glmcode 0.1.3 → 0.1.6

package/CHANGELOG.md

@@ -0,0 +1,9 @@
+# Changelog
+
+## 0.1.6
+
+- 修复 API Key 检测：环境变量 + `~/.glmcode/auth.json`
+- 增加 `auth set/status/logout`
+- 修复没有 `termux-open-url` 时的 ENOENT 崩溃
+- 更新智谱 API Key 管理页面
+- 保留跨平台 Shell 检测与配置入口

package/LICENSE

@@ -1,21 +1 @@
 MIT License
-
-Copyright (c) 2026 GLMCode contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/README.md

@@ -1,50 +1,60 @@
-# GLMCode
-
-GLMCode 是一个 Node.js / npm 的 GLM Coding Agent，界面和交互以移动端 Python 原版 `glmcode.py` 为基础，同时提供文件工具、Shell、Skills、Plugins、MCP、Session 和模型切换。
+# GLMCode 0.1.6
 
 ## 安装
-
 ```bash
 npm install -g glmcode
+glmcode --version
 ```
 
-npm 会自动安装 package.json 中声明的运行依赖；不需要手动 `pip install`，也不需要手动创建 PATH 脚本。npm 的全局 bin 会提供：
+## API Key 自动检测
+检测顺序：
+1. `ZHIPU_API_KEY`
+2. `GLM_API_KEY`
+3. `~/.glmcode/auth.json`
 
+已有 Key：
 ```bash
-glmcode
-glm
-gc
+glmcode auth set YOUR_API_KEY
 ```
 
-三种启动命令。
-
-## 登录
+状态：
+```bash
+glmcode auth status
+```
 
+没有 Key：
 ```bash
 glmcode auth login
 ```
 
-GLMCode 会尝试在手机、Linux、macOS、Windows 上打开智谱官方平台页面，并自动检测已有的 `ZHIPU_API_KEY` / `GLM_API_KEY` 或本地凭据。
-
-注意：智谱公开开发文档当前仍以“登录开放平台 → 创建 API Key → 使用 API Key 调用”为标准流程；普通网页登录并不会自动把 API Key 暴露给第三方 CLI。因此 GLMCode 不会伪造网页登录，也不会从浏览器 Cookie 中窃取凭据。
-
-## 依赖
-
-Python 原版需要 `requests` 与 `prompt_toolkit`，并使用 Python 标准库的 `zipfile`。Node 版对应为：
-
-- Node.js >= 18：内置 `fetch`、readline、child_process、fs 等能力
-- `adm-zip`：自动解压 `skills/*.zip` 技能包
+无 GUI 环境：
+```bash
+glmcode auth login --no-browser
+```
 
-用户通过 npm 安装时这些 npm 依赖会自动安装。
+官方 API Key 页面：
+https://open.bigmodel.cn/usercenter/proj-mgmt/apikeys
 
-## 技能
+## Shell
+```bash
+glmcode shell
+glmcode shell list
+glmcode run "echo hello"
+```
 
-支持：
+0.1.6 不再假定 `termux-open-url` 一定存在；Windows、macOS、Linux/Alpine/Android 环境分别检测可用启动器和 Shell。
 
-- `.glmcode/skills/**/SKILL.md`
-- `~/.glmcode/skills/**/SKILL.md`
-- `skills/*.zip` 自动解压
+## 配置
+配置：`~/.glmcode/config.json`
+认证：`~/.glmcode/auth.json`
 
-## 启动界面
+```bash
+glmcode config
+glmcode config set model glm-4.5
+```
 
-保持 Python 原版的 GLM Logo、状态栏、`┃ 输入消息... ┃`、斜杠命令和技能补全风格。
+## 开发
+```bash
+npm run check
+npm pack
+```

package/package.json

@@ -1,38 +1,23 @@
 {
   "name": "glmcode",
-  "version": "0.1.3",
-  "description": "GLM Code · mobile coding agent with the GLM terminal UI, tools, skills, plugins and MCP.",
+  "version": "0.1.6",
+  "description": "Cross-platform GLM CLI with local authentication and shell detection.",
   "type": "module",
   "bin": {
     "glmcode": "src/cli.js",
     "glm": "src/cli.js",
     "gc": "src/cli.js"
   },
-  "engines": {
-    "node": ">=18"
+  "scripts": {
+    "check": "node --check src/cli.js && node --check src/auth.js && node --check src/config.js && node --check src/shell.js"
   },
   "files": [
-    "src",
-    "templates",
+    "src/",
     "README.md",
-    "LICENSE",
-    "glmcode.example.json"
-  ],
-  "scripts": {
-    "start": "node src/cli.js",
-    "check": "node --check src/cli.js"
-  },
-  "keywords": [
-    "glm",
-    "zhipu",
-    "coding-agent",
-    "cli",
-    "mcp",
-    "skills",
-    "plugins"
+    "CHANGELOG.md",
+    "LICENSE"
   ],
-  "license": "MIT",
-  "dependencies": {
-    "adm-zip": "^0.5.16"
+  "engines": {
+    "node": ">=18"
   }
 }

package/src/auth.js

@@ -1,58 +1,62 @@
-import fs from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-import { spawn } from 'node:child_process';
-import { AUTH_FILE, readJson, writeJson, getAuth } from './config.js';
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { execFileSync, spawn } from "node:child_process";
 
-export const LOGIN_URL = 'https://open.bigmodel.cn/usercenter/apikeys';
-export const PLATFORM_URL = 'https://open.bigmodel.cn/';
+export const CONFIG_DIR = path.join(os.homedir(), ".glmcode");
+export const AUTH_FILE = path.join(CONFIG_DIR, "auth.json");
+export const API_KEYS_URL = "https://open.bigmodel.cn/usercenter/proj-mgmt/apikeys";
 
-export async function openUrl(url) {
-  const attempts = process.platform === 'win32'
-    ? [['cmd', ['/c', 'start', '', url]]]
-    : process.platform === 'darwin'
-      ? [['open', [url]]]
-      : [['termux-open-url', [url]], ['xdg-open', [url]]];
-  for (const [cmd, args] of attempts) {
-    try {
-      const child = spawn(cmd, args, { detached: true, stdio: 'ignore' });
-      child.unref();
-      return true;
-    } catch {}
-  }
-  return false;
+function readJson(file, fallback = {}) {
+  try { return JSON.parse(fs.readFileSync(file, "utf8")); } catch { return fallback; }
 }
+function writeJson(file, value) {
+  fs.mkdirSync(CONFIG_DIR, {recursive:true, mode:0o700});
+  fs.writeFileSync(file, JSON.stringify(value,null,2)+"\n", {mode:0o600});
+  try { fs.chmodSync(file,0o600); } catch {}
+}
+function key(v) { const s = v == null ? "" : String(v).trim(); return s || null; }
 
-export async function detectApiKey() {
-  const candidates = [
-    process.env.ZHIPU_API_KEY,
-    process.env.GLM_API_KEY,
-    process.env.BIGMODEL_API_KEY,
-    await getAuth('zhipu')
-  ].filter(Boolean).map(x => String(x).trim()).filter(Boolean);
-  return candidates[0] || '';
+export function getApiKey() {
+  const env = key(process.env.ZHIPU_API_KEY) || key(process.env.GLM_API_KEY);
+  if (env) return {apiKey:env, source:"environment"};
+  const a = readJson(AUTH_FILE,{});
+  const saved = key(a.apiKey) || key(a.api_key) || key(a.key) || key(a.token);
+  return saved ? {apiKey:saved, source:AUTH_FILE} : null;
+}
+export function saveApiKey(apiKey) {
+  const k = key(apiKey);
+  if (!k) throw new Error("API Key 不能为空");
+  writeJson(AUTH_FILE,{provider:"zhipu",apiKey:k,updatedAt:new Date().toISOString()});
+  return AUTH_FILE;
 }
+export function clearAuth() { writeJson(AUTH_FILE,{}); }
 
-export async function browserLogin() {
-  console.log('正在打开智谱 GLM 登录/API Key 页面...');
-  const opened = await openUrl(LOGIN_URL);
-  if (!opened) {
-    console.log(`请手动打开: ${LOGIN_URL}`);
-  }
-  console.log('');
-  console.log('登录说明：GLM 官方公开文档目前要求通过智谱开放平台创建 API Key。');
-  console.log('如果本机已有 ZHIPU_API_KEY / GLM_API_KEY，GLMCode 会自动检测并直接使用。');
-  console.log('浏览器登录本身不会把网页里的 API Key 自动暴露给第三方 CLI。');
-  console.log('');
-  const key = await detectApiKey();
-  if (key) {
-    console.log('检测到已有 API Key，正在使用已保存凭据。');
-    return key;
+function exists(cmd) {
+  try { execFileSync(process.platform==="win32" ? "where" : "which",[cmd],{stdio:"ignore"}); return true; }
+  catch { return false; }
+}
+export function openUrl(url) {
+  const candidates = process.platform==="win32"
+    ? [["cmd",["/c","start","",url]]]
+    : process.platform==="darwin"
+      ? [["open",[url]]]
+      : [["xdg-open",[url]],["termux-open-url",[url]],["gio",["open",url]]];
+  for (const [cmd,args] of candidates) {
+    if (!exists(cmd)) continue;
+    try { const p=spawn(cmd,args,{detached:true,stdio:"ignore"}); p.unref(); return true; } catch {}
   }
-  return '';
+  return false;
 }
-
-export async function authStatus() {
-  const key = await detectApiKey();
-  return { authenticated: Boolean(key), source: process.env.ZHIPU_API_KEY ? 'ZHIPU_API_KEY' : process.env.GLM_API_KEY ? 'GLM_API_KEY' : key ? 'local' : null };
+export function login({noBrowser=false}={}) {
+  const found=getApiKey();
+  if (found) { console.log(`已检测到 API Key（来源：${found.source}），无需重新配置。`); return found; }
+  console.log("未检测到 GLM API Key。");
+  console.log(`API Key 管理页面：${API_KEYS_URL}`);
+  if (!noBrowser && openUrl(API_KEYS_URL)) console.log("已尝试打开默认浏览器。");
+  else console.log("当前环境无法自动打开浏览器，请手动复制上面的地址。");
+  console.log("浏览器登录不会自动把网页中的 API Key 暴露给 CLI。");
+  console.log("获得 Key 后运行：glmcode auth set <API_KEY>");
+  return null;
 }
+export function maskKey(k) { return k && k.length>8 ? `${k.slice(0,4)}...${k.slice(-4)}` : "********"; }

package/src/cli.js

@@ -1,174 +1,31 @@
 #!/usr/bin/env node
-import readline from 'node:readline';
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import process from 'node:process';
-import { ensureState, AUTH_FILE, GLOBAL_DIR, getProjectConfig, getAuth, saveAuth, deleteAuth, readJson, writeJson } from './config.js';
-import { runAgent } from './agent.js';
-import { listMcp, saveMcpConfig } from './mcp.js';
-import { loadSkills, loadPlugins } from './skills.js';
-import { browserLogin, authStatus, LOGIN_URL } from './auth.js';
-
-await ensureState();
-const VERSION = '0.1.3';
-const cwd0 = process.cwd();
-
-const C = { rst:'\x1b[0m', dim:'\x1b[2m', bold:'\x1b[1m', cya:'\x1b[36m', cyb:'\x1b[1;36m', grn:'\x1b[32m', yel:'\x1b[33m', red:'\x1b[31m', mag:'\x1b[35m', gry:'\x1b[90m' };
-const color = (s, c) => `${c}${s}${C.rst}`;
-const LOGO = [
-  ' ██████╗   ██╗       ███╗   ███╗',
-  '██╔════╝   ██║       ████╗ ████║',
-  '██║  ███╗  ██║       ██╔████╔██║',
-  '██║   ██║  ██║       ██║╚██╔╝██║',
-  '╚██████╔╝  ███████╗  ██║ ╚═╝ ██║',
-  ' ╚═════╝   ╚══════╝  ╚═╝     ╚═╝'
-];
-const BASE_COMMANDS = {
-  '/help':'显示全部命令','/clear':'清空对话','/thinking':'切换思考模式(开/关)','/model':'切换模型 /model <ID>',
-  '/pwd':'显示当前目录','/cd':'切换目录 /cd <路径>','/ls':'列出文件','/cat':'查看文件 /cat <路径>','/run':'执行命令 /run <shell>','/exit':'退出'
-};
-
-function startPage() {
-  const W = 44, center = s => s.padStart(Math.floor((W+s.length)/2)).padEnd(W);
-  const lines = [
-    '', '✧  GLM  ✧', '', ...LOGO, '', 'GLM Code · 移动端', `v${VERSION}`, '', '/help 查看命令 · /thinking 思考开关', ''
-  ];
-  console.log();
-  for (const [i, line] of lines.entries()) console.log(color(center(line), i >= 1 && i <= 8 ? C.cyb : C.gry));
-}
-
-function commandMap(skills) {
-  const d = { ...BASE_COMMANDS };
-  for (const s of skills) d['/' + s.name] = '技能: ' + s.description;
-  return d;
-}
-
-function drawStatus(model, thinking, cwd, skillCount) {
-  const text = `思考:${thinking ? '开' : '关'}   模型:${model}${skillCount ? `   技能:${skillCount}` : ''}   ${cwd}`;
-  process.stdout.write(`\x1b[2K\r${color(text, C.gry)}\n`);
-}
-
-function printHelp(commands) {
-  console.log();
-  for (const [c,d] of Object.entries(commands)) console.log(`  ${color(c.padEnd(18), C.cyb)} ${color(d, C.gry)}`);
-  console.log();
-}
-
-async function authCmd(args) {
-  const sub = args[0] || 'status';
-  if (sub === 'login') {
-    const detected = await browserLogin();
-    if (detected) {
-      await saveAuth('zhipu', detected);
-      console.log(color(`已检测并保存现有 API 凭据到 ${AUTH_FILE}`, C.grn));
-      return;
-    }
-    console.log(color('未检测到本机已有 API Key。', C.yel));
-    console.log(color('请先在浏览器登录智谱开放平台并创建 API Key，然后设置 ZHIPU_API_KEY。', C.gry));
-    console.log(color(`登录入口: ${LOGIN_URL}`, C.gry));
-    return;
-  }
-  if (sub === 'logout') { await deleteAuth('zhipu'); console.log(color('已退出智谱登录。', C.grn)); return; }
-  const status = await authStatus();
-  console.log(status.authenticated ? color(`zhipu: authenticated (${status.source})`, C.grn) : color('zhipu: not authenticated', C.yel));
-}
-
-function hiddenInput(prompt) {
-  return new Promise((resolve, reject) => {
-    if (!process.stdin.isTTY) { const rl = readline.createInterface({input:process.stdin, output:process.stdout}); rl.question(prompt, a=>{rl.close();resolve(a)}); return; }
-    process.stdout.write(color(prompt, C.cyb));
-    readline.emitKeypressEvents(process.stdin); process.stdin.setRawMode(true);
-    let value = '', plain = false;
-    const onKey = (str, key={}) => {
-      if (key.name === 'return' || key.name === 'enter') { cleanup(); process.stdout.write('\n'); resolve(value); }
-      else if (key.ctrl && key.name === 'c') { cleanup(); reject(new Error('Cancelled')); }
-      else if (key.ctrl && key.name === 'r') { plain = !plain; redraw(); }
-      else if (key.name === 'backspace') { value = value.slice(0,-1); redraw(); }
-      else if (str && !key.ctrl && !key.meta) { value += str; process.stdout.write(plain ? str : '*'); }
-    };
-    const redraw=()=>{process.stdout.write(`\r\x1b[2K${color(prompt,C.cyb)}${plain?value:'*'.repeat(value.length)}`)};
-    const cleanup=()=>{process.stdin.off('keypress',onKey);process.stdin.setRawMode(false)};
-    process.stdin.on('keypress',onKey);
-  });
-}
-
-function modelsCmd() {
-  console.log([
-    'zhipu/glm-5.2','zhipu/glm-5','zhipu/glm-4.7','zhipu/glm-4.5',
-    'zhipu/glm-4.5-flash (free preset)','zhipu/glm-z1-flash (free preset)'
-  ].join('\n'));
-}
-
-async function modelCmd(args, config, cwd) {
-  const wanted = args[0] === 'free' ? config.freeModel : args[0];
-  if (!wanted) return console.log(`当前模型: ${config.model}`);
-  const file = path.join(cwd,'glmcode.json'); let local={};
-  try { local=JSON.parse(await fs.readFile(file,'utf8')); } catch {}
-  local.model=wanted; await fs.writeFile(file,JSON.stringify(local,null,2)+'\n');
-  console.log(color(`模型已切换: ${wanted}`, C.grn));
-}
-
-async function sessionCmd(args) {
-  const file=path.join(GLOBAL_DIR,'sessions.json'); const data=await readJson(file,{});
-  if(args[0]==='clear'){delete data[args[1]];await writeJson(file,data);console.log('Deleted.');return;}
-  for(const s of Object.values(data).sort((a,b)=>String(b.createdAt).localeCompare(String(a.createdAt)))) console.log(`${s.id}\t${s.cwd}\t${s.createdAt}`);
-}
-async function skillCmd(args,cwd){const skills=await loadSkills(cwd);if(args[0]!=='list')return console.log('Usage: glmcode skill list');skills.forEach(s=>console.log(`${s.name}\t${s.path}`));}
-async function pluginCmd(args,config,cwd){const plugins=await loadPlugins(cwd,config.plugins);if(args[0]!=='list')return console.log('Usage: glmcode plugin list');plugins.forEach(p=>console.log(`${p.id}${p.error?`\tERROR ${p.error}`:''}`));}
-async function mcpCmd(args,config,cwd){const sub=args[0]||'list';const file=path.join(cwd,'glmcode.json');if(sub==='list')return console.log(JSON.stringify(await listMcp(config),null,2));if(sub==='add'){const name=args[1],command=args.slice(2);if(!name||!command.length)return console.log('Usage: glmcode mcp add <name> <command> [args...]');await saveMcpConfig(file,name,{type:'stdio',command});return console.log(color(`已添加 MCP: ${name}`,C.grn));}if(sub==='remove'){const name=args[1];let local={};try{local=JSON.parse(await fs.readFile(file,'utf8'))}catch{}if(local.mcp)delete local.mcp[name];await fs.writeFile(file,JSON.stringify(local,null,2)+'\n');return console.log(color(`已删除 MCP: ${name}`,C.grn));}console.log('Usage: glmcode mcp list | add <name> <command> [args...] | remove <name>');}
-
-async function readLineInput(prompt, completer) {
-  return new Promise(resolve => {
-    const rl=readline.createInterface({input:process.stdin,output:process.stdout,completer});
-    rl.question(prompt, a=>{rl.close();resolve(a)});
-  });
-}
-
-async function interactive() {
-  const config=await getProjectConfig(cwd0); let model=config.model, thinking=Boolean(config.thinking), cwd=cwd0;
-  let apiKey=await getAuth(); if(!apiKey){ apiKey=await browserLogin(); if(apiKey) await saveAuth('zhipu', apiKey); } if(!apiKey){console.log(color('未检测到 API Key。请在浏览器登录智谱开放平台后配置 API Key，或设置 ZHIPU_API_KEY。',C.red));return;}
-  let skills=await loadSkills(cwd), commands=commandMap(skills), sessionId;
-  startPage();
-  console.log(color(`提示: 思考模式默认${thinking?'开启':'关闭'}，输入 /thinking ${thinking?'关闭':'开启'}`,C.gry));
-  if(skills.length) console.log(color(`已加载技能: ${skills.map(s=>s.name).join(', ')}`,C.mag));
-  console.log();
-  const completer=(line)=>{const hits=Object.entries(commands).filter(([c])=>c.startsWith(line)).map(([c,d])=>[c,d]);return [hits.length?hits:[],line]};
-  let interrupted=false;
-  const onSig=()=>{if(interrupted){process.exit(0)}interrupted=true;console.log(color('\n[已停止，再按一次 Ctrl+C 退出]',C.yel));setTimeout(()=>interrupted=false,1200)};
-  process.on('SIGINT',onSig);
-  while(true){
-    drawStatus(model,thinking,cwd,skills.length);
-    const user=(await readLineInput(color('┃ 输入消息... ┃ ',C.cyb),completer)).trim();
-    if(!user)continue;
-    if(user.startsWith('/')){
-      const [cmd,...rest]=user.split(/\s+/), arg=rest.join(' ');
-      if(cmd==='/exit'||cmd==='/quit'){console.log(color('再见',C.cya));break;}
-      if(cmd==='/help'){printHelp(commands);continue;}
-      if(cmd==='/clear'){console.clear();startPage();continue;}
-      if(cmd==='/thinking'){thinking=!thinking;config.thinking=thinking;console.log(color(`思考模式: ${thinking?'开启':'关闭'}`,C.yel));continue;}
-      if(cmd==='/model'){if(arg){model=arg;console.log(color(`模型已切换: ${model}`,C.grn));}else console.log(`当前模型: ${model}`);continue;}
-      if(cmd==='/pwd'){console.log(cwd);continue;}
-      if(cmd==='/cd'){try{process.chdir(path.resolve(cwd,arg||'.'));cwd=process.cwd();console.log(color(`-> ${cwd}`,C.grn));skills=await loadSkills(cwd);commands=commandMap(skills);}catch(e){console.log(color(`切换失败: ${e.message}`,C.red));}continue;}
-      if(cmd==='/ls'){try{for(const f of (await fs.readdir(cwd,{withFileTypes:true})).sort((a,b)=>a.name.localeCompare(b.name)))console.log(`  ${f.name}${f.isDirectory()?'/':''}`)}catch(e){console.log(color(`失败: ${e.message}`,C.red));}continue;}
-      if(cmd==='/cat'){try{console.log(await fs.readFile(path.resolve(cwd,arg),'utf8').then(x=>x.slice(0,4000)))}catch(e){console.log(color(`失败: ${e.message}`,C.red));}continue;}
-      if(cmd==='/run'){if(!arg)console.log('用法: /run <命令>');else {try{const { execSync }=await import('node:child_process');console.log(execSync(arg,{cwd,encoding:'utf8',timeout:60000,stdio:['ignore','pipe','pipe']}).slice(0,4000))}catch(e){console.log(color(`执行失败: ${e.stdout||e.message}`,C.red));}}continue;}
-      if(skills.some(s=>'/'+s.name===cmd)){const s=skills.find(s=>s.name===cmd);console.log(color(`已加载技能：${s.name}`,C.grn));console.log(color('技能指令已注入，现在输入你的任务：',C.gry));config.__activeSkill=s.content;continue;}
-      console.log(color(`未知命令: ${cmd}（输入 / 查看全部）`,C.red));continue;
-    }
-    try{const merged={...config,model,thinking};if(config.__activeSkill)merged.__activeSkill=config.__activeSkill;sessionId=await runAgent({cwd,config:merged,apiKey,prompt:user,model,sessionId});console.log(color(`\n[session ${sessionId}]`,C.gry));}catch(e){console.log(color(`\n[错误] ${e.message}`,C.red));}
-  }
-  process.removeListener('SIGINT',onSig);
-}
-
-async function main(){
-  const [command,...argv]=process.argv.slice(2); const cwd=process.cwd();
-  if(!command||command==='chat')return interactive();
-  if(command==='-h'||command==='--help'||command==='help'){console.log(`GLMCode ${VERSION}\n\n用法:\n  glmcode                         启动 GLM 风格交互界面
-  glm / gc                        快捷启动 GLMCode\n  glmcode run <prompt>            执行一次 coding task\n  glmcode auth login|logout       管理智谱 API Key\n  glmcode models                  查看模型\n  glmcode model <id>|free         切换模型\n  glmcode session list|clear <id> 管理会话\n  glmcode skill list              查看技能\n  glmcode plugin list             查看插件\n  glmcode mcp list|add|remove     管理 MCP\n  glmcode config                  查看配置`);return;}
-  if(command==='-v'||command==='--version')return console.log(VERSION);
-  const config=await getProjectConfig(cwd);
-  if(command==='run'){let key=await getAuth();if(!key) key=await browserLogin();if(!key) throw new Error('No Zhipu API key detected. Run: glmcode auth login');return runAgent({cwd,config,apiKey:key,prompt:argv.join(' '),model:config.model});}
-  if(command==='auth')return authCmd(argv);if(command==='models')return modelsCmd();if(command==='model')return modelCmd(argv,config,cwd);if(command==='session')return sessionCmd(argv);if(command==='skill')return skillCmd(argv,cwd);if(command==='plugin')return pluginCmd(argv,config,cwd);if(command==='mcp')return mcpCmd(argv,config,cwd);if(command==='config')return console.log(JSON.stringify(config,null,2));
-  console.error(`Unknown command: ${command}`);process.exitCode=1;
-}
-main().catch(e=>{console.error(color(`Error: ${e.message}`,C.red));process.exit(1)});
+import {spawnSync} from "node:child_process";
+import {getApiKey,saveApiKey,clearAuth,login,maskKey} from "./auth.js";
+import {loadConfig,saveConfig} from "./config.js";
+import {shellInfo,availableShells} from "./shell.js";
+const VERSION="0.1.6";
+function help(){console.log(`GLMCode ${VERSION}
+Usage: glmcode [command]
+auth login [--no-browser]   检测 Key；没有则打开官方页面
+auth set <API_KEY>          保存 Key 到 ~/.glmcode/auth.json
+auth status                 查看认证状态（Key 脱敏）
+auth logout                 删除本地 Key
+shell                       查看 OS/CPU/Shell
+shell list                  列出可用 Shell
+run <command>               使用当前 Shell 执行命令
+config                      查看配置
+config set <key> <value>   修改配置
+skills / plugins / mcp      查看对应配置
+--version                  显示版本`);}
+function runShell(command){const s=shellInfo(),win=process.platform==="win32";const f=win?(s.shell==="powershell"||s.shell==="pwsh"?s.executable:process.env.ComSpec||"cmd.exe"):s.executable;const a=win?(s.shell==="powershell"||s.shell==="pwsh"?["-NoProfile","-Command",command]:["/d","/s","/c",command]):["-lc",command];const r=spawnSync(f,a,{stdio:"inherit"});process.exitCode=r.status??1;}
+function value(v){if(v==="true")return true;if(v==="false")return false;if(/^-?\d+(?:\.\d+)?$/.test(v))return Number(v);try{return JSON.parse(v);}catch{return v;}}
+const a=process.argv.slice(2);
+if(!a.length){const f=getApiKey();if(!f){console.log(`GLMCode ${VERSION}\n未检测到 API Key。运行 glmcode auth login。`);process.exitCode=1;}else{const c=loadConfig();console.log(`GLMCode ${VERSION}\nProvider: ${c.provider}\nModel: ${c.model}\nAPI Key: ${maskKey(f.apiKey)} (${f.source})\n认证检测成功。`);}}
+else if(a[0]==="--version"||a[0]==="-v")console.log(VERSION);
+else if(a[0]==="--help"||a[0]==="-h"||a[0]==="help")help();
+else if(a[0]==="auth"){const s=a[1]||"status";if(s==="login")login({noBrowser:a.includes("--no-browser")});else if(s==="set"){if(!a[2]){console.error("用法：glmcode auth set <API_KEY>");process.exitCode=2;}else console.log(`API Key 已保存到 ${saveApiKey(a[2])}`);}else if(s==="status"){const f=getApiKey();console.log(f?`API Key: ${maskKey(f.apiKey)}\n来源: ${f.source}`:"未检测到 API Key。");}else if(s==="logout"){clearAuth();console.log("本地 API Key 已删除。");}else help();}
+else if(a[0]==="shell"){if(a[1]==="list")console.log(availableShells().join("\n")||"未检测到额外 Shell");else{const s=shellInfo();console.log(`OS: ${s.os}\nArchitecture: ${s.architecture}\nShell: ${s.shell}\nExecutable: ${s.executable}`);}}
+else if(a[0]==="run"){if(!a[1]){console.error("用法：glmcode run <command>");process.exitCode=2;}else runShell(a.slice(1).join(" "));}
+else if(a[0]==="config"){const c=loadConfig();if(a[1]==="set"){if(!a[2]||a[3]===undefined){console.error("用法：glmcode config set <key> <value>");process.exitCode=2;}else{c[a[2]]=value(a.slice(3).join(" "));saveConfig(c);console.log(`已设置 ${a[2]}`);}}else console.log(JSON.stringify(c,null,2));}
+else if(["skills","plugins","mcp"].includes(a[0]))console.log(JSON.stringify(loadConfig()[a[0]],null,2));
+else{console.error(`未知命令：${a[0]}`);help();process.exitCode=2;}

package/src/config.js

@@ -1,65 +1,8 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import os from 'node:os';
-
-export const GLOBAL_DIR = path.join(os.homedir(), '.glmcode');
-export const CONFIG_FILE = path.join(GLOBAL_DIR, 'config.json');
-export const AUTH_FILE = path.join(GLOBAL_DIR, 'auth.json');
-export const SESSIONS_FILE = path.join(GLOBAL_DIR, 'sessions.json');
-
-const defaultConfig = {
-  provider: 'zhipu',
-  model: 'glm-5.2',
-  freeModel: 'glm-4.5-flash',
-  baseUrl: 'https://open.bigmodel.cn/api/paas/v4',
-  maxTokens: 8192,
-  temperature: 0.2,
-  thinking: 'disabled',
-  approval: 'ask',
-  autoCompact: true,
-  skillsDirs: ['.glmcode/skills', '~/.glmcode/skills'],
-  plugins: [],
-  mcp: {},
-  startupCommand: 'glmcode',
-  autoOpenLogin: true
-};
-
-export async function ensureState() {
-  await fs.mkdir(GLOBAL_DIR, { recursive: true, mode: 0o700 });
-  for (const file of [CONFIG_FILE, AUTH_FILE, SESSIONS_FILE]) {
-    try { await fs.access(file); } catch { await fs.writeFile(file, file === CONFIG_FILE ? JSON.stringify(defaultConfig, null, 2) : '{}', { mode: 0o600 }); }
-  }
-}
-
-export async function readJson(file, fallback = {}) {
-  try { return JSON.parse(await fs.readFile(file, 'utf8')); } catch { return fallback; }
-}
-export async function writeJson(file, data) {
-  await fs.mkdir(path.dirname(file), { recursive: true });
-  await fs.writeFile(file, JSON.stringify(data, null, 2) + '\n', { mode: 0o600 });
-}
-
-export async function getProjectConfig(cwd) {
-  const global = await readJson(CONFIG_FILE, defaultConfig);
-  const localFile = path.join(cwd, 'glmcode.json');
-  const local = await readJson(localFile, {});
-  return { ...defaultConfig, ...global, ...local, cwd };
-}
-
-export async function getAuth(provider = 'zhipu') {
-  const auth = await readJson(AUTH_FILE, {});
-  const envKey = provider === 'zhipu' ? process.env.ZHIPU_API_KEY : undefined;
-  return auth[provider]?.apiKey || envKey || '';
-}
-
-export async function saveAuth(provider, apiKey) {
-  const auth = await readJson(AUTH_FILE, {});
-  auth[provider] = { apiKey, savedAt: new Date().toISOString() };
-  await writeJson(AUTH_FILE, auth);
-}
-
-export async function deleteAuth(provider) {
-  const auth = await readJson(AUTH_FILE, {});
-  delete auth[provider];
-  await writeJson(AUTH_FILE, auth);
-}
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+export const CONFIG_DIR=path.join(os.homedir(),".glmcode");
+export const CONFIG_FILE=path.join(CONFIG_DIR,"config.json");
+const defaults={provider:"zhipu",model:"glm-4.5",freeModel:"glm-4.5-air",baseUrl:"https://open.bigmodel.cn/api/paas/v4",maxTokens:4096,temperature:0.7,thinking:true,approval:"ask",autoCompact:true,skillsDirs:[],plugins:[],mcp:{},startupCommand:"",autoOpenLogin:true};
+export function loadConfig(){try{return {...defaults,...JSON.parse(fs.readFileSync(CONFIG_FILE,"utf8"))};}catch{return {...defaults};}}
+export function saveConfig(c){fs.mkdirSync(CONFIG_DIR,{recursive:true,mode:0o700});fs.writeFileSync(CONFIG_FILE,JSON.stringify(c,null,2)+"\n",{mode:0o600});}

package/src/shell.js

@@ -0,0 +1,5 @@
+import os from "node:os";
+import {execFileSync} from "node:child_process";
+function shell(){if(process.platform==="win32"){const p=process.env.PWSH||process.env.POWERSHELL;if(p)return{name:"powershell",executable:p};return{name:"cmd",executable:process.env.ComSpec||"cmd.exe"};}const e=process.env.SHELL||"/bin/sh";return{name:e.split("/").pop()||"sh",executable:e};}
+export function shellInfo(){const s=shell();return{os:process.platform,architecture:process.arch,shell:s.name,executable:s.executable};}
+export function availableShells(){const c=process.platform==="win32"?["cmd","powershell","pwsh"]:["sh","bash","zsh","fish","ash"];return c.filter(n=>{try{execFileSync(process.platform==="win32"?"where":"which",[n],{stdio:"ignore"});return true;}catch{return false;}});}

package/glmcode.example.json

@@ -1,19 +0,0 @@
-{
-  "provider": "zhipu",
-  "model": "glm-5.2",
-  "freeModel": "glm-4.5-flash",
-  "baseUrl": "https://open.bigmodel.cn/api/paas/v4",
-  "approval": "ask",
-  "thinking": "enabled",
-  "maxTokens": 8192,
-  "temperature": 0.2,
-  "plugins": [],
-  "mcp": {
-    "example": {
-      "type": "stdio",
-      "command": ["npx", "-y", "<your-mcp-server>"],
-      "env": {},
-      "timeout": 15000
-    }
-  }
-}

package/src/agent.js

@@ -1,68 +0,0 @@
-import { chatCompletion, streamCompletion } from './provider.js';
-import { TOOL_DEFS, makeToolExecutor } from './tools.js';
-import { loadSkills, loadPlugins, skillsPrompt } from './skills.js';
-import { discoverMcpTools, callMcpTool } from './mcp.js';
-import { nowId } from './utils.js';
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import { SESSIONS_FILE, readJson, writeJson } from './config.js';
-
-const BASE_SYSTEM = `You are GLMCode, a terminal coding agent.\nYou work directly in the user's project.\nRules:\n- Inspect before modifying.\n- Prefer small, reversible edits.\n- Use tools for files and commands instead of pretending.\n- Never claim a command/file change happened unless the tool result says so.\n- Keep the user informed about important actions.\n- Respect project instructions and loaded skills.`;
-
-export async function runAgent({ cwd, config, apiKey, prompt, model, sessionId, quiet = false }) {
-  if (!apiKey) throw new Error('No Zhipu API key. Run: glmcode auth login');
-  const skills = await loadSkills(cwd);
-  const plugins = await loadPlugins(cwd, config.plugins);
-  const pluginTools = plugins.flatMap(p => p.module?.tools || []);
-  const mcpTools = await discoverMcpTools(Object.entries(config.mcp ?? {}).map(([name, value]) => ({ name, ...value })));
-  const mcpDefs = mcpTools.filter(t => !t._error).map(t => ({ type: 'function', function: { name: `mcp__${t._mcpName}__${t.name}`, description: `[MCP ${t._mcpName}] ${t.description || t.name}`, parameters: t.inputSchema || { type: 'object', properties: {} } } }));
-  const tools = [...TOOL_DEFS, ...pluginTools, ...mcpDefs];
-  const sessionKey = sessionId || nowId('sess');
-  const sessions = await readJson(SESSIONS_FILE, {});
-  const session = sessions[sessionKey] || { id: sessionKey, cwd, createdAt: new Date().toISOString(), messages: [] };
-  const projectInstruction = await readProjectInstruction(cwd);
-  const activeSkill = config.__activeSkill ? `\n\nACTIVE SKILL INSTRUCTIONS:\n${config.__activeSkill}` : '';
-  const system = BASE_SYSTEM + (projectInstruction ? `\n\nPROJECT INSTRUCTIONS:\n${projectInstruction}` : '') + skillsPrompt(skills) + activeSkill;
-  const messages = [{ role: 'system', content: system }, ...session.messages, { role: 'user', content: prompt }];
-  const execute = makeToolExecutor({ cwd, approval: config.approval });
-
-  for (let turn = 0; turn < 16; turn++) {
-    if (!quiet) process.stdout.write('\n');
-    const answer = await streamCompletion({
-      baseUrl: config.baseUrl, apiKey, model: model || config.model, messages,
-      tools, maxTokens: config.maxTokens, temperature: config.temperature, thinking: config.thinking,
-      onText: t => process.stdout.write(t)
-    });
-    const assistant = { role: 'assistant', content: answer.content || null };
-    if (answer.tool_calls?.length) assistant.tool_calls = answer.tool_calls;
-    messages.push(assistant);
-    if (!answer.tool_calls?.length) break;
-    for (const call of answer.tool_calls) {
-      const name = call.function.name;
-      let args; try { args = JSON.parse(call.function.arguments || '{}'); } catch { args = {}; }
-      let result;
-      try {
-        if (name.startsWith('mcp__')) {
-          const parts = name.split('__');
-          const serverName = parts[1]; const toolName = parts.slice(2).join('__');
-          const match = mcpTools.find(t => t._mcpName === serverName && t.name === toolName);
-          if (!match) throw new Error(`MCP tool not found: ${name}`);
-          result = JSON.stringify(await callMcpTool(match, args));
-        } else { result = await execute(name, args); }
-      } catch (e) { result = `ERROR: ${e.message}`; }
-      messages.push({ role: 'tool', tool_call_id: call.id, name, content: String(result) });
-      if (!quiet) process.stdout.write(`\n[tool:${name}] ${String(result).slice(0, 1200)}\n`);
-    }
-  }
-  session.messages = messages.filter(m => m.role !== 'system').slice(-80);
-  sessions[sessionKey] = session;
-  await writeJson(SESSIONS_FILE, sessions);
-  return sessionKey;
-}
-
-async function readProjectInstruction(cwd) {
-  const files = ['AGENTS.md', 'CLAUDE.md', '.glmcode/INSTRUCTIONS.md'];
-  const chunks = [];
-  for (const f of files) { try { chunks.push(`# ${f}\n${await fs.readFile(path.join(cwd, f), 'utf8')}`); } catch {} }
-  return chunks.join('\n\n');
-}

package/src/mcp.js

@@ -1,71 +0,0 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import { spawn } from 'node:child_process';
-
-export async function listMcp(config) {
-  return Object.entries(config?.mcp ?? {}).map(([name, value]) => ({ name, ...value }));
-}
-
-function startServer(server) {
-  if (server.type !== 'stdio') throw new Error('MCP server type must be "stdio" in GLMCode 0.1.x.');
-  const [command, ...args] = server.command;
-  if (!command) throw new Error('MCP stdio server requires command[]');
-  const child = spawn(command, args, { env: { ...process.env, ...(server.env || {}) }, stdio: ['pipe', 'pipe', 'inherit'] });
-  let buffer = '';
-  const pending = new Map();
-  child.stdout.on('data', data => {
-    buffer += data.toString();
-    const lines = buffer.split('\n');
-    buffer = lines.pop() || '';
-    for (const line of lines) {
-      if (!line.trim()) continue;
-      try {
-        const msg = JSON.parse(line);
-        if (msg.id != null && pending.has(msg.id)) {
-          const p = pending.get(msg.id); pending.delete(msg.id); p(msg);
-        }
-      } catch {}
-    }
-  });
-  child.on('exit', () => { for (const p of pending.values()) p({ error: { message: 'MCP process exited' } }); pending.clear(); });
-  let nextId = 1;
-  function request(method, params = {}) {
-    const id = nextId++;
-    return new Promise((resolve, reject) => {
-      pending.set(id, msg => msg.error ? reject(new Error(msg.error.message || JSON.stringify(msg.error))) : resolve(msg.result));
-      child.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method, params }) + '\n');
-      setTimeout(() => { if (pending.has(id)) { pending.delete(id); reject(new Error(`MCP timeout: ${method}`)); } }, server.timeout ?? 15000).unref();
-    });
-  }
-  return { child, request };
-}
-
-export async function discoverMcpTools(servers) {
-  const outputs = [];
-  for (const serverInfo of servers) {
-    try {
-      const server = startServer(serverInfo);
-      await server.request('initialize', { protocolVersion: '2025-03-26', capabilities: {}, clientInfo: { name: 'glmcode', version: '0.1.1' } });
-      server.child.stdin.write(JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized', params: {} }) + '\n');
-      const result = await server.request('tools/list');
-      for (const tool of result?.tools || []) outputs.push({ ...tool, _server: serverInfo, _runtime: server, _mcpName: serverInfo.name });
-    } catch (e) {
-      outputs.push({ name: `__error__${serverInfo.name}`, description: `MCP connection error: ${e.message}`, inputSchema: { type: 'object', properties: {} }, _error: e.message, _server: serverInfo });
-    }
-  }
-  return outputs;
-}
-
-export async function callMcpTool(runtimeTool, args) {
-  if (!runtimeTool._runtime) throw new Error(runtimeTool._error || 'MCP server unavailable');
-  return runtimeTool._runtime.request('tools/call', { name: runtimeTool.name, arguments: args });
-}
-
-export async function saveMcpConfig(file, name, server) {
-  let cfg = {};
-  try { cfg = JSON.parse(await fs.readFile(file, 'utf8')); } catch {}
-  cfg.mcp ??= {};
-  cfg.mcp[name] = server;
-  await fs.mkdir(path.dirname(file), { recursive: true });
-  await fs.writeFile(file, JSON.stringify(cfg, null, 2) + '\n');
-}

package/src/provider.js

@@ -1,54 +0,0 @@
-export async function chatCompletion({ baseUrl, apiKey, model, messages, tools, maxTokens, temperature, thinking = 'enabled', stream = false }) {
-  const res = await fetch(`${baseUrl.replace(/\/$/, '')}/chat/completions`, {
-    method: 'POST',
-    headers: { 'content-type': 'application/json', authorization: `Bearer ${apiKey}` },
-    body: JSON.stringify({
-      model, messages, tools,
-      max_tokens: maxTokens,
-      temperature,
-      thinking: { type: thinking },
-      stream
-    })
-  });
-  const text = await res.text();
-  if (!res.ok) throw new Error(`GLM API ${res.status}: ${text.slice(0, 1000)}`);
-  return JSON.parse(text);
-}
-
-export async function streamCompletion({ baseUrl, apiKey, model, messages, tools, maxTokens, temperature, thinking = 'enabled', onText }) {
-  const res = await fetch(`${baseUrl.replace(/\/$/, '')}/chat/completions`, {
-    method: 'POST',
-    headers: { 'content-type': 'application/json', authorization: `Bearer ${apiKey}` },
-    body: JSON.stringify({ model, messages, tools, max_tokens: maxTokens, temperature, thinking: { type: thinking }, stream: true })
-  });
-  if (!res.ok) throw new Error(`GLM API ${res.status}: ${await res.text()}`);
-  const reader = res.body.getReader();
-  const decoder = new TextDecoder();
-  let buf = '';
-  let final = { role: 'assistant', content: '', tool_calls: [] };
-  while (true) {
-    const { value, done } = await reader.read();
-    if (done) break;
-    buf += decoder.decode(value, { stream: true });
-    const parts = buf.split('\n'); buf = parts.pop() ?? '';
-    for (const line of parts) {
-      if (!line.startsWith('data:')) continue;
-      const data = line.slice(5).trim();
-      if (data === '[DONE]') continue;
-      let chunk; try { chunk = JSON.parse(data); } catch { continue; }
-      const delta = chunk.choices?.[0]?.delta;
-      if (!delta) continue;
-      if (delta.content) { final.content += delta.content; onText?.(delta.content); }
-      if (delta.tool_calls) {
-        for (const tc of delta.tool_calls) {
-          const i = tc.index ?? 0;
-          final.tool_calls[i] ??= { id: tc.id || '', type: 'function', function: { name: '', arguments: '' } };
-          if (tc.id) final.tool_calls[i].id = tc.id;
-          if (tc.function?.name) final.tool_calls[i].function.name += tc.function.name;
-          if (tc.function?.arguments) final.tool_calls[i].function.arguments += tc.function.arguments;
-        }
-      }
-    }
-  }
-  return final;
-}

package/src/skills.js

@@ -1,51 +0,0 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import { expandHome, exists } from './utils.js';
-import AdmZip from 'adm-zip';
-
-async function extractZipSkills(root) {
-  if (!await exists(root)) return;
-  for (const name of await fs.readdir(root)) {
-    if (!name.toLowerCase().endsWith('.zip')) continue;
-    const zipPath = path.join(root, name);
-    const target = path.join(root, name.slice(0, -4));
-    try {
-      if (!await exists(target)) new AdmZip(zipPath).extractAllTo(target, true);
-    } catch {}
-  }
-}
-
-export async function loadSkills(cwd) {
-  const dirs = [path.join(cwd, '.glmcode', 'skills'), path.join(expandHome('~/.glmcode'), 'skills')];
-  const skills = [];
-  for (const root of dirs) {
-    await extractZipSkills(root);
-    if (!await exists(root)) continue;
-    for (const name of await fs.readdir(root)) {
-      const file = path.join(root, name, 'SKILL.md');
-      if (!await exists(file)) continue;
-      const content = await fs.readFile(file, 'utf8');
-      skills.push({ name, path: file, content });
-    }
-  }
-  return skills;
-}
-
-export async function loadPlugins(cwd, configured = []) {
-  const roots = [path.join(cwd, '.glmcode', 'plugins'), path.join(expandHome('~/.glmcode'), 'plugins')];
-  const mods = [...configured];
-  for (const root of roots) {
-    if (!await exists(root)) continue;
-    for (const name of await fs.readdir(root)) mods.push(path.join(root, name));
-  }
-  const plugins = [];
-  for (const item of mods) {
-    try { const mod = await import(item.startsWith('.') ? path.resolve(cwd, item) : item); plugins.push({ id: item, module: mod }); } catch (e) { plugins.push({ id: item, error: e.message }); }
-  }
-  return plugins;
-}
-
-export function skillsPrompt(skills) {
-  if (!skills.length) return '';
-  return '\n\nAVAILABLE SKILLS:\n' + skills.map(s => `## ${s.name}\n${s.content}`).join('\n\n');
-}

package/src/tools.js

@@ -1,86 +0,0 @@
-import fs from 'node:fs/promises';
-import { spawn } from 'node:child_process';
-import readline from 'node:readline/promises';
-import { stdin as input, stdout as output } from 'node:process';
-import path from 'node:path';
-import { relSafe, trimOutput, jsonText } from './utils.js';
-
-export const TOOL_DEFS = [
-  { type: 'function', function: { name: 'read_file', description: 'Read a UTF-8 text file inside the project.', parameters: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'] } } },
-  { type: 'function', function: { name: 'write_file', description: 'Create or replace a UTF-8 text file inside the project.', parameters: { type: 'object', properties: { path: { type: 'string' }, content: { type: 'string' } }, required: ['path', 'content'] } } },
-  { type: 'function', function: { name: 'list_files', description: 'List files/directories recursively or at one level inside the project.', parameters: { type: 'object', properties: { path: { type: 'string' }, depth: { type: 'integer', minimum: 1, maximum: 4 } } } } },
-  { type: 'function', function: { name: 'search_text', description: 'Search text in files inside the project.', parameters: { type: 'object', properties: { query: { type: 'string' }, path: { type: 'string' } }, required: ['query'] } } },
-  { type: 'function', function: { name: 'run_shell', description: 'Run a shell command in the project directory. Use for builds, tests, git and development commands.', parameters: { type: 'object', properties: { command: { type: 'string' }, timeoutMs: { type: 'integer', minimum: 1000, maximum: 300000 } }, required: ['command'] } } }
-];
-
-async function approve(action, details, mode) {
-  if (mode === 'auto') return true;
-  if (mode === 'deny') return false;
-  const rl = readline.createInterface({ input, output });
-  const answer = await rl.question(`\n⚠ ${action}\n${details}\nAllow? [y/N] `);
-  rl.close();
-  return /^y(es)?$/i.test(answer.trim());
-}
-
-async function listTree(dir, root, depth, out = []) {
-  if (depth < 0) return out;
-  for (const ent of await fs.readdir(dir, { withFileTypes: true })) {
-    if (['.git', 'node_modules', '.glmcode/cache'].includes(path.relative(root, path.join(dir, ent.name))) || ent.name === '.git') continue;
-    const full = path.join(dir, ent.name);
-    out.push({ path: path.relative(root, full) || '.', type: ent.isDirectory() ? 'dir' : 'file' });
-    if (ent.isDirectory() && depth > 0) await listTree(full, root, depth - 1, out);
-    if (out.length > 500) break;
-  }
-  return out;
-}
-
-export function makeToolExecutor({ cwd, approval = 'ask' }) {
-  return async function execute(name, args) {
-    switch (name) {
-      case 'read_file': {
-        const file = relSafe(cwd, args.path);
-        return trimOutput(await fs.readFile(file, 'utf8'));
-      }
-      case 'write_file': {
-        const file = relSafe(cwd, args.path);
-        if (!await approve('File write', file, approval)) return 'DENIED by user.';
-        await fs.mkdir(path.dirname(file), { recursive: true });
-        await fs.writeFile(file, args.content, 'utf8');
-        return `Wrote ${path.relative(cwd, file)} (${Buffer.byteLength(args.content, 'utf8')} bytes).`;
-      }
-      case 'list_files': {
-        const dir = relSafe(cwd, args.path || '.');
-        return jsonText(await listTree(dir, cwd, Math.min(args.depth ?? 1, 4)));
-      }
-      case 'search_text': {
-        const base = relSafe(cwd, args.path || '.');
-        const hits = [];
-        async function walk(d) {
-          for (const ent of await fs.readdir(d, { withFileTypes: true })) {
-            if (['.git', 'node_modules', 'dist', 'build'].includes(ent.name)) continue;
-            const f = path.join(d, ent.name);
-            if (ent.isDirectory()) await walk(f);
-            else if (hits.length < 100) {
-              try { const text = await fs.readFile(f, 'utf8'); const lines = text.split(/\r?\n/); lines.forEach((line, i) => { if (line.toLowerCase().includes(String(args.query).toLowerCase()) && hits.length < 100) hits.push({ path: path.relative(cwd, f), line: i + 1, text: line.slice(0, 500) }); }); } catch {}
-            }
-          }
-        }
-        await walk(base);
-        return jsonText(hits);
-      }
-      case 'run_shell': {
-        if (!await approve('Shell execution', args.command, approval)) return 'DENIED by user.';
-        const timeout = Math.max(1000, Math.min(args.timeoutMs ?? 120000, 300000));
-        return await new Promise((resolve) => {
-          const child = spawn(args.command, { cwd, shell: true, env: process.env, stdio: ['ignore', 'pipe', 'pipe'] });
-          let stdout = '', stderr = '';
-          const timer = setTimeout(() => child.kill('SIGTERM'), timeout);
-          child.stdout.on('data', d => stdout += d);
-          child.stderr.on('data', d => stderr += d);
-          child.on('close', code => { clearTimeout(timer); resolve(`exit=${code}\nSTDOUT:\n${trimOutput(stdout)}\nSTDERR:\n${trimOutput(stderr)}`); });
-        });
-      }
-      default: throw new Error(`Unknown tool: ${name}`);
-    }
-  };
-}

package/src/utils.js

@@ -1,15 +0,0 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import os from 'node:os';
-
-export function expandHome(p) { return p.startsWith('~/') ? path.join(os.homedir(), p.slice(2)) : p; }
-export async function exists(p) { try { await fs.access(p); return true; } catch { return false; } }
-export function trimOutput(s, max = 12000) { return s.length <= max ? s : s.slice(0, max) + `\n… [truncated to ${max} chars]`; }
-export function jsonText(value) { return JSON.stringify(value, null, 2); }
-export function relSafe(cwd, target) {
-  const abs = path.resolve(cwd, target);
-  const root = path.resolve(cwd);
-  if (abs !== root && !abs.startsWith(root + path.sep)) throw new Error(`Path escapes project root: ${target}`);
-  return abs;
-}
-export function nowId(prefix = 's') { return `${prefix}_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 8)}`; }

package/templates/.glmcode/plugins/example-plugin.js

@@ -1,2 +0,0 @@
-export const tools = [];
-// Plugins can export `tools` using the same OpenAI-compatible tool definition format.

package/templates/.glmcode/skills/code-review/SKILL.md

@@ -1,3 +0,0 @@
-# Code Review
-
-Review changes for correctness, edge cases, security, maintainability and tests. Before changing code, inspect the relevant files and verify the result with the project's test/build command when available.