ccpanel 0.1.0

package/dist/cli.js

@@ -0,0 +1,1056 @@
+#!/usr/bin/env node
+import {
+  ConfigStore,
+  InvalidJsonError,
+  SkillFrontmatterSchema,
+  createApp
+} from "./chunk-7ROXP6AO.js";
+
+// src/cli.ts
+import { homedir } from "os";
+import { join as join6 } from "path";
+import { createServer } from "net";
+import { fileURLToPath, pathToFileURL } from "url";
+import { serve } from "@hono/node-server";
+import open from "open";
+
+// src/core/mcp-service.ts
+var McpService = class {
+  constructor(store) {
+    this.store = store;
+  }
+  store;
+  stripName(input) {
+    const { name, ...server } = input;
+    return { name, server };
+  }
+  async list(paths, scope) {
+    if (scope === "user") {
+      const claude = await this.store.readJson(
+        paths.userClaudeJson
+      ) ?? {};
+      const disabled = await this.store.readJson(paths.userDisabledMcp) ?? {};
+      const enabled = Object.entries(claude.mcpServers ?? {}).map(
+        ([name, server]) => ({
+          name,
+          server,
+          enabled: true,
+          path: paths.userClaudeJson
+        })
+      );
+      const off = Object.entries(disabled).map(([name, server]) => ({
+        name,
+        server,
+        enabled: false,
+        path: paths.userDisabledMcp
+      }));
+      return [...enabled, ...off].sort((a, b) => a.name.localeCompare(b.name));
+    }
+    const mcp = await this.store.readJson(
+      paths.projectMcpJson
+    ) ?? {};
+    const settings = await this.store.readJson(
+      paths.projectSettings
+    ) ?? {};
+    const on = new Set(settings.enabledMcpjsonServers ?? []);
+    return Object.entries(mcp.mcpServers ?? {}).map(([name, server]) => ({
+      name,
+      server,
+      enabled: on.has(name),
+      path: paths.projectMcpJson
+    })).sort((a, b) => a.name.localeCompare(b.name));
+  }
+  async upsert(paths, scope, input) {
+    const { name, server } = this.stripName(input);
+    if (scope === "user") {
+      const claude = await this.store.readJson(
+        paths.userClaudeJson
+      ) ?? {};
+      const disabled = await this.store.readJson(paths.userDisabledMcp) ?? {};
+      if (disabled[name]) {
+        disabled[name] = server;
+        await this.store.writeJson(paths.userDisabledMcp, disabled);
+        return;
+      }
+      claude.mcpServers = { ...claude.mcpServers ?? {}, [name]: server };
+      await this.store.writeJson(paths.userClaudeJson, claude);
+      return;
+    }
+    const mcp = await this.store.readJson(
+      paths.projectMcpJson
+    ) ?? {};
+    mcp.mcpServers = { ...mcp.mcpServers ?? {}, [name]: server };
+    await this.store.writeJson(paths.projectMcpJson, mcp);
+  }
+  async remove(paths, scope, name) {
+    if (scope === "user") {
+      const claude = await this.store.readJson(
+        paths.userClaudeJson
+      ) ?? {};
+      const disabled = await this.store.readJson(paths.userDisabledMcp) ?? {};
+      if (claude.mcpServers) delete claude.mcpServers[name];
+      delete disabled[name];
+      await this.store.writeJson(paths.userClaudeJson, claude);
+      await this.store.writeJson(paths.userDisabledMcp, disabled);
+      return;
+    }
+    const mcp = await this.store.readJson(
+      paths.projectMcpJson
+    ) ?? {};
+    if (mcp.mcpServers) delete mcp.mcpServers[name];
+    await this.store.writeJson(paths.projectMcpJson, mcp);
+    await this.setProjectEnabled(paths, name, false);
+  }
+  async toggle(paths, scope, name, enabled) {
+    if (scope === "user") {
+      const claude = await this.store.readJson(
+        paths.userClaudeJson
+      ) ?? {};
+      const disabled = await this.store.readJson(paths.userDisabledMcp) ?? {};
+      const active = claude.mcpServers ?? {};
+      if (enabled && disabled[name]) {
+        active[name] = disabled[name];
+        delete disabled[name];
+      } else if (!enabled && active[name]) {
+        disabled[name] = active[name];
+        delete active[name];
+      }
+      claude.mcpServers = active;
+      await this.store.writeJson(paths.userClaudeJson, claude);
+      await this.store.writeJson(paths.userDisabledMcp, disabled);
+      return;
+    }
+    await this.setProjectEnabled(paths, name, enabled);
+  }
+  async setProjectEnabled(paths, name, enabled) {
+    const settings = await this.store.readJson(
+      paths.projectSettings
+    ) ?? {};
+    const set = new Set(settings.enabledMcpjsonServers ?? []);
+    if (enabled) set.add(name);
+    else set.delete(name);
+    settings.enabledMcpjsonServers = [...set];
+    await this.store.writeJson(paths.projectSettings, settings);
+  }
+};
+
+// src/core/skill-service.ts
+import {
+  cp,
+  mkdir,
+  readdir,
+  readFile,
+  readlink,
+  rename,
+  rm,
+  stat,
+  writeFile
+} from "fs/promises";
+import { dirname, isAbsolute, join, relative, resolve } from "path";
+import matter from "gray-matter";
+function assertSafeName(name) {
+  if (!name || name.includes("/") || name.includes("\\") || name.includes("..") || name.includes("\0")) {
+    throw new Error(`\u975E\u6CD5 skill \u540D\u79F0\uFF1A${name}`);
+  }
+}
+function isBinary(buf) {
+  return buf.subarray(0, 8e3).includes(0);
+}
+var IGNORED_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  ".venv",
+  "__pycache__",
+  ".DS_Store"
+]);
+var SkillService = class {
+  enabledDir(paths, scope) {
+    const dir = scope === "user" ? paths.userSkillsDir : paths.projectSkillsDir;
+    if (!dir) throw new Error("\u7F3A\u5C11\u9879\u76EE skills \u76EE\u5F55");
+    return dir;
+  }
+  disabledDir(paths, scope) {
+    const dir = scope === "user" ? paths.userDisabledSkillsDir : paths.projectDisabledSkillsDir;
+    if (!dir) throw new Error("\u7F3A\u5C11\u9879\u76EE\u7981\u7528 skills \u76EE\u5F55");
+    return dir;
+  }
+  async scan(dir, enabled) {
+    let entries;
+    try {
+      entries = await readdir(dir, { withFileTypes: true });
+    } catch (err) {
+      if (err.code === "ENOENT") return [];
+      throw err;
+    }
+    const out = [];
+    for (const e of entries) {
+      if (!e.isDirectory() && !e.isSymbolicLink()) continue;
+      const path = join(dir, e.name);
+      let linkTarget;
+      if (e.isSymbolicLink()) {
+        try {
+          if (!(await stat(path)).isDirectory()) continue;
+          linkTarget = await readlink(path).catch(() => void 0);
+        } catch {
+          continue;
+        }
+      }
+      try {
+        const raw = await readFile(join(path, "SKILL.md"), "utf8");
+        const fm = SkillFrontmatterSchema.parse(matter(raw).data);
+        out.push({ name: e.name, description: fm.description, enabled, path, linkTarget });
+      } catch {
+        out.push({
+          name: e.name,
+          description: "(SKILL.md \u7F3A\u5931\u6216\u65E0\u6548)",
+          enabled,
+          path,
+          linkTarget
+        });
+      }
+    }
+    return out;
+  }
+  async list(paths, scope) {
+    const on = await this.scan(this.enabledDir(paths, scope), true);
+    const off = await this.scan(this.disabledDir(paths, scope), false);
+    return [...on, ...off].sort((a, b) => a.name.localeCompare(b.name));
+  }
+  // 返回该技能实际所在目录（启用或禁用），都不存在则抛错。
+  async resolveSkillDir(paths, scope, name) {
+    assertSafeName(name);
+    for (const base of [this.enabledDir(paths, scope), this.disabledDir(paths, scope)]) {
+      const dir = join(base, name);
+      try {
+        await readdir(dir);
+        return dir;
+      } catch {
+      }
+    }
+    throw new Error(`\u672A\u627E\u5230 skill\u300C${name}\u300D\uFF08scope: ${scope}\uFF09`);
+  }
+  // 把相对路径安全地解析到技能目录内，防止 `..` 越权。
+  resolveWithin(baseDir, relPath) {
+    const full = resolve(baseDir, relPath);
+    const rel = relative(baseDir, full);
+    if (rel === "" || rel.startsWith("..") || isAbsolute(rel)) {
+      throw new Error(`\u975E\u6CD5\u6587\u4EF6\u8DEF\u5F84\uFF1A${relPath}`);
+    }
+    return full;
+  }
+  async read(paths, scope, name) {
+    assertSafeName(name);
+    const enabledPath = join(this.enabledDir(paths, scope), name, "SKILL.md");
+    const disabledPath = join(this.disabledDir(paths, scope), name, "SKILL.md");
+    let raw;
+    try {
+      raw = await readFile(enabledPath, "utf8");
+    } catch {
+      try {
+        raw = await readFile(disabledPath, "utf8");
+      } catch {
+        throw new Error(`\u672A\u627E\u5230 skill\u300C${name}\u300D\uFF08scope: ${scope}\uFF09`);
+      }
+    }
+    const parsed = matter(raw);
+    return {
+      frontmatter: SkillFrontmatterSchema.parse(parsed.data),
+      body: parsed.content.trimStart()
+    };
+  }
+  // 列出技能目录下全部文本文件的相对路径（POSIX 分隔符），忽略二进制文件。
+  async listFiles(paths, scope, name) {
+    const root = await this.resolveSkillDir(paths, scope, name);
+    const out = [];
+    const walk = async (dir) => {
+      const entries = await readdir(dir, { withFileTypes: true });
+      for (const e of entries) {
+        const full = join(dir, e.name);
+        if (e.isDirectory()) {
+          if (IGNORED_DIRS.has(e.name)) continue;
+          await walk(full);
+        } else if (e.isFile()) {
+          if (isBinary(await readFile(full))) continue;
+          out.push(relative(root, full).split("\\").join("/"));
+        }
+      }
+    };
+    await walk(root);
+    return out.sort((a, b) => a.localeCompare(b));
+  }
+  async readFileRaw(paths, scope, name, relPath) {
+    const root = await this.resolveSkillDir(paths, scope, name);
+    const full = this.resolveWithin(root, relPath);
+    const buf = await readFile(full);
+    if (isBinary(buf)) throw new Error(`\u4E8C\u8FDB\u5236\u6587\u4EF6\u65E0\u6CD5\u7F16\u8F91\uFF1A${relPath}`);
+    return { content: buf.toString("utf8") };
+  }
+  async writeFileRaw(paths, scope, name, relPath, content) {
+    const root = await this.resolveSkillDir(paths, scope, name);
+    const full = this.resolveWithin(root, relPath);
+    await mkdir(dirname(full), { recursive: true });
+    await writeFile(full, content, "utf8");
+  }
+  async upsert(paths, scope, name, frontmatter, body) {
+    assertSafeName(name);
+    const file = join(this.enabledDir(paths, scope), name, "SKILL.md");
+    await mkdir(dirname(file), { recursive: true });
+    const content = matter.stringify(body, frontmatter);
+    await writeFile(file, content, "utf8");
+  }
+  async remove(paths, scope, name) {
+    assertSafeName(name);
+    await rm(join(this.enabledDir(paths, scope), name), {
+      recursive: true,
+      force: true
+    });
+    await rm(join(this.disabledDir(paths, scope), name), {
+      recursive: true,
+      force: true
+    });
+  }
+  // 跨盘符 rename 会抛 EXDEV（如项目在 D: 而 ~/.ccpanel 在 C:），回退到复制+删除。
+  async moveDir(from, to) {
+    await mkdir(dirname(to), { recursive: true });
+    try {
+      await rename(from, to);
+    } catch (err) {
+      if (err.code === "EXDEV") {
+        await cp(from, to, { recursive: true });
+        await rm(from, { recursive: true, force: true });
+      } else {
+        throw err;
+      }
+    }
+  }
+  async toggle(paths, scope, name, enabled) {
+    assertSafeName(name);
+    const from = join(
+      enabled ? this.disabledDir(paths, scope) : this.enabledDir(paths, scope),
+      name
+    );
+    const to = join(
+      enabled ? this.enabledDir(paths, scope) : this.disabledDir(paths, scope),
+      name
+    );
+    await this.moveDir(from, to);
+  }
+};
+
+// src/core/project-service.ts
+var ProjectService = class {
+  constructor(store, registryFile) {
+    this.store = store;
+    this.registryFile = registryFile;
+  }
+  store;
+  registryFile;
+  async list() {
+    const data = await this.store.readJson(
+      this.registryFile
+    );
+    return data?.projects ?? [];
+  }
+  async add(path) {
+    const current = await this.list();
+    if (!current.includes(path)) current.push(path);
+    await this.store.writeJson(this.registryFile, { projects: current });
+    return current;
+  }
+  // 仅从注册表移除登记，不删除项目本身的任何文件。
+  async remove(path) {
+    const current = await this.list();
+    const next = current.filter((p) => p !== path);
+    await this.store.writeJson(this.registryFile, { projects: next });
+    return next;
+  }
+};
+
+// src/core/memory-service.ts
+import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
+import { dirname as dirname2 } from "path";
+var MemoryService = class {
+  file(paths, scope) {
+    const f = scope === "user" ? paths.userClaudeMd : paths.projectClaudeMd;
+    if (!f) throw new Error("\u7F3A\u5C11\u9879\u76EE CLAUDE.md \u8DEF\u5F84");
+    return f;
+  }
+  // 文件不存在视为「尚未创建」，返回空串。
+  async read(paths, scope) {
+    try {
+      return { content: await readFile2(this.file(paths, scope), "utf8") };
+    } catch (err) {
+      if (err.code === "ENOENT") return { content: "" };
+      throw err;
+    }
+  }
+  async write(paths, scope, content) {
+    const f = this.file(paths, scope);
+    await mkdir2(dirname2(f), { recursive: true });
+    await writeFile2(f, content, "utf8");
+  }
+};
+
+// src/core/memory-files-service.ts
+import { readdir as readdir3, readFile as readFile4, stat as stat3 } from "fs/promises";
+import { join as join3 } from "path";
+import matter2 from "gray-matter";
+
+// src/core/session-service.ts
+import { readdir as readdir2, readFile as readFile3, stat as stat2 } from "fs/promises";
+import { join as join2 } from "path";
+var MAX_BLOCK = 1e4;
+var NOISE_PREFIXES = ["<local-command", "<command-", "<system-reminder", "Caveat:"];
+function encodeProjectDir(projectPath) {
+  return projectPath.replace(/[:\\/]/g, "-");
+}
+function assertSafeId(id) {
+  if (!id || !/^[A-Za-z0-9-]+$/.test(id)) {
+    throw new Error(`\u975E\u6CD5\u4F1A\u8BDD id\uFF1A${id}`);
+  }
+}
+function parseAgentId(fileName) {
+  const m = /^agent-([A-Za-z0-9]+)\.jsonl$/.exec(fileName);
+  return m ? m[1] : null;
+}
+function parseMessages(raw) {
+  const out = [];
+  for (const line of raw.split("\n")) {
+    if (!line.trim()) continue;
+    let obj;
+    try {
+      obj = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    if (obj.type !== "user" && obj.type !== "assistant") continue;
+    const blocks = toBlocks(obj.message?.content);
+    if (blocks.length === 0) continue;
+    out.push({
+      type: obj.type,
+      role: obj.message?.role,
+      timestamp: obj.timestamp,
+      blocks
+    });
+  }
+  return out;
+}
+function truncate(s) {
+  return s.length > MAX_BLOCK ? s.slice(0, MAX_BLOCK) + "\n\u2026(\u5DF2\u622A\u65AD)" : s;
+}
+function plainText(content) {
+  if (typeof content === "string") return content;
+  if (Array.isArray(content)) {
+    return content.map((b) => b && typeof b === "object" && "text" in b ? String(b.text ?? "") : "").join(" ");
+  }
+  return "";
+}
+function toBlocks(content) {
+  if (typeof content === "string") {
+    return content.trim() ? [{ kind: "text", text: truncate(content) }] : [];
+  }
+  if (!Array.isArray(content)) return [];
+  const out = [];
+  for (const raw of content) {
+    if (!raw || typeof raw !== "object") continue;
+    const b = raw;
+    switch (b.type) {
+      case "text":
+        if (b.text) out.push({ kind: "text", text: truncate(String(b.text)) });
+        break;
+      case "thinking":
+        out.push({ kind: "thinking", text: truncate(String(b.thinking ?? "")) });
+        break;
+      case "tool_use":
+        out.push({
+          kind: "tool_use",
+          name: String(b.name ?? "tool"),
+          text: truncate(JSON.stringify(b.input ?? {}, null, 2)),
+          toolUseId: b.id ? String(b.id) : void 0
+        });
+        break;
+      case "tool_result":
+        out.push({
+          kind: "tool_result",
+          text: truncate(plainText(b.content)),
+          isError: b.is_error === true
+        });
+        break;
+    }
+  }
+  return out;
+}
+var SessionService = class {
+  dir(paths, projectPath) {
+    return join2(paths.userProjectsDir, encodeProjectDir(projectPath));
+  }
+  async list(paths, projectPath) {
+    const dir = this.dir(paths, projectPath);
+    let names;
+    try {
+      names = (await readdir2(dir)).filter((n) => n.endsWith(".jsonl"));
+    } catch (err) {
+      if (err.code === "ENOENT") return [];
+      throw err;
+    }
+    const out = [];
+    for (const name of names) {
+      const full = join2(dir, name);
+      const st = await stat2(full);
+      const { firstPrompt, messageCount } = await this.summarize(full);
+      out.push({
+        id: name.replace(/\.jsonl$/, ""),
+        mtime: st.mtimeMs,
+        size: st.size,
+        firstPrompt,
+        messageCount
+      });
+    }
+    return out.sort((a, b) => b.mtime - a.mtime);
+  }
+  async summarize(file) {
+    const raw = await readFile3(file, "utf8");
+    let firstPrompt = "";
+    let messageCount = 0;
+    for (const line of raw.split("\n")) {
+      if (!line.trim()) continue;
+      let obj;
+      try {
+        obj = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      if (obj.type !== "user" && obj.type !== "assistant") continue;
+      messageCount++;
+      if (!firstPrompt && obj.type === "user") {
+        const text = plainText(obj.message?.content).replace(/\s+/g, " ").trim();
+        if (text && !NOISE_PREFIXES.some((p) => text.startsWith(p))) {
+          firstPrompt = text.length > 100 ? text.slice(0, 100) + "\u2026" : text;
+        }
+      }
+    }
+    return { firstPrompt, messageCount };
+  }
+  async read(paths, projectPath, id) {
+    assertSafeId(id);
+    const dir = this.dir(paths, projectPath);
+    const raw = await readFile3(join2(dir, `${id}.jsonl`), "utf8");
+    const messages = parseMessages(raw);
+    const subagents = await this.readSubagents(join2(dir, id, "subagents"));
+    return { messages, subagents };
+  }
+  // 读取某会话的 subagents/ 目录：每个 agent-<id>.jsonl 配对同名 .meta.json。
+  // 目录不存在、meta 缺失或损坏均降级处理，不影响主会话展示。
+  async readSubagents(subDir) {
+    let names;
+    try {
+      names = (await readdir2(subDir)).filter((n) => n.endsWith(".jsonl"));
+    } catch (err) {
+      if (err.code === "ENOENT") return [];
+      throw err;
+    }
+    const out = [];
+    for (const name of names) {
+      const agentId = parseAgentId(name);
+      if (!agentId) continue;
+      const messages = parseMessages(await readFile3(join2(subDir, name), "utf8"));
+      const meta = await this.readMeta(join2(subDir, `agent-${agentId}.meta.json`));
+      out.push({
+        toolUseId: meta.toolUseId,
+        agentId,
+        agentType: meta.agentType,
+        description: meta.description,
+        messages
+      });
+    }
+    return out;
+  }
+  async readMeta(file) {
+    try {
+      const obj = JSON.parse(await readFile3(file, "utf8"));
+      return {
+        toolUseId: String(obj.toolUseId ?? ""),
+        agentType: String(obj.agentType ?? "subagent"),
+        description: String(obj.description ?? "")
+      };
+    } catch {
+      return { toolUseId: "", agentType: "subagent", description: "" };
+    }
+  }
+};
+
+// src/core/memory-files-service.ts
+var INDEX_FILE = "MEMORY.md";
+function assertSafeMemoryFile(file) {
+  if (!file || file.includes("..") || !/^[A-Za-z0-9._-]+\.md$/.test(file)) {
+    throw new Error(`\u975E\u6CD5\u8BB0\u5FC6\u6587\u4EF6\u540D\uFF1A${file}`);
+  }
+}
+var MemoryFilesService = class {
+  dir(paths, projectPath) {
+    return join3(paths.userProjectsDir, encodeProjectDir(projectPath), "memory");
+  }
+  // 目录不存在视为「尚无记忆」，返回空概览。
+  async overview(paths, projectPath) {
+    const dir = this.dir(paths, projectPath);
+    let names;
+    try {
+      names = (await readdir3(dir)).filter((n) => n.endsWith(".md"));
+    } catch (err) {
+      if (err.code === "ENOENT") return { index: null, files: [] };
+      throw err;
+    }
+    let index = null;
+    const files = [];
+    for (const name of names) {
+      const full = join3(dir, name);
+      if (name === INDEX_FILE) {
+        index = await readFile4(full, "utf8");
+        continue;
+      }
+      const st = await stat3(full);
+      const fm = await this.parseFront(full, name);
+      files.push({ file: name, ...fm, size: st.size, mtime: st.mtimeMs });
+    }
+    files.sort((a, b) => a.name.localeCompare(b.name));
+    return { index, files };
+  }
+  // 解析 frontmatter，任何缺失/损坏均回退到文件名，保证列表不因坏文件中断。
+  async parseFront(full, fileName) {
+    const fallbackName = fileName.replace(/\.md$/, "");
+    try {
+      const data = matter2(await readFile4(full, "utf8")).data;
+      const meta = data.metadata ?? {};
+      return {
+        name: typeof data.name === "string" && data.name ? data.name : fallbackName,
+        description: typeof data.description === "string" ? data.description : "",
+        type: typeof meta.type === "string" ? meta.type : ""
+      };
+    } catch {
+      return { name: fallbackName, description: "", type: "" };
+    }
+  }
+  // 读取单个记忆文件原文（含 frontmatter）。
+  async read(paths, projectPath, file) {
+    assertSafeMemoryFile(file);
+    return { content: await readFile4(join3(this.dir(paths, projectPath), file), "utf8") };
+  }
+};
+
+// src/core/plugin-service.ts
+import { readFile as readFile5, readdir as readdir4, stat as stat4 } from "fs/promises";
+import { isAbsolute as isAbsolute2, join as join4, relative as relative2, resolve as resolve2 } from "path";
+import matter3 from "gray-matter";
+var PluginService = class {
+  constructor(store) {
+    this.store = store;
+  }
+  store;
+  async pathExists(p) {
+    return stat4(p).then(() => true).catch(() => false);
+  }
+  // 插件元数据要尽量容错：单个文件损坏不应让整页报错（启停写入除外）。
+  async safeReadJson(file) {
+    try {
+      return await this.store.readJson(file);
+    } catch {
+      return void 0;
+    }
+  }
+  manifestFile(installPath) {
+    return join4(installPath, ".claude-plugin", "plugin.json");
+  }
+  // id 形如 "name@marketplace"，按最后一个 @ 切分。
+  splitId(id) {
+    const at = id.lastIndexOf("@");
+    if (at <= 0) return { name: id, marketplace: "" };
+    return { name: id.slice(0, at), marketplace: id.slice(at + 1) };
+  }
+  authorName(a) {
+    if (!a) return void 0;
+    return typeof a === "string" ? a : a.name;
+  }
+  // 同一 id 可能有多条安装记录，优先 user scope。
+  pickRecord(records) {
+    return records.find((r) => r.scope === "user") ?? records[0];
+  }
+  async buildEntry(id, rec, enabled, markets) {
+    const { name: idName, marketplace } = this.splitId(id);
+    const installPath = rec.installPath;
+    const exists = await this.pathExists(installPath);
+    const manifest = exists ? await this.safeReadJson(this.manifestFile(installPath)) : void 0;
+    const entry = {
+      id,
+      name: manifest?.name ?? idName,
+      description: manifest?.description ?? "",
+      version: manifest?.version ?? rec.version ?? "unknown",
+      author: this.authorName(manifest?.author),
+      homepage: manifest?.homepage,
+      marketplace,
+      repo: markets[marketplace]?.source?.repo,
+      installPath,
+      enabled: enabled[id] === true,
+      exists
+    };
+    return { entry, manifest };
+  }
+  async list(paths) {
+    const installed = await this.safeReadJson(paths.installedPluginsJson) ?? {};
+    const settings = await this.safeReadJson(paths.userSettings) ?? {};
+    const markets = await this.safeReadJson(
+      paths.knownMarketplacesJson
+    ) ?? {};
+    const enabled = settings.enabledPlugins ?? {};
+    const out = [];
+    for (const [id, records] of Object.entries(installed.plugins ?? {})) {
+      const rec = this.pickRecord(records ?? []);
+      if (!rec) continue;
+      const { entry } = await this.buildEntry(id, rec, enabled, markets);
+      out.push(entry);
+    }
+    return out.sort((a, b) => a.name.localeCompare(b.name));
+  }
+  async findRecord(paths, id) {
+    const installed = await this.safeReadJson(paths.installedPluginsJson) ?? {};
+    const records = installed.plugins?.[id];
+    const rec = records ? this.pickRecord(records) : void 0;
+    if (!rec) throw new Error(`\u672A\u627E\u5230\u63D2\u4EF6\u300C${id}\u300D`);
+    return rec;
+  }
+  async detail(paths, id) {
+    const rec = await this.findRecord(paths, id);
+    const settings = await this.safeReadJson(paths.userSettings) ?? {};
+    const markets = await this.safeReadJson(
+      paths.knownMarketplacesJson
+    ) ?? {};
+    const { entry, manifest } = await this.buildEntry(
+      id,
+      rec,
+      settings.enabledPlugins ?? {},
+      markets
+    );
+    const components = entry.exists ? await this.scanComponents(entry.installPath, manifest) : [];
+    return { ...entry, components };
+  }
+  // 读取 frontmatter 的 description / name 作为子组件摘要，失败返回空串。
+  async readDescription(file) {
+    try {
+      const fm = matter3(await readFile5(file, "utf8")).data;
+      return fm.description ?? fm.name ?? "";
+    } catch {
+      return "";
+    }
+  }
+  async scanSkills(dir) {
+    let entries;
+    try {
+      entries = await readdir4(dir, { withFileTypes: true });
+    } catch {
+      return [];
+    }
+    const out = [];
+    for (const e of entries) {
+      if (!e.isDirectory()) continue;
+      const description = await this.readDescription(
+        join4(dir, e.name, "SKILL.md")
+      );
+      out.push({ type: "skill", name: e.name, description });
+    }
+    return out.sort((a, b) => a.name.localeCompare(b.name));
+  }
+  // commands / agents：递归收集 .md，name 为相对 dir 的 POSIX 路径（去 .md）。
+  async scanMarkdownDir(dir, type) {
+    const out = [];
+    const walk = async (cur) => {
+      let entries;
+      try {
+        entries = await readdir4(cur, { withFileTypes: true });
+      } catch {
+        return;
+      }
+      for (const e of entries) {
+        const full = join4(cur, e.name);
+        if (e.isDirectory()) {
+          await walk(full);
+        } else if (e.isFile() && e.name.endsWith(".md")) {
+          const name = relative2(dir, full).split("\\").join("/").replace(/\.md$/, "");
+          out.push({
+            type,
+            name,
+            description: await this.readDescription(full)
+          });
+        }
+      }
+    };
+    await walk(dir);
+    return out.sort((a, b) => a.name.localeCompare(b.name));
+  }
+  async scanHooks(file) {
+    try {
+      const json = JSON.parse(await readFile5(file, "utf8"));
+      const events = Object.keys(json.hooks ?? json);
+      return [
+        {
+          type: "hook",
+          name: "hooks.json",
+          description: events.length ? `\u4E8B\u4EF6\uFF1A${events.join(", ")}` : ""
+        }
+      ];
+    } catch {
+      return [];
+    }
+  }
+  summarizeMcp(config) {
+    if (config.command) {
+      return `${config.command} ${(config.args ?? []).join(" ")}`.trim();
+    }
+    if (config.url) return `${config.type ?? ""} ${config.url}`.trim();
+    return "";
+  }
+  // 插件 MCP 既可能在 .mcp.json（顶层即 server 映射或带 mcpServers 包裹），
+  // 也可能在 plugin.json 的 mcpServers 字段；合并两者。
+  async loadMcpServers(installPath, manifest) {
+    const fromFile = await this.safeReadJson(join4(installPath, ".mcp.json"));
+    const fileMap = fromFile?.mcpServers ?? fromFile ?? {};
+    const manifestMap = manifest?.mcpServers ?? {};
+    return { ...fileMap, ...manifestMap };
+  }
+  async scanMcp(installPath, manifest) {
+    const servers = await this.loadMcpServers(installPath, manifest);
+    return Object.entries(servers).map(([name, config]) => ({
+      type: "mcp",
+      name,
+      description: this.summarizeMcp(config)
+    }));
+  }
+  async scanComponents(installPath, manifest) {
+    const [skills, commands, agents, hooks, mcp] = await Promise.all([
+      this.scanSkills(join4(installPath, "skills")),
+      this.scanMarkdownDir(join4(installPath, "commands"), "command"),
+      this.scanMarkdownDir(join4(installPath, "agents"), "agent"),
+      this.scanHooks(join4(installPath, "hooks", "hooks.json")),
+      this.scanMcp(installPath, manifest)
+    ]);
+    return [...skills, ...commands, ...agents, ...hooks, ...mcp];
+  }
+  // 把外部传入的相对路径安全解析到 baseDir 内，防止 `..` 越权。
+  resolveWithin(baseDir, relPath) {
+    const full = resolve2(baseDir, relPath);
+    const rel = relative2(baseDir, full);
+    if (rel === "" || rel.startsWith("..") || isAbsolute2(rel)) {
+      throw new Error(`\u975E\u6CD5\u7EC4\u4EF6\u8DEF\u5F84\uFF1A${relPath}`);
+    }
+    return full;
+  }
+  async readComponent(paths, id, type, name) {
+    const rec = await this.findRecord(paths, id);
+    const base = rec.installPath;
+    if (type === "skill") {
+      const file = this.resolveWithin(
+        join4(base, "skills"),
+        join4(name, "SKILL.md")
+      );
+      return {
+        type,
+        name,
+        language: "markdown",
+        content: await readFile5(file, "utf8")
+      };
+    }
+    if (type === "command" || type === "agent") {
+      const sub = type === "command" ? "commands" : "agents";
+      const file = this.resolveWithin(join4(base, sub), `${name}.md`);
+      return {
+        type,
+        name,
+        language: "markdown",
+        content: await readFile5(file, "utf8")
+      };
+    }
+    if (type === "hook") {
+      const file = join4(base, "hooks", "hooks.json");
+      return {
+        type,
+        name,
+        language: "json",
+        content: await readFile5(file, "utf8")
+      };
+    }
+    const manifest = await this.safeReadJson(
+      this.manifestFile(base)
+    );
+    const servers = await this.loadMcpServers(base, manifest);
+    const config = servers[name];
+    if (!config) throw new Error(`\u672A\u627E\u5230 MCP server\u300C${name}\u300D`);
+    return {
+      type,
+      name,
+      language: "json",
+      content: JSON.stringify(config, null, 2)
+    };
+  }
+  async setEnabled(paths, id, enabled) {
+    const settings = await this.store.readJson(paths.userSettings) ?? {};
+    settings.enabledPlugins = {
+      ...settings.enabledPlugins ?? {},
+      [id]: enabled
+    };
+    await this.store.writeJson(paths.userSettings, settings);
+  }
+};
+
+// src/core/config-file-service.ts
+import { readFile as readFile6 } from "fs/promises";
+var REGISTRY = {
+  settings: (paths, scope) => scope === "user" ? paths.userSettings : paths.projectSettings,
+  "claude-json": (paths, scope) => scope === "user" ? paths.userClaudeJson : void 0
+};
+var ConfigFileService = class {
+  constructor(store) {
+    this.store = store;
+  }
+  store;
+  file(paths, fileId, scope) {
+    const f = REGISTRY[fileId](paths, scope);
+    if (!f) {
+      throw new Error(
+        scope === "project" ? `\u914D\u7F6E\u6587\u4EF6 ${fileId} \u4E0D\u652F\u6301\u9879\u76EE\u7EA7\u4F5C\u7528\u57DF` : `\u7F3A\u5C11\u914D\u7F6E\u6587\u4EF6\u8DEF\u5F84\uFF1A${fileId}`
+      );
+    }
+    return f;
+  }
+  // 文件不存在视为「尚未创建」，返回空串（与 MemoryService 一致）。
+  async read(paths, fileId, scope) {
+    try {
+      return { content: await readFile6(this.file(paths, fileId, scope), "utf8") };
+    } catch (err) {
+      if (err.code === "ENOENT") return { content: "" };
+      throw err;
+    }
+  }
+  // 校验合法 JSON 后整文件写回；非法内容抛 InvalidJsonError，不触碰磁盘原文件。
+  async write(paths, fileId, scope, content) {
+    const file = this.file(paths, fileId, scope);
+    let parsed;
+    try {
+      parsed = JSON.parse(content);
+    } catch {
+      throw new InvalidJsonError();
+    }
+    await this.store.writeJson(file, parsed);
+  }
+};
+
+// src/core/agent-command-service.ts
+import { mkdir as mkdir3, readdir as readdir5, readFile as readFile7, rm as rm2, writeFile as writeFile3 } from "fs/promises";
+import { dirname as dirname3, join as join5 } from "path";
+import matter4 from "gray-matter";
+function assertSafeName2(name) {
+  if (!name || name.includes("/") || name.includes("\\") || name.includes("..") || name.includes("\0")) {
+    throw new Error(`\u975E\u6CD5\u540D\u79F0\uFF1A${name}`);
+  }
+}
+var AgentCommandService = class {
+  dir(paths, kind, scope) {
+    const dir = scope === "user" ? kind === "agents" ? paths.userAgentsDir : paths.userCommandsDir : kind === "agents" ? paths.projectAgentsDir : paths.projectCommandsDir;
+    if (!dir) throw new Error(`\u7F3A\u5C11\u9879\u76EE ${kind} \u76EE\u5F55`);
+    return dir;
+  }
+  fileFor(paths, kind, scope, name) {
+    assertSafeName2(name);
+    return join5(this.dir(paths, kind, scope), `${name}.md`);
+  }
+  async list(paths, kind, scope) {
+    const dir = this.dir(paths, kind, scope);
+    let entries;
+    try {
+      entries = await readdir5(dir, { withFileTypes: true });
+    } catch (err) {
+      if (err.code === "ENOENT") return [];
+      throw err;
+    }
+    const out = [];
+    for (const e of entries) {
+      if (!e.isFile() || !e.name.endsWith(".md")) continue;
+      const name = e.name.slice(0, -3);
+      const path = join5(dir, e.name);
+      let description;
+      try {
+        const fm = matter4(await readFile7(path, "utf8")).data;
+        description = typeof fm.description === "string" ? fm.description : "";
+      } catch {
+        description = "(frontmatter \u89E3\u6790\u5931\u8D25)";
+      }
+      out.push({ name, description, path });
+    }
+    return out.sort((a, b) => a.name.localeCompare(b.name));
+  }
+  async read(paths, kind, scope, name) {
+    const file = this.fileFor(paths, kind, scope, name);
+    try {
+      return { content: await readFile7(file, "utf8") };
+    } catch {
+      throw new Error(`\u672A\u627E\u5230 ${kind}\u300C${name}\u300D\uFF08scope: ${scope}\uFF09`);
+    }
+  }
+  async write(paths, kind, scope, name, content) {
+    const file = this.fileFor(paths, kind, scope, name);
+    await mkdir3(dirname3(file), { recursive: true });
+    await writeFile3(file, content, "utf8");
+  }
+  async remove(paths, kind, scope, name) {
+    const file = this.fileFor(paths, kind, scope, name);
+    await rm2(file, { force: true });
+  }
+};
+
+// src/cli.ts
+function findFreePort(start) {
+  return new Promise((resolve3, reject) => {
+    const srv = createServer();
+    srv.once("error", (err) => {
+      if (err.code === "EADDRINUSE") resolve3(findFreePort(start + 1));
+      else reject(err);
+    });
+    srv.listen(start, () => {
+      srv.close(() => resolve3(start));
+    });
+  });
+}
+async function main() {
+  const home = homedir();
+  const store = new ConfigStore();
+  const registryFile = join6(home, ".ccpanel", "ccpanel-projects.json");
+  const webRoot = fileURLToPath(new URL("../web/dist", import.meta.url));
+  const app = createApp({
+    home,
+    store,
+    mcp: new McpService(store),
+    skills: new SkillService(),
+    projects: new ProjectService(store, registryFile),
+    memory: new MemoryService(),
+    memoryFiles: new MemoryFilesService(),
+    sessions: new SessionService(),
+    plugins: new PluginService(store),
+    configFiles: new ConfigFileService(store),
+    agentCommands: new AgentCommandService(),
+    registryFile,
+    webRoot
+  });
+  const port = await findFreePort(7788);
+  serve({ fetch: app.fetch, port });
+  const url = `http://localhost:${port}`;
+  console.log(`ccpanel \u5DF2\u542F\u52A8\uFF1A${url}`);
+  await open(url);
+}
+function isMainModule(argvPath, moduleUrl) {
+  return !!argvPath && moduleUrl === pathToFileURL(argvPath).href;
+}
+if (isMainModule(process.argv[1], import.meta.url)) {
+  void main();
+}
+export {
+  findFreePort,
+  isMainModule,
+  main
+};