sillyspec 3.26.9 → 3.26.11

package/src/setup.js

@@ -1,416 +1,416 @@
-import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
-import { join, dirname } from 'path';
-import { execSync, execFileSync } from 'child_process';
-import chalk from 'chalk';
-import ora from 'ora';
-import { checkbox, input } from '@inquirer/prompts';
-
-// ── MCP 工具定义 ──
-
-const MCP_TOOLS = [
-  {
-    id: 'context7',
-    name: 'Context7',
-    description: '查询最新库文档和 API 参考',
-    command: 'npx',
-    // 版本锁定（sec-c）：MCP server 常驻且有系统访问能力，@latest = trust-on-future-publish，
-    // 上游被攻破会直接进用户 AI 工具执行环境。升级走 setup 重跑。
-    args: ['-y', '@upstash/context7-mcp@4.0.2'],
-    url: 'https://github.com/upstash/context7-mcp',
-  },
-  {
-    id: 'chrome-devtools',
-    name: 'Chrome DevTools MCP',
-    description: '浏览器自动化，支持 E2E 测试（需 Chrome 已运行）',
-    command: 'npx',
-    args: ['chrome-devtools-mcp@1.7.0'],
-    url: 'https://github.com/ChromeDevTools/chrome-devtools-mcp',
-  },
-  {
-    id: 'agent-browser',
-    name: 'Agent Browser (Vercel)',
-    description: 'Rust 原生浏览器 CLI，token 消耗极低，50+ 命令覆盖导航/表单/截图/网络',
-    command: 'npx',
-    args: ['agent-browser@0.34.0'],
-    url: 'https://github.com/vercel-labs/agent-browser',
-  },
-  {
-    id: 'pinchtab',
-    name: 'PinchTab',
-    description: '12MB Go 二进制，零依赖，accessibility tree 极省 token，有 MCP 支持',
-    command: 'npx',
-    args: ['pinchtab-mcp@1.4.1'],
-    url: 'https://github.com/pinchtab/pinchtab',
-  },
-];
-
-// ── 数据库 MCP 定义（需要连接信息）──
-
-const DB_MCP_TOOLS = [
-  {
-    id: 'postgres',
-    name: 'PostgreSQL',
-    description: '只读访问 PostgreSQL 数据库',
-    command: 'npx',
-    args: ['-y', '@modelcontextprotocol/server-postgres@0.6.2'],
-    envTemplate: { POSTGRES_CONNECTION_STRING: 'postgresql://user:password@localhost:5432/dbname' },
-    url: 'https://github.com/modelcontextprotocol/servers/tree/main/src/postgres',
-  },
-  {
-    id: 'sqlite',
-    name: 'SQLite',
-    description: '访问 SQLite 数据库文件',
-    command: 'npx',
-    args: ['-y', 'mcp-server-sqlite@0.0.2'],
-    envTemplate: { SQLITE_DB_PATH: './data.db' },
-    url: 'https://github.com/modelcontextprotocol/servers/tree/main/src/sqlite',
-  },
-  {
-    id: 'mysql',
-    name: 'MySQL / MariaDB',
-    description: '访问 MySQL / MariaDB 数据库',
-    command: 'npx',
-    // 原 @nicobailon/mysql-mcp-server 已 404（包下架），换存在的 mysql-mcp-server（dpflucas，read-only）
-    args: ['-y', 'mysql-mcp-server@0.1.3'],
-    envTemplate: { MYSQL_HOST: 'localhost', MYSQL_PORT: '3306', MYSQL_USER: 'root', MYSQL_PASSWORD: '', MYSQL_DATABASE: '' },
-    url: 'https://github.com/modelcontextprotocol/servers',
-  },
-  {
-    id: 'redis',
-    name: 'Redis',
-    description: '访问 Redis 数据库，查看缓存和键值数据',
-    command: 'npx',
-    args: ['-y', '@modelcontextprotocol/server-redis@2025.4.25'],
-    envTemplate: { REDIS_URL: 'redis://localhost:6379' },
-    url: 'https://github.com/modelcontextprotocol/servers/tree/main/src/redis',
-  },
-];
-
-// ── 全局工具定义 ──
-
-const GLOBAL_TOOLS = [
-  {
-    id: 'playwright',
-    name: 'Playwright',
-    description: 'E2E 测试框架，支持浏览器自动化测试',
-    checkCommand: 'npx playwright --version',
-    installCommand: 'npm install -g @playwright/test && npx playwright install chromium',
-    url: 'https://playwright.dev',
-  },
-];
-
-// ── MCP 配置文件路径 ──
-
-const MCP_CONFIG_PATHS = [
-  { tool: 'Claude Code', path: '.claude/mcp.json', key: 'claude' },
-  { tool: 'Cursor', path: '.cursor/mcp.json', key: 'cursor' },
-];
-
-// ── 工具函数 ──
-
-function readMcpConfig(dir, configPath) {
-  const fullPath = join(dir, configPath);
-  if (!existsSync(fullPath)) return null;
-  try {
-    return JSON.parse(readFileSync(fullPath, 'utf8'));
-  } catch {
-    return null;
-  }
-}
-
-function writeMcpConfig(dir, configPath, config) {
-  const fullPath = join(dir, configPath);
-  mkdirSync(dirname(fullPath), { recursive: true });
-  writeFileSync(fullPath, JSON.stringify(config, null, 2) + '\n');
-}
-
-function installMcp(config, mcpTool) {
-  if (!config.mcpServers) config.mcpServers = {};
-  const entry = {
-    command: mcpTool.command,
-    args: mcpTool.args,
-  };
-  if (mcpTool.env) entry.env = mcpTool.env;
-  config.mcpServers[mcpTool.id] = entry;
-  return config;
-}
-
-function hasMcpInstalled(config, mcpId) {
-  return config?.mcpServers?.[mcpId] != null;
-}
-
-// ── 命令实现 ──
-
-export async function cmdSetup(dir, options = {}) {
-  const { json } = options;
-
-  // 检查哪些 AI 工具有配置文件
-  const availableTools = MCP_CONFIG_PATHS.filter(({ path }) => {
-    return existsSync(join(dir, path));
-  });
-
-  // --list 模式：只查看状态（不依赖 AI 工具配置）
-  if (options.list) {
-    const results = {};
-
-    // MCP 状态
-    for (const { tool, path } of availableTools) {
-      const config = readMcpConfig(dir, path);
-      const mcpStatus = {};
-      for (const mcp of MCP_TOOLS) {
-        mcpStatus[mcp.id] = hasMcpInstalled(config, mcp.id);
-      }
-      for (const db of DB_MCP_TOOLS) {
-        mcpStatus[db.id] = hasMcpInstalled(config, db.id);
-      }
-      results[tool] = { configPath: path, mcp: mcpStatus };
-    }
-
-    // 全局工具状态
-    results['全局工具'] = {};
-    for (const g of GLOBAL_TOOLS) {
-      try {
-        execSync(g.checkCommand, { stdio: 'pipe', encoding: 'utf8' });
-        results['全局工具'][g.id] = true;
-      } catch {
-        results['全局工具'][g.id] = false;
-      }
-    }
-
-    if (json) {
-      console.log(JSON.stringify(results, null, 2));
-    } else {
-      console.log('');
-      for (const [tool, data] of Object.entries(results)) {
-        if (data.mcp) {
-          console.log(chalk.bold(`📋 ${tool} (${data.configPath})`));
-          for (const mcp of MCP_TOOLS) {
-            const status = data.mcp[mcp.id] ? chalk.green('✅') : chalk.gray('⬜');
-            console.log(`  ${status} ${mcp.name} — ${mcp.description}`);
-          }
-          for (const db of DB_MCP_TOOLS) {
-            const status = data.mcp[db.id] ? chalk.green('✅') : chalk.gray('⬜');
-            console.log(`  ${status} ${db.name} — ${db.description}`);
-          }
-        } else {
-          console.log(chalk.bold(`🛠️  ${tool}`));
-          for (const g of GLOBAL_TOOLS) {
-            const status = data[g.id] ? chalk.green('✅') : chalk.gray('⬜');
-            console.log(`  ${status} ${g.name} — ${g.description}`);
-          }
-        }
-        console.log('');
-      }
-    }
-    return;
-  }
-
-  // 非交互模式（或没有 AI 工具但有全局工具要装）
-  if (!process.stdin.isTTY) {
-    if (json) {
-      console.log(JSON.stringify({ message: '交互模式需要 TTY，请运行 sillyspec setup' }));
-    } else {
-      console.log(chalk.yellow('⚠️  请在交互式终端运行 sillyspec setup'));
-    }
-    return;
-  }
-
-  // ── 交互式安装 ──
-
-  console.log('');
-  console.log(chalk.cyan('🔧 SillySpec Setup — 增强工具安装'));
-  console.log('');
-
-  if (availableTools.length === 0) {
-    console.log(chalk.dim('  未检测到 AI 工具配置文件，MCP 工具将跳过。'));
-    console.log(chalk.dim('  请先运行 sillyspec init 初始化项目。'));
-    console.log('');
-  }
-
-  console.log('  选择要安装的工具（已安装的会跳过）：');
-  console.log('');
-
-  // ── MCP 工具选择 ──
-
-  const installedSet = new Set();
-  for (const { path } of availableTools) {
-    const config = readMcpConfig(dir, path);
-    for (const mcp of MCP_TOOLS) {
-      if (hasMcpInstalled(config, mcp.id)) installedSet.add(mcp.id);
-    }
-  }
-
-  const mcpChoices = MCP_TOOLS.filter(m => !installedSet.has(m.id)).map(m => ({
-    name: `${m.name} — ${m.description}`,
-    value: `mcp:${m.id}`,
-    checked: false,
-  }));
-
-  // ── 全局工具选择 ──
-
-  const globalInstalled = new Set();
-  for (const tool of GLOBAL_TOOLS) {
-    try {
-      execSync(tool.checkCommand, { stdio: 'pipe', encoding: 'utf8' });
-      globalInstalled.add(tool.id);
-    } catch {}
-  }
-
-  const globalChoices = GLOBAL_TOOLS.filter(t => !globalInstalled.has(t.id)).map(t => ({
-    name: `${t.name} — ${t.description}（全局安装）`,
-    value: `global:${t.id}`,
-    checked: false,
-  }));
-
-  // ── 数据库 MCP 选择 ──
-
-  const dbInstalled = new Set();
-  for (const { path } of availableTools) {
-    const config = readMcpConfig(dir, path);
-    for (const db of DB_MCP_TOOLS) {
-      if (hasMcpInstalled(config, db.id)) dbInstalled.add(db.id);
-    }
-  }
-
-  const dbChoices = DB_MCP_TOOLS.filter(d => !dbInstalled.has(d.id)).map(d => ({
-    name: `${d.name} — ${d.description}（需要连接信息）`,
-    value: `db:${d.id}`,
-    checked: false,
-  }));
-
-  const allChoices = [
-    ...mcpChoices.length > 0 ? [{ name: chalk.bold('── MCP 工具（AI 能力增强）──'), value: '_mcp_header', disabled: true }] : [],
-    ...mcpChoices,
-    ...dbChoices.length > 0 ? [{ name: chalk.bold('── 数据库 MCP ──'), value: '_db_header', disabled: true }] : [],
-    ...dbChoices,
-    ...globalChoices.length > 0 ? [{ name: chalk.bold('── 全局工具 ──'), value: '_global_header', disabled: true }] : [],
-    ...globalChoices,
-  ];
-
-  if (allChoices.length === 0) {
-    console.log(chalk.green('  ✅ 所有推荐工具已安装！'));
-    return;
-  }
-
-  const selected = await checkbox({
-    message: '选择要安装的工具',
-    choices: allChoices,
-  });
-
-  if (selected.length === 0) {
-    console.log(chalk.dim('  未选择任何工具，退出。'));
-    return;
-  }
-
-  const selectedMcp = MCP_TOOLS.filter(m => selected.includes(`mcp:${m.id}`));
-  const selectedDb = DB_MCP_TOOLS.filter(d => selected.includes(`db:${d.id}`));
-  const selectedGlobal = GLOBAL_TOOLS.filter(t => selected.includes(`global:${t.id}`));
-
-  // ── 收集数据库连接信息 ──
-
-  if (selectedDb.length > 0) {
-    console.log('');
-    console.log(chalk.yellow('📡 数据库连接配置'));
-    console.log('');
-
-    for (const db of selectedDb) {
-      console.log(chalk.cyan(`  ${db.name}：`));
-      const dbWithEnv = { ...db, env: {} };
-      for (const [key, placeholder] of Object.entries(db.envTemplate)) {
-        const value = await input({
-          message: `    ${key}`,
-          default: placeholder,
-        });
-        dbWithEnv.env[key] = value;
-      }
-      // 用带 env 的版本替换
-      const idx = selectedDb.indexOf(db);
-      selectedDb[idx] = dbWithEnv;
-    }
-  }
-
-  // ── 安装 MCP 工具 ──
-
-  const allMcp = [...selectedMcp, ...selectedDb];
-
-  if (allMcp.length > 0) {
-    const toolChoices = availableTools.map(t => ({
-      name: t.tool,
-      value: t.key,
-      checked: true,
-    }));
-
-    const targetTools = await checkbox({
-      message: 'MCP 工具安装到哪些 AI 工具？',
-      choices: toolChoices,
-    });
-
-    const targets = availableTools.filter(t => targetTools.includes(t.key));
-
-    console.log('');
-    for (const { tool, path } of targets) {
-      const spinner = ora(`安装 MCP 到 ${tool}...`).start();
-      let config = readMcpConfig(dir, path) || { mcpServers: {} };
-      for (const mcp of allMcp) {
-        config = installMcp(config, mcp);
-      }
-      writeMcpConfig(dir, path, config);
-      spinner.succeed(`${tool} MCP 完成 (${allMcp.length} 个工具)`);
-      // 凭据提交风险提示（sec-c）：.claude/mcp.json / .cursor/mcp.json 是项目共享文件、通常随 git
-      // 提交，而 DB MCP 的 env 含明文连接串/密码。检测 git 跟踪状态，已跟踪/未忽略时显式警告。
-      if (selectedDb.length > 0) {
-        try {
-          execFileSync('git', ['-C', dir, 'ls-files', '--error-unmatch', path], { stdio: 'pipe' });
-          console.warn(chalk.yellow(`  ⚠️ ${path} 已被 git 跟踪——其中数据库连接串/密码会随提交进入仓库，建议加入 .gitignore 或改用环境变量`));
-        } catch {
-          // 未被跟踪：再查是否被 ignore；都不满足（未忽略未跟踪）时提示防止将来误提交
-          try {
-            execFileSync('git', ['-C', dir, 'check-ignore', '-q', path], { stdio: 'pipe' });
-          } catch {
-            console.warn(chalk.yellow(`  ⚠️ ${path} 含数据库连接串/密码且未被 .gitignore 忽略——提交前请先加入 .gitignore 或改用环境变量`));
-          }
-        }
-      }
-    }
-  }
-
-  // ── 安装全局工具 ──
-
-  if (selectedGlobal.length > 0) {
-    console.log('');
-    for (const tool of selectedGlobal) {
-      const spinner = ora(`安装 ${tool.name}...`).start();
-      try {
-        execSync(tool.installCommand, { stdio: 'pipe', encoding: 'utf8', timeout: 120000 });
-        spinner.succeed(`${tool.name} 安装完成`);
-      } catch (err) {
-        spinner.fail(`${tool.name} 安装失败: ${err.message}`);
-      }
-    }
-  }
-
-  // ── 总结 ──
-
-  console.log('');
-  console.log(chalk.green('  ═══════════════════════════════════════'));
-  console.log(chalk.green('  ✅ 工具安装完成！'));
-  console.log(chalk.green('  ═══════════════════════════════════════'));
-  console.log('');
-  for (const mcp of selectedMcp) {
-    console.log(`  🔌 ${chalk.cyan(mcp.name)} — ${mcp.description}`);
-    console.log(chalk.dim(`     ${mcp.url}`));
-  }
-  for (const db of selectedDb) {
-    console.log(`  🗄️  ${chalk.cyan(db.name)} — ${db.description}`);
-    console.log(chalk.dim(`     ${db.url}`));
-  }
-  for (const g of selectedGlobal) {
-    console.log(`  🛠️  ${chalk.cyan(g.name)} — ${g.description}`);
-    console.log(chalk.dim(`     ${g.url}`));
-  }
-  console.log('');
-  if (selectedMcp.length > 0) {
-    console.log(chalk.dim('  重启你的 AI 工具以使 MCP 配置生效。'));
-  }
-  console.log('');
-}
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { join, dirname } from 'path';
+import { execSync, execFileSync } from 'child_process';
+import chalk from 'chalk';
+import ora from 'ora';
+import { checkbox, input } from '@inquirer/prompts';
+
+// ── MCP 工具定义 ──
+
+const MCP_TOOLS = [
+  {
+    id: 'context7',
+    name: 'Context7',
+    description: '查询最新库文档和 API 参考',
+    command: 'npx',
+    // 版本锁定（sec-c）：MCP server 常驻且有系统访问能力，@latest = trust-on-future-publish，
+    // 上游被攻破会直接进用户 AI 工具执行环境。升级走 setup 重跑。
+    args: ['-y', '@upstash/context7-mcp@4.0.2'],
+    url: 'https://github.com/upstash/context7-mcp',
+  },
+  {
+    id: 'chrome-devtools',
+    name: 'Chrome DevTools MCP',
+    description: '浏览器自动化，支持 E2E 测试（需 Chrome 已运行）',
+    command: 'npx',
+    args: ['chrome-devtools-mcp@1.7.0'],
+    url: 'https://github.com/ChromeDevTools/chrome-devtools-mcp',
+  },
+  {
+    id: 'agent-browser',
+    name: 'Agent Browser (Vercel)',
+    description: 'Rust 原生浏览器 CLI，token 消耗极低，50+ 命令覆盖导航/表单/截图/网络',
+    command: 'npx',
+    args: ['agent-browser@0.34.0'],
+    url: 'https://github.com/vercel-labs/agent-browser',
+  },
+  {
+    id: 'pinchtab',
+    name: 'PinchTab',
+    description: '12MB Go 二进制，零依赖，accessibility tree 极省 token，有 MCP 支持',
+    command: 'npx',
+    args: ['pinchtab-mcp@1.4.1'],
+    url: 'https://github.com/pinchtab/pinchtab',
+  },
+];
+
+// ── 数据库 MCP 定义（需要连接信息）──
+
+const DB_MCP_TOOLS = [
+  {
+    id: 'postgres',
+    name: 'PostgreSQL',
+    description: '只读访问 PostgreSQL 数据库',
+    command: 'npx',
+    args: ['-y', '@modelcontextprotocol/server-postgres@0.6.2'],
+    envTemplate: { POSTGRES_CONNECTION_STRING: 'postgresql://user:password@localhost:5432/dbname' },
+    url: 'https://github.com/modelcontextprotocol/servers/tree/main/src/postgres',
+  },
+  {
+    id: 'sqlite',
+    name: 'SQLite',
+    description: '访问 SQLite 数据库文件',
+    command: 'npx',
+    args: ['-y', 'mcp-server-sqlite@0.0.2'],
+    envTemplate: { SQLITE_DB_PATH: './data.db' },
+    url: 'https://github.com/modelcontextprotocol/servers/tree/main/src/sqlite',
+  },
+  {
+    id: 'mysql',
+    name: 'MySQL / MariaDB',
+    description: '访问 MySQL / MariaDB 数据库',
+    command: 'npx',
+    // 原 @nicobailon/mysql-mcp-server 已 404（包下架），换存在的 mysql-mcp-server（dpflucas，read-only）
+    args: ['-y', 'mysql-mcp-server@0.1.3'],
+    envTemplate: { MYSQL_HOST: 'localhost', MYSQL_PORT: '3306', MYSQL_USER: 'root', MYSQL_PASSWORD: '', MYSQL_DATABASE: '' },
+    url: 'https://github.com/modelcontextprotocol/servers',
+  },
+  {
+    id: 'redis',
+    name: 'Redis',
+    description: '访问 Redis 数据库，查看缓存和键值数据',
+    command: 'npx',
+    args: ['-y', '@modelcontextprotocol/server-redis@2025.4.25'],
+    envTemplate: { REDIS_URL: 'redis://localhost:6379' },
+    url: 'https://github.com/modelcontextprotocol/servers/tree/main/src/redis',
+  },
+];
+
+// ── 全局工具定义 ──
+
+const GLOBAL_TOOLS = [
+  {
+    id: 'playwright',
+    name: 'Playwright',
+    description: 'E2E 测试框架，支持浏览器自动化测试',
+    checkCommand: 'npx playwright --version',
+    installCommand: 'npm install -g @playwright/test && npx playwright install chromium',
+    url: 'https://playwright.dev',
+  },
+];
+
+// ── MCP 配置文件路径 ──
+
+const MCP_CONFIG_PATHS = [
+  { tool: 'Claude Code', path: '.claude/mcp.json', key: 'claude' },
+  { tool: 'Cursor', path: '.cursor/mcp.json', key: 'cursor' },
+];
+
+// ── 工具函数 ──
+
+function readMcpConfig(dir, configPath) {
+  const fullPath = join(dir, configPath);
+  if (!existsSync(fullPath)) return null;
+  try {
+    return JSON.parse(readFileSync(fullPath, 'utf8'));
+  } catch {
+    return null;
+  }
+}
+
+function writeMcpConfig(dir, configPath, config) {
+  const fullPath = join(dir, configPath);
+  mkdirSync(dirname(fullPath), { recursive: true });
+  writeFileSync(fullPath, JSON.stringify(config, null, 2) + '\n');
+}
+
+function installMcp(config, mcpTool) {
+  if (!config.mcpServers) config.mcpServers = {};
+  const entry = {
+    command: mcpTool.command,
+    args: mcpTool.args,
+  };
+  if (mcpTool.env) entry.env = mcpTool.env;
+  config.mcpServers[mcpTool.id] = entry;
+  return config;
+}
+
+function hasMcpInstalled(config, mcpId) {
+  return config?.mcpServers?.[mcpId] != null;
+}
+
+// ── 命令实现 ──
+
+export async function cmdSetup(dir, options = {}) {
+  const { json } = options;
+
+  // 检查哪些 AI 工具有配置文件
+  const availableTools = MCP_CONFIG_PATHS.filter(({ path }) => {
+    return existsSync(join(dir, path));
+  });
+
+  // --list 模式：只查看状态（不依赖 AI 工具配置）
+  if (options.list) {
+    const results = {};
+
+    // MCP 状态
+    for (const { tool, path } of availableTools) {
+      const config = readMcpConfig(dir, path);
+      const mcpStatus = {};
+      for (const mcp of MCP_TOOLS) {
+        mcpStatus[mcp.id] = hasMcpInstalled(config, mcp.id);
+      }
+      for (const db of DB_MCP_TOOLS) {
+        mcpStatus[db.id] = hasMcpInstalled(config, db.id);
+      }
+      results[tool] = { configPath: path, mcp: mcpStatus };
+    }
+
+    // 全局工具状态
+    results['全局工具'] = {};
+    for (const g of GLOBAL_TOOLS) {
+      try {
+        execSync(g.checkCommand, { stdio: 'pipe', encoding: 'utf8' });
+        results['全局工具'][g.id] = true;
+      } catch {
+        results['全局工具'][g.id] = false;
+      }
+    }
+
+    if (json) {
+      console.log(JSON.stringify(results, null, 2));
+    } else {
+      console.log('');
+      for (const [tool, data] of Object.entries(results)) {
+        if (data.mcp) {
+          console.log(chalk.bold(`📋 ${tool} (${data.configPath})`));
+          for (const mcp of MCP_TOOLS) {
+            const status = data.mcp[mcp.id] ? chalk.green('✅') : chalk.gray('⬜');
+            console.log(`  ${status} ${mcp.name} — ${mcp.description}`);
+          }
+          for (const db of DB_MCP_TOOLS) {
+            const status = data.mcp[db.id] ? chalk.green('✅') : chalk.gray('⬜');
+            console.log(`  ${status} ${db.name} — ${db.description}`);
+          }
+        } else {
+          console.log(chalk.bold(`🛠️  ${tool}`));
+          for (const g of GLOBAL_TOOLS) {
+            const status = data[g.id] ? chalk.green('✅') : chalk.gray('⬜');
+            console.log(`  ${status} ${g.name} — ${g.description}`);
+          }
+        }
+        console.log('');
+      }
+    }
+    return;
+  }
+
+  // 非交互模式（或没有 AI 工具但有全局工具要装）
+  if (!process.stdin.isTTY) {
+    if (json) {
+      console.log(JSON.stringify({ message: '交互模式需要 TTY，请运行 sillyspec setup' }));
+    } else {
+      console.log(chalk.yellow('⚠️  请在交互式终端运行 sillyspec setup'));
+    }
+    return;
+  }
+
+  // ── 交互式安装 ──
+
+  console.log('');
+  console.log(chalk.cyan('🔧 SillySpec Setup — 增强工具安装'));
+  console.log('');
+
+  if (availableTools.length === 0) {
+    console.log(chalk.dim('  未检测到 AI 工具配置文件，MCP 工具将跳过。'));
+    console.log(chalk.dim('  请先运行 sillyspec init 初始化项目。'));
+    console.log('');
+  }
+
+  console.log('  选择要安装的工具（已安装的会跳过）：');
+  console.log('');
+
+  // ── MCP 工具选择 ──
+
+  const installedSet = new Set();
+  for (const { path } of availableTools) {
+    const config = readMcpConfig(dir, path);
+    for (const mcp of MCP_TOOLS) {
+      if (hasMcpInstalled(config, mcp.id)) installedSet.add(mcp.id);
+    }
+  }
+
+  const mcpChoices = MCP_TOOLS.filter(m => !installedSet.has(m.id)).map(m => ({
+    name: `${m.name} — ${m.description}`,
+    value: `mcp:${m.id}`,
+    checked: false,
+  }));
+
+  // ── 全局工具选择 ──
+
+  const globalInstalled = new Set();
+  for (const tool of GLOBAL_TOOLS) {
+    try {
+      execSync(tool.checkCommand, { stdio: 'pipe', encoding: 'utf8' });
+      globalInstalled.add(tool.id);
+    } catch {}
+  }
+
+  const globalChoices = GLOBAL_TOOLS.filter(t => !globalInstalled.has(t.id)).map(t => ({
+    name: `${t.name} — ${t.description}（全局安装）`,
+    value: `global:${t.id}`,
+    checked: false,
+  }));
+
+  // ── 数据库 MCP 选择 ──
+
+  const dbInstalled = new Set();
+  for (const { path } of availableTools) {
+    const config = readMcpConfig(dir, path);
+    for (const db of DB_MCP_TOOLS) {
+      if (hasMcpInstalled(config, db.id)) dbInstalled.add(db.id);
+    }
+  }
+
+  const dbChoices = DB_MCP_TOOLS.filter(d => !dbInstalled.has(d.id)).map(d => ({
+    name: `${d.name} — ${d.description}（需要连接信息）`,
+    value: `db:${d.id}`,
+    checked: false,
+  }));
+
+  const allChoices = [
+    ...mcpChoices.length > 0 ? [{ name: chalk.bold('── MCP 工具（AI 能力增强）──'), value: '_mcp_header', disabled: true }] : [],
+    ...mcpChoices,
+    ...dbChoices.length > 0 ? [{ name: chalk.bold('── 数据库 MCP ──'), value: '_db_header', disabled: true }] : [],
+    ...dbChoices,
+    ...globalChoices.length > 0 ? [{ name: chalk.bold('── 全局工具 ──'), value: '_global_header', disabled: true }] : [],
+    ...globalChoices,
+  ];
+
+  if (allChoices.length === 0) {
+    console.log(chalk.green('  ✅ 所有推荐工具已安装！'));
+    return;
+  }
+
+  const selected = await checkbox({
+    message: '选择要安装的工具',
+    choices: allChoices,
+  });
+
+  if (selected.length === 0) {
+    console.log(chalk.dim('  未选择任何工具，退出。'));
+    return;
+  }
+
+  const selectedMcp = MCP_TOOLS.filter(m => selected.includes(`mcp:${m.id}`));
+  const selectedDb = DB_MCP_TOOLS.filter(d => selected.includes(`db:${d.id}`));
+  const selectedGlobal = GLOBAL_TOOLS.filter(t => selected.includes(`global:${t.id}`));
+
+  // ── 收集数据库连接信息 ──
+
+  if (selectedDb.length > 0) {
+    console.log('');
+    console.log(chalk.yellow('📡 数据库连接配置'));
+    console.log('');
+
+    for (const db of selectedDb) {
+      console.log(chalk.cyan(`  ${db.name}：`));
+      const dbWithEnv = { ...db, env: {} };
+      for (const [key, placeholder] of Object.entries(db.envTemplate)) {
+        const value = await input({
+          message: `    ${key}`,
+          default: placeholder,
+        });
+        dbWithEnv.env[key] = value;
+      }
+      // 用带 env 的版本替换
+      const idx = selectedDb.indexOf(db);
+      selectedDb[idx] = dbWithEnv;
+    }
+  }
+
+  // ── 安装 MCP 工具 ──
+
+  const allMcp = [...selectedMcp, ...selectedDb];
+
+  if (allMcp.length > 0) {
+    const toolChoices = availableTools.map(t => ({
+      name: t.tool,
+      value: t.key,
+      checked: true,
+    }));
+
+    const targetTools = await checkbox({
+      message: 'MCP 工具安装到哪些 AI 工具？',
+      choices: toolChoices,
+    });
+
+    const targets = availableTools.filter(t => targetTools.includes(t.key));
+
+    console.log('');
+    for (const { tool, path } of targets) {
+      const spinner = ora(`安装 MCP 到 ${tool}...`).start();
+      let config = readMcpConfig(dir, path) || { mcpServers: {} };
+      for (const mcp of allMcp) {
+        config = installMcp(config, mcp);
+      }
+      writeMcpConfig(dir, path, config);
+      spinner.succeed(`${tool} MCP 完成 (${allMcp.length} 个工具)`);
+      // 凭据提交风险提示（sec-c）：.claude/mcp.json / .cursor/mcp.json 是项目共享文件、通常随 git
+      // 提交，而 DB MCP 的 env 含明文连接串/密码。检测 git 跟踪状态，已跟踪/未忽略时显式警告。
+      if (selectedDb.length > 0) {
+        try {
+          execFileSync('git', ['-C', dir, 'ls-files', '--error-unmatch', path], { stdio: 'pipe' });
+          console.warn(chalk.yellow(`  ⚠️ ${path} 已被 git 跟踪——其中数据库连接串/密码会随提交进入仓库，建议加入 .gitignore 或改用环境变量`));
+        } catch {
+          // 未被跟踪：再查是否被 ignore；都不满足（未忽略未跟踪）时提示防止将来误提交
+          try {
+            execFileSync('git', ['-C', dir, 'check-ignore', '-q', path], { stdio: 'pipe' });
+          } catch {
+            console.warn(chalk.yellow(`  ⚠️ ${path} 含数据库连接串/密码且未被 .gitignore 忽略——提交前请先加入 .gitignore 或改用环境变量`));
+          }
+        }
+      }
+    }
+  }
+
+  // ── 安装全局工具 ──
+
+  if (selectedGlobal.length > 0) {
+    console.log('');
+    for (const tool of selectedGlobal) {
+      const spinner = ora(`安装 ${tool.name}...`).start();
+      try {
+        execSync(tool.installCommand, { stdio: 'pipe', encoding: 'utf8', timeout: 120000 });
+        spinner.succeed(`${tool.name} 安装完成`);
+      } catch (err) {
+        spinner.fail(`${tool.name} 安装失败: ${err.message}`);
+      }
+    }
+  }
+
+  // ── 总结 ──
+
+  console.log('');
+  console.log(chalk.green('  ═══════════════════════════════════════'));
+  console.log(chalk.green('  ✅ 工具安装完成！'));
+  console.log(chalk.green('  ═══════════════════════════════════════'));
+  console.log('');
+  for (const mcp of selectedMcp) {
+    console.log(`  🔌 ${chalk.cyan(mcp.name)} — ${mcp.description}`);
+    console.log(chalk.dim(`     ${mcp.url}`));
+  }
+  for (const db of selectedDb) {
+    console.log(`  🗄️  ${chalk.cyan(db.name)} — ${db.description}`);
+    console.log(chalk.dim(`     ${db.url}`));
+  }
+  for (const g of selectedGlobal) {
+    console.log(`  🛠️  ${chalk.cyan(g.name)} — ${g.description}`);
+    console.log(chalk.dim(`     ${g.url}`));
+  }
+  console.log('');
+  if (selectedMcp.length > 0) {
+    console.log(chalk.dim('  重启你的 AI 工具以使 MCP 配置生效。'));
+  }
+  console.log('');
+}