@asterxsk/kiln 0.1.0 → 0.3.0

package/agent.bak.20260905-190020/extensions/pi-web-access/youtube-extract.ts

@@ -0,0 +1,328 @@
+import { execFileSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { activityMonitor } from "./activity.ts";
+import { canAttachImages } from "./feature-config.ts";
+import { isGeminiWebAvailable, queryWithCookies } from "./gemini-web.ts";
+import { isGeminiApiAvailableWithVideo, queryGeminiApiWithVideo } from "./gemini-api.ts";
+import { isExaAvailable, searchWithExa } from "./exa.ts";
+import { extractHeadingTitle, type ExtractedContent, type FrameResult, type VideoFrame } from "./extract.ts";
+import { formatSeconds, readExecError, isTimeoutError, trimErrorText, mapFfmpegError, getWebSearchConfigPath } from "./utils.ts";
+
+const CONFIG_PATH = getWebSearchConfigPath();
+
+const YOUTUBE_PROMPT = `Extract the complete content of this YouTube video. Include:
+1. Video title, channel name, and duration
+2. A brief summary (2-3 sentences)
+3. Full transcript with timestamps
+4. Descriptions of any code, terminal commands, diagrams, slides, or UI shown on screen
+
+Format as markdown.`;
+
+const YOUTUBE_REGEX =
+	/(?:(?:www\.|m\.)?youtube\.com\/(?:watch\?.*v=|shorts\/|live\/|embed\/|v\/)|youtu\.be\/)([a-zA-Z0-9_-]{11})/;
+
+function errorMessage(err: unknown): string {
+	return err instanceof Error ? err.message : String(err);
+}
+
+function shouldRethrow(err: unknown): boolean {
+	return errorMessage(err).startsWith("Failed to parse ");
+}
+
+function addAttemptError(errors: string[], label: string, err: unknown): void {
+	const message = errorMessage(err).replace(/\s+/g, " ").trim();
+	if (message) errors.push(`${label}: ${message}`);
+}
+
+interface YouTubeConfig {
+	enabled: boolean;
+	preferredModel: string;
+}
+
+function normalizePreferredModel(value: unknown, fallback: string): string {
+	if (typeof value !== "string") return fallback;
+	const normalized = value.trim();
+	return normalized.length > 0 ? normalized : fallback;
+}
+
+function normalizeEnabled(value: unknown, fallback: boolean): boolean {
+	return typeof value === "boolean" ? value : fallback;
+}
+
+const defaults: YouTubeConfig = { enabled: true, preferredModel: "gemini-3.6-flash" };
+let cachedConfig: YouTubeConfig | null = null;
+
+function loadYouTubeConfig(): YouTubeConfig {
+	if (cachedConfig) return cachedConfig;
+	if (!existsSync(CONFIG_PATH)) {
+		cachedConfig = { ...defaults };
+		return cachedConfig;
+	}
+
+	const rawText = readFileSync(CONFIG_PATH, "utf-8");
+	let raw: { youtube?: { enabled?: boolean; preferredModel?: string } };
+	try {
+		raw = JSON.parse(rawText) as { youtube?: { enabled?: boolean; preferredModel?: string } };
+	} catch (err) {
+		const message = err instanceof Error ? err.message : String(err);
+		throw new Error(`Failed to parse ${CONFIG_PATH}: ${message}`);
+	}
+
+	const yt = raw.youtube ?? {};
+	cachedConfig = {
+		enabled: normalizeEnabled(yt.enabled, defaults.enabled),
+		preferredModel: normalizePreferredModel(yt.preferredModel, defaults.preferredModel),
+	};
+	return cachedConfig;
+}
+
+export function isYouTubeURL(url: string): { isYouTube: boolean; videoId: string | null } {
+	try {
+		const parsed = new URL(url);
+		if (parsed.pathname === "/playlist") {
+			return { isYouTube: false, videoId: null };
+		}
+	} catch {
+	}
+
+	const match = url.match(YOUTUBE_REGEX);
+	if (!match) return { isYouTube: false, videoId: null };
+	return { isYouTube: true, videoId: match[1] };
+}
+
+export function isYouTubeEnabled(): boolean {
+	return loadYouTubeConfig().enabled;
+}
+
+export async function extractYouTube(
+	url: string,
+	signal?: AbortSignal,
+	prompt?: string,
+	model?: string,
+): Promise<ExtractedContent | null> {
+	const config = loadYouTubeConfig();
+	const { videoId } = isYouTubeURL(url);
+	const canonicalUrl = videoId
+		? `https://www.youtube.com/watch?v=${videoId}`
+		: url;
+	const effectivePrompt = prompt ?? YOUTUBE_PROMPT;
+	const effectiveModel = model ?? config.preferredModel;
+
+	const activityId = activityMonitor.logStart({ type: "fetch", url: `youtube.com/${videoId ?? "video"}` });
+	const attemptErrors: string[] = [];
+
+	const result = await tryGeminiWeb(canonicalUrl, effectivePrompt, effectiveModel, signal, attemptErrors)
+		?? await tryGeminiApi(canonicalUrl, effectivePrompt, effectiveModel, signal, attemptErrors)
+		?? await tryExa(url, effectivePrompt, signal, attemptErrors);
+
+	if (result) {
+		result.url = url;
+		if (!result.error && videoId && canAttachImages()) {
+			const thumb = await fetchYouTubeThumbnail(videoId);
+			if (thumb) result.thumbnail = thumb;
+		}
+		activityMonitor.logComplete(activityId, result.error ? 0 : 200);
+		return result;
+	}
+
+	if (signal?.aborted) {
+		activityMonitor.logComplete(activityId, 0);
+		return null;
+	}
+
+	const error = attemptErrors.length > 0
+		? ["Could not extract YouTube video content.", "", ...attemptErrors.map(message => `- ${message}`)].join("\n")
+		: "Could not extract YouTube video content. Sign into Google in a supported Chromium browser for automatic access, or set GEMINI_API_KEY.";
+	activityMonitor.logError(activityId, error);
+	return { url, title: "", content: "", error };
+}
+
+type StreamInfo = { streamUrl: string; duration: number | null };
+type StreamResult = StreamInfo | { error: string };
+
+function mapYtDlpError(err: unknown): string {
+	const { code, stderr, message } = readExecError(err);
+	if (code === "ENOENT") return "yt-dlp is not installed. Install with: brew install yt-dlp";
+	if (isTimeoutError(err)) return "yt-dlp timed out fetching video info";
+	const lower = stderr.toLowerCase();
+	if (lower.includes("private")) return "Video is private or unavailable";
+	if (lower.includes("sign in")) return "Video is age-restricted and requires authentication";
+	if (lower.includes("not available")) return "Video is unavailable in your region or has been removed";
+	if (lower.includes("live")) return "Cannot extract frames from a live stream";
+	const snippet = trimErrorText(stderr || message);
+	return snippet ? `yt-dlp failed: ${snippet}` : "yt-dlp failed";
+}
+
+export async function getYouTubeStreamInfo(videoId: string): Promise<StreamResult> {
+	try {
+		const output = execFileSync("yt-dlp", [
+			"--print", "duration",
+			"-g", `https://www.youtube.com/watch?v=${videoId}`,
+		], { timeout: 15000, encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+		const lines = output.split(/\r?\n/);
+		const rawDuration = lines[0]?.trim();
+		const streamUrl = lines[1]?.trim();
+		if (!streamUrl) return { error: "yt-dlp failed: missing stream URL" };
+		const parsedDuration = rawDuration && rawDuration !== "NA" ? Number.parseFloat(rawDuration) : NaN;
+		const duration = Number.isFinite(parsedDuration) ? parsedDuration : null;
+		return { streamUrl, duration };
+	} catch (err) {
+		return { error: mapYtDlpError(err) };
+	}
+}
+
+async function extractFrameFromStream(streamUrl: string, seconds: number): Promise<FrameResult> {
+	try {
+		const buffer = execFileSync("ffmpeg", [
+			"-ss", String(seconds), "-i", streamUrl,
+			"-frames:v", "1", "-f", "image2pipe", "-vcodec", "mjpeg", "pipe:1",
+		], { maxBuffer: 5 * 1024 * 1024, timeout: 30000, stdio: ["pipe", "pipe", "pipe"] });
+		if (buffer.length === 0) return { error: "ffmpeg failed: empty output" };
+		return { data: buffer.toString("base64"), mimeType: "image/jpeg" };
+	} catch (err) {
+		return { error: mapFfmpegError(err) };
+	}
+}
+
+export async function extractYouTubeFrame(
+	videoId: string,
+	seconds: number,
+	streamInfo?: StreamInfo,
+): Promise<FrameResult> {
+	const info = streamInfo ?? await getYouTubeStreamInfo(videoId);
+	if ("error" in info) return info;
+	return extractFrameFromStream(info.streamUrl, seconds);
+}
+
+export async function extractYouTubeFrames(
+	videoId: string,
+	timestamps: number[],
+	streamInfo?: StreamInfo,
+): Promise<{ frames: VideoFrame[]; duration: number | null; error: string | null }> {
+	const info = streamInfo ?? await getYouTubeStreamInfo(videoId);
+	if ("error" in info) return { frames: [], duration: null, error: info.error };
+	const results = await Promise.all(timestamps.map(async (t) => {
+		const frame = await extractFrameFromStream(info.streamUrl, t);
+		if ("error" in frame) return { error: frame.error };
+		return { ...frame, timestamp: formatSeconds(t) };
+	}));
+	const frames = results.filter((f): f is VideoFrame => "data" in f);
+	const errorResult = results.find((f): f is { error: string } => "error" in f);
+	return { frames, duration: info.duration, error: frames.length === 0 && errorResult ? errorResult.error : null };
+}
+
+export async function fetchYouTubeThumbnail(videoId: string): Promise<{ data: string; mimeType: string } | null> {
+	try {
+		const res = await fetch(`https://img.youtube.com/vi/${videoId}/hqdefault.jpg`, {
+			signal: AbortSignal.timeout(5000),
+		});
+		if (!res.ok) return null;
+		const buffer = Buffer.from(await res.arrayBuffer());
+		if (buffer.length === 0) return null;
+		return { data: buffer.toString("base64"), mimeType: "image/jpeg" };
+	} catch {
+		return null;
+	}
+}
+
+async function tryGeminiWeb(
+	url: string,
+	prompt: string,
+	model: string,
+	signal: AbortSignal | undefined,
+	attemptErrors: string[],
+): Promise<ExtractedContent | null> {
+	try {
+		const cookies = await isGeminiWebAvailable();
+		if (!cookies) return null;
+
+		if (signal?.aborted) return null;
+
+		const text = await queryWithCookies(prompt, cookies, {
+			youtubeUrl: url,
+			...(model !== "gemini-3.6-flash" ? { model } : {}),
+			signal,
+			timeoutMs: 120000,
+		});
+
+		return {
+			url,
+			title: extractHeadingTitle(text) ?? "YouTube Video",
+			content: text,
+			error: null,
+		};
+	} catch (err) {
+		if (shouldRethrow(err)) throw err;
+		if (!signal?.aborted) addAttemptError(attemptErrors, "Gemini Web", err);
+		return null;
+	}
+}
+
+async function tryGeminiApi(
+	url: string,
+	prompt: string,
+	model: string,
+	signal: AbortSignal | undefined,
+	attemptErrors: string[],
+): Promise<ExtractedContent | null> {
+	try {
+		if (!isGeminiApiAvailableWithVideo()) return null;
+
+		if (signal?.aborted) return null;
+
+		const text = await queryGeminiApiWithVideo(prompt, url, {
+			model,
+			signal,
+			timeoutMs: 120000,
+		});
+
+		return {
+			url,
+			title: extractHeadingTitle(text) ?? "YouTube Video",
+			content: text,
+			error: null,
+		};
+	} catch (err) {
+		if (shouldRethrow(err)) throw err;
+		if (!signal?.aborted) addAttemptError(attemptErrors, "Gemini API", err);
+		return null;
+	}
+}
+
+async function tryExa(
+	url: string,
+	prompt: string,
+	signal: AbortSignal | undefined,
+	attemptErrors: string[],
+): Promise<ExtractedContent | null> {
+	try {
+		if (signal?.aborted || !isExaAvailable()) return null;
+
+		const exaQuery = prompt === YOUTUBE_PROMPT
+			? `Summarize this YouTube video in detail: ${url}`
+			: `${prompt} YouTube video: ${url}`;
+
+		const exaResult = await searchWithExa(
+			exaQuery,
+			{ signal },
+		);
+		const answer = exaResult?.answer;
+
+		if (!answer) return null;
+
+		const content =
+			`# Video Summary (via Exa)\n\n${answer}\n\n` +
+			`*Full video understanding requires Gemini access. Set GEMINI_API_KEY or sign into Google in a supported Chromium browser.*`;
+
+		return {
+			url,
+			title: "Video Summary (via Exa)",
+			content,
+			error: null,
+		};
+	} catch (err) {
+		if (shouldRethrow(err)) throw err;
+		if (!signal?.aborted) addAttemptError(attemptErrors, "Exa", err);
+		return null;
+	}
+}

package/agent.bak.20260905-190020/extensions/shared/activity-status.ts

@@ -0,0 +1,31 @@
+import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
+
+type Theme = ExtensionContext["ui"]["theme"];
+
+interface ActivityCounts {
+  running: number;
+  done: number;
+  failed: number;
+}
+
+const SQUARE = "■";
+
+export function formatActivityStatus(
+  theme: Theme,
+  label: "subagents" | "workflows",
+  counts: ActivityCounts,
+) {
+  const parts: string[] = [];
+  if (counts.running > 0) {
+    parts.push(theme.fg("warning", `${SQUARE} ${counts.running} running`));
+  }
+  if (counts.done > 0) {
+    parts.push(theme.fg("success", `${SQUARE} ${counts.done} done`));
+  }
+  if (counts.failed > 0) {
+    parts.push(theme.fg("error", `${SQUARE} ${counts.failed} failed`));
+  }
+  parts.push(theme.fg("accent", `/${label}`) + theme.fg("dim", " to view"));
+
+  return `${theme.fg("muted", `${label}:`)} ${parts.join(theme.fg("dim", " · "))}`;
+}

package/agent.bak.20260905-190020/extensions/shared/child-session.ts

@@ -0,0 +1,148 @@
+import * as path from "node:path";
+import {
+  DefaultResourceLoader,
+  getAgentDir,
+  ProjectTrustStore,
+  SettingsManager,
+  type AgentSession,
+  type SessionShutdownEvent,
+} from "@earendil-works/pi-coding-agent";
+
+const CHILD_SHUTDOWN_TIMEOUT_MS = 5_000;
+
+/** Tools that headless children must not receive. Everything else stays enabled. */
+export const CHILD_EXCLUDED_TOOL_NAMES = [
+  "subagent_spawn",
+  "subagent_wait",
+  "subagent_cancel",
+  "subagent_check",
+  "subagent_list",
+  "workflow",
+  "ask_user",
+] as const;
+
+/** Fresh SDK options avoid turning the denylist into an accidental allowlist. */
+export function childToolPolicy() {
+  return { excludeTools: [...CHILD_EXCLUDED_TOOL_NAMES] };
+}
+
+export interface ChildResourceOptions {
+  cwd: string;
+  projectTrusted: boolean;
+  appendSystemPrompt?: string[];
+  agentDir?: string;
+}
+
+/** Load normal global/package resources and trust-gated project resources. */
+export async function createChildResources(options: ChildResourceOptions) {
+  const agentDir = options.agentDir ?? getAgentDir();
+  const settingsManager = SettingsManager.create(options.cwd, agentDir, {
+    projectTrusted: options.projectTrusted,
+  });
+  const loader = new DefaultResourceLoader({
+    cwd: options.cwd,
+    agentDir,
+    settingsManager,
+    ...(options.appendSystemPrompt
+      ? { appendSystemPrompt: options.appendSystemPrompt }
+      : {}),
+  });
+  await loader.reload();
+  return { loader, settingsManager };
+}
+
+/**
+ * Same-directory children inherit the live parent decision. An alternate cwd
+ * is trusted only when Pi's persisted trust store explicitly trusts it (or a
+ * containing directory); unreadable/invalid trust data fails closed.
+ */
+export function resolveStandaloneChildProjectTrust(options: {
+  parentCwd: string;
+  childCwd: string;
+  parentTrusted: boolean;
+  agentDir?: string;
+}) {
+  if (path.resolve(options.childCwd) === path.resolve(options.parentCwd)) {
+    return options.parentTrusted;
+  }
+  try {
+    const trustStore = new ProjectTrustStore(options.agentDir ?? getAgentDir());
+    return trustStore.get(options.childCwd) === true;
+  } catch {
+    return false;
+  }
+}
+
+/** Start child extension session hooks/resources in headless print mode. */
+export async function bindChildSessionExtensions(
+  session: Pick<AgentSession, "bindExtensions">,
+) {
+  await session.bindExtensions({ mode: "print" });
+}
+
+interface ChildExtensionRunner {
+  hasHandlers(eventType: string): boolean;
+  emit(event: SessionShutdownEvent): Promise<unknown>;
+}
+
+export interface DisposableChildSession {
+  readonly extensionRunner: ChildExtensionRunner;
+  dispose(): void;
+}
+
+const childShutdowns = new WeakMap<object, Promise<void>>();
+
+function waitBounded(operation: Promise<unknown>, timeoutMs: number) {
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  const timeout = new Promise<void>((resolve) => {
+    timer = setTimeout(resolve, timeoutMs);
+  });
+  return Promise.race([
+    operation.then(
+      () => undefined,
+      () => undefined,
+    ),
+    timeout,
+  ])
+    .catch(() => {})
+    .finally(() => {
+      if (timer) clearTimeout(timer);
+    });
+}
+
+/**
+ * Emit child session_shutdown once, then dispose once. Hook failures and a
+ * bounded hook deadline never prevent disposal.
+ */
+export function shutdownAndDisposeChildSession(
+  session: DisposableChildSession,
+  options: { timeoutMs?: number } = {},
+) {
+  const existing = childShutdowns.get(session);
+  if (existing) return existing;
+
+  const shutdown = (async () => {
+    try {
+      if (session.extensionRunner.hasHandlers("session_shutdown")) {
+        await waitBounded(
+          session.extensionRunner.emit({
+            type: "session_shutdown",
+            reason: "quit",
+          }),
+          options.timeoutMs ?? CHILD_SHUTDOWN_TIMEOUT_MS,
+        );
+      }
+    } catch {
+      // Extension runner inspection/emission is best-effort during teardown.
+    } finally {
+      try {
+        session.dispose();
+      } catch {
+        // Disposal is terminal and must remain idempotent for callers.
+      }
+    }
+  })();
+
+  childShutdowns.set(session, shutdown);
+  return shutdown;
+}

package/agent.bak.20260905-190020/extensions/shared/context-utilization.ts

@@ -0,0 +1,47 @@
+/** Compact, defensive context-window utilization formatting for child agents. */
+
+export interface ContextUtilization {
+  /** Current conversation context occupancy; null while it is unknown after compaction. */
+  tokens?: number | null;
+  /** Capacity of the model currently serving the conversation. */
+  contextWindow?: number | null;
+}
+
+function usableTokens(value: number | null | undefined) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0
+    ? value
+    : undefined;
+}
+
+function usableCapacity(value: number | null | undefined) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0
+    ? value
+    : undefined;
+}
+
+export function contextPercent(usage: ContextUtilization) {
+  const tokens = usableTokens(usage.tokens);
+  const capacity = usableCapacity(usage.contextWindow);
+  if (tokens === undefined || capacity === undefined) return undefined;
+  return Math.round(Math.min(100, Math.max(0, (tokens / capacity) * 100)));
+}
+
+export function formatCompactTokens(count: number) {
+  if (count < 1000) return Math.round(count).toString();
+  if (count < 10000) return `${(count / 1000).toFixed(1)}k`;
+  if (count < 1000000) return `${Math.round(count / 1000)}k`;
+  return `${(count / 1000000).toFixed(1)}M`;
+}
+
+/**
+ * Render `%/capacity`. If occupancy is temporarily unknown (notably directly
+ * after compaction), retain the useful model capacity as `?%/capacity`. If no
+ * valid capacity is available, omit the statistic because no percentage can
+ * be computed.
+ */
+export function formatContextUtilization(usage: ContextUtilization) {
+  const capacity = usableCapacity(usage.contextWindow);
+  if (capacity === undefined) return "";
+  const percent = contextPercent(usage);
+  return `${percent === undefined ? "?" : percent}%/${formatCompactTokens(capacity)}`;
+}

package/agent.bak.20260905-190020/extensions/shared/dashboard-state.ts

@@ -0,0 +1,99 @@
+export const MODEL_INFO_CHANNEL = "dashboard:model-info";
+export const GIT_INFO_CHANNEL = "dashboard:git-info";
+export const REFRESH_CHANNEL = "dashboard:refresh";
+
+export interface ModelInfoState {
+  provider: string;
+  modelId: string;
+  modelName: string;
+  thinking: string;
+  contextTokens: number | null;
+  contextWindow: number;
+  contextPercent: number | null;
+  cost: number;
+  tokensPerSecond: number | null;
+  generating: boolean;
+}
+
+export interface PullRequestInfo {
+  number: number;
+  url: string;
+  isDraft: boolean;
+}
+
+export interface GitInfoState {
+  isRepository: boolean;
+  branch: string | null;
+  changedFiles: number;
+  pullRequest: PullRequestInfo | null;
+}
+
+export function emptyModelInfoState(): ModelInfoState {
+  return {
+    provider: "",
+    modelId: "no-model",
+    modelName: "No model",
+    thinking: "off",
+    contextTokens: null,
+    contextWindow: 0,
+    contextPercent: null,
+    cost: 0,
+    tokensPerSecond: null,
+    generating: false,
+  };
+}
+
+export function emptyGitInfoState(): GitInfoState {
+  return {
+    isRepository: false,
+    branch: null,
+    changedFiles: 0,
+    pullRequest: null,
+  };
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null;
+}
+
+function isNullableNumber(value: unknown) {
+  return value === null || typeof value === "number";
+}
+
+export function isModelInfoState(value: unknown): value is ModelInfoState {
+  if (!isRecord(value)) return false;
+
+  return (
+    typeof value.provider === "string" &&
+    typeof value.modelId === "string" &&
+    typeof value.modelName === "string" &&
+    typeof value.thinking === "string" &&
+    isNullableNumber(value.contextTokens) &&
+    typeof value.contextWindow === "number" &&
+    isNullableNumber(value.contextPercent) &&
+    typeof value.cost === "number" &&
+    isNullableNumber(value.tokensPerSecond) &&
+    typeof value.generating === "boolean"
+  );
+}
+
+function isPullRequestInfo(value: unknown): value is PullRequestInfo {
+  if (!isRecord(value)) return false;
+
+  return (
+    typeof value.number === "number" &&
+    typeof value.url === "string" &&
+    typeof value.isDraft === "boolean"
+  );
+}
+
+export function isGitInfoState(value: unknown): value is GitInfoState {
+  if (!isRecord(value)) return false;
+
+  return (
+    typeof value.isRepository === "boolean" &&
+    (value.branch === null || typeof value.branch === "string") &&
+    typeof value.changedFiles === "number" &&
+    (value.pullRequest === null || isPullRequestInfo(value.pullRequest))
+  );
+}

package/agent.bak.20260905-190020/extensions/shared/install.ps1

@@ -0,0 +1,23 @@
+#!/usr/bin/env pwsh
+# Per-extension installer — Windows / PowerShell
+# Installs npm dependencies for this extension. No-op if no package.json.
+$ErrorActionPreference = "Stop"
+$extDir = $PSScriptRoot
+if (-not $extDir) { $extDir = Split-Path -Parent $MyInvocation.MyCommand.Path }
+if (-not (Test-Path "$extDir/package.json")) {
+  Write-Host "  - no package.json — skipping" -ForegroundColor DarkGray
+  exit 0
+}
+if (-not (Get-Command npm -ErrorAction SilentlyContinue)) {
+  Write-Host "  x npm not found — install Node.js 22+" -ForegroundColor Red
+  exit 1
+}
+if (Test-Path "$extDir/package-lock.json") {
+  Write-Host "  - npm ci" -ForegroundColor DarkGray
+  npm --prefix $extDir ci --no-audit --no-fund
+} else {
+  Write-Host "  - npm install" -ForegroundColor DarkGray
+  npm --prefix $extDir install --no-audit --no-fund
+}
+if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+Write-Host "  + done" -ForegroundColor Green

package/agent.bak.20260905-190020/extensions/shared/install.sh

@@ -0,0 +1,21 @@
+#!/bin/sh
+# Per-extension installer — macOS / Linux
+# Installs npm dependencies for this extension. No-op if no package.json.
+set -eu
+EXT_DIR="$(cd "$(dirname "$0")" && pwd)"
+if [ ! -f "$EXT_DIR/package.json" ]; then
+  echo "  · no package.json — skipping"
+  exit 0
+fi
+if ! command -v npm >/dev/null 2>&1; then
+  echo "  ✖ npm not found — install Node.js 22+" >&2
+  exit 1
+fi
+if [ -f "$EXT_DIR/package-lock.json" ]; then
+  echo "  · npm ci"
+  npm --prefix "$EXT_DIR" ci --no-audit --no-fund
+else
+  echo "  · npm install"
+  npm --prefix "$EXT_DIR" install --no-audit --no-fund
+fi
+echo "  ✓ done"