zcode-acp-server 0.46.7 → 0.47.1

package/dist/settings/provider-config.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Read/write for the desktop's personal provider config
+ * (`~/.zcode/v2/provider_config.json`).
+ *
+ * This is where 3.12+ stores every user-added provider and model; the backend
+ * registry reads it directly and absorbs external writes through a ~1s poll,
+ * so a change here takes effect with NO restart and NO RPC
+ * (`personal-provider-config-repository.ts`).
+ *
+ * What this module deliberately does NOT do:
+ *
+ *  - **Create or delete providers.** A provider rule carries credentials, an
+ *    API protocol type and a model list, and getting it wrong yields a provider
+ *    that fails at request time. That is a desktop-app (or hand-edit) job.
+ *  - **Write `account:*` access.** The registry rejects `zhipu-account` access
+ *    on personal rules outright — those providers come from the bundled table
+ *    plus the account snapshot the bridge pushes. Writing one produces a file
+ *    the backend refuses to load.
+ *
+ * Everything else the app's model page can do is here: enable/disable, rename,
+ * add/remove a model on an existing provider, and edit a model's context
+ * window and reasoning-level vocabulary.
+ *
+ * Canonical form matters: the file is written with 2-space indentation and NO
+ * trailing newline, matching the app's own writer. A non-canonical file is
+ * read fine but rewritten by the app on its next save, which would look like
+ * our edit "reverting".
+ */
+export interface ProviderModelConfig {
+    enabled?: boolean;
+    properties?: {
+        contextWindow?: number;
+    };
+    optionSpecs?: {
+        reasoningLevel?: {
+            values?: string[];
+        };
+    };
+}
+/** A model rule as stored, with its owning provider. */
+export interface ModelRule {
+    providerId: string;
+    modelId: string;
+    config: ProviderModelConfig;
+}
+export interface ProviderRule {
+    providerId: string;
+    providerName?: string;
+    enabled?: boolean;
+    config?: {
+        access?: {
+            type?: string;
+            apiKey?: string;
+        };
+        api?: {
+            type?: string;
+            baseUrl?: string;
+        };
+        personalModelIds?: string[];
+        modelOrder?: string[];
+        [key: string]: unknown;
+    };
+}
+export interface ProviderConfigFile {
+    schemaVersion: number;
+    config: {
+        providerOrder?: string[];
+        providerConfigRules: {
+            providerRules: ProviderRule[];
+        };
+        modelConfigRules: {
+            providerModelRules: ModelRule[];
+            manualProviderModelRules: ModelRule[];
+        };
+        defaultModelSelection?: Record<string, unknown>;
+    };
+}
+/**
+ * Read the file, or return an empty canonical document when it is absent.
+ *
+ * @throws when the file exists but is malformed — the settings layer must
+ *         refuse the write rather than base it on an empty document (the app's
+ *         own reader degrades to an empty overlay while KEEPING the bad bytes,
+ *         so silently overwriting would destroy what is still recoverable).
+ */
+export declare function readProviderConfig(): Promise<ProviderConfigFile>;
+/**
+ * Serialize in the app's canonical form: 2-space indentation, NO trailing
+ * newline (the app's writer uses `JSON.stringify` directly). A trailing
+ * newline is not an error to the reader, but the app rewrites the file to its
+ * own canonical form on its next save, which makes our edit look reverted.
+ */
+export declare function encodeProviderConfig(doc: unknown): string;
+/** Structural self-check run before the bytes land. */
+export declare function validateProviderConfig(doc: Record<string, unknown>): boolean | string;
+/**
+ * Enable or disable a provider, and/or rename it.
+ *
+ * @param patch.enabled  `true`/`false` flips the rule's `enabled` flag; omit to
+ *                       leave it alone.
+ * @param patch.providerName renames the provider; omit to leave it alone.
+ * @throws when the provider has no rule in this file (account-managed
+ *         providers and bundled ones cannot be toggled here).
+ */
+export declare function updateProvider(providerId: string, patch: {
+    enabled?: boolean;
+    providerName?: string;
+}): Promise<ProviderConfigFile>;
+/**
+ * Add a model to an existing provider, or update an existing rule.
+ *
+ * The model lands in `providerModelRules` (the list the app writes user models
+ * to). A rule already present anywhere in either list is updated in place so a
+ * repeated call is idempotent rather than duplicating.
+ */
+export declare function upsertModel(providerId: string, modelId: string, patch: ProviderModelConfig): Promise<ProviderConfigFile>;
+/** Remove a model rule from both lists. */
+export declare function removeModel(providerId: string, modelId: string): Promise<ProviderConfigFile>;
+/** Read the raw file text (for the settings snapshot). Absent → null. */
+export declare function readProviderConfigRaw(): Promise<string | null>;
+/** The canonical bytes a document would be written as. */
+export declare function canonicalBytes(doc: ProviderConfigFile): string;
+//# sourceMappingURL=provider-config.d.ts.map

package/dist/settings/provider-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-config.d.ts","sourceRoot":"","sources":["../../src/settings/provider-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAaH,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,WAAW,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;KAAE,CAAC;CAC1D;AAED,wDAAwD;AACxD,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C,GAAG,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1C,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE;QACN,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,mBAAmB,EAAE;YAAE,aAAa,EAAE,YAAY,EAAE,CAAA;SAAE,CAAC;QACvD,gBAAgB,EAAE;YAChB,kBAAkB,EAAE,SAAS,EAAE,CAAC;YAChC,wBAAwB,EAAE,SAAS,EAAE,CAAC;SACvC,CAAC;QACF,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACjD,CAAC;CACH;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAKtE;AAmDD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAEzD;AAED,uDAAuD;AACvD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,MAAM,CAoCrF;AAsCD;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD,OAAO,CAAC,kBAAkB,CAAC,CAc7B;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,kBAAkB,CAAC,CAiC7B;AAED,2CAA2C;AAC3C,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,CAAC,CAiC7B;AAqCD,yEAAyE;AACzE,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMpE;AAED,0DAA0D;AAC1D,wBAAgB,cAAc,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,CAE9D"}

package/dist/settings/provider-config.js

@@ -0,0 +1,311 @@
+/**
+ * Read/write for the desktop's personal provider config
+ * (`~/.zcode/v2/provider_config.json`).
+ *
+ * This is where 3.12+ stores every user-added provider and model; the backend
+ * registry reads it directly and absorbs external writes through a ~1s poll,
+ * so a change here takes effect with NO restart and NO RPC
+ * (`personal-provider-config-repository.ts`).
+ *
+ * What this module deliberately does NOT do:
+ *
+ *  - **Create or delete providers.** A provider rule carries credentials, an
+ *    API protocol type and a model list, and getting it wrong yields a provider
+ *    that fails at request time. That is a desktop-app (or hand-edit) job.
+ *  - **Write `account:*` access.** The registry rejects `zhipu-account` access
+ *    on personal rules outright — those providers come from the bundled table
+ *    plus the account snapshot the bridge pushes. Writing one produces a file
+ *    the backend refuses to load.
+ *
+ * Everything else the app's model page can do is here: enable/disable, rename,
+ * add/remove a model on an existing provider, and edit a model's context
+ * window and reasoning-level vocabulary.
+ *
+ * Canonical form matters: the file is written with 2-space indentation and NO
+ * trailing newline, matching the app's own writer. A non-canonical file is
+ * read fine but rewritten by the app on its next save, which would look like
+ * our edit "reverting".
+ */
+import { readFile } from "node:fs/promises";
+import { readJsonDocument, writeJsonAtomic } from "./atomic-write.js";
+import { zcodePersonalProviderPath } from "../utils.js";
+/** The only schema version the file format accepts. */
+const SCHEMA_VERSION = 1;
+/** Provider ids whose credentials may never appear in this file. */
+const ACCOUNT_PROVIDER_PREFIX = "account:";
+/**
+ * Read the file, or return an empty canonical document when it is absent.
+ *
+ * @throws when the file exists but is malformed — the settings layer must
+ *         refuse the write rather than base it on an empty document (the app's
+ *         own reader degrades to an empty overlay while KEEPING the bad bytes,
+ *         so silently overwriting would destroy what is still recoverable).
+ */
+export async function readProviderConfig() {
+    const file = zcodePersonalProviderPath();
+    const doc = await readJsonDocument(file);
+    if (doc === null)
+        return emptyConfig();
+    return normalize(doc);
+}
+function emptyConfig() {
+    return {
+        schemaVersion: SCHEMA_VERSION,
+        config: {
+            providerConfigRules: { providerRules: [] },
+            modelConfigRules: { providerModelRules: [], manualProviderModelRules: [] },
+        },
+    };
+}
+/**
+ * Coerce a parsed document into the canonical shape.
+ *
+ * Unlike `cli/config.json` (an open document whose unknown keys are preserved),
+ * this file's TOP level is strict — `{schemaVersion, config}` only, and an extra
+ * key makes the backend registry reject the whole document. Unknown top-level
+ * keys are therefore DROPPED, while everything inside `config` (including
+ * unrecognized sub-keys on a provider rule) is carried through untouched.
+ *
+ * Missing containers are created so a hand-truncated file still round-trips
+ * instead of producing an invalid document.
+ */
+function normalize(doc) {
+    const config = (doc.config ?? {});
+    const providerRules = Array.isArray(config.providerConfigRules?.providerRules)
+        ? config.providerConfigRules.providerRules
+        : [];
+    const modelRules = config.modelConfigRules ?? {};
+    const out = {
+        schemaVersion: typeof doc.schemaVersion === "number" ? doc.schemaVersion : SCHEMA_VERSION,
+        config: {
+            providerConfigRules: { providerRules },
+            modelConfigRules: {
+                providerModelRules: Array.isArray(modelRules.providerModelRules)
+                    ? modelRules.providerModelRules
+                    : [],
+                manualProviderModelRules: Array.isArray(modelRules.manualProviderModelRules)
+                    ? modelRules.manualProviderModelRules
+                    : [],
+            },
+        },
+    };
+    if (Array.isArray(config.providerOrder))
+        out.config.providerOrder = config.providerOrder;
+    if (config.defaultModelSelection !== undefined) {
+        out.config.defaultModelSelection = config.defaultModelSelection;
+    }
+    return out;
+}
+/**
+ * Serialize in the app's canonical form: 2-space indentation, NO trailing
+ * newline (the app's writer uses `JSON.stringify` directly). A trailing
+ * newline is not an error to the reader, but the app rewrites the file to its
+ * own canonical form on its next save, which makes our edit look reverted.
+ */
+export function encodeProviderConfig(doc) {
+    return JSON.stringify(doc, null, 2);
+}
+/** Structural self-check run before the bytes land. */
+export function validateProviderConfig(doc) {
+    const file = doc;
+    if (file.schemaVersion !== SCHEMA_VERSION) {
+        return `schemaVersion must be ${SCHEMA_VERSION}`;
+    }
+    const config = file.config;
+    if (typeof config !== "object" || config === null)
+        return "config must be an object";
+    const rules = config.providerConfigRules?.providerRules;
+    if (!Array.isArray(rules))
+        return "config.providerConfigRules.providerRules must be an array";
+    const seen = new Set();
+    for (const rule of rules) {
+        if (!rule || typeof rule.providerId !== "string" || !rule.providerId) {
+            return "every provider rule needs a non-empty providerId";
+        }
+        if (seen.has(rule.providerId))
+            return `duplicate providerId ${rule.providerId}`;
+        seen.add(rule.providerId);
+        // `zhipu-account` access is only valid on the bundled table; a personal
+        // rule carrying it makes the registry reject the whole file.
+        const accessType = rule.config?.access?.type;
+        if (accessType === "zhipu-account") {
+            return `provider ${rule.providerId} may not declare zhipu-account access here`;
+        }
+    }
+    const modelRules = config.modelConfigRules;
+    if (typeof modelRules !== "object" || modelRules === null) {
+        return "config.modelConfigRules must be an object";
+    }
+    for (const list of [modelRules.providerModelRules, modelRules.manualProviderModelRules]) {
+        if (!Array.isArray(list))
+            return "model rule lists must be arrays";
+        for (const rule of list) {
+            if (!rule || typeof rule.providerId !== "string" || typeof rule.modelId !== "string") {
+                return "every model rule needs providerId and modelId";
+            }
+        }
+    }
+    return true;
+}
+function assertNotAccountProvider(providerId) {
+    if (providerId.startsWith(ACCOUNT_PROVIDER_PREFIX)) {
+        throw new Error(`provider ${providerId} is account-managed — its models come from the coding plan, not this file`);
+    }
+}
+/**
+ * The single write path: validate, back up, rename.
+ *
+ * `mutator` runs INSIDE the file lock, against the freshly re-read document —
+ * never against a snapshot taken before the lock was acquired. Reading outside
+ * and passing the result in would silently drop whatever a concurrent writer
+ * (a running desktop app, or another bridge process) landed in between, which
+ * is exactly the invariant ADR-0026 exists to protect.
+ */
+async function saveProviderConfig(mutator) {
+    const file = zcodePersonalProviderPath();
+    const { doc } = await writeJsonAtomic(file, (current) => {
+        const next = normalize(current);
+        mutator(next);
+        return next;
+    }, {
+        encode: encodeProviderConfig,
+        validate: (d) => validateProviderConfig(d),
+    });
+    return normalize(doc);
+}
+/**
+ * Enable or disable a provider, and/or rename it.
+ *
+ * @param patch.enabled  `true`/`false` flips the rule's `enabled` flag; omit to
+ *                       leave it alone.
+ * @param patch.providerName renames the provider; omit to leave it alone.
+ * @throws when the provider has no rule in this file (account-managed
+ *         providers and bundled ones cannot be toggled here).
+ */
+export async function updateProvider(providerId, patch) {
+    assertNotAccountProvider(providerId);
+    return saveProviderConfig((current) => {
+        const rule = current.config.providerConfigRules.providerRules.find((r) => r.providerId === providerId);
+        if (!rule) {
+            throw new Error(`provider ${providerId} has no rule in provider_config.json — only providers declared here can be edited`);
+        }
+        if (patch.enabled !== undefined)
+            rule.enabled = patch.enabled;
+        if (patch.providerName !== undefined)
+            rule.providerName = patch.providerName;
+    });
+}
+/**
+ * Add a model to an existing provider, or update an existing rule.
+ *
+ * The model lands in `providerModelRules` (the list the app writes user models
+ * to). A rule already present anywhere in either list is updated in place so a
+ * repeated call is idempotent rather than duplicating.
+ */
+export async function upsertModel(providerId, modelId, patch) {
+    assertNotAccountProvider(providerId);
+    // Validate the patch before touching the lock: a rejected patch must not
+    // consume a lock slot, and `mergeModelConfig` throws on a bad contextWindow.
+    mergeModelConfig({}, patch);
+    return saveProviderConfig((current) => {
+        const rules = current.config.modelConfigRules;
+        const existing = rules.providerModelRules.find((r) => r.providerId === providerId && r.modelId === modelId) ??
+            rules.manualProviderModelRules.find((r) => r.providerId === providerId && r.modelId === modelId);
+        if (existing) {
+            existing.config = mergeModelConfig(existing.config, patch);
+            return;
+        }
+        rules.providerModelRules.push({ providerId, modelId, config: mergeModelConfig({}, patch) });
+        // Keep the provider's model list in step: a model absent from
+        // personalModelIds never reaches the dropdown.
+        const provider = current.config.providerConfigRules.providerRules.find((r) => r.providerId === providerId);
+        const list = provider?.config?.personalModelIds ?? [];
+        if (!list.includes(modelId)) {
+            const nextList = [...list, modelId];
+            if (provider) {
+                provider.config = { ...(provider.config ?? {}), personalModelIds: nextList };
+                // modelOrder is what the UI sorts by; append so the new model lands last.
+                const order = provider.config.modelOrder ?? [];
+                if (!order.includes(modelId))
+                    provider.config.modelOrder = [...order, modelId];
+            }
+        }
+    });
+}
+/** Remove a model rule from both lists. */
+export async function removeModel(providerId, modelId) {
+    let missing = false;
+    const result = await saveProviderConfig((current) => {
+        const rules = current.config.modelConfigRules;
+        const before = rules.providerModelRules.length + rules.manualProviderModelRules.length;
+        rules.providerModelRules = rules.providerModelRules.filter((r) => !(r.providerId === providerId && r.modelId === modelId));
+        rules.manualProviderModelRules = rules.manualProviderModelRules.filter((r) => !(r.providerId === providerId && r.modelId === modelId));
+        if (rules.providerModelRules.length + rules.manualProviderModelRules.length === before) {
+            // Signal through a flag rather than throwing: throwing here would abort
+            // the locked write and report a failure the client cannot act on.
+            missing = true;
+            return;
+        }
+        // Drop it from the provider's own lists too, or the dropdown keeps a model
+        // the registry no longer knows.
+        const provider = current.config.providerConfigRules.providerRules.find((r) => r.providerId === providerId);
+        if (provider?.config) {
+            for (const key of ["personalModelIds", "modelOrder"]) {
+                const list = provider.config[key];
+                if (Array.isArray(list)) {
+                    provider.config[key] = list.filter((m) => m !== modelId);
+                }
+            }
+        }
+    });
+    if (missing)
+        throw new Error(`model ${modelId} has no rule for provider ${providerId}`);
+    return result;
+}
+/**
+ * Merge a patch into an existing model config.
+ *
+ * Only the three leaves the app's own manual-rule whitelist allows are
+ * touched; everything else on the rule survives untouched. An explicit
+ * `undefined` in the patch is a no-op, and `enabled: true` is recorded as the
+ * absence of the flag (enabled is the default state).
+ */
+function mergeModelConfig(base, patch) {
+    const out = { ...base };
+    if (patch.enabled === true)
+        delete out.enabled;
+    else if (patch.enabled === false)
+        out.enabled = false;
+    const ctx = patch.properties?.contextWindow;
+    if (ctx !== undefined) {
+        if (!(Number.isInteger(ctx) && ctx > 0)) {
+            throw new Error("contextWindow must be a positive integer");
+        }
+        out.properties = { ...(out.properties ?? {}), contextWindow: ctx };
+    }
+    const values = patch.optionSpecs?.reasoningLevel?.values;
+    if (values !== undefined) {
+        if (!Array.isArray(values) || values.length === 0) {
+            throw new Error("reasoningLevel.values must be a non-empty array");
+        }
+        if (new Set(values).size !== values.length) {
+            throw new Error("reasoningLevel.values must not repeat");
+        }
+        out.optionSpecs = { ...(out.optionSpecs ?? {}), reasoningLevel: { values: [...values] } };
+    }
+    return out;
+}
+/** Read the raw file text (for the settings snapshot). Absent → null. */
+export async function readProviderConfigRaw() {
+    try {
+        return await readFile(zcodePersonalProviderPath(), "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+/** The canonical bytes a document would be written as. */
+export function canonicalBytes(doc) {
+    return encodeProviderConfig(doc);
+}
+//# sourceMappingURL=provider-config.js.map

package/dist/settings/provider-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-config.js","sourceRoot":"","sources":["../../src/settings/provider-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,uDAAuD;AACvD,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,oEAAoE;AACpE,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAyC3C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,IAAI,GAAG,yBAAyB,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,WAAW,EAAE,CAAC;IACvC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,aAAa,EAAE,cAAc;QAC7B,MAAM,EAAE;YACN,mBAAmB,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;YAC1C,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,wBAAwB,EAAE,EAAE,EAAE;SAC3E;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,SAAS,CAAC,GAA4B;IAC7C,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAiC,CAAC;IAClE,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,aAAa,CAAC;QAC5E,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa;QAC1C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,UAAU,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;IACjD,MAAM,GAAG,GAAuB;QAC9B,aAAa,EAAE,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc;QACzF,MAAM,EAAE;YACN,mBAAmB,EAAE,EAAE,aAAa,EAAE;YACtC,gBAAgB,EAAE;gBAChB,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC;oBAC9D,CAAC,CAAC,UAAU,CAAC,kBAAkB;oBAC/B,CAAC,CAAC,EAAE;gBACN,wBAAwB,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC;oBAC1E,CAAC,CAAC,UAAU,CAAC,wBAAwB;oBACrC,CAAC,CAAC,EAAE;aACP;SACF;KACF,CAAC;IACF,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,GAAG,CAAC,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IACzF,IAAI,MAAM,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,sBAAsB,CAAC,GAA4B;IACjE,MAAM,IAAI,GAAG,GAAoC,CAAC;IAClD,IAAI,IAAI,CAAC,aAAa,KAAK,cAAc,EAAE,CAAC;QAC1C,OAAO,yBAAyB,cAAc,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,0BAA0B,CAAC;IACrF,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,EAAE,aAAa,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,2DAA2D,CAAC;IAC9F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrE,OAAO,kDAAkD,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,wBAAwB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1B,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,UAAU,GAAI,IAAI,CAAC,MAAM,EAAE,MAAyC,EAAE,IAAI,CAAC;QACjF,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;YACnC,OAAO,YAAY,IAAI,CAAC,UAAU,4CAA4C,CAAC;QACjF,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAC3C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAC1D,OAAO,2CAA2C,CAAC;IACrD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,iCAAiC,CAAC;QACnE,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACrF,OAAO,+CAA+C,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAkB;IAClD,IAAI,UAAU,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,YAAY,UAAU,2EAA2E,CAClG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAA0C;IAE1C,MAAM,IAAI,GAAG,yBAAyB,EAAE,CAAC;IACzC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,eAAe,CACnC,IAAI,EACJ,CAAC,OAAO,EAAE,EAAE;QACV,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,IAA0C,CAAC;IACpD,CAAC,EACD;QACE,MAAM,EAAE,oBAAoB;QAC5B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC;KAC3C,CACF,CAAC;IACF,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,KAAmD;IAEnD,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACrC,OAAO,kBAAkB,CAAC,CAAC,OAAO,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,IAAI,CAChE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CACnC,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,YAAY,UAAU,mFAAmF,CAC1G,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9D,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,UAAkB,EAClB,OAAe,EACf,KAA0B;IAE1B,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACrC,yEAAyE;IACzE,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5B,OAAO,kBAAkB,CAAC,CAAC,OAAO,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC9C,MAAM,QAAQ,GACZ,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC;YAC1F,KAAK,CAAC,wBAAwB,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAC5D,CAAC;QACJ,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5F,8DAA8D;QAC9D,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,IAAI,CACpE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CACnC,CAAC;QACF,MAAM,IAAI,GAAI,QAAQ,EAAE,MAAM,EAAE,gBAAyC,IAAI,EAAE,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;YACpC,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;gBAC7E,0EAA0E;gBAC1E,MAAM,KAAK,GAAI,QAAQ,CAAC,MAAM,CAAC,UAAmC,IAAI,EAAE,CAAC;gBACzE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2CAA2C;AAC3C,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,UAAkB,EAClB,OAAe;IAEf,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,CAAC,OAAO,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC;QACvF,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAC/D,CAAC;QACF,KAAK,CAAC,wBAAwB,GAAG,KAAK,CAAC,wBAAwB,CAAC,MAAM,CACpE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAC/D,CAAC;QACF,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,KAAK,CAAC,wBAAwB,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACvF,wEAAwE;YACxE,kEAAkE;YAClE,OAAO,GAAG,IAAI,CAAC;YACf,OAAO;QACT,CAAC;QACD,2EAA2E;QAC3E,gCAAgC;QAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,IAAI,CACpE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CACnC,CAAC;QACF,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,KAAK,MAAM,GAAG,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAU,EAAE,CAAC;gBAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAyB,CAAC;gBAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,6BAA6B,UAAU,EAAE,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CACvB,IAAyB,EACzB,KAA0B;IAE1B,MAAM,GAAG,GAAwB,EAAE,GAAG,IAAI,EAAE,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;SAC1C,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;QAAE,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC;IAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,GAAG,CAAC,UAAU,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC;IACzD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,GAAG,CAAC,WAAW,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,yBAAyB,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,cAAc,CAAC,GAAuB;IACpD,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC"}

package/dist/settings/skills.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Skill management: discovery plus the actions the app's skills page offers.
+ *
+ * `config/skill-discovery.ts` exists to build the editor's command list, so it
+ * filters out disabled skills and drops the SKILL.md path (its `input.hint` is
+ * the author's argument hint, not a location). Neither works for management —
+ * a disabled skill must stay visible so the user can re-enable it, and every
+ * action needs the real path. So discovery is re-done here, over the same roots
+ * and with the same frontmatter rules.
+ *
+ * Escape guards are the point of this module: a skill path is client-supplied
+ * text that becomes a filesystem operation. Every path is resolved through
+ * `realpath` (collapsing symlinks and `..`) BEFORE the containment check, so
+ * `~/.zcode/skills/../../../etc` or a symlink pointing outside the roots can
+ * neither delete nor copy anything outside them. The app's own delete path
+ * carries the same guard.
+ */
+/** A discovered skill plus the state the management surface needs. */
+export interface SkillEntry {
+    name: string;
+    description: string;
+    /** Absolute path of the SKILL.md file. */
+    path: string;
+    /** Directory containing SKILL.md. */
+    dir: string;
+    /** Where it was found, for grouping in a UI. */
+    scope: "user" | "agents" | "plugin" | "project";
+    /** False when cli/config.json carries `{enable: false}` for this path. */
+    enabled: boolean;
+}
+interface SkillRoot {
+    dir: string;
+    scope: SkillEntry["scope"];
+    /** Plugin skills belong to the plugin install — never deletable. */
+    deletable: boolean;
+}
+/**
+ * Discovery roots, in the app's own order: user scope first (its skills win a
+ * name clash), then the shared `~/.agents` root, then plugin caches.
+ */
+export declare function skillRoots(): SkillRoot[];
+/** The user-scope root new skills are copied into. */
+export declare function userSkillsRoot(): string;
+/**
+ * Every skill, enabled or not.
+ *
+ * Duplicate names are kept rather than de-duplicated: the app lists the same
+ * name from two scopes separately (they are different files), and hiding one
+ * would make its toggle unreachable.
+ */
+export declare function listSkills(): Promise<SkillEntry[]>;
+/** Enable or disable a skill by its SKILL.md path. */
+export declare function setSkillEnabledByPath(skillPath: string, enable: boolean): Promise<void>;
+/**
+ * Delete a skill directory.
+ *
+ * Only skills inside a deletable root can go: a plugin's skill belongs to the
+ * plugin install and would reappear on the next update, so the API refuses
+ * rather than deleting something that comes back. The containment check runs on
+ * RESOLVED paths, so a symlinked skill directory cannot point the delete at
+ * something outside the roots.
+ */
+export declare function deleteSkill(skillPath: string): Promise<void>;
+/**
+ * Copy a skill into the user root.
+ *
+ * A name collision is refused rather than merged: silently merging two skill
+ * directories yields a SKILL.md whose description matches neither original.
+ */
+export declare function copySkillToUser(skillPath: string): Promise<string>;
+export {};
+//# sourceMappingURL=skills.d.ts.map

package/dist/settings/skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/settings/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH,sEAAsE;AACtE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,gDAAgD;IAChD,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAChD,0EAA0E;IAC1E,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,UAAU,SAAS;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IAC3B,oEAAoE;IACpE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI,SAAS,EAAE,CAOxC;AAED,sDAAsD;AACtD,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AA0DD;;;;;;GAMG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAyCxD;AAWD,sDAAsD;AACtD,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7F;AAWD;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBlE;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgCxE"}