@fa-software/semi2-dsh 0.0.10-preview.20260920042705

package/cordis.patch.yml

@@ -0,0 +1,5 @@
+# @fa-software/semi2-dsh —— 单插件装配（三运行面共用）。
+# 运行面差异由插件内部的服务作用域注入表达，此处只有一行。
+- insert:
+    - id: semi2-dsh
+      name: '@fa-software/semi2-dsh'

package/lib/client.js

@@ -0,0 +1,351 @@
+window.__ModuleLoader__.load({
+	id: "@fa-software/semi2-dsh",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		let react = require("react");
+		let react_jsx_runtime = require("react/jsx-runtime");
+		//#region src/client/index.jsx
+		const inject = ["slots", "settingsScope"];
+		const styles = {
+			section: {
+				display: "flex",
+				flexDirection: "column",
+				gap: 12,
+				maxWidth: 720
+			},
+			title: {
+				margin: 0,
+				fontSize: 16,
+				fontWeight: 500
+			},
+			intro: {
+				margin: 0,
+				fontSize: 14,
+				opacity: .7
+			},
+			rows: {
+				display: "grid",
+				gridTemplateColumns: "max-content 1fr",
+				gap: "6px 16px",
+				margin: 0,
+				fontSize: 13
+			},
+			key: { opacity: .6 },
+			value: {
+				margin: 0,
+				overflowWrap: "anywhere"
+			},
+			error: {
+				margin: 0,
+				fontSize: 12,
+				color: "var(--dsw-alias-state-warn-label, #b45309)"
+			},
+			ok: {
+				margin: 0,
+				fontSize: 12,
+				color: "var(--dsw-alias-state-success-primary, #15803d)"
+			},
+			button: {
+				alignSelf: "flex-start",
+				padding: "6px 14px",
+				borderRadius: 8,
+				border: "0.5px solid var(--dsw-alias-border-l4, #d4d4d8)",
+				background: "transparent",
+				color: "inherit",
+				cursor: "pointer",
+				fontSize: 13
+			},
+			actions: {
+				display: "flex",
+				gap: 8
+			}
+		};
+		function Row({ label, value }) {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				style: styles.key,
+				children: label
+			}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				style: styles.value,
+				children: value ?? "—"
+			})] });
+		}
+		function readState(snapshot) {
+			const value = snapshot?.value;
+			return value && typeof value.status === "string" && value.status !== "" ? value : null;
+		}
+		const SURFACE_LABELS = {
+			cnb: "CNB",
+			container: "容器",
+			host: "宿主直跑"
+		};
+		function platformText(platform) {
+			return SURFACE_LABELS[platform] ?? platform ?? null;
+		}
+		/** 一次动作前后的状态签名：host 每次领取结束都会回写这三项（失败改 error）。 */
+		function signature(value) {
+			return value === null ? "" : `${value.status}|${value.loadedAt}|${value.error}`;
+		}
+		function Semi2Section({ scope }) {
+			const [snapshot, setSnapshot] = (0, react.useState)(() => scope.getSnapshot());
+			const [busy, setBusy] = (0, react.useState)(false);
+			const [error, setError] = (0, react.useState)(null);
+			const [url, setUrl] = (0, react.useState)("");
+			const [username, setUsername] = (0, react.useState)("");
+			const [password, setPassword] = (0, react.useState)("");
+			const [loginBusy, setLoginBusy] = (0, react.useState)(false);
+			const [loginError, setLoginError] = (0, react.useState)(null);
+			const [loginOk, setLoginOk] = (0, react.useState)(null);
+			(0, react.useEffect)(() => scope.subscribe(() => setSnapshot(scope.getSnapshot())), [scope]);
+			const state = readState(snapshot);
+			const urlValue = url || state?.consoleUrl || "";
+			const readOnlyCredentials = state?.credentialSource === "env" || state?.credentialSource === "runtime";
+			const connected = state !== null && (state.credentialSource !== "" || state.status !== "local");
+			const waitForChange = async (before) => {
+				const deadline = Date.now() + 2e4;
+				while (Date.now() < deadline) {
+					await new Promise((resolve) => setTimeout(resolve, 500));
+					const next = readState(scope.getSnapshot());
+					if (next !== null && signature(next) !== before) return;
+				}
+			};
+			const onLogin = async () => {
+				setLoginBusy(true);
+				setLoginError(null);
+				setLoginOk(null);
+				try {
+					const before = signature(state);
+					const response = await fetch("/semi2/login", {
+						method: "POST",
+						headers: { "content-type": "application/json" },
+						body: JSON.stringify({
+							url: urlValue,
+							username,
+							password
+						})
+					});
+					const body = await response.json().catch(() => ({}));
+					if (!response.ok) throw new Error(body.code ?? "LOGIN_FAILED");
+					setPassword("");
+					setLoginOk(`已登录 ${body.userName ?? ""}`.trim());
+					await waitForChange(before);
+				} catch (cause) {
+					setLoginError(cause?.message ?? String(cause));
+				} finally {
+					setLoginBusy(false);
+				}
+			};
+			const onLogout = async () => {
+				setLoginBusy(true);
+				setLoginError(null);
+				setLoginOk(null);
+				try {
+					const before = signature(state);
+					if (!(await fetch("/semi2/logout", { method: "POST" })).ok) throw new Error("LOGOUT_FAILED");
+					await waitForChange(before);
+				} catch (cause) {
+					setLoginError(cause?.message ?? String(cause));
+				} finally {
+					setLoginBusy(false);
+				}
+			};
+			const onReload = async () => {
+				setBusy(true);
+				setError(null);
+				try {
+					const before = signature(state);
+					await scope.set("reload", globalThis.crypto.randomUUID());
+					await waitForChange(before);
+				} catch (cause) {
+					setError(cause?.message ?? String(cause));
+				} finally {
+					setBusy(false);
+				}
+			};
+			const source = state == null ? "" : state.status === "ready" ? "semi2-hub 配置" : state.status === "failed" ? "未连接 semi2-hub（读取失败）" : "未连接 semi2-hub";
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				style: styles.section,
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
+						style: styles.title,
+						children: "Semi2 运行配置"
+					}),
+					connected ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+						style: styles.intro,
+						children: [
+							"配置由 ",
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: "@fa-software/semi2-dsh" }),
+							" 在启动时领取一次并保存在内存里，连不上 semi2-hub 时不做任何注入（一切按 DSH 自身配置运行）；同步会重取 semi2-hub 的全部插件配置与「已添加工作区」对应项目的配置（含技能目录），无需重启。 没有添加为工作区的项目不会被拉取。"
+						]
+					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: styles.intro,
+						children: "登录 semi2-hub 后领取运行配置。登录换取的令牌存进 dsh credentials，重启仍在；CNB 面由 secret import 注入的接入密钥（环境变量）优先，且不可在此登出。"
+					}),
+					state === null ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: styles.intro,
+						children: "读取中…"
+					}) : connected ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: styles.rows,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "来源",
+									value: source
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "状态",
+									value: state.status
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "semi2-hub",
+									value: state.consoleUrl
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "身份",
+									value: state.identity || null
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "凭据",
+									value: state.credentialSource === "env" ? "环境变量（部署注入，只读）" : state.credentialSource === "runtime" ? "运行面契约（部署 env，只读）" : state.credentialSource ? `dsh credentials（${state.credentialSource}）` : "未配置"
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "运行面",
+									value: platformText(state.platform)
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "启动目录",
+									value: state.startupDir
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "工作区数",
+									value: state.workspaceCount || null
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "工作区",
+									value: state.workspaces || null
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "项目数",
+									value: state.projectCount || null
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "工作区项目",
+									value: state.projects || null
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "模型",
+									value: state.model || null
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "技能目录",
+									value: state.skills ? `${state.skills} 条` : null
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+									label: "加载时间",
+									value: state.loadedAt
+								})
+							]
+						}),
+						state.status === "ready" && !state.error ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: styles.ok,
+							children: "已应用"
+						}) : null,
+						state.error ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+							style: styles.error,
+							children: ["最近失败：", state.error]
+						}) : null,
+						error ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: styles.error,
+							children: error
+						}) : null,
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: styles.actions,
+							children: [readOnlyCredentials ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								style: styles.button,
+								onClick: onLogout,
+								disabled: loginBusy,
+								children: loginBusy ? "退出中…" : "退出登录"
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								style: styles.button,
+								onClick: onReload,
+								disabled: busy,
+								children: busy ? "同步中…" : "同步"
+							})]
+						})
+					] }) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						style: styles.rows,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							style: styles.key,
+							children: "登录 semi2-hub"
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: {
+								display: "flex",
+								flexDirection: "column",
+								gap: 8
+							},
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									value: urlValue,
+									onChange: (event) => setUrl(event.target.value),
+									placeholder: "https://semi2-hub.example.com"
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										gap: 8
+									},
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										value: username,
+										onChange: (event) => setUsername(event.target.value),
+										placeholder: "用户名"
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "password",
+										value: password,
+										onChange: (event) => setPassword(event.target.value),
+										placeholder: "密码"
+									})]
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+									style: styles.actions,
+									children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										style: styles.button,
+										onClick: onLogin,
+										disabled: loginBusy || !urlValue || !username || !password,
+										children: loginBusy ? "登录中…" : "登录"
+									})
+								})
+							]
+						})]
+					}), loginError ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+						style: styles.error,
+						children: ["登录失败：", loginError]
+					}) : null] }),
+					loginOk ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: styles.ok,
+						children: loginOk
+					}) : null
+				]
+			});
+		}
+		function apply(ctx) {
+			const scope = ctx.settingsScope.bind({ namespace: "semi2" });
+			const Section = () => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Semi2Section, { scope });
+			ctx.slots.inject("settings.section", () => ctx.slots.register({
+				name: "settings.section",
+				id: "semi2",
+				order: 40,
+				label: () => "Semi2"
+			}, Section), "semi2-dsh: settings section");
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});
+
+//# sourceMappingURL=client.js.map

package/lib/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","names":["useState"],"sources":["../src/client/index.jsx"],"sourcesContent":["// @fa-software/semi2-dsh/client —— 设置页唯一 Semi2 分区（client 侧）。\n// 传输走官方 settings 命名空间 `semi2`（host 侧插件注册）：UI 写 `reload` 触发重新领取，状态经 `ctx.settingsScope` 订阅；不轮询、不订阅远程事件。\nimport { useEffect, useState } from \"react\";\n\nexport const inject = [\"slots\", \"settingsScope\"];\n\nconst styles = {\n  section: { display: \"flex\", flexDirection: \"column\", gap: 12, maxWidth: 720 },\n  title: { margin: 0, fontSize: 16, fontWeight: 500 },\n  intro: { margin: 0, fontSize: 14, opacity: 0.7 },\n  rows: {\n    display: \"grid\",\n    gridTemplateColumns: \"max-content 1fr\",\n    gap: \"6px 16px\",\n    margin: 0,\n    fontSize: 13,\n  },\n  key: { opacity: 0.6 },\n  value: { margin: 0, overflowWrap: \"anywhere\" },\n  error: { margin: 0, fontSize: 12, color: \"var(--dsw-alias-state-warn-label, #b45309)\" },\n  ok: { margin: 0, fontSize: 12, color: \"var(--dsw-alias-state-success-primary, #15803d)\" },\n  button: {\n    alignSelf: \"flex-start\",\n    padding: \"6px 14px\",\n    borderRadius: 8,\n    border: \"0.5px solid var(--dsw-alias-border-l4, #d4d4d8)\",\n    background: \"transparent\",\n    color: \"inherit\",\n    cursor: \"pointer\",\n    fontSize: 13,\n  },\n  actions: { display: \"flex\", gap: 8 },\n};\n\nfunction Row({ label, value }) {\n  return (\n    <>\n      <span style={styles.key}>{label}</span>\n      <p style={styles.value}>{value ?? \"—\"}</p>\n    </>\n  );\n}\n\n// 状态字段由 host 侧 STATUS_FIELDS（configuration/status.ts）定义：全为扁平标量字符串。\nfunction readState(snapshot) {\n  const value = snapshot?.value;\n  return value && typeof value.status === \"string\" && value.status !== \"\"\n    ? value\n    : null;\n}\n\n// 运行面原值（数据层只存 cnb / container / host）→ 展示标签。\nconst SURFACE_LABELS = { cnb: \"CNB\", container: \"容器\", host: \"宿主直跑\" };\n\nfunction platformText(platform) {\n  return SURFACE_LABELS[platform] ?? platform ?? null;\n}\n\n/** 一次动作前后的状态签名：host 每次领取结束都会回写这三项（失败改 error）。 */\nfunction signature(value) {\n  return value === null ? \"\" : `${value.status}|${value.loadedAt}|${value.error}`;\n}\n\nfunction Semi2Section({ scope }) {\n  const [snapshot, setSnapshot] = useState(() => scope.getSnapshot());\n  const [busy, setBusy] = useState(false);\n  const [error, setError] = useState(null);\n  const [url, setUrl] = useState(\"\");\n  const [username, setUsername] = useState(\"\");\n  const [password, setPassword] = useState(\"\");\n  const [loginBusy, setLoginBusy] = useState(false);\n  const [loginError, setLoginError] = useState(null);\n  const [loginOk, setLoginOk] = useState(null);\n\n  useEffect(() => scope.subscribe(() => setSnapshot(scope.getSnapshot())), [scope]);\n\n  const state = readState(snapshot);\n  // 登录表单默认带出当前 semi2-hub 地址（状态字段 consoleUrl）。\n  const urlValue = url || state?.consoleUrl || \"\";\n  // 凭据来源 env = 部署 env（CNB secret imports 等）、runtime = 运行面契约（部署 env）：两者只读；\n  // 其余（dsh credentials 存储）= 宿主直跑，可登录/登出。\n  const readOnlyCredentials =\n    state?.credentialSource === \"env\" || state?.credentialSource === \"runtime\";\n  // 已连接 = 有可用凭据：未连接时 host 状态恒为 local 且 credentialSource 为空。\n  const connected =\n    state !== null && (state.credentialSource !== \"\" || state.status !== \"local\");\n\n  // 等 host 回写新状态（最多 20s，覆盖领取的 15s 网络超时）；失败也会改 error，故不会空等。\n  const waitForChange = async (before) => {\n    const deadline = Date.now() + 20_000;\n    while (Date.now() < deadline) {\n      await new Promise((resolve) => setTimeout(resolve, 500));\n      const next = readState(scope.getSnapshot());\n      if (next !== null && signature(next) !== before) return;\n    }\n  };\n\n  const onLogin = async () => {\n    setLoginBusy(true);\n    setLoginError(null);\n    setLoginOk(null);\n    try {\n      const before = signature(state);\n      const response = await fetch(\"/semi2/login\", {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({ url: urlValue, username, password }),\n      });\n      const body = await response.json().catch(() => ({}));\n      if (!response.ok) throw new Error(body.code ?? \"LOGIN_FAILED\");\n      setPassword(\"\");\n      setLoginOk(`已登录 ${body.userName ?? \"\"}`.trim());\n      await waitForChange(before);\n    } catch (cause) {\n      setLoginError(cause?.message ?? String(cause));\n    } finally {\n      setLoginBusy(false);\n    }\n  };\n\n  const onLogout = async () => {\n    setLoginBusy(true);\n    setLoginError(null);\n    setLoginOk(null);\n    try {\n      const before = signature(state);\n      const response = await fetch(\"/semi2/logout\", { method: \"POST\" });\n      if (!response.ok) throw new Error(\"LOGOUT_FAILED\");\n      await waitForChange(before);\n    } catch (cause) {\n      setLoginError(cause?.message ?? String(cause));\n    } finally {\n      setLoginBusy(false);\n    }\n  };\n\n  const onReload = async () => {\n    setBusy(true);\n    setError(null);\n    try {\n      const before = signature(state);\n      await scope.set(\"reload\", globalThis.crypto.randomUUID());\n      await waitForChange(before);\n    } catch (cause) {\n      setError(cause?.message ?? String(cause));\n    } finally {\n      setBusy(false);\n    }\n  };\n\n  const source =\n    state == null\n      ? \"\"\n      : state.status === \"ready\"\n        ? \"semi2-hub 配置\"\n        : state.status === \"failed\"\n          ? \"未连接 semi2-hub（读取失败）\"\n          : \"未连接 semi2-hub\";\n  return (\n    <section style={styles.section}>\n      <h2 style={styles.title}>Semi2 运行配置</h2>\n      {connected ? (\n        <p style={styles.intro}>\n          配置由 <code>@fa-software/semi2-dsh</code> 在启动时领取一次并保存在内存里，连不上\n          semi2-hub 时不做任何注入（一切按 DSH 自身配置运行）；同步会重取 semi2-hub\n          的全部插件配置与「已添加工作区」对应项目的配置（含技能目录），无需重启。\n          没有添加为工作区的项目不会被拉取。\n        </p>\n      ) : (\n        <p style={styles.intro}>\n          登录 semi2-hub 后领取运行配置。登录换取的令牌存进 dsh credentials，重启仍在；CNB 面由 secret import 注入的接入密钥（环境变量）优先，且不可在此登出。\n        </p>\n      )}\n      {state === null ? (\n        <p style={styles.intro}>读取中…</p>\n      ) : connected ? (\n        <>\n          <div style={styles.rows}>\n            <Row label=\"来源\" value={source} />\n            <Row label=\"状态\" value={state.status} />\n            <Row label=\"semi2-hub\" value={state.consoleUrl} />\n            <Row label=\"身份\" value={state.identity || null} />\n            <Row\n              label=\"凭据\"\n              value={\n                state.credentialSource === \"env\"\n                  ? \"环境变量（部署注入，只读）\"\n                  : state.credentialSource === \"runtime\"\n                    ? \"运行面契约（部署 env，只读）\"\n                    : state.credentialSource\n                      ? `dsh credentials（${state.credentialSource}）`\n                      : \"未配置\"\n              }\n            />\n            <Row label=\"运行面\" value={platformText(state.platform)} />\n            <Row label=\"启动目录\" value={state.startupDir} />\n            <Row label=\"工作区数\" value={state.workspaceCount || null} />\n            <Row label=\"工作区\" value={state.workspaces || null} />\n            <Row label=\"项目数\" value={state.projectCount || null} />\n            <Row label=\"工作区项目\" value={state.projects || null} />\n            <Row label=\"模型\" value={state.model || null} />\n            <Row\n              label=\"技能目录\"\n              value={state.skills ? `${state.skills} 条` : null}\n            />\n            <Row label=\"加载时间\" value={state.loadedAt} />\n          </div>\n          {state.status === \"ready\" && !state.error ? <p style={styles.ok}>已应用</p> : null}\n          {state.error ? <p style={styles.error}>最近失败：{state.error}</p> : null}\n          {error ? <p style={styles.error}>{error}</p> : null}\n          <div style={styles.actions}>\n            {readOnlyCredentials ? null : (\n              <button type=\"button\" style={styles.button} onClick={onLogout} disabled={loginBusy}>\n                {loginBusy ? \"退出中…\" : \"退出登录\"}\n              </button>\n            )}\n            <button type=\"button\" style={styles.button} onClick={onReload} disabled={busy}>\n              {busy ? \"同步中…\" : \"同步\"}\n            </button>\n          </div>\n        </>\n      ) : (\n        <>\n          <div style={styles.rows}>\n            <span style={styles.key}>登录 semi2-hub</span>\n            <div style={{ display: \"flex\", flexDirection: \"column\", gap: 8 }}>\n              <input\n                value={urlValue}\n                onChange={(event) => setUrl(event.target.value)}\n                placeholder=\"https://semi2-hub.example.com\"\n              />\n              <div style={{ display: \"flex\", gap: 8 }}>\n                <input\n                  value={username}\n                  onChange={(event) => setUsername(event.target.value)}\n                  placeholder=\"用户名\"\n                />\n                <input\n                  type=\"password\"\n                  value={password}\n                  onChange={(event) => setPassword(event.target.value)}\n                  placeholder=\"密码\"\n                />\n              </div>\n              <div style={styles.actions}>\n                <button\n                  type=\"button\"\n                  style={styles.button}\n                  onClick={onLogin}\n                  disabled={loginBusy || !urlValue || !username || !password}\n                >\n                  {loginBusy ? \"登录中…\" : \"登录\"}\n                </button>\n              </div>\n            </div>\n          </div>\n          {loginError ? <p style={styles.error}>登录失败：{loginError}</p> : null}\n        </>\n      )}\n      {loginOk ? <p style={styles.ok}>{loginOk}</p> : null}\n    </section>\n  );\n}\n\nexport function apply(ctx) {\n  const scope = ctx.settingsScope.bind({ namespace: \"semi2\" });\n  const Section = () => <Semi2Section scope={scope} />;\n  ctx.slots.inject(\n    \"settings.section\",\n    () =>\n      ctx.slots.register(\n        {\n          name: \"settings.section\",\n          id: \"semi2\",\n          order: 40,\n          label: () => \"Semi2\",\n        },\n        Section,\n      ),\n    \"semi2-dsh: settings section\",\n  );\n}\n"],"mappings":";;;;;;;;;EAIA,MAAa,SAAS,CAAC,SAAS,eAAe;EAE/C,MAAM,SAAS;GACb,SAAS;IAAE,SAAS;IAAQ,eAAe;IAAU,KAAK;IAAI,UAAU;GAAI;GAC5E,OAAO;IAAE,QAAQ;IAAG,UAAU;IAAI,YAAY;GAAI;GAClD,OAAO;IAAE,QAAQ;IAAG,UAAU;IAAI,SAAS;GAAI;GAC/C,MAAM;IACJ,SAAS;IACT,qBAAqB;IACrB,KAAK;IACL,QAAQ;IACR,UAAU;GACZ;GACA,KAAK,EAAE,SAAS,GAAI;GACpB,OAAO;IAAE,QAAQ;IAAG,cAAc;GAAW;GAC7C,OAAO;IAAE,QAAQ;IAAG,UAAU;IAAI,OAAO;GAA6C;GACtF,IAAI;IAAE,QAAQ;IAAG,UAAU;IAAI,OAAO;GAAkD;GACxF,QAAQ;IACN,WAAW;IACX,SAAS;IACT,cAAc;IACd,QAAQ;IACR,YAAY;IACZ,OAAO;IACP,QAAQ;IACR,UAAU;GACZ;GACA,SAAS;IAAE,SAAS;IAAQ,KAAK;GAAE;EACrC;EAEA,SAAS,IAAI,EAAE,OAAO,SAAS;GAC7B,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;IAAM,OAAO,OAAO;IAAM,UAAA;GAAY,CAAA,GACtC,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;IAAG,OAAO,OAAO;IAAQ,UAAA,SAAS;GAAO,CAAA,CACzC,EAAA,CAAA;EAEN;EAGA,SAAS,UAAU,UAAU;GAC3B,MAAM,QAAQ,UAAU;GACxB,OAAO,SAAS,OAAO,MAAM,WAAW,YAAY,MAAM,WAAW,KACjE,QACA;EACN;EAGA,MAAM,iBAAiB;GAAE,KAAK;GAAO,WAAW;GAAM,MAAM;EAAO;EAEnE,SAAS,aAAa,UAAU;GAC9B,OAAO,eAAe,aAAa,YAAY;EACjD;;EAGA,SAAS,UAAU,OAAO;GACxB,OAAO,UAAU,OAAO,KAAK,GAAG,MAAM,OAAO,GAAG,MAAM,SAAS,GAAG,MAAM;EAC1E;EAEA,SAAS,aAAa,EAAE,SAAS;GAC/B,MAAM,CAAC,UAAU,gBAAA,GAAeA,MAAAA,SAAAA,OAAe,MAAM,YAAY,CAAC;GAClE,MAAM,CAAC,MAAM,YAAA,GAAWA,MAAAA,SAAAA,CAAS,KAAK;GACtC,MAAM,CAAC,OAAO,aAAA,GAAYA,MAAAA,SAAAA,CAAS,IAAI;GACvC,MAAM,CAAC,KAAK,WAAA,GAAUA,MAAAA,SAAAA,CAAS,EAAE;GACjC,MAAM,CAAC,UAAU,gBAAA,GAAeA,MAAAA,SAAAA,CAAS,EAAE;GAC3C,MAAM,CAAC,UAAU,gBAAA,GAAeA,MAAAA,SAAAA,CAAS,EAAE;GAC3C,MAAM,CAAC,WAAW,iBAAA,GAAgBA,MAAAA,SAAAA,CAAS,KAAK;GAChD,MAAM,CAAC,YAAY,kBAAA,GAAiBA,MAAAA,SAAAA,CAAS,IAAI;GACjD,MAAM,CAAC,SAAS,eAAA,GAAcA,MAAAA,SAAAA,CAAS,IAAI;GAE3C,CAAA,GAAA,MAAA,UAAA,OAAgB,MAAM,gBAAgB,YAAY,MAAM,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;GAEhF,MAAM,QAAQ,UAAU,QAAQ;GAEhC,MAAM,WAAW,OAAO,OAAO,cAAc;GAG7C,MAAM,sBACJ,OAAO,qBAAqB,SAAS,OAAO,qBAAqB;GAEnE,MAAM,YACJ,UAAU,SAAS,MAAM,qBAAqB,MAAM,MAAM,WAAW;GAGvE,MAAM,gBAAgB,OAAO,WAAW;IACtC,MAAM,WAAW,KAAK,IAAI,IAAI;IAC9B,OAAO,KAAK,IAAI,IAAI,UAAU;KAC5B,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,GAAG,CAAC;KACvD,MAAM,OAAO,UAAU,MAAM,YAAY,CAAC;KAC1C,IAAI,SAAS,QAAQ,UAAU,IAAI,MAAM,QAAQ;IACnD;GACF;GAEA,MAAM,UAAU,YAAY;IAC1B,aAAa,IAAI;IACjB,cAAc,IAAI;IAClB,WAAW,IAAI;IACf,IAAI;KACF,MAAM,SAAS,UAAU,KAAK;KAC9B,MAAM,WAAW,MAAM,MAAM,gBAAgB;MAC3C,QAAQ;MACR,SAAS,EAAE,gBAAgB,mBAAmB;MAC9C,MAAM,KAAK,UAAU;OAAE,KAAK;OAAU;OAAU;MAAS,CAAC;KAC5D,CAAC;KACD,MAAM,OAAO,MAAM,SAAS,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE;KACnD,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,MAAM,KAAK,QAAQ,cAAc;KAC7D,YAAY,EAAE;KACd,WAAW,OAAO,KAAK,YAAY,KAAK,KAAK,CAAC;KAC9C,MAAM,cAAc,MAAM;IAC5B,SAAS,OAAO;KACd,cAAc,OAAO,WAAW,OAAO,KAAK,CAAC;IAC/C,UAAU;KACR,aAAa,KAAK;IACpB;GACF;GAEA,MAAM,WAAW,YAAY;IAC3B,aAAa,IAAI;IACjB,cAAc,IAAI;IAClB,WAAW,IAAI;IACf,IAAI;KACF,MAAM,SAAS,UAAU,KAAK;KAE9B,IAAI,EAAC,MADkB,MAAM,iBAAiB,EAAE,QAAQ,OAAO,CAAC,EAAA,CAClD,IAAI,MAAM,IAAI,MAAM,eAAe;KACjD,MAAM,cAAc,MAAM;IAC5B,SAAS,OAAO;KACd,cAAc,OAAO,WAAW,OAAO,KAAK,CAAC;IAC/C,UAAU;KACR,aAAa,KAAK;IACpB;GACF;GAEA,MAAM,WAAW,YAAY;IAC3B,QAAQ,IAAI;IACZ,SAAS,IAAI;IACb,IAAI;KACF,MAAM,SAAS,UAAU,KAAK;KAC9B,MAAM,MAAM,IAAI,UAAU,WAAW,OAAO,WAAW,CAAC;KACxD,MAAM,cAAc,MAAM;IAC5B,SAAS,OAAO;KACd,SAAS,OAAO,WAAW,OAAO,KAAK,CAAC;IAC1C,UAAU;KACR,QAAQ,KAAK;IACf;GACF;GAEA,MAAM,SACJ,SAAS,OACL,KACA,MAAM,WAAW,UACf,iBACA,MAAM,WAAW,WACf,wBACA;GACV,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,WAAD;IAAS,OAAO,OAAO;IAAvB,UAAA;KACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD;MAAI,OAAO,OAAO;MAAO,UAAA;KAAc,CAAA;KACtC,YACC,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;MAAG,OAAO,OAAO;MAAjB,UAAA;OAAwB;OAClB,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAM,yBAA4B,CAAA;OAAC;MAItC;KAEH,CAAA,IAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,OAAO,OAAO;MAAO,UAAA;KAErB,CAAA;KAEJ,UAAU,OACT,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,OAAO,OAAO;MAAO,UAAA;KAAO,CAAA,IAC7B,YACF,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA;MACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,OAAO,OAAO;OAAnB,UAAA;QACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAK,OAAM;SAAK,OAAO;QAAS,CAAA;QAChC,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAK,OAAM;SAAK,OAAO,MAAM;QAAS,CAAA;QACtC,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAK,OAAM;SAAY,OAAO,MAAM;QAAa,CAAA;QACjD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAK,OAAM;SAAK,OAAO,MAAM,YAAY;QAAO,CAAA;QAChD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SACE,OAAM;SACN,OACE,MAAM,qBAAqB,QACvB,kBACA,MAAM,qBAAqB,YACzB,qBACA,MAAM,mBACJ,mBAAmB,MAAM,iBAAiB,KAC1C;QAEX,CAAA;QACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAK,OAAM;SAAM,OAAO,aAAa,MAAM,QAAQ;QAAI,CAAA;QACvD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAK,OAAM;SAAO,OAAO,MAAM;QAAa,CAAA;QAC5C,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAK,OAAM;SAAO,OAAO,MAAM,kBAAkB;QAAO,CAAA;QACxD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAK,OAAM;SAAM,OAAO,MAAM,cAAc;QAAO,CAAA;QACnD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAK,OAAM;SAAM,OAAO,MAAM,gBAAgB;QAAO,CAAA;QACrD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAK,OAAM;SAAQ,OAAO,MAAM,YAAY;QAAO,CAAA;QACnD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAK,OAAM;SAAK,OAAO,MAAM,SAAS;QAAO,CAAA;QAC7C,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SACE,OAAM;SACN,OAAO,MAAM,SAAS,GAAG,MAAM,OAAO,MAAM;QAC7C,CAAA;QACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;SAAK,OAAM;SAAO,OAAO,MAAM;QAAW,CAAA;OACvC;;MACJ,MAAM,WAAW,WAAW,CAAC,MAAM,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,OAAO,OAAO;OAAI,UAAA;MAAM,CAAA,IAAI;MAC1E,MAAM,QAAQ,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;OAAG,OAAO,OAAO;OAAjB,UAAA,CAAwB,SAAM,MAAM,KAAS;MAAI,CAAA,IAAA;MAC/D,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;OAAG,OAAO,OAAO;OAAQ,UAAA;MAAS,CAAA,IAAI;MAC/C,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,OAAO,OAAO;OAAnB,UAAA,CACG,sBAAsB,OACrB,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,OAAO,OAAO;QAAQ,SAAS;QAAU,UAAU;QACtE,UAAA,YAAY,SAAS;OAChB,CAAA,GAEV,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;QAAQ,MAAK;QAAS,OAAO,OAAO;QAAQ,SAAS;QAAU,UAAU;QACtE,UAAA,OAAO,SAAS;OACX,CAAA,CACL;;KACL,EAAA,CAAA,IAEF,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;MAAK,OAAO,OAAO;MAAnB,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;OAAM,OAAO,OAAO;OAAK,UAAA;MAAkB,CAAA,GAC3C,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;OAAK,OAAO;QAAE,SAAS;QAAQ,eAAe;QAAU,KAAK;OAAE;OAA/D,UAAA;QACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;SACE,OAAO;SACP,WAAW,UAAU,OAAO,MAAM,OAAO,KAAK;SAC9C,aAAY;QACb,CAAA;QACD,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;SAAK,OAAO;UAAE,SAAS;UAAQ,KAAK;SAAE;SAAtC,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;UACE,OAAO;UACP,WAAW,UAAU,YAAY,MAAM,OAAO,KAAK;UACnD,aAAY;SACb,CAAA,GACD,iBAAA,GAAA,kBAAA,IAAA,CAAC,SAAD;UACE,MAAK;UACL,OAAO;UACP,WAAW,UAAU,YAAY,MAAM,OAAO,KAAK;UACnD,aAAY;SACb,CAAA,CACE;;QACL,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;SAAK,OAAO,OAAO;SACjB,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;UACE,MAAK;UACL,OAAO,OAAO;UACd,SAAS;UACT,UAAU,aAAa,CAAC,YAAY,CAAC,YAAY,CAAC;UAEjD,UAAA,YAAY,SAAS;SAChB,CAAA;QACL,CAAA;OACF;MACF,CAAA,CAAA;KACJ,CAAA,GAAA,aAAa,iBAAA,GAAA,kBAAA,KAAA,CAAC,KAAD;MAAG,OAAO,OAAO;MAAjB,UAAA,CAAwB,SAAM,UAAc;KAAI,CAAA,IAAA,IAC9D,EAAA,CAAA;KAEH,UAAU,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;MAAG,OAAO,OAAO;MAAK,UAAA;KAAW,CAAA,IAAI;IACzC;;EAEb;EAEA,SAAgB,MAAM,KAAK;GACzB,MAAM,QAAQ,IAAI,cAAc,KAAK,EAAE,WAAW,QAAQ,CAAC;GAC3D,MAAM,gBAAgB,iBAAA,GAAA,kBAAA,IAAA,CAAC,cAAD,EAAqB,MAAQ,CAAA;GACnD,IAAI,MAAM,OACR,0BAEE,IAAI,MAAM,SACR;IACE,MAAM;IACN,IAAI;IACJ,OAAO;IACP,aAAa;GACf,GACA,OACF,GACF,6BACF;EACF"}

package/lib/codegraph/cli.js

@@ -0,0 +1,142 @@
+// @fa-software/semi2-dsh/codegraph/cli —— 通过 dsh subprocess seam 执行 codegraph CLI。
+import { existsSync, readFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+/** subprocess 收集完整 stdout 的上限；超限明确失败，不把不完整图谱当真。 */
+const MAX_OUTPUT_BYTES = 16 * 1024 * 1024;
+const STDERR_MAX_BYTES = 64 * 1024;
+const GRACE_MS = 2_000;
+export class CodegraphCliError extends Error {
+    exitCode;
+    constructor(message, exitCode, options) {
+        super(message, options);
+        this.exitCode = exitCode;
+    }
+}
+export function stripAnsi(text) {
+    return text.replace(/\x1B\[[0-9;]*[A-Za-z]/g, '');
+}
+/** 仅供短诊断文本使用；模型结果不在插件内截断，交给 dsh spill policy。 */
+export function truncateText(text, max) {
+    if (text.length <= max)
+        return text;
+    return text.slice(0, max) + '\n... [truncated] ...';
+}
+function detailOf(stderr, stdout) {
+    const detail = stderr.trim() !== '' ? stderr.trim() : stdout.trim();
+    return truncateText(detail, 2_000);
+}
+let dependencyBin;
+let dependencyBinResolved = false;
+/** 依赖自带的 bin；exports 可能不暴露 package.json，从入口向上寻找包根。 */
+function resolveDependencyBin() {
+    if (dependencyBinResolved)
+        return dependencyBin;
+    dependencyBinResolved = true;
+    try {
+        const require = createRequire(import.meta.url);
+        let dir = dirname(require.resolve('@colbymchenry/codegraph'));
+        for (let i = 0; i < 8 && dir !== ''; i++) {
+            const pkgPath = join(dir, 'package.json');
+            if (existsSync(pkgPath)) {
+                const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+                if (pkg.name === '@colbymchenry/codegraph') {
+                    const bin = typeof pkg.bin === 'string' ? pkg.bin : pkg.bin?.['codegraph'];
+                    if (bin !== undefined) {
+                        dependencyBin = join(dir, bin);
+                        return dependencyBin;
+                    }
+                }
+            }
+            const parent = dirname(dir);
+            if (parent === dir)
+                break;
+            dir = parent;
+        }
+    }
+    catch {
+        // 裁剪安装可能没有依赖自带 bin，执行世界仍可从 PATH 解析。
+    }
+    return undefined;
+}
+/** 测试与诊断只判断显式覆盖或依赖自带 bin；PATH 由 subprocess 执行世界解析。 */
+export function resolveCodegraphBin() {
+    const override = process.env.SEMI2_CODEGRAPH_BIN;
+    if (override !== undefined && override !== '')
+        return override;
+    return resolveDependencyBin();
+}
+export const CODEGRAPH_MISSING_HINT = 'codegraph CLI 不可用：执行环境 PATH 与插件依赖里都没有可执行文件。' +
+    '请安装 @colbymchenry/codegraph，或设 SEMI2_CODEGRAPH_BIN 指向可执行文件。';
+async function executable(subprocess, signal) {
+    const configured = process.env.SEMI2_CODEGRAPH_BIN;
+    if (configured !== undefined && configured !== '') {
+        return subprocess.resolveExecutable(configured, undefined, signal);
+    }
+    try {
+        return await subprocess.resolveExecutable('codegraph', undefined, signal);
+    }
+    catch (pathError) {
+        const bundled = resolveDependencyBin();
+        if (bundled === undefined)
+            throw new CodegraphCliError(CODEGRAPH_MISSING_HINT, null, { cause: pathError });
+        try {
+            return await subprocess.resolveExecutable(bundled, undefined, signal);
+        }
+        catch (dependencyError) {
+            throw new CodegraphCliError(CODEGRAPH_MISSING_HINT, null, { cause: dependencyError });
+        }
+    }
+}
+/** 创建绑定到 dsh 执行世界的 runner；取消和插件卸载均由 subprocess provider 管理进程范围。 */
+export function createCodegraphRunner(subprocess) {
+    return async (argv, options = {}) => {
+        const bin = await executable(subprocess, options.signal);
+        const cwd = options.cwd ?? process.cwd();
+        let handle;
+        try {
+            handle = subprocess.spawn({
+                argv: [bin, ...argv],
+                cwd,
+                stdio: {
+                    stdin: 'ignore',
+                    stdout: { maxBytes: MAX_OUTPUT_BYTES },
+                    stderr: { maxBytes: STDERR_MAX_BYTES },
+                },
+                graceMs: GRACE_MS,
+                ...(options.signal === undefined ? {} : { signal: options.signal }),
+                env: {
+                    DO_NOT_TRACK: '1',
+                    CODEGRAPH_TELEMETRY: '0',
+                    ...(options.noDaemon === true ? { CODEGRAPH_NO_DAEMON: '1' } : {}),
+                },
+            });
+        }
+        catch (error) {
+            throw new CodegraphCliError(`codegraph 启动失败：${error instanceof Error ? error.message : String(error)}`, null, { cause: error });
+        }
+        let outcome;
+        try {
+            outcome = await handle.done;
+        }
+        catch (error) {
+            throw new CodegraphCliError('codegraph 执行器未返回进程结果', null, { cause: error });
+        }
+        const stdout = handle.collected.stdout?.readFrom(0);
+        const stderr = handle.collected.stderr?.readFrom(0);
+        if (stdout === undefined || stderr === undefined)
+            throw new CodegraphCliError('codegraph 执行器没有收集输出流', outcome.exitCode);
+        if (stdout.lossy)
+            throw new CodegraphCliError(`codegraph 输出超过 ${MAX_OUTPUT_BYTES} 字节上限`, outcome.exitCode);
+        const out = stripAnsi(stdout.text);
+        const err = stripAnsi(stderr.text);
+        if (outcome.signal !== null || outcome.exitCode === null) {
+            throw new CodegraphCliError(`codegraph 被信号 ${outcome.signal ?? 'unknown'} 终止`, null);
+        }
+        if (outcome.exitCode !== 0) {
+            const detail = detailOf(err, out);
+            throw new CodegraphCliError(detail !== '' ? `codegraph 退出码 ${outcome.exitCode}：${detail}` : `codegraph 退出码 ${outcome.exitCode}`, outcome.exitCode);
+        }
+        return out;
+    };
+}

package/lib/codegraph/config.js

@@ -0,0 +1,22 @@
+import { SEMI2_RUNTIME_SERVICE } from "../contract.js";
+/** 契约平台**懒取**：apply 期适配器可能还没 provide（配置轮询同理），只在决策点读。 */
+export function platformOf(ctx) {
+    const runtime = ctx.get(SEMI2_RUNTIME_SERVICE, false);
+    return runtime === undefined ? 'host' : runtime.platform;
+}
+function override(env, key) {
+    const value = env[key];
+    if (value === '1' || value === 'true')
+        return true;
+    if (value === '0' || value === 'false')
+        return false;
+    return undefined;
+}
+/** 总开关：SEMI2_CODEGRAPH=0 整块能力 no-op（宿主不想用时的退出阀）。 */
+export function moduleDisabled(env) {
+    return override(env, 'SEMI2_CODEGRAPH') === false;
+}
+/** 自动索引默认值：运行面容器（cnb/container）= 开（无人可替它决定）；宿主 = 关（索引是用户的决定）。 */
+export function autoIndexEnabled(platform, env) {
+    return override(env, 'SEMI2_CODEGRAPH_AUTOINDEX') ?? platform !== 'host';
+}

package/lib/codegraph/ensure.js

@@ -0,0 +1,25 @@
+import { ensureGitExclude } from "./workspace.js";
+const inflight = new WeakMap();
+function runsFor(run) {
+    let runs = inflight.get(run);
+    if (runs === undefined) {
+        runs = new Map();
+        inflight.set(run, runs);
+    }
+    return runs;
+}
+/** 确保目录已建索引；同一 runner/root 的并发初始化共享一次执行，signal 只接受插件生命周期所有者。 */
+export function ensureIndex(run, root, signal) {
+    const runs = runsFor(run);
+    const existing = runs.get(root);
+    if (existing !== undefined)
+        return existing;
+    const tracked = (async () => {
+        await run(['init', '--yes', root], { cwd: root, noDaemon: true, ...(signal === undefined ? {} : { signal }) });
+        ensureGitExclude(root);
+    })().finally(() => {
+        runs.delete(root);
+    });
+    runs.set(root, tracked);
+    return tracked;
+}

package/lib/codegraph/guide.js

@@ -0,0 +1,21 @@
+const CODEGRAPH_SECTION = 'tool:codegraph';
+export const CODEGRAPH_GUIDE = 'CodeGraph provides indexed repository structure and symbol relationships. Filesystem tools provide exact ' +
+    'file contents and literal text search. CodeGraph uses the local .codegraph index of the selected workspace. Relative paths resolve from the ' +
+    'current session workspace, and indexes are not inherited from ancestor directories.';
+/** 注册范围感知指引；工具在当前 agent 不可见时不向模型描述它。 */
+export function registerGuide(ctx, warn) {
+    try {
+        const registry = ctx.get('systemPrompt');
+        if (registry === undefined)
+            return () => { };
+        return registry.section({
+            name: CODEGRAPH_SECTION,
+            order: registry.getSectionOrder('TOOL_READ') - 1,
+            text: ({ scope }) => ctx.tools.get('codegraph_explore', scope) === undefined ? '' : CODEGRAPH_GUIDE,
+        });
+    }
+    catch (error) {
+        warn(`codegraph guide register failed: ${error instanceof Error ? error.message : String(error)}`);
+        return () => { };
+    }
+}