zdashboard 2.7.0 → 2.8.1

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 // src/cli.ts
-import path12 from "path";
-import fs12 from "fs";
+import path11 from "path";
+import fs11 from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { access, readdir } from "fs/promises";
 import { parseArgs as utilParseArgs } from "util";
@@ -11,32 +11,23 @@ import { parseArgs as utilParseArgs } from "util";
 import fs from "fs";
 import path from "path";
 import { execFile } from "child_process";
+var JUST_PROBE_TIMEOUT_MS = 5e3;
+var JUST_FALLBACK_TIMEOUT_MS = 3e3;
 function justAvailable(cwd) {
-  return new Promise((resolve) => {
-    const child = execFile("just", ["--list", "--unsupported"], { cwd, timeout: 5e3 }, (err) => {
-      resolve(!err);
-    });
+  const probe = (args, timeout) => new Promise((resolve) => {
+    const child = execFile("just", args, { cwd, timeout }, (err) => resolve(!err));
     if (child.killed) resolve(false);
   });
-}
-function hasBugsConfig(root) {
-  const dashboardPath = path.join(root, ".zdev", "dashboard.json");
-  if (!fs.existsSync(dashboardPath)) return false;
-  try {
-    const raw = fs.readFileSync(dashboardPath, "utf-8");
-    const rec = JSON.parse(raw);
-    const bugs = rec.plugins?.bugs;
-    if (bugs && typeof bugs === "object" && bugs.url && bugs.product) return true;
-  } catch {
-  }
-  return false;
+  return probe(["--list", "--unsupported"], JUST_PROBE_TIMEOUT_MS).then((ok) => ok ? true : probe(["--version"], JUST_FALLBACK_TIMEOUT_MS));
 }
 async function detect(root) {
   const hasOpenspec = fs.existsSync(path.join(root, "openspec"));
   const hasDocs = fs.existsSync(path.join(root, "docs"));
   const hasJust = await justAvailable(root);
-  const hasBugs = hasBugsConfig(root);
-  return { hasOpenspec, hasDocs, hasJust, hasBugs };
+  return { hasOpenspec, hasDocs, hasJust };
+}
+async function detectLiveShape(root) {
+  return detect(root);
 }
 
 // src/cli.ts
@@ -52,7 +43,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "zdashboard",
-  version: "2.7.0",
+  version: "2.8.1",
   description: "ZCode skill dashboard platform \u2014 pluggable viewers for zdesign/zview/zreview/zgoal",
   type: "module",
   bin: {
@@ -70,6 +61,9 @@ var package_default = {
     "build:web": "vite build",
     "build:node": "tsup",
     start: "node dist/cli.js",
+    test: "vitest run",
+    typecheck: "tsc --noEmit",
+    "test:coverage": "vitest run --coverage",
     preview: "vite preview"
   },
   dependencies: {
@@ -89,6 +83,7 @@ var package_default = {
     "date-fns": "^3.6.0",
     filesize: "^11.0.0",
     "highlight.js": "^11.11.1",
+    "iconv-lite": "0.7.3",
     katex: "^0.16.11",
     ky: "^1.7.0",
     "lodash-es": "^4.17.21",
@@ -121,6 +116,7 @@ var package_default = {
     "@types/react": "^18.3.12",
     "@types/react-dom": "^18.3.1",
     "@vitejs/plugin-react": "^4.7.0",
+    "@vitest/coverage-v8": "1.6.0",
     autoprefixer: "^10.4.20",
     jsdom: "^30.0.1",
     postcss: "^8.4.49",
@@ -166,14 +162,21 @@ function readRecord(root) {
   }
 }
 function writeRecord(root, port) {
-  fs2.mkdirSync(path2.dirname(recordPath(root)), { recursive: true });
+  const fp = recordPath(root);
+  fs2.mkdirSync(path2.dirname(fp), { recursive: true });
+  const old = readRecord(root);
   const rec = {
     pid: process.pid,
     port,
     root,
     startedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  fs2.writeFileSync(recordPath(root), JSON.stringify(rec, null, 2) + "\n");
+  if (old?.plugins && typeof old.plugins === "object") {
+    rec.plugins = old.plugins;
+  }
+  const tmp = fp + ".tmp";
+  fs2.writeFileSync(tmp, JSON.stringify(rec, null, 2) + "\n");
+  fs2.renameSync(tmp, fp);
 }
 function readPluginsConfig(root) {
   try {
@@ -199,6 +202,44 @@ function writePluginsConfig(root, plugins) {
   fs2.writeFileSync(tmp, JSON.stringify(rec, null, 2) + "\n");
   fs2.renameSync(tmp, fp);
 }
+function stripDeadPluginConfig(root, manifests) {
+  try {
+    const rec = readRecord(root);
+    if (!rec?.plugins || typeof rec.plugins !== "object") return false;
+    const byMode = new Map(manifests.map((m) => [m.mode, m]));
+    const stored = rec.plugins;
+    const plugins = { ...stored };
+    let changed = false;
+    for (const mode of Object.keys(plugins)) {
+      const m = byMode.get(mode);
+      if (!m || m.external) continue;
+      const section = plugins[mode];
+      if (section === null || typeof section !== "object") continue;
+      const keys = Object.keys(section);
+      if (!m.config || Object.keys(m.config).length === 0) {
+        if (keys.length > 0) {
+          delete plugins[mode];
+          changed = true;
+        }
+        continue;
+      }
+      const kept = {};
+      for (const key of Object.keys(m.config)) {
+        if (key in section) kept[key] = section[key];
+      }
+      if (Object.keys(kept).length !== keys.length) {
+        if (Object.keys(kept).length === 0) delete plugins[mode];
+        else plugins[mode] = kept;
+        changed = true;
+      }
+    }
+    if (!changed) return false;
+    writePluginsConfig(root, plugins);
+    return true;
+  } catch {
+    return false;
+  }
+}
 function clearRecord(root) {
   try {
     const rec = readRecord(root);
@@ -330,8 +371,20 @@ var MIME = {
   ".ttf": "font/woff",
   ".map": "application/json; charset=utf-8"
 };
-var INJECT = `<script>(function(){try{var es=new EventSource('/__reload');es.addEventListener('files',function(){/* plugin \u5C40\u90E8\u5237\u65B0\u7531 useSSE \u6D88\u8D39,\u6B64\u5904\u4E0D\u518D\u6574\u9875 reload */});es.onerror=function(){/* EventSource \u539F\u751F\u91CD\u8FDE,\u9759\u9ED8\u5904\u7406 */};}catch(e){}document.addEventListener('click',function(e){var t=e.target;if(t&&t.closest){var a=t.closest('a[target]');if(a&&a.target!=='_self'){a.target='_self';}}},true);})();</script>`;
+var INJECT = `<script>(function(){document.addEventListener('click',function(e){var t=e.target;if(t&&t.closest){var a=t.closest('a[target]');if(a&&a.target!=='_self'){a.target='_self';}}},true);})();</script>`;
 var PLUGIN_STATIC_PREFIX = "/__plugin/";
+function json(res, data, status = 200) {
+  res.writeHead(status, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
+  res.end(JSON.stringify(data));
+}
+function guarded(req, res, token) {
+  if (req.headers["x-stop-token"] !== token) {
+    res.writeHead(403);
+    res.end("forbidden");
+    return false;
+  }
+  return true;
+}
 var ServerService = class extends Service {
   stopToken;
   root;
@@ -358,28 +411,54 @@ var ServerService = class extends Service {
     ctx.effect(() => () => this.dispose());
     this.refreshGitInfo();
     this.route("/__config", (_req, res) => {
-      res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-      res.end(JSON.stringify({ stopToken: this.stopToken, version: VERSION, root: this.root, ...this.gitInfo }));
+      json(res, { stopToken: this.stopToken, version: VERSION, root: this.root, ...this.gitInfo });
     });
-    this.route("/__stop", async (req, res) => {
-      if (req.headers["x-stop-token"] !== this.stopToken) {
+    this.route("/__detect", async (_req, res) => {
+      const shape = await detectLiveShape(this.root);
+      json(res, shape);
+    });
+    this.route("/favicon.svg", (req, res) => {
+      this.serveFile(path3.join(this.appDir, "favicon.svg"), req, res, false);
+    });
+    this.route("/__file-content", async (req, res) => {
+      const url = new URL(req.url || "/", "http://localhost");
+      const rawPath = url.pathname.replace(/^\/__file-content\/?/, "");
+      if (!rawPath || rawPath === "/") {
+        res.writeHead(400);
+        res.end("missing path");
+        return;
+      }
+      const filePath = path3.join(this.root, decodeURIComponent(rawPath));
+      if (!filePath.startsWith(this.root + path3.sep) && filePath !== this.root) {
         res.writeHead(403);
-        res.end("forbidden");
+        res.end("Forbidden");
         return;
       }
-      res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
-      res.end('{"ok":true}');
+      fs3.stat(filePath, (err) => {
+        if (err) {
+          res.writeHead(404);
+          return res.end("Not found");
+        }
+        const ext = path3.extname(filePath).toLowerCase();
+        const ct = MIME[ext] ?? "application/octet-stream";
+        res.writeHead(200, { "Content-Type": ct, "Cache-Control": "no-cache" });
+        fs3.createReadStream(filePath).pipe(res);
+      });
+    });
+    this.route("/__stop", async (req, res) => {
+      if (!guarded(req, res, this.stopToken)) return;
+      json(res, { ok: true });
       this.stop();
     });
     this.start(config.port);
   }
-  route(path13, handler) {
-    this.routes.set(path13, handler);
-    this.ctx.effect(() => () => this.routes.delete(path13));
+  route(path12, handler) {
+    this.routes.set(path12, handler);
+    this.ctx.effect(() => () => this.routes.delete(path12));
   }
-  sse(path13, onConnect) {
-    this.sses.set(path13, onConnect);
-    this.ctx.effect(() => () => this.sses.delete(path13));
+  sse(path12, onConnect) {
+    this.sses.set(path12, onConnect);
+    this.ctx.effect(() => () => this.sses.delete(path12));
   }
   static(prefix, dir) {
     this.prefixStatic.set(prefix, dir);
@@ -484,6 +563,12 @@ var ServerService = class extends Service {
         rh(req, res);
         return;
       }
+      for (const [rp, rh2] of this.routes) {
+        if (url.startsWith(rp + "/")) {
+          rh2(req, res);
+          return;
+        }
+      }
       const sh = this.sses.get(url);
       if (sh) {
         res.writeHead(200, { "Content-Type": "text/event-stream", "Cache-Control": "no-cache", Connection: "keep-alive" });
@@ -532,14 +617,16 @@ var ServerService = class extends Service {
       } else throw err;
     });
     this.server.listen(port, "127.0.0.1", () => {
-      const u = `http://localhost:${port}`;
+      const addr = this.server?.address();
+      const bound = typeof addr === "object" && addr ? addr.port : port;
+      const u = `http://localhost:${bound}`;
       const target = this.page ? `${u}#${this.page}` : u;
       console.log(`[zdashboard] v${VERSION} dashboard -> ${u}`);
       console.log(`[zdashboard] project   -> ${this.root}`);
-      console.log(`[zdashboard] detect    -> openspec:${this.det.hasOpenspec} docs:${this.det.hasDocs} just:${this.det.hasJust} bugs:${this.det.hasBugs}`);
+      console.log(`[zdashboard] detect    -> openspec:${this.det.hasOpenspec} docs:${this.det.hasDocs} just:${this.det.hasJust}`);
       if (this.dataDir) console.log(`[zdashboard] data      -> ${this.dataDir}`);
       if (this.open) openUrl(target);
-      this.onListen?.(port);
+      this.onListen?.(bound);
     });
   }
   /** 项目 git 信息(分支/脏文件数),启动探测一次,文件变更时刷新 */
@@ -594,6 +681,12 @@ var ServerService = class extends Service {
 import fs4 from "fs";
 import { Service as Service2 } from "cordis";
 var WATCH_DEBOUNCE_MS = 300;
+var IGNORED_DIR_RE = /^(?:\.git|node_modules|dist|\.pnpm)(?:[/\\]|$)/;
+var IGNORED_FILE_RE = /\.(?:swp|tmp|log)$|~$|^\.DS_Store$|^Thumbs\.db$/i;
+function isIgnoredPath(filename) {
+  if (!filename) return false;
+  return IGNORED_DIR_RE.test(filename) || IGNORED_FILE_RE.test(filename);
+}
 var ReloadService = class extends Service2 {
   static inject = ["server"];
   clients = /* @__PURE__ */ new Set();
@@ -608,8 +701,7 @@ var ReloadService = class extends Service2 {
     });
     try {
       this.watcher = fs4.watch(config.root, { recursive: true }, (eventType, filename) => {
-        if (filename && /^(?:\.git|node_modules|dist|\.pnpm)(?:[/\\]|$)/.test(filename)) return;
-        if (filename && /\.(?:swp|tmp)$|~$|^\.DS_Store$|^Thumbs\.db$/i.test(filename)) return;
+        if (isIgnoredPath(filename)) return;
         if (this.timer) clearTimeout(this.timer);
         this.timer = setTimeout(() => {
           this.ctx.server.refreshGitInfo();
@@ -633,6 +725,10 @@ data: ${JSON.stringify(data == null ? "" : data)}
       }
     }
   }
+  /** 插件专用频道:plugin:<mode>:<event>,客户端 usePluginData subscribe 消费 */
+  broadcastPlugin(mode, event, data = "") {
+    this.broadcast(`plugin:${mode}:${event}`, data);
+  }
   dispose() {
     if (this.watcher) {
       try {
@@ -661,7 +757,7 @@ import path5 from "path";
 import fs5 from "fs";
 import path4 from "path";
 function walkDir(root, opts = {}) {
-  const { skip = /* @__PURE__ */ new Set(), maxDepth, showHidden, onFile, onDir } = opts;
+  const { skip = /* @__PURE__ */ new Set(), maxDepth, onFile, onDir } = opts;
   function walk(dir, rel, depth) {
     if (typeof maxDepth === "number" && depth > maxDepth) return;
     let ents;
@@ -671,7 +767,7 @@ function walkDir(root, opts = {}) {
       return;
     }
     for (const ent of ents) {
-      if (!showHidden && ent.name.startsWith(".")) continue;
+      if (ent.name.startsWith(".")) continue;
       if (skip.has(ent.name)) continue;
       const abs = path4.join(dir, ent.name);
       const r = rel ? `${rel}/${ent.name}` : ent.name;
@@ -725,98 +821,53 @@ function buildTree(paths, defaultExpandDepth = 2) {
   sortNodes(root);
   return root;
 }
-function scanTree(root, hasOpenspec, hasDocs, opts) {
-  const tree = [];
-  const defaultExpandDepth = typeof opts?.defaultExpandDepth === "number" ? opts.defaultExpandDepth : 2;
-  if (hasOpenspec && fs6.existsSync(path5.join(root, "openspec", "changes"))) {
-    const changesDir = path5.join(root, "openspec", "changes");
-    const active = [];
-    const archived = [];
-    for (const ent of fs6.readdirSync(changesDir, { withFileTypes: true })) {
-      if (!ent.isDirectory() || ent.name.startsWith(".") || ent.name === "archive") continue;
-      const relBase = `openspec/changes/${ent.name}`;
-      const paths = [];
-      walkDir(path5.join(changesDir, ent.name), { maxDepth: 4, showHidden: opts?.showHidden, onFile: (_, rel) => paths.push(rel ? `${relBase}/${rel}` : relBase) });
-      const children = buildTree(paths, defaultExpandDepth).map((n) => ({ ...n, path: n.path ? `${relBase}/${n.path}` : void 0 }));
-      active.push({ name: ent.name, kind: "dir", children });
-    }
-    active.sort((a, b) => a.name.localeCompare(b.name));
-    const archiveDir = path5.join(changesDir, "archive");
-    if (fs6.existsSync(archiveDir)) {
-      for (const ent of fs6.readdirSync(archiveDir, { withFileTypes: true })) {
-        if (!ent.isDirectory() || ent.name.startsWith(".")) continue;
-        const relBase = `openspec/changes/archive/${ent.name}`;
-        const paths = [];
-        walkDir(path5.join(archiveDir, ent.name), { maxDepth: 4, showHidden: opts?.showHidden, onFile: (_, rel) => paths.push(rel ? `${relBase}/${rel}` : relBase) });
-        const children = buildTree(paths, defaultExpandDepth).map((n) => ({ ...n, path: n.path ? `${relBase}/${n.path}` : void 0 }));
-        archived.push({ name: ent.name, kind: "dir", children });
-      }
-      archived.sort((a, b) => b.name.localeCompare(a.name));
+function prefixPaths(nodes, prefix) {
+  return nodes.map((n) => {
+    if (n.kind === "file" && n.path) {
+      return { ...n, path: `${prefix}/${n.path}` };
     }
-    if (active.length) tree.push({ name: `changes (${active.length})`, kind: "dir", children: active });
-    if (archived.length) tree.push({ name: `archive (${archived.length})`, kind: "dir", defaultCollapsed: true, children: archived });
-    const specsDir = path5.join(root, "openspec", "specs");
-    if (fs6.existsSync(specsDir)) {
-      const paths = [];
-      walkDir(specsDir, { maxDepth: 4, showHidden: opts?.showHidden, onFile: (_, rel) => paths.push(`openspec/specs/${rel}`) });
-      const specs = buildTree(paths, defaultExpandDepth).map((n) => ({ ...n, path: n.path ? `openspec/specs/${n.path}` : void 0 }));
-      if (specs.length) tree.push({ name: "specs", kind: "dir", children: specs });
+    if (n.children) {
+      return { ...n, children: prefixPaths(n.children, prefix) };
     }
-  }
-  if (hasDocs && fs6.existsSync(path5.join(root, "docs"))) {
+    return n;
+  });
+}
+function scanTree(root, scanDirs, opts) {
+  const tree = [];
+  const defaultExpandDepth = typeof opts?.defaultExpandDepth === "number" ? opts.defaultExpandDepth : 2;
+  const dirs = Array.isArray(scanDirs) ? scanDirs.filter((d) => typeof d === "string" && d) : [];
+  for (const dir of dirs) {
+    const dirPath = path5.join(root, dir);
+    if (!fs6.existsSync(dirPath)) continue;
     const paths = [];
-    walkDir(path5.join(root, "docs"), { maxDepth: 4, showHidden: opts?.showHidden, onFile: (_, rel) => paths.push(`docs/${rel}`) });
-    const docs = buildTree(paths, defaultExpandDepth).map((n) => ({ ...n, path: n.path ? `docs/${n.path}` : void 0 }));
-    if (docs.length) tree.push({ name: "docs", kind: "dir", children: docs });
-  }
-  const skip = /* @__PURE__ */ new Set(["openspec", "docs", "node_modules", ".git", "dist", "playground", ".zreview"]);
-  if (Array.isArray(opts?.hiddenDirs)) {
-    for (const d of opts.hiddenDirs) skip.add(d);
-  }
-  const etc = [];
-  try {
-    for (const ent of fs6.readdirSync(root, { withFileTypes: true })) {
-      if (!opts?.showHidden && ent.name.startsWith(".")) continue;
-      if (skip.has(ent.name)) continue;
-      const ext = path5.extname(ent.name).toLowerCase();
-      if (ent.isFile() && (ext === ".md" || ext === ".markdown")) etc.push({ name: ent.name, kind: "file", path: ent.name });
+    walkDir(dirPath, { maxDepth: 4, onFile: (_, rel) => paths.push(rel) });
+    const prefix = dir;
+    const children = prefixPaths(buildTree(paths, defaultExpandDepth), prefix);
+    if (children.length) {
+      tree.push({ name: `${dir} (${children.length})`, kind: "dir", children });
     }
-  } catch (e) {
-    console.error("[zdashboard] scan root etc failed:", e);
   }
-  etc.sort((a, b) => a.name.localeCompare(b.name));
-  if (etc.length) tree.push({ name: `other (${etc.length})`, kind: "dir", children: etc });
   return tree;
 }
 
 // src/core/tree.ts
+var CONVENTION_SCAN_DIRS = ["openspec", "docs"];
 var apply = {
-  inject: ["server", "dashboard"],
+  inject: ["server"],
   apply(ctx, config) {
-    let cached = null;
-    const getDet = async () => {
-      if (cached?.v) return cached.v;
-      if (!cached) cached = { p: detect(config.root).catch(() => ({ hasOpenspec: false, hasDocs: false, hasJust: false, hasBugs: false })) };
-      const d = await cached.p;
-      cached.v = d;
-      return d;
-    };
     const server = ctx.server;
     if (server?.route) {
-      server.route("/__files", async (_req, res) => {
+      server.route("/__files", async (req, res) => {
         try {
-          const d = await getDet();
-          const viewCfg = ctx.dashboard.getConfig("view");
-          const tree = scanTree(config.root, d.hasOpenspec, d.hasDocs, {
-            hiddenDirs: Array.isArray(viewCfg?.hiddenDirs) ? viewCfg.hiddenDirs : void 0,
-            defaultExpandDepth: typeof viewCfg?.defaultExpandDepth === "number" ? viewCfg.defaultExpandDepth : void 0,
-            showHidden: typeof viewCfg?.showHidden === "boolean" ? viewCfg.showHidden : void 0
-          });
+          const url = new URL(req.url || "/", "http://localhost");
+          const wt = url.searchParams.get("wt");
+          const scanRoot = wt ? decodeURIComponent(wt) : config.root;
+          const tree = scanTree(scanRoot, [...CONVENTION_SCAN_DIRS]);
           res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-          res.end(JSON.stringify({ tree, ...d }));
+          res.end(JSON.stringify({ tree }));
         } catch {
           res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-          res.end(JSON.stringify({ tree: [], hasOpenspec: false, hasDocs: false, hasJust: false, hasBugs: false }));
+          res.end(JSON.stringify({ tree: [] }));
         }
       });
     }
@@ -905,7 +956,7 @@ var apply2 = {
 import { Service as Service3 } from "cordis";
 
 // src/core/read-body.ts
-async function readBody2(req) {
+async function readBody(req) {
   return new Promise((resolve) => {
     let data = "";
     req.on("data", (chunk) => {
@@ -952,7 +1003,7 @@ var DashboardService = class extends Service3 {
           return;
         }
         try {
-          const body = JSON.parse(await readBody2(req));
+          const body = JSON.parse(await readBody(req));
           const merged = {};
           for (const mode of Object.keys(body)) {
             merged[mode] = body[mode] ?? {};
@@ -977,9 +1028,9 @@ var DashboardService = class extends Service3 {
       res.end('{"error":"method not allowed"}');
     });
   }
-  register(manifest) {
-    this.plugins.set(manifest.mode, manifest);
-    this.ctx.effect(() => () => this.plugins.delete(manifest.mode));
+  register(manifest6) {
+    this.plugins.set(manifest6.mode, manifest6);
+    this.ctx.effect(() => () => this.plugins.delete(manifest6.mode));
   }
   list() {
     return Array.from(this.plugins.values());
@@ -994,7 +1045,16 @@ var DashboardService = class extends Service3 {
 
 // src/server/just-runner.ts
 import { spawn, execFile as execFile5 } from "child_process";
+import iconv from "iconv-lite";
 var MAX_BUFFER = 1e3;
+var utf8Strict = new TextDecoder("utf-8", { fatal: true });
+function decodeLine(buf) {
+  try {
+    return utf8Strict.decode(buf);
+  } catch {
+    return iconv.decode(buf, "gbk");
+  }
+}
 var JustRunner = class {
   cwd;
   tasks = /* @__PURE__ */ new Map();
@@ -1046,7 +1106,7 @@ var JustRunner = class {
   /** 启动 recipe:同名先停旧进程(重启语义),不影响其他任务;调用方须先用 recipes() 校验名字 */
   start(recipe) {
     this.killOne(recipe);
-    const task = { recipe, child: null, state: "running", code: null, startedAt: Date.now(), buffer: [], pending: "" };
+    const task = { recipe, child: null, state: "running", code: null, startedAt: Date.now(), buffer: [], pending: Buffer.alloc(0) };
     this.tasks.set(recipe, task);
     this.emit({ type: "clear", recipe });
     this.emit({ type: "state", recipe, state: "running", code: null, startedAt: task.startedAt });
@@ -1066,12 +1126,12 @@ var JustRunner = class {
     const isStale = () => this.tasks.get(recipe) !== task;
     const push = (d) => {
       if (isStale()) return;
-      task.pending += d.toString();
+      task.pending = Buffer.concat([task.pending, d]);
       let idx;
-      while ((idx = task.pending.indexOf("\n")) >= 0) {
-        const line = task.pending.slice(0, idx + 1);
-        task.pending = task.pending.slice(idx + 1);
-        this.pushLine(task, line);
+      while ((idx = task.pending.indexOf(10)) >= 0) {
+        const line = task.pending.subarray(0, idx + 1);
+        task.pending = task.pending.subarray(idx + 1);
+        this.pushLine(task, decodeLine(line));
       }
     };
     child.stdout?.on("data", push);
@@ -1081,10 +1141,10 @@ var JustRunner = class {
 `);
     });
     child.on("exit", (code, signal) => {
-      if (task.pending && !isStale()) {
-        this.pushLine(task, task.pending + "\n");
+      if (task.pending.length > 0 && !isStale()) {
+        this.pushLine(task, decodeLine(task.pending) + "\n");
       }
-      task.pending = "";
+      task.pending = Buffer.alloc(0);
       task.child = null;
       task.state = "exited";
       task.code = code ?? 0;
@@ -1112,7 +1172,7 @@ var JustRunner = class {
     const task = this.tasks.get(recipe);
     if (!task) return;
     task.buffer = [];
-    task.pending = "";
+    task.pending = Buffer.alloc(0);
     this.emit({ type: "clear", recipe });
   }
   killOne(recipe) {
@@ -1131,498 +1191,202 @@ var JustRunner = class {
   }
 };
 
-// src/plugins/just/index.ts
-var apply3 = {
-  inject: ["server", "dashboard"],
-  apply(ctx, config) {
-    const root = config.root;
-    ctx.inject(["server"], () => {
-      if (!ctx.server?.route) return;
-      const runner = new JustRunner(root);
-      ctx.effect(() => () => runner.stop());
-      ctx.dashboard.register({ mode: "just", label: "Just Runner", icon: "\u{1F4DC}", description: "Just \u591A\u4EFB\u52A1\u5E76\u53D1\u6267\u884C\u4E0E\u65E5\u5FD7" });
-      ctx.server.route("/__just/recipes", async (_req, res) => {
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        try {
-          const recipes = await runner.recipes();
-          res.end(JSON.stringify(recipes));
-        } catch {
-          res.end(JSON.stringify([]));
+// src/sdk/server.ts
+function definePlugin(def) {
+  const { manifest: manifest6, setup } = def;
+  return {
+    inject: ["server", "dashboard", "reload"],
+    apply(ctx) {
+      const disposers = [];
+      ctx.effect(() => () => {
+        for (const fn of disposers.splice(0)) {
+          try {
+            fn();
+          } catch (e) {
+            console.error(`[zdashboard] plugin ${manifest6.mode} dispose error:`, e);
+          }
         }
       });
-      ctx.server.sse("/__just/logs", (res) => {
-        const unsub = runner.subscribe((ev) => {
-          res.write(`data: ${JSON.stringify(ev)}
-
-`);
-        });
-        return unsub;
-      });
-      const handleAction = async (req, res, act) => {
-        if (req.headers["x-stop-token"] !== ctx.server.stopToken) {
-          res.writeHead(403);
-          res.end("forbidden");
-          return;
-        }
-        const body = await readBody2(req);
-        let recipe;
+      ctx.dashboard.register(manifest6);
+      const respondWith = (handler) => async (req, res) => {
+        if (res.headersSent) return;
         try {
-          recipe = JSON.parse(body || "{}").recipe;
-        } catch {
-        }
-        if (act === "clear") {
-          if (recipe) runner.clear(recipe);
-          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
-          res.end('{"ok":true}');
-          return;
-        }
-        if (act !== "stop") {
-          if (!recipe) {
-            res.writeHead(400);
-            res.end('{"error":"no recipe"}');
-            return;
-          }
-          const recipes = await runner.recipes();
-          if (!recipes.some((r) => r.name === recipe)) {
-            res.writeHead(403);
-            res.end('{"error":"unknown recipe"}');
-            return;
-          }
-          runner.start(recipe);
-        } else {
-          runner.stop(recipe || void 0);
+          const data = await handler(req, res);
+          if (data !== void 0 && !res.writableEnded) json(res, data);
+        } catch (e) {
+          console.error(`[zdashboard] plugin ${manifest6.mode} route error:`, e);
+          if (!res.headersSent) json(res, { error: "internal" }, 500);
         }
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
-        res.end(JSON.stringify(runner.list()));
       };
-      const routeAction = (name) => {
-        ctx.server.route(`/__just/${name}`, (req, res) => {
-          handleAction(req, res, name).catch(() => {
-            if (!res.headersSent) {
-              res.writeHead(500);
-              res.end('{"error":"internal"}');
-            }
+      const pctx = {
+        mode: manifest6.mode,
+        config() {
+          const schema = manifest6.config ?? {};
+          const stored = ctx.server.getPluginConfig(manifest6.mode) ?? {};
+          const defaults = Object.fromEntries(
+            Object.entries(schema).map(([key, field]) => [key, field.default])
+          );
+          return { ...defaults, ...stored };
+        },
+        route(path12, handler) {
+          ctx.server.route(path12, respondWith(handler));
+        },
+        guardedRoute(path12, handler) {
+          const token = () => ctx.server.stopToken;
+          ctx.server.route(path12, (req, res) => {
+            if (!guarded(req, res, token())) return;
+            void respondWith(handler)(req, res);
           });
-        });
+        },
+        sse(path12, handler) {
+          ctx.server.sse(path12, handler);
+        },
+        static(prefix, dir) {
+          ctx.server.static(prefix, dir);
+        },
+        broadcast(event, data) {
+          ctx.reload?.broadcast(`plugin:${manifest6.mode}:${event}`, data ?? "");
+        },
+        onDispose(fn) {
+          disposers.push(fn);
+        }
       };
-      routeAction("start");
-      routeAction("stop");
-      routeAction("restart");
-      routeAction("clear");
-    });
-  }
-};
-
-// src/server/api/fetch.ts
-import ky from "ky";
-
-// src/server/errors.ts
-var HttpError = class extends Error {
-  constructor(status, message, body) {
-    super(message);
-    this.status = status;
-    this.body = body;
-    this.name = "HttpError";
-  }
-  status;
-  body;
-};
-var NetworkError = class extends Error {
-  constructor(message, cause) {
-    super(message);
-    this.cause = cause;
-    this.name = "NetworkError";
-  }
-  cause;
-};
-
-// src/server/api/fetch.ts
-async function fetchJson(url, init) {
-  try {
-    const res = await ky(url, { ...init, timeout: 8e3, retry: 2 });
-    return await res.json();
-  } catch (e) {
-    if (e instanceof HttpError) throw e;
-    if (e instanceof Error && e.name === "TimeoutError") {
-      throw new NetworkError(`\u8BF7\u6C42\u8D85\u65F6: ${url}`);
-    }
-    if (e instanceof Error && e.name === "HTTPError") {
-      throw new HttpError(e.status ?? 500, e.message);
+      setup(pctx);
     }
-    throw new NetworkError(`\u8BF7\u6C42\u5931\u8D25: ${url}`, e);
-  }
+  };
 }
 
-// src/server/bugs.ts
-var tokenCache = null;
-async function getToken(cfg) {
-  if (cfg.token) return cfg.token;
-  const key = `${cfg.url}|${cfg.account}`;
-  if (tokenCache && tokenCache.key === key && Date.now() - tokenCache.at < 10 * 6e4) return tokenCache.token;
-  const json = await fetchJson(`${cfg.url}/api.php/v1/tokens`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ account: cfg.account, password: "" })
+// src/plugins/builtin.ts
+function defineBuiltin(def) {
+  let currentRoot = "";
+  const inner = definePlugin({
+    manifest: def.manifest,
+    setup(pctx) {
+      def.setup(pctx, currentRoot);
+    }
   });
-  const token = typeof json.token === "string" ? json.token : "";
-  if (!token) throw new Error("token \u83B7\u53D6\u5931\u8D25:\u68C0\u67E5 account / password");
-  tokenCache = { key, token, at: Date.now() };
-  return token;
-}
-function normBug(b, account) {
-  const assigned = b.assignedTo;
-  const assignedTo = typeof assigned === "string" ? assigned : assigned && typeof assigned === "object" && "realname" in assigned ? String(assigned.realname ?? "") : "";
-  const assignedAccount = typeof assigned === "string" ? assigned : assigned && typeof assigned === "object" ? String(assigned.account ?? "") : "";
-  const mine = !!account && (assignedAccount === account || assignedTo === account);
   return {
-    id: Number(b.id),
-    title: String(b.title ?? ""),
-    severity: b.severity ?? 4,
-    pri: b.pri ?? 3,
-    status: String(b.status ?? ""),
-    assignedTo,
-    openedBy: typeof b.openedBy === "string" ? b.openedBy : void 0,
-    mine
+    inject: inner.inject,
+    manifest: def.manifest,
+    // cli 启动期死键剥离按 manifest 判定(config 声明/external)
+    apply(ctx, config) {
+      currentRoot = config?.root ?? "";
+      inner.apply(ctx, config);
+    }
   };
 }
-async function fetchBugs(config) {
-  if (!config.url || !config.product) {
-    return { ok: false, error: "\u914D\u7F6E\u65E0\u6548\uFF1A\u8BF7\u8BBE\u7F6E\u670D\u52A1\u5668 URL \u548C\u4EA7\u54C1 ID" };
-  }
-  try {
-    const token = await getToken(config);
-    const json = await fetchJson(
-      `${config.url}/api.php/v1/products/${config.product}/bugs?page=1&limit=100`,
-      { headers: { Token: token } }
-    );
-    const raw = Array.isArray(json.bugs) ? json.bugs : [];
-    return { ok: true, url: config.url, total: Number(json.total ?? raw.length), bugs: raw.map((b) => normBug(b, config.account)) };
-  } catch (e) {
-    const msg = e instanceof Error ? e.message : String(e);
-    return { ok: false, error: `\u7985\u9053\u8BF7\u6C42\u5931\u8D25(${msg})\u2014\u2014\u68C0\u67E5 url / \u51ED\u636E / \u662F\u5426\u5F00\u542F RESTful API v1` };
-  }
-}
 
-// src/plugins/bugs/index.ts
-var apply4 = {
-  inject: ["server", "dashboard"],
-  apply(ctx, config) {
-    const root = config.root;
-    ctx.inject(["server"], () => {
-      if (!ctx.server?.route) return;
-      ctx.dashboard.register({
-        mode: "bugs",
-        label: "\u7985\u9053 Bugs",
-        icon: "\u{1F3AF}",
-        description: "\u53EA\u8BFB bug \u5217\u8868",
-        config: {
-          url: { type: "string", label: "\u670D\u52A1\u5668 URL", default: "" },
-          account: { type: "string", label: "\u8D26\u53F7", default: "" },
-          token: { type: "string", label: "Token", default: "" },
-          product: { type: "number", label: "\u4EA7\u54C1 ID", default: 0 }
-        }
-      });
-      ctx.server.route("/__bugs", async (_req, res) => {
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        try {
-          const bugConfig = ctx.dashboard.getConfig("bugs");
-          const result = await fetchBugs({
-            url: String(bugConfig?.url ?? ""),
-            account: String(bugConfig?.account ?? ""),
-            token: String(bugConfig?.token ?? ""),
-            product: Number(bugConfig?.product ?? 0)
-          });
-          res.end(JSON.stringify(result));
-        } catch (e) {
-          res.end(JSON.stringify({ ok: false, error: e instanceof Error ? e.message : "unknown error" }));
-        }
-      });
-    });
-  }
+// src/plugins/just/manifest.ts
+var manifest = {
+  mode: "just",
+  label: "Just Runner",
+  icon: "\u{1F4DC}",
+  description: "Just \u4EFB\u52A1\u65E5\u5FD7\u4E0E\u6267\u884C",
+  order: 50
 };
 
-// src/server/review-store.ts
-import fs7 from "fs";
-import path6 from "path";
-import YAML from "yaml";
-var REVIEW_DIR = ".zreview";
-var REVIEW_FILE = path6.join(REVIEW_DIR, "review.yaml");
-var DOCS_DIR = path6.join(REVIEW_DIR, "docs");
-var DIAGRAMS_DIR = path6.join(REVIEW_DIR, "diagrams");
-var ReviewStore = class {
-  root;
-  onChange;
-  constructor(root, onChange) {
-    this.root = root;
-    this.onChange = onChange;
-  }
-  exists() {
-    return fs7.existsSync(path6.join(this.root, REVIEW_FILE));
-  }
-  read() {
-    const fullPath = path6.join(this.root, REVIEW_FILE);
-    if (!fs7.existsSync(fullPath)) {
-      return { status: "draft", summary: "", documents: [], codebases: [], diagrams: [], items: [] };
-    }
-    try {
-      const parsed = YAML.parse(fs7.readFileSync(fullPath, "utf8"));
-      if (!parsed || !Array.isArray(parsed.items)) {
-        return { status: "draft", summary: parsed?.summary ?? "", documents: parsed?.documents ?? [], codebases: parsed?.codebases ?? [], diagrams: parsed?.diagrams ?? [], items: [] };
+// src/plugins/just/index.ts
+var apply3 = defineBuiltin({
+  manifest,
+  setup(ctx, root) {
+    const runner = new JustRunner(root);
+    ctx.onDispose(() => runner.stop());
+    ctx.route("/__just/recipes", async () => {
+      try {
+        return await runner.recipes();
+      } catch {
+        return [];
       }
-      return {
-        status: parsed.status ?? "draft",
-        summary: parsed.summary ?? "",
-        documents: parsed.documents ?? [],
-        codebases: parsed.codebases ?? [],
-        diagrams: parsed.diagrams ?? [],
-        items: parsed.items
-      };
-    } catch {
-      return { status: "draft", summary: "", documents: [], codebases: [], diagrams: [], items: [] };
-    }
-  }
-  write(data) {
-    fs7.mkdirSync(path6.join(this.root, REVIEW_DIR), { recursive: true });
-    fs7.writeFileSync(path6.join(this.root, REVIEW_FILE), YAML.stringify(data), "utf8");
-    this.onChange?.();
-  }
-  updateItem(id, patch) {
-    const data = this.read();
-    const item = this.findItem(data.items, id);
-    if (!item) throw new Error(`item ${id} not found`);
-    if (patch.answer !== void 0) item.answer = patch.answer;
-    if (patch.state !== void 0) item.state = patch.state;
-    if (patch.priority !== void 0) item.priority = patch.priority;
-    if (patch.title !== void 0) item.title = patch.title;
-    if (patch.state === "answered" && !patch.answer && !item.answer) item.answer = "";
-    this.write(data);
-    return data;
-  }
-  addChild(parentId, title, priority = "medium") {
-    const data = this.read();
-    const parent = this.findItem(data.items, parentId);
-    if (!parent) throw new Error(`parent ${parentId} not found`);
-    if (!parent.children) parent.children = [];
-    const newId = `${parentId}-${parent.children.length + 1}`;
-    parent.children.push({
-      id: newId,
-      type: "decomposition",
-      state: "open",
-      title,
-      priority
     });
-    this.write(data);
-    return data;
-  }
-  removeItem(id) {
-    const data = this.read();
-    const removed = this.removeItemFromList(data.items, id);
-    if (!removed) throw new Error(`item ${id} not found`);
-    this.write(data);
-    return data;
-  }
-  setStatus(status) {
-    const data = this.read();
-    if (status === "passed" && this.hasOpenItems(data.items)) {
-      throw new Error("\u5B58\u5728\u672A\u5904\u7406\u7684\u8BC4\u5BA1\u9879(open),\u4E0D\u80FD\u901A\u8FC7");
-    }
-    data.status = status;
-    this.write(data);
-    return data;
-  }
-  listDocs() {
-    const docsDir = path6.join(this.root, DOCS_DIR);
-    if (!fs7.existsSync(docsDir)) return [];
-    try {
-      return fs7.readdirSync(docsDir).filter((f) => /\.(md|markdown|txt)$/i.test(f)).sort();
-    } catch {
-      return [];
-    }
-  }
-  readDoc(name) {
-    const fullPath = path6.join(this.root, DOCS_DIR, name);
-    if (!fs7.existsSync(fullPath)) throw new Error(`doc ${name} not found`);
-    return fs7.readFileSync(fullPath, "utf8");
-  }
-  listDiagrams() {
-    const dir = path6.join(this.root, DIAGRAMS_DIR);
-    if (!fs7.existsSync(dir)) return [];
-    try {
-      return fs7.readdirSync(dir).filter((f) => /\.html$/i.test(f)).sort();
-    } catch {
-      return [];
-    }
-  }
-  readDiagram(name) {
-    const fullPath = path6.join(this.root, DIAGRAMS_DIR, name);
-    if (!fs7.existsSync(fullPath)) throw new Error(`diagram ${name} not found`);
-    return fs7.readFileSync(fullPath, "utf8");
-  }
-  findItem(items, id) {
-    for (const item of items) {
-      if (item.id === id) return item;
-      if (item.children) {
-        const found = this.findItem(item.children, id);
-        if (found) return found;
-      }
-    }
-    return null;
-  }
-  removeItemFromList(items, id) {
-    for (let i = 0; i < items.length; i++) {
-      if (items[i].id === id) {
-        items.splice(i, 1);
-        return true;
-      }
-      if (items[i].children && this.removeItemFromList(items[i].children, id)) {
-        return true;
-      }
-    }
-    return false;
-  }
-  hasOpenItems(items) {
-    for (const item of items) {
-      if (item.state === "open") return true;
-      if (item.children && this.hasOpenItems(item.children)) return true;
-    }
-    return false;
-  }
-};
-
-// src/plugins/review/index.ts
-var apply5 = {
-  inject: ["server", "dashboard", "reload"],
-  apply(ctx, config) {
-    const root = config.root;
-    ctx.inject(["server"], () => {
-      if (!ctx.server?.route) return;
-      ctx.dashboard.register({ mode: "review", label: "\u6587\u6863\u8BC4\u5BA1", icon: "\u2705", description: "\u591A\u6587\u6863\u9700\u6C42\u8BC4\u5BA1\u4E0E\u62C6\u89E3 \xB7 zreview" });
-      const reviewStore = new ReviewStore(root, () => {
-        ctx.reload.broadcast("files");
-      });
-      ctx.server.route("/__review", async (_req, res) => {
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        res.end(JSON.stringify(reviewStore.read()));
-      });
-      ctx.server.route("/__review/item", async (req, res) => {
-        if (req.headers["x-stop-token"] !== ctx.server.stopToken) {
-          res.writeHead(403);
-          res.end("forbidden");
-          return;
-        }
-        try {
-          const body = JSON.parse(await readBody2(req) || "{}");
-          const data = reviewStore.updateItem(body.id, {
-            answer: body.answer,
-            state: body.state,
-            priority: body.priority,
-            title: body.title
-          });
-          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-          res.end(JSON.stringify(data));
-        } catch (e) {
-          res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
-          res.end(JSON.stringify({ error: e instanceof Error ? e.message : "unknown error" }));
-        }
-      });
-      ctx.server.route("/__review/item/add-child", async (req, res) => {
-        if (req.headers["x-stop-token"] !== ctx.server.stopToken) {
-          res.writeHead(403);
-          res.end("forbidden");
-          return;
-        }
-        try {
-          const body = JSON.parse(await readBody2(req) || "{}");
-          const data = reviewStore.addChild(body.parentId, body.title, body.priority);
-          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-          res.end(JSON.stringify(data));
-        } catch (e) {
-          res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
-          res.end(JSON.stringify({ error: e instanceof Error ? e.message : "unknown error" }));
-        }
-      });
-      ctx.server.route("/__review/item/remove", async (req, res) => {
-        if (req.headers["x-stop-token"] !== ctx.server.stopToken) {
-          res.writeHead(403);
-          res.end("forbidden");
-          return;
-        }
+    ctx.route("/__just/tasks", async () => runner.list());
+    ctx.sse("/__just/logs", (res) => {
+      const unsub = runner.subscribe((ev) => {
         try {
-          const body = JSON.parse(await readBody2(req) || "{}");
-          const data = reviewStore.removeItem(body.id);
-          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-          res.end(JSON.stringify(data));
-        } catch (e) {
-          res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
-          res.end(JSON.stringify({ error: e instanceof Error ? e.message : "unknown error" }));
+          ctx.broadcast(ev.type, ev);
+        } catch {
         }
+        res.write(`data: ${JSON.stringify(ev)}
+
+`);
       });
-      ctx.server.route("/__review/status", async (req, res) => {
-        if (req.headers["x-stop-token"] !== ctx.server.stopToken) {
-          res.writeHead(403);
-          res.end("forbidden");
-          return;
-        }
-        try {
-          const body = JSON.parse(await readBody2(req) || "{}");
-          const data = reviewStore.setStatus(body.status);
-          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-          res.end(JSON.stringify(data));
-        } catch (e) {
+      return unsub;
+    });
+    const handleAction = async (req, res, act) => {
+      const body = await readBody(req);
+      let recipe;
+      try {
+        recipe = JSON.parse(body || "{}").recipe;
+      } catch {
+      }
+      if (act === "clear") {
+        if (recipe) runner.clear(recipe);
+        return { ok: true };
+      }
+      if (act !== "stop") {
+        if (!recipe) {
           res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
-          res.end(JSON.stringify({ error: e instanceof Error ? e.message : "unknown error" }));
+          res.end('{"error":"no recipe"}');
+          return void 0;
         }
-      });
-      ctx.server.route("/__docs", async (_req, res) => {
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        res.end(JSON.stringify(reviewStore.listDocs()));
-      });
-      ctx.server.route("/__docs/:name", async (req, res) => {
-        try {
-          const name = req.params?.name;
-          if (!name) throw new Error("missing doc name");
-          const content = reviewStore.readDoc(name);
-          res.writeHead(200, { "Content-Type": "text/markdown; charset=utf-8", "Cache-Control": "no-cache" });
-          res.end(content);
-        } catch (e) {
-          res.writeHead(404, { "Content-Type": "application/json; charset=utf-8" });
-          res.end(JSON.stringify({ error: e instanceof Error ? e.message : "not found" }));
+        const recipes = await runner.recipes();
+        if (!recipes.some((r) => r.name === recipe)) {
+          res.writeHead(403, { "Content-Type": "application/json; charset=utf-8" });
+          res.end('{"error":"unknown recipe"}');
+          return void 0;
         }
-      });
-    });
+        runner.start(recipe);
+      } else {
+        runner.stop(recipe || void 0);
+      }
+      return runner.list();
+    };
+    const routeAction = (name) => {
+      ctx.guardedRoute(`/__just/${name}`, ((req, res) => handleAction(req, res, name)));
+    };
+    routeAction("start");
+    routeAction("stop");
+    routeAction("restart");
+    routeAction("clear");
   }
-};
+});
 
 // src/plugins/apply/scan.ts
-import fs8 from "fs";
-import path7 from "path";
+import fs7 from "fs";
+import path6 from "path";
 
 // src/plugins/apply/parse-tasks.ts
 var TASK_RE = /^\s*-\s*\[([ xX])\]\s*(.*)$/;
+var MANUAL_PREFIX = "\u{1F527}[\u4EBA\u5DE5]";
 function parseTasks(md) {
-  return md.split("\n").filter((l) => TASK_RE.test(l)).map((l) => {
+  return md.split(/\r?\n/).filter((l) => TASK_RE.test(l)).map((l) => {
     const m = l.match(TASK_RE);
-    return { text: (m?.[2] ?? l).trim(), checked: m?.[1] !== " " };
+    const text = (m?.[2] ?? l).trim();
+    return { text, checked: m?.[1] !== " ", manual: text.startsWith(MANUAL_PREFIX) };
   });
 }
 function countTasks(md) {
   const tasks = parseTasks(md);
-  return { total: tasks.length, done: tasks.filter((t) => t.checked).length };
+  const normal = tasks.filter((t) => !t.manual);
+  return {
+    total: normal.length,
+    done: normal.filter((t) => t.checked).length,
+    manual: tasks.length - normal.length
+  };
 }
 
 // src/plugins/apply/scan.ts
 function readText(p) {
   try {
-    return fs8.readFileSync(p, "utf8");
+    return fs7.readFileSync(p, "utf8");
   } catch {
     return "";
   }
 }
 function worktreeDir(root, name) {
-  return path7.join(root, ".zworktree", name);
+  return path6.join(root, ".zworktree", name);
 }
 function changeDir(root, name) {
-  return path7.join(root, "openspec", "changes", name);
+  return path6.join(root, "openspec", "changes", name);
 }
 function parseDependsOn(proposal) {
   const deps = [];
@@ -1636,42 +1400,42 @@ function parseDependsOn(proposal) {
   return deps;
 }
 function scanApplyChanges(root) {
-  const changesDir = path7.join(root, "openspec", "changes");
-  if (!fs8.existsSync(changesDir)) return [];
+  const changesDir = path6.join(root, "openspec", "changes");
+  if (!fs7.existsSync(changesDir)) return [];
   const out = [];
-  for (const ent of fs8.readdirSync(changesDir, { withFileTypes: true })) {
+  for (const ent of fs7.readdirSync(changesDir, { withFileTypes: true })) {
     if (!ent.isDirectory() || ent.name.startsWith(".") || ent.name === "archive") continue;
     const wt = worktreeDir(root, ent.name);
-    const tasks = readText(path7.join(wt, "openspec", "changes", ent.name, "tasks.md"));
+    const tasks = readText(path6.join(wt, "openspec", "changes", ent.name, "tasks.md"));
     if (!tasks) {
-      const fallback = readText(path7.join(changesDir, ent.name, "tasks.md"));
+      const fallback = readText(path6.join(changesDir, ent.name, "tasks.md"));
       if (fallback) {
         const { total, done } = countTasks(fallback);
-        const wtChange = path7.join(wt, "openspec", "changes", ent.name);
-        const mainChange = path7.join(changesDir, ent.name);
+        const wtChange = path6.join(wt, "openspec", "changes", ent.name);
+        const mainChange = path6.join(changesDir, ent.name);
         out.push({
           name: ent.name,
           path: `openspec/changes/${ent.name}`,
           total,
           done,
-          hasProposal: fs8.existsSync(path7.join(wtChange, "proposal.md")) || fs8.existsSync(path7.join(mainChange, "proposal.md")),
-          hasDesign: fs8.existsSync(path7.join(wtChange, "design.md")) || fs8.existsSync(path7.join(mainChange, "design.md")),
+          hasProposal: fs7.existsSync(path6.join(wtChange, "proposal.md")) || fs7.existsSync(path6.join(mainChange, "proposal.md")),
+          hasDesign: fs7.existsSync(path6.join(wtChange, "design.md")) || fs7.existsSync(path6.join(mainChange, "design.md")),
           // worktree 目录存在即算执行中（tasks.md 可能尚未落盘）
-          inWorktree: fs8.existsSync(wtChange)
+          inWorktree: fs7.existsSync(wtChange)
         });
       }
     } else {
       const { total, done } = countTasks(tasks);
-      const wtChange = path7.join(wt, "openspec", "changes", ent.name);
-      const mainChange = path7.join(changesDir, ent.name);
+      const wtChange = path6.join(wt, "openspec", "changes", ent.name);
+      const mainChange = path6.join(changesDir, ent.name);
       out.push({
         name: ent.name,
         path: `openspec/changes/${ent.name}`,
         total,
         done,
         // 任一侧存在即算（详情读取是 worktree 优先、主目录兜底，列表标记保持一致）
-        hasProposal: fs8.existsSync(path7.join(wtChange, "proposal.md")) || fs8.existsSync(path7.join(mainChange, "proposal.md")),
-        hasDesign: fs8.existsSync(path7.join(wtChange, "design.md")) || fs8.existsSync(path7.join(mainChange, "design.md")),
+        hasProposal: fs7.existsSync(path6.join(wtChange, "proposal.md")) || fs7.existsSync(path6.join(mainChange, "proposal.md")),
+        hasDesign: fs7.existsSync(path6.join(wtChange, "design.md")) || fs7.existsSync(path6.join(mainChange, "design.md")),
         inWorktree: true
       });
     }
@@ -1682,14 +1446,14 @@ function scanApplyChanges(root) {
 function readApplyChange(root, name) {
   const wt = worktreeDir(root, name);
   const mainChangeDir = changeDir(root, name);
-  const proposalFrom = fs8.existsSync(path7.join(wt, "openspec", "changes", name, "proposal.md")) ? path7.join(wt, "openspec", "changes", name, "proposal.md") : path7.join(mainChangeDir, "proposal.md");
-  const designFrom = fs8.existsSync(path7.join(wt, "openspec", "changes", name, "design.md")) ? path7.join(wt, "openspec", "changes", name, "design.md") : path7.join(mainChangeDir, "design.md");
-  const tasksFrom = fs8.existsSync(path7.join(wt, "openspec", "changes", name, "tasks.md")) ? path7.join(wt, "openspec", "changes", name, "tasks.md") : path7.join(mainChangeDir, "tasks.md");
+  const proposalFrom = fs7.existsSync(path6.join(wt, "openspec", "changes", name, "proposal.md")) ? path6.join(wt, "openspec", "changes", name, "proposal.md") : path6.join(mainChangeDir, "proposal.md");
+  const designFrom = fs7.existsSync(path6.join(wt, "openspec", "changes", name, "design.md")) ? path6.join(wt, "openspec", "changes", name, "design.md") : path6.join(mainChangeDir, "design.md");
+  const tasksFrom = fs7.existsSync(path6.join(wt, "openspec", "changes", name, "tasks.md")) ? path6.join(wt, "openspec", "changes", name, "tasks.md") : path6.join(mainChangeDir, "tasks.md");
   const proposal = readText(proposalFrom);
   const design = readText(designFrom);
   const tasks = readText(tasksFrom);
   const { total, done } = countTasks(tasks);
-  const inWorktree = fs8.existsSync(path7.join(wt, "openspec", "changes", name));
+  const inWorktree = fs7.existsSync(path6.join(wt, "openspec", "changes", name));
   const dependsOn = parseDependsOn(proposal);
   const hasTestStrategy = /^##\s+测试策略\s*$/m.test(design);
   return {
@@ -1708,43 +1472,106 @@ function readApplyChange(root, name) {
   };
 }
 
+// src/plugins/apply/batch.ts
+import fs8 from "fs";
+import path7 from "path";
+var RUN_ID_PATTERN = /^[A-Za-z0-9-]+$/;
+function isPlainObject(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function readText2(p) {
+  try {
+    return fs8.readFileSync(p, "utf8");
+  } catch {
+    return null;
+  }
+}
+function readBatchState(root) {
+  const applyDir = path7.join(root, ".zdev", "apply");
+  const raw = readText2(path7.join(applyDir, "CURRENT"));
+  const runId = raw?.trim() ?? "";
+  if (!runId || !RUN_ID_PATTERN.test(runId)) {
+    return { run: null, state: null };
+  }
+  const parsed = (() => {
+    const text = readText2(path7.join(applyDir, "runs", runId, "state.json"));
+    if (text == null) return null;
+    try {
+      return JSON.parse(text);
+    } catch {
+      return null;
+    }
+  })();
+  if (!isPlainObject(parsed)) {
+    return { run: { id: runId }, state: null };
+  }
+  return { run: { id: runId }, state: parsed };
+}
+function projectGraph(state) {
+  if (!state) {
+    return { changes: [], batches: [], conflicts: [] };
+  }
+  return {
+    changes: state.changes.map((c) => ({
+      name: c.name,
+      status: c.status,
+      dependencies: c.dependencies,
+      batchIndex: c.batchIndex
+    })),
+    batches: state.batches,
+    conflicts: state.conflicts
+  };
+}
+var BATCH_LOGS_TAIL = 100;
+function tailLogs(state) {
+  return (state?.logs ?? []).slice(-BATCH_LOGS_TAIL);
+}
+function readBatchPlan(root, runId) {
+  return readText2(path7.join(root, ".zdev", "apply", "runs", runId, "plan.md"));
+}
+
+// src/plugins/apply/manifest.ts
+var manifest2 = {
+  mode: "apply",
+  label: "\u6267\u884C\u8FDB\u5EA6",
+  icon: "\u2699\uFE0F",
+  description: "OpenSpec \u6267\u884C\u8FDB\u5EA6 \xB7 zapply \u5355 change \u4E0E\u6279\u91CF",
+  order: 40
+};
+
 // src/plugins/apply/index.ts
-var apply6 = {
-  inject: ["server", "dashboard"],
-  apply(ctx, config) {
-    const root = config.root;
-    ctx.inject(["server"], () => {
-      if (!ctx.server?.route) return;
-      ctx.dashboard.register({ mode: "apply", label: "\u6267\u884C\u8FDB\u5EA6", icon: "\u2699\uFE0F", description: "OpenSpec change \u4EFB\u52A1\u8FDB\u5EA6" });
-      ctx.server.route("/__apply", async (_req, res) => {
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        res.end(JSON.stringify(scanApplyChanges(root)));
-      });
-      ctx.server.route("/__apply/change", async (req, res) => {
-        const url = new URL(req.url || "", "http://x");
-        const name = url.searchParams.get("name");
-        if (!name) {
-          res.writeHead(400);
-          res.end(JSON.stringify({ error: "missing name" }));
-          return;
-        }
-        if (name.includes("..") || name.includes("/") || name.includes("\\")) {
-          res.writeHead(400);
-          res.end(JSON.stringify({ error: "invalid name" }));
-          return;
-        }
-        try {
-          const data = readApplyChange(root, name);
-          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-          res.end(JSON.stringify(data));
-        } catch (e) {
-          res.writeHead(400);
-          res.end(JSON.stringify({ error: e instanceof Error ? e.message : "unknown error" }));
-        }
-      });
+function errorResponse(res, status, msg) {
+  res.writeHead(status, { "Content-Type": "application/json; charset=utf-8" });
+  res.end(JSON.stringify({ error: msg }));
+  return void 0;
+}
+var apply4 = defineBuiltin({
+  manifest: manifest2,
+  setup(ctx, root) {
+    ctx.route("/__apply", async () => scanApplyChanges(root));
+    ctx.route("/__apply/change", async (req, res) => {
+      const url = new URL(req.url || "", "http://x");
+      const name = url.searchParams.get("name");
+      const bad = (msg) => errorResponse(res, 400, msg);
+      if (!name) return bad("missing name");
+      if (name.includes("..") || name.includes("/") || name.includes("\\")) return bad("invalid name");
+      try {
+        return readApplyChange(root, name);
+      } catch (e) {
+        return bad(e instanceof Error ? e.message : "unknown error");
+      }
+    });
+    ctx.route("/__apply/batch", async () => readBatchState(root));
+    ctx.route("/__apply/batch/graph", async () => projectGraph(readBatchState(root).state));
+    ctx.route("/__apply/batch/logs", async () => tailLogs(readBatchState(root).state));
+    ctx.route("/__apply/batch/plan", async (_req, res) => {
+      const snap = readBatchState(root);
+      const plan = snap.run ? readBatchPlan(root, snap.run.id) : null;
+      if (plan == null) return errorResponse(res, 404, "plan not found");
+      return { plan };
     });
   }
-};
+});
 
 // src/plugins/design/index.ts
 import path9 from "path";
@@ -1788,75 +1615,100 @@ function scanAssets(root, subDir = "") {
   return out;
 }
 
+// src/plugins/design/manifest.ts
+var manifest3 = {
+  mode: "design",
+  label: "\u8BBE\u8BA1\u8D44\u4EA7",
+  icon: "\u{1F3A8}",
+  description: "\u8BBE\u8BA1\u8D44\u4EA7\u5206\u7C7B\u6D4F\u89C8 \xB7 zdesign",
+  order: 30
+};
+
 // src/plugins/design/index.ts
 var ASSET_KEYS = ["page", "component", "icon", "token", "md", "video", "audio", "pdf", "font"];
-function mergeScanResults(a, b) {
+function emptyScan() {
   const out = {};
-  for (const k of ASSET_KEYS) {
-    out[k] = [...a[k], ...b[k]];
-  }
+  for (const k of ASSET_KEYS) out[k] = [];
   return out;
 }
-var apply7 = {
-  inject: ["server", "dashboard"],
-  apply(ctx, config) {
-    const root = config.root;
-    ctx.inject(["server"], () => {
-      if (!ctx.server?.route) return;
-      ctx.dashboard.register({
-        mode: "design",
-        label: "\u8BBE\u8BA1\u8D44\u4EA7",
-        icon: "\u{1F3A8}",
-        description: "\u9875\u9762/\u7EC4\u4EF6/\u56FE\u6807/Token \u5206\u7C7B\u9884\u89C8",
-        config: {
-          folders: { type: "string[]", label: "\u626B\u63CF\u6587\u4EF6\u5939", default: [] }
-        }
-      });
-      ctx.server.route("/__design/assets", async (_req, res) => {
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        const designConfig = ctx.dashboard.getConfig("design");
-        const folders = Array.isArray(designConfig?.folders) ? designConfig.folders : [];
-        if (folders.length === 0) {
-          res.end(JSON.stringify(scanAssets(root)));
-          return;
+var apply5 = defineBuiltin({
+  manifest: manifest3,
+  setup(ctx, root) {
+    ctx.route("/__design/assets", async () => {
+      const designRoot = path9.join(root, ".zdev", "design");
+      return fs9.existsSync(designRoot) ? scanAssets(designRoot) : emptyScan();
+    });
+    ctx.route("/__design/asset", async (req, res) => {
+      const rel = new URL(req.url || "/", "http://localhost").searchParams.get("path") ?? "";
+      if (!rel || rel.includes("..") || rel.includes("\\") || path9.isAbsolute(rel)) {
+        res.writeHead(400);
+        res.end("bad path");
+        return;
+      }
+      const designRoot = path9.join(root, ".zdev", "design");
+      const filePath = path9.join(designRoot, rel);
+      if (!filePath.startsWith(designRoot + path9.sep)) {
+        res.writeHead(400);
+        res.end("bad path");
+        return;
+      }
+      fs9.stat(filePath, (err) => {
+        if (err) {
+          res.writeHead(404);
+          return res.end("Not found");
         }
-        let merged = {};
-        for (const k of ASSET_KEYS) merged[k] = [];
-        for (const folder of folders) {
-          const folderPath = path9.resolve(root, folder);
-          if (fs9.existsSync(folderPath) && fs9.statSync(folderPath).isDirectory()) {
-            const result = scanAssets(folderPath);
-            merged = mergeScanResults(merged, result);
+        const ct = MIME[path9.extname(filePath).toLowerCase()] ?? "application/octet-stream";
+        res.writeHead(200, { "Content-Type": ct, "Cache-Control": "no-cache" });
+        const stream = fs9.createReadStream(filePath);
+        stream.on("error", () => {
+          try {
+            res.destroy();
+          } catch {
           }
-        }
-        res.end(JSON.stringify(merged));
+        });
+        stream.pipe(res);
       });
     });
   }
+});
+
+// src/plugins/view/manifest.ts
+var manifest4 = {
+  mode: "view",
+  label: "\u9879\u76EE\u6D4F\u89C8",
+  icon: "\u{1F441}\uFE0F",
+  description: "openspec / docs / \u6587\u6863\u9884\u89C8",
+  order: 20
 };
 
 // src/plugins/view/index.ts
-var apply8 = {
-  inject: ["dashboard"],
-  apply(ctx) {
-    ctx.dashboard.register({
-      mode: "view",
-      label: "\u9879\u76EE\u6D4F\u89C8",
-      icon: "\u{1F441}\uFE0F",
-      description: "openspec / docs / \u6587\u6863\u9884\u89C8",
-      config: {
-        hiddenDirs: { type: "string[]", label: "\u9690\u85CF\u76EE\u5F55", default: [".git", "node_modules", "dist", "build"] },
-        defaultExpandDepth: { type: "number", label: "\u9ED8\u8BA4\u5C55\u5F00\u6DF1\u5EA6", default: 2 },
-        showHidden: { type: "boolean", label: "\u663E\u793A\u9690\u85CF\u6587\u4EF6", default: false }
-      }
-    });
+var apply6 = defineBuiltin({
+  manifest: manifest4,
+  setup() {
   }
-};
+});
 
 // src/plugins/stats/index.ts
 import fs10 from "fs";
 import path10 from "path";
+import { execFile as execFile6 } from "child_process";
+
+// src/plugins/stats/manifest.ts
+var manifest5 = {
+  mode: "stats",
+  label: "\u9879\u76EE\u7EDF\u8BA1",
+  icon: "\u{1F4CA}",
+  description: "\u9879\u76EE\u6587\u4EF6\u7EDF\u8BA1 \xB7 \u626B\u63CF\u751F\u6210",
+  order: 10
+};
+
+// src/plugins/stats/index.ts
 var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "build", ".next", ".cache"]);
+function execFilePromise(file, args, opts) {
+  return new Promise((resolve) => {
+    execFile6(file, args, opts, (err, stdout) => resolve(err ? "" : stdout));
+  });
+}
 function scan(root) {
   const stats = {
     root: path10.basename(root),
@@ -1866,7 +1718,8 @@ function scan(root) {
     byExt: [],
     markdown: 0,
     openspec: { active: 0, archived: 0 },
-    hasJust: fs10.existsSync(path10.join(root, "justfile"))
+    hasJust: fs10.existsSync(path10.join(root, "justfile")),
+    worktrees: 0
   };
   const extMap = /* @__PURE__ */ new Map();
   const walk = (dir) => {
@@ -1899,271 +1752,34 @@ function scan(root) {
   stats.byExt = Array.from(extMap.entries()).map(([ext, count]) => ({ ext, count })).sort((a, b) => b.count - a.count).slice(0, 10);
   return stats;
 }
-var apply9 = {
-  inject: ["server", "dashboard"],
-  apply(ctx, config) {
-    ctx.inject(["server", "dashboard"], () => {
-      const server = ctx.server;
-      const dashboard = ctx.dashboard;
-      if (!server?.route || !dashboard?.register) return;
-      dashboard.register({
-        mode: "stats",
-        label: "\u9879\u76EE\u7EDF\u8BA1",
-        icon: "\u{1F4CA}",
-        description: "\u9879\u76EE\u6587\u4EF6\u7EDF\u8BA1 \xB7 \u626B\u63CF\u751F\u6210"
-      });
-      server.route("/__stats/data", (_req, res) => {
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        res.end(JSON.stringify(scan(config.root)));
-      });
-    });
-  }
-};
-
-// src/server/apply-batch-store.ts
-import fs11 from "fs";
-import path11 from "path";
-var DEFAULT_STATE = {
-  version: "1",
-  status: "idle",
-  changes: [],
-  batches: [],
-  currentBatchIndex: -1,
-  parallelism: 2,
-  logs: [],
-  conflicts: []
-};
-var ApplyBatchStore = class {
-  root;
-  statePath;
-  state;
-  listeners = /* @__PURE__ */ new Set();
-  constructor(root, onBroadcast) {
-    this.root = root;
-    this.statePath = path11.join(root, ".zapply", "batch-state.json");
-    this.state = this.load();
-  }
-  load() {
-    try {
-      if (fs11.existsSync(this.statePath)) {
-        return JSON.parse(fs11.readFileSync(this.statePath, "utf8"));
+var apply7 = defineBuiltin({
+  manifest: manifest5,
+  setup(ctx, root) {
+    ctx.route("/__stats/data", async () => {
+      const stats = scan(root);
+      try {
+        const wts = await listWorktrees(root);
+        stats.worktrees = wts.length;
+      } catch {
+        stats.worktrees = 0;
       }
-    } catch {
-    }
-    return { ...DEFAULT_STATE, createdAt: (/* @__PURE__ */ new Date()).toISOString(), updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
-  }
-  save() {
-    this.state.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-    fs11.mkdirSync(path11.dirname(this.statePath), { recursive: true });
-    fs11.writeFileSync(this.statePath, JSON.stringify(this.state, null, 2));
-    this.listeners.forEach((fn) => fn());
-  }
-  subscribe(fn) {
-    this.listeners.add(fn);
-    return () => this.listeners.delete(fn);
-  }
-  read() {
-    return this.state;
-  }
-  updateStatus(status) {
-    this.state.status = status;
-    this.save();
-  }
-  updateChanges(changes) {
-    this.state.changes = changes;
-    this.save();
-  }
-  updateBatches(batches) {
-    this.state.batches = batches;
-    this.save();
-  }
-  updateParallelism(parallelism) {
-    this.state.parallelism = Math.max(1, Math.min(8, parallelism));
-    this.save();
-  }
-  addLog(log) {
-    this.state.logs.push(log);
-    if (this.state.logs.length > 1e3) {
-      this.state.logs = this.state.logs.slice(-1e3);
-    }
-    this.save();
-  }
-  updateConflicts(conflicts) {
-    this.state.conflicts = conflicts;
-    this.save();
-  }
-  updateChange(name, patch) {
-    const idx = this.state.changes.findIndex((c) => c.name === name);
-    if (idx !== -1) {
-      this.state.changes[idx] = { ...this.state.changes[idx], ...patch };
-      this.save();
-    }
-  }
-  updateCheckpoint(name, checkpoint) {
-    const idx = this.state.changes.findIndex((c) => c.name === name);
-    if (idx !== -1) {
-      this.state.changes[idx].checkpoint = checkpoint;
-      this.save();
-    }
-  }
-  reset() {
-    this.state = { ...DEFAULT_STATE, createdAt: (/* @__PURE__ */ new Date()).toISOString(), updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
-    this.save();
-  }
-};
-
-// src/plugins/apply-batch/index.ts
-var apply10 = {
-  inject: ["server", "dashboard", "reload"],
-  apply(ctx, config) {
-    const root = config.root;
-    ctx.inject(["server"], () => {
-      if (!ctx.server?.route) return;
-      ctx.dashboard.register({
-        mode: "apply-batch",
-        label: "\u6279\u91CF\u6267\u884C",
-        icon: "\u26A1",
-        description: "zapply \u6279\u91CF\u5E76\u884C\u6267\u884C\u9A7E\u9A76\u8231"
-      });
-      const store = new ApplyBatchStore(root, () => {
-        try {
-          ctx.reload.broadcast("files");
-        } catch {
-        }
-      });
-      ctx.server.route("/__apply-batch", async (_req, res) => {
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        res.end(JSON.stringify(store.read()));
-      });
-      ctx.server.route("/__apply-batch/status", async (req, res) => {
-        try {
-          const body = JSON.parse(await readBody(req) || "{}");
-          store.updateStatus(body.status);
-          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-          res.end(JSON.stringify(store.read()));
-        } catch (e) {
-          res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
-          res.end(JSON.stringify({ error: e instanceof Error ? e.message : "unknown error" }));
-        }
-      });
-      ctx.server.route("/__apply-batch/changes", async (_req, res) => {
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        res.end(JSON.stringify(store.read().changes));
-      });
-      ctx.server.route("/__apply-batch/graph", async (_req, res) => {
-        const state = store.read();
-        const graph = {
-          changes: state.changes.map((c) => ({
-            name: c.name,
-            status: c.status,
-            dependencies: c.dependencies,
-            batchIndex: c.batchIndex
-          })),
-          batches: state.batches,
-          conflicts: state.conflicts
-        };
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        res.end(JSON.stringify(graph));
-      });
-      ctx.server.route("/__apply-batch/logs", async (_req, res) => {
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        res.end(JSON.stringify(store.read().logs.slice(-100)));
-      });
-      ctx.server.route("/__apply-batch/approve", async (req, res) => {
-        try {
-          const body = JSON.parse(await readBody(req) || "{}");
-          store.updateStatus("running");
-          store.updateParallelism(body.parallelism ?? 2);
-          if (body.skipChanges?.length) {
-            for (const name of body.skipChanges) {
-              store.updateChange(name, { status: "skipped" });
-            }
-          }
-          store.addLog({
-            timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-            level: "info",
-            message: `\u7528\u6237\u786E\u8BA4\u6267\u884C\u8BA1\u5212\uFF0C\u5E76\u884C\u5EA6=${body.parallelism ?? 2}`
-          });
-          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-          res.end(JSON.stringify(store.read()));
-        } catch (e) {
-          res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
-          res.end(JSON.stringify({ error: e instanceof Error ? e.message : "unknown error" }));
-        }
-      });
-      ctx.server.route("/__apply-batch/adjust", async (req, res) => {
-        try {
-          const body = JSON.parse(await readBody(req) || "{}");
-          if (body.parallelism) store.updateParallelism(body.parallelism);
-          if (body.skipChanges?.length) {
-            for (const name of body.skipChanges) {
-              store.updateChange(name, { status: "skipped" });
-            }
-          }
-          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-          res.end(JSON.stringify(store.read()));
-        } catch (e) {
-          res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
-          res.end(JSON.stringify({ error: e instanceof Error ? e.message : "unknown error" }));
-        }
-      });
-      ctx.server.route("/__apply-batch/retry", async (req, res) => {
-        try {
-          const body = JSON.parse(await readBody(req) || "{}");
-          const name = body.name;
-          if (!name) throw new Error("missing name");
-          const change = store.read().changes.find((c) => c.name === name);
-          if (!change) throw new Error("change not found");
-          store.updateChange(name, {
-            status: "pending",
-            error: void 0,
-            retryCount: (change.retryCount ?? 0) + 1
-          });
-          store.addLog({
-            timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-            level: "info",
-            message: `\u91CD\u8BD5 change: ${name}`,
-            changeName: name
-          });
-          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-          res.end(JSON.stringify(store.read()));
-        } catch (e) {
-          res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
-          res.end(JSON.stringify({ error: e instanceof Error ? e.message : "unknown error" }));
-        }
-      });
-      ctx.server.route("/__apply-batch/pause", async (req, res) => {
-        store.updateStatus("paused");
-        store.addLog({
-          timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-          level: "warn",
-          message: "\u7528\u6237\u6682\u505C\u6279\u91CF\u6267\u884C"
-        });
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        res.end(JSON.stringify(store.read()));
-      });
-      ctx.server.route("/__apply-batch/resume", async (req, res) => {
-        store.updateStatus("running");
-        store.addLog({
-          timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-          level: "info",
-          message: "\u7528\u6237\u6062\u590D\u6279\u91CF\u6267\u884C"
-        });
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        res.end(JSON.stringify(store.read()));
-      });
-      ctx.server.route("/__apply-batch/reset", async (req, res) => {
-        store.reset();
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" });
-        res.end(JSON.stringify(store.read()));
-      });
+      try {
+        const branchOut = await execFilePromise("git", ["rev-parse", "--abbrev-ref", "HEAD"], { cwd: root });
+        stats.branch = branchOut.trim() || void 0;
+      } catch {
+      }
+      try {
+        const statusOut = await execFilePromise("git", ["status", "--porcelain"], { cwd: root });
+        stats.dirty = statusOut.trim() ? statusOut.trim().split("\n").length : 0;
+      } catch {
+      }
+      return stats;
     });
   }
-};
+});
 
 // src/cli.ts
-import YAML2 from "yaml";
-var __dirname2 = path12.dirname(fileURLToPath2(import.meta.url));
+var __dirname2 = path11.dirname(fileURLToPath2(import.meta.url));
 var DEFAULT_PORT = 4190;
 function parseArgs() {
   const args = process.argv.slice(2);
@@ -2198,62 +1814,6 @@ async function pathExists(p) {
     return false;
   }
 }
-function migrateLegacyBugsConfig(root) {
-  const zgoalConfigYaml = path12.join(root, ".zgoal", "config.yaml");
-  const zdevConfigYaml = path12.join(root, ".zdev", "config.yaml");
-  if (fs12.existsSync(zgoalConfigYaml)) {
-    try {
-      fs12.unlinkSync(zgoalConfigYaml);
-    } catch {
-    }
-  }
-  if (!fs12.existsSync(zdevConfigYaml)) return;
-  const pluginsConfig = readPluginsConfig(root);
-  if ("bugs" in pluginsConfig) {
-    try {
-      fs12.unlinkSync(zdevConfigYaml);
-    } catch {
-    }
-    return;
-  }
-  let yamlContent;
-  try {
-    yamlContent = fs12.readFileSync(zdevConfigYaml, "utf8");
-  } catch {
-    return;
-  }
-  let parsed;
-  try {
-    parsed = YAML2.parse(yamlContent);
-  } catch {
-    console.warn("[zdashboard] \u65E0\u6548\u7684 .zdev/config.yaml\uFF0C\u5DF2\u5FFD\u7565\u5E76\u5220\u9664");
-    try {
-      fs12.unlinkSync(zdevConfigYaml);
-    } catch {
-    }
-    return;
-  }
-  if (!parsed || typeof parsed !== "object" || !parsed.url || !parsed.product) {
-    console.warn("[zdashboard] .zdev/config.yaml \u7F3A\u5C11\u5FC5\u8981\u5B57\u6BB5\uFF0C\u5DF2\u5FFD\u7565\u5E76\u5220\u9664");
-    try {
-      fs12.unlinkSync(zdevConfigYaml);
-    } catch {
-    }
-    return;
-  }
-  const bugsConfig = {
-    url: String(parsed.url).replace(/\/+$/, ""),
-    account: typeof parsed.account === "string" ? parsed.account : "",
-    token: typeof parsed.token === "string" ? parsed.token : typeof parsed.password === "string" ? parsed.password : "",
-    product: Number(parsed.product)
-  };
-  pluginsConfig.bugs = bugsConfig;
-  writePluginsConfig(root, pluginsConfig);
-  try {
-    fs12.unlinkSync(zdevConfigYaml);
-  } catch {
-  }
-}
 async function loadExternal(ctx, dir, root) {
   if (!dir) return;
   let tsxLoaded = false;
@@ -2269,7 +1829,7 @@ async function loadExternal(ctx, dir, root) {
       if (!ent.isDirectory()) continue;
       const candidates = tsxLoaded ? ["index.ts", "index.js", "index.mjs"] : ["index.js", "index.mjs"];
       for (const name of candidates) {
-        const p = path12.join(dir, ent.name, name);
+        const p = path11.join(dir, ent.name, name);
         if (await pathExists(p)) {
           try {
             const mod = await import(p);
@@ -2284,8 +1844,8 @@ async function loadExternal(ctx, dir, root) {
               const m = ctx.dashboard.get(ent.name);
               if (m && m.mode === ent.name) {
                 const patch = { external: true };
-                const webDir = path12.join(dir, ent.name, "web");
-                if (await pathExists(path12.join(webDir, "index.html"))) {
+                const webDir = path11.join(dir, ent.name, "web");
+                if (await pathExists(path11.join(webDir, "index.html"))) {
                   ctx.server.static(`${PLUGIN_STATIC_PREFIX}${ent.name}/`, webDir);
                   if (!m.viewerUrl) patch.viewerUrl = `${PLUGIN_STATIC_PREFIX}${ent.name}/`;
                 }
@@ -2304,7 +1864,7 @@ async function loadExternal(ctx, dir, root) {
 }
 async function main() {
   const args = parseArgs();
-  const root = path12.resolve(args.dir);
+  const root = path11.resolve(args.dir);
   const existing = await findReusable(root);
   if (existing && !args.restart) {
     const u = `http://localhost:${existing.port}` + (args.page ? `#${args.page}` : "");
@@ -2318,12 +1878,15 @@ async function main() {
     console.log(`[zdashboard] --restart\uFF1A\u505C\u6B62\u65E7\u5B9E\u4F8B pid=${oldRecord.pid}`);
     await stopInstance(oldRecord);
   }
-  const appDir = path12.resolve(__dirname2, "web");
+  const appDir = path11.resolve(__dirname2, "web");
+  const BUILTIN_PLUGINS = [apply7, apply3, apply4, apply5, apply6];
+  if (stripDeadPluginConfig(root, BUILTIN_PLUGINS.map((p) => p.manifest))) {
+    console.log("[zdashboard] \u5DF2\u6E05\u7406 dashboard.json \u4E2D\u5185\u7F6E\u63D2\u4EF6\u7684\u8FC7\u65F6\u914D\u7F6E\u952E");
+  }
   const startPort = oldRecord && !args.portExplicit ? oldRecord.port : args.port;
-  const zdevDir = path12.join(root, ".zdev");
-  const dataDir = fs12.existsSync(zdevDir) ? ".zdev/" : "";
+  const zdevDir = path11.join(root, ".zdev");
+  const dataDir = fs11.existsSync(zdevDir) ? ".zdev/" : "";
   const det = await detect(root);
-  migrateLegacyBugsConfig(root);
   const ctx = new Context();
   ctx.plugin(ServerService, {
     root,
@@ -2339,25 +1902,15 @@ async function main() {
   ctx.plugin(apply, { root });
   ctx.plugin(apply2, { root });
   ctx.plugin(DashboardService);
-  const plugins = [
-    { name: "stats", apply: apply9 },
-    { name: "just", apply: apply3 },
-    { name: "bugs", apply: apply4 },
-    { name: "review", apply: apply5 },
-    { name: "apply", apply: apply6 },
-    { name: "apply-batch", apply: apply10 },
-    { name: "design", apply: apply7 },
-    { name: "view", apply: apply8 }
-  ];
-  for (const p of plugins) {
+  for (const apply8 of BUILTIN_PLUGINS) {
     try {
-      ctx.plugin(p.apply, { root });
+      ctx.plugin(apply8, { root });
     } catch (e) {
-      console.error(`[zdashboard] plugin ${p.name} failed:`, e);
+      console.error("[zdashboard] builtin plugin failed:", e);
     }
   }
   if (args.plugins) {
-    await loadExternal(ctx, path12.resolve(args.plugins), root);
+    await loadExternal(ctx, path11.resolve(args.plugins), root);
   }
   const shutdown = () => {
     try {