crewcode-plugin-cli 0.1.0

package/templates/plugins/mcp-server-template/plugin.js

@@ -0,0 +1,9 @@
+const ctx = document.getElementById('ctx')
+
+window.crewcode.onContext(message => {
+  ctx.textContent = JSON.stringify({
+    source: message.openContext?.source,
+    workspace: message.workspace?.name,
+    root: message.workspace?.root,
+  }, null, 2)
+})

package/templates/plugins/mcp-server-template/server.mjs

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+
+// Minimal stdio MCP skeleton for template authors.
+// Replace this with a real MCP SDK server before using it in production.
+process.stdin.setEncoding('utf8')
+
+process.stdin.on('data', chunk => {
+  for (const line of chunk.split('\n')) {
+    const trimmed = line.trim()
+    if (!trimmed) continue
+    let message
+    try {
+      message = JSON.parse(trimmed)
+    } catch {
+      continue
+    }
+
+    if (message.method === 'initialize') {
+      process.stdout.write(JSON.stringify({
+        jsonrpc: '2.0',
+        id: message.id,
+        result: {
+          protocolVersion: '2024-11-05',
+          capabilities: { tools: {} },
+          serverInfo: { name: 'crewcode-local-context-template', version: '0.1.0' },
+        },
+      }) + '\n')
+    }
+  }
+})

package/templates/plugins/mission-ci-widget/crewcode-plugin-api.js

@@ -0,0 +1,80 @@
+// Official CrewCode plugin browser helper. GENERATED from src/ — do not edit by hand.
+// Runs inside sandboxed plugin iframes. It never exposes Electron APIs.
+"use strict";
+(() => {
+  // src/create-api.ts
+  var CREWCODE_PLUGIN_API_VERSION = "0.1";
+  var RESERVED_NETWORK_MESSAGE = "crewcode.network.fetch is reserved in plugin API v0. Use an agentProvider runtime (http/sse-http/openai-compatible/websocket) for network access.";
+  var RESERVED_SECRETS_MESSAGE = "crewcode.secrets.get is reserved in plugin API v0. Use a provider apiKeyEnv or local CLI auth instead.";
+  function createCrewCodeApi(options = {}) {
+    var _a, _b;
+    const timeoutMs = (_a = options.timeoutMs) != null ? _a : 1e4;
+    const targetOrigin = (_b = options.targetOrigin) != null ? _b : "*";
+    const pending = /* @__PURE__ */ new Map();
+    const contextListeners = /* @__PURE__ */ new Set();
+    let seq = 0;
+    let latestContext = null;
+    const reportError = (err) => {
+      const error = err instanceof Error ? err : new Error(String(err));
+      window.parent.postMessage({ type: "crewcode:runtimeError", message: error.message, stack: error.stack }, targetOrigin);
+    };
+    window.addEventListener("error", (event) => {
+      var _a2;
+      return reportError((_a2 = event.error) != null ? _a2 : event.message);
+    });
+    window.addEventListener("unhandledrejection", (event) => reportError(event.reason));
+    const request = (method, params) => {
+      const id = `req-${++seq}`;
+      window.parent.postMessage({ type: "crewcode:request", id, method, params }, targetOrigin);
+      return new Promise((resolve, reject) => {
+        pending.set(id, { resolve, reject });
+        window.setTimeout(() => {
+          if (!pending.has(id)) return;
+          pending.delete(id);
+          reject(new Error("CrewCode plugin request timed out"));
+        }, timeoutMs);
+      });
+    };
+    window.addEventListener("message", (event) => {
+      if (event.source !== window.parent) return;
+      const msg = event.data;
+      if (!msg || typeof msg !== "object") return;
+      if (msg.type === "crewcode:context") {
+        latestContext = msg;
+        for (const listener of contextListeners) listener(latestContext);
+        return;
+      }
+      if (msg.type === "crewcode:response" && typeof msg.id === "string" && pending.has(msg.id)) {
+        const callbacks = pending.get(msg.id);
+        pending.delete(msg.id);
+        if (msg.ok) callbacks.resolve(msg.result);
+        else callbacks.reject(new Error(typeof msg.error === "string" ? msg.error : "plugin request failed"));
+      }
+    });
+    return {
+      apiVersion: CREWCODE_PLUGIN_API_VERSION,
+      request,
+      onContext(listener) {
+        contextListeners.add(listener);
+        if (latestContext) listener(latestContext);
+        return () => contextListeners.delete(listener);
+      },
+      getContext: () => latestContext,
+      workspace: {
+        listFiles: () => request("workspace:listFiles"),
+        readFile: (sub) => request("workspace:readFile", { sub }),
+        writeFile: (sub, text) => request("workspace:writeFile", { sub, text })
+      },
+      network: {
+        fetch: () => Promise.reject(new Error(RESERVED_NETWORK_MESSAGE))
+      },
+      secrets: {
+        get: () => Promise.reject(new Error(RESERVED_SECRETS_MESSAGE))
+      }
+    };
+  }
+
+  // src/browser-global.ts
+  window.createCrewCodeApi = createCrewCodeApi;
+  window.crewcode = createCrewCodeApi();
+})();

package/templates/plugins/mission-ci-widget/crewcode.plugin.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "../../../schemas/crewcode.plugin.schema.json",
+  "id": "mission-ci-widget",
+  "name": "Mission CI Widget",
+  "version": "0.1.0",
+  "description": "Dogfoods mission-control widget contributions with display-only CI status.",
+  "crewcode": { "apiVersion": "0.1" },
+  "permissions": [],
+  "contributes": {
+    "sidebarPanels": [{ "id": "ci", "title": "CI Widget", "icon": "activity", "entry": "panel.html" }],
+    "missionWidgets": [{ "id": "ci-status", "title": "CI Status", "text": "ci: local checks", "icon": "activity", "sidebarPanel": "ci" }]
+  }
+}

package/templates/plugins/mission-ci-widget/panel.html

@@ -0,0 +1 @@
+<!doctype html><html><head><meta charset="utf-8"><title>Mission CI Widget</title><style>body{margin:0;background:#0f120f;color:#e5e7eb;font:13px Inter,system-ui;padding:16px}.mono{font-family:'JetBrains Mono',monospace;color:#8b9a91}.card{border:1px solid #1c2f2f;background:#121712;padding:12px;margin-top:12px}.ok{color:#86efac}</style></head><body><div class="mono">dogfood plugin</div><h1>mission ci widget</h1><p id="ctx">waiting for context…</p><div class="card"><div class="mono">local checks</div><h2 class="ok">ready</h2><p>Display-only mission widget. Future versions can route CI data through approved network/MCP capabilities.</p></div><script src="crewcode-plugin-api.js"></script><script src="plugin.js"></script></body></html>

package/templates/plugins/mission-ci-widget/plugin.js

@@ -0,0 +1 @@
+window.crewcode.onContext(ctx=>{document.getElementById('ctx').textContent=ctx.workspace?`${ctx.workspace.name} · ${ctx.workspace.kind}`:'mission widget has no active workspace'})

package/templates/plugins/mock-agent-provider/crewcode-plugin-api.js

@@ -0,0 +1,80 @@
+// Official CrewCode plugin browser helper. GENERATED from src/ — do not edit by hand.
+// Runs inside sandboxed plugin iframes. It never exposes Electron APIs.
+"use strict";
+(() => {
+  // src/create-api.ts
+  var CREWCODE_PLUGIN_API_VERSION = "0.1";
+  var RESERVED_NETWORK_MESSAGE = "crewcode.network.fetch is reserved in plugin API v0. Use an agentProvider runtime (http/sse-http/openai-compatible/websocket) for network access.";
+  var RESERVED_SECRETS_MESSAGE = "crewcode.secrets.get is reserved in plugin API v0. Use a provider apiKeyEnv or local CLI auth instead.";
+  function createCrewCodeApi(options = {}) {
+    var _a, _b;
+    const timeoutMs = (_a = options.timeoutMs) != null ? _a : 1e4;
+    const targetOrigin = (_b = options.targetOrigin) != null ? _b : "*";
+    const pending = /* @__PURE__ */ new Map();
+    const contextListeners = /* @__PURE__ */ new Set();
+    let seq = 0;
+    let latestContext = null;
+    const reportError = (err) => {
+      const error = err instanceof Error ? err : new Error(String(err));
+      window.parent.postMessage({ type: "crewcode:runtimeError", message: error.message, stack: error.stack }, targetOrigin);
+    };
+    window.addEventListener("error", (event) => {
+      var _a2;
+      return reportError((_a2 = event.error) != null ? _a2 : event.message);
+    });
+    window.addEventListener("unhandledrejection", (event) => reportError(event.reason));
+    const request = (method, params) => {
+      const id = `req-${++seq}`;
+      window.parent.postMessage({ type: "crewcode:request", id, method, params }, targetOrigin);
+      return new Promise((resolve, reject) => {
+        pending.set(id, { resolve, reject });
+        window.setTimeout(() => {
+          if (!pending.has(id)) return;
+          pending.delete(id);
+          reject(new Error("CrewCode plugin request timed out"));
+        }, timeoutMs);
+      });
+    };
+    window.addEventListener("message", (event) => {
+      if (event.source !== window.parent) return;
+      const msg = event.data;
+      if (!msg || typeof msg !== "object") return;
+      if (msg.type === "crewcode:context") {
+        latestContext = msg;
+        for (const listener of contextListeners) listener(latestContext);
+        return;
+      }
+      if (msg.type === "crewcode:response" && typeof msg.id === "string" && pending.has(msg.id)) {
+        const callbacks = pending.get(msg.id);
+        pending.delete(msg.id);
+        if (msg.ok) callbacks.resolve(msg.result);
+        else callbacks.reject(new Error(typeof msg.error === "string" ? msg.error : "plugin request failed"));
+      }
+    });
+    return {
+      apiVersion: CREWCODE_PLUGIN_API_VERSION,
+      request,
+      onContext(listener) {
+        contextListeners.add(listener);
+        if (latestContext) listener(latestContext);
+        return () => contextListeners.delete(listener);
+      },
+      getContext: () => latestContext,
+      workspace: {
+        listFiles: () => request("workspace:listFiles"),
+        readFile: (sub) => request("workspace:readFile", { sub }),
+        writeFile: (sub, text) => request("workspace:writeFile", { sub, text })
+      },
+      network: {
+        fetch: () => Promise.reject(new Error(RESERVED_NETWORK_MESSAGE))
+      },
+      secrets: {
+        get: () => Promise.reject(new Error(RESERVED_SECRETS_MESSAGE))
+      }
+    };
+  }
+
+  // src/browser-global.ts
+  window.createCrewCodeApi = createCrewCodeApi;
+  window.crewcode = createCrewCodeApi();
+})();

package/templates/plugins/mock-agent-provider/crewcode.plugin.json

@@ -0,0 +1,38 @@
+{
+  "$schema": "../../../schemas/crewcode.plugin.schema.json",
+  "id": "mock-agent-provider",
+  "name": "Mock Agent Provider",
+  "version": "0.1.0",
+  "description": "Dogfoods plugin-powered agent provider registration without shell, network, or secret access.",
+  "crewcode": { "apiVersion": "0.1" },
+  "permissions": ["agent:provider"],
+  "contributes": {
+    "tabs": [
+      {
+        "id": "main",
+        "title": "Mock Agent Provider",
+        "icon": "bot",
+        "entry": "panel.html",
+        "singleton": true
+      }
+    ],
+    "statusItems": [
+      {
+        "id": "mock-agent-status",
+        "title": "Mock Agent Provider",
+        "text": "mock agent",
+        "icon": "bot",
+        "tab": "main"
+      }
+    ],
+    "agentProviders": [
+      {
+        "id": "mock-reviewer",
+        "title": "Mock Reviewer",
+        "runtime": "mock",
+        "description": "Echoes a deterministic bridge response to validate plugin agent lifecycle.",
+        "models": ["mock-default", "mock-fast"]
+      }
+    ]
+  }
+}

package/templates/plugins/mock-agent-provider/panel.html

@@ -0,0 +1,45 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>Mock Agent Provider</title>
+  <style>
+    :root { color-scheme: dark; --bg:#0f120f; --panel:#121712; --border:#1c2f2f; --text:#e5e7eb; --muted:#8b9a91; --accent:#285a48; --mono:'JetBrains Mono', ui-monospace, monospace; --sans:Inter, ui-sans-serif, system-ui, sans-serif; }
+    * { box-sizing:border-box; }
+    body { margin:0; background:var(--bg); color:var(--text); font:13px var(--sans); }
+    header { padding:16px; border-bottom:1px solid var(--border); }
+    h1 { margin:0; font-size:15px; letter-spacing:-0.02em; }
+    p { color:var(--muted); line-height:1.5; margin:6px 0 0; }
+    main { padding:14px; display:grid; gap:12px; }
+    .card { border:1px solid var(--border); background:var(--panel); padding:12px; }
+    .eyebrow, code, li { font-family:var(--mono); }
+    .eyebrow { color:var(--muted); font-size:10px; }
+    code { color:#dff3e9; font-size:11px; }
+    ul { margin:8px 0 0; padding-left:18px; color:#cdd7d1; }
+    li { margin:5px 0; font-size:12px; }
+  </style>
+</head>
+<body>
+  <header>
+    <div class="eyebrow">dogfood plugin</div>
+    <h1>mock agent provider</h1>
+    <p id="workspace">waiting for CrewCode context…</p>
+  </header>
+  <main>
+    <section class="card">
+      <p>This plugin contributes a bridge agent named <code>Mock Reviewer</code>.</p>
+      <ul>
+        <li>permission: <code>agent:provider</code></li>
+        <li>runtime: <code>mock</code></li>
+        <li>no shell, terminal, network, secrets, or filesystem access</li>
+      </ul>
+    </section>
+    <section class="card">
+      <p>After approval, open a chat or crew config and select <code>Mock Reviewer</code>. Sending a prompt should produce a deterministic mock response through the normal bridge lifecycle.</p>
+    </section>
+  </main>
+  <script src="crewcode-plugin-api.js"></script>
+  <script src="plugin.js"></script>
+</body>
+</html>

package/templates/plugins/mock-agent-provider/plugin.js

@@ -0,0 +1,3 @@
+window.crewcode.onContext(ctx => {
+  document.getElementById('workspace').textContent = ctx.workspace ? `${ctx.workspace.name} · ${ctx.workspace.kind}` : 'no active workspace'
+})

package/templates/plugins/openai-compatible-provider/README.md

@@ -0,0 +1,17 @@
+# OpenAI compatible provider template
+
+Use this when a local, hosted, or company gateway exposes the OpenAI `/v1/chat/completions` request/response shape.
+
+## Try the local server
+
+```bash
+node server.mjs
+```
+
+Then copy/approve the plugin and select `OpenAI Compatible Agent` in CrewCode.
+
+## Manifest notes
+
+- `runtime: "openai-compatible"`
+- `endpoint` can be a base URL like `http://localhost:4000/v1`; CrewCode appends `/chat/completions`.
+- `apiKeyEnv` is optional. If set and the environment variable exists, CrewCode sends `Authorization: Bearer ...`.

package/templates/plugins/openai-compatible-provider/crewcode-plugin-api.js

@@ -0,0 +1,80 @@
+// Official CrewCode plugin browser helper. GENERATED from src/ — do not edit by hand.
+// Runs inside sandboxed plugin iframes. It never exposes Electron APIs.
+"use strict";
+(() => {
+  // src/create-api.ts
+  var CREWCODE_PLUGIN_API_VERSION = "0.1";
+  var RESERVED_NETWORK_MESSAGE = "crewcode.network.fetch is reserved in plugin API v0. Use an agentProvider runtime (http/sse-http/openai-compatible/websocket) for network access.";
+  var RESERVED_SECRETS_MESSAGE = "crewcode.secrets.get is reserved in plugin API v0. Use a provider apiKeyEnv or local CLI auth instead.";
+  function createCrewCodeApi(options = {}) {
+    var _a, _b;
+    const timeoutMs = (_a = options.timeoutMs) != null ? _a : 1e4;
+    const targetOrigin = (_b = options.targetOrigin) != null ? _b : "*";
+    const pending = /* @__PURE__ */ new Map();
+    const contextListeners = /* @__PURE__ */ new Set();
+    let seq = 0;
+    let latestContext = null;
+    const reportError = (err) => {
+      const error = err instanceof Error ? err : new Error(String(err));
+      window.parent.postMessage({ type: "crewcode:runtimeError", message: error.message, stack: error.stack }, targetOrigin);
+    };
+    window.addEventListener("error", (event) => {
+      var _a2;
+      return reportError((_a2 = event.error) != null ? _a2 : event.message);
+    });
+    window.addEventListener("unhandledrejection", (event) => reportError(event.reason));
+    const request = (method, params) => {
+      const id = `req-${++seq}`;
+      window.parent.postMessage({ type: "crewcode:request", id, method, params }, targetOrigin);
+      return new Promise((resolve, reject) => {
+        pending.set(id, { resolve, reject });
+        window.setTimeout(() => {
+          if (!pending.has(id)) return;
+          pending.delete(id);
+          reject(new Error("CrewCode plugin request timed out"));
+        }, timeoutMs);
+      });
+    };
+    window.addEventListener("message", (event) => {
+      if (event.source !== window.parent) return;
+      const msg = event.data;
+      if (!msg || typeof msg !== "object") return;
+      if (msg.type === "crewcode:context") {
+        latestContext = msg;
+        for (const listener of contextListeners) listener(latestContext);
+        return;
+      }
+      if (msg.type === "crewcode:response" && typeof msg.id === "string" && pending.has(msg.id)) {
+        const callbacks = pending.get(msg.id);
+        pending.delete(msg.id);
+        if (msg.ok) callbacks.resolve(msg.result);
+        else callbacks.reject(new Error(typeof msg.error === "string" ? msg.error : "plugin request failed"));
+      }
+    });
+    return {
+      apiVersion: CREWCODE_PLUGIN_API_VERSION,
+      request,
+      onContext(listener) {
+        contextListeners.add(listener);
+        if (latestContext) listener(latestContext);
+        return () => contextListeners.delete(listener);
+      },
+      getContext: () => latestContext,
+      workspace: {
+        listFiles: () => request("workspace:listFiles"),
+        readFile: (sub) => request("workspace:readFile", { sub }),
+        writeFile: (sub, text) => request("workspace:writeFile", { sub, text })
+      },
+      network: {
+        fetch: () => Promise.reject(new Error(RESERVED_NETWORK_MESSAGE))
+      },
+      secrets: {
+        get: () => Promise.reject(new Error(RESERVED_SECRETS_MESSAGE))
+      }
+    };
+  }
+
+  // src/browser-global.ts
+  window.createCrewCodeApi = createCrewCodeApi;
+  window.crewcode = createCrewCodeApi();
+})();

package/templates/plugins/openai-compatible-provider/crewcode.plugin.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "../../../schemas/crewcode.plugin.schema.json",
+  "id": "openai-compatible-provider",
+  "name": "OpenAI Compatible Provider",
+  "version": "0.1.0",
+  "description": "Template for local/company model gateways that expose the OpenAI chat completions shape.",
+  "crewcode": { "apiVersion": "0.1" },
+  "permissions": ["agent:provider", "network:fetch"],
+  "contributes": {
+    "tabs": [
+      { "id": "main", "title": "OpenAI Compatible", "icon": "bot", "entry": "panel.html", "singleton": true }
+    ],
+    "agentProviders": [
+      {
+        "id": "local-openai-compatible",
+        "title": "OpenAI Compatible Agent",
+        "runtime": "openai-compatible",
+        "description": "POSTs to /v1/chat/completions and reads choices[0].message.content.",
+        "endpoint": "http://localhost:4000/v1",
+        "apiKeyEnv": "OPENAI_COMPATIBLE_API_KEY",
+        "timeoutMs": 90000,
+        "maxOutputBytes": 524288,
+        "responsePath": "choices.0.message.content",
+        "models": ["local-default"]
+      }
+    ]
+  }
+}

package/templates/plugins/openai-compatible-provider/panel.html

@@ -0,0 +1 @@
+<!doctype html><html><head><meta charset="utf-8"><title>OpenAI Compatible Provider</title><style>body{margin:0;background:#0f120f;color:#e5e7eb;font:13px Inter,system-ui;padding:16px}.mono,code{font-family:'JetBrains Mono',monospace;color:#8b9a91}.card{border:1px solid #1c2f2f;background:#121712;padding:12px;margin-top:12px}pre{white-space:pre-wrap}</style></head><body><div class="mono">agent provider template</div><h1>openai compatible provider</h1><p id="ctx">waiting for context…</p><div class="card">CrewCode POSTs to <code>http://localhost:4000/v1/chat/completions</code> with <code>{ model, messages }</code>.</div><div class="card">If <code>OPENAI_COMPATIBLE_API_KEY</code> is set, CrewCode sends it as a bearer token. The manifest never stores secrets.</div><pre class="card">return JSON with choices[0].message.content</pre><script src="crewcode-plugin-api.js"></script><script src="plugin.js"></script></body></html>

package/templates/plugins/openai-compatible-provider/plugin.js

@@ -0,0 +1,4 @@
+const ctx = document.getElementById('ctx')
+window.crewcode.onContext(message => {
+  ctx.textContent = `workspace: ${message.workspace?.name || 'none'} · source: ${message.openContext?.source || 'unknown'}`
+})

package/templates/plugins/openai-compatible-provider/server.mjs

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+
+import http from 'node:http'
+
+const server = http.createServer(async (req, res) => {
+  if (req.method !== 'POST' || req.url !== '/v1/chat/completions') {
+    res.writeHead(404)
+    res.end('not found')
+    return
+  }
+  let body = ''
+  for await (const chunk of req) body += chunk
+  const json = JSON.parse(body || '{}')
+  const prompt = json.messages?.at(-1)?.content ?? ''
+  res.setHeader('Content-Type', 'application/json')
+  res.end(JSON.stringify({
+    choices: [{ message: { content: `local openai-compatible template received ${String(prompt).length} characters.` } }],
+  }))
+})
+
+server.listen(4000, () => console.log('openai-compatible template listening on http://localhost:4000/v1/chat/completions'))

package/templates/plugins/repo-radar/crewcode-plugin-api.js

@@ -0,0 +1,80 @@
+// Official CrewCode plugin browser helper. GENERATED from src/ — do not edit by hand.
+// Runs inside sandboxed plugin iframes. It never exposes Electron APIs.
+"use strict";
+(() => {
+  // src/create-api.ts
+  var CREWCODE_PLUGIN_API_VERSION = "0.1";
+  var RESERVED_NETWORK_MESSAGE = "crewcode.network.fetch is reserved in plugin API v0. Use an agentProvider runtime (http/sse-http/openai-compatible/websocket) for network access.";
+  var RESERVED_SECRETS_MESSAGE = "crewcode.secrets.get is reserved in plugin API v0. Use a provider apiKeyEnv or local CLI auth instead.";
+  function createCrewCodeApi(options = {}) {
+    var _a, _b;
+    const timeoutMs = (_a = options.timeoutMs) != null ? _a : 1e4;
+    const targetOrigin = (_b = options.targetOrigin) != null ? _b : "*";
+    const pending = /* @__PURE__ */ new Map();
+    const contextListeners = /* @__PURE__ */ new Set();
+    let seq = 0;
+    let latestContext = null;
+    const reportError = (err) => {
+      const error = err instanceof Error ? err : new Error(String(err));
+      window.parent.postMessage({ type: "crewcode:runtimeError", message: error.message, stack: error.stack }, targetOrigin);
+    };
+    window.addEventListener("error", (event) => {
+      var _a2;
+      return reportError((_a2 = event.error) != null ? _a2 : event.message);
+    });
+    window.addEventListener("unhandledrejection", (event) => reportError(event.reason));
+    const request = (method, params) => {
+      const id = `req-${++seq}`;
+      window.parent.postMessage({ type: "crewcode:request", id, method, params }, targetOrigin);
+      return new Promise((resolve, reject) => {
+        pending.set(id, { resolve, reject });
+        window.setTimeout(() => {
+          if (!pending.has(id)) return;
+          pending.delete(id);
+          reject(new Error("CrewCode plugin request timed out"));
+        }, timeoutMs);
+      });
+    };
+    window.addEventListener("message", (event) => {
+      if (event.source !== window.parent) return;
+      const msg = event.data;
+      if (!msg || typeof msg !== "object") return;
+      if (msg.type === "crewcode:context") {
+        latestContext = msg;
+        for (const listener of contextListeners) listener(latestContext);
+        return;
+      }
+      if (msg.type === "crewcode:response" && typeof msg.id === "string" && pending.has(msg.id)) {
+        const callbacks = pending.get(msg.id);
+        pending.delete(msg.id);
+        if (msg.ok) callbacks.resolve(msg.result);
+        else callbacks.reject(new Error(typeof msg.error === "string" ? msg.error : "plugin request failed"));
+      }
+    });
+    return {
+      apiVersion: CREWCODE_PLUGIN_API_VERSION,
+      request,
+      onContext(listener) {
+        contextListeners.add(listener);
+        if (latestContext) listener(latestContext);
+        return () => contextListeners.delete(listener);
+      },
+      getContext: () => latestContext,
+      workspace: {
+        listFiles: () => request("workspace:listFiles"),
+        readFile: (sub) => request("workspace:readFile", { sub }),
+        writeFile: (sub, text) => request("workspace:writeFile", { sub, text })
+      },
+      network: {
+        fetch: () => Promise.reject(new Error(RESERVED_NETWORK_MESSAGE))
+      },
+      secrets: {
+        get: () => Promise.reject(new Error(RESERVED_SECRETS_MESSAGE))
+      }
+    };
+  }
+
+  // src/browser-global.ts
+  window.createCrewCodeApi = createCrewCodeApi;
+  window.crewcode = createCrewCodeApi();
+})();

package/templates/plugins/repo-radar/crewcode.plugin.json

@@ -0,0 +1,55 @@
+{
+  "$schema": "../../../schemas/crewcode.plugin.schema.json",
+  "id": "repo-radar",
+  "name": "Repo Radar",
+  "version": "0.1.0",
+  "description": "Scans a workspace for TODOs, risky files, and large source files to help agents orient quickly.",
+  "crewcode": { "apiVersion": "0.1" },
+  "permissions": ["workspace:read"],
+  "contributes": {
+    "tabs": [
+      {
+        "id": "main",
+        "title": "Repo Radar",
+        "icon": "radar",
+        "entry": "panel.html",
+        "singleton": true
+      }
+    ],
+    "sidebarPanels": [
+      {
+        "id": "radar",
+        "title": "Radar",
+        "icon": "radar",
+        "entry": "panel.html"
+      }
+    ],
+    "statusItems": [
+      {
+        "id": "radar-status",
+        "title": "Repo Radar",
+        "text": "radar",
+        "icon": "radar",
+        "sidebarPanel": "radar"
+      }
+    ],
+    "editorActions": [
+      {
+        "id": "scan-current-context",
+        "title": "Scan workspace with Repo Radar",
+        "icon": "radar",
+        "sidebarPanel": "radar",
+        "filePattern": "*"
+      }
+    ],
+    "chatActions": [
+      {
+        "id": "open-radar-from-chat",
+        "title": "Open Repo Radar",
+        "icon": "radar",
+        "sidebarPanel": "radar",
+        "messageRole": "any"
+      }
+    ]
+  }
+}