@cjhyy/code-shell-core 0.7.0 → 0.8.0

package/dist/index.internal.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Internal host API for the in-repo TUI and desktop applications.
+ *
+ * This subpath is published so repository hosts can avoid private deep imports,
+ * but it is not a stable SDK or semver compatibility contract. External SDK
+ * consumers should import from `@cjhyy/code-shell-core` instead.
+ */
+export { getGraphemeSegmenter, firstGrapheme, lastGrapheme, getWordSegmenter, getRelativeTimeFormat, getTimeZone, getSystemLocaleLanguage, } from "./utils/intl.js";
+export { env } from "./utils/env.js";
+export { default as sliceAnsi } from "./utils/sliceAnsi.js";
+export { execFileNoThrow } from "./utils/execFileNoThrow.js";
+export { findExecutable, resolveExecutable, setGitPathOverride, resolveGit, isGitAvailable, resolveGitPath, } from "./utils/exec.js";
+export { gte } from "./utils/semver.js";
+export { lock, lockSync, unlock, check } from "./utils/lockfile.js";
+export { logForDebugging } from "./utils/debug.js";
+export { isEnvTruthy, isEnvDefinedFalsy, getClaudeConfigHomeDir, isBareMode, parseEnvVars, shouldMaintainProjectWorkingDir, getAWSRegion, getDefaultVertexRegion, getVertexRegionForModel, } from "./utils/envUtils.js";
+export { startCapturingEarlyInput, stopCapturingEarlyInput, consumeEarlyInput, hasEarlyInput, seedEarlyInput, isCapturingEarlyInput, } from "./utils/earlyInput.js";
+export { formatBytes, formatToolArgs, singleLine, MAX_LINE_WIDTH, TOOL_DOT_COLORS, } from "./utils/toolDisplay.js";
+export { classifyBashLines, type BashLineKind, type ClassifiedBashLine, } from "./tool-system/builtin/bash-output-style.js";
+export { formatDuration, formatTokens } from "./utils/format.js";
+export { getTheme, type Theme, type ThemeName, type ThemeSetting } from "./utils/theme.js";
+export { resolveThemeSetting, type SystemTheme } from "./utils/systemTheme.js";
+export { rotateLogs } from "./logging/logger.js";
+export { recordUIEvent } from "./logging/session-recorder.js";
+export { getInteractiveApprovalBackend } from "./tool-system/permission.js";
+export { defaultSandboxConfig, type SandboxConfig } from "./tool-system/sandbox/index.js";
+export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, type NotificationItem, } from "./tool-system/builtin/agent-notifications.js";
+export type { BackgroundAgentCompletedEvent } from "./types.js";
+export { startAutomation, type StartAutomationDeps, type AutomationHandle, CronScheduler, cronScheduler, type CronExecutionOutcome, type CronJob, type CronJobLifecycleEvent, type CronPermissionLevel, type CronTemplateSource, type CreateJobOptions, type UpdateJobPatch, CronStore, defaultCronStorePath, bindCronToEngine, bindCronToRunManager, type CronRunner, type CronRunRequest, type CronRunResult, type RunSubmitter, isCronExpression, parseCronExpression, nextCronTime, validateSchedule, type ParsedCron, resolveWritePolicy, wrapUntrustedInput, type WritePolicy, runWriteJobInWorktree, type WriteJobGitOps, type RunWriteJobInput, type RunWriteJobResult, } from "./automation/index.js";
+export { asyncAgentRegistry, type AsyncAgentEntry } from "./tool-system/builtin/agent-registry.js";
+export { backgroundShellManager, BackgroundShellManager, type BgShell, type BgShellStatus, } from "./runtime/background-shell.js";
+export { ENV_DENY_REGEX, ENV_ALLOWLIST } from "./runtime/spawn-common.js";
+export { getImageProvider, DEFAULT_IMAGE_MODEL, type ImageProvider, type ImageProviderCreds, type ImageGenerateRequest, type ImageGenerateResult, } from "./tool-system/builtin/image-providers.js";
+export { transcribe, type TranscribeCreds, type TranscribeRequest, type TranscribeResult, } from "./stt/transcribe.js";
+export { resolveTranscribeProvider, isTranscribeAvailable, describeTranscribe, type ResolvedTranscribeProvider, type TranscribeDescription, } from "./stt/resolve-transcribe.js";
+export { BUILTIN_CATALOG, getMergedCatalog, loadUserCatalog, userCatalogPath, findCatalogEntry, saveCatalogEntry, deleteUserCatalogEntry, catalogEntryOrigins, type CatalogEntry, } from "./model-catalog/index.js";
+export { createInProcessClient } from "./protocol/helpers.js";
+export type { ProtocolModelEntry } from "./protocol/types.js";
+export { type CachedModel, defaultCacheDir } from "./llm/model-cache.js";
+export { fetchModelList, type FetchResult } from "./llm/model-fetcher.js";
+export { sanitizeApiKey, hasNonAsciiPrintable } from "./llm/api-key-sanitize.js";
+export { PROVIDER_KINDS, type ProviderKindName } from "./llm/provider-kinds.js";
+export { capabilitiesFor, type Capability } from "./llm/capabilities/index.js";
+export { reasoningControlFor, type ReasoningControl, } from "./llm/capabilities/reasoning-control.js";
+export { REASONING_EFFORTS, type ReasoningSetting } from "./llm/reasoning-setting.js";
+export { type ProviderConfig } from "./llm/provider-catalog.js";
+export type { ApprovalRequest, ApprovalResult, ApprovalScope, TaskInfo } from "./types.js";
+export { fileCache } from "./tool-system/builtin/file-cache.js";
+export { validateToolArgs } from "./tool-system/validation.js";
+export { createOffBackend } from "./tool-system/sandbox/off.js";
+export { createFakeToolContext, createToolRegistryHarness, type FakeToolContextOptions, type ToolRegistryHarness, type ToolRegistryHarnessOptions, } from "./tool-system/testing/tool-registry-harness.js";
+export { sourceCatalogPath, listSourceDefinitions, readSourceDefinition, saveSourceDefinition, deleteSourceDefinition, } from "./sources/catalog.js";
+export { registerConnectorAdapter, connectorAdapterFor } from "./sources/adapter.js";
+export { mockAdapter } from "./sources/adapters/mock.js";
+export { LOCAL_FILES_SOURCE_ID, uploadsDir, localFilesSourceFor, resolveUploadTarget, localFilesAdapter, listLocalFiles, } from "./sources/adapters/local-files.js";
+export { createMcpResourceAdapter, defaultMcpResourceAdapter, } from "./sources/adapters/mcp-resource.js";
+export { listBindings, bindSource, unbindSource } from "./sources/binding.js";
+export { resolveEffectiveSourceAccess } from "./sources/resolve.js";
+export { defaultCredentialStatus } from "./sources/credential-status.js";
+export { buildSourcesContextSummary } from "./sources/context-summary.js";
+export { deleteWorkspaceProfile, listWorkspaceProfiles, readWorkspaceProfile, saveWorkspaceProfile, workspaceProfileDir, workspaceProfilesRoot, } from "./profile/store.js";
+export { activateWorkspaceProfile, deactivateWorkspaceProfile, profileOverridesFromDefinition, } from "./profile/activation.js";
+export { resolveActiveWorkspaceProfile, workspaceProfilePresetFor } from "./profile/resolve.js";
+export { addHumanRepo, listHumanRepoDetails, listHumanRepos, readAllHumanRepoEntries, removeHumanRepo, type HumanRepoListEntry, } from "./profile/catalog-store.js";
+export { type CatalogEntry as DigitalHumanCatalogSourceEntry, type CatalogTeam as DigitalHumanCatalogTeam, } from "./profile/catalog.js";
+export { CapabilityService } from "./capability-control/service.js";
+export { CapabilityNotFoundError } from "./capability-control/types.js";
+export { projectBuiltin, projectMcp, projectSkills, projectPlugins, } from "./capability-control/project.js";
+export { computeEffectiveDisabledLists } from "./capability-control/disabled-lists.js";
+export { installPluginFromPath, type InstallPluginFromPathOptions, } from "./plugins/installer/install.js";
+export { installPluginFromSource } from "./plugins/installer/installFromSource.js";
+export { installPluginFromNpm, resolveNpmPlugin, downloadVerifiedNpmTarball, NPM_PUBLIC_REGISTRY, MAX_NPM_METADATA_BYTES, type NpmPluginFetch, type NpmPluginInstallOptions, type ResolvedNpmPlugin, } from "./plugins/installer/installFromNpm.js";
+export { extractNpmTar, gunzipNpmTarball, MAX_NPM_TARBALL_BYTES, MAX_NPM_TAR_EXTRACTED_BYTES, MAX_NPM_TAR_FILE_BYTES, MAX_NPM_TAR_ENTRIES, MAX_NPM_TAR_PATH_BYTES, MAX_NPM_TAR_DEPTH, } from "./plugins/installer/npmTar.js";
+export { installLocalPlugin, installPluginFromArchive, } from "./plugins/installer/installFromArchive.js";
+export { installReviewedLocalPlugin, previewLocalPlugin, LocalPluginReviewChangedError, type LocalPluginHookPreview, type LocalPluginAutomationTemplatePreview, type LocalPluginInterfacePreview, type LocalPluginMcpPreview, type LocalPluginPreview, type LocalPluginPreviewWarning, type LocalPluginPreviewWarningKind, } from "./plugins/installer/preview.js";
+export { parseSource, parseNpmPluginSource, type ParsedSource, } from "./plugins/installer/parseSource.js";
+export { detectPluginFormat } from "./plugins/installer/detectFormat.js";
+export { uninstallPluginByName } from "./plugins/installer/uninstall.js";
+export { listInstalledPlugins, type PluginListRow } from "./plugins/installer/list.js";
+export { updatePluginByName, type UpdateResult } from "./plugins/installer/update.js";
+export { checkPluginUpdate, type UpdateCheck } from "./plugins/installer/checkUpdate.js";
+export { installPlugin, uninstallPlugin, listInstalled } from "./plugins/pluginInstaller.js";
+export { addMarketplace, refreshMarketplace, removeMarketplace, listMarketplaces, loadMarketplace, } from "./plugins/marketplaceManager.js";
+export { parseMarketplaceInput, deriveMarketplaceName } from "./plugins/parseMarketplaceInput.js";
+export { hasApiKey, resolveApiKey, appendOnboardingResult, detectEnvKeys, type OnboardingResult, } from "./onboarding.js";
+export { getCurrentVersion, checkForUpdate, scheduleAutoInstallOnExit, getUpdateAvailable, getAutoUpdateDisabledReason, type UpdateInfo, } from "./updater.js";

package/dist/index.internal.js

@@ -0,0 +1,92 @@
+/**
+ * Internal host API for the in-repo TUI and desktop applications.
+ *
+ * This subpath is published so repository hosts can avoid private deep imports,
+ * but it is not a stable SDK or semver compatibility contract. External SDK
+ * consumers should import from `@cjhyy/code-shell-core` instead.
+ */
+// ─── Utils (shared primitives used by TUI) ───────────────────────
+export { getGraphemeSegmenter, firstGrapheme, lastGrapheme, getWordSegmenter, getRelativeTimeFormat, getTimeZone, getSystemLocaleLanguage, } from "./utils/intl.js";
+export { env } from "./utils/env.js";
+export { default as sliceAnsi } from "./utils/sliceAnsi.js";
+export { execFileNoThrow } from "./utils/execFileNoThrow.js";
+export { findExecutable, resolveExecutable, setGitPathOverride, resolveGit, isGitAvailable, resolveGitPath, } from "./utils/exec.js";
+export { gte } from "./utils/semver.js";
+export { lock, lockSync, unlock, check } from "./utils/lockfile.js";
+export { logForDebugging } from "./utils/debug.js";
+export { isEnvTruthy, isEnvDefinedFalsy, getClaudeConfigHomeDir, isBareMode, parseEnvVars, shouldMaintainProjectWorkingDir, getAWSRegion, getDefaultVertexRegion, getVertexRegionForModel, } from "./utils/envUtils.js";
+export { startCapturingEarlyInput, stopCapturingEarlyInput, consumeEarlyInput, hasEarlyInput, seedEarlyInput, isCapturingEarlyInput, } from "./utils/earlyInput.js";
+export { formatBytes, formatToolArgs, singleLine, MAX_LINE_WIDTH, TOOL_DOT_COLORS, } from "./utils/toolDisplay.js";
+export { classifyBashLines, } from "./tool-system/builtin/bash-output-style.js";
+export { formatDuration, formatTokens } from "./utils/format.js";
+export { getTheme } from "./utils/theme.js";
+export { resolveThemeSetting } from "./utils/systemTheme.js";
+// ─── Logging (host lifecycle) ────────────────────────────────────
+export { rotateLogs } from "./logging/logger.js";
+export { recordUIEvent } from "./logging/session-recorder.js";
+// ─── Tool system and host services ───────────────────────────────
+export { getInteractiveApprovalBackend } from "./tool-system/permission.js";
+export { defaultSandboxConfig } from "./tool-system/sandbox/index.js";
+export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, } from "./tool-system/builtin/agent-notifications.js";
+export { startAutomation, CronScheduler, cronScheduler, CronStore, defaultCronStorePath, bindCronToEngine, bindCronToRunManager, isCronExpression, parseCronExpression, nextCronTime, validateSchedule, resolveWritePolicy, wrapUntrustedInput, runWriteJobInWorktree, } from "./automation/index.js";
+export { asyncAgentRegistry } from "./tool-system/builtin/agent-registry.js";
+export { backgroundShellManager, BackgroundShellManager, } from "./runtime/background-shell.js";
+export { ENV_DENY_REGEX, ENV_ALLOWLIST } from "./runtime/spawn-common.js";
+export { getImageProvider, DEFAULT_IMAGE_MODEL, } from "./tool-system/builtin/image-providers.js";
+export { transcribe, } from "./stt/transcribe.js";
+export { resolveTranscribeProvider, isTranscribeAvailable, describeTranscribe, } from "./stt/resolve-transcribe.js";
+export { BUILTIN_CATALOG, getMergedCatalog, loadUserCatalog, userCatalogPath, findCatalogEntry, saveCatalogEntry, deleteUserCatalogEntry, catalogEntryOrigins, } from "./model-catalog/index.js";
+// ─── Protocol extensions ─────────────────────────────────────────
+export { createInProcessClient } from "./protocol/helpers.js";
+// ─── LLM host extensions ─────────────────────────────────────────
+export { defaultCacheDir } from "./llm/model-cache.js";
+export { fetchModelList } from "./llm/model-fetcher.js";
+export { sanitizeApiKey, hasNonAsciiPrintable } from "./llm/api-key-sanitize.js";
+export { PROVIDER_KINDS } from "./llm/provider-kinds.js";
+export { capabilitiesFor } from "./llm/capabilities/index.js";
+export { reasoningControlFor, } from "./llm/capabilities/reasoning-control.js";
+export { REASONING_EFFORTS } from "./llm/reasoning-setting.js";
+export { fileCache } from "./tool-system/builtin/file-cache.js";
+export { validateToolArgs } from "./tool-system/validation.js";
+export { createOffBackend } from "./tool-system/sandbox/off.js";
+export { createFakeToolContext, createToolRegistryHarness, } from "./tool-system/testing/tool-registry-harness.js";
+// ─── Sources / WorkspaceProfile host surface (desktop main) ─────
+export { sourceCatalogPath, listSourceDefinitions, readSourceDefinition, saveSourceDefinition, deleteSourceDefinition, } from "./sources/catalog.js";
+export { registerConnectorAdapter, connectorAdapterFor } from "./sources/adapter.js";
+export { mockAdapter } from "./sources/adapters/mock.js";
+export { LOCAL_FILES_SOURCE_ID, uploadsDir, localFilesSourceFor, resolveUploadTarget, localFilesAdapter, listLocalFiles, } from "./sources/adapters/local-files.js";
+export { createMcpResourceAdapter, defaultMcpResourceAdapter, } from "./sources/adapters/mcp-resource.js";
+export { listBindings, bindSource, unbindSource } from "./sources/binding.js";
+export { resolveEffectiveSourceAccess } from "./sources/resolve.js";
+export { defaultCredentialStatus } from "./sources/credential-status.js";
+export { buildSourcesContextSummary } from "./sources/context-summary.js";
+export { deleteWorkspaceProfile, listWorkspaceProfiles, readWorkspaceProfile, saveWorkspaceProfile, workspaceProfileDir, workspaceProfilesRoot, } from "./profile/store.js";
+export { activateWorkspaceProfile, deactivateWorkspaceProfile, profileOverridesFromDefinition, } from "./profile/activation.js";
+export { resolveActiveWorkspaceProfile, workspaceProfilePresetFor } from "./profile/resolve.js";
+export { addHumanRepo, listHumanRepoDetails, listHumanRepos, readAllHumanRepoEntries, removeHumanRepo, } from "./profile/catalog-store.js";
+export { CapabilityService } from "./capability-control/service.js";
+export { CapabilityNotFoundError } from "./capability-control/types.js";
+export { projectBuiltin, projectMcp, projectSkills, projectPlugins, } from "./capability-control/project.js";
+export { computeEffectiveDisabledLists } from "./capability-control/disabled-lists.js";
+// ─── Host assembly: plugin installer / marketplace / onboarding / updater ──
+// Moved off the public root barrel in 0.8 (breaking): these are host
+// assembly surfaces (TUI/desktop install flows, self-update, first-run
+// onboarding), not part of the embeddable agent SDK. External embedders
+// should drive installs through their own host layer.
+export { installPluginFromPath, } from "./plugins/installer/install.js";
+export { installPluginFromSource } from "./plugins/installer/installFromSource.js";
+export { installPluginFromNpm, resolveNpmPlugin, downloadVerifiedNpmTarball, NPM_PUBLIC_REGISTRY, MAX_NPM_METADATA_BYTES, } from "./plugins/installer/installFromNpm.js";
+export { extractNpmTar, gunzipNpmTarball, MAX_NPM_TARBALL_BYTES, MAX_NPM_TAR_EXTRACTED_BYTES, MAX_NPM_TAR_FILE_BYTES, MAX_NPM_TAR_ENTRIES, MAX_NPM_TAR_PATH_BYTES, MAX_NPM_TAR_DEPTH, } from "./plugins/installer/npmTar.js";
+export { installLocalPlugin, installPluginFromArchive, } from "./plugins/installer/installFromArchive.js";
+export { installReviewedLocalPlugin, previewLocalPlugin, LocalPluginReviewChangedError, } from "./plugins/installer/preview.js";
+export { parseSource, parseNpmPluginSource, } from "./plugins/installer/parseSource.js";
+export { detectPluginFormat } from "./plugins/installer/detectFormat.js";
+export { uninstallPluginByName } from "./plugins/installer/uninstall.js";
+export { listInstalledPlugins } from "./plugins/installer/list.js";
+export { updatePluginByName } from "./plugins/installer/update.js";
+export { checkPluginUpdate } from "./plugins/installer/checkUpdate.js";
+export { installPlugin, uninstallPlugin, listInstalled } from "./plugins/pluginInstaller.js";
+export { addMarketplace, refreshMarketplace, removeMarketplace, listMarketplaces, loadMarketplace, } from "./plugins/marketplaceManager.js";
+export { parseMarketplaceInput, deriveMarketplaceName } from "./plugins/parseMarketplaceInput.js";
+export { hasApiKey, resolveApiKey, appendOnboardingResult, detectEnvKeys, } from "./onboarding.js";
+export { getCurrentVersion, checkForUpdate, scheduleAutoInstallOnExit, getUpdateAvailable, getAutoUpdateDisabledReason, } from "./updater.js";

package/dist/index.js

@@ -3,7 +3,7 @@
  *
  * Public API exports.
  */
-export const VERSION = "0.7.0";
+export const VERSION = "0.8.0";
 // ─── Exceptions ──────────────────────────────────────────────────
 export { FrameworkError, LLMError, LLMRateLimitError, ContextLimitError, ToolError, ToolNotFoundError, ToolExecutionError, ToolTimeoutError, PermissionDeniedError, SessionError, TranscriptError, ConfigError, SandboxUnavailableError, } from "./exceptions.js";
 // ─── Engine (primary API) ────────────────────────────────────────
@@ -13,7 +13,7 @@ export { resolveAuxKey } from "./engine/aux-key.js";
 export { parseAgentDefinition, serializeAgentDefinition, } from "./agent/agent-definition.js";
 export { AgentDefinitionRegistry } from "./agent/agent-definition-registry.js";
 export { EngineRuntime } from "./engine/runtime.js";
-export { ChatSessionManager } from "./protocol/chat-session-manager.js";
+export { ChatSessionManager, createChatSessionManager, LOCAL_CHAT_IDENTITY, } from "./protocol/chat-session-manager.js";
 // ─── LLM ─────────────────────────────────────────────────────────
 export { LLMClientBase } from "./llm/client-base.js";
 export { createLLMClient, registerProvider } from "./llm/client-factory.js";
@@ -25,12 +25,24 @@ export { modelEntriesFromConnections } from "./engine/model-connections-pool.js"
 export { ToolRegistry } from "./tool-system/registry.js";
 export { ToolExecutor } from "./tool-system/executor.js";
 export { PermissionClassifier, HeadlessApprovalBackend, AutoApprovalBackend, } from "./tool-system/permission.js";
-export { BUILTIN_TOOLS } from "./tool-system/builtin/index.js";
+export { BUILTIN_TOOLS, derivePresetExposure } from "./tool-system/builtin/index.js";
+export { fileCache, invalidateFileCache } from "./tool-system/builtin/file-cache.js";
+export { validateToolArgs, validateToolArgsStrict } from "./tool-system/validation.js";
+export { createOffBackend } from "./tool-system/sandbox/off.js";
+// ─── WorkspaceProfile（数字人）harness 元机制 ─────────────────────
+export { SKILL_REPO_RE, WORKSPACE_PROFILE_NAME_RE, WorkspaceProfileSchema, WorkspaceProfileRequirementsSchema, buildSkillInstallArgs, planProfileRequirements, summarizeSkillConflicts, } from "./profile/index.js";
+// ─── Workspace data sources ─────────────────────────────────────
+export { SOURCE_ID_RE, SOURCE_KINDS, SourceDefinitionSchema, WorkspaceSourceBindingSchema, } from "./sources/types.js";
+export { createFakeToolContext, createToolRegistryHarness, } from "./tool-system/testing/tool-registry-harness.js";
+export { registerCapability, unregisterCapability, listRegisteredCapabilities, } from "./capabilities/index.js";
 export { makeUpdateAutomationMemoryTool } from "./tool-system/builtin/update-automation-memory.js";
-export { MCPManager, buildHttpHeaders, buildStdioEnv } from "./tool-system/mcp-manager.js";
+export { MCPManager, buildHttpHeaders, buildStdioEnv, createMcpAuthenticatedFetch, } from "./tool-system/mcp-manager.js";
+export { registerExtensionModules, queryExtensionModules, } from "./tool-system/capability-module.js";
 // ─── Hooks ───────────────────────────────────────────────────────
 export { HookRegistry } from "./hooks/registry.js";
 export { wrapHookMessages } from "./hooks/inject.js";
+// ─── Trusted Panel App lifecycle ────────────────────────────────
+export { PanelAppLifecycleRuntime } from "./panel-apps/runtime.js";
 // ─── Protocol (client/server + transports) ──────────────────────
 export { AgentServer } from "./protocol/server.js";
 export { AgentClient } from "./protocol/client.js";
@@ -39,16 +51,16 @@ export { SocketTransport, listenTcp } from "./protocol/tcp-transport.js";
 // Recommended public factories — see protocol/factories.ts for the
 // stable construction contract referenced by standard §7.
 export { createServer, createClient, } from "./protocol/factories.js";
-export { Methods, ErrorCodes } from "./protocol/types.js";
+export { Methods, ErrorCodes, } from "./protocol/types.js";
 // ─── Session ─────────────────────────────────────────────────────
 export { Transcript } from "./session/transcript.js";
-export { SessionManager } from "./session/session-manager.js";
+export { SessionManager, sessionMainRoot, codeShellHome, sessionsRoot, buildForkState, buildForkTranscript, } from "./session/session-manager.js";
 export { FileHistory } from "./session/file-history.js";
-export { createWorktree, currentBranch, DEFAULT_WORKTREE_BRANCH_PREFIX, getWorktreeDiff, isManagedWorktreeBranch, isValidWorktreeBranchPrefix, findMainWorktreeRoot, listWorktrees, listWorktreesFast, normalizeWorktreeBranchPrefix, removeWorktree, validateWorktreeSlug, worktreeHasUncommittedOrAheadChanges, worktreeHasUncommittedChanges, } from "./git/worktree.js";
 export { latestUndoTarget, earliestSnapshotsPerFile, latestTurnUndoTargets, latestRedoTargets, } from "./session/undo-target.js";
 export { diffLines, renderDiffPreview } from "./session/simple-diff.js";
 export { MemoryManager } from "./session/memory.js";
 export { runDreamConsolidation, } from "./services/dream-consolidation.js";
+export { authorize, refreshToken, generatePKCE, createHardenedOAuthFetch, } from "./services/oauth.js";
 // ─── Prompt ──────────────────────────────────────────────────────
 export { PromptComposer } from "./prompt/composer.js";
 export { SectionCache } from "./prompt/section-cache.js";
@@ -62,43 +74,25 @@ export { estimateTokens, microcompact, windowCompact, truncateToolResult, buildS
 export { applyToolResultPersistence, createContentReplacementState, reconstructContentReplacementState, resolveToolResultsDir, isPersistedReplacement, DEFAULT_PERSIST_THRESHOLD, PER_MESSAGE_AGGREGATE_CAP, PREVIEW_SIZE, } from "./context/tool-result-storage.js";
 // ─── Skills ──────────────────────────────────────────────────────
 export { scanSkills, invalidateSkillCache } from "./skills/index.js";
-// ─── Capability control (扩展能力 backend) ───────────────────────
-export { CapabilityService, CapabilityNotFoundError, projectBuiltin, projectMcp, projectSkills, projectPlugins, } from "./capability-control/index.js";
 export { readInstalledPlugins } from "./plugins/installedPlugins.js";
-export { computeEffectiveDisabledLists, } from "./capability-control/disabled-lists.js";
-// ─── Plugin installer (CC + Codex) ───────────────────────────────
-export { installPluginFromPath } from "./plugins/installer/install.js";
-export { installPluginFromSource } from "./plugins/installer/installFromSource.js";
-export { installLocalPlugin, installPluginFromArchive, } from "./plugins/installer/installFromArchive.js";
-export { parseSource } from "./plugins/installer/parseSource.js";
-export { detectPluginFormat } from "./plugins/installer/detectFormat.js";
-export { CodexPluginManifest, CSMeta, PluginInstallError } from "./plugins/installer/types.js";
-export { mergePluginMcpServers } from "./plugins/installer/loadPluginMcp.js";
+// ─── Plugin manifests, trust & catalog (runtime surface) ────────
+export { CodexPluginManifest, PluginAutomationTemplate, PluginAutomationsManifest, CanonicalPluginManifest, CANONICAL_PLUGIN_MANIFEST_FILE, CSMeta, PluginInstallError, } from "./plugins/installer/types.js";
+export { normalizePluginManifest, readCanonicalPluginManifest, } from "./plugins/installer/normalizeManifest.js";
+export { mergePluginMcpServers, readPluginMcp } from "./plugins/installer/loadPluginMcp.js";
+export { approvePluginMcp, listPluginMcpTrust, revokePluginMcp, } from "./plugins/pluginMcpApproval.js";
+export { pluginMcpApprovalState, } from "./plugins/pluginMcpIntegrity.js";
+export { pluginsRoot } from "./plugins/installer/paths.js";
+export { PANEL_APP_ICONS, PANEL_APP_MANIFEST_FILE, PANEL_APP_PERMISSIONS, PanelAppManifest, PanelAppAlreadyInstalledError, PanelAppInstallError, PanelAppReviewChangedError, assertSafePanelAppId, installReviewedLocalPanelApp, installReviewedPanelAppUpdate, listInstalledPanelApps, panelAppInstallDir, panelAppsRegistryPath, panelAppsRoot, previewLocalPanelApp, previewInstalledPanelAppUpdate, isPanelAppBound, resolvePanelAppBindingPolicy, resolvePanelAppBindingProjectPath, uninstallPanelApp, } from "./panel-apps/index.js";
+export { previewLocalTheme, installReviewedLocalTheme, listInstalledThemes, uninstallTheme, themesRoot, themeInstallDir, assertSafeThemeName, ThemeInstallError, ThemeReviewChangedError, THEME_ASSET_DIR, THEME_VAR_NAMES, detectThemeImage, } from "./themes/index.js";
+export { resolveSafePluginPath } from "./plugins/pluginInstaller.js";
 export { listPluginHooks, pluginHookKey } from "./plugins/loadPluginHooks.js";
-export { describePluginContent } from "./plugins/pluginContent.js";
+export { approvePluginHooks, reviewPluginHooks, revokePluginHooks, } from "./plugins/pluginHookApproval.js";
+export { pluginHookApprovalState, } from "./plugins/pluginHookIntegrity.js";
+export { describePluginContent, } from "./plugins/pluginContent.js";
+export { loadPluginCatalog, loadPluginAutomationTemplateContributions, pluginAutomationTemplateRevision, } from "./plugins/pluginCatalog.js";
+export { instantiatePluginAutomationTemplate, MAX_PLUGIN_AUTOMATIONS, } from "./plugins/pluginAutomationTemplates.js";
 export { pluginAgentDirs } from "./plugins/installer/loadPluginAgents.js";
 export { appendInstallEntry, pluginInstallKey, removeInstallEntries, } from "./plugins/installedPlugins.js";
-export { uninstallPluginByName } from "./plugins/installer/uninstall.js";
-export { listInstalledPlugins } from "./plugins/installer/list.js";
-export { updatePluginByName } from "./plugins/installer/update.js";
-export { checkPluginUpdate } from "./plugins/installer/checkUpdate.js";
-// ─── Arena ───────────────────────────────────────────────────────
-export { Arena } from "./arena/arena.js";
-export { MODEL_PRESETS, getMaxOutputTokens } from "./arena/model-presets.js";
-export { detectArenaMode } from "./arena/detect-mode.js";
-export { getStrategy, getStrategyForPlan, ReviewStrategy, DiscussionStrategy, PlanningStrategy, } from "./arena/strategies/index.js";
-export { planArena } from "./arena/planner.js";
-export { collectEvidence } from "./arena/providers/index.js";
-export { selectTools, hasTools } from "./arena/tools/selector.js";
-export { ArenaLedger } from "./arena/ledger.js";
-export { registerClaims, selectClaimsForReview } from "./arena/phases/claim-registry.js";
-export { buildDigest, formatDigest } from "./arena/digest-builder.js";
-export { transitionClaim, resolveClaimStatus, markUnderReview, applyReviewResult, markUnresolved, isTerminal, validTransitions, } from "./arena/transitions.js";
-// ─── Arena: Iterate mode ────────────────────────────────────────
-// Multi-model authoring loop (tournament v1 → critique-revise rounds).
-// Use IterativeArena to produce a draft from scratch (code, PRD, design doc);
-// use Arena (above) to review an existing artifact.
-export { IterativeArena, defaultIterateConvergence, iterateDiffRatio, iterateCodeFormat, iterateDocumentFormat, getIterateFormat, } from "./arena/index.js";
 // ─── Run (Managed Agent Lifecycle) ──────────────────────────────
 export { 
 // Manager
@@ -127,101 +121,19 @@ export { migrateConfig, configVersionOf, CURRENT_CONFIG_VERSION, } from "./setti
 export { SettingsSchema, validateSettings } from "./settings/schema.js";
 export { settingsJsonSchema, writeSettingsSchemaFile } from "./settings/schema-export.js";
 export { personalizationFrom } from "./settings/personalization.js";
-export { CredentialStore, buildOAuthRefreshRequest, isOAuthAccessTokenExpired, oauthCredentialStatus, parseOAuthCredentialSecret, summarizeOAuthCredentialSecret, formatNetscapeCookies, parseCookieJar, useCredentialToolDef, useCredentialToolDefFor, sweepStaleCredentialCookies, getCredentialAccess, setDefaultCredentialAccess, createIpcCredentialAccess, localCredentialAccess, credentialAccessScope, isCredentialSecretAvailable, materializeCookieSecret, PlaintextCipher, setDefaultCredentialCipher, getDefaultCredentialCipher, } from "./credentials/index.js";
-// ─── State (runtime singletons shared with TUI) ──────────────────
-/** @internal Shared with the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { getSessionId, switchSession, getOriginalCwd, setOriginalCwd, getProjectRoot, setProjectRoot, getCwdState, getIsInteractive, updateLastInteractionTime, flushInteractionTime, markScrollActivity, } from "./state.js";
-// ─── Utils (shared primitives used by TUI) ───────────────────────
-/** @internal Shared primitives for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { getGraphemeSegmenter, firstGrapheme, lastGrapheme, getWordSegmenter, getRelativeTimeFormat, getTimeZone, getSystemLocaleLanguage, } from "./utils/intl.js";
-export { env } from "./utils/env.js";
-export { default as sliceAnsi } from "./utils/sliceAnsi.js";
-export { execFileNoThrow } from "./utils/execFileNoThrow.js";
-export { findExecutable, resolveExecutable, setGitPathOverride, resolveGit, isGitAvailable, resolveGitPath, } from "./utils/exec.js";
-export { gte } from "./utils/semver.js";
-// Cross-process file lock (proper-lockfile via createRequire, ESM-safe). Used by
-// RunLock / CronStore internally; exported so other writers of shared files
-// (e.g. desktop settings-service writing the same settings.json as the worker)
-// can take the same advisory lock.
-export { lock, lockSync, unlock, check } from "./utils/lockfile.js";
-export { logForDebugging } from "./utils/debug.js";
-export { isEnvTruthy, isEnvDefinedFalsy, getClaudeConfigHomeDir, isBareMode, parseEnvVars, shouldMaintainProjectWorkingDir, getAWSRegion, getDefaultVertexRegion, getVertexRegionForModel, } from "./utils/envUtils.js";
-export { startCapturingEarlyInput, stopCapturingEarlyInput, consumeEarlyInput, hasEarlyInput, seedEarlyInput, isCapturingEarlyInput, } from "./utils/earlyInput.js";
-export { formatBytes, formatToolArgs, singleLine, MAX_LINE_WIDTH, TOOL_DOT_COLORS, } from "./utils/toolDisplay.js";
-export { classifyBashLines, } from "./tool-system/builtin/bash-output-style.js";
-export { formatDuration, formatTokens } from "./utils/format.js";
-export { getTheme } from "./utils/theme.js";
-export { resolveThemeSetting } from "./utils/systemTheme.js";
-// ─── Logging (extended) ──────────────────────────────────────────
-/** @internal Host-lifecycle logging hooks for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { rotateLogs } from "./logging/logger.js";
-export { recordUIEvent } from "./logging/session-recorder.js";
+export { CredentialStore, buildOAuthRefreshRequest, isOAuthAccessTokenExpired, isBrowserOAuthLinkCredential, oauthCredentialStatus, parseOAuthCredentialSecret, resolveLinkCredentialAccessToken, mergeOAuthTokenResponse, shouldRefreshOAuthCredential, summarizeOAuthCredentialSecret, formatNetscapeCookies, parseCookieJar, useCredentialToolDef, useCredentialToolDefFor, sweepStaleCredentialCookies, getCredentialAccess, setDefaultCredentialAccess, createIpcCredentialAccess, localCredentialAccess, credentialAccessScope, credentialAllowsEnvExposure, credentialSecretHint, isCredentialSecretAvailable, materializeCookieSecret, PlaintextCipher, setDefaultCredentialCipher, getDefaultCredentialCipher, } from "./credentials/index.js";
+export { LOCAL_LINK_PROVIDERS, getLocalLinkProvider, listLocalLinkProviders, validateLocalLinkToken, connectCliLink, executeCliLinkAction, getCliLinkStatus, isCliLinkProvider, managedLinkCliPath, resolveLinkCliExecutable, runCliLinkCommand, linkActionToolDef, linkActionTool, isLinkActionAvailable, } from "./links/index.js";
 // ─── Cost Tracker ────────────────────────────────────────────────
 export { CostTracker, costTracker, installCostTracking } from "./cost-tracker.js";
 export { NOOP_COLORIZER } from "./colorizer.js";
-// ─── Onboarding ──────────────────────────────────────────────────
-export { hasApiKey, resolveApiKey, appendOnboardingResult, detectEnvKeys, saveArenaSettingsByKeys, } from "./onboarding.js";
-// ─── Updater ─────────────────────────────────────────────────────
-export { getCurrentVersion, checkForUpdate, scheduleAutoInstallOnExit, getUpdateAvailable, getAutoUpdateDisabledReason, } from "./updater.js";
-// ─── Git Utilities ───────────────────────────────────────────────
-export { isGitRepo, resolveProjectRoot, getCurrentBranch, getGitStatus, getGitDiff, getGitDiffStat, getGitLog, gitAdd, gitCommit, gitListBranches, gitCheckout, ghAvailable, ghPrComments, } from "./git/utils.js";
-// ─── Code review (TODO 7.3) ─────────────────────────────────────
-export { buildReviewPrompt, parseDimensions, ALL_DIMENSIONS, } from "./review/review-prompt.js";
-// ─── Tool-system (extended for TUI) ─────────────────────────────
-/**
- * @internal Exports below are consumed by the in-repo TUI/desktop hosts, not
- * part of the stable `@cjhyy/code-shell-core` SDK surface. They may change or
- * move to a `/tui` subpath without a major bump. External SDK users: prefer the
- * primary Engine/Protocol API above.
- */
-export { getInteractiveApprovalBackend } from "./tool-system/permission.js";
-export { defaultSandboxConfig } from "./tool-system/sandbox/index.js";
-export { buildNotificationMessage, buildNotificationSummary, notificationQueue, agentNotificationBus, notificationItemToStreamEvent, } from "./tool-system/builtin/agent-notifications.js";
-// Automation — zero-env-dependency scheduling module (startAutomation facade
-// + scheduler/store/runner). Hosts (Electron main, future CLI server) load
-// this and inject store + runner. See docs/automation-plan-2026-05-31.md.
-export { startAutomation, CronScheduler, cronScheduler, CronStore, defaultCronStorePath, bindCronToEngine, bindCronToRunManager, isCronExpression, parseCronExpression, nextCronTime, resolveWritePolicy, wrapUntrustedInput, runWriteJobInWorktree, } from "./automation/index.js";
-// CC orchestrator (external claude-cli rooms + CC-aware scheduling).
-export * from "./cc-orchestrator/index.js";
-// Quota — remaining CC/Codex subscription usage (self-contained, plugin-liftable).
-export { checkQuota, formatQuota } from "./quota/index.js";
-export { resolveQuotaCredentials } from "./quota/credentials.js";
-export { asyncAgentRegistry } from "./tool-system/builtin/agent-registry.js";
-export { backgroundShellManager, BackgroundShellManager, } from "./runtime/background-shell.js";
-export { ENV_DENY_REGEX, ENV_ALLOWLIST } from "./runtime/spawn-common.js";
-export { getImageProvider, DEFAULT_IMAGE_MODEL, } from "./tool-system/builtin/image-providers.js";
-// ─── Speech-to-text (voice input / 听写) ────────────────────────
-export { transcribe, } from "./stt/transcribe.js";
-export { resolveTranscribeProvider, isTranscribeAvailable, describeTranscribe, } from "./stt/resolve-transcribe.js";
-export { BUILTIN_CATALOG, getMergedCatalog, loadUserCatalog, userCatalogPath, findCatalogEntry, saveCatalogEntry, deleteUserCatalogEntry, catalogEntryOrigins, } from "./model-catalog/index.js";
-// ─── Protocol (extended for TUI) ────────────────────────────────
-/** @internal Extended protocol surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { createInProcessClient } from "./protocol/helpers.js";
-// ─── Arena (extended for TUI) ───────────────────────────────────
-/** @internal Extended Arena surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { formatArenaResult, printArenaResult, renderProgress, createProgressRenderer, } from "./arena/render/terminal.js";
-export { formatArenaResultForSession } from "./arena/render/session.js";
 // ─── Plugins ─────────────────────────────────────────────────────
-export { installPlugin, uninstallPlugin, listInstalled } from "./plugins/pluginInstaller.js";
-export { addMarketplace, refreshMarketplace, removeMarketplace, listMarketplaces, loadMarketplace, } from "./plugins/marketplaceManager.js";
-export { parseMarketplaceInput, deriveMarketplaceName } from "./plugins/parseMarketplaceInput.js";
-export { scanPluginCommands } from "./plugins/pluginCommandsLoader.js";
-// ─── LLM (extended for TUI) ─────────────────────────────────────
-/** @internal Extended LLM surface for the in-repo TUI/desktop hosts; not stable SDK surface. */
-export { defaultCacheDir } from "./llm/model-cache.js";
-export { fetchModelList } from "./llm/model-fetcher.js";
-export { sanitizeApiKey, hasNonAsciiPrintable } from "./llm/api-key-sanitize.js";
-export { PROVIDER_KINDS } from "./llm/provider-kinds.js";
-export { capabilitiesFor } from "./llm/capabilities/index.js";
-export { reasoningControlFor, } from "./llm/capabilities/reasoning-control.js";
-export { REASONING_EFFORTS } from "./llm/reasoning-setting.js";
+export { expandPluginCommandBody, describePluginCommands, scanPluginCommands, MAX_PLUGIN_COMMAND_FILE_BYTES, MAX_PLUGIN_COMMAND_ARGUMENT_CHARS, MAX_PLUGIN_COMMAND_EXPANDED_CHARS, } from "./plugins/pluginCommandsLoader.js";
 // ─── Data ────────────────────────────────────────────────────────
 export { syncOpenRouterCatalog, getOpenRouterSnapshot } from "./data/openrouter-sync.js";
 // ─── External agent config (Mobile Web Remote Rooms) ─────────────
 // Resolves the externalAgents settings block (notably claudeCode.trustedWorkspaces),
 // the source of truth for a Room's permission mode. The former /cc & /codex
 // managed-job path was removed — the phone now talks to resident Rooms only.
-export { resolveExternalAgentConfig } from "./external-agents/config.js";
 // ─── Browser automation bridge ───────────────────────────────────
 // Driver-agnostic contract + the pure a11y-tree flattener. The desktop host's
 // browser-driver module implements BrowserBridge on top of webContents.debugger

package/dist/links/cli.d.ts

@@ -0,0 +1,48 @@
+import type { LocalLinkValidationResult } from "./types.js";
+export type CliLinkProviderId = "github" | "gitlab" | "notion" | "todoist" | "vercel";
+export interface CliLinkStatus {
+    providerId: CliLinkProviderId;
+    command: string;
+    installed: boolean;
+    authenticated: boolean;
+    account?: string;
+    message?: string;
+}
+export interface CliLinkCommandResult {
+    stdout: string;
+    stderr: string;
+}
+export interface CliLinkRunOptions {
+    cwd?: string;
+    signal?: AbortSignal;
+    timeoutMs: number;
+    input?: string;
+}
+export type CliLinkCommandRunner = (providerId: CliLinkProviderId, command: string, args: string[], options: CliLinkRunOptions) => Promise<CliLinkCommandResult>;
+/** App-private CLI location. It never mutates the user's system PATH. */
+export declare function managedLinkCliPath(providerId: CliLinkProviderId): string;
+export declare function resolveLinkCliExecutable(providerId: CliLinkProviderId, fallbackCommand?: string): string;
+export declare const runCliLinkCommand: CliLinkCommandRunner;
+/**
+ * A CLI may switch accounts after Link was connected. Pin every Action to the
+ * originally approved account so a local CLI change cannot silently widen or
+ * redirect the Link connection.
+ */
+export declare function assertCliLinkAccount(providerId: CliLinkProviderId, expectedExternalAccountId: string, options?: {
+    cwd?: string;
+    signal?: AbortSignal;
+}, run?: CliLinkCommandRunner): Promise<void>;
+export declare function isCliLinkProvider(providerId: string): providerId is CliLinkProviderId;
+export declare function getCliLinkStatus(providerId: CliLinkProviderId, options?: {
+    cwd?: string;
+    signal?: AbortSignal;
+}, run?: CliLinkCommandRunner): Promise<CliLinkStatus>;
+export declare function connectCliLink(providerId: CliLinkProviderId, options: {
+    cwd?: string;
+    signal?: AbortSignal;
+    loginIfNeeded: boolean;
+}, run?: CliLinkCommandRunner): Promise<LocalLinkValidationResult>;
+export declare function executeCliLinkAction(providerId: CliLinkProviderId, actionId: string, params: Record<string, unknown>, options?: {
+    cwd?: string;
+    signal?: AbortSignal;
+}, run?: CliLinkCommandRunner): Promise<unknown>;