";
+var CRON_TASKS_FILE_NAME = "cron-tasks.json";
+var EXECUTION_PROFILES = /* @__PURE__ */ new Set([
+  "conservative",
+  "standard",
+  "autonomous"
+]);
+function getCronTasksPath(baseDir = getCcemConfigDir()) {
+  return path7.join(baseDir, CRON_TASKS_FILE_NAME);
+}
+function readCronTasks(tasksPath = getCronTasksPath()) {
+  if (!fs9.existsSync(tasksPath)) {
+    return [];
+  }
+  const content = fs9.readFileSync(tasksPath, "utf-8").trim();
+  if (!content) {
+    return [];
+  }
+  const parsed = JSON.parse(content);
+  const tasks = Array.isArray(parsed) ? parsed : parsed.tasks;
+  if (!Array.isArray(tasks)) {
+    throw new Error("Invalid cron task store: expected object with tasks array");
+  }
+  return tasks;
+}
+function writeCronTasks(tasks, tasksPath = getCronTasksPath()) {
+  if (tasksPath === getCronTasksPath()) {
+    ensureCcemDir();
+  } else {
+    fs9.mkdirSync(path7.dirname(tasksPath), { recursive: true });
+  }
+  const payload = { tasks };
+  const content = `${JSON.stringify(payload, null, 2)}
+`;
+  const tempPath = `${tasksPath}.${process.pid}.${Date.now()}.tmp`;
+  fs9.writeFileSync(tempPath, content, { encoding: "utf-8", mode: 384 });
+  fs9.renameSync(tempPath, tasksPath);
+}
+function validateCronExpression(cronExpression) {
+  const fields = cronExpression.trim().split(/\s+/);
+  if (fields.length !== 5) {
+    throw new Error("Invalid cron expression: must have exactly 5 fields (minute hour day month weekday)");
+  }
+}
+function normalizeExecutionProfile(value) {
+  if (!value) {
+    return "conservative";
+  }
+  if (EXECUTION_PROFILES.has(value)) {
+    return value;
+  }
+  return "conservative";
+}
+function parseStringList(value) {
+  if (!value) {
+    return [];
+  }
+  if (Array.isArray(value)) {
+    return value.map((item) => item.trim()).filter(Boolean);
+  }
+  const trimmed = value.trim();
+  if (!trimmed) {
+    return [];
+  }
+  if (trimmed.startsWith("[")) {
+    const parsed = JSON.parse(trimmed);
+    if (!Array.isArray(parsed) || parsed.some((item) => typeof item !== "string")) {
+      throw new Error("Expected a JSON array of strings");
+    }
+    return parsed.map((item) => item.trim()).filter(Boolean);
+  }
+  return trimmed.split(",").map((item) => item.trim()).filter(Boolean);
+}
+function createCronTask(input, tasksPath = getCronTasksPath()) {
+  const name = input.name?.trim();
+  if (!name) {
+    throw new Error("Task name is required");
+  }
+  const cronExpression = input.cronExpression?.trim();
+  if (!cronExpression) {
+    throw new Error("cronExpression is required");
+  }
+  validateCronExpression(cronExpression);
+  const prompt = input.prompt?.trim();
+  if (!prompt) {
+    throw new Error("Task prompt is required");
+  }
+  const timeoutSecs = input.timeoutSecs ?? 300;
+  if (!Number.isInteger(timeoutSecs) || timeoutSecs <= 0) {
+    throw new Error("timeoutSecs must be a positive integer");
+  }
+  const maxBudgetUsd = input.maxBudgetUsd ?? null;
+  if (maxBudgetUsd !== null && (!Number.isFinite(maxBudgetUsd) || maxBudgetUsd < 0)) {
+    throw new Error("maxBudgetUsd must be a non-negative number");
+  }
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const task = {
+    id: `cron-${Date.now()}-${crypto4.randomBytes(2).toString("hex")}`,
+    name,
+    cronExpression,
+    prompt,
+    workingDir: input.workingDir?.trim() || process.cwd(),
+    envName: input.envName?.trim() || null,
+    executionProfile: normalizeExecutionProfile(input.executionProfile),
+    maxBudgetUsd,
+    allowedTools: input.allowedTools ?? [],
+    disallowedTools: input.disallowedTools ?? [],
+    enabled: input.enabled ?? true,
+    timeoutSecs,
+    templateId: input.templateId?.trim() || null,
+    triggerType: "schedule",
+    parentTaskId: null,
+    createdAt: now,
+    updatedAt: now
+  };
+  const tasks = readCronTasks(tasksPath);
+  tasks.push(task);
+  writeCronTasks(tasks, tasksPath);
+  return task;
+}
+function deleteCronTask(selector, tasksPath = getCronTasksPath()) {
+  const normalizedSelector = selector.trim();
+  if (!normalizedSelector) {
+    throw new Error("Task id or name is required");
+  }
+  const tasks = readCronTasks(tasksPath);
+  const matches = tasks.filter((task) => task.id === normalizedSelector || task.name === normalizedSelector);
+  if (matches.length === 0) {
+    throw new Error(`Cron task not found: ${normalizedSelector}`);
+  }
+  if (matches.length > 1) {
+    throw new Error(`Cron task selector is ambiguous: ${normalizedSelector}`);
+  }
+  const [deleted] = matches;
+  writeCronTasks(tasks.filter((task) => task.id !== deleted.id), tasksPath);
+  return deleted;
+}
+function resolveJsonInput(raw) {
+  if (raw === "-") {
+    return fs9.readFileSync(0, "utf-8");
+  }
+  if (raw.startsWith("@")) {
+    return fs9.readFileSync(path7.resolve(raw.slice(1)), "utf-8");
+  }
+  return raw;
+}
+function parseCronCreateJson(raw) {
+  const parsed = JSON.parse(resolveJsonInput(raw));
+  return {
+    name: String(parsed.name ?? ""),
+    cronExpression: String(parsed.cronExpression ?? parsed.schedule ?? ""),
+    prompt: String(parsed.prompt ?? ""),
+    workingDir: typeof parsed.workingDir === "string" ? parsed.workingDir : null,
+    envName: typeof parsed.envName === "string" ? parsed.envName : null,
+    executionProfile: typeof parsed.executionProfile === "string" ? parsed.executionProfile : null,
+    maxBudgetUsd: typeof parsed.maxBudgetUsd === "number" ? parsed.maxBudgetUsd : null,
+    allowedTools: Array.isArray(parsed.allowedTools) ? parsed.allowedTools.map(String) : null,
+    disallowedTools: Array.isArray(parsed.disallowedTools) ? parsed.disallowedTools.map(String) : null,
+    enabled: typeof parsed.enabled === "boolean" ? parsed.enabled : null,
+    timeoutSecs: typeof parsed.timeoutSecs === "number" ? parsed.timeoutSecs : null,
+    templateId: typeof parsed.templateId === "string" ? parsed.templateId : null
+  };
+}
+function formatCronTaskTableRows(tasks) {
+  return tasks.map((task) => [
+    task.name,
+    task.cronExpression,
+    task.enabled ? "yes" : "no",
+    task.workingDir.replace(os5.homedir(), "~"),
+    task.envName ?? "-",
+    String(task.timeoutSecs)
+  ]);
+}
+
 // src/index.ts
 var __filename2 = fileURLToPath2(import.meta.url);
-var __dirname2 = path7.dirname(__filename2);
-var pkgPath = path7.resolve(__dirname2, "..", "package.json");
-var pkg = JSON.parse(fs9.readFileSync(pkgPath, "utf-8"));
+var __dirname2 = path8.dirname(__filename2);
+var pkgPath = path8.resolve(__dirname2, "..", "package.json");
+var pkg = JSON.parse(fs10.readFileSync(pkgPath, "utf-8"));
 var program = new Command();
 var DEFAULT_OFFICIAL_ENV = {
   ANTHROPIC_BASE_URL: "https://api.anthropic.com",
@@ -2967,11 +3108,11 @@ var recoverRegistriesFromLegacy = (registries) => {
     return registries;
   }
   const legacyConfigPath = getLegacyConfigPath();
-  if (!fs9.existsSync(legacyConfigPath)) {
+  if (!fs10.existsSync(legacyConfigPath)) {
     return registries;
   }
   try {
-    const legacyRaw = JSON.parse(fs9.readFileSync(legacyConfigPath, "utf-8"));
+    const legacyRaw = JSON.parse(fs10.readFileSync(legacyConfigPath, "utf-8"));
     const legacyRegistries = legacyRaw.registries ?? {};
     let changed = false;
     const recovered = { ...registries };
@@ -3165,14 +3306,14 @@ var switchEnvironment = async (name) => {
     exportCmds.forEach((cmd) => console.log(cmd));
   }
 };
-var getSessionsFilePath = () => path7.join(getCcemConfigDir(), "sessions.json");
-var getRuntimeStateFilePath = () => path7.join(getCcemConfigDir(), "runtime-state.json");
+var getSessionsFilePath = () => path8.join(getCcemConfigDir(), "sessions.json");
+var getRuntimeStateFilePath = () => path8.join(getCcemConfigDir(), "runtime-state.json");
 var parseJsonFile = (filePath) => {
-  if (!fs9.existsSync(filePath)) {
+  if (!fs10.existsSync(filePath)) {
     return null;
   }
   try {
-    return JSON.parse(fs9.readFileSync(filePath, "utf-8"));
+    return JSON.parse(fs10.readFileSync(filePath, "utf-8"));
   } catch {
     return null;
   }
@@ -3234,12 +3375,12 @@ var findAttachSession = (id) => {
 };
 var attachTmuxTarget = (target) => {
   const args = process.env.TMUX ? ["switch-client", "-t", target] : ["attach-session", "-t", target];
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     const child = spawn3("tmux", args, { stdio: "inherit" });
     child.on("error", reject);
     child.on("exit", (code) => {
       if (code === 0 || code === null) {
-        resolve2();
+        resolve3();
       } else {
         reject(new Error(`tmux exited with code ${code}`));
       }
@@ -3443,6 +3584,73 @@ program.command("run <command...>").description("Run a command with the current
     process.exit(code ?? 0);
   });
 });
+var cronCmd = program.command("cron").description("Manage CCEM cron tasks");
+cronCmd.command("list").description("List CCEM cron tasks").option("--json", "Output as JSON").action((options) => {
+  try {
+    const tasks = readCronTasks();
+    if (options.json) {
+      console.log(JSON.stringify(tasks, null, 2));
+      return;
+    }
+    if (tasks.length === 0) {
+      console.log(chalk7.yellow("No cron tasks found."));
+      return;
+    }
+    const table = new Table3({
+      head: ["Name", "Schedule", "Enabled", "Working Dir", "Env", "Timeout"]
+    });
+    table.push(...formatCronTaskTableRows(tasks));
+    console.log(table.toString());
+  } catch (err) {
+    console.error(chalk7.red(`\u2717 ${err instanceof Error ? err.message : String(err)}`));
+    process.exitCode = 1;
+  }
+});
+cronCmd.command("create").description("Create a CCEM cron task").option("--from-json <json>", "Read task input from inline JSON, @file, or - for stdin").option("--name <name>", "Task name").option("--cron-expression <expr>", "5-field cron expression").option("--schedule <expr>", "Alias for --cron-expression").option("--prompt <prompt>", "Prompt to run when the task fires").option("--working-dir <dir>", "Task working directory").option("--env-name <name>", "CCEM environment name").option("--execution-profile <profile>", "conservative, standard, or autonomous").option("--max-budget-usd <amount>", "Optional max budget in USD").option("--allowed-tools <items>", "Comma-separated or JSON array of allowed tools").option("--disallowed-tools <items>", "Comma-separated or JSON array of disallowed tools").option("--timeout-secs <seconds>", "Task timeout in seconds").option("--template-id <id>", "Optional template id").option("--disabled", "Create task disabled").option("--json", "Output as JSON").action((options) => {
+  try {
+    const input = options.fromJson ? parseCronCreateJson(options.fromJson) : {
+      name: options.name,
+      cronExpression: options.cronExpression ?? options.schedule,
+      prompt: options.prompt,
+      workingDir: options.workingDir,
+      envName: options.envName,
+      executionProfile: options.executionProfile,
+      maxBudgetUsd: options.maxBudgetUsd === void 0 ? null : Number(options.maxBudgetUsd),
+      allowedTools: parseStringList(options.allowedTools),
+      disallowedTools: parseStringList(options.disallowedTools),
+      enabled: options.disabled ? false : true,
+      timeoutSecs: options.timeoutSecs === void 0 ? null : Number(options.timeoutSecs),
+      templateId: options.templateId
+    };
+    const task = createCronTask(input);
+    if (options.json) {
+      console.log(JSON.stringify(task, null, 2));
+      return;
+    }
+    console.log(chalk7.green("\u2713 Cron task created"));
+    console.log(chalk7.gray(`  id: ${task.id}`));
+    console.log(chalk7.gray(`  name: ${task.name}`));
+    console.log(chalk7.gray(`  cronExpression: ${task.cronExpression}`));
+    console.log(chalk7.gray(`  workingDir: ${task.workingDir}`));
+  } catch (err) {
+    console.error(chalk7.red(`\u2717 ${err instanceof Error ? err.message : String(err)}`));
+    process.exitCode = 1;
+  }
+});
+cronCmd.command("delete <selector>").description("Delete a cron task by exact id or exact name").option("--json", "Output deleted task as JSON").action((selector, options) => {
+  try {
+    const task = deleteCronTask(selector);
+    if (options.json) {
+      console.log(JSON.stringify(task, null, 2));
+      return;
+    }
+    console.log(chalk7.green(`\u2713 Deleted cron task: ${task.name}`));
+    console.log(chalk7.gray(`  id: ${task.id}`));
+  } catch (err) {
+    console.error(chalk7.red(`\u2717 ${err instanceof Error ? err.message : String(err)}`));
+    process.exitCode = 1;
+  }
+});
 var setupCmd = program.command("setup").description("Setup commands for permanent configurations");
 setupCmd.command("perms").description("\u6C38\u4E45\u914D\u7F6E\u6743\u9650\u6A21\u5F0F").option("--yolo", "\u5E94\u7528 YOLO \u6A21\u5F0F\uFF08\u5168\u90E8\u653E\u5F00\uFF09").option("--dev", "\u5E94\u7528\u5F00\u53D1\u6A21\u5F0F").option("--readonly", "\u5E94\u7528\u53EA\u8BFB\u6A21\u5F0F").option("--safe", "\u5E94\u7528\u5B89\u5168\u6A21\u5F0F").option("--ci", "\u5E94\u7528 CI/CD \u6A21\u5F0F").option("--audit", "\u5E94\u7528\u5BA1\u8BA1\u6A21\u5F0F").option("--reset", "\u91CD\u7F6E\u6743\u9650\u914D\u7F6E").action(function() {
   const options = this.opts();
@@ -3494,12 +3702,12 @@ setupCmd.command("migrate").description("\u8FC1\u79FB\u65E7\u7248\u914D\u7F6E\u5
   const newConfigPath = getCcemConfigPath();
   const legacyConfigPath = getLegacyConfigPath();
   console.log(chalk7.cyan("\n\u{1F504} \u914D\u7F6E\u8FC1\u79FB\n"));
-  if (!fs9.existsSync(legacyConfigPath)) {
+  if (!fs10.existsSync(legacyConfigPath)) {
     console.log(chalk7.yellow("\u672A\u627E\u5230\u65E7\u7248\u914D\u7F6E\u6587\u4EF6"));
     console.log(chalk7.gray(`  \u65E7\u8DEF\u5F84: ${legacyConfigPath}`));
     return;
   }
-  if (fs9.existsSync(newConfigPath) && !options.force) {
+  if (fs10.existsSync(newConfigPath) && !options.force) {
     console.log(chalk7.green("\u2713 \u914D\u7F6E\u5DF2\u5728\u65B0\u8DEF\u5F84"));
     console.log(chalk7.gray(`  \u8DEF\u5F84: ${newConfigPath}`));
     console.log(chalk7.gray("\n\u4F7F\u7528 --force \u5F3A\u5236\u91CD\u65B0\u8FC1\u79FB"));
@@ -3507,15 +3715,15 @@ setupCmd.command("migrate").description("\u8FC1\u79FB\u65E7\u7248\u914D\u7F6E\u5
   }
   try {
     ensureCcemDir();
-    fs9.copyFileSync(legacyConfigPath, newConfigPath);
+    fs10.copyFileSync(legacyConfigPath, newConfigPath);
     console.log(chalk7.green("\u2713 \u914D\u7F6E\u5DF2\u8FC1\u79FB"));
     console.log(chalk7.gray(`  \u4ECE: ${legacyConfigPath}`));
     console.log(chalk7.gray(`  \u5230: ${newConfigPath}`));
     if (options.clean) {
-      fs9.unlinkSync(legacyConfigPath);
-      const legacyDir = path7.dirname(legacyConfigPath);
+      fs10.unlinkSync(legacyConfigPath);
+      const legacyDir = path8.dirname(legacyConfigPath);
       try {
-        fs9.rmdirSync(legacyDir);
+        fs10.rmdirSync(legacyDir);
       } catch {
       }
       console.log(chalk7.green("\u2713 \u5DF2\u5220\u9664\u65E7\u914D\u7F6E\u6587\u4EF6"));
@@ -3526,13 +3734,13 @@ setupCmd.command("migrate").description("\u8FC1\u79FB\u65E7\u7248\u914D\u7F6E\u5
 });
 setupCmd.command("cron").description("\u5B89\u88C5 ccem-cron skill \u5230 Claude Code\uFF08~/.claude/skills/\uFF09").option("--force", "\u5F3A\u5236\u8986\u76D6\u5DF2\u6709\u6587\u4EF6").action(async function() {
   const options = this.opts();
-  const skillDir = path7.join(process.env.HOME || "~", ".claude", "skills");
-  const targetPath = path7.join(skillDir, "ccem-cron.md");
-  if (!fs9.existsSync(skillDir)) {
-    fs9.mkdirSync(skillDir, { recursive: true });
+  const skillDir = path8.join(getHomeDir(), ".claude", "skills");
+  const targetPath = path8.join(skillDir, "ccem-cron.md");
+  if (!fs10.existsSync(skillDir)) {
+    fs10.mkdirSync(skillDir, { recursive: true });
     console.log(chalk7.gray(`\u521B\u5EFA\u76EE\u5F55: ${skillDir}`));
   }
-  if (fs9.existsSync(targetPath) && !options.force) {
+  if (fs10.existsSync(targetPath) && !options.force) {
     const { overwrite } = await inquirer.prompt([
       {
         type: "confirm",
@@ -3546,7 +3754,7 @@ setupCmd.command("cron").description("\u5B89\u88C5 ccem-cron skill \u5230 Claude
       return;
     }
   }
-  fs9.writeFileSync(targetPath, CCEM_CRON_SKILL_CONTENT, "utf-8");
+  fs10.writeFileSync(targetPath, CCEM_CRON_SKILL_CONTENT, "utf-8");
   console.log(chalk7.green(`\u2713 \u5DF2\u5B89\u88C5 ccem-cron skill`));
   console.log(chalk7.gray(`  \u8DEF\u5F84: ${targetPath}`));
   console.log(chalk7.cyan(`
@@ -3720,11 +3928,11 @@ Editing environment '${result.name}'`));
         registries[result.name] = applyPromptAnswers(envToEdit, answers, true);
         setRegistries(registries);
         msg.success(`Environment '${result.name}' updated.`);
-        await new Promise((resolve2) => setTimeout(resolve2, 800));
+        await new Promise((resolve3) => setTimeout(resolve3, 800));
       } else if (result.action === "rename") {
         if (result.name === "official") {
           msg.error("Cannot rename default 'official' environment.");
-          await new Promise((resolve2) => setTimeout(resolve2, 800));
+          await new Promise((resolve3) => setTimeout(resolve3, 800));
         } else {
           const { newName } = await inquirer.prompt([
             {
@@ -3745,7 +3953,7 @@ Editing environment '${result.name}'`));
             config2.set("current", newName);
           }
           msg.success(`Environment '${result.name}' renamed to '${newName}'.`);
-          await new Promise((resolve2) => setTimeout(resolve2, 800));
+          await new Promise((resolve3) => setTimeout(resolve3, 800));
         }
       } else if (result.action === "copy") {
         const { targetName } = await inquirer.prompt([
@@ -3778,11 +3986,11 @@ Editing environment '${result.name}'`));
           setRegistries(registries);
           msg.success(`Environment '${targetName}' updated.`);
         }
-        await new Promise((resolve2) => setTimeout(resolve2, 800));
+        await new Promise((resolve3) => setTimeout(resolve3, 800));
       } else if (result.action === "delete") {
         if (result.name === "official") {
           msg.error("Cannot delete default 'official' environment.");
-          await new Promise((resolve2) => setTimeout(resolve2, 800));
+          await new Promise((resolve3) => setTimeout(resolve3, 800));
         } else {
           const { confirm } = await inquirer.prompt([
             {
@@ -3802,7 +4010,7 @@ Editing environment '${result.name}'`));
               msg.success(`Environment '${result.name}' deleted.`);
             }
           }
-          await new Promise((resolve2) => setTimeout(resolve2, 800));
+          await new Promise((resolve3) => setTimeout(resolve3, 800));
         }
       }
     } else if (action === "perm") {
@@ -3833,11 +4041,11 @@ Editing environment '${result.name}'`));
       if (selectedMode === "clear") {
         config2.set("defaultMode", null);
         msg.success("Default mode cleared");
-        await new Promise((resolve2) => setTimeout(resolve2, 800));
+        await new Promise((resolve3) => setTimeout(resolve3, 800));
       } else if (selectedMode !== "back") {
         config2.set("defaultMode", selectedMode);
         msg.success(`Default mode set: ${PERMISSION_PRESETS[selectedMode].name}`);
-        await new Promise((resolve2) => setTimeout(resolve2, 800));
+        await new Promise((resolve3) => setTimeout(resolve3, 800));
       }
     } else {
       process.exit(0);

package/package.json

@@ -1,8 +1,13 @@
 {
   "name": "ccem",
-  "version": "2.5.0",
+  "version": "2.21.0",
   "type": "module",
   "description": "Claude Code Environment Manager",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Genuifx/claude-code-env-manager.git",
+    "directory": "apps/cli"
+  },
   "author": {
     "name": "Genuifx",
     "email": "genuifx@gmail.com",
@@ -14,7 +19,17 @@
     "scripts"
   ],
   "bin": {
-    "ccem": "./dist/index.js"
+    "ccem": "dist/index.js"
+  },
+  "scripts": {
+    "generate-logo": "bash scripts/generate-logo.sh",
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "start": "node dist/index.js",
+    "postinstall": "node ./scripts/migrate.js",
+    "test": "vitest",
+    "test:run": "vitest run",
+    "test:coverage": "vitest run --coverage"
   },
   "dependencies": {
     "chalk": "^4.1.2",
@@ -28,6 +43,7 @@
     "terminal-image": "^4.2.0"
   },
   "devDependencies": {
+    "@ccem/core": "workspace:*",
     "@types/inquirer": "^9.0.7",
     "@types/node": "^20.11.24",
     "@types/react": "^19.2.9",
@@ -35,17 +51,6 @@
     "asciify-image": "^0.1.10",
     "tsup": "^8.0.2",
     "typescript": "^5.3.3",
-    "vitest": "^4.0.18",
-    "@ccem/core": "2.0.0"
-  },
-  "scripts": {
-    "generate-logo": "bash scripts/generate-logo.sh",
-    "build": "tsup",
-    "dev": "tsup --watch",
-    "start": "node dist/index.js",
-    "postinstall": "node ./scripts/migrate.js",
-    "test": "vitest",
-    "test:run": "vitest run",
-    "test:coverage": "vitest run --coverage"
+    "vitest": "^4.0.18"
   }
-}
+}