@asterxsk/kiln 0.4.0 → 0.4.2

package/agent/extensions/shared/tool-call-timeout.ts

@@ -1,104 +1,104 @@
-import type { ToolDefinition } from "@earendil-works/pi-coding-agent";
-
-export const CHILD_TOOL_CALL_TIMEOUT_MS = 3 * 60 * 1_000;
-
-interface ToolRegistry {
-  getAllTools(): Array<{ name: string }>;
-  getToolDefinition(name: string): ToolDefinition | undefined;
-}
-
-function formatTimeout(timeoutMs: number) {
-  if (timeoutMs % 60_000 === 0) {
-    const minutes = timeoutMs / 60_000;
-    return `${minutes} minute${minutes === 1 ? "" : "s"}`;
-  }
-  if (timeoutMs % 1_000 === 0) {
-    const seconds = timeoutMs / 1_000;
-    return `${seconds} second${seconds === 1 ? "" : "s"}`;
-  }
-  return `${timeoutMs} ms`;
-}
-
-export class ToolCallTimeoutError extends Error {
-  constructor(toolName: string, timeoutMs: number) {
-    super(
-      `Tool call "${toolName}" timed out after ${formatTimeout(timeoutMs)}.`,
-    );
-    this.name = "ToolCallTimeoutError";
-  }
-}
-
-export async function runWithToolCallTimeout<T>(
-  toolName: string,
-  timeoutMs: number,
-  signal: AbortSignal | undefined,
-  execute: (signal: AbortSignal) => Promise<T>,
-) {
-  const timeoutController = new AbortController();
-  const executionSignal = signal
-    ? AbortSignal.any([signal, timeoutController.signal])
-    : timeoutController.signal;
-  const timeoutError = new ToolCallTimeoutError(toolName, timeoutMs);
-  let timer: ReturnType<typeof setTimeout> | undefined;
-  const timeout = new Promise<never>((_resolve, reject) => {
-    timer = setTimeout(() => {
-      reject(timeoutError);
-      timeoutController.abort(timeoutError);
-    }, timeoutMs);
-  });
-
-  let removeAbortListener: (() => void) | undefined;
-  const aborted = new Promise<never>((_resolve, reject) => {
-    if (!signal) return;
-    const onAbort = () => {
-      reject(
-        signal.reason instanceof Error
-          ? signal.reason
-          : new Error(`Tool call "${toolName}" was aborted.`),
-      );
-    };
-    if (signal.aborted) {
-      onAbort();
-      return;
-    }
-    signal.addEventListener("abort", onAbort, { once: true });
-    removeAbortListener = () => signal.removeEventListener("abort", onAbort);
-  });
-
-  try {
-    return await Promise.race([execute(executionSignal), timeout, aborted]);
-  } finally {
-    if (timer) clearTimeout(timer);
-    removeAbortListener?.();
-  }
-}
-
-/**
- * Wrap every currently registered child tool with an independent execution
- * timeout. Calling apply() again is safe and picks up tools registered later.
- */
-export function createToolCallTimeoutGuard(
-  timeoutMs = CHILD_TOOL_CALL_TIMEOUT_MS,
-) {
-  const wrapped = new WeakSet<ToolDefinition>();
-
-  const wrap = (definition: ToolDefinition) => {
-    if (wrapped.has(definition)) return;
-    wrapped.add(definition);
-
-    const execute = definition.execute;
-    definition.execute = async (toolCallId, params, signal, onUpdate, ctx) =>
-      runWithToolCallTimeout(definition.name, timeoutMs, signal, (signal) =>
-        execute.call(definition, toolCallId, params, signal, onUpdate, ctx),
-      );
-  };
-
-  return {
-    apply(session: ToolRegistry) {
-      for (const { name } of session.getAllTools()) {
-        const definition = session.getToolDefinition(name);
-        if (definition) wrap(definition);
-      }
-    },
-  };
-}
+import type { ToolDefinition } from "@earendil-works/pi-coding-agent";
+
+export const CHILD_TOOL_CALL_TIMEOUT_MS = 3 * 60 * 1_000;
+
+interface ToolRegistry {
+  getAllTools(): Array<{ name: string }>;
+  getToolDefinition(name: string): ToolDefinition | undefined;
+}
+
+function formatTimeout(timeoutMs: number) {
+  if (timeoutMs % 60_000 === 0) {
+    const minutes = timeoutMs / 60_000;
+    return `${minutes} minute${minutes === 1 ? "" : "s"}`;
+  }
+  if (timeoutMs % 1_000 === 0) {
+    const seconds = timeoutMs / 1_000;
+    return `${seconds} second${seconds === 1 ? "" : "s"}`;
+  }
+  return `${timeoutMs} ms`;
+}
+
+export class ToolCallTimeoutError extends Error {
+  constructor(toolName: string, timeoutMs: number) {
+    super(
+      `Tool call "${toolName}" timed out after ${formatTimeout(timeoutMs)}.`,
+    );
+    this.name = "ToolCallTimeoutError";
+  }
+}
+
+export async function runWithToolCallTimeout<T>(
+  toolName: string,
+  timeoutMs: number,
+  signal: AbortSignal | undefined,
+  execute: (signal: AbortSignal) => Promise<T>,
+) {
+  const timeoutController = new AbortController();
+  const executionSignal = signal
+    ? AbortSignal.any([signal, timeoutController.signal])
+    : timeoutController.signal;
+  const timeoutError = new ToolCallTimeoutError(toolName, timeoutMs);
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  const timeout = new Promise<never>((_resolve, reject) => {
+    timer = setTimeout(() => {
+      reject(timeoutError);
+      timeoutController.abort(timeoutError);
+    }, timeoutMs);
+  });
+
+  let removeAbortListener: (() => void) | undefined;
+  const aborted = new Promise<never>((_resolve, reject) => {
+    if (!signal) return;
+    const onAbort = () => {
+      reject(
+        signal.reason instanceof Error
+          ? signal.reason
+          : new Error(`Tool call "${toolName}" was aborted.`),
+      );
+    };
+    if (signal.aborted) {
+      onAbort();
+      return;
+    }
+    signal.addEventListener("abort", onAbort, { once: true });
+    removeAbortListener = () => signal.removeEventListener("abort", onAbort);
+  });
+
+  try {
+    return await Promise.race([execute(executionSignal), timeout, aborted]);
+  } finally {
+    if (timer) clearTimeout(timer);
+    removeAbortListener?.();
+  }
+}
+
+/**
+ * Wrap every currently registered child tool with an independent execution
+ * timeout. Calling apply() again is safe and picks up tools registered later.
+ */
+export function createToolCallTimeoutGuard(
+  timeoutMs = CHILD_TOOL_CALL_TIMEOUT_MS,
+) {
+  const wrapped = new WeakSet<ToolDefinition>();
+
+  const wrap = (definition: ToolDefinition) => {
+    if (wrapped.has(definition)) return;
+    wrapped.add(definition);
+
+    const execute = definition.execute;
+    definition.execute = async (toolCallId, params, signal, onUpdate, ctx) =>
+      runWithToolCallTimeout(definition.name, timeoutMs, signal, (signal) =>
+        execute.call(definition, toolCallId, params, signal, onUpdate, ctx),
+      );
+  };
+
+  return {
+    apply(session: ToolRegistry) {
+      for (const { name } of session.getAllTools()) {
+        const definition = session.getToolDefinition(name);
+        if (definition) wrap(definition);
+      }
+    },
+  };
+}

package/agent/extensions/skillsconf/README.md

@@ -1,74 +1,74 @@
-# skillsconf
-
-Per-skill visibility manager for pi, with **packages** (named groups) for mass enable/disable.
-
-Disabled skills are stripped from the system prompt every turn (via `before_agent_start`),
-so they cost zero context. Nothing is moved on disk — packages are just named lists
-stored in settings.
-
-```
-/skillsconf
-```
-
-## Keybindings
-
-- `↑` / `↓` or `j` / `k` — navigate; `Home`/`End` (`g`/`G`) jump
-- `Space` — toggle the selected skill **or** the selected package (whole group on/off)
-- `/` — fuzzy filter by name/description; `↑`/`↓` exit typing (filter kept) and
-  move; `←`/`→` edit the query; `Esc` clears, `Enter` keeps filter
-- `e` — toggle grouped view (packages + ungrouped skills) vs flat list of all skills
-- `n` — new package (type a name, `Enter` creates, `Esc` cancels)
-- `a` — on a package: enter assign mode (cursor jumps to skills, `Space` toggles
-  membership, `Enter` done, `Esc` cancel without changing the package)
-- `d` — delete what's under the cursor (package group, or skill files from disk)
-  with a `y`/`n` confirm (`Esc` cancels)
-- `s` — save to settings, stay open (`● unsaved — press s to save` clears; takes
-  effect next turn)
-- `Esc` / `q` — quit (`s` first if you want to keep changes); quitting with pending
-  changes shows `changes discarded (not saved)`
-Package rows show `(enabled/total)`: `◉` all on, `◍` partial, `○` all off / empty.
-Each package row leads with an accent `▸` marker and bold name so it stands out
-from skills.
-
-Skills that belong to a package are hidden from the main list and managed via
-their package row (grouped view). `e` switches to a flat list showing every
-skill; `/` search and assign mode always see every skill, with a `⟨package⟩`
-tag showing membership.
-
-## Persistence
-
-Writes `disabledSkills` and `skillPackages` in `~/.pi/agent/settings.json`:
-
-- Nothing disabled + no packages → both keys removed to keep settings clean
-- `skillPackages` maps package name → sorted member skill names (empty packages kept)
-- Stale names (skills no longer on disk) are filtered on the next save
-
-No reload happens on save — the prompt filter re-reads settings from disk every
-turn, so changes apply from the next agent turn on. Physically deleted skills
-vanish from the loaded list after `/reload`.
-
-## Keyboard shortcut
-
-`Ctrl+Alt+S` opens skillsconf when supported by the host.
-
-## How filtering works
-
-pi renders loaded skills as `<skill><name>…` blocks inside `<available_skills>`.
-The extension removes the blocks whose `<name>` is in `disabledSkills` (verbatim block
-surgery — kept blocks are byte-identical). When all skills are disabled, the whole
-section including its intro is removed.
-
-## Development
-
-```bash
-npx tsc --noEmit --project ./tsconfig.json
-```
-
-Tests are plain `node:assert` files (same style as `modelconf`):
-
-```bash
-npx tsc --project ./tsconfig.json --outDir /tmp/skillsconf-test
-node --test /tmp/skillsconf-test/src/filter.test.js \
-  /tmp/skillsconf-test/src/persistence.test.js \
-  /tmp/skillsconf-test/src/ui/SkillConfView.test.js
-```
+# skillsconf
+
+Per-skill visibility manager for pi, with **packages** (named groups) for mass enable/disable.
+
+Disabled skills are stripped from the system prompt every turn (via `before_agent_start`),
+so they cost zero context. Nothing is moved on disk — packages are just named lists
+stored in settings.
+
+```
+/skillsconf
+```
+
+## Keybindings
+
+- `↑` / `↓` or `j` / `k` — navigate; `Home`/`End` (`g`/`G`) jump
+- `Space` — toggle the selected skill **or** the selected package (whole group on/off)
+- `/` — fuzzy filter by name/description; `↑`/`↓` exit typing (filter kept) and
+  move; `←`/`→` edit the query; `Esc` clears, `Enter` keeps filter
+- `e` — toggle grouped view (packages + ungrouped skills) vs flat list of all skills
+- `n` — new package (type a name, `Enter` creates, `Esc` cancels)
+- `a` — on a package: enter assign mode (cursor jumps to skills, `Space` toggles
+  membership, `Enter` done, `Esc` cancel without changing the package)
+- `d` — delete what's under the cursor (package group, or skill files from disk)
+  with a `y`/`n` confirm (`Esc` cancels)
+- `s` — save to settings, stay open (`● unsaved — press s to save` clears; takes
+  effect next turn)
+- `Esc` / `q` — quit (`s` first if you want to keep changes); quitting with pending
+  changes shows `changes discarded (not saved)`
+Package rows show `(enabled/total)`: `◉` all on, `◍` partial, `○` all off / empty.
+Each package row leads with an accent `▸` marker and bold name so it stands out
+from skills.
+
+Skills that belong to a package are hidden from the main list and managed via
+their package row (grouped view). `e` switches to a flat list showing every
+skill; `/` search and assign mode always see every skill, with a `⟨package⟩`
+tag showing membership.
+
+## Persistence
+
+Writes `disabledSkills` and `skillPackages` in `~/.pi/agent/settings.json`:
+
+- Nothing disabled + no packages → both keys removed to keep settings clean
+- `skillPackages` maps package name → sorted member skill names (empty packages kept)
+- Stale names (skills no longer on disk) are filtered on the next save
+
+No reload happens on save — the prompt filter re-reads settings from disk every
+turn, so changes apply from the next agent turn on. Physically deleted skills
+vanish from the loaded list after `/reload`.
+
+## Keyboard shortcut
+
+`Ctrl+Alt+S` opens skillsconf when supported by the host.
+
+## How filtering works
+
+pi renders loaded skills as `<skill><name>…` blocks inside `<available_skills>`.
+The extension removes the blocks whose `<name>` is in `disabledSkills` (verbatim block
+surgery — kept blocks are byte-identical). When all skills are disabled, the whole
+section including its intro is removed.
+
+## Development
+
+```bash
+npx tsc --noEmit --project ./tsconfig.json
+```
+
+Tests are plain `node:assert` files (same style as `modelconf`):
+
+```bash
+npx tsc --project ./tsconfig.json --outDir /tmp/skillsconf-test
+node --test /tmp/skillsconf-test/src/filter.test.js \
+  /tmp/skillsconf-test/src/persistence.test.js \
+  /tmp/skillsconf-test/src/ui/SkillConfView.test.js
+```

package/agent/extensions/skillsconf/index.ts

@@ -1,92 +1,92 @@
-import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
-import { filterSkillsPrompt } from "./src/filter.js";
-import { loadSkillState, loadSkillStateSync, saveSkillState } from "./src/persistence.js";
-import { SkillConfView } from "./src/ui/SkillConfView.js";
-
-export default function (pi: ExtensionAPI) {
-  // Strip disabled skills from the system prompt every turn so they cost
-  // zero context. Skills are keyed by Skill.name, matching the <name> block
-  // pi renders into <available_skills>.
-  pi.on("before_agent_start", async (event, _ctx) => {
-    try {
-      const state = loadSkillStateSync();
-      if (!state.disabled || state.disabled.length === 0) return;
-      const systemPrompt = (event as unknown as { systemPrompt?: string }).systemPrompt;
-      if (typeof systemPrompt !== "string" || systemPrompt.length === 0) return;
-      const next = filterSkillsPrompt(systemPrompt, state.disabled);
-      if (next !== systemPrompt) return { systemPrompt: next };
-    } catch {}
-  });
-
-  async function openSkillConf(ctx: any) {
-    if (ctx.mode !== "tui") {
-      ctx.ui.notify("/skillsconf requires TUI mode", "error");
-      return;
-    }
-    let skills: Array<{ name: string; description: string; filePath: string }> = [];
-    try {
-      const opts = ctx.getSystemPromptOptions?.() as
-        | { skills?: Array<{ name: string; description?: string; filePath?: string }> }
-        | undefined;
-      skills = (opts?.skills ?? []).map((s) => ({
-        name: s.name,
-        description: s.description ?? "",
-        filePath: s.filePath ?? "",
-      }));
-    } catch {}
-    const state = await loadSkillState();
-
-    await ctx.ui.custom((tui: any, theme: any, kb: any, done: any) => {
-      const view = new SkillConfView({
-        tui,
-        theme,
-        keybindings: kb,
-        skills,
-        disabledRaw: state.disabled,
-        packagesRaw: state.packages,
-        onDone: (saved: boolean, discarded?: boolean) => {
-          done(saved);
-          try {
-            tui?.requestRender?.();
-          } catch {}
-          if (!saved && discarded) {
-            try {
-              ctx.ui.notify("skillsconf: changes discarded (not saved)", "warning");
-            } catch {}
-          }
-        },
-        onPersist: async (disabled, packages) => {
-          await saveSkillState(disabled, packages, skills.map((s) => s.name));
-          const enabledCount = skills.length - (disabled?.length ?? 0);
-          try {
-            ctx.ui.notify(
-              `skillsconf: saved ${enabledCount}/${skills.length} skills enabled, ${Object.keys(packages).length} packages`,
-              "info",
-            );
-          } catch {}
-          // No reload: saves are in-place and the UI stays open. The
-          // before_agent_start hook re-reads settings from disk every turn.
-        },
-      });
-
-      return {
-        render: view.render.bind(view),
-        handleInput: view.handleInput.bind(view),
-        invalidate: view.invalidate.bind(view),
-      };
-    });
-  }
-
-  pi.registerCommand("skillsconf", {
-    description:
-      "Enable/disable skills and manage skill packages (space toggle, s save, n package, a assign, d delete)",
-    handler: async (_args, ctx) => openSkillConf(ctx),
-  });
-
-  try {
-    (pi as any).registerShortcut?.("ctrl+alt+s" as any, {
-      description: "Open skillsconf",
-      handler: async (ctx: any) => openSkillConf(ctx),
-    });
-  } catch {}
-}
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { filterSkillsPrompt } from "./src/filter.js";
+import { loadSkillState, loadSkillStateSync, saveSkillState } from "./src/persistence.js";
+import { SkillConfView } from "./src/ui/SkillConfView.js";
+
+export default function (pi: ExtensionAPI) {
+  // Strip disabled skills from the system prompt every turn so they cost
+  // zero context. Skills are keyed by Skill.name, matching the <name> block
+  // pi renders into <available_skills>.
+  pi.on("before_agent_start", async (event, _ctx) => {
+    try {
+      const state = loadSkillStateSync();
+      if (!state.disabled || state.disabled.length === 0) return;
+      const systemPrompt = (event as unknown as { systemPrompt?: string }).systemPrompt;
+      if (typeof systemPrompt !== "string" || systemPrompt.length === 0) return;
+      const next = filterSkillsPrompt(systemPrompt, state.disabled);
+      if (next !== systemPrompt) return { systemPrompt: next };
+    } catch {}
+  });
+
+  async function openSkillConf(ctx: any) {
+    if (ctx.mode !== "tui") {
+      ctx.ui.notify("/skillsconf requires TUI mode", "error");
+      return;
+    }
+    let skills: Array<{ name: string; description: string; filePath: string }> = [];
+    try {
+      const opts = ctx.getSystemPromptOptions?.() as
+        | { skills?: Array<{ name: string; description?: string; filePath?: string }> }
+        | undefined;
+      skills = (opts?.skills ?? []).map((s) => ({
+        name: s.name,
+        description: s.description ?? "",
+        filePath: s.filePath ?? "",
+      }));
+    } catch {}
+    const state = await loadSkillState();
+
+    await ctx.ui.custom((tui: any, theme: any, kb: any, done: any) => {
+      const view = new SkillConfView({
+        tui,
+        theme,
+        keybindings: kb,
+        skills,
+        disabledRaw: state.disabled,
+        packagesRaw: state.packages,
+        onDone: (saved: boolean, discarded?: boolean) => {
+          done(saved);
+          try {
+            tui?.requestRender?.();
+          } catch {}
+          if (!saved && discarded) {
+            try {
+              ctx.ui.notify("skillsconf: changes discarded (not saved)", "warning");
+            } catch {}
+          }
+        },
+        onPersist: async (disabled, packages) => {
+          await saveSkillState(disabled, packages, skills.map((s) => s.name));
+          const enabledCount = skills.length - (disabled?.length ?? 0);
+          try {
+            ctx.ui.notify(
+              `skillsconf: saved ${enabledCount}/${skills.length} skills enabled, ${Object.keys(packages).length} packages`,
+              "info",
+            );
+          } catch {}
+          // No reload: saves are in-place and the UI stays open. The
+          // before_agent_start hook re-reads settings from disk every turn.
+        },
+      });
+
+      return {
+        render: view.render.bind(view),
+        handleInput: view.handleInput.bind(view),
+        invalidate: view.invalidate.bind(view),
+      };
+    });
+  }
+
+  pi.registerCommand("skillsconf", {
+    description:
+      "Enable/disable skills and manage skill packages (space toggle, s save, n package, a assign, d delete)",
+    handler: async (_args, ctx) => openSkillConf(ctx),
+  });
+
+  try {
+    (pi as any).registerShortcut?.("ctrl+alt+s" as any, {
+      description: "Open skillsconf",
+      handler: async (ctx: any) => openSkillConf(ctx),
+    });
+  } catch {}
+}

package/agent/extensions/skillsconf/install.ps1

@@ -1,27 +1,27 @@
-#!/usr/bin/env pwsh
-# Per-extension installer — Windows / PowerShell
-# Installs npm dependencies for this extension. No-op if no package.json.
-$ErrorActionPreference = "Stop"
-# Drop npm_config_allow_scripts inherited from a parent npm/npx process:
-# npm >=11 rejects it for project installs (EALLOWSCRIPTS). File config still applies.
-Remove-Item Env:\npm_config_allow_scripts -ErrorAction SilentlyContinue
-Remove-Item Env:\NPM_CONFIG_ALLOW_SCRIPTS -ErrorAction SilentlyContinue
-$extDir = $PSScriptRoot
-if (-not $extDir) { $extDir = Split-Path -Parent $MyInvocation.MyCommand.Path }
-if (-not (Test-Path "$extDir/package.json")) {
-  Write-Host "  - no package.json — skipping" -ForegroundColor DarkGray
-  exit 0
-}
-if (-not (Get-Command npm -ErrorAction SilentlyContinue)) {
-  Write-Host "  x npm not found — install Node.js 22+" -ForegroundColor Red
-  exit 1
-}
-if (Test-Path "$extDir/package-lock.json") {
-  Write-Host "  - npm ci" -ForegroundColor DarkGray
-  npm --prefix $extDir ci --no-audit --no-fund
-} else {
-  Write-Host "  - npm install" -ForegroundColor DarkGray
-  npm --prefix $extDir install --no-audit --no-fund
-}
-if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
-Write-Host "  + done" -ForegroundColor Green
+#!/usr/bin/env pwsh
+# Per-extension installer — Windows / PowerShell
+# Installs npm dependencies for this extension. No-op if no package.json.
+$ErrorActionPreference = "Stop"
+# Drop npm_config_allow_scripts inherited from a parent npm/npx process:
+# npm >=11 rejects it for project installs (EALLOWSCRIPTS). File config still applies.
+Remove-Item Env:\npm_config_allow_scripts -ErrorAction SilentlyContinue
+Remove-Item Env:\NPM_CONFIG_ALLOW_SCRIPTS -ErrorAction SilentlyContinue
+$extDir = $PSScriptRoot
+if (-not $extDir) { $extDir = Split-Path -Parent $MyInvocation.MyCommand.Path }
+if (-not (Test-Path "$extDir/package.json")) {
+  Write-Host "  - no package.json — skipping" -ForegroundColor DarkGray
+  exit 0
+}
+if (-not (Get-Command npm -ErrorAction SilentlyContinue)) {
+  Write-Host "  x npm not found — install Node.js 22+" -ForegroundColor Red
+  exit 1
+}
+if (Test-Path "$extDir/package-lock.json") {
+  Write-Host "  - npm ci" -ForegroundColor DarkGray
+  npm --prefix $extDir ci --no-audit --no-fund
+} else {
+  Write-Host "  - npm install" -ForegroundColor DarkGray
+  npm --prefix $extDir install --no-audit --no-fund
+}
+if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+Write-Host "  + done" -ForegroundColor Green

package/agent/extensions/skillsconf/install.sh

@@ -1,24 +1,24 @@
-#!/bin/sh
-# Per-extension installer — macOS / Linux
-# Installs npm dependencies for this extension. No-op if no package.json.
-set -eu
-# Drop npm_config_allow_scripts inherited from a parent npm/npx process:
-# npm >=11 rejects it for project installs (EALLOWSCRIPTS). File config still applies.
-unset npm_config_allow_scripts NPM_CONFIG_ALLOW_SCRIPTS 2>/dev/null || true
-EXT_DIR="$(cd "$(dirname "$0")" && pwd)"
-if [ ! -f "$EXT_DIR/package.json" ]; then
-  echo "  · no package.json — skipping"
-  exit 0
-fi
-if ! command -v npm >/dev/null 2>&1; then
-  echo "  ✖ npm not found — install Node.js 22+" >&2
-  exit 1
-fi
-if [ -f "$EXT_DIR/package-lock.json" ]; then
-  echo "  · npm ci"
-  npm --prefix "$EXT_DIR" ci --no-audit --no-fund
-else
-  echo "  · npm install"
-  npm --prefix "$EXT_DIR" install --no-audit --no-fund
-fi
-echo "  ✓ done"
+#!/bin/sh
+# Per-extension installer — macOS / Linux
+# Installs npm dependencies for this extension. No-op if no package.json.
+set -eu
+# Drop npm_config_allow_scripts inherited from a parent npm/npx process:
+# npm >=11 rejects it for project installs (EALLOWSCRIPTS). File config still applies.
+unset npm_config_allow_scripts NPM_CONFIG_ALLOW_SCRIPTS 2>/dev/null || true
+EXT_DIR="$(cd "$(dirname "$0")" && pwd)"
+if [ ! -f "$EXT_DIR/package.json" ]; then
+  echo "  · no package.json — skipping"
+  exit 0
+fi
+if ! command -v npm >/dev/null 2>&1; then
+  echo "  ✖ npm not found — install Node.js 22+" >&2
+  exit 1
+fi
+if [ -f "$EXT_DIR/package-lock.json" ]; then
+  echo "  · npm ci"
+  npm --prefix "$EXT_DIR" ci --no-audit --no-fund
+else
+  echo "  · npm install"
+  npm --prefix "$EXT_DIR" install --no-audit --no-fund
+fi
+echo "  ✓ done"