crewcode-plugin-cli 0.1.0

package/templates/plugins/github-copilot-cli-provider/crewcode-plugin-api.js

@@ -0,0 +1,80 @@
+// Official CrewCode plugin browser helper. GENERATED from src/ — do not edit by hand.
+// Runs inside sandboxed plugin iframes. It never exposes Electron APIs.
+"use strict";
+(() => {
+  // src/create-api.ts
+  var CREWCODE_PLUGIN_API_VERSION = "0.1";
+  var RESERVED_NETWORK_MESSAGE = "crewcode.network.fetch is reserved in plugin API v0. Use an agentProvider runtime (http/sse-http/openai-compatible/websocket) for network access.";
+  var RESERVED_SECRETS_MESSAGE = "crewcode.secrets.get is reserved in plugin API v0. Use a provider apiKeyEnv or local CLI auth instead.";
+  function createCrewCodeApi(options = {}) {
+    var _a, _b;
+    const timeoutMs = (_a = options.timeoutMs) != null ? _a : 1e4;
+    const targetOrigin = (_b = options.targetOrigin) != null ? _b : "*";
+    const pending = /* @__PURE__ */ new Map();
+    const contextListeners = /* @__PURE__ */ new Set();
+    let seq = 0;
+    let latestContext = null;
+    const reportError = (err) => {
+      const error = err instanceof Error ? err : new Error(String(err));
+      window.parent.postMessage({ type: "crewcode:runtimeError", message: error.message, stack: error.stack }, targetOrigin);
+    };
+    window.addEventListener("error", (event) => {
+      var _a2;
+      return reportError((_a2 = event.error) != null ? _a2 : event.message);
+    });
+    window.addEventListener("unhandledrejection", (event) => reportError(event.reason));
+    const request = (method, params) => {
+      const id = `req-${++seq}`;
+      window.parent.postMessage({ type: "crewcode:request", id, method, params }, targetOrigin);
+      return new Promise((resolve, reject) => {
+        pending.set(id, { resolve, reject });
+        window.setTimeout(() => {
+          if (!pending.has(id)) return;
+          pending.delete(id);
+          reject(new Error("CrewCode plugin request timed out"));
+        }, timeoutMs);
+      });
+    };
+    window.addEventListener("message", (event) => {
+      if (event.source !== window.parent) return;
+      const msg = event.data;
+      if (!msg || typeof msg !== "object") return;
+      if (msg.type === "crewcode:context") {
+        latestContext = msg;
+        for (const listener of contextListeners) listener(latestContext);
+        return;
+      }
+      if (msg.type === "crewcode:response" && typeof msg.id === "string" && pending.has(msg.id)) {
+        const callbacks = pending.get(msg.id);
+        pending.delete(msg.id);
+        if (msg.ok) callbacks.resolve(msg.result);
+        else callbacks.reject(new Error(typeof msg.error === "string" ? msg.error : "plugin request failed"));
+      }
+    });
+    return {
+      apiVersion: CREWCODE_PLUGIN_API_VERSION,
+      request,
+      onContext(listener) {
+        contextListeners.add(listener);
+        if (latestContext) listener(latestContext);
+        return () => contextListeners.delete(listener);
+      },
+      getContext: () => latestContext,
+      workspace: {
+        listFiles: () => request("workspace:listFiles"),
+        readFile: (sub) => request("workspace:readFile", { sub }),
+        writeFile: (sub, text) => request("workspace:writeFile", { sub, text })
+      },
+      network: {
+        fetch: () => Promise.reject(new Error(RESERVED_NETWORK_MESSAGE))
+      },
+      secrets: {
+        get: () => Promise.reject(new Error(RESERVED_SECRETS_MESSAGE))
+      }
+    };
+  }
+
+  // src/browser-global.ts
+  window.createCrewCodeApi = createCrewCodeApi;
+  window.crewcode = createCrewCodeApi();
+})();

package/templates/plugins/github-copilot-cli-provider/crewcode.plugin.json

@@ -0,0 +1,42 @@
+{
+   "$schema": "../../../schemas/crewcode.plugin.schema.json",
+   "id": "github-copilot-cli-provider",
+   "name": "GitHub Copilot CLI Provider",
+   "version": "0.1.0",
+   "description": "Dogfoods a real exec-backed plugin agent provider using the GitHub CLI Copilot extension.",
+   "crewcode": {
+      "apiVersion": "0.1"
+   },
+   "permissions": [
+      "agent:provider",
+      "terminal:spawn"
+   ],
+   "contributes": {
+      "tabs": [
+         {
+            "id": "main",
+            "title": "Copilot CLI Provider",
+            "icon": "bot",
+            "entry": "panel.html",
+            "singleton": true
+         }
+      ],
+      "agentProviders": [
+         {
+            "id": "copilot-cli",
+            "title": "GitHub Copilot CLI",
+            "runtime": "exec",
+            "description": "Runs gh copilot through CrewCode's brokered exec provider runtime.",
+            "command": "gh",
+            "args": [
+               "copilot",
+               "-p",
+               "{{prompt}}"
+            ],
+            "models": [
+               "gpt-5.4-mini"
+            ]
+         }
+      ]
+   }
+}

package/templates/plugins/github-copilot-cli-provider/panel.html

@@ -0,0 +1 @@
+<!doctype html><html><head><meta charset="utf-8"><title>Copilot CLI Provider</title><style>body{margin:0;background:#0f120f;color:#e5e7eb;font:13px Inter,system-ui;padding:16px}.mono,code{font-family:'JetBrains Mono',monospace;color:#8b9a91}.card{border:1px solid #1c2f2f;background:#121712;padding:12px;margin-top:12px}</style></head><body><div class="mono">dogfood plugin</div><h1>github copilot cli provider</h1><p id="ctx">waiting for context…</p><div class="card">Requires <code>gh</code> plus the GitHub Copilot CLI extension. CrewCode spawns <code>gh copilot -p "{{prompt}}"</code> without shell interpretation.</div><div class="card">Permissions: <code>agent:provider</code>, <code>terminal:spawn</code>.</div><script src="crewcode-plugin-api.js"></script><script src="plugin.js"></script></body></html>

package/templates/plugins/github-copilot-cli-provider/plugin.js

@@ -0,0 +1 @@
+window.crewcode.onContext(ctx=>{document.getElementById('ctx').textContent=ctx.workspace?`${ctx.workspace.name} · ${ctx.workspace.kind}`:'no workspace'})

package/templates/plugins/handoff-pack/crewcode-plugin-api.js

@@ -0,0 +1,80 @@
+// Official CrewCode plugin browser helper. GENERATED from src/ — do not edit by hand.
+// Runs inside sandboxed plugin iframes. It never exposes Electron APIs.
+"use strict";
+(() => {
+  // src/create-api.ts
+  var CREWCODE_PLUGIN_API_VERSION = "0.1";
+  var RESERVED_NETWORK_MESSAGE = "crewcode.network.fetch is reserved in plugin API v0. Use an agentProvider runtime (http/sse-http/openai-compatible/websocket) for network access.";
+  var RESERVED_SECRETS_MESSAGE = "crewcode.secrets.get is reserved in plugin API v0. Use a provider apiKeyEnv or local CLI auth instead.";
+  function createCrewCodeApi(options = {}) {
+    var _a, _b;
+    const timeoutMs = (_a = options.timeoutMs) != null ? _a : 1e4;
+    const targetOrigin = (_b = options.targetOrigin) != null ? _b : "*";
+    const pending = /* @__PURE__ */ new Map();
+    const contextListeners = /* @__PURE__ */ new Set();
+    let seq = 0;
+    let latestContext = null;
+    const reportError = (err) => {
+      const error = err instanceof Error ? err : new Error(String(err));
+      window.parent.postMessage({ type: "crewcode:runtimeError", message: error.message, stack: error.stack }, targetOrigin);
+    };
+    window.addEventListener("error", (event) => {
+      var _a2;
+      return reportError((_a2 = event.error) != null ? _a2 : event.message);
+    });
+    window.addEventListener("unhandledrejection", (event) => reportError(event.reason));
+    const request = (method, params) => {
+      const id = `req-${++seq}`;
+      window.parent.postMessage({ type: "crewcode:request", id, method, params }, targetOrigin);
+      return new Promise((resolve, reject) => {
+        pending.set(id, { resolve, reject });
+        window.setTimeout(() => {
+          if (!pending.has(id)) return;
+          pending.delete(id);
+          reject(new Error("CrewCode plugin request timed out"));
+        }, timeoutMs);
+      });
+    };
+    window.addEventListener("message", (event) => {
+      if (event.source !== window.parent) return;
+      const msg = event.data;
+      if (!msg || typeof msg !== "object") return;
+      if (msg.type === "crewcode:context") {
+        latestContext = msg;
+        for (const listener of contextListeners) listener(latestContext);
+        return;
+      }
+      if (msg.type === "crewcode:response" && typeof msg.id === "string" && pending.has(msg.id)) {
+        const callbacks = pending.get(msg.id);
+        pending.delete(msg.id);
+        if (msg.ok) callbacks.resolve(msg.result);
+        else callbacks.reject(new Error(typeof msg.error === "string" ? msg.error : "plugin request failed"));
+      }
+    });
+    return {
+      apiVersion: CREWCODE_PLUGIN_API_VERSION,
+      request,
+      onContext(listener) {
+        contextListeners.add(listener);
+        if (latestContext) listener(latestContext);
+        return () => contextListeners.delete(listener);
+      },
+      getContext: () => latestContext,
+      workspace: {
+        listFiles: () => request("workspace:listFiles"),
+        readFile: (sub) => request("workspace:readFile", { sub }),
+        writeFile: (sub, text) => request("workspace:writeFile", { sub, text })
+      },
+      network: {
+        fetch: () => Promise.reject(new Error(RESERVED_NETWORK_MESSAGE))
+      },
+      secrets: {
+        get: () => Promise.reject(new Error(RESERVED_SECRETS_MESSAGE))
+      }
+    };
+  }
+
+  // src/browser-global.ts
+  window.createCrewCodeApi = createCrewCodeApi;
+  window.crewcode = createCrewCodeApi();
+})();

package/templates/plugins/handoff-pack/crewcode.plugin.json

@@ -0,0 +1,72 @@
+{
+  "$schema": "../../../schemas/crewcode.plugin.schema.json",
+  "id": "handoff-pack",
+  "name": "Handoff Pack",
+  "version": "0.1.0",
+  "description": "Builds a markdown handoff snapshot for agents and teams from local workspace signals.",
+  "crewcode": { "apiVersion": "0.1" },
+  "permissions": ["workspace:read", "workspace:write"],
+  "contributes": {
+    "tabs": [
+      {
+        "id": "main",
+        "title": "Handoff Pack",
+        "icon": "file-text",
+        "entry": "panel.html",
+        "singleton": true
+      }
+    ],
+    "sidebarPanels": [
+      {
+        "id": "brief",
+        "title": "Handoff",
+        "icon": "file-text",
+        "entry": "panel.html"
+      }
+    ],
+    "statusItems": [
+      {
+        "id": "handoff-status",
+        "title": "Handoff Pack",
+        "text": "handoff",
+        "icon": "file-text",
+        "sidebarPanel": "brief"
+      }
+    ],
+    "commands": [
+      {
+        "id": "open-handoff",
+        "title": "Open Handoff Pack",
+        "icon": "file-text",
+        "group": "Plugins"
+      }
+    ],
+    "chatActions": [
+      {
+        "id": "handoff-from-chat",
+        "title": "Open Handoff Pack",
+        "icon": "file-text",
+        "sidebarPanel": "brief",
+        "messageRole": "any"
+      }
+    ],
+    "chatHeaderItems": [
+      {
+        "id": "handoff-header",
+        "title": "Open Handoff Pack",
+        "text": "handoff",
+        "icon": "file-text",
+        "sidebarPanel": "brief"
+      }
+    ],
+    "editorActions": [
+      {
+        "id": "handoff-current-file",
+        "title": "Add current context to Handoff Pack",
+        "icon": "file-text",
+        "sidebarPanel": "brief",
+        "filePattern": "*"
+      }
+    ]
+  }
+}

package/templates/plugins/handoff-pack/panel.html

@@ -0,0 +1,63 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>Handoff Pack</title>
+  <style>
+    :root { color-scheme: dark; --bg:#0f120f; --panel:#121712; --border:#1c2f2f; --text:#e5e7eb; --muted:#8b9a91; --accent:#285a48; --danger:#fca5a5; --mono:'JetBrains Mono', ui-monospace, monospace; --sans:Inter, ui-sans-serif, system-ui, sans-serif; }
+    * { box-sizing:border-box; }
+    body { margin:0; background:var(--bg); color:var(--text); font-family:var(--sans); font-size:13px; }
+    header { padding:16px; border-bottom:1px solid var(--border); display:flex; justify-content:space-between; gap:12px; align-items:flex-start; }
+    h1 { margin:0; font-size:15px; font-weight:650; letter-spacing:-0.02em; }
+    p { margin:4px 0 0; color:var(--muted); line-height:1.45; }
+    button { background:var(--accent); color:#e6f0eb; border:1px solid #356b57; padding:7px 10px; border-radius:0; font-family:var(--mono); font-size:11px; cursor:pointer; }
+    button.secondary { background:transparent; border-color:var(--border); color:var(--muted); }
+    button.danger { background:transparent; border-color:#7f1d1d; color:var(--danger); }
+    main { padding:14px; display:grid; gap:12px; grid-template-columns: minmax(260px, 420px) minmax(320px, 1fr); }
+    .card { border:1px solid var(--border); background:var(--panel); padding:10px; }
+    .card h2 { margin:0 0 8px; font-size:12px; font-family:var(--mono); font-weight:500; color:#c8d8d0; }
+    label { display:grid; gap:5px; color:var(--muted); font-family:var(--mono); font-size:11px; margin-bottom:9px; }
+    input, textarea { width:100%; background:#0b0f0c; color:var(--text); border:1px solid var(--border); padding:8px; border-radius:0; font:12px var(--mono); }
+    textarea { min-height:96px; resize:vertical; }
+    pre { margin:0; min-height:420px; max-height:70vh; overflow:auto; white-space:pre-wrap; background:#0b0f0c; border:1px solid var(--border); padding:12px; font:12px/1.5 var(--mono); color:#d9e6df; }
+    .row { display:flex; gap:8px; flex-wrap:wrap; }
+    .eyebrow, .status { font-family:var(--mono); font-size:10px; color:var(--muted); text-transform:lowercase; }
+    .status { margin-top:8px; text-transform:none; }
+    .error { color:var(--danger); }
+    @media (max-width: 860px) { main { grid-template-columns:1fr; } header { display:grid; } }
+  </style>
+</head>
+<body>
+  <header>
+    <div>
+      <div class="eyebrow">dogfood plugin</div>
+      <h1>handoff pack</h1>
+      <p id="workspace">waiting for CrewCode context…</p>
+    </div>
+    <div class="row">
+      <button id="generate">generate</button>
+      <button id="save">save markdown</button>
+    </div>
+  </header>
+  <main>
+    <section class="card">
+      <h2>brief inputs</h2>
+      <label>objective <input id="objective" value="Prepare a concise handoff for the next agent or teammate." /></label>
+      <label>notes <textarea id="notes" placeholder="Add decisions, blockers, links, or context you want preserved."></textarea></label>
+      <label>focus paths <textarea id="focus" placeholder="src/main/plugins.ts&#10;docs/plugins.md"></textarea></label>
+      <div class="row">
+        <button id="copy" class="secondary">copy preview</button>
+        <button id="clear" class="danger">clear</button>
+      </div>
+      <div id="status" class="status">generates from README/package/docs plus selected focus paths.</div>
+    </section>
+    <section class="card">
+      <h2>markdown preview</h2>
+      <pre id="preview">click generate to build a handoff pack.</pre>
+    </section>
+  </main>
+  <script src="crewcode-plugin-api.js"></script>
+  <script src="plugin.js"></script>
+</body>
+</html>

package/templates/plugins/handoff-pack/plugin.js

@@ -0,0 +1,156 @@
+const els = {
+  workspace: document.getElementById('workspace'),
+  objective: document.getElementById('objective'),
+  notes: document.getElementById('notes'),
+  focus: document.getElementById('focus'),
+  preview: document.getElementById('preview'),
+  status: document.getElementById('status'),
+  generate: document.getElementById('generate'),
+  save: document.getElementById('save'),
+  copy: document.getElementById('copy'),
+  clear: document.getElementById('clear'),
+}
+
+let latestContext = null
+let latestMarkdown = ''
+
+function setStatus(message, danger = false) {
+  els.status.textContent = message
+  els.status.className = danger ? 'status error' : 'status'
+}
+
+function todayStamp() {
+  return new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19)
+}
+
+function escapeMd(value) {
+  return String(value || '').trim()
+}
+
+async function readOptional(path) {
+  try {
+    const { text } = await window.crewcode.workspace.readFile(path)
+    return text
+  } catch {
+    return ''
+  }
+}
+
+function summarizePackageJson(text) {
+  if (!text) return '- package metadata unavailable'
+  try {
+    const pkg = JSON.parse(text)
+    const scripts = pkg.scripts ? Object.keys(pkg.scripts).slice(0, 12).join(', ') : 'none'
+    const deps = Object.keys({ ...(pkg.dependencies || {}), ...(pkg.devDependencies || {}) }).slice(0, 16).join(', ')
+    return [`- package: ${pkg.name || 'unknown'}${pkg.version ? `@${pkg.version}` : ''}`, `- scripts: ${scripts}`, `- notable deps: ${deps || 'none listed'}`].join('\n')
+  } catch {
+    return '- package metadata could not be parsed'
+  }
+}
+
+function fileStats(files) {
+  const source = files.filter(file => /\.(ts|tsx|js|jsx|css|html|md|json|py|go|rs)$/i.test(file))
+  const docs = files.filter(file => /(^|\/)(readme|docs\/|.*\.md$)/i.test(file))
+  const tests = files.filter(file => /(test|spec)\.(ts|tsx|js|jsx)$/i.test(file))
+  return [`- total files: ${files.length}`, `- source-like files: ${source.length}`, `- docs/markdown files: ${docs.length}`, `- test files: ${tests.length}`].join('\n')
+}
+
+async function generate() {
+  els.generate.disabled = true
+  els.generate.textContent = 'generating…'
+  try {
+    const ctx = latestContext
+    const { files } = await window.crewcode.workspace.listFiles()
+    const readmePath = files.find(file => /^readme\.md$/i.test(file)) || files.find(file => /(^|\/)readme\.md$/i.test(file))
+    const packagePath = files.includes('package.json') ? 'package.json' : ''
+    const readme = readmePath ? await readOptional(readmePath) : ''
+    const pkg = packagePath ? await readOptional(packagePath) : ''
+    const focusPaths = els.focus.value.split(/\r?\n/).map(s => s.trim()).filter(Boolean).slice(0, 8)
+    const focusBlocks = []
+
+    for (const path of focusPaths) {
+      const text = await readOptional(path)
+      focusBlocks.push(text
+        ? `### ${path}\n\n\`\`\`\n${text.slice(0, 4000)}\n\`\`\``
+        : `### ${path}\n\n_unavailable or too large_`)
+    }
+
+    latestMarkdown = [
+      '# Handoff Pack',
+      '',
+      `Generated: ${new Date().toLocaleString()}`,
+      `Workspace: ${ctx?.workspace?.name || 'unknown'} (${ctx?.workspace?.kind || 'unknown'})`,
+      '',
+      '## Objective',
+      '',
+      escapeMd(els.objective.value) || '_not specified_',
+      '',
+      '## Human notes',
+      '',
+      escapeMd(els.notes.value) || '_none provided_',
+      '',
+      '## Workspace snapshot',
+      '',
+      fileStats(files),
+      '',
+      '## Package metadata',
+      '',
+      summarizePackageJson(pkg),
+      '',
+      '## README excerpt',
+      '',
+      readme ? readme.slice(0, 2200) : '_README not found_',
+      '',
+      '## Focus files',
+      '',
+      focusBlocks.length ? focusBlocks.join('\n\n') : '_no focus paths provided_',
+      '',
+      '## Suggested next-agent checklist',
+      '',
+      '- Confirm current branch and pending changes.',
+      '- Re-run relevant validation before editing broadly.',
+      '- Preserve plugin security boundaries and remote workspace behavior.',
+      '- Update docs if public plugin/API behavior changes.',
+      '',
+    ].join('\n')
+
+    els.preview.textContent = latestMarkdown
+    setStatus('handoff preview generated')
+  } catch (err) {
+    setStatus(err.message || 'failed to generate handoff', true)
+  } finally {
+    els.generate.disabled = false
+    els.generate.textContent = 'generate'
+  }
+}
+
+async function save() {
+  if (!latestMarkdown) await generate()
+  const path = `.crewcode/handoffs/handoff-${todayStamp()}.md`
+  try {
+    await window.crewcode.workspace.writeFile(path, latestMarkdown)
+    setStatus(`saved ${path}`)
+  } catch (err) {
+    setStatus(err.message || 'failed to save handoff', true)
+  }
+}
+
+window.crewcode.onContext(ctx => {
+  latestContext = ctx
+  els.workspace.textContent = ctx.workspace ? `${ctx.workspace.name} · ${ctx.workspace.kind}` : 'no active workspace'
+})
+
+els.generate.addEventListener('click', generate)
+els.save.addEventListener('click', save)
+els.copy.addEventListener('click', async () => {
+  if (!latestMarkdown) await generate()
+  await navigator.clipboard.writeText(latestMarkdown)
+  setStatus('copied preview to clipboard')
+})
+els.clear.addEventListener('click', () => {
+  els.notes.value = ''
+  els.focus.value = ''
+  latestMarkdown = ''
+  els.preview.textContent = 'click generate to build a handoff pack.'
+  setStatus('cleared local draft')
+})

package/templates/plugins/mcp-server-template/README.md

@@ -0,0 +1,22 @@
+# MCP server plugin template
+
+A starter layout for plugins that declare a local MCP server.
+
+## What it demonstrates
+
+- `mcp:server` permission and `contributes.mcpServers` manifest shape.
+- A companion tab panel explaining the server contribution.
+- A tiny stdio `server.mjs` skeleton for authors to replace with a real MCP SDK server.
+
+## Install locally
+
+```bash
+mkdir -p ~/.crewcode/plugins/mcp-server-template
+cp -R . ~/.crewcode/plugins/mcp-server-template
+```
+
+Refresh the Plugins page, approve the plugin, and enable its MCP server from CrewCode's MCP picker when available.
+
+## Notes
+
+The skeleton intentionally does not request network or secrets. Add those only after CrewCode's audited gates support your use case.

package/templates/plugins/mcp-server-template/crewcode-plugin-api.js

@@ -0,0 +1,80 @@
+// Official CrewCode plugin browser helper. GENERATED from src/ — do not edit by hand.
+// Runs inside sandboxed plugin iframes. It never exposes Electron APIs.
+"use strict";
+(() => {
+  // src/create-api.ts
+  var CREWCODE_PLUGIN_API_VERSION = "0.1";
+  var RESERVED_NETWORK_MESSAGE = "crewcode.network.fetch is reserved in plugin API v0. Use an agentProvider runtime (http/sse-http/openai-compatible/websocket) for network access.";
+  var RESERVED_SECRETS_MESSAGE = "crewcode.secrets.get is reserved in plugin API v0. Use a provider apiKeyEnv or local CLI auth instead.";
+  function createCrewCodeApi(options = {}) {
+    var _a, _b;
+    const timeoutMs = (_a = options.timeoutMs) != null ? _a : 1e4;
+    const targetOrigin = (_b = options.targetOrigin) != null ? _b : "*";
+    const pending = /* @__PURE__ */ new Map();
+    const contextListeners = /* @__PURE__ */ new Set();
+    let seq = 0;
+    let latestContext = null;
+    const reportError = (err) => {
+      const error = err instanceof Error ? err : new Error(String(err));
+      window.parent.postMessage({ type: "crewcode:runtimeError", message: error.message, stack: error.stack }, targetOrigin);
+    };
+    window.addEventListener("error", (event) => {
+      var _a2;
+      return reportError((_a2 = event.error) != null ? _a2 : event.message);
+    });
+    window.addEventListener("unhandledrejection", (event) => reportError(event.reason));
+    const request = (method, params) => {
+      const id = `req-${++seq}`;
+      window.parent.postMessage({ type: "crewcode:request", id, method, params }, targetOrigin);
+      return new Promise((resolve, reject) => {
+        pending.set(id, { resolve, reject });
+        window.setTimeout(() => {
+          if (!pending.has(id)) return;
+          pending.delete(id);
+          reject(new Error("CrewCode plugin request timed out"));
+        }, timeoutMs);
+      });
+    };
+    window.addEventListener("message", (event) => {
+      if (event.source !== window.parent) return;
+      const msg = event.data;
+      if (!msg || typeof msg !== "object") return;
+      if (msg.type === "crewcode:context") {
+        latestContext = msg;
+        for (const listener of contextListeners) listener(latestContext);
+        return;
+      }
+      if (msg.type === "crewcode:response" && typeof msg.id === "string" && pending.has(msg.id)) {
+        const callbacks = pending.get(msg.id);
+        pending.delete(msg.id);
+        if (msg.ok) callbacks.resolve(msg.result);
+        else callbacks.reject(new Error(typeof msg.error === "string" ? msg.error : "plugin request failed"));
+      }
+    });
+    return {
+      apiVersion: CREWCODE_PLUGIN_API_VERSION,
+      request,
+      onContext(listener) {
+        contextListeners.add(listener);
+        if (latestContext) listener(latestContext);
+        return () => contextListeners.delete(listener);
+      },
+      getContext: () => latestContext,
+      workspace: {
+        listFiles: () => request("workspace:listFiles"),
+        readFile: (sub) => request("workspace:readFile", { sub }),
+        writeFile: (sub, text) => request("workspace:writeFile", { sub, text })
+      },
+      network: {
+        fetch: () => Promise.reject(new Error(RESERVED_NETWORK_MESSAGE))
+      },
+      secrets: {
+        get: () => Promise.reject(new Error(RESERVED_SECRETS_MESSAGE))
+      }
+    };
+  }
+
+  // src/browser-global.ts
+  window.createCrewCodeApi = createCrewCodeApi;
+  window.crewcode = createCrewCodeApi();
+})();

package/templates/plugins/mcp-server-template/crewcode.plugin.json

@@ -0,0 +1,30 @@
+{
+  "$schema": "../../../schemas/crewcode.plugin.schema.json",
+  "id": "mcp-server-template",
+  "name": "MCP Server Template",
+  "version": "0.1.0",
+  "description": "Starter template for declaring a local MCP server contribution from a CrewCode plugin.",
+  "crewcode": { "apiVersion": "0.1" },
+  "permissions": ["mcp:server", "workspace:read"],
+  "contributes": {
+    "tabs": [
+      {
+        "id": "main",
+        "title": "MCP Template",
+        "icon": "terminal",
+        "entry": "panel.html",
+        "singleton": true
+      }
+    ],
+    "mcpServers": [
+      {
+        "id": "local-context",
+        "title": "Local Context MCP",
+        "command": "node",
+        "args": ["server.mjs"],
+        "category": "context",
+        "description": "Example stdio MCP server. Replace server.mjs with your tool implementation."
+      }
+    ]
+  }
+}

package/templates/plugins/mcp-server-template/panel.html

@@ -0,0 +1,25 @@
+<!doctype html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <title>MCP Server Template</title>
+  <style>
+    body { margin: 0; background: #0f120f; color: #e6f0eb; font: 13px Inter, system-ui, sans-serif; padding: 16px; }
+    h1 { margin: 6px 0 8px; font-size: 22px; }
+    p { color: #8b9a91; line-height: 1.5; }
+    code, pre, .mono { font-family: 'JetBrains Mono', monospace; color: #9fbfaf; }
+    .panel { border: 1px solid #1c2f2f; background: #121712; padding: 12px; margin-top: 12px; }
+  </style>
+</head>
+<body>
+  <div class="mono">crewcode plugin template / mcp server</div>
+  <h1>local context MCP</h1>
+  <p>This plugin declares an MCP server contribution. CrewCode owns enablement and spawning; the plugin UI is only a companion panel.</p>
+  <pre class="panel">contributes.mcpServers[0]
+command: node
+args: server.mjs</pre>
+  <pre id="ctx" class="panel">waiting for context…</pre>
+  <script src="crewcode-plugin-api.js"></script>
+  <script src="plugin.js"></script>
+</body>
+</html>