coding-tool-x 3.8.4 → 3.8.6

package/src/server/api/agents.js

@@ -7,48 +7,55 @@
 const express = require('express');
 const fs = require('fs');
 const path = require('path');
-const { AgentsService } = require('../services/agents-service');
+const { AgentsService } = require('../../platforms/agents-service');
 const { PATHS, HOME_DIR } = require('../../config/paths');
+const { resolvePlatform, createPlatformAccessError } = require('../../platforms/access');
+const { getPlatformCatalog } = require('../services/platform-catalog');
 const { sendApiError } = require('./validation-errors');
 
 const router = express.Router();
-const SUPPORTED_PLATFORMS = ['claude', 'codex', 'gemini', 'opencode'];
 const agentServices = new Map();
 const DEFAULT_PROJECT_ALLOWED_ROOTS = [HOME_DIR, process.cwd()];
 
-function isSupportedPlatform(platform) {
-  return SUPPORTED_PLATFORMS.includes(platform);
-}
-
 function getRawPlatform(req) {
   const queryPlatform = typeof req.query?.platform === 'string' ? req.query.platform.trim() : '';
   const bodyPlatform = typeof req.body?.platform === 'string' ? req.body.platform.trim() : '';
   return queryPlatform || bodyPlatform || '';
 }
 
-function resolvePlatform(rawPlatform) {
-  return rawPlatform || 'claude';
-}
-
 function getPlatform(req) {
-  return resolvePlatform(getRawPlatform(req));
+  return resolvePlatform(getRawPlatform(req), { fallback: 'claude' }).key;
 }
 
 function getAgentsService(req) {
   const platform = getPlatform(req);
   if (!agentServices.has(platform)) {
-    agentServices.set(platform, new AgentsService(platform));
+    const service = new AgentsService(platform);
+    if (!service || typeof service.listAgents !== 'function') {
+      throw createPlatformAccessError('unsupported', {
+        platform,
+        capability: 'agents',
+        message: `Agents are not supported for ${platform}`
+      });
+    }
+    agentServices.set(platform, service);
   }
   return { platform, service: agentServices.get(platform) };
 }
 
-function validateScopeForPlatform(scope, platform, projectPath) {
+function getAgentCapabilities(platform, service) {
+  const capabilities = service?.getCapabilities?.();
+  if (capabilities && typeof capabilities === 'object') return capabilities;
+  return getPlatformCatalog().get(platform)?.agentCapabilities || { projectScope: true, repoOperations: true };
+}
+
+function validateScopeForPlatform(scope, _platform, projectPath, capabilities = {}) {
   if (!['user', 'project'].includes(scope)) {
     return '无效的 scope，必须是 user 或 project';
   }
 
-  if (platform === 'codex' && scope !== 'user') {
-    return 'Codex 平台仅支持 user 作用域代理';
+  if (scope === 'project' && capabilities.projectScope === false) {
+    return '该平台仅支持 user 作用域代理';
   }
 
   if (scope === 'project' && !projectPath) {
@@ -73,11 +80,16 @@ function validateAgentFileName(fileName) {
   }
   return null;
 }
-
-function isCodexRepoOperationUnsupported(platform) {
-  return platform === 'codex';
+function rejectUnsupportedRepo(res, platform, service, operation = '') {
+  const capabilities = getAgentCapabilities(platform, service);
+  if (capabilities.repoOperations !== false) return false;
+  return res.status(400).json({
+    success: false,
+    message: service.getRepoOperationError?.(operation) || `该平台暂不支持远程仓库代理${operation ? ' ' + operation : ''}`
+  });
 }
 
+
 function validateRepoPath(repoPath) {
   if (typeof repoPath !== 'string' || !repoPath.trim()) {
     return '代理仓库路径不能为空';
@@ -211,14 +223,13 @@ function normalizeOptionalProjectPath(projectPath) {
 }
 
 router.use((req, res, next) => {
-  const rawPlatform = getRawPlatform(req);
-  if (rawPlatform && !isSupportedPlatform(rawPlatform)) {
-    return res.status(400).json({
-      success: false,
-      message: `不支持的平台: ${rawPlatform}`
-    });
+  try {
+    getPlatform(req);
+    return next();
+  } catch (error) {
+    console.error('[Agents API] Platform resolution failed:', error);
+    return sendApiError(res, error, error.status || 404);
   }
-  next();
 });
 
 /**
@@ -279,7 +290,6 @@ router.get('/stats', (req, res) => {
 });
 
 /**
- * 获取单个代理详情
  * GET /api/agents/:scope/:fileName
  */
 router.get('/:scope/:fileName', (req, res) => {
@@ -288,7 +298,7 @@ router.get('/:scope/:fileName', (req, res) => {
     const { scope, fileName } = req.params;
     const { projectPath } = req.query;
 
-    const scopeError = validateScopeForPlatform(scope, platform, projectPath);
+    const scopeError = validateScopeForPlatform(scope, platform, projectPath, getAgentCapabilities(platform, service));
     if (scopeError) {
       return res.status(400).json({
         success: false,
@@ -362,7 +372,6 @@ router.post('/', (req, res) => {
         message: '代理文件名不能为空'
       });
     }
-
     const fileNameError = validateAgentFileName(fileName);
     if (fileNameError) {
       return res.status(400).json({
@@ -371,7 +380,7 @@ router.post('/', (req, res) => {
       });
     }
 
-    const scopeError = validateScopeForPlatform(scope, platform, projectPath);
+    const scopeError = validateScopeForPlatform(scope, platform, projectPath, getAgentCapabilities(platform, service));
     if (scopeError) {
       return res.status(400).json({
         success: false,
@@ -437,7 +446,7 @@ router.put('/:scope/:fileName', (req, res) => {
       configContent
     } = req.body;
 
-    const scopeError = validateScopeForPlatform(scope, platform, projectPath);
+    const scopeError = validateScopeForPlatform(scope, platform, projectPath, getAgentCapabilities(platform, service));
     if (scopeError) {
       return res.status(400).json({
         success: false,
@@ -490,7 +499,6 @@ router.put('/:scope/:fileName', (req, res) => {
 });
 
 /**
- * 删除代理
  * DELETE /api/agents/:scope/:fileName
  */
 router.delete('/:scope/:fileName', (req, res) => {
@@ -499,7 +507,7 @@ router.delete('/:scope/:fileName', (req, res) => {
     const { scope, fileName } = req.params;
     const { projectPath } = req.query;
 
-    const scopeError = validateScopeForPlatform(scope, platform, projectPath);
+    const scopeError = validateScopeForPlatform(scope, platform, projectPath, getAgentCapabilities(platform, service));
     if (scopeError) {
       return res.status(400).json({
         success: false,
@@ -568,19 +576,10 @@ router.get('/all', async (req, res) => {
   }
 });
 
-/**
- * 获取仓库列表
- * GET /api/agents/repos
- */
 router.get('/repos', (req, res) => {
   try {
     const { platform, service } = getAgentsService(req);
-    if (isCodexRepoOperationUnsupported(platform)) {
-      return res.status(400).json({
-        success: false,
-        message: 'Codex 平台暂不支持远程仓库代理'
-      });
-    }
+    if (rejectUnsupportedRepo(res, platform, service)) return;
     const repos = service.getRepos();
     res.json({
       success: true,
@@ -601,12 +600,7 @@ router.get('/repos', (req, res) => {
 router.post('/repos', (req, res) => {
   try {
     const { platform, service } = getAgentsService(req);
-    if (isCodexRepoOperationUnsupported(platform)) {
-      return res.status(400).json({
-        success: false,
-        message: 'Codex 平台暂不支持远程仓库代理'
-      });
-    }
+    if (rejectUnsupportedRepo(res, platform, service)) return;
     const { owner, name, branch = 'main', directory = '', enabled = true } = req.body;
 
     if (!owner || !name) {
@@ -637,12 +631,7 @@ router.post('/repos', (req, res) => {
 router.delete('/repos/:owner/:name', (req, res) => {
   try {
     const { platform, service } = getAgentsService(req);
-    if (isCodexRepoOperationUnsupported(platform)) {
-      return res.status(400).json({
-        success: false,
-        message: 'Codex 平台暂不支持远程仓库代理'
-      });
-    }
+    if (rejectUnsupportedRepo(res, platform, service)) return;
     const { owner, name } = req.params;
     const { directory = '' } = req.query;
     const repos = service.removeRepo(owner, name, directory);
@@ -666,12 +655,7 @@ router.delete('/repos/:owner/:name', (req, res) => {
 router.put('/repos/:owner/:name/toggle', (req, res) => {
   try {
     const { platform, service } = getAgentsService(req);
-    if (isCodexRepoOperationUnsupported(platform)) {
-      return res.status(400).json({
-        success: false,
-        message: 'Codex 平台暂不支持远程仓库代理'
-      });
-    }
+    if (rejectUnsupportedRepo(res, platform, service)) return;
     const { owner, name } = req.params;
     const { enabled, directory = '' } = req.body;
 
@@ -696,12 +680,7 @@ router.put('/repos/:owner/:name/toggle', (req, res) => {
 router.post('/install', async (req, res) => {
   try {
     const { platform, service } = getAgentsService(req);
-    if (isCodexRepoOperationUnsupported(platform)) {
-      return res.status(400).json({
-        success: false,
-        message: 'Codex 平台暂不支持远程仓库代理安装'
-      });
-    }
+    if (rejectUnsupportedRepo(res, platform, service, 'install')) return;
     const agent = req.body;
 
     if (!agent || !agent.repoOwner || !agent.repoName) {
@@ -748,12 +727,7 @@ router.post('/install', async (req, res) => {
 router.post('/uninstall', (req, res) => {
   try {
     const { platform, service } = getAgentsService(req);
-    if (isCodexRepoOperationUnsupported(platform)) {
-      return res.status(400).json({
-        success: false,
-        message: 'Codex 平台暂不支持远程仓库代理卸载'
-      });
-    }
+    if (rejectUnsupportedRepo(res, platform, service, 'uninstall')) return;
     const { fileName } = req.body;
 
     if (!fileName) {

package/src/server/api/commands.js

@@ -5,25 +5,35 @@
  */
 
 const express = require('express');
-const { CommandsService } = require('../services/commands-service');
+const { CommandsService } = require('../../platforms/commands-service');
+const { resolvePlatform, createPlatformAccessError } = require('../../platforms/access');
 const { sendApiError } = require('./validation-errors');
 
 const router = express.Router();
-const SUPPORTED_PLATFORMS = ['claude', 'codex', 'gemini', 'opencode', 'omp'];
 const commandServices = new Map();
 
-function resolvePlatform(rawPlatform) {
-  return SUPPORTED_PLATFORMS.includes(rawPlatform) ? rawPlatform : 'claude';
+function getRawPlatform(req) {
+  const queryPlatform = typeof req.query?.platform === 'string' ? req.query.platform.trim() : '';
+  const bodyPlatform = typeof req.body?.platform === 'string' ? req.body.platform.trim() : '';
+  return queryPlatform || bodyPlatform || '';
 }
 
 function getPlatform(req) {
-  return resolvePlatform(req.query?.platform || req.body?.platform);
+  return resolvePlatform(getRawPlatform(req), { fallback: 'claude' }).key;
 }
 
 function getCommandsService(req) {
   const platform = getPlatform(req);
   if (!commandServices.has(platform)) {
-    commandServices.set(platform, new CommandsService(platform));
+    const service = new CommandsService(platform);
+    if (!service || typeof service.listCommands !== 'function') {
+      throw createPlatformAccessError('unsupported', {
+        platform,
+        capability: 'commands',
+        message: `Commands are not supported for ${platform}`
+      });
+    }
+    commandServices.set(platform, service);
   }
   return { platform, service: commandServices.get(platform) };
 }

package/src/server/api/config-registry.js

@@ -6,8 +6,47 @@
  */
 
 const express = require('express');
-const { ConfigRegistryService, CONFIG_TYPES, SUPPORTED_PLATFORMS } = require('../services/config-registry-service');
+const path = require('path');
+const { ConfigRegistryService, CONFIG_TYPES } = require('../services/config-registry-service');
 const { ConfigSyncManager } = require('../services/config-sync-manager');
+const { ControlManifestStore } = require('../services/control-manifest-store');
+const { EffectiveControlService } = require('../services/effective-control-service');
+const { PATHS } = require('../../config/paths');
+const { SkillProjectionService } = require('../services/skill-projection-service');
+const { validateKnownProjectCwd } = require('../services/project-path-validation');
+const { getPlatformCatalog } = require('../services/platform-catalog');
+const { getPlatformContext } = require('../platform-context');
+
+let effectiveControlService;
+
+function getEffectiveControlService() {
+  if (!effectiveControlService && PATHS.effectiveControlManifest) {
+    effectiveControlService = new EffectiveControlService({
+      store: new ControlManifestStore({
+        userPath: PATHS.effectiveControlManifest,
+        projectPathResolver: ({ projectPath }) => require('path').join(projectPath, '.ctx-control.json')
+      }),
+      projection: new SkillProjectionService({
+        registry: getPlatformContext().registry
+      })
+    });
+  }
+  return effectiveControlService;
+}
+
+async function resolveSkillControlScope(body = {}) {
+  const scope = body.scope || 'user';
+  if (scope === 'user') return { scope, projectPath: null };
+  if (scope !== 'project') throw new Error('Invalid scope: expected "user" or "project"');
+  const projectPath = await validateKnownProjectCwd(body.projectPath || body.cwd);
+  if (!projectPath) throw new Error('Project scope requires a valid projectPath');
+  return { scope, projectPath };
+}
+
+function fallbackSkillControlKey(name, platform, scopeOptions) {
+  const location = scopeOptions.scope === 'project' ? scopeOptions.projectPath : 'user';
+  return `skill:${platform}:${scopeOptions.scope}:${location}:local:${platform}:${name}`;
+}
 
 const router = express.Router();
 const registryService = new ConfigRegistryService();
@@ -16,8 +55,9 @@ const syncManager = new ConfigSyncManager();
 // Valid config types
 const VALID_TYPES = CONFIG_TYPES;
 
-// Valid platforms
-const VALID_PLATFORMS = SUPPORTED_PLATFORMS;
+function getValidPlatforms() {
+  return getPlatformCatalog().keys();
+}
 
 /**
  * Validate config type parameter
@@ -37,46 +77,78 @@ function validateType(type) {
  * @returns {string|null} Error message or null if valid
  */
 function validatePlatform(platform) {
-  if (!VALID_PLATFORMS.includes(platform)) {
-    return `Invalid platform: ${platform}. Must be one of: ${VALID_PLATFORMS.join(', ')}`;
+  const validPlatforms = getValidPlatforms();
+  if (!validPlatforms.includes(String(platform || '').trim().toLowerCase())) {
+    return `Invalid platform: ${platform}. Must be one of: ${validPlatforms.join(', ')}`;
   }
   return null;
 }
 
-const PLATFORM_SYNC_METHODS = {
-  claude: { sync: 'syncToClaude', remove: 'removeFromClaude' },
-  codex: { sync: 'syncToCodex', remove: 'removeFromCodex' },
-  gemini: { sync: 'syncToGemini', remove: 'removeFromGemini' },
-  opencode: { sync: 'syncToOpenCode', remove: 'removeFromOpenCode' },
-  omp: { sync: 'syncToOmp', remove: 'removeFromOmp' }
-};
-
-function syncPlatform(type, name, platform) {
-  const method = PLATFORM_SYNC_METHODS[platform]?.sync;
-  if (method && typeof syncManager[method] === 'function') {
-    syncManager[method](type, name);
+const RESERVED_REGISTRY_NAMES = new Set(['__proto__', 'constructor', 'prototype']);
+
+function normalizeRegistryName(name) {
+  const raw = String(name || '').replace(/\\/g, '/').trim();
+  const normalized = path.posix.normalize(raw).replace(/^(\.\/)+/, '');
+  if (
+    !raw
+    || raw.includes('\0')
+    || path.posix.isAbsolute(raw)
+    || !normalized
+    || normalized === '.'
+    || normalized === '..'
+    || normalized.startsWith('../')
+    || RESERVED_REGISTRY_NAMES.has(normalized)
+  ) {
+    throw new Error('Invalid config name');
   }
+  return normalized;
 }
 
-function removePlatform(type, name, platform) {
-  const method = PLATFORM_SYNC_METHODS[platform]?.remove;
-  if (method && typeof syncManager[method] === 'function') {
-    syncManager[method](type, name);
-  }
+async function syncPlatform(type, name, platform) {
+  return syncManager.syncToPlatform(platform, type, name);
 }
 
-function syncEnabledPlatforms(type, name, platforms = {}) {
-  for (const platform of VALID_PLATFORMS) {
-    if (platforms?.[platform]) {
-      syncPlatform(type, name, platform);
-    }
-  }
+async function removePlatform(type, name, platform) {
+  return syncManager.removeFromPlatform(platform, type, name);
 }
 
-function removeAllPlatforms(type, name) {
-  for (const platform of VALID_PLATFORMS) {
-    removePlatform(type, name, platform);
-  }
+async function syncEnabledPlatforms(type, name, platforms = {}) {
+  await Promise.all(getValidPlatforms()
+    .filter(platform => platforms?.[platform])
+    .map(platform => syncPlatform(type, name, platform)));
+}
+
+async function removeAllPlatforms(type, name) {
+  await Promise.all(getValidPlatforms().map(platform => removePlatform(type, name, platform)));
+}
+
+function getEffectiveSkillRegistryItems() {
+  registryService.migrateSkillControls?.();
+  const items = registryService.listItems('skills');
+  const controlService = getEffectiveControlService();
+  if (!controlService?.getSkill) return items;
+
+  return Object.fromEntries(Object.entries(items || {}).map(([rawName, item]) => {
+    const name = normalizeRegistryName(rawName);
+    const controlKeys = {};
+    let hasControl = false;
+    for (const platform of getValidPlatforms()) {
+      const controlKey = item.controlKey || fallbackSkillControlKey(name, platform, { scope: 'user', projectPath: null });
+      const control = controlService.getSkill(controlKey, { scope: 'user' });
+      if (!control) continue;
+      hasControl = true;
+      controlKeys[platform] = control.controlKey || controlKey;
+      platforms[platform] = control.enabled === true
+        && control.trust === 'approved'
+        && control.artifact?.state === 'ready';
+    }
+    return [
+      name,
+      hasControl
+        ? { ...item, enabled: Object.values(platforms).some(Boolean), platforms, controlKeys }
+        : { ...item, platforms }
+    ];
+  }));
 }
 
 /**
@@ -86,6 +158,19 @@ function removeAllPlatforms(type, name) {
 router.get('/stats', async (req, res) => {
   try {
     const stats = registryService.getStats();
+    if (stats?.byType?.skills) {
+      const effectiveSkills = Object.values(getEffectiveSkillRegistryItems());
+      const skillStats = {
+        total: effectiveSkills.length,
+        enabled: effectiveSkills.filter(item => item.enabled).length,
+        disabled: effectiveSkills.filter(item => !item.enabled).length
+      };
+      for (const platform of getValidPlatforms()) {
+        skillStats[platform] = effectiveSkills.filter(item => item.platforms?.[platform]).length;
+        stats.byPlatform[platform] += skillStats[platform] - (stats.byType.skills[platform] || 0);
+      }
+      stats.byType.skills = skillStats;
+    }
 
     res.json({
       success: true,
@@ -117,7 +202,9 @@ router.get('/:type', async (req, res) => {
       });
     }
 
-    const items = registryService.listItems(type);
+    const items = type === 'skills'
+      ? getEffectiveSkillRegistryItems()
+      : registryService.listItems(type);
 
     res.json({
       success: true,
@@ -163,7 +250,7 @@ router.post('/:type/import', async (req, res) => {
       for (const name of result.items) {
         const item = registryService.getItem(type, name);
         if (item && item.enabled && item.platforms?.claude) {
-          syncManager.syncToClaude(type, name);
+          await syncPlatform(type, name, 'claude');
         }
       }
     }
@@ -196,7 +283,7 @@ router.post('/:type/import', async (req, res) => {
 router.put('/:type/:name/toggle', async (req, res) => {
   try {
     const { type } = req.params;
-    const name = decodeURIComponent(req.params.name);
+    const name = normalizeRegistryName(decodeURIComponent(req.params.name));
     const { enabled } = req.body;
 
     const typeError = validateType(type);
@@ -223,25 +310,43 @@ router.put('/:type/:name/toggle', async (req, res) => {
       });
     }
 
-    // Update registry
-    const item = registryService.toggleEnabled(type, name, enabled);
+    if (type === 'skills') {
+      const platform = String(req.body.platform || 'claude').trim().toLowerCase();
+      const platformError = validatePlatform(platform);
+      if (platformError) {
+        return res.status(400).json({ success: false, message: platformError });
+      }
+      registryService.migrateSkillControls?.();
+      const controlService = getEffectiveControlService();
+      if (!controlService) throw new Error('Effective control service is unavailable');
+      const scopeOptions = await resolveSkillControlScope(req.body);
+      const item = controlService.setSkillEnabled({
+        controlKey: req.body.controlKey || existing.controlKey || fallbackSkillControlKey(name, platform, scopeOptions),
+        platform,
+        ...scopeOptions,
+        enabled
+      });
+      return res.json({ success: true, item });
+    }
 
-    // Apply sync based on new state
+    // Commands, agents and plugins retain the legacy registry behaviour.
+    const item = registryService.toggleEnabled(type, name, enabled);
     if (enabled) {
       // Sync to platforms where platform=true
-      syncEnabledPlatforms(type, name, item.platforms);
+      await syncEnabledPlatforms(type, name, item.platforms);
     } else {
-      // Remove from all platforms
-      removeAllPlatforms(type, name);
+      // Remove from all platforms.
+      await removeAllPlatforms(type, name);
     }
 
-    res.json({
+    return res.json({
       success: true,
       item
     });
   } catch (err) {
     console.error('[ConfigRegistry API] Toggle enabled error:', err);
-    res.status(500).json({
+    const status = /Invalid config name|Absolute path|Invalid platform/i.test(err.message || '') ? 400 : 500;
+    res.status(status).json({
       success: false,
       message: err.message
     });
@@ -259,8 +364,9 @@ router.put('/:type/:name/toggle', async (req, res) => {
  */
 router.put('/:type/:name/platform/:platform', async (req, res) => {
   try {
-    const { type, platform } = req.params;
-    const name = decodeURIComponent(req.params.name);
+    const { type } = req.params;
+    const platform = String(req.params.platform || '').trim().toLowerCase();
+    const name = normalizeRegistryName(decodeURIComponent(req.params.name));
     const { enabled } = req.body;
 
     const typeError = validateType(type);
@@ -295,25 +401,37 @@ router.put('/:type/:name/platform/:platform', async (req, res) => {
       });
     }
 
-    // Update registry
-    const item = registryService.togglePlatform(type, name, platform, enabled);
+    if (type === 'skills') {
+      registryService.migrateSkillControls?.();
+      const controlService = getEffectiveControlService();
+      if (!controlService) throw new Error('Effective control service is unavailable');
+      const scopeOptions = await resolveSkillControlScope(req.body);
+      const item = controlService.setSkillEnabled({
+        controlKey: req.body.controlKey || existing.controlKey || fallbackSkillControlKey(name, platform, scopeOptions),
+        platform,
+        ...scopeOptions,
+        enabled
+      });
+      return res.json({ success: true, item });
+    }
 
-    // Apply sync based on new state
+    const item = registryService.togglePlatform(type, name, platform, enabled);
     if (enabled && item.enabled) {
       // Sync to this platform (only if item is enabled)
-      syncPlatform(type, name, platform);
+      await syncPlatform(type, name, platform);
     } else {
-      // Remove from this platform
-      removePlatform(type, name, platform);
+      // Remove from this platform.
+      await removePlatform(type, name, platform);
     }
 
-    res.json({
+    return res.json({
       success: true,
       item
     });
   } catch (err) {
     console.error('[ConfigRegistry API] Toggle platform error:', err);
-    res.status(500).json({
+    const status = /Invalid config name|Absolute path|Invalid platform/i.test(err.message || '') ? 400 : 500;
+    res.status(status).json({
       success: false,
       message: err.message
     });
@@ -337,13 +455,42 @@ router.post('/:type/sync', async (req, res) => {
       });
     }
 
-    // Get all items for this type
-    const items = registryService.listItems(type);
+    const items = type === 'skills'
+      ? getEffectiveSkillRegistryItems()
+      : registryService.listItems(type);
+    if (type === 'skills') {
+      const controlService = getEffectiveControlService();
+      if (!controlService) throw new Error('Effective control service is unavailable');
+      const results = [];
+      const errors = [];
+      for (const [name, item] of Object.entries(items || {})) {
+        for (const platform of getValidPlatforms()) {
+          if (!item?.platforms?.[platform]) continue;
+          try {
+            results.push(controlService.setSkillEnabled({
+              controlKey: item.controlKeys?.[platform] || item.controlKey || fallbackSkillControlKey(name, platform, { scope: 'user', projectPath: null }),
+              platform,
+              scope: 'user',
+              enabled: true
+            }));
+          } catch (error) {
+            errors.push({ name, platform, message: error.message });
+          }
+        }
+      }
+      return res.json({
+        success: true,
+        type,
+        synced: results.filter(result => result.enabled).length,
+        removed: 0,
+        errors,
+        warnings: []
+      });
+    }
 
     // Sync all items based on their registry state
-    const result = syncManager.syncAll(type, items);
-
-    res.json({
+    const result = await syncManager.syncAll(type, items);
+    return res.json({
       success: true,
       type,
       synced: result.synced.length,
@@ -352,7 +499,7 @@ router.post('/:type/sync', async (req, res) => {
       warnings: result.warnings
     });
   } catch (err) {
-    console.error('[ConfigRegistry API] Sync all error:', err);
+    console.error('[ConfigRegistry API] Sync error:', err);
     res.status(500).json({
       success: false,
       message: err.message