@bitfun-vsl/plugin 0.0.1 → 0.0.3

package/README.md

@@ -19,28 +19,28 @@ VSL 是一个面向 DevEco Code、Claude Code 和 BitFun 的精简插件包。
 
 需要 Bun、npm；选择 Claude Code 时还需要 Claude CLI。`vsl init` 按顺序显示两个复选列表：先选宿主（DevEco Code、Claude Code、BitFun，可多选），再选模块（默认全部勾选），最后只确认一次是否执行安装。方向键移动，空格勾选，`a` 全选，回车继续，Ctrl+C 取消。
 
-本地包在本目录构建并启动向导：
+推荐方式：从 npm 官方源安装。先全局安装提供 CLI 的包，再运行同一个向导把官方包安装进宿主：
 
 ```powershell
-npm pack
-bun .\dist\cli\index.js init --package "$PWD\bitfun-vsl-plugin-0.0.1.tgz"
+npm install -g @bitfun-vsl/plugin
+vsl init
 ```
 
-发布到 npm 后，用户先安装提供 CLI 的包，再运行同一个向导：
+默认安装来源是 npm 官方源的 `@bitfun-vsl/plugin@<CLI 版本>`，宿主依赖也锁定该官方版本。全局安装只提供 `vsl` 命令；init 负责更新宿主实际加载的依赖和注册。DevEco 安装到 `~/.config/deveco/node_modules/@bitfun-vsl/plugin`；BitFun 在 Windows 安装到 `%APPDATA%/bitfun/config/node_modules/@bitfun-vsl/plugin` 并注册 BitFun 专用入口，同时生成 `~/.config/opencode/command/vsl/*.md`；Claude 使用原生 marketplace/plugin 安装机制。宿主仍按原生插件方式加载资源。
+
+本地构建的包是开发验证用的辅助方式：在本目录打包后，用 `--package` 显式指定 tgz 运行同一个向导：
 
 ```powershell
-npm install -g @bitfun-vsl/plugin
-vsl init
+npm pack
+bun .\dist\cli\index.js init --package "$PWD\bitfun-vsl-plugin-0.0.2.tgz"
 ```
 
-全局安装只提供 `vsl` 命令；init 负责更新宿主实际加载的依赖和注册。DevEco 安装到 `~/.config/deveco/node_modules/@bitfun-vsl/plugin`；BitFun 在 Windows 安装到 `%APPDATA%/bitfun/config/node_modules/@bitfun-vsl/plugin` 并注册 BitFun 专用入口，同时生成 `~/.config/opencode/command/vsl/*.md`；Claude 使用原生 marketplace/plugin 安装机制。宿主仍按原生插件方式加载资源。
-
 模块包括 `trajectory-analysis` 和 `code-review`。模块中的 Command、Agent、Skill、Tool 随模块一起启停；安装向导不按资源分类让用户选择。代码审查需要独立的 CR 原生程序，可设置 `VSL_CR_BIN` 或使用 `--cr-bin <绝对路径>`。
 
 自动化可明确选择一个或多个宿主并跳过交互：
 
 ```powershell
-vsl init --host deveco --host bitfun --modules trajectory-analysis,code-review --yes
+vsl init --host deveco --host bitfun --modules "trajectory-analysis,code-review" --yes
 vsl doctor --host deveco --json
 vsl doctor --host bitfun --json
 ```

package/assets/build.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.0.1",
-  "buildId": "bbceff2246e5fb0e4b93bb05081457dbc113400b937c6148764573618d8534b5"
+  "version": "0.0.3",
+  "buildId": "ef337ee398fc256793104c4499ace48c18f0fafa0cbcc08b37bab00956293888"
 }

package/assets/claude-code/.claude-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "vsl",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "description": "VSL shared modules and tools"
 }

package/assets/claude-code/scripts/mcp-server.js

@@ -3,7 +3,7 @@
 var package_default = {
   $schema: "https://json.schemastore.org/package.json",
   name: "@bitfun-vsl/plugin",
-  version: "0.0.1",
+  version: "0.0.3",
   main: "./dist/index.js",
   types: "./dist/index.d.ts",
   type: "module",
@@ -559,8 +559,8 @@ import { dirname, join as join2, resolve as resolve2 } from "path";
 import { fileURLToPath } from "url";
 // assets/build.json
 var build_default = {
-  version: "0.0.1",
-  buildId: "bbceff2246e5fb0e4b93bb05081457dbc113400b937c6148764573618d8534b5"
+  version: "0.0.3",
+  buildId: "ef337ee398fc256793104c4499ace48c18f0fafa0cbcc08b37bab00956293888"
 };
 
 // src/runtime.ts

package/assets/install-manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "version": "0.0.1",
-  "buildId": "bbceff2246e5fb0e4b93bb05081457dbc113400b937c6148764573618d8534b5",
+  "version": "0.0.3",
+  "buildId": "ef337ee398fc256793104c4499ace48c18f0fafa0cbcc08b37bab00956293888",
   "modules": [
     {
       "id": "trajectory-analysis",
@@ -14,26 +14,26 @@
   ],
   "files": {
     "dist/cli/index.d.ts": "f3423a6dfe55290dafc908a46403976c9d7da2160d26b89ecff1bab6a80a9d86",
-    "dist/cli/index.js": "1cbbb6c7beb1485f660b3dab2aef3f37e49678adc8f293464533bee0a781e60d",
+    "dist/cli/index.js": "889e024ff2ff1345893c8d0df09c9db1b31a3a14f26d0e749250cc3903364075",
     "dist/hosts/bitfun-kernel/commands.d.ts": "07e614ba39652230ad2347a946ba385b568a32ba93f4928e6eb51cce31355bcb",
     "dist/hosts/bitfun-kernel/plugin.d.ts": "804999c9467f3b8bc9cdbec2f9af61150ce57037357e3e45ac5cd3f5282232ec",
-    "dist/hosts/bitfun-kernel/plugin.js": "e4726f0ca8b1fa5f3eba0e11e1f0f55df9334feba5d54245662a349e931b8483",
+    "dist/hosts/bitfun-kernel/plugin.js": "1349cb378106fdb5a883f64385368ce88de71b810b0b676f1f9e0ae77276816d",
     "dist/hosts/claude-code/index.d.ts": "9f7320bf122d3f14189e97c895ec2a31b305c6a6ad7f2d14ad86d7790bc85c4b",
-    "dist/hosts/claude-code/index.js": "3c2474875e5343f2af66a6b8451344cce3369ad34cebdebbded6b0138a361b44",
+    "dist/hosts/claude-code/index.js": "3f660e6d9287d04784d65ce6985ffeb9dbc119e1e58be67e276bff1676f9da92",
     "dist/hosts/claude-code/mcp-server.d.ts": "a20783146e5c04090c1b0fedd4ef736c24d2bdf39f1c08baa23ad438b98b34ab",
     "dist/hosts/deveco/plugin.d.ts": "031ced638db5d56489b9f5d40a1c67f9ae131869faab66ca8f438f029516cad1",
-    "dist/hosts/deveco/plugin.js": "c522ef844721d4d89da6b188f71b06af45de33d6e83099552563229124c55783",
+    "dist/hosts/deveco/plugin.js": "07f76e2b5549243350b60bf9c5cca4ea2b4e9da33e0a4ba190ee87ac3b25ed38",
     "dist/hosts/shared/opencode.d.ts": "70ede92462c55d7b24905303085275a1989cbbcd62faf0b6ea72cbacba6ef266",
     "dist/hosts/shared/schema.d.ts": "d2e820cb9a80931a7f7a484e3b53115a68fb496d6df8205e1bcb0415e0d04cea",
     "dist/index.d.ts": "d2b55570083bfc8cc661c3ca5d8f727ad2bb8589bcb30712ccb066bd442cfa35",
-    "dist/index.js": "57bfe95f0fdf0089d21032e7b4e70a3f70ed1e47ca5ade2b635408e7833759f7",
+    "dist/index.js": "af01bbe8591b963dbb07389c80e5b8f3420959e9c4be703c781b028726becc25",
     "dist/install/config.d.ts": "860d7a129abc8605ec66793a18ae40f343beac2eb7d70702099acbe110173611",
-    "dist/install/index.d.ts": "1d1b3c8c7c4c258c5c1b05745d5f519bad35b29e0095f42f8a93c47ccd1ce019",
+    "dist/install/index.d.ts": "3fa88e8b829beed966edf84eb9d93f3372a8ad8afebec8cfc33322e2e1b32652",
     "dist/install/resources.d.ts": "848b422ae05681572f464547842531cacf5099b45b3e89e24b9ed0d2dc1446d3",
     "dist/install/resources.js": "bb2062359843492b9eea62b0f1ed5a83d5ce392898fdd57fa949048cfd211fdb",
     "dist/plugin/contracts.d.ts": "9e7f8675396f443b5948e8e8f38e12dae35a14bbc271b1cc2739701c810f2873",
     "dist/plugin/index.d.ts": "61fccb54a34fc29059a1edb0bfd810dd829d0f697914697071d66e295edc18b2",
-    "dist/plugin/index.js": "8a489f7009949c549d6dfbda799c722995fe1dbf325869bede6ec2fff5903155",
+    "dist/plugin/index.js": "0d15166a298a7dd3972b0b2a61f20c4c991d4e2698a49819045f62c56d93f14d",
     "dist/plugin/modules/code-review/index.d.ts": "59b0837709bf3adf14002ddd5528d9bb774d75ede3b6e56a0ef80a33d69b9cbe",
     "dist/plugin/modules/code-review/runtime.d.ts": "90cd157399c517b923aea4f1dce658666e25a163ae7cd0914e807174911fede0",
     "dist/plugin/modules/trajectory-analysis.d.ts": "bcf92d901eeaa573562ae6c2b5e151c961720a638b8acb1357e975a324c24830",
@@ -43,14 +43,14 @@
     "assets/bitfun/command/vsl/cr-health.md": "488fb54ee75e23301ad18c02dc7181145f102035cf9e5c469309fc9863514d63",
     "assets/bitfun/command/vsl/review.md": "d36e84b374ba7c5dc3ca0bdff2ef0ba096b4249e11ac0a3c10962ca9ac309d05",
     "assets/bitfun/command/vsl/trajectory.md": "844fd1ec1f027c70bc4c9c07fb9bad8984a4f575b20f02a042f5b7f69fe7930f",
-    "assets/build.json": "fdb5338b120d65d674d24cc6d280e338d456a2cb76eb32ae7999138a7eff5a19",
-    "assets/claude-code/.claude-plugin/plugin.json": "71b767aae98e501c8938497aa8568f1104cf74dd95b01bf3429dbe0e4dfd20b9",
+    "assets/build.json": "b3d9c21ac71d2d0be21d9ece69eb95c784903c5697c04d4590a178a2d7dae399",
+    "assets/claude-code/.claude-plugin/plugin.json": "9747c8c9ab18fc303dad26871361e00d2d33109133ad0e8896628ad8443d34d2",
     "assets/claude-code/.mcp.json": "7b48e397614f0acc95ee613e011cbed1373e152883bf8e1e13ffa288c01799ee",
     "assets/claude-code/agents/vsl-trajectory.md": "a1bf5a76ad60b604fc4eedc64f3bb06d6ccba0038eaddd24e3c2cc52b742c093",
     "assets/claude-code/commands/cr-health.md": "573bd218c873a2de2855c017a3206a259b93592396ad246f99206e7c52f18387",
     "assets/claude-code/commands/review.md": "ad8b57db645cd4fb122bdddb88f0dc627cf6f334d9fe72c9fedd40aef52d52c5",
     "assets/claude-code/commands/trajectory.md": "546bfa9f00fc5805427c2a5bdd4ee7f6ceb79fb9c73373b8424d2c607170762c",
-    "assets/claude-code/scripts/mcp-server.js": "741daf225a918c15ae772acf1ce1bcc5a1763286d8c61bc5c2447233b68609b2",
+    "assets/claude-code/scripts/mcp-server.js": "1dbd06399f0ea6e10542d97b623cc0222bfa3b7805a137a46a89382b88033f15",
     "assets/claude-code/skills/vsl-trajectory-analysis/SKILL.md": "30262ad1adca7a9ea98bad771407a8a794e2a2327eae4cfb1bd1693f027bdaaa",
     "assets/deveco/skills/vsl-trajectory-analysis/SKILL.md": "30262ad1adca7a9ea98bad771407a8a794e2a2327eae4cfb1bd1693f027bdaaa",
     "assets/skills/vsl-trajectory-analysis/SKILL.md": "30262ad1adca7a9ea98bad771407a8a794e2a2327eae4cfb1bd1693f027bdaaa"

package/dist/cli/index.js

@@ -222,7 +222,7 @@ import { spawn } from "child_process";
 import { createWriteStream } from "fs";
 import { access, mkdir, readFile, realpath, stat } from "fs/promises";
 import { homedir } from "os";
-import { delimiter, isAbsolute, join as join2, resolve as resolve2 } from "path";
+import { delimiter, isAbsolute, join, resolve } from "path";
 import { pipeline } from "stream/promises";
 async function review(input, context, options) {
   if (Boolean(input.from) !== Boolean(input.to))
@@ -233,7 +233,7 @@ async function review(input, context, options) {
     throw new Error("preview cannot be combined with resume");
   if (input.resume && !input.commit && !input.from)
     throw new Error("resume requires commit or from/to; workspace resume is not supported");
-  const directory = await realpath(resolve2(context.directory, input.repo ?? "."));
+  const directory = await realpath(resolve(context.directory, input.repo ?? "."));
   const args = ["review", "--repo", directory, "--audience", "agent", "--format", "json"];
   const flags = {
     commit: "commit",
@@ -362,7 +362,7 @@ async function resolveCr(binary = process.env.VSL_CR_BIN) {
     return realpath(binary);
   }
   const names = process.platform === "win32" ? ["cr.exe"] : ["cr"];
-  const candidates = (process.env.PATH ?? "").split(delimiter).filter(Boolean).flatMap((directory) => names.map((name) => join2(directory, name)));
+  const candidates = (process.env.PATH ?? "").split(delimiter).filter(Boolean).flatMap((directory) => names.map((name) => join(directory, name)));
   const found = await Promise.all(candidates.map(async (path2) => await access(path2).then(() => path2, () => {
     return;
   })));
@@ -373,10 +373,10 @@ async function resolveCr(binary = process.env.VSL_CR_BIN) {
 }
 async function runCr(executable, args, options) {
   options.signal.throwIfAborted();
-  const directory = join2(options.cacheDirectory ?? process.env.VSL_CR_CACHE_DIR ?? join2(process.env.LOCALAPPDATA ?? process.env.XDG_CACHE_HOME ?? join2(homedir(), ".cache"), "vsl", "cr"), crypto.randomUUID());
+  const directory = join(options.cacheDirectory ?? process.env.VSL_CR_CACHE_DIR ?? join(process.env.LOCALAPPDATA ?? process.env.XDG_CACHE_HOME ?? join(homedir(), ".cache"), "vsl", "cr"), crypto.randomUUID());
   await mkdir(directory, { recursive: true, mode: 448 });
-  const resultFile = join2(directory, "result.json");
-  const stderrFile = join2(directory, "stderr.log");
+  const resultFile = join(directory, "result.json");
+  const stderrFile = join(directory, "stderr.log");
   const child = spawn(executable, args, {
     cwd: options.directory,
     env: { ...process.env, CR_NO_UPDATE: "1" },
@@ -2197,7 +2197,7 @@ var dist_default5 = createPrompt((config, done) => {
 });
 // src/install/index.ts
 import { mkdir as mkdir3, rm, rename, lstat, open } from "fs/promises";
-import { dirname as dirname3, join as join5, resolve as resolve5, isAbsolute as isAbsolute3 } from "path";
+import { dirname as dirname2, join as join4, resolve as resolve4, isAbsolute as isAbsolute3 } from "path";
 import { pathToFileURL } from "url";
 
 // node_modules/jsonc-parser/lib/esm/impl/scanner.js
@@ -3522,38 +3522,18 @@ function applyEdits(text, edits) {
   }
   return text;
 }
-
-// src/runtime.ts
-import { readFileSync, existsSync } from "fs";
-import { dirname, join, resolve } from "path";
-import { fileURLToPath } from "url";
 // assets/build.json
 var build_default = {
-  version: "0.0.1",
-  buildId: "bbceff2246e5fb0e4b93bb05081457dbc113400b937c6148764573618d8534b5"
+  version: "0.0.3",
+  buildId: "ef337ee398fc256793104c4499ace48c18f0fafa0cbcc08b37bab00956293888"
 };
 
-// src/runtime.ts
-function packageRoot(url) {
-  const visit2 = (directory) => {
-    if (existsSync(join(directory, ".vsl-runtime.json")))
-      return directory;
-    const manifest = join(directory, "package.json");
-    if (existsSync(manifest) && JSON.parse(readFileSync(manifest, "utf8")).name === "@bitfun-vsl/plugin")
-      return directory;
-    if (dirname(directory) === directory)
-      throw new Error(`Cannot locate VSL package from ${url}`);
-    return visit2(dirname(directory));
-  };
-  return visit2(dirname(fileURLToPath(url)));
-}
-
 // src/install/config.ts
 import { homedir as homedir2 } from "os";
-import { join as join4, resolve as resolve4 } from "path";
+import { join as join3, resolve as resolve3 } from "path";
 
 // src/install/resources.ts
-import { join as join3, resolve as resolve3, relative, isAbsolute as isAbsolute2, dirname as dirname2 } from "path";
+import { join as join2, resolve as resolve2, relative, isAbsolute as isAbsolute2, dirname } from "path";
 import { mkdir as mkdir2, readdir } from "fs/promises";
 
 // src/plugin/modules/trajectory-analysis.ts
@@ -3812,8 +3792,8 @@ if (false) {}
 // src/install/resources.ts
 var digest = (content) => new Bun.CryptoHasher("sha256").update(content).digest("hex");
 function inside(root, path2) {
-  const target = resolve3(root, path2);
-  const part = relative(resolve3(root), target);
+  const target = resolve2(root, path2);
+  const part = relative(resolve2(root), target);
   if (part === ".." || part.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute2(part))
     throw new Error(`Path escapes VSL root: ${path2}`);
   return target;
@@ -3821,9 +3801,9 @@ function inside(root, path2) {
 async function filesUnder(root) {
   return (await Promise.all((await readdir(root, { withFileTypes: true })).map(async (entry) => {
     if (entry.isSymbolicLink())
-      throw new Error(`Symlink not allowed in managed resources: ${join3(root, entry.name)}`);
+      throw new Error(`Symlink not allowed in managed resources: ${join2(root, entry.name)}`);
     if (entry.isDirectory())
-      return (await filesUnder(join3(root, entry.name))).map((file) => `${entry.name}/${file}`);
+      return (await filesUnder(join2(root, entry.name))).map((file) => `${entry.name}/${file}`);
     return entry.isFile() ? [entry.name] : [];
   }))).flat().sort();
 }
@@ -3839,7 +3819,7 @@ function selectResources(names) {
 async function writeResources(root, resources) {
   await Promise.all(Object.entries(resources).map(async ([path2, content]) => {
     const target = inside(root, path2);
-    await mkdir2(dirname2(target), { recursive: true });
+    await mkdir2(dirname(target), { recursive: true });
     await Bun.write(target, content);
   }));
 }
@@ -3847,13 +3827,13 @@ async function writeResources(root, resources) {
 // src/install/config.ts
 function installationPaths(options) {
   const home = options.home ?? homedir2();
-  const bitfunUserRoot = process.env.BITFUN_USER_ROOT || process.env.BITFUN_E2E_USER_ROOT || (process.platform === "win32" ? join4(process.env.APPDATA ?? join4(home, "AppData", "Roaming"), "bitfun") : process.platform === "darwin" ? join4(home, "Library", "Application Support", "bitfun") : join4(process.env.XDG_CONFIG_HOME ?? join4(home, ".config"), "bitfun"));
-  const configDirectory = resolve4(options.configDirectory ?? (options.host === "deveco" ? process.env.DEVECO_CONFIG_DIR ?? join4(process.env.XDG_CONFIG_HOME ?? join4(home, ".config"), "deveco") : options.host === "bitfun" ? join4(bitfunUserRoot, "config") : process.env.CLAUDE_CONFIG_DIR ?? join4(home, ".claude")));
-  const stateDirectory = resolve4(options.stateDirectory ?? join4(home, ".vsl"));
+  const bitfunUserRoot = process.env.BITFUN_USER_ROOT || process.env.BITFUN_E2E_USER_ROOT || (process.platform === "win32" ? join3(process.env.APPDATA ?? join3(home, "AppData", "Roaming"), "bitfun") : process.platform === "darwin" ? join3(home, "Library", "Application Support", "bitfun") : join3(process.env.XDG_CONFIG_HOME ?? join3(home, ".config"), "bitfun"));
+  const configDirectory = resolve3(options.configDirectory ?? (options.host === "deveco" ? process.env.DEVECO_CONFIG_DIR ?? join3(process.env.XDG_CONFIG_HOME ?? join3(home, ".config"), "deveco") : options.host === "bitfun" ? join3(bitfunUserRoot, "config") : process.env.CLAUDE_CONFIG_DIR ?? join3(home, ".claude")));
+  const stateDirectory = resolve3(options.stateDirectory ?? join3(home, ".vsl"));
   const installationId = digest(`${options.host}:${process.platform === "win32" ? configDirectory.toLowerCase() : configDirectory}`).slice(0, 16);
-  const instance = join4(stateDirectory, "installations", installationId);
-  const commandDirectory = resolve4(options.commandDirectory ?? process.env.OPENCODE_CONFIG_DIR ?? join4(process.env.XDG_CONFIG_HOME ?? join4(home, ".config"), "opencode"));
-  return { commandDirectory, configDirectory, stateDirectory, installationId, instance, receiptPath: join4(instance, "receipt.json"), journalPath: join4(instance, "transaction.json"), lockPath: join4(instance, "install.lock") };
+  const instance = join3(stateDirectory, "installations", installationId);
+  const commandDirectory = resolve3(options.commandDirectory ?? process.env.OPENCODE_CONFIG_DIR ?? join3(process.env.XDG_CONFIG_HOME ?? join3(home, ".config"), "opencode"));
+  return { commandDirectory, configDirectory, stateDirectory, installationId, instance, receiptPath: join3(instance, "receipt.json"), journalPath: join3(instance, "transaction.json"), lockPath: join3(instance, "install.lock") };
 }
 
 // src/install/index.ts
@@ -3868,13 +3848,13 @@ async function planInstallation(options) {
     throw new Error("BitFun command directory changed; use the original --command-dir or uninstall first");
   if (options.crBinary && !isAbsolute3(options.crBinary))
     throw new Error("CR binary must be an absolute native executable path");
-  const source = options.source ? resolve5(options.source) : packageRoot(import.meta.url);
-  if (!await Bun.file(source).exists() && !await lstat(source).then((value) => value.isDirectory()).catch(() => false))
+  const source = options.source ? resolve4(options.source) : `@bitfun-vsl/plugin@${build_default.version}`;
+  if (options.source && !await Bun.file(source).exists() && !await lstat(source).then((value) => value.isDirectory()).catch(() => false))
     throw new Error(`Package source not found: ${source}`);
-  const configPath = options.host === "deveco" ? await devecoConfigPath(paths.configDirectory) : join5(paths.configDirectory, options.host === "bitfun" ? "app.json" : "settings.json");
+  const configPath = options.host === "deveco" ? await devecoConfigPath(paths.configDirectory) : join4(paths.configDirectory, options.host === "bitfun" ? "app.json" : "settings.json");
   if (options.host !== "claude-code")
     validatePluginConfig(await readObject(configPath), previous);
-  const sourceIdentity = await Bun.file(source).exists() ? { sha256: digest(await Bun.file(source).bytes()) } : await verifyPackage(source).then((manifest) => ({ version: manifest.version, buildId: manifest.buildId }));
+  const sourceIdentity = !options.source ? { version: build_default.version, buildId: build_default.buildId } : await Bun.file(source).exists() ? { sha256: digest(await Bun.file(source).bytes()) } : await verifyPackage(source).then((manifest) => ({ version: manifest.version, buildId: manifest.buildId }));
   return {
     action: previous ? "update" : "install",
     host: options.host,
@@ -3906,26 +3886,26 @@ async function install(options) {
       await assertOwnedFiles(previous);
     if (previous && !(await doctor(options)).configured)
       throw new Error("Managed host registration changed; resolve doctor diagnostics before update");
-    const packageJsonPath = join5(paths.configDirectory, "package.json");
+    const packageJsonPath = join4(paths.configDirectory, "package.json");
     const configBefore = await textOrUndefined(plan.configPath);
     const packageBefore = await textOrUndefined(packageJsonPath);
     const dependencyBefore = dependencyOf(await readObject(packageJsonPath));
     const originalEntries = options.host !== "claude-code" ? validatePluginConfig(await readObject(plan.configPath), previous) : [];
-    const currentRoot = join5(paths.configDirectory, "node_modules/@bitfun-vsl/plugin");
-    if (!previous && options.host !== "claude-code" && await Bun.file(join5(currentRoot, "package.json")).exists()) {
-      if (!await Bun.file(join5(currentRoot, "assets/install-manifest.json")).exists())
+    const currentRoot = join4(paths.configDirectory, "node_modules/@bitfun-vsl/plugin");
+    if (!previous && options.host !== "claude-code" && await Bun.file(join4(currentRoot, "package.json")).exists()) {
+      if (!await Bun.file(join4(currentRoot, "assets/install-manifest.json")).exists())
         throw new Error("Existing host VSL package has no ownership manifest. Back up and remove the legacy installation before init can take ownership.");
       await verifyPackage(currentRoot);
       const existing = await inventory(currentRoot);
-      const manifest2 = await Bun.file(join5(currentRoot, "assets/install-manifest.json")).json();
-      const pkg = await Bun.file(join5(currentRoot, "package.json")).json();
+      const manifest2 = await Bun.file(join4(currentRoot, "assets/install-manifest.json")).json();
+      const pkg = await Bun.file(join4(currentRoot, "package.json")).json();
       const unowned = Object.keys(existing).filter((path2) => !["package.json", "README.md", "LICENSE", "assets/install-manifest.json", "assets/runtime.json"].includes(path2) && !(path2 in manifest2.files) && !(pkg.files ?? []).some((file) => file.startsWith("docs/") && path2 === file));
       if (unowned.length)
         throw new Error(`Unowned files in existing VSL package: ${unowned.join(", ")}`);
     }
-    const originalRuntime = options.host !== "claude-code" ? await textOrUndefined(join5(currentRoot, "assets/runtime.json")) : undefined;
-    const releaseRoot = join5(paths.instance, "releases", crypto.randomUUID());
-    const marketplaceBefore = await textOrUndefined(join5(paths.instance, "marketplace/.claude-plugin/marketplace.json"));
+    const originalRuntime = options.host !== "claude-code" ? await textOrUndefined(join4(currentRoot, "assets/runtime.json")) : undefined;
+    const releaseRoot = join4(paths.instance, "releases", crypto.randomUUID());
+    const marketplaceBefore = await textOrUndefined(join4(paths.instance, "marketplace/.claude-plugin/marketplace.json"));
     const state = {
       phase: "staging",
       host: options.host,
@@ -3940,10 +3920,10 @@ async function install(options) {
       originalEntries,
       originalRuntime
     };
-    await writeJson(paths.journalPath, state);
     await mkdir3(releaseRoot, { recursive: true });
     await command(["npm", "install", "--prefix", releaseRoot, "--ignore-scripts", "--install-links", "--no-audit", "--no-fund", plan.source]);
-    const stagedRoot = join5(releaseRoot, "node_modules/@bitfun-vsl/plugin");
+    await writeJson(paths.journalPath, state);
+    const stagedRoot = join4(releaseRoot, "node_modules/@bitfun-vsl/plugin");
     const manifest = await verifyPackage(stagedRoot);
     if (plan.modules.some((name) => !manifest.modules.some((module) => module.id === name)))
       throw new Error("Selected module is absent from source package");
@@ -3961,11 +3941,11 @@ async function install(options) {
         return { ...report2, recoveryRequired: false, unchanged: true };
       }
     }
-    await writeJson(join5(stagedRoot, "assets/runtime.json"), runtime);
+    await writeJson(join4(stagedRoot, "assets/runtime.json"), runtime);
     const marketplace = `vsl-${paths.installationId}`;
-    const marketplacePath = join5(paths.instance, "marketplace");
+    const marketplacePath = join4(paths.instance, "marketplace");
     const pluginVersion = `${manifest.version}+vsl.${manifest.buildId.slice(0, 8)}.${digest(JSON.stringify(runtime)).slice(0, 8)}.${crypto.randomUUID().slice(0, 8)}`;
-    const pluginRoot = join5(marketplacePath, "releases", pluginVersion, "plugin");
+    const pluginRoot = join4(marketplacePath, "releases", pluginVersion, "plugin");
     if (options.host === "claude-code") {
       const existing = await command(["claude", "plugin", "list", "--json"], claudeEnvironment(paths.configDirectory));
       const plugins = JSON.parse(existing);
@@ -3973,17 +3953,17 @@ async function install(options) {
         throw new Error("Invalid Claude plugin inventory");
       if (plugins.some((item) => item && typeof item === "object" && ("id" in item) && typeof item.id === "string" && (item.id === "vsl" || item.id.startsWith("vsl@")) && item.id !== `vsl@${marketplace}`))
         throw new Error("Another VSL Claude plugin is registered; resolve it before adopting this installation");
-      const existingPlugin = await Bun.file(join5(pluginRoot, ".claude-plugin/plugin.json")).exists();
+      const existingPlugin = await Bun.file(join4(pluginRoot, ".claude-plugin/plugin.json")).exists();
       if (existingPlugin)
         throw new Error(`Unowned Claude release already exists: ${pluginRoot}`);
-      const renderer2 = await import(pathToFileURL(join5(stagedRoot, "dist/install/resources.js")).href);
+      const renderer2 = await import(pathToFileURL(join4(stagedRoot, "dist/install/resources.js")).href);
       await writeResources(pluginRoot, Object.fromEntries(Object.entries(renderer2.renderResources(renderer2.selectResources(plan.modules), pluginVersion)).filter(([path2]) => path2.startsWith("claude-code/")).map(([path2, content]) => [path2.slice("claude-code/".length), content])));
-      await writeJson(join5(pluginRoot, ".vsl-runtime.json"), runtime);
-      await mkdir3(join5(pluginRoot, "scripts"), { recursive: true });
-      await Bun.write(join5(pluginRoot, "scripts/mcp-server.js"), Bun.file(join5(stagedRoot, "assets/claude-code/scripts/mcp-server.js")));
+      await writeJson(join4(pluginRoot, ".vsl-runtime.json"), runtime);
+      await mkdir3(join4(pluginRoot, "scripts"), { recursive: true });
+      await Bun.write(join4(pluginRoot, "scripts/mcp-server.js"), Bun.file(join4(stagedRoot, "assets/claude-code/scripts/mcp-server.js")));
       await command(["claude", "plugin", "validate", pluginRoot], claudeEnvironment(paths.configDirectory));
     }
-    const renderer = options.host === "bitfun" ? await import(pathToFileURL(join5(stagedRoot, "dist/install/resources.js")).href) : undefined;
+    const renderer = options.host === "bitfun" ? await import(pathToFileURL(join4(stagedRoot, "dist/install/resources.js")).href) : undefined;
     const selectedCommandFiles = renderer ? Object.fromEntries(Object.entries(renderer.renderResources(renderer.selectResources(plan.modules), manifest.version)).filter(([path2]) => path2.startsWith("bitfun/command/")).map(([path2, content]) => [path2.slice("bitfun/".length), String(content)])) : undefined;
     const commandFilesBefore = selectedCommandFiles ? Object.fromEntries(await Promise.all([...new Set([
       ...Object.keys(previous?.commandFiles ?? {}),
@@ -4000,17 +3980,28 @@ async function install(options) {
     await writeJson(paths.journalPath, { ...state, phase: "registering", marketplace, marketplacePath, pluginRoot, commandFilesBefore, commandDirectory: paths.commandDirectory });
     if (options.host !== "claude-code") {
       await mkdir3(paths.configDirectory, { recursive: true });
-      await command(["npm", "install", "--prefix", paths.configDirectory, "--ignore-scripts", "--install-links", "--no-audit", "--no-fund", stagedRoot]);
+      await command([
+        "npm",
+        "install",
+        "--prefix",
+        paths.configDirectory,
+        "--ignore-scripts",
+        "--no-audit",
+        "--no-fund",
+        ...options.source ? ["--install-links", stagedRoot] : ["--save-exact", `@bitfun-vsl/plugin@${manifest.version}`]
+      ]);
       await verifyPackage(currentRoot);
+      if (!options.source)
+        await writeJson(join4(currentRoot, "assets/runtime.json"), runtime);
       if (await textOrUndefined(plan.configPath) !== configBefore)
         throw new Error("Host configuration changed during dependency installation");
       const parsed = await readObject(plan.configPath);
       const entries = Array.isArray(parsed.plugin) ? parsed.plugin : [];
-      const entry = pathToFileURL(join5(currentRoot, hostEntry(options.host))).href;
+      const entry = pathToFileURL(join4(currentRoot, hostEntry(options.host))).href;
       await patchJson(plan.configPath, ["plugin"], [...entries.filter((item) => !isVslEntry(entrySpec(item))), entry]);
     }
     if (options.host === "claude-code") {
-      await writeJson(join5(marketplacePath, ".claude-plugin/marketplace.json"), {
+      await writeJson(join4(marketplacePath, ".claude-plugin/marketplace.json"), {
         name: marketplace,
         owner: { name: "VSL" },
         plugins: [{
@@ -4050,7 +4041,7 @@ async function install(options) {
       crBinary: runtime.crBinary,
       files: await inventory(installedRoot),
       configPath: plan.configPath,
-      entry: options.host !== "claude-code" ? pathToFileURL(join5(currentRoot, hostEntry(options.host))).href : `vsl@${marketplace}`,
+      entry: options.host !== "claude-code" ? pathToFileURL(join4(currentRoot, hostEntry(options.host))).href : `vsl@${marketplace}`,
       marketplace: options.host === "claude-code" ? marketplace : undefined,
       marketplacePath: options.host === "claude-code" ? marketplacePath : undefined,
       sourceFiles: await inventory(stagedRoot),
@@ -4091,7 +4082,7 @@ async function doctor(options) {
     };
   const changed = await changedFiles(receipt);
   const config = await readObject(receipt.configPath);
-  const dependency = options.host !== "claude-code" ? dependencyOf(await readObject(join5(paths.configDirectory, "package.json"))) : undefined;
+  const dependency = options.host !== "claude-code" ? dependencyOf(await readObject(join4(paths.configDirectory, "package.json"))) : undefined;
   const commandChanges = receipt.commandDirectory ? (await Promise.all(Object.entries(receipt.commandFiles ?? {}).map(async ([path2, hash]) => digest(await textOrUndefined(inside(receipt.commandDirectory, path2)) ?? "") === hash ? undefined : `commands/${path2}`))).filter((path2) => !!path2) : [];
   changed.push(...commandChanges);
   const registration = options.host !== "claude-code" ? Array.isArray(config.plugin) && config.plugin.filter((item) => isVslEntry(entrySpec(item))).length === 1 && config.plugin.includes(receipt.entry) && dependency === receipt.dependency : await claudeInstalledRoot(paths.configDirectory, receipt.entry, receipt.pluginVersion).then((root) => root === receipt.packageRoot).catch(() => false);
@@ -4145,7 +4136,7 @@ async function uninstall(options, dryRun = false) {
       configPath: receipt.configPath,
       commandDirectory: receipt.commandDirectory,
       commandFilesBefore: receipt.commandDirectory ? Object.fromEntries(await Promise.all(Object.keys(receipt.commandFiles ?? {}).map(async (path2) => [path2, await textOrUndefined(inside(receipt.commandDirectory, path2)) ?? null]))) : undefined,
-      marketplaceBefore: receipt.marketplacePath ? await textOrUndefined(join5(receipt.marketplacePath, ".claude-plugin/marketplace.json")) : undefined
+      marketplaceBefore: receipt.marketplacePath ? await textOrUndefined(join4(receipt.marketplacePath, ".claude-plugin/marketplace.json")) : undefined
     });
     if (receipt.host !== "claude-code") {
       const config = await readObject(receipt.configPath);
@@ -4160,11 +4151,11 @@ async function uninstall(options, dryRun = false) {
           "--install-links",
           "--no-audit",
           "--no-fund",
-          receipt.originalDependency.startsWith("file:") ? resolve5(receipt.configDirectory, receipt.originalDependency.slice(5)) : `@bitfun-vsl/plugin@${receipt.originalDependency}`
+          receipt.originalDependency.startsWith("file:") ? resolve4(receipt.configDirectory, receipt.originalDependency.slice(5)) : `@bitfun-vsl/plugin@${receipt.originalDependency}`
         ]);
-        await patchJson(join5(receipt.configDirectory, "package.json"), ["dependencies", "@bitfun-vsl/plugin"], receipt.originalDependency);
+        await patchJson(join4(receipt.configDirectory, "package.json"), ["dependencies", "@bitfun-vsl/plugin"], receipt.originalDependency);
         if (receipt.originalRuntime)
-          await Bun.write(join5(receipt.packageRoot, "assets/runtime.json"), receipt.originalRuntime);
+          await Bun.write(join4(receipt.packageRoot, "assets/runtime.json"), receipt.originalRuntime);
       }
       if (!receipt.originalDependency)
         await command(["npm", "uninstall", "--prefix", receipt.configDirectory, "--ignore-scripts", "--no-audit", "--no-fund", "@bitfun-vsl/plugin"]);
@@ -4175,7 +4166,7 @@ async function uninstall(options, dryRun = false) {
     }
     if (receipt.commandDirectory)
       await restoreCommands(receipt.commandDirectory, Object.fromEntries(Object.keys(receipt.commandFiles ?? {}).map((path2) => [path2, receipt.originalCommandFiles?.[path2] ?? null])));
-    await rename(paths.receiptPath, join5(paths.instance, `uninstalled-${Date.now()}.json`));
+    await rename(paths.receiptPath, join4(paths.instance, `uninstalled-${Date.now()}.json`));
     await rm(paths.journalPath);
     return { removed: true, host: receipt.host, restartRequired: true };
   } finally {
@@ -4199,15 +4190,15 @@ async function recover(options) {
         if (!Array.isArray(entries))
           throw new Error("Invalid host plugin configuration; manual recovery required");
         const restoredEntries = previous ? [previous.entry] : Array.isArray(journal.originalEntries) ? journal.originalEntries : [];
-        const foreign = entries.filter((entry) => isVslEntry(entrySpec(entry)) && !restoredEntries.includes(entry) && entry !== pathToFileURL(join5(paths.configDirectory, "node_modules/@bitfun-vsl/plugin", hostEntry(options.host))).href);
+        const foreign = entries.filter((entry) => isVslEntry(entrySpec(entry)) && !restoredEntries.includes(entry) && entry !== pathToFileURL(join4(paths.configDirectory, "node_modules/@bitfun-vsl/plugin", hostEntry(options.host))).href);
         if (foreign.length)
           throw new Error("VSL registration changed externally; preserving recovery evidence");
         const dependency = previous?.dependency ?? (typeof journal.dependencyBefore === "string" ? journal.dependencyBefore : undefined);
         if (dependency) {
-          await command(["npm", "install", "--prefix", paths.configDirectory, "--ignore-scripts", "--install-links", "--no-audit", "--no-fund", dependency.startsWith("file:") ? resolve5(paths.configDirectory, dependency.slice(5)) : `@bitfun-vsl/plugin@${dependency}`]);
-          await patchJson(join5(paths.configDirectory, "package.json"), ["dependencies", "@bitfun-vsl/plugin"], dependency);
+          await command(["npm", "install", "--prefix", paths.configDirectory, "--ignore-scripts", "--install-links", "--no-audit", "--no-fund", dependency.startsWith("file:") ? resolve4(paths.configDirectory, dependency.slice(5)) : `@bitfun-vsl/plugin@${dependency}`]);
+          await patchJson(join4(paths.configDirectory, "package.json"), ["dependencies", "@bitfun-vsl/plugin"], dependency);
           if (!previous && typeof journal.originalRuntime === "string")
-            await Bun.write(join5(paths.configDirectory, "node_modules/@bitfun-vsl/plugin/assets/runtime.json"), journal.originalRuntime);
+            await Bun.write(join4(paths.configDirectory, "node_modules/@bitfun-vsl/plugin/assets/runtime.json"), journal.originalRuntime);
         }
         if (!dependency)
           await command(["npm", "uninstall", "--prefix", paths.configDirectory, "--ignore-scripts", "--no-audit", "--no-fund", "@bitfun-vsl/plugin"]);
@@ -4219,9 +4210,9 @@ async function recover(options) {
           throw new Error("Missing marketplace recovery identity");
         const entry = `vsl@${marketplace}`;
         if (typeof journal.marketplaceBefore === "string") {
-          await Bun.write(join5(paths.instance, "marketplace/.claude-plugin/marketplace.json"), journal.marketplaceBefore);
+          await Bun.write(join4(paths.instance, "marketplace/.claude-plugin/marketplace.json"), journal.marketplaceBefore);
           if (journal.phase === "uninstalling")
-            await command(["claude", "plugin", "marketplace", "add", join5(paths.instance, "marketplace"), "--scope", "user"], claudeEnvironment(paths.configDirectory));
+            await command(["claude", "plugin", "marketplace", "add", join4(paths.instance, "marketplace"), "--scope", "user"], claudeEnvironment(paths.configDirectory));
           await command(["claude", "plugin", "marketplace", "update", marketplace], claudeEnvironment(paths.configDirectory));
           await command(["claude", "plugin", journal.phase === "uninstalling" ? "install" : "update", entry, "--scope", "user"], claudeEnvironment(paths.configDirectory));
         }
@@ -4247,10 +4238,10 @@ async function recover(options) {
   }
 }
 async function verifyPackage(root) {
-  const manifest = await Bun.file(join5(root, "assets/install-manifest.json")).json();
+  const manifest = await Bun.file(join4(root, "assets/install-manifest.json")).json();
   if (manifest.schemaVersion !== 1 || !manifest.buildId || !manifest.files || !Array.isArray(manifest.modules))
     throw new Error("Invalid VSL install manifest");
-  const pkg = await Bun.file(join5(root, "package.json")).json();
+  const pkg = await Bun.file(join4(root, "package.json")).json();
   if (pkg.name !== "@bitfun-vsl/plugin" || pkg.version !== manifest.version)
     throw new Error("VSL package identity differs from install manifest");
   for (const required of ["dist/hosts/deveco/plugin.js", "dist/hosts/bitfun-kernel/plugin.js", "dist/index.js", "dist/install/resources.js", "assets/claude-code/scripts/mcp-server.js", "assets/claude-code/.mcp.json", "assets/build.json"]) {
@@ -4266,8 +4257,8 @@ async function command(args, env = process.env) {
   const executable = Bun.which(args[0], { PATH: env.PATH });
   if (!executable)
     throw new Error(`Required command not found: ${args[0]}`);
-  const nativeClaude = join5(dirname3(executable), "node_modules/@anthropic-ai/claude-code/bin/claude.exe");
-  const npmCli = join5(dirname3(executable), "node_modules/npm/bin/npm-cli.js");
+  const nativeClaude = join4(dirname2(executable), "node_modules/@anthropic-ai/claude-code/bin/claude.exe");
+  const npmCli = join4(dirname2(executable), "node_modules/npm/bin/npm-cli.js");
   const invocation = process.platform === "win32" && /\.(cmd|bat)$/i.test(executable) ? args[0] === "npm" && await Bun.file(npmCli).exists() ? [Bun.which("node") ?? process.execPath, npmCli] : args[0] === "claude" && await Bun.file(nativeClaude).exists() ? [nativeClaude] : undefined : [executable];
   if (!invocation)
     throw new Error(`Cannot safely resolve command shim: ${executable}; use a native CLI installation`);
@@ -4296,11 +4287,11 @@ async function readReceipt(path2) {
   return value;
 }
 async function devecoConfigPath(root) {
-  const candidates = await Promise.all(["deveco.jsonc", "deveco.json"].map(async (name) => await Bun.file(join5(root, name)).exists() ? join5(root, name) : undefined));
+  const candidates = await Promise.all(["deveco.jsonc", "deveco.json"].map(async (name) => await Bun.file(join4(root, name)).exists() ? join4(root, name) : undefined));
   const found = candidates.filter((path2) => !!path2);
   if (found.length > 1)
     throw new Error("Both deveco.json and deveco.jsonc exist; choose one effective configuration before installing");
-  return found[0] ?? join5(root, "deveco.jsonc");
+  return found[0] ?? join4(root, "deveco.jsonc");
 }
 function isVslEntry(value) {
   return value === "@bitfun-vsl/plugin" || value.startsWith("@bitfun-vsl/plugin/") || value.startsWith("@bitfun-vsl/plugin@") || value.startsWith("file:") && /\/@bitfun-vsl\/plugin\/dist\/(?:index\.js|hosts\/(?:deveco|bitfun-kernel)\/plugin\.js)$/.test(decodeURI(value).replaceAll("\\", "/"));
@@ -4333,7 +4324,7 @@ async function restoreCommands(root, files) {
       await rm(target, { force: true });
       continue;
     }
-    await mkdir3(dirname3(target), { recursive: true });
+    await mkdir3(dirname2(target), { recursive: true });
     await Bun.write(target, content);
   }
 }
@@ -4349,7 +4340,7 @@ function dependencyOf(config) {
   return value;
 }
 async function inventory(root) {
-  return Object.fromEntries(await Promise.all((await filesUnder(root)).map(async (path2) => [path2, digest(await Bun.file(join5(root, path2)).bytes())])));
+  return Object.fromEntries(await Promise.all((await filesUnder(root)).map(async (path2) => [path2, digest(await Bun.file(join4(root, path2)).bytes())])));
 }
 async function changedFiles(receipt) {
   const current = await inventory(receipt.packageRoot).catch(() => ({}));
@@ -4365,7 +4356,7 @@ async function assertOwnedFiles(receipt) {
         throw new Error(`Managed files were modified; preserving them: ${path2}`);
     }
   }
-  const sourceRoot = join5(receipt.releaseRoot, "node_modules/@bitfun-vsl/plugin");
+  const sourceRoot = join4(receipt.releaseRoot, "node_modules/@bitfun-vsl/plugin");
   const current = await inventory(sourceRoot);
   if (JSON.stringify(current) !== JSON.stringify(receipt.sourceFiles))
     throw new Error("Staged release was modified; preserving installation");
@@ -4386,7 +4377,7 @@ async function textOrUndefined(path2) {
   return await Bun.file(path2).exists() ? Bun.file(path2).text() : undefined;
 }
 async function writeJson(path2, value) {
-  await mkdir3(dirname3(path2), { recursive: true });
+  await mkdir3(dirname2(path2), { recursive: true });
   const temporary = `${path2}.${crypto.randomUUID()}.tmp`;
   await Bun.write(temporary, `${JSON.stringify(value, null, 2)}
 `);
@@ -4396,7 +4387,7 @@ async function patchJson(path2, keys, value) {
   const raw = await textOrUndefined(path2) ?? `{}
 `;
   await readObject(path2);
-  await mkdir3(dirname3(path2), { recursive: true });
+  await mkdir3(dirname2(path2), { recursive: true });
   await Bun.write(path2, applyEdits(raw, modify(raw, keys, value, { formattingOptions: { insertSpaces: true, tabSize: 2 } })));
 }
 async function acquireLock(path2) {
@@ -4421,7 +4412,7 @@ async function acquireLock(path2) {
 }
 async function safeRemove(root, target) {
   const checked = inside(root, target);
-  if (checked === resolve5(root))
+  if (checked === resolve4(root))
     throw new Error("Refusing to remove installation root");
   await rm(checked, { recursive: true, force: true });
 }
@@ -4446,7 +4437,7 @@ async function main(args = process.argv.slice(2)) {
     console.log(`vsl <init|update|doctor|uninstall|recover> [--host deveco|claude-code|bitfun] [--modules id,id] [--package path] [--config-dir path] [--command-dir path] [--state-dir path] [--cr-bin path] [--dry-run] [--yes] [--json]
 
 vsl init: \u9009\u62E9\u5BBF\u4E3B \u2192 \u9009\u62E9\u6A21\u5757\uFF08\u9ED8\u8BA4\u5168\u9009\uFF09\u2192 \u786E\u8BA4\u5B89\u88C5\u3002
-\u5BBF\u4E3B\u652F\u6301\u591A\u9009\uFF0C\u4E5F\u53EF\u91CD\u590D\u4F20\u5165 --host\u3002\u9700\u8981 Bun\u3001npm\uFF1BClaude \u5B89\u88C5\u8FD8\u9700\u8981 Claude CLI\u3002`);
+\u5BBF\u4E3B\u652F\u6301\u591A\u9009\uFF0C\u4E5F\u53EF\u91CD\u590D\u4F20\u5165 --host\u3002\u9ED8\u8BA4\u5B89\u88C5\u6765\u6E90\u4E3A npm \u5B98\u65B9\u6E90\u7684 @bitfun-vsl/plugin@<CLI \u7248\u672C>\uFF1B--package \u6307\u5B9A\u672C\u5730\u6784\u5EFA\u7684 tgz\uFF0C\u7528\u4E8E\u5F00\u53D1\u9A8C\u8BC1\u3002\u9700\u8981 Bun\u3001npm\uFF1BClaude \u5B89\u88C5\u8FD8\u9700\u8981 Claude CLI\u3002`);
     return;
   }
   const action = args[0];
@@ -4514,51 +4505,82 @@ VSL v${build_default.version} \u5B89\u88C5\u5411\u5BFC
       console.log(`
 \u5BBF\u4E3B\uFF1A${hosts.map((host) => hostChoices.find((choice) => choice.value === host).name).join("\u3001")}`);
       if (installing)
-        console.log(`\u6A21\u5757\uFF1A${(modules ?? selectResources().modules.map((module) => module.id)).join("\u3001")}
-\u5B89\u88C5\u6765\u6E90\uFF1A${values.get("--package")?.[0] ?? "\u5F53\u524D VSL \u5305"}`);
+        console.log(`\u6A21\u5757\uFF1A${(modules ?? selectResources().modules.map((module) => module.id)).join("\u3001")} \uFF5C \u6765\u6E90\uFF1A${values.get("--package")?.[0] ? "\u672C\u5730\u5305" : `npm @bitfun-vsl/plugin@${build_default.version}`}`);
     }
     if (!flags.has("--yes") && !interactive)
       throw new Error("Non-interactive changes require --yes");
-    if (!flags.has("--yes") && !await dist_default5({ message: installing ? "\u662F\u5426\u6267\u884C\u5B89\u88C5\uFF1F" : action === "uninstall" ? "\u662F\u5426\u6267\u884C\u5378\u8F7D\uFF1F" : "\u662F\u5426\u6062\u590D\u5B89\u88C5\uFF1F", default: true })) {
+    if (!flags.has("--yes") && !await dist_default5({ message: installing ? "\u7B2C\u4E09\u6B65\uFF1A\u786E\u8BA4\u6309\u4EE5\u4E0A\u9009\u62E9\u5B89\u88C5\uFF1F" : action === "uninstall" ? "\u7B2C\u4E09\u6B65\uFF1A\u786E\u8BA4\u5378\u8F7D\uFF1F" : "\u7B2C\u4E09\u6B65\uFF1A\u786E\u8BA4\u6062\u590D\u5B89\u88C5\uFF1F", default: true })) {
       console.log("\u5DF2\u53D6\u6D88\uFF0C\u672A\u4FEE\u6539\u5BBF\u4E3B\u914D\u7F6E\u3002");
       return;
     }
   }
   const results = [];
   for (const option of options) {
+    const label = hostChoices.find((choice) => choice.value === option.host).name;
     try {
       if (!flags.has("--json"))
         console.log(`
-\u6B63\u5728\u5904\u7406 ${hostChoices.find((choice) => choice.value === option.host).name}\u2026`);
+\u6B63\u5728\u5904\u7406 ${label}\u2026`);
       const result = action === "doctor" ? await doctor(option) : action === "recover" ? await recover(option) : action === "uninstall" ? await uninstall(option) : await install(option);
       results.push(result);
       if ("configured" in result && !result.configured || "recoveryRequired" in result && result.recoveryRequired)
         process.exitCode = 1;
-      if (!flags.has("--json")) {
-        console.log("configured" in result ? result.configured ? "\u5B89\u88C5\u914D\u7F6E\u68C0\u67E5\u901A\u8FC7\u3002" : "\u5C1A\u672A\u6B63\u786E\u914D\u7F6E\uFF0C\u8BF7\u68C0\u67E5\u5B89\u88C5\u72B6\u6001\u3002" : JSON.stringify(result));
-        if ("packageRoot" in result)
-          console.log(`\u63D2\u4EF6\u4F4D\u7F6E\uFF1A${result.packageRoot}`);
-        if ("buildId" in result)
-          console.log(`\u7248\u672C\uFF1A${result.version}
-\u6784\u5EFA\uFF1A${result.buildId}`);
-        if ("modules" in result && result.modules?.includes("code-review"))
-          console.log(result.crBinary ? `CR \u7A0B\u5E8F\uFF1A${result.crBinary}` : "\u672A\u68C0\u6D4B\u5230 CR \u539F\u751F\u7A0B\u5E8F\uFF1B\u8BF7\u5B89\u88C5\u540E\u91CD\u65B0\u8FD0\u884C init\uFF0C\u6216\u4F7F\u7528 --cr-bin \u6307\u5B9A\u5176\u7EDD\u5BF9\u8DEF\u5F84\u3002");
-        if ("configured" in result && result.configured)
-          console.log("\u8BF7\u91CD\u542F\u5BBF\u4E3B\uFF0C\u5728\u5BBF\u4E3B\u4E2D\u8C03\u7528 vsl_runtime_info \u6838\u5BF9\u6784\u5EFA\u4E0E\u6A21\u5757\uFF0C\u518D\u89E6\u53D1\u5BF9\u5E94 command\u3002");
-        if (option.host === "bitfun" && "configured" in result && result.configured)
-          console.log("BitFun \u8FD8\u9700\u542F\u7528 OpenCode \u517C\u5BB9\uFF1Abitfun config external set-enabled true --scope global\uFF1Bbitfun config external set-mode recommended --ecosystem opencode --scope global\u3002\u5728\u4F1A\u8BDD\u4E2D\u7528 /extensions \u68C0\u67E5\u6765\u6E90\u72B6\u6001\u3002");
-      }
+      if (!flags.has("--json"))
+        printOutcome(action, label, option.host, result);
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);
       results.push({ host: option.host, failed: true, error: message });
       process.exitCode = 1;
       if (!flags.has("--json"))
-        console.error(`${option.host} \u5931\u8D25\uFF1A${message}`);
+        console.error(`\u2717 ${label} ${action === "doctor" ? "\u68C0\u67E5" : action === "uninstall" ? "\u5378\u8F7D" : action === "recover" ? "\u6062\u590D" : "\u5B89\u88C5"}\u5931\u8D25\uFF1A${message}`);
     }
   }
   if (flags.has("--json"))
     console.log(JSON.stringify(results, null, 2));
 }
+function printOutcome(action, label, host, result) {
+  if (action === "doctor") {
+    console.log("configured" in result && result.configured ? "\u5B89\u88C5\u914D\u7F6E\u68C0\u67E5\u901A\u8FC7\u3002" : "\u5C1A\u672A\u6B63\u786E\u914D\u7F6E\uFF0C\u8BF7\u68C0\u67E5\u5B89\u88C5\u72B6\u6001\u3002");
+    if ("packageRoot" in result)
+      console.log(`\u63D2\u4EF6\u4F4D\u7F6E\uFF1A${result.packageRoot}`);
+    if ("buildId" in result)
+      console.log(`\u7248\u672C\uFF1A${result.version}
+\u6784\u5EFA\uFF1A${result.buildId}`);
+    if ("modules" in result && result.modules?.includes("code-review"))
+      console.log(result.crBinary ? `CR \u7A0B\u5E8F\uFF1A${result.crBinary}` : "\u672A\u68C0\u6D4B\u5230 CR \u539F\u751F\u7A0B\u5E8F\uFF1B\u8BF7\u5B89\u88C5\u540E\u91CD\u65B0\u8FD0\u884C init\uFF0C\u6216\u4F7F\u7528 --cr-bin \u6307\u5B9A\u5176\u7EDD\u5BF9\u8DEF\u5F84\u3002");
+    if ("recoveryRequired" in result && result.recoveryRequired)
+      console.log("\u5B58\u5728\u672A\u5B8C\u6210\u7684\u5B89\u88C5\u4E8B\u52A1\uFF0C\u8BF7\u5148\u8FD0\u884C vsl recover\u3002");
+    else if ("configured" in result && result.configured)
+      console.log("\u91CD\u542F\u5BBF\u4E3B\u540E\u7528 vsl_runtime_info \u6838\u5BF9\u6784\u5EFA\u4E0E\u6A21\u5757\u3002");
+    return;
+  }
+  if ("configured" in result) {
+    const verb = action === "update" ? "\u66F4\u65B0" : "\u5B89\u88C5";
+    if (!result.configured) {
+      console.log(`\u2717 ${label} ${verb}\u672A\u901A\u8FC7\u9A8C\u8BC1\uFF0C\u7528 vsl doctor --host ${host} --json \u67E5\u770B\u8BCA\u65AD\u3002`);
+      return;
+    }
+    if ("unchanged" in result && result.unchanged) {
+      console.log(`\u2713 ${label} \u5DF2\u662F\u6700\u65B0\u5B89\u88C5\uFF08v${result.version}\uFF09\uFF0C\u65E0\u9700\u6539\u52A8\u3002`);
+      return;
+    }
+    console.log(`\u2713 ${label} ${verb}\u6210\u529F\uFF08v${result.version}\uFF09\uFF0C\u91CD\u542F\u5BBF\u4E3B\u540E\u751F\u6548\u3002`);
+    if (result.modules?.includes("code-review") && !result.crBinary)
+      console.log("\u63D0\u793A\uFF1A\u672A\u68C0\u6D4B\u5230 CR \u539F\u751F\u7A0B\u5E8F\uFF0C\u53EF\u7528 --cr-bin \u6307\u5B9A\u7EDD\u5BF9\u8DEF\u5F84\u540E\u91CD\u65B0 init\u3002");
+    if (host === "bitfun")
+      console.log("\u63D0\u793A\uFF1ABitFun \u547D\u4EE4\u9700\u8981 OpenCode \u517C\u5BB9\u6765\u6E90\uFF0C\u5728\u4F1A\u8BDD\u4E2D\u7528 /extensions \u542F\u7528\u3002");
+    return;
+  }
+  if ("removed" in result) {
+    console.log(result.removed ? `\u2713 ${label} \u5DF2\u5378\u8F7D\uFF0C\u91CD\u542F\u5BBF\u4E3B\u540E\u751F\u6548\u3002` : `\xB7 ${label} \u6CA1\u6709\u53D7\u7BA1\u5B89\u88C5\uFF0C\u672A\u505A\u6539\u52A8\u3002`);
+    return;
+  }
+  if ("recovered" in result) {
+    console.log(result.recovered ? `\u2713 ${label} \u5DF2\u6062\u590D\u5230\u5B89\u88C5\u524D\u72B6\u6001\uFF0C\u53EF\u91CD\u65B0\u8FD0\u884C init\u3002` : `\xB7 ${label} \u6CA1\u6709\u672A\u5B8C\u6210\u7684\u5B89\u88C5\uFF0C\u672A\u505A\u6539\u52A8\u3002`);
+    return;
+  }
+  console.log(JSON.stringify(result));
+}
 if (import.meta.main)
   await main().catch((error) => {
     if (error instanceof Error && error.name === "ExitPromptError") {

package/dist/hosts/bitfun-kernel/plugin.js

@@ -8,8 +8,8 @@ import { dirname, join, resolve } from "path";
 import { fileURLToPath } from "url";
 // assets/build.json
 var build_default = {
-  version: "0.0.1",
-  buildId: "bbceff2246e5fb0e4b93bb05081457dbc113400b937c6148764573618d8534b5"
+  version: "0.0.3",
+  buildId: "ef337ee398fc256793104c4499ace48c18f0fafa0cbcc08b37bab00956293888"
 };
 
 // src/runtime.ts

package/dist/hosts/claude-code/index.js

@@ -3,7 +3,7 @@
 var package_default = {
   $schema: "https://json.schemastore.org/package.json",
   name: "@bitfun-vsl/plugin",
-  version: "0.0.1",
+  version: "0.0.3",
   main: "./dist/index.js",
   types: "./dist/index.d.ts",
   type: "module",
@@ -559,8 +559,8 @@ import { dirname, join as join2, resolve as resolve2 } from "path";
 import { fileURLToPath } from "url";
 // assets/build.json
 var build_default = {
-  version: "0.0.1",
-  buildId: "bbceff2246e5fb0e4b93bb05081457dbc113400b937c6148764573618d8534b5"
+  version: "0.0.3",
+  buildId: "ef337ee398fc256793104c4499ace48c18f0fafa0cbcc08b37bab00956293888"
 };
 
 // src/runtime.ts

package/dist/hosts/deveco/plugin.js

@@ -8,8 +8,8 @@ import { dirname, join, resolve } from "path";
 import { fileURLToPath } from "url";
 // assets/build.json
 var build_default = {
-  version: "0.0.1",
-  buildId: "bbceff2246e5fb0e4b93bb05081457dbc113400b937c6148764573618d8534b5"
+  version: "0.0.3",
+  buildId: "ef337ee398fc256793104c4499ace48c18f0fafa0cbcc08b37bab00956293888"
 };
 
 // src/runtime.ts

package/dist/index.js

@@ -8,8 +8,8 @@ import { dirname, join, resolve } from "path";
 import { fileURLToPath } from "url";
 // assets/build.json
 var build_default = {
-  version: "0.0.1",
-  buildId: "bbceff2246e5fb0e4b93bb05081457dbc113400b937c6148764573618d8534b5"
+  version: "0.0.3",
+  buildId: "ef337ee398fc256793104c4499ace48c18f0fafa0cbcc08b37bab00956293888"
 };
 
 // src/runtime.ts

package/dist/install/index.d.ts

@@ -16,10 +16,13 @@ export declare function planInstallation(options: InstallOptions): Promise<{
     modules: string[];
     configDirectory: string;
     sourceIdentity: {
-        sha256: string;
-    } | {
         version: string;
         buildId: string;
+        sha256?: undefined;
+    } | {
+        version?: undefined;
+        buildId?: undefined;
+        sha256: string;
     };
     commandDirectory: string | undefined;
     configPath: string;
@@ -32,6 +35,8 @@ export declare function planInstallation(options: InstallOptions): Promise<{
     verified: boolean;
 }>;
 export declare function install(options: InstallOptions): Promise<{
+    version?: undefined;
+    buildId?: undefined;
     recoveryRequired: boolean;
     unchanged: boolean;
     installed: boolean;
@@ -40,8 +45,6 @@ export declare function install(options: InstallOptions): Promise<{
     verified: boolean;
     configDirectory: string;
     host?: undefined;
-    version?: undefined;
-    buildId?: undefined;
     modules?: undefined;
     installationId?: undefined;
     crBinary?: undefined;
@@ -68,6 +71,8 @@ export declare function install(options: InstallOptions): Promise<{
     verified: boolean;
     runtimeProof: string;
 } | {
+    version?: undefined;
+    buildId?: undefined;
     recoveryRequired: boolean;
     installed: boolean;
     configured: boolean;
@@ -75,8 +80,6 @@ export declare function install(options: InstallOptions): Promise<{
     verified: boolean;
     configDirectory: string;
     host?: undefined;
-    version?: undefined;
-    buildId?: undefined;
     modules?: undefined;
     installationId?: undefined;
     crBinary?: undefined;
@@ -103,6 +106,8 @@ export declare function install(options: InstallOptions): Promise<{
     runtimeProof: string;
 }>;
 export declare function doctor(options: InstallOptions): Promise<{
+    version?: undefined;
+    buildId?: undefined;
     installed: boolean;
     configured: boolean;
     loaded: string;
@@ -110,8 +115,6 @@ export declare function doctor(options: InstallOptions): Promise<{
     configDirectory: string;
     recoveryRequired: boolean;
     host?: undefined;
-    version?: undefined;
-    buildId?: undefined;
     modules?: undefined;
     installationId?: undefined;
     crBinary?: undefined;

package/dist/plugin/index.js

@@ -482,8 +482,8 @@ import { readFileSync, existsSync } from "fs";
 import { dirname, join as join2, resolve as resolve2 } from "path";
 // assets/build.json
 var build_default = {
-  version: "0.0.1",
-  buildId: "bbceff2246e5fb0e4b93bb05081457dbc113400b937c6148764573618d8534b5"
+  version: "0.0.3",
+  buildId: "ef337ee398fc256793104c4499ace48c18f0fafa0cbcc08b37bab00956293888"
 };
 
 // src/runtime.ts

package/docs/init-installation.md

@@ -1,17 +1,28 @@
 # init 安装与本地验证
 
-在 `D:\code\spec\vsl\plugin\bitfun_horizon_verify` 执行：
+正式安装使用 npm 官方包：
+
+```powershell
+npm install -g @bitfun-vsl/plugin
+vsl init
+```
+
+默认安装来源是 npm 官方源的 `@bitfun-vsl/plugin@<CLI 版本>`，宿主依赖锁定官方版本。
+
+本地构建的开发验证包是辅助方式，在 `D:\code\spec\vsl\plugin\bitfun_horizon_verify` 执行：
 
 ```powershell
 npm pack
-bun .\dist\cli\index.js init --package "$PWD\bitfun-vsl-plugin-0.0.1.tgz"
+bun .\dist\cli\index.js init --package "$PWD\bitfun-vsl-plugin-0.0.2.tgz"
 ```
 
 向导只有三个步骤：
 
 1. 多选宿主：DevEco Code、Claude Code、BitFun。空格勾选，方向键切换，`a` 全选。
 2. 多选模块：`trajectory-analysis`、`code-review` 默认全部勾选，可以取消不需要的模块。每个模块自带 Command、Agent、Skill、Tool，不单独选择资源。
-3. 显示宿主、模块与来源摘要，最后确认一次“是否执行安装？”。取消或 Ctrl+C 不执行安装。
+3. 显示宿主、模块与来源摘要，最后确认一次“第三步：确认按以上选择安装？”。取消或 Ctrl+C 不执行安装。
+
+确认后每个宿主只给一行结论（`✓ BitFun 安装成功（v<版本>），重启宿主后生效。` 或 `✗ BitFun 安装失败：<原因>`），不再打印插件位置、构建号和加载状态。需要细节时执行 `vsl doctor --host <宿主> --json`。
 
 `--package` 预设本地包来源，仍显示宿主和模块选择。`--host` / `--modules` 可跳过对应选择。`--yes` 用于自动化，要求显式指定宿主；`--json` 输出诊断 JSON。`--dry-run` 只计算安装信息，不修改配置，也不要求确认。
 
@@ -37,7 +48,7 @@ bitfun config external status
 
 BitFun 命令默认不带 `agent` 前置字段，保持已有适配约束；插件工具对原生主 Agent 不可见，由主 Agent 使用 Task 委派。插件激活仅限本地工作区。
 
-所有宿主读取同一次模块选择。未通过 init 安装的原生入口仍可使用，未配置模块选择时默认启用全部模块。全局 npm 安装仅提供 CLI，init 才会更新宿主真正读取的依赖。安装不会增加第二份 VSL 注册。
+所有宿主读取同一次模块选择。未通过 init 安装的原生入口仍可使用，未配置模块选择时默认启用全部模块。全局 npm 安装仅提供 CLI，init 才会更新宿主真正读取的依赖；init 默认从 npm 官方源安装 `@bitfun-vsl/plugin@<CLI 版本>`，`--package` 指定本地构建的 tgz，用于开发验证。安装不会增加第二份 VSL 注册。
 
 选择 `code-review` 时，init 自动检测本机原生 CR 并将绝对路径保存到安装运行时配置和收据，避免桌面宿主的 PATH 与终端不同导致 `cr-health` 找不到程序。`--cr-bin <绝对路径>` 可显式指定；检测不到时 CLI 会提示后续配置方法。更新后用 `doctor --json` 查看 `crBinary`，并完整重启宿主。
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@bitfun-vsl/plugin",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "type": "module",