feihong-code 0.6.0 → 7.0.0

package/dist/web/server.js

@@ -129,10 +129,58 @@ function startWebServer(opts = {}) {
         const content = (0, memory_1.readShortTerm)(memoryConfig, date ? new Date(date) : undefined);
         res.json({ ok: true, content, date: date || new Date().toISOString().split('T')[0] });
     });
+    // 手动添加一条短期记忆
+    app.post('/api/memory/short', (req, res) => {
+        const body = (req.body ?? {});
+        const type = ['task', 'fix', 'feature', 'error', 'note'].find((t) => t === body.type) || 'note';
+        const title = typeof body.title === 'string' && body.title.trim() ? body.title.trim() : '';
+        const content = typeof body.content === 'string' && body.content.trim() ? body.content.trim() : '';
+        if (!title || !content) {
+            res.status(400).json({ ok: false, error: '缺少 title 或 content 字段' });
+            return;
+        }
+        try {
+            const path = (0, memory_1.appendShortTerm)(memoryConfig, { type, title, content });
+            res.json({ ok: true, path, message: '已添加到短期记忆' });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: '添加失败: ' + e.message });
+        }
+    });
     app.get('/api/memory/long', (_req, res) => {
         const content = (0, memory_1.readLongTerm)(memoryConfig);
         res.json({ ok: true, content });
     });
+    // 写入/编辑长期记忆（用户自定义需要记忆的内容）
+    app.post('/api/memory/long', (req, res) => {
+        const body = (req.body ?? {});
+        const content = typeof body.content === 'string' ? body.content : '';
+        try {
+            (0, memory_1.writeLongTerm)(memoryConfig, content);
+            res.json({ ok: true, message: '长期记忆已保存' });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: '保存失败: ' + e.message });
+        }
+    });
+    // 追加一条长期记忆
+    app.post('/api/memory/long/append', (req, res) => {
+        const body = (req.body ?? {});
+        const category = typeof body.category === 'string' && body.category.trim() ? body.category.trim() : '自定义';
+        const title = typeof body.title === 'string' && body.title.trim() ? body.title.trim() : '';
+        const content = typeof body.content === 'string' && body.content.trim() ? body.content.trim() : '';
+        if (!title || !content) {
+            res.status(400).json({ ok: false, error: '缺少 title 或 content 字段' });
+            return;
+        }
+        try {
+            const id = (0, memory_1.appendLongTerm)(memoryConfig, { category, title, content, summarizedFrom: '手动添加' });
+            res.json({ ok: true, id, message: '已追加到长期记忆' });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: '追加失败: ' + e.message });
+        }
+    });
     app.get('/api/memory/stats', (_req, res) => {
         const stats = (0, memory_1.getMemoryStats)(memoryConfig);
         res.json({ ok: true, ...stats });
@@ -402,6 +450,70 @@ function startWebServer(opts = {}) {
             res.status(500).json({ ok: false, error: '读取目录失败: ' + e.message });
         }
     });
+    // 新建文件夹
+    app.post('/api/workspace/mkdir', (req, res) => {
+        const body = (req.body ?? {});
+        const parent = typeof body?.parent === 'string' ? body.parent.trim() : '';
+        const name = typeof body?.name === 'string' ? body.name.trim() : '';
+        if (!parent || !name) {
+            res.status(400).json({ ok: false, error: '缺少 parent 或 name 字段' });
+            return;
+        }
+        // 文件夹名安全校验：禁止路径分隔符和特殊字符
+        if (/[\\/:*?"<>|]/.test(name)) {
+            res.status(400).json({ ok: false, error: '文件夹名包含非法字符' });
+            return;
+        }
+        const parentDir = (0, path_1.resolve)(parent);
+        if (!assertPathAllowed(parentDir, res))
+            return;
+        const newDir = (0, path_1.join)(parentDir, name);
+        try {
+            if ((0, fs_1.existsSync)(newDir)) {
+                res.status(409).json({ ok: false, error: '文件夹已存在' });
+                return;
+            }
+            (0, fs_1.mkdirSync)(newDir, { recursive: true });
+            res.json({ ok: true, path: newDir });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: '创建文件夹失败: ' + e.message });
+        }
+    });
+    // 重命名文件夹
+    app.post('/api/workspace/rename', (req, res) => {
+        const body = (req.body ?? {});
+        const path = typeof body?.path === 'string' ? body.path.trim() : '';
+        const newName = typeof body?.newName === 'string' ? body.newName.trim() : '';
+        if (!path || !newName) {
+            res.status(400).json({ ok: false, error: '缺少 path 或 newName 字段' });
+            return;
+        }
+        if (/[\\/:*?"<>|]/.test(newName)) {
+            res.status(400).json({ ok: false, error: '文件夹名包含非法字符' });
+            return;
+        }
+        const oldPath = (0, path_1.resolve)(path);
+        if (!assertPathAllowed(oldPath, res))
+            return;
+        if (!(0, fs_1.existsSync)(oldPath) || !(0, fs_1.statSync)(oldPath).isDirectory()) {
+            res.status(400).json({ ok: false, error: '目标不是文件夹或不存在' });
+            return;
+        }
+        const parentDir = (0, path_1.dirname)(oldPath);
+        const newPath = (0, path_1.join)(parentDir, newName);
+        try {
+            if ((0, fs_1.existsSync)(newPath)) {
+                res.status(409).json({ ok: false, error: '同名文件夹已存在' });
+                return;
+            }
+            (0, fs_1.renameSync)(oldPath, newPath);
+            res.json({ ok: true, path: newPath });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: '重命名失败: ' + e.message });
+        }
+    });
     app.post('/api/files/read', (req, res) => {
         const body = (req.body ?? {});
         const file = typeof body?.path === 'string' ? body.path.trim() : '';
@@ -475,7 +587,514 @@ function startWebServer(opts = {}) {
             res.status(500).json({ ok: false, error: '上传失败: ' + e.message });
         }
     });
-    /* ========== 技能市场（插件市场）：聚合 ClawHub + Agent-Foundry ========== */
+    /* ========== 系统截图（调用 Windows 截图工具，不弹浏览器分享框） ========== */
+    app.post('/api/screenshot', (_req, res) => {
+        try {
+            // Windows 10/11 内置截图工具（和 Win+Shift+S 效果一样）
+            // 调用后直接进入截图模式，用户截图后图片保存到剪贴板
+            if (process.platform === 'win32') {
+                (0, child_process_1.exec)('explorer.exe ms-screenclip:', (err) => {
+                    if (err) {
+                        res.status(500).json({ ok: false, error: '启动截图工具失败: ' + err.message });
+                    }
+                    else {
+                        res.json({ ok: true, message: '截图工具已启动，截图后按 Ctrl+V 粘贴到输入框' });
+                    }
+                });
+            }
+            else {
+                res.status(400).json({ ok: false, error: '仅支持 Windows 系统' });
+            }
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: '启动截图工具失败: ' + e.message });
+        }
+    });
+    /* ========== 电脑操作（鼠标/键盘/截图，用语言控制电脑） ========== */
+    // 执行 PowerShell 命令的辅助函数
+    const runPowerShell = (script) => {
+        return new Promise((resolve, reject) => {
+            const ps = (0, child_process_1.spawn)('powershell.exe', ['-NoProfile', '-Command', script], {
+                windowsHide: true,
+                stdio: ['ignore', 'pipe', 'pipe'],
+            });
+            let stdout = '';
+            let stderr = '';
+            ps.stdout.on('data', (d) => { stdout += d.toString(); });
+            ps.stderr.on('data', (d) => { stderr += d.toString(); });
+            ps.on('close', (code) => {
+                if (code === 0)
+                    resolve(stdout.trim());
+                else
+                    reject(new Error(stderr || `PowerShell exited with code ${code}`));
+            });
+            ps.on('error', reject);
+        });
+    };
+    // 截图
+    app.post('/api/computer/screenshot', async (_req, res) => {
+        try {
+            if (process.platform !== 'win32') {
+                res.status(400).json({ ok: false, error: '仅支持 Windows 系统' });
+                return;
+            }
+            const script = `
+        Add-Type -AssemblyName System.Windows.Forms
+        Add-Type -AssemblyName System.Drawing
+        $screen = [System.Windows.Forms.Screen]::PrimaryScreen
+        $bounds = $screen.Bounds
+        $bitmap = New-Object System.Drawing.Bitmap $bounds.Width, $bounds.Height
+        $graphics = [System.Drawing.Graphics]::FromImage($bitmap)
+        $graphics.CopyFromScreen($bounds.Location, [System.Drawing.Point]::Empty, $bounds.Size)
+        $ms = New-Object System.IO.MemoryStream
+        $bitmap.Save($ms, [System.Drawing.Imaging.ImageFormat]::Png)
+        $bytes = $ms.ToArray()
+        [Convert]::ToBase64String($bytes)
+      `;
+            const base64 = await runPowerShell(script);
+            res.json({ ok: true, image: 'data:image/png;base64,' + base64, width: 1920, height: 1080 });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: '截图失败: ' + e.message });
+        }
+    });
+    // 移动鼠标
+    app.post('/api/computer/mouse/move', async (req, res) => {
+        try {
+            const body = (req.body ?? {});
+            const x = parseInt(body?.x ?? '0');
+            const y = parseInt(body?.y ?? '0');
+            if (isNaN(x) || isNaN(y)) {
+                res.status(400).json({ ok: false, error: '缺少 x 或 y 坐标' });
+                return;
+            }
+            const script = `
+        Add-Type @"
+        using System;
+        using System.Runtime.InteropServices;
+        public class MouseHelper {
+            [DllImport("user32.dll")]
+            public static extern bool SetCursorPos(int X, int Y);
+        }
+"@
+        [MouseHelper]::SetCursorPos(${x}, ${y}) | Out-Null
+        Write-Output "ok"
+      `;
+            await runPowerShell(script);
+            res.json({ ok: true, x, y });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: '移动鼠标失败: ' + e.message });
+        }
+    });
+    // 点击鼠标
+    app.post('/api/computer/mouse/click', async (req, res) => {
+        try {
+            const body = (req.body ?? {});
+            const button = (body?.button ?? 'left');
+            const x = body?.x !== undefined ? parseInt(body.x) : null;
+            const y = body?.y !== undefined ? parseInt(body.y) : null;
+            const doubleClick = body?.double === true;
+            let clickFlag = '0x0002'; // left down
+            let upFlag = '0x0004'; // left up
+            if (button === 'right') {
+                clickFlag = '0x0008';
+                upFlag = '0x0010';
+            }
+            const movePart = (x !== null && y !== null) ? `[MouseHelper]::SetCursorPos(${x}, ${y}) | Out-Null; Start-Sleep -Milliseconds 100;` : '';
+            const clickPart = doubleClick
+                ? `[MouseHelper]::mouse_event(${clickFlag}, 0, 0, 0, 0); [MouseHelper]::mouse_event(${upFlag}, 0, 0, 0, 0); Start-Sleep -Milliseconds 100; [MouseHelper]::mouse_event(${clickFlag}, 0, 0, 0, 0); [MouseHelper]::mouse_event(${upFlag}, 0, 0, 0, 0);`
+                : `[MouseHelper]::mouse_event(${clickFlag}, 0, 0, 0, 0); [MouseHelper]::mouse_event(${upFlag}, 0, 0, 0, 0);`;
+            const script = `
+        Add-Type @"
+        using System;
+        using System.Runtime.InteropServices;
+        public class MouseHelper {
+            [DllImport("user32.dll")]
+            public static extern bool SetCursorPos(int X, int Y);
+            [DllImport("user32.dll")]
+            public static extern void mouse_event(uint dwFlags, uint dx, uint dy, uint cButtons, uint dwExtraInfo);
+        }
+"@
+        ${movePart}
+        ${clickPart}
+        Write-Output "ok"
+      `;
+            await runPowerShell(script);
+            res.json({ ok: true, button, x, y, double: doubleClick });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: '点击鼠标失败: ' + e.message });
+        }
+    });
+    // 输入文字
+    app.post('/api/computer/keyboard/type', async (req, res) => {
+        try {
+            const body = (req.body ?? {});
+            const text = (body?.text ?? '');
+            if (!text) {
+                res.status(400).json({ ok: false, error: '缺少 text 字段' });
+                return;
+            }
+            // SendKeys 需要转义特殊字符
+            const escaped = text.replace(/([+^%~(){}])/g, '{$1}');
+            const script = `
+        Add-Type -AssemblyName System.Windows.Forms
+        [System.Windows.Forms.SendKeys]::SendWait('${escaped.replace(/'/g, "''")}')
+        Write-Output "ok"
+      `;
+            await runPowerShell(script);
+            res.json({ ok: true, text });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: '输入文字失败: ' + e.message });
+        }
+    });
+    // 按键（快捷键）
+    app.post('/api/computer/keyboard/press', async (req, res) => {
+        try {
+            const body = (req.body ?? {});
+            const key = (body?.key ?? '');
+            if (!key) {
+                res.status(400).json({ ok: false, error: '缺少 key 字段' });
+                return;
+            }
+            const script = `
+        Add-Type -AssemblyName System.Windows.Forms
+        [System.Windows.Forms.SendKeys]::SendWait('${key.replace(/'/g, "''")}')
+        Write-Output "ok"
+      `;
+            await runPowerShell(script);
+            res.json({ ok: true, key });
+        }
+        catch (e) {
+            res.status(500).json({ ok: false, error: '按键失败: ' + e.message });
+        }
+    });
+    const nodesFile = (0, path_1.join)(homeDir, 'nodes.json');
+    const sourcesFile = (0, path_1.join)(homeDir, 'sources.json');
+    const nodeDataDir = (0, path_1.join)(homeDir, 'node-data');
+    function loadNodes() {
+        const list = loadJsonFile(nodesFile, []);
+        return Array.isArray(list) ? list : [];
+    }
+    function saveNodes(list) {
+        return saveJsonFile(nodesFile, list);
+    }
+    function loadSources() {
+        const list = loadJsonFile(sourcesFile, []);
+        return Array.isArray(list) ? list : [];
+    }
+    function saveSources(list) {
+        return saveJsonFile(sourcesFile, list);
+    }
+    function loadNodeData(nodeId, type, fallback) {
+        const file = (0, path_1.join)(nodeDataDir, nodeId, `${type}.json`);
+        return loadJsonFile(file, fallback);
+    }
+    function saveNodeData(nodeId, type, data) {
+        const file = (0, path_1.join)(nodeDataDir, nodeId, `${type}.json`);
+        return saveJsonFile(file, data);
+    }
+    // 测试节点连接
+    async function testNodeConnection(node) {
+        try {
+            if (node.type === 'local') {
+                const dir = (0, path_1.resolve)(node.url);
+                if (!(0, fs_1.existsSync)(dir) || !(0, fs_1.statSync)(dir).isDirectory()) {
+                    return { ok: false, error: '本地目录不存在' };
+                }
+                const caps = [];
+                if ((0, fs_1.existsSync)((0, path_1.join)(dir, 'templates.json')))
+                    caps.push('templates');
+                if ((0, fs_1.existsSync)((0, path_1.join)(dir, 'skills.json')))
+                    caps.push('skills');
+                if ((0, fs_1.existsSync)((0, path_1.join)(dir, 'office.json')))
+                    caps.push('office');
+                return { ok: true, capabilities: caps.length ? caps : node.capabilities };
+            }
+            // http / git 类型：请求节点的 /api/health 或 manifest
+            const url = node.type === 'http'
+                ? node.url.replace(/\/$/, '') + '/api/health'
+                : node.url;
+            const headers = { 'User-Agent': 'fhcode-node/1.0' };
+            if (node.apiKey)
+                headers['Authorization'] = 'Bearer ' + node.apiKey;
+            const r = await fetchWithRetry(url, 10000, 0);
+            if (!r.ok)
+                return { ok: false, error: `HTTP ${r.status}` };
+            if (node.type === 'http') {
+                const data = await r.json().catch(() => ({}));
+                return { ok: true, capabilities: Array.isArray(data.capabilities) ? data.capabilities : node.capabilities };
+            }
+            return { ok: true, capabilities: node.capabilities };
+        }
+        catch (e) {
+            return { ok: false, error: e?.message || '连接失败' };
+        }
+    }
+    // 从节点同步数据
+    async function syncNodeData(node) {
+        const synced = [];
+        try {
+            if (node.type === 'local') {
+                const dir = (0, path_1.resolve)(node.url);
+                for (const cap of node.capabilities) {
+                    const file = (0, path_1.join)(dir, `${cap}.json`);
+                    if ((0, fs_1.existsSync)(file)) {
+                        const data = JSON.parse((0, fs_1.readFileSync)(file, 'utf8'));
+                        saveNodeData(node.id, cap, data);
+                        synced.push(cap);
+                    }
+                }
+                return { ok: true, synced };
+            }
+            // http 类型
+            if (node.type === 'http') {
+                const base = node.url.replace(/\/$/, '');
+                const headers = { 'User-Agent': 'fhcode-node/1.0' };
+                if (node.apiKey)
+                    headers['Authorization'] = 'Bearer ' + node.apiKey;
+                for (const cap of node.capabilities) {
+                    try {
+                        const r = await fetch(`${base}/api/node/${cap}`, { headers, signal: AbortSignal.timeout(15000) });
+                        if (r.ok) {
+                            const data = await r.json();
+                            const list = Array.isArray(data) ? data : (data.items || data.list || []);
+                            saveNodeData(node.id, cap, list);
+                            synced.push(cap);
+                        }
+                    }
+                    catch { /* skip */ }
+                }
+                return { ok: true, synced };
+            }
+            // git 类型：暂不支持自动 clone，标记为需手动同步
+            return { ok: false, error: 'Git 节点暂不支持自动同步，请使用本地目录方式', synced };
+        }
+        catch (e) {
+            return { ok: false, error: e?.message || '同步失败', synced };
+        }
+    }
+    // 节点 CRUD
+    app.get('/api/nodes', (_req, res) => {
+        const nodes = loadNodes().map((n) => {
+            const { apiKey, ...rest } = n;
+            return { ...rest, hasApiKey: !!apiKey };
+        });
+        res.json({ ok: true, nodes });
+    });
+    app.post('/api/nodes', async (req, res) => {
+        const body = (req.body ?? {});
+        const name = typeof body.name === 'string' ? body.name.trim() : '';
+        const type = ['http', 'git', 'local'].find((t) => t === body.type) || 'http';
+        const url = typeof body.url === 'string' ? body.url.trim() : '';
+        const apiKey = typeof body.apiKey === 'string' && body.apiKey.trim() ? body.apiKey.trim() : undefined;
+        const capabilities = Array.isArray(body.capabilities) ? body.capabilities.filter((c) => ['templates', 'skills', 'office'].includes(c)) : ['templates', 'skills', 'office'];
+        if (!name || !url) {
+            res.status(400).json({ ok: false, error: '缺少 name 或 url 字段' });
+            return;
+        }
+        const node = {
+            id: `node_${Date.now()}_${(0, crypto_1.randomUUID)().slice(0, 4)}`,
+            name, type, url, apiKey, capabilities,
+            status: 'disconnected',
+            enabled: true,
+            createdAt: new Date().toISOString(),
+        };
+        const list = loadNodes();
+        list.push(node);
+        if (!saveNodes(list)) {
+            res.status(500).json({ ok: false, error: '节点保存失败' });
+            return;
+        }
+        // 自动测试连接
+        const test = await testNodeConnection(node);
+        node.status = test.ok ? 'connected' : 'error';
+        node.lastError = test.error;
+        if (test.capabilities)
+            node.capabilities = test.capabilities;
+        saveNodes(list);
+        res.status(201).json({ ok: true, node: { ...node, apiKey: undefined, hasApiKey: !!apiKey }, connection: test });
+    });
+    app.put('/api/nodes/:id', async (req, res) => {
+        const list = loadNodes();
+        const idx = list.findIndex((n) => n.id === req.params.id);
+        if (idx < 0) {
+            res.status(404).json({ ok: false, error: '节点不存在' });
+            return;
+        }
+        const body = (req.body ?? {});
+        const node = list[idx];
+        if (typeof body.name === 'string' && body.name.trim())
+            node.name = body.name.trim();
+        if (typeof body.url === 'string' && body.url.trim())
+            node.url = body.url.trim();
+        if (typeof body.type === 'string' && ['http', 'git', 'local'].includes(body.type))
+            node.type = body.type;
+        if (typeof body.apiKey === 'string')
+            node.apiKey = body.apiKey.trim() ? body.apiKey.trim() : undefined;
+        if (Array.isArray(body.capabilities))
+            node.capabilities = body.capabilities.filter((c) => ['templates', 'skills', 'office'].includes(c));
+        if (typeof body.enabled === 'boolean')
+            node.enabled = body.enabled;
+        if (!saveNodes(list)) {
+            res.status(500).json({ ok: false, error: '节点更新失败' });
+            return;
+        }
+        res.json({ ok: true, node: { ...node, apiKey: undefined, hasApiKey: !!node.apiKey } });
+    });
+    app.delete('/api/nodes/:id', (req, res) => {
+        const list = loadNodes();
+        const next = list.filter((n) => n.id !== req.params.id);
+        if (next.length === list.length) {
+            res.status(404).json({ ok: false, error: '节点不存在' });
+            return;
+        }
+        if (!saveNodes(next)) {
+            res.status(500).json({ ok: false, error: '节点删除失败' });
+            return;
+        }
+        res.json({ ok: true });
+    });
+    app.post('/api/nodes/:id/test', async (req, res) => {
+        const node = loadNodes().find((n) => n.id === req.params.id);
+        if (!node) {
+            res.status(404).json({ ok: false, error: '节点不存在' });
+            return;
+        }
+        const test = await testNodeConnection(node);
+        // 更新节点状态
+        const list = loadNodes();
+        const idx = list.findIndex((n) => n.id === node.id);
+        if (idx >= 0) {
+            list[idx].status = test.ok ? 'connected' : 'error';
+            list[idx].lastError = test.error;
+            if (test.capabilities)
+                list[idx].capabilities = test.capabilities;
+            saveNodes(list);
+        }
+        res.json({ ok: test.ok, error: test.error, capabilities: test.capabilities });
+    });
+    app.post('/api/nodes/:id/sync', async (req, res) => {
+        const node = loadNodes().find((n) => n.id === req.params.id);
+        if (!node) {
+            res.status(404).json({ ok: false, error: '节点不存在' });
+            return;
+        }
+        const result = await syncNodeData(node);
+        const list = loadNodes();
+        const idx = list.findIndex((n) => n.id === node.id);
+        if (idx >= 0) {
+            list[idx].lastSyncAt = new Date().toISOString();
+            list[idx].status = result.ok ? 'connected' : 'error';
+            list[idx].lastError = result.error;
+            saveNodes(list);
+        }
+        res.json({ ok: result.ok, error: result.error, synced: result.synced });
+    });
+    // 自定义来源 CRUD
+    app.get('/api/sources', (_req, res) => {
+        res.json({ ok: true, sources: loadSources() });
+    });
+    app.post('/api/sources', (req, res) => {
+        const body = (req.body ?? {});
+        const name = typeof body.name === 'string' ? body.name.trim() : '';
+        const type = ['templates', 'skills', 'office'].find((t) => t === body.type);
+        const url = typeof body.url === 'string' ? body.url.trim() : '';
+        const nodeId = typeof body.nodeId === 'string' && body.nodeId.trim() ? body.nodeId.trim() : undefined;
+        if (!name || !type || !url) {
+            res.status(400).json({ ok: false, error: '缺少 name / type / url 字段' });
+            return;
+        }
+        const source = {
+            id: `src_${Date.now()}_${(0, crypto_1.randomUUID)().slice(0, 4)}`,
+            name, type, url, nodeId,
+            enabled: true,
+            createdAt: new Date().toISOString(),
+        };
+        const list = loadSources();
+        list.push(source);
+        if (!saveSources(list)) {
+            res.status(500).json({ ok: false, error: '来源保存失败' });
+            return;
+        }
+        res.status(201).json({ ok: true, source });
+    });
+    app.put('/api/sources/:id', (req, res) => {
+        const list = loadSources();
+        const idx = list.findIndex((s) => s.id === req.params.id);
+        if (idx < 0) {
+            res.status(404).json({ ok: false, error: '来源不存在' });
+            return;
+        }
+        const body = (req.body ?? {});
+        const source = list[idx];
+        if (typeof body.name === 'string' && body.name.trim())
+            source.name = body.name.trim();
+        if (typeof body.url === 'string' && body.url.trim())
+            source.url = body.url.trim();
+        if (typeof body.enabled === 'boolean')
+            source.enabled = body.enabled;
+        if (typeof body.nodeId === 'string')
+            source.nodeId = body.nodeId.trim() || undefined;
+        if (!saveSources(list)) {
+            res.status(500).json({ ok: false, error: '来源更新失败' });
+            return;
+        }
+        res.json({ ok: true, source });
+    });
+    app.delete('/api/sources/:id', (req, res) => {
+        const list = loadSources();
+        const next = list.filter((s) => s.id !== req.params.id);
+        if (next.length === list.length) {
+            res.status(404).json({ ok: false, error: '来源不存在' });
+            return;
+        }
+        if (!saveSources(next)) {
+            res.status(500).json({ ok: false, error: '来源删除失败' });
+            return;
+        }
+        res.json({ ok: true });
+    });
+    // 从所有启用的节点收集数据
+    function collectNodeTemplates() {
+        const result = [];
+        for (const node of loadNodes()) {
+            if (!node.enabled || !node.capabilities.includes('templates'))
+                continue;
+            const data = loadNodeData(node.id, 'templates', []);
+            if (Array.isArray(data)) {
+                result.push(...data.map((t) => ({ ...t, source: node.name, nodeId: node.id })));
+            }
+        }
+        return result;
+    }
+    function collectNodeSkills() {
+        const result = [];
+        for (const node of loadNodes()) {
+            if (!node.enabled || !node.capabilities.includes('skills'))
+                continue;
+            const data = loadNodeData(node.id, 'skills', []);
+            if (Array.isArray(data)) {
+                result.push(...data.map((s) => ({ ...s, source: node.name, nodeId: node.id })));
+            }
+        }
+        return result;
+    }
+    function collectNodeOffice() {
+        const result = [];
+        for (const node of loadNodes()) {
+            if (!node.enabled || !node.capabilities.includes('office'))
+                continue;
+            const data = loadNodeData(node.id, 'office', []);
+            if (Array.isArray(data)) {
+                result.push(...data.map((c) => ({ ...c, source: node.name, nodeId: node.id })));
+            }
+        }
+        return result;
+    }
+    /* ========== 技能市场（插件市场）：聚合 ClawHub + Agent-Foundry + 自定义节点 + 自定义来源 ========== */
     const CLAWHUB_API = 'https://clawhub.ai/api/v1/skills';
     const AGENT_FOUNDRY_CATALOG = 'https://raw.githubusercontent.com/hebertzhu/agent-foundry/main/catalog/skills-catalog.json';
     async function fetchWithRetry(url, timeoutMs = 15000, retries = 1) {
@@ -576,6 +1195,58 @@ function startWebServer(opts = {}) {
             results = results.concat(await fetchClawHubSkills(q, limit));
         if (source === 'agent-foundry' || source === 'all')
             results = results.concat(await fetchAgentFoundrySkills(q, limit));
+        // 从节点同步的技能
+        if (source === 'node' || source === 'all') {
+            const nodeSkills = collectNodeSkills();
+            results = results.concat(nodeSkills.map((s) => ({
+                id: `node:${s.id}`,
+                name: s.name,
+                description: s.description,
+                source: s.source,
+                author: s.author,
+                category: s.category,
+                tags: s.tags,
+                downloads: s.downloads,
+                installHint: s.installHint,
+                homepage: s.homepage,
+                rawUrl: s.rawUrl,
+            })));
+        }
+        // 从自定义来源拉取技能（HTTP URL 返回 JSON 数组）
+        if (source === 'custom' || source === 'all') {
+            for (const src of loadSources()) {
+                if (!src.enabled || src.type !== 'skills')
+                    continue;
+                try {
+                    const r = await fetchWithRetry(src.url, 10000, 0);
+                    if (r.ok) {
+                        const data = await r.json();
+                        const list = Array.isArray(data) ? data : (data.items || data.skills || []);
+                        results = results.concat(list.map((s) => ({
+                            id: `custom:${src.id}:${s.id || s.name}`,
+                            name: String(s.name || s.title || ''),
+                            description: String(s.description || s.desc || ''),
+                            source: src.name,
+                            author: s.author,
+                            category: String(s.category || 'custom'),
+                            tags: Array.isArray(s.tags) ? s.tags : [],
+                            downloads: Number(s.downloads || 0),
+                            installHint: String(s.installHint || ''),
+                            homepage: String(s.homepage || src.url),
+                            rawUrl: String(s.rawUrl || src.url),
+                        })));
+                    }
+                }
+                catch { /* skip failed sources */ }
+            }
+        }
+        // 关键词过滤
+        if (q) {
+            const kw = q.toLowerCase();
+            results = results.filter((s) => s.name.toLowerCase().includes(kw) ||
+                s.description.toLowerCase().includes(kw) ||
+                (s.tags || []).some((t) => t.toLowerCase().includes(kw)));
+        }
         results.sort((a, b) => (b.downloads || 0) - (a.downloads || 0));
         res.json({ ok: true, total: results.length, skills: results.slice(0, limit) });
     });
@@ -611,9 +1282,93 @@ function startWebServer(opts = {}) {
     app.get('/api/skills/installed', (_req, res) => {
         res.json({ ok: true, skills: loadJsonFile(installedSkillsFile, []) });
     });
+    // 预置常用快捷指令（用户可一键运行，也可保存为自己的指令后编辑）
+    const BUILTIN_AUTOMATIONS = [
+        {
+            id: 'builtin-code-review',
+            name: '代码审查',
+            icon: '🔍',
+            category: '质量',
+            goal: '请对当前工作区的代码做一次全面审查，重点检查：1) 潜在的 Bug 和逻辑漏洞；2) 代码规范和可读性问题；3) 安全风险；4) 性能瓶颈。按问题严重程度排序，给出具体的修改建议。',
+            builtin: true,
+        },
+        {
+            id: 'builtin-gen-test',
+            name: '生成测试',
+            icon: '🧪',
+            category: '测试',
+            goal: '请为当前项目生成单元测试，优先覆盖核心业务逻辑和边界条件。先分析项目结构和已有测试框架，然后为关键模块编写测试用例，确保测试可以直接运行。',
+            builtin: true,
+        },
+        {
+            id: 'builtin-build-check',
+            name: '构建检查',
+            icon: '🏗️',
+            category: '工程',
+            goal: '请运行项目的构建命令（如 npm run build / tsc），检查是否有编译错误或类型错误。如果有错误，逐一分析原因并给出修复方案，修复后重新验证构建是否通过。',
+            builtin: true,
+        },
+        {
+            id: 'builtin-dep-check',
+            name: '依赖检查',
+            icon: '📦',
+            category: '工程',
+            goal: '请检查当前项目的 package.json 依赖，分析：1) 是否有过时的依赖需要升级；2) 是否有已知安全漏洞的依赖；3) 是否有未使用的冗余依赖。给出升级建议和风险提示。',
+            builtin: true,
+        },
+        {
+            id: 'builtin-format',
+            name: '代码格式化',
+            icon: '✨',
+            category: '工程',
+            goal: '请对当前项目的代码进行全面格式化。先检查项目是否配置了 ESLint / Prettier 等工具，如果有就按配置格式化；如果没有，就按通用规范统一缩进、引号、分号等风格。格式化后验证构建是否正常。',
+            builtin: true,
+        },
+        {
+            id: 'builtin-gen-doc',
+            name: '生成文档',
+            icon: '📝',
+            category: '文档',
+            goal: '请为当前项目生成一份完整的 README 文档，包含：项目简介、功能特性、技术栈、安装步骤、使用方法、目录结构说明、开发指南。如果项目有 API，也一并生成 API 文档。',
+            builtin: true,
+        },
+        {
+            id: 'builtin-refactor',
+            name: '重构优化',
+            icon: '♻️',
+            category: '质量',
+            goal: '请对当前项目的代码进行重构优化，重点关注：1) 重复代码提取；2) 过长函数拆分；3) 命名规范统一；4) 复杂逻辑简化。重构过程中确保不改变外部行为，重构后验证构建和测试通过。',
+            builtin: true,
+        },
+        {
+            id: 'builtin-release',
+            name: '版本发布准备',
+            icon: '🚀',
+            category: '工程',
+            goal: '请为当前项目准备一次版本发布，包括：1) 检查 package.json 版本号并建议升级；2) 整理 CHANGELOG 变更日志；3) 运行构建和测试确保通过；4) 检查是否有未提交的代码。给出完整的发布检查清单。',
+            builtin: true,
+        },
+        {
+            id: 'builtin-security',
+            name: '安全扫描',
+            icon: '🛡️',
+            category: '安全',
+            goal: '请对当前项目的代码进行安全扫描，重点检查：1) SQL 注入、XSS、CSRF 等常见漏洞；2) 硬编码的密钥或敏感信息；3) 不安全的依赖；4) 权限校验缺失。按风险等级排序，给出修复建议。',
+            builtin: true,
+        },
+        {
+            id: 'builtin-perf',
+            name: '性能分析',
+            icon: '⚡',
+            category: '质量',
+            goal: '请分析当前项目的性能瓶颈，重点关注：1) 慢查询和低效算法；2) 不必要的重复计算；3) 内存泄漏风险；4) 异步操作阻塞。给出具体的优化方案和预期收益，优化后验证效果。',
+            builtin: true,
+        },
+    ];
     const automationsFile = (0, path_1.join)(homeDir, 'automations.json');
     app.get('/api/automations', (_req, res) => {
-        res.json({ ok: true, automations: loadJsonFile(automationsFile, []) });
+        const user = loadJsonFile(automationsFile, []);
+        res.json({ ok: true, builtin: BUILTIN_AUTOMATIONS, automations: user });
     });
     app.post('/api/automations', async (req, res) => {
         const body = (req.body ?? {});
@@ -658,7 +1413,16 @@ function startWebServer(opts = {}) {
     });
     app.post('/api/automations/:id/run', async (req, res) => {
         const list = loadJsonFile(automationsFile, []);
-        const rule = list.find((a) => a.id === req.params.id);
+        // 先从用户自定义指令里找，找不到再从预置指令里找
+        let rule = list.find((a) => a.id === req.params.id);
+        let isBuiltin = false;
+        if (!rule) {
+            const builtin = BUILTIN_AUTOMATIONS.find((a) => a.id === req.params.id);
+            if (builtin) {
+                rule = builtin;
+                isBuiltin = true;
+            }
+        }
         if (!rule) {
             res.status(404).json({ ok: false, error: '指令不存在' });
             return;
@@ -669,12 +1433,16 @@ function startWebServer(opts = {}) {
         });
         rule.runCount += 1;
         rule.lastRunAt = new Date().toISOString();
-        // 任务已入队，runCount 持久化失败不阻塞响应（带 persistWarning 提示）
-        const persistWarning = !saveJsonFile(automationsFile, list);
+        // 预置指令的 runCount 不持久化（只在内存中统计），用户自定义指令才持久化
+        let persistWarning = false;
+        if (!isBuiltin) {
+            persistWarning = !saveJsonFile(automationsFile, list);
+        }
         res.status(201).json({
             ok: true,
             task: publicTask(record, true),
             runCount: rule.runCount,
+            builtin: isBuiltin || undefined,
             persistWarning: persistWarning || undefined,
         });
     });
@@ -737,9 +1505,43 @@ function startWebServer(opts = {}) {
         },
     ];
     const templatesFile = (0, path_1.join)(homeDir, 'templates.json');
-    app.get('/api/templates', (_req, res) => {
+    app.get('/api/templates', async (_req, res) => {
         const user = loadJsonFile(templatesFile, []);
-        res.json({ ok: true, builtin: BUILTIN_TEMPLATES, user });
+        // 从节点同步的模板
+        const nodeTemplates = collectNodeTemplates().map((t) => ({
+            id: `node:${t.id}`,
+            title: t.title,
+            category: t.category,
+            goal: t.goal,
+            icon: t.icon,
+            builtin: false,
+            source: t.source,
+            nodeId: t.nodeId,
+        }));
+        // 从自定义来源拉取模板
+        const customTemplates = [];
+        for (const src of loadSources()) {
+            if (!src.enabled || src.type !== 'templates')
+                continue;
+            try {
+                const r = await fetchWithRetry(src.url, 10000, 0);
+                if (r.ok) {
+                    const data = await r.json();
+                    const list = Array.isArray(data) ? data : (data.items || data.templates || []);
+                    customTemplates.push(...list.map((t) => ({
+                        id: `custom:${src.id}:${t.id || t.title}`,
+                        title: String(t.title || t.name || ''),
+                        category: String(t.category || src.name),
+                        goal: String(t.goal || t.prompt || ''),
+                        icon: String(t.icon || '📄'),
+                        builtin: false,
+                        source: src.name,
+                    })));
+                }
+            }
+            catch { /* skip */ }
+        }
+        res.json({ ok: true, builtin: BUILTIN_TEMPLATES, user, node: nodeTemplates, custom: customTemplates });
     });
     app.post('/api/templates', async (req, res) => {
         const body = (req.body ?? {});
@@ -778,54 +1580,96 @@ function startWebServer(opts = {}) {
         }
         res.json({ ok: true });
     });
-    /* ========== 办公助理：内置能力清单 ========== */
-    app.get('/api/office/capabilities', (_req, res) => {
+    /* ========== 办公助理：内置能力清单 + 节点能力 + 自定义来源 ========== */
+    app.get('/api/office/capabilities', async (_req, res) => {
+        const builtin = [
+            {
+                id: 'doc-summary',
+                icon: '📄',
+                title: '文档摘要',
+                desc: '粘贴长文档，生成结构化摘要与要点',
+                prompt: '请对以下文档做摘要，提取 3-5 个核心要点并列出待办：\n\n',
+                source: '内置',
+            },
+            {
+                id: 'doc-translate',
+                icon: '🌐',
+                title: '中英互译',
+                desc: '技术文档/代码注释翻译',
+                prompt: '请将以下内容准确翻译（保留代码与术语）：\n\n',
+                source: '内置',
+            },
+            {
+                id: 'doc-rewrite',
+                icon: '✍️',
+                title: '润色改写',
+                desc: '把草稿改写为正式/简洁风格',
+                prompt: '请润色以下文本，使其更专业简洁：\n\n',
+                source: '内置',
+            },
+            {
+                id: 'meeting-notes',
+                icon: '📋',
+                title: '会议纪要',
+                desc: '从聊天/录音转写生成行动项',
+                prompt: '请从以下记录中提取：决策、负责人、截止时间、待办：\n\n',
+                source: '内置',
+            },
+            {
+                id: 'email-draft',
+                icon: '✉️',
+                title: '邮件起草',
+                desc: '按要点生成工作邮件',
+                prompt: '请起草一封邮件，主题/背景/诉求如下：\n\n',
+                source: '内置',
+            },
+            {
+                id: 'excel-formula',
+                icon: '📊',
+                title: '表格公式',
+                desc: '描述需求生成 Excel/Sheets 公式',
+                prompt: '请写出实现以下需求的表格公式并解释：\n\n',
+                source: '内置',
+            },
+        ];
+        // 从节点同步的办公能力
+        const nodeCaps = collectNodeOffice().map((c) => ({
+            id: `node:${c.id}`,
+            icon: c.icon,
+            title: c.title,
+            desc: c.desc,
+            prompt: c.prompt,
+            source: c.source,
+            nodeId: c.nodeId,
+        }));
+        // 从自定义来源拉取办公能力
+        const customCaps = [];
+        for (const src of loadSources()) {
+            if (!src.enabled || src.type !== 'office')
+                continue;
+            try {
+                const r = await fetchWithRetry(src.url, 10000, 0);
+                if (r.ok) {
+                    const data = await r.json();
+                    const list = Array.isArray(data) ? data : (data.items || data.capabilities || []);
+                    customCaps.push(...list.map((c) => ({
+                        id: `custom:${src.id}:${c.id || c.title}`,
+                        icon: String(c.icon || '🔧'),
+                        title: String(c.title || c.name || ''),
+                        desc: String(c.desc || c.description || ''),
+                        prompt: String(c.prompt || c.goal || ''),
+                        source: src.name,
+                    })));
+                }
+            }
+            catch { /* skip */ }
+        }
         res.json({
             ok: true,
-            capabilities: [
-                {
-                    id: 'doc-summary',
-                    icon: '📄',
-                    title: '文档摘要',
-                    desc: '粘贴长文档，生成结构化摘要与要点',
-                    prompt: '请对以下文档做摘要，提取 3-5 个核心要点并列出待办：\n\n',
-                },
-                {
-                    id: 'doc-translate',
-                    icon: '🌐',
-                    title: '中英互译',
-                    desc: '技术文档/代码注释翻译',
-                    prompt: '请将以下内容准确翻译（保留代码与术语）：\n\n',
-                },
-                {
-                    id: 'doc-rewrite',
-                    icon: '✍️',
-                    title: '润色改写',
-                    desc: '把草稿改写为正式/简洁风格',
-                    prompt: '请润色以下文本，使其更专业简洁：\n\n',
-                },
-                {
-                    id: 'meeting-notes',
-                    icon: '📋',
-                    title: '会议纪要',
-                    desc: '从聊天/录音转写生成行动项',
-                    prompt: '请从以下记录中提取：决策、负责人、截止时间、待办：\n\n',
-                },
-                {
-                    id: 'email-draft',
-                    icon: '✉️',
-                    title: '邮件起草',
-                    desc: '按要点生成工作邮件',
-                    prompt: '请起草一封邮件，主题/背景/诉求如下：\n\n',
-                },
-                {
-                    id: 'excel-formula',
-                    icon: '📊',
-                    title: '表格公式',
-                    desc: '描述需求生成 Excel/Sheets 公式',
-                    prompt: '请写出实现以下需求的表格公式并解释：\n\n',
-                },
-            ],
+            capabilities: [...builtin, ...nodeCaps, ...customCaps],
+            builtin,
+            node: nodeCaps,
+            custom: customCaps,
         });
     });
     /* ========== 大模型配置（三重加密：apiKey AES-256-GCM 落盘加密 + RSA 加密传输） ========== */