@lesliechan721/aw 0.1.0-beta.10 → 0.1.0-beta.12

package/dist/src/tui/controller-runtime.js

@@ -2,13 +2,20 @@ import crypto from 'node:crypto';
 import path from 'node:path';
 import { statusCommandV7, statusTargetIntent, } from '../commands/status-v6.js';
 import { addCatalogSourceCommand, listCatalogSources, preflightCatalogSourceMutation, removeCatalogSourceCommand, setPrimaryCatalogSourceCommand, updateCatalogSourceCommand, } from '../commands/catalog-source.js';
-import { cleanupWriteCommand, installWriteCommand, reinstallWriteCommand, syncWriteCommand, uninstallWriteCommand, } from '../commands/write-commands.js';
+import { cleanupWriteCommand, failedWriteCommandResult, installWriteCommand, mergeWriteCommandResults, reinstallWriteCommand, syncWriteCommand, uninstallWriteCommand, } from '../commands/write-commands.js';
+import { resolveSyncIntentSelection } from '../commands/sync-command.js';
+import { parseScriptTimeoutMs, SCRIPT_TIMEOUT_DEFAULT_MS, } from '../commands/options.js';
 import { readCliPackageInfo } from '../utils/local-marketplace.js';
+import { createCodexNativeObservationSession, } from '../utils/codex-native-observation.js';
 import { readCatalogSourcesConfigSnapshot, recoverInvalidCatalogSourcesConfig, } from '../utils/catalog-sources.js';
 import { withResolvedCatalogPlugin, withResolvedMultiSourceCatalog, formatPluginId, parsePluginId, } from '../utils/multi-source-catalog.js';
-import { coercePluginConfigUpdates, inspectPluginConfigResetTarget, readPluginConfigStore, resolveConfigRead, resolveEffectivePluginConfig, } from '../utils/plugin-config.js';
-import { applyPluginConfigWrite, replayConfigRuntimeWrites, resetPluginConfigWithHelper, } from '../utils/plugin-config-write.js';
-import { offlineCleanupEvidenceFromInventory, } from '../commands/offline-cleanup-evidence.js';
+import { coercePluginConfigUpdates, inspectPluginConfigResetTarget, listNamespacedPluginConfigStoreIdentities, readPluginConfigStore, resolveConfigRead, resolveEffectivePluginConfig, resolvePluginConfigStorePath, } from '../utils/plugin-config.js';
+import { assertProjectSharedConfigPathVisible } from '../utils/project-boundary.js';
+import { readPluginIntentState } from '../utils/plugin-intent-state.js';
+import { applyPluginConfigWrite, replayConfigRuntimeWrites, resolveConfigPreApplyAuthorization, resetPluginConfigWithHelper, } from '../utils/plugin-config-write.js';
+import { analyzePluginConfigMutationImpact } from '../utils/plugin-config-impact.js';
+import { createBatchIntentCompatiblePlanFingerprint } from '../commands/operation-plan.js';
+import { offlineCleanupEvidenceFromInventory, offlineCleanupEvidenceMatches, } from '../commands/offline-cleanup-evidence.js';
 import { inventoryCatalogSourceReferences } from '../utils/catalog-source-references.js';
 import { operationEvidenceMatches, operationEvidenceFingerprint, TuiConfigInvalidStoreError, TuiController, TuiOperationBlockedError, } from './controller.js';
 import { buildConfigGroups, buildConfigPage, projectPlatformPlacement, } from './model.js';
@@ -112,16 +119,32 @@ export function configAffectedStatusTargets(targets, pluginId, configScope) {
         .sort((left, right) => `${left.platform}\0${left.scope}`
         .localeCompare(`${right.platform}\0${right.scope}`, 'en'));
 }
-function configSharedNativeRenderTargets(plugin, changedKeys) {
-    const changed = new Set(changedKeys);
+function configRetrySharedNativeRenderTargets(plugin) {
     return (plugin.manifest.artifacts?.targets ?? []).flatMap((target) => target.platform === 'codex'
         && target.target === 'codex.skill'
         && target.delivery.mode === 'codex-native'
         && target.skillKey
-        && target.refreshKeys.some((key) => changed.has(key))
+        && target.refreshKeys.length > 0
         ? [{ id: target.id, skillKey: target.skillKey, refreshKeys: [...target.refreshKeys] }]
         : []);
 }
+function configImpactVisibleTargets(pluginName, targets) {
+    return targets.map((target) => ({
+        pluginName,
+        platform: target.platform,
+        scope: target.scope,
+    }));
+}
+function configIntentRequestsApply(intent) {
+    if (!intent.apply)
+        return false;
+    if (intent.retryApply === true)
+        return true;
+    if (intent.changes)
+        return intent.changes.length > 0;
+    return Object.keys(intent.updates ?? {}).length > 0
+        || (intent.removeKeys?.length ?? 0) > 0;
+}
 function operationReviewStale(message) {
     return new TuiOperationBlockedError('operationReviewStale', `operationReviewStale: ${message}`);
 }
@@ -130,6 +153,7 @@ function sourceEvidenceForPlugin(source, pluginName) {
     return {
         sourceId: source.sourceId,
         sourceIdentity: source.sourceIdentity,
+        logicalIdentity: source.logicalIdentity,
         requestedRef: source.requestedRef,
         resolvedCommit: source.resolvedCommit,
         manifestDigest: source.manifestDigest,
@@ -140,9 +164,27 @@ function sourceEvidenceForPlugin(source, pluginName) {
         channel: source.manifest.channel,
     };
 }
+async function inspectConfigShareability(options) {
+    if (options.scope !== 'project')
+        return undefined;
+    const targetPath = resolvePluginConfigStorePath({
+        sourceId: options.sourceId,
+        pluginName: options.pluginName,
+        scope: 'project',
+        cwd: options.cwd,
+        env: options.env,
+    });
+    const visibility = await assertProjectSharedConfigPathVisible({
+        cwd: options.cwd,
+        targetPath,
+        env: options.env,
+    });
+    return visibility.state === 'unverified' ? 'unverified' : 'verified';
+}
 function assertSourceEvidenceMatches(expected, actual) {
     if (actual.sourceId !== expected.sourceId
         || actual.sourceIdentity !== expected.sourceIdentity
+        || actual.logicalIdentity !== expected.logicalIdentity
         || actual.resolvedCommit !== expected.resolvedCommit
         || actual.manifestDigest !== expected.manifestDigest
         || actual.snapshotDigest !== expected.snapshotDigest
@@ -150,10 +192,12 @@ function assertSourceEvidenceMatches(expected, actual) {
         throw operationReviewStale('确认后来源内容发生变化。');
     }
 }
-function throwIfWriteReviewStale(result) {
-    const stale = result.targetResults.find((target) => target.errorCode === 'operationReviewStale'
+function writeReviewIsStale(result) {
+    return result.targetResults.some((target) => target.errorCode === 'operationReviewStale'
         || target.errorCode === 'operationPlanStale');
-    if (stale) {
+}
+function throwIfWriteReviewStale(result) {
+    if (writeReviewIsStale(result)) {
         throw operationReviewStale('确认后实际写入计划发生变化。');
     }
 }
@@ -163,6 +207,122 @@ const SOURCE_PROGRESS_PHASES = {
 function pluginIntent(intent) {
     return 'pluginId' in intent;
 }
+function reviewedScriptTimeoutMs(intent) {
+    if ((intent.kind === 'pluginWrite' || intent.kind === 'pluginWriteBatch')
+        && (intent.action === 'install' || intent.action === 'refreshAndSync'
+            || intent.action === 'reinstall' || intent.action === 'sync')) {
+        return parseScriptTimeoutMs(intent.scriptTimeoutMs ?? SCRIPT_TIMEOUT_DEFAULT_MS);
+    }
+    if (intent.kind === 'configSave' && intent.apply) {
+        return parseScriptTimeoutMs(intent.scriptTimeoutMs ?? SCRIPT_TIMEOUT_DEFAULT_MS);
+    }
+    return undefined;
+}
+function selectedBatchGroups(intent) {
+    if (intent.selection.kind !== 'selected' && intent.selection.kind !== 'targets') {
+        throw new TuiOperationBlockedError('syncSelectionRequired', '当前项目全部同步必须从项目 intent roots 解析。');
+    }
+    const rawTargets = intent.selection.kind === 'targets'
+        ? intent.selection.targets
+        : intent.selection.pluginIds.map((pluginId) => ({
+            pluginId, platform: intent.platform, scope: intent.scope,
+        }));
+    const normalizedTargets = rawTargets.map((target) => {
+        if ((target.platform !== 'codex' && target.platform !== 'claude' && target.platform !== 'both')
+            || target.scope !== intent.scope
+            || (intent.selection.kind === 'targets' && target.platform === 'both')) {
+            throw new TuiOperationBlockedError('batchTargetInvalid', '批量精确目标必须使用共同 scope 和单个平台。');
+        }
+        const pluginId = target.pluginId;
+        const parsed = parsePluginId(pluginId);
+        if (!parsed.sourceId) {
+            throw new TuiOperationBlockedError('invalidPluginId', '批量操作必须使用 canonical pluginId。');
+        }
+        const canonicalPluginId = formatPluginId({ sourceId: parsed.sourceId, pluginName: parsed.pluginName });
+        if (intent.selection.kind === 'targets' && canonicalPluginId !== pluginId) {
+            throw new TuiOperationBlockedError('invalidPluginId', '批量精确目标必须使用 canonical pluginId。');
+        }
+        return {
+            pluginId: canonicalPluginId,
+            platform: target.platform,
+            scope: target.scope,
+        };
+    }).sort((left, right) => [left.pluginId, left.platform, left.scope].join('\0')
+        .localeCompare([right.pluginId, right.platform, right.scope].join('\0'), 'en'));
+    const uniqueTargets = [...new Map(normalizedTargets.map((target) => [
+            [target.pluginId, target.platform, target.scope].join('\0'), target,
+        ])).values()];
+    const requestedPluginIds = [...new Set(uniqueTargets.map((target) => target.pluginId))];
+    if (requestedPluginIds.length === 0) {
+        throw new TuiOperationBlockedError('syncSelectionRequired', '批量操作至少需要一个插件。');
+    }
+    const groups = new Map();
+    for (const target of uniqueTargets) {
+        const pluginId = target.pluginId;
+        const sourceId = parsePluginId(pluginId).sourceId;
+        const groupKey = [sourceId, target.platform, target.scope].join('\0');
+        const group = groups.get(groupKey) ?? {
+            groupId: groupKey,
+            sourceId,
+            platform: target.platform,
+            scope: target.scope,
+            requestedPluginIds: [],
+        };
+        group.requestedPluginIds.push(pluginId);
+        groups.set(groupKey, group);
+    }
+    return { requestedPluginIds, groups: [...groups.values()] };
+}
+async function resolveBatchGroups(intent, env, cwd, frozenRequestedPluginIds) {
+    if (intent.selection.kind === 'selected' || intent.selection.kind === 'targets') {
+        return selectedBatchGroups(intent);
+    }
+    if (intent.action !== 'sync' || intent.scope !== 'project') {
+        throw new TuiOperationBlockedError('syncSelectionRequired', '当前项目全部操作只支持 project scope sync。');
+    }
+    const state = await readPluginIntentState({ scope: 'project', cwd, env });
+    const selection = resolveSyncIntentSelection({
+        roots: state.roots,
+        selectors: frozenRequestedPluginIds ?? [],
+        all: frozenRequestedPluginIds === undefined,
+        platform: intent.platform,
+    });
+    if (selection.requestedPluginIds.length === 0) {
+        throw new TuiOperationBlockedError('syncSelectionRequired', '当前项目没有可同步的 intent roots。');
+    }
+    return {
+        requestedPluginIds: selection.requestedPluginIds,
+        groups: selection.groups.map((group) => ({
+            groupId: `${group.sourceId}\0${group.platform}\0${intent.scope}`,
+            sourceId: group.sourceId,
+            platform: group.platform,
+            scope: intent.scope,
+            requestedPluginIds: group.pluginIds,
+        })),
+    };
+}
+async function runBatchWriteGroup(options) {
+    const commandOptions = {
+        cwd: options.cwd,
+        platform: options.group.platform,
+        scope: options.group.scope,
+        ...(reviewedScriptTimeoutMs(options.intent) === undefined
+            ? {}
+            : { scriptTimeoutMs: reviewedScriptTimeoutMs(options.intent) }),
+    };
+    switch (options.intent.action) {
+        case 'install':
+            return installWriteCommand(options.group.requestedPluginIds, commandOptions, options.runtime);
+        case 'sync':
+            return syncWriteCommand(options.group.requestedPluginIds, commandOptions, options.runtime);
+        case 'reinstall':
+            return reinstallWriteCommand(options.group.requestedPluginIds, commandOptions, options.runtime);
+        case 'uninstall':
+            return uninstallWriteCommand(options.group.requestedPluginIds, commandOptions, options.runtime);
+        case 'cleanup':
+            return cleanupWriteCommand(options.group.requestedPluginIds, commandOptions, options.runtime);
+    }
+}
 async function loadDependencyOverviews(options) {
     const graph = await withResolvedMultiSourceCatalog({
         cliVersion: options.cliVersion,
@@ -437,6 +597,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
         };
     };
     const catalogOperationByEvidence = new WeakMap();
+    const codexManagerByEvidence = new WeakMap();
     let sessionCatalogOperationContext;
     let sessionStatusResult;
     const sessionContextForPlugin = (pluginId) => {
@@ -450,6 +611,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
         const stores = await Promise.all(scopes.map((scope) => readPluginConfigStore({
             sourceId: config.sourceId,
             sourceIdentity: config.sourceIdentity,
+            logicalIdentity: config.logicalIdentity,
             pluginName: config.pluginName,
             scope,
             cwd: context.cwd,
@@ -541,14 +703,38 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             signal.throwIfAborted();
             const catalogGenerations = await loadCatalogGenerations();
             signal.throwIfAborted();
+            const configStoreInventory = (await Promise.all(['user', 'project'].map(async (scope) => {
+                try {
+                    return (await listNamespacedPluginConfigStoreIdentities({
+                        cwd: context.cwd,
+                        env: context.env,
+                        scope,
+                    })).map(({ pluginId, sourceId, pluginName }) => ({
+                        pluginId, sourceId, pluginName, scope,
+                    }));
+                }
+                catch {
+                    await context.debugLogger.log({
+                        type: 'tui:config-inventory-error',
+                        level: 'debug',
+                        target: 'debugLog',
+                        message: 'TUI saved config inventory could not be read.',
+                        data: { scope },
+                    });
+                    return [];
+                }
+            }))).flat();
+            signal.throwIfAborted();
             const statusById = new Map(result.payload.catalog.sources.map((source) => [source.id, source]));
             return {
                 cliChannel: packageInfo.version.includes('-') ? 'beta' : 'latest',
+                configuredSources: structuredClone(configured.sources),
                 payload: result.payload,
                 pluginSummaries: result.pluginSummaries,
                 targetRevisions: result.targetRevisions,
                 dependencyOverviews,
                 portablePluginIds,
+                configStoreInventory,
                 catalogGenerations,
                 sessionGenerationKeys: Object.fromEntries((catalogOperationContext?.generationSet.sources ?? [])
                     .map((source) => [source.sourceId, source.storeKey])),
@@ -580,7 +766,8 @@ export function createTuiControllerDependencies(context, progressFeed, options =
         }
         throw new TuiOperationBlockedError('operationReviewStale', '状态读取期间来源配置持续变化。请重试。');
     };
-    const captureEvidence = async (intent, signal, preparation, operationInventory = createOperationInventoryReader(), freshCatalog = false, reusableCandidate) => {
+    const captureEvidence = async (intent, signal, preparation, operationInventory = createOperationInventoryReader(), freshCatalog = false, reusableCandidate, codexObservationSession, frozenBatchEvidence) => {
+        reviewedScriptTimeoutMs(intent);
         if (intent.kind === 'configReset') {
             const parsed = parsePluginId(intent.pluginId);
             if (!parsed.sourceId || !parsed.pluginName) {
@@ -598,10 +785,16 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             if (target.kind === 'special') {
                 throw new TuiOperationBlockedError('configResetTargetUnsupported', '设置目标是特殊文件系统节点，不能自动重置。请手动移动后重试。');
             }
-            let source;
+            const relevantTargets = sessionStatusResult
+                ? configAffectedStatusTargets(sessionStatusResult.payload.targets, intent.pluginId, intent.scope)
+                : [];
+            const relevantRevisions = (sessionStatusResult?.targetRevisions ?? []).filter((revision) => relevantTargets.some((statusTarget) => statusTarget.platform === revision.platform
+                && statusTarget.scope === revision.scope
+                && statusTarget.pluginId === revision.pluginId));
+            let selected;
             try {
                 const packageInfo = await readCliPackageInfo();
-                source = await withResolvedCatalogPlugin({
+                selected = await withResolvedCatalogPlugin({
                     selector: intent.pluginId,
                     cliVersion: packageInfo.version,
                     env: context.env,
@@ -609,16 +802,23 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                         ? { operationContext: sessionContextForPlugin(intent.pluginId) }
                         : {}),
                     ...(signal ? { signal } : {}),
-                    consume: async ({ plugin, source: resolvedSource }) => sourceEvidenceForPlugin(resolvedSource, plugin.manifest.name),
+                    consume: async ({ plugin, source: resolvedSource }) => ({
+                        source: sourceEvidenceForPlugin(resolvedSource, plugin.manifest.name),
+                        impact: await analyzePluginConfigMutationImpact({
+                            plugin,
+                            scope: intent.scope,
+                            cwd: context.cwd,
+                            env: context.env,
+                            visibleTargets: configImpactVisibleTargets(plugin.manifest.name, relevantTargets),
+                            mutation: { kind: 'reset' },
+                        }),
+                    }),
                 });
             }
             catch {
-                source = undefined;
+                selected = undefined;
             }
             signal?.throwIfAborted();
-            const relevantTargets = sessionStatusResult
-                ? configAffectedStatusTargets(sessionStatusResult.payload.targets, intent.pluginId, intent.scope)
-                : [];
             await preparation?.reporter.emit('evidence');
             return {
                 catalog: sessionStatusResult ? {
@@ -628,11 +828,20 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                     configDigest: 'config-reset-offline',
                     compositeDigest: 'config-reset-target',
                 },
-                ...(source ? { source } : {}),
+                ...(selected ? { source: selected.source } : {}),
+                ...(sessionStatusResult ? {
+                    targetFingerprint: statusTargetFingerprint(relevantTargets, relevantRevisions),
+                } : {}),
                 config: {
                     scope: intent.scope,
-                    storeDigest: target.fingerprint,
-                    affectedTargets: relevantTargets.map(({ platform, scope }) => ({ platform, scope })),
+                    storeDigest: selected?.impact.storeDigest ?? target.fingerprint,
+                    impactState: selected?.impact.impactState ?? 'unknown',
+                    ...(selected?.impact.noEffectiveChange ? { noEffectiveChange: true } : {}),
+                    affectedTargets: (selected?.impact.affectedTargets
+                        ?? relevantTargets).map(({ platform, scope }) => ({ platform, scope })),
+                    ...((selected?.impact.sharedNativeRenderTargets.length ?? 0) > 0
+                        ? { sharedNativeRenderTargets: selected.impact.sharedNativeRenderTargets }
+                        : {}),
                 },
                 resetTarget: {
                     sourceId: parsed.sourceId,
@@ -684,12 +893,16 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                     && (preview.identityChanged || sourceFingerprintChanged);
                 if (preview.identityChanged)
                     sourceIdentityChangeImpact = {
-                        impactSchemaVersion: 1,
+                        impactSchemaVersion: 3,
                         sourceId: preview.sourceId,
+                        primaryChange: preview.references.primaryChange,
                         inventoryComplete: preview.references.inventoryComplete,
                         references: preview.references.references,
                         affectedReferences: preview.references.references,
-                        changes: { added: [], removed: [], changed: [], newlyIncompatible: [], dependencyChanged: [] },
+                        changes: {
+                            added: [], removed: [], changed: [], newlyIncompatible: [],
+                            dependencyChanged: [], platformSupportChanged: [],
+                        },
                         errors: preview.references.errors,
                     };
                 if (!explicitSourceChange) {
@@ -828,7 +1041,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             if (intent.action !== 'replaceDamaged' && !explicitSourceChange && candidateRelation === 'rollbackDetected') {
                 throw new TuiOperationBlockedError('catalogRollbackDetected', '候选 Catalog 版本低于当前 Active。普通更新已阻止。');
             }
-            const impact = intent.action === 'repair' ? undefined
+            const impact = exactRepair ? undefined
                 : sourceIdentityChangeImpact ?? await inspectCatalogSourceImpact({
                     sourceId: intent.sourceId,
                     cwd: context.cwd,
@@ -837,6 +1050,29 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                     mode: 'generation',
                     candidateManifest: probe.manifest,
                 });
+            const primaryPreview = intent.setPrimaryAfterActivation
+                ? await preflightCatalogSourceMutation({
+                    request: { action: 'setPrimary', sourceId: intent.sourceId },
+                    cwd: context.cwd,
+                    env: context.env,
+                })
+                : undefined;
+            if (primaryPreview && primaryPreview.configDigest !== config.digest) {
+                throw operationReviewStale('准备主来源切换期间来源配置发生变化。');
+            }
+            const primaryImpact = primaryPreview ? {
+                impactSchemaVersion: 3,
+                sourceId: primaryPreview.sourceId,
+                primaryChange: primaryPreview.references.primaryChange,
+                inventoryComplete: primaryPreview.references.inventoryComplete,
+                references: primaryPreview.references.references,
+                affectedReferences: primaryPreview.references.references,
+                changes: {
+                    added: [], removed: [], changed: [], newlyIncompatible: [],
+                    dependencyChanged: [], platformSupportChanged: [],
+                },
+                errors: primaryPreview.references.errors,
+            } : undefined;
             return {
                 catalog: {
                     configDigest: config.digest,
@@ -857,6 +1093,11 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                         impactDigest: calculateCatalogSourceImpactDigest(impact),
                         impactMode: sourceIdentityChangeImpact ? 'identityChange' : 'generation',
                     } : {}),
+                    ...(primaryPreview && primaryImpact ? {
+                        primaryImpact,
+                        primaryImpactDigest: primaryPreview.impactDigest,
+                        primaryConfigDigest: primaryPreview.configDigest,
+                    } : {}),
                     configDigest: config.digest,
                     ...(proposedConfigDigest ? { proposedConfigDigest } : {}),
                     ...(proposedSource ? { proposedSource } : {}),
@@ -896,12 +1137,16 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                     referenceCount: preview.references.references.length,
                     inventoryComplete: preview.references.inventoryComplete,
                     impact: {
-                        impactSchemaVersion: 1,
+                        impactSchemaVersion: 3,
                         sourceId: preview.sourceId,
+                        primaryChange: preview.references.primaryChange,
                         inventoryComplete: preview.references.inventoryComplete,
                         references: preview.references.references,
                         affectedReferences: preview.references.references,
-                        changes: { added: [], removed: [], changed: [], newlyIncompatible: [], dependencyChanged: [] },
+                        changes: {
+                            added: [], removed: [], changed: [], newlyIncompatible: [],
+                            dependencyChanged: [], platformSupportChanged: [],
+                        },
                         errors: preview.references.errors,
                     },
                 },
@@ -912,10 +1157,95 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             }
             return evidence;
         }
-        if (!pluginIntent(intent)) {
+        if (!pluginIntent(intent) && intent.kind !== 'pluginWriteBatch') {
             throw new TuiOperationBlockedError('operationNotImplemented', '这个写操作尚未接入新 Controller。');
         }
         signal?.throwIfAborted();
+        if (intent.kind === 'pluginWriteBatch') {
+            await preparation?.reporter.emit('status');
+            const selection = await resolveBatchGroups(intent, context.env, context.cwd, frozenBatchEvidence?.requestedPluginIds);
+            signal?.throwIfAborted();
+            const configSnapshot = await readCatalogSourcesConfigSnapshot(context.env);
+            const groups = [];
+            const ownsObservationSession = !codexObservationSession
+                && selection.groups.some((group) => {
+                    const reviewed = frozenBatchEvidence?.groups.find((candidate) => candidate.groupId === group.groupId);
+                    return reviewed?.executable !== false
+                        && (group.platform === 'codex' || group.platform === 'both');
+                });
+            const observationSession = codexObservationSession ?? (ownsObservationSession
+                ? await createCodexNativeObservationSession({
+                    exactCwd: context.cwd,
+                    env: context.env,
+                    runner: context.nativeCliRunner,
+                })
+                : undefined);
+            try {
+                await preparation?.reporter.emit('catalog');
+                for (const group of selection.groups) {
+                    signal?.throwIfAborted();
+                    const reviewed = frozenBatchEvidence?.groups.find((candidate) => candidate.groupId === group.groupId);
+                    if (reviewed?.executable === false) {
+                        groups.push({ ...group, preview: reviewed.preview, executable: false });
+                        continue;
+                    }
+                    let catalogOperation;
+                    try {
+                        catalogOperation = !freshCatalog && sessionCatalogOperationContext
+                            ? selectCatalogOperationContext(sessionCatalogOperationContext, [group.sourceId])
+                            : await resolveCatalogOperationContext({
+                                sourceIds: [group.sourceId],
+                                env: context.env,
+                                ...(!freshCatalog ? { validatedStoreEntries, validatingStoreEntries } : {}),
+                                ...(signal ? { signal } : {}),
+                            });
+                    }
+                    catch {
+                        catalogOperation = undefined;
+                    }
+                    const preview = await runBatchWriteGroup({
+                        intent,
+                        group,
+                        cwd: context.cwd,
+                        runtime: {
+                            ...context,
+                            inventoryCatalogSourceReferences: operationInventory,
+                            expectedCatalogConfigDigest: configSnapshot.digest,
+                            ...(catalogOperation ? {
+                                catalogOperationContext: catalogOperation,
+                                expectedGenerationSetDigest: catalogOperation.generationSetDigest,
+                            } : {}),
+                            previewOperationPlan: true,
+                            ...(observationSession ? { codexObservationSession: observationSession } : {}),
+                            ...(preparation ? {
+                                onPreviewStage: (stage) => stage === 'catalog' ? undefined : preparation.reporter.emit(stage),
+                            } : {}),
+                        },
+                    });
+                    groups.push({ ...group, preview, executable: preview.operationPlan !== undefined });
+                }
+            }
+            finally {
+                if (ownsObservationSession)
+                    await observationSession?.dispose();
+            }
+            await preparation?.reporter.emit('evidence');
+            signal?.throwIfAborted();
+            const merged = mergeWriteCommandResults(groups.map((group) => group.preview));
+            const evidence = {
+                catalog: {
+                    configDigest: configSnapshot.digest,
+                    compositeDigest: sessionStatusResult?.payload.catalog.compositeDigest
+                        ?? digest(groups.map((group) => [group.groupId, group.preview.operationPlan?.planFingerprint])),
+                },
+                requestedPluginIds: selection.requestedPluginIds,
+                groups,
+                ...(merged.dependencyPlan ? { dependencyPlan: merged.dependencyPlan } : {}),
+                ...(merged.codexReconcilePlans ? { codexReconcilePlans: merged.codexReconcilePlans } : {}),
+                ...(merged.operationPlan ? { operationPlan: merged.operationPlan } : {}),
+            };
+            return evidence;
+        }
         const packageInfo = await readCliPackageInfo();
         const offlineCleanupReason = intent.kind === 'pluginWrite'
             && intent.action === 'cleanup'
@@ -988,12 +1318,14 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             if (configSnapshot.digest !== sessionStatusResult.payload.catalog.configDigest) {
                 throw operationReviewStale('准备设置确认期间来源配置发生变化。');
             }
+            const relevantTargets = configAffectedStatusTargets(sessionStatusResult.payload.targets, intent.pluginId, intent.scope);
+            const preparedCatalogOperation = catalogOperation;
             const selected = await withResolvedCatalogPlugin({
                 selector: intent.pluginId,
                 cliVersion: packageInfo.version,
                 configSnapshot,
                 env: context.env,
-                ...(catalogOperation ? { operationContext: catalogOperation } : {}),
+                operationContext: preparedCatalogOperation,
                 ...(signal ? { signal } : {}),
                 consume: async ({ plugin, source }) => {
                     if (!plugin.manifest.config) {
@@ -1011,30 +1343,56 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                             }
                         }
                     }
+                    const impact = intent.retryApply ? undefined : await analyzePluginConfigMutationImpact({
+                        plugin,
+                        scope: intent.scope,
+                        cwd: context.cwd,
+                        env: context.env,
+                        visibleTargets: configImpactVisibleTargets(plugin.manifest.name, relevantTargets),
+                        mutation: {
+                            kind: 'patch',
+                            updates: intent.updates,
+                            removeKeys: intent.removeKeys,
+                        },
+                    });
+                    const affectedTargets = intent.retryApply
+                        ? configImpactVisibleTargets(plugin.manifest.name, relevantTargets)
+                        : impact.affectedTargets;
                     return {
                         pluginName: plugin.manifest.name,
                         source: sourceEvidenceForPlugin(source, plugin.manifest.name),
-                        sharedNativeRenderTargets: intent.kind === 'configSave'
-                            ? configSharedNativeRenderTargets(plugin, [
-                                ...Object.keys(intent.updates ?? {}),
-                                ...(intent.removeKeys ?? []),
-                            ])
+                        impact,
+                        preApplyAuthorization: configIntentRequestsApply(intent)
+                            ? (await resolveConfigPreApplyAuthorization({
+                                plugin,
+                                scope: intent.scope,
+                                cwd: context.cwd,
+                                env: context.env,
+                                applyTargets: affectedTargets,
+                                nativeCliRunner: context.nativeCliRunner,
+                                rebuildRuntime: {
+                                    catalogOperationContext: preparedCatalogOperation,
+                                    expectedGenerationSetDigest: preparedCatalogOperation.generationSetDigest,
+                                    inventoryCatalogSourceReferences: operationInventory,
+                                },
+                            })).targets
                             : [],
+                        sharedNativeRenderTargets: intent.retryApply
+                            ? configRetrySharedNativeRenderTargets(plugin)
+                            : impact.sharedNativeRenderTargets,
                     };
                 },
             });
-            const store = await readPluginConfigStore({
-                sourceId: selected.source?.sourceId ?? parsePluginId(intent.pluginId).sourceId,
-                ...(selected.source?.sourceIdentity
-                    ? { sourceIdentity: selected.source.sourceIdentity }
-                    : {}),
+            const retryStore = intent.retryApply ? await readPluginConfigStore({
+                sourceId: selected.source.sourceId,
+                sourceIdentity: selected.source.sourceIdentity,
+                logicalIdentity: selected.source.logicalIdentity,
                 pluginName: selected.pluginName,
                 scope: intent.scope,
                 cwd: context.cwd,
                 env: context.env,
-            });
+            }) : undefined;
             signal?.throwIfAborted();
-            const relevantTargets = configAffectedStatusTargets(sessionStatusResult.payload.targets, intent.pluginId, intent.scope);
             const relevantRevisions = (sessionStatusResult.targetRevisions ?? []).filter((revision) => relevantTargets.some((target) => target.platform === revision.platform
                 && target.scope === revision.scope
                 && target.pluginId === revision.pluginId));
@@ -1050,8 +1408,15 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                 config: {
                     scope: intent.scope,
                     ...(selected.source?.manifestDigest ? { schemaIdentity: selected.source.manifestDigest } : {}),
-                    storeDigest: digest({ exists: store.exists, rawDigest: store.rawDigest }),
-                    affectedTargets: relevantTargets.map(({ platform, scope }) => ({ platform, scope })),
+                    storeDigest: selected.impact?.storeDigest
+                        ?? digest({ exists: retryStore?.exists, rawDigest: retryStore?.rawDigest }),
+                    impactState: selected.impact?.impactState ?? 'known',
+                    ...(selected.impact?.noEffectiveChange ? { noEffectiveChange: true } : {}),
+                    affectedTargets: (selected.impact?.affectedTargets
+                        ?? relevantTargets).map(({ platform, scope }) => ({ platform, scope })),
+                    ...(selected.preApplyAuthorization.length > 0
+                        ? { preApplyAuthorization: selected.preApplyAuthorization }
+                        : {}),
                     ...(selected.sharedNativeRenderTargets.length > 0
                         ? { sharedNativeRenderTargets: selected.sharedNativeRenderTargets }
                         : {}),
@@ -1099,6 +1464,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
         let dependencyPlan;
         let codexReconcilePlans;
         let operationPlan;
+        let forceCleanupEvidence;
         await preparation?.reporter.emit('catalog');
         const offlineCleanupTarget = offlineCleanupReason && intent.kind === 'pluginWrite'
             ? status.payload.targets.find((target) => target.pluginId === intent.pluginId
@@ -1131,6 +1497,9 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                 throw operationReviewStale('离线清理现场证据已消失或无法验证。');
             }
         }
+        const configVisibleTargets = intent.kind === 'configSave'
+            ? configAffectedStatusTargets(status.payload.targets, intent.pluginId, intent.scope)
+            : [];
         const selected = offlineCleanupTarget
             ? {
                 pluginName: offlineCleanupTarget.pluginName,
@@ -1165,19 +1534,54 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                             }
                         }
                     }
+                    const impact = intent.kind === 'configSave' && !intent.retryApply
+                        ? await analyzePluginConfigMutationImpact({
+                            plugin,
+                            scope: intent.scope,
+                            cwd: context.cwd,
+                            env: context.env,
+                            visibleTargets: configImpactVisibleTargets(plugin.manifest.name, configVisibleTargets),
+                            mutation: {
+                                kind: 'patch',
+                                updates: intent.updates,
+                                removeKeys: intent.removeKeys,
+                            },
+                        })
+                        : undefined;
                     return {
                         pluginName: plugin.manifest.name,
                         source: sourceEvidenceForPlugin(source, plugin.manifest.name),
+                        impact,
+                        preApplyAuthorization: intent.kind === 'configSave'
+                            && configIntentRequestsApply(intent)
+                            ? (await resolveConfigPreApplyAuthorization({
+                                plugin,
+                                scope: intent.scope,
+                                cwd: context.cwd,
+                                env: context.env,
+                                applyTargets: intent.retryApply
+                                    ? configImpactVisibleTargets(plugin.manifest.name, configVisibleTargets)
+                                    : impact.affectedTargets,
+                                nativeCliRunner: context.nativeCliRunner,
+                                rebuildRuntime: {
+                                    ...(catalogOperation ? { catalogOperationContext: catalogOperation } : {}),
+                                    ...(catalogOperation?.generationSetDigest
+                                        ? { expectedGenerationSetDigest: catalogOperation.generationSetDigest }
+                                        : {}),
+                                    inventoryCatalogSourceReferences: operationInventory,
+                                },
+                            })).targets
+                            : [],
                         sharedNativeRenderTargets: intent.kind === 'configSave'
-                            ? configSharedNativeRenderTargets(plugin, [
-                                ...Object.keys(intent.updates ?? {}),
-                                ...(intent.removeKeys ?? []),
-                            ])
+                            ? intent.retryApply
+                                ? configRetrySharedNativeRenderTargets(plugin)
+                                : impact.sharedNativeRenderTargets
                             : [],
                     };
                 },
             });
         let codexManager;
+        let resolvedCodexManager;
         const hasDeclaredDependencies = (status.pluginSummaries.find((summary) => summary.pluginId === intent.pluginId)?.dependencyTotalCount ?? 0) > 0;
         if (intent.kind === 'pluginWrite') {
             const command = {
@@ -1192,6 +1596,9 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                 cwd: context.cwd,
                 platform: intent.platform,
                 scope: intent.scope,
+                ...(reviewedScriptTimeoutMs(intent) === undefined
+                    ? {}
+                    : { scriptTimeoutMs: reviewedScriptTimeoutMs(intent) }),
                 ...(intent.action === 'install' && intent.dependencyScopeOverrides
                     ? { dependencyScopeOverrides: intent.dependencyScopeOverrides }
                     : {}),
@@ -1205,6 +1612,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                     expectedGenerationSetDigest: catalogOperation.generationSetDigest,
                 } : {}),
                 previewOperationPlan: true,
+                ...(codexObservationSession ? { codexObservationSession } : {}),
                 ...(preparation ? {
                     onPreviewStage: (stage) => stage === 'catalog' ? undefined : preparation.reporter.emit(stage),
                 } : {}),
@@ -1212,6 +1620,17 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             signal?.throwIfAborted();
             codexReconcilePlans = preview?.codexReconcilePlans;
             operationPlan = preview?.operationPlan;
+            if (intent.action === 'cleanup' && intent.force === true) {
+                const candidates = preview?.offlineCleanupPlans?.filter((candidate) => candidate.forceExclusive === true
+                    && candidate.pluginId === intent.pluginId
+                    && candidate.platform === intent.platform
+                    && candidate.scope === intent.scope
+                    && candidate.plan.actions.length > 0) ?? [];
+                if (candidates.length !== 1) {
+                    throw new TuiOperationBlockedError('forceCleanupPathUnavailable', '没有唯一且可验证的精确清理目标。');
+                }
+                [forceCleanupEvidence] = candidates;
+            }
             if (hasDeclaredDependencies
                 && (intent.action === 'install'
                     || intent.action === 'refreshAndSync'
@@ -1234,6 +1653,9 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                 throw new TuiOperationBlockedError(managerPreview.code, `${managerPreview.code}: ${message}`);
             }
             if (managerPreview) {
+                if (managerPreview.state === 'system' || managerPreview.state === 'cached') {
+                    resolvedCodexManager = managerPreview.manager;
+                }
                 codexManager = {
                     state: managerPreview.state,
                     packageName: MANAGED_CODEX_PACKAGE_NAME,
@@ -1246,7 +1668,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
         await preparation?.reporter.emit('evidence');
         signal?.throwIfAborted();
         const evidenceTargets = intent.kind === 'configSave'
-            ? configAffectedStatusTargets(status.payload.targets, intent.pluginId, intent.scope)
+            ? configVisibleTargets
             : status.payload.targets;
         const evidenceRevisions = intent.kind === 'configSave'
             ? (status.targetRevisions ?? []).filter((revision) => evidenceTargets.some((target) => target.platform === revision.platform
@@ -1263,6 +1685,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             },
             source: selected.source,
             ...(offlineCleanup ? { offlineCleanup } : {}),
+            ...(forceCleanupEvidence ? { offlineCleanup: forceCleanupEvidence } : {}),
             ...(dependencyPlan ? { dependencyPlan } : {}),
             ...(codexReconcilePlans ? { codexReconcilePlans } : {}),
             ...(operationPlan ? { operationPlan } : {}),
@@ -1270,30 +1693,53 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             targetFingerprint: statusTargetFingerprint(evidenceTargets, evidenceRevisions),
         };
         if (intent.kind === 'configSave') {
-            const store = await readPluginConfigStore({
+            const impact = 'impact' in selected ? selected.impact : undefined;
+            const retryStore = intent.retryApply ? await readPluginConfigStore({
                 sourceId: selected.source.sourceId,
                 sourceIdentity: selected.source.sourceIdentity,
+                ...('logicalIdentity' in selected.source
+                    ? { logicalIdentity: selected.source.logicalIdentity }
+                    : {}),
                 pluginName: selected.pluginName,
                 scope: intent.scope,
                 cwd: context.cwd,
                 env: context.env,
-            });
+            }) : undefined;
             signal?.throwIfAborted();
             evidence.config = {
                 scope: intent.scope,
                 ...('manifestDigest' in selected.source
                     ? { schemaIdentity: selected.source.manifestDigest }
                     : {}),
-                storeDigest: digest({ exists: store.exists, rawDigest: store.rawDigest }),
-                affectedTargets: evidenceTargets.map(({ platform, scope }) => ({ platform, scope })),
+                storeDigest: impact?.storeDigest
+                    ?? digest({ exists: retryStore?.exists, rawDigest: retryStore?.rawDigest }),
+                impactState: impact?.impactState ?? 'known',
+                ...(impact?.noEffectiveChange ? { noEffectiveChange: true } : {}),
+                affectedTargets: (impact?.affectedTargets
+                    ?? evidenceTargets).map(({ platform, scope }) => ({ platform, scope })),
+                ...(intent.scope === 'project' ? {
+                    shareability: await inspectConfigShareability({
+                        sourceId: selected.source.sourceId,
+                        pluginName: selected.pluginName,
+                        scope: intent.scope,
+                        cwd: context.cwd,
+                        env: context.env,
+                    }),
+                } : {}),
                 ...('sharedNativeRenderTargets' in selected
                     && selected.sharedNativeRenderTargets.length > 0
                     ? { sharedNativeRenderTargets: selected.sharedNativeRenderTargets }
                     : {}),
+                ...('preApplyAuthorization' in selected
+                    && selected.preApplyAuthorization.length > 0
+                    ? { preApplyAuthorization: selected.preApplyAuthorization }
+                    : {}),
             };
         }
         if (catalogOperation)
             catalogOperationByEvidence.set(evidence, catalogOperation);
+        if (resolvedCodexManager)
+            codexManagerByEvidence.set(evidence, resolvedCodexManager);
         return evidence;
     };
     const dependencies = {
@@ -1501,6 +1947,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                     const stores = await readConfigStoresForTui({
                         sourceId: plugin.sourceId,
                         sourceIdentity: plugin.sourceIdentity,
+                        logicalIdentity: plugin.catalogLogicalIdentity,
                         pluginName: plugin.manifest.name,
                         schema: plugin.manifest.config.fields,
                         scope: layer.scope,
@@ -1535,6 +1982,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                     const effectiveRaw = await resolveEffectivePluginConfig({
                         sourceId: plugin.sourceId,
                         sourceIdentity: plugin.sourceIdentity,
+                        logicalIdentity: plugin.catalogLogicalIdentity,
                         pluginName: plugin.manifest.name,
                         manifest: plugin.manifest,
                         targetScope: layer.scope === 'user' ? 'user' : 'project',
@@ -1569,9 +2017,10 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                 throw new TuiOperationBlockedError('invalidPluginId', '设置目标必须使用 canonical pluginId。');
             }
             let sourceIdentity;
+            let logicalIdentity;
             try {
                 const packageInfo = await readCliPackageInfo();
-                sourceIdentity = await withResolvedCatalogPlugin({
+                const source = await withResolvedCatalogPlugin({
                     selector: pluginId,
                     cliVersion: packageInfo.version,
                     env: context.env,
@@ -1579,11 +2028,17 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                     ...(sessionContextForPlugin(pluginId)
                         ? { operationContext: sessionContextForPlugin(pluginId) }
                         : {}),
-                    consume: async ({ source }) => source.sourceIdentity,
+                    consume: async ({ source }) => ({
+                        sourceIdentity: source.sourceIdentity,
+                        logicalIdentity: source.logicalIdentity,
+                    }),
                 });
+                sourceIdentity = source.sourceIdentity;
+                logicalIdentity = source.logicalIdentity;
             }
             catch {
                 sourceIdentity = undefined;
+                logicalIdentity = undefined;
             }
             signal.throwIfAborted();
             const target = await inspectPluginConfigResetTarget({
@@ -1598,6 +2053,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                 const store = await readPluginConfigStore({
                     sourceId: parsed.sourceId,
                     ...(sourceIdentity ? { sourceIdentity } : {}),
+                    ...(logicalIdentity ? { logicalIdentity } : {}),
                     pluginName: parsed.pluginName,
                     scope: layer.scope,
                     cwd: context.cwd,
@@ -1645,13 +2101,21 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                         expectedConfigDigest: expected.configDigest,
                     };
                     if (intent.sourceMutation.action === 'add') {
-                        await addCatalogSourceCommand({ ...common, source: intent.sourceMutation.source });
+                        await addCatalogSourceCommand({
+                            ...common,
+                            source: intent.sourceMutation.source,
+                            expectedProposedConfigDigest: expected.proposedConfigDigest,
+                            expectedImpactDigest: expected.impactDigest,
+                            requireImpactConfirmation: true,
+                            confirmImpact: true,
+                        });
                     }
                     else {
                         await updateCatalogSourceCommand({
                             ...common,
                             sourceId: intent.sourceId,
                             update: intent.sourceMutation.update,
+                            expectedProposedConfigDigest: expected.proposedConfigDigest,
                             expectedImpactDigest: expected.impactDigest,
                             requireIdentityChangeConfirmation: true,
                             confirmIdentityChange: true,
@@ -1751,6 +2215,10 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                                 sourceId: intent.sourceId,
                                 cwd: context.cwd,
                                 env: context.env,
+                                expectedConfigDigest: expected.primaryConfigDigest,
+                                expectedImpactDigest: expected.primaryImpactDigest,
+                                requireImpactConfirmation: true,
+                                confirmImpact: true,
                             });
                             primaryChanged = true;
                         }
@@ -1761,7 +2229,10 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                                 configSaved,
                                 generation,
                                 activeAvailable: true,
-                                errorCode: error instanceof Error ? error.name : 'catalogSourcePrimaryFailed',
+                                errorCode: typeof error === 'object' && error !== null
+                                    && 'code' in error && typeof error.code === 'string'
+                                    ? error.code
+                                    : error instanceof Error ? error.name : 'catalogSourcePrimaryFailed',
                             };
                         }
                     }
@@ -1827,11 +2298,18 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                     cwd: context.cwd,
                     env: context.env,
                     expectedConfigDigest: expectedEvidence.sourceWrite?.configDigest,
+                    expectedProposedConfigDigest: expectedEvidence.sourceWrite?.proposedConfigDigest,
                     expectedImpactDigest: expectedEvidence.sourceWrite?.impactDigest,
                     runtime,
                 };
                 if (intent.action === 'add' && intent.source) {
-                    return addCatalogSourceCommand({ ...common, source: intent.source, cliVersion: packageInfo.version });
+                    return addCatalogSourceCommand({
+                        ...common,
+                        source: intent.source,
+                        cliVersion: packageInfo.version,
+                        requireImpactConfirmation: true,
+                        confirmImpact: true,
+                    });
                 }
                 if (intent.action === 'update' && intent.update) {
                     return updateCatalogSourceCommand({
@@ -1844,7 +2322,12 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                     });
                 }
                 if (intent.action === 'setPrimary') {
-                    return setPrimaryCatalogSourceCommand({ ...common, sourceId: intent.sourceId });
+                    return setPrimaryCatalogSourceCommand({
+                        ...common,
+                        sourceId: intent.sourceId,
+                        requireImpactConfirmation: true,
+                        confirmImpact: true,
+                    });
                 }
                 if (intent.action === 'remove') {
                     return removeCatalogSourceCommand({
@@ -1856,12 +2339,165 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                 }
                 throw new TuiOperationBlockedError('invalidSourceMutation', '来源操作缺少候选输入。');
             }
+            const codexObservationSession = intent.kind === 'pluginWrite'
+                || intent.kind === 'pluginWriteBatch'
+                ? await createCodexNativeObservationSession({
+                    exactCwd: context.cwd,
+                    env: context.env,
+                    runner: context.nativeCliRunner,
+                    manager: codexManagerByEvidence.get(expectedEvidence),
+                })
+                : undefined;
             return withAwHomeMutationLock({
                 env: context.env,
                 action: async (awHomeMutationToken) => {
                     await tuiControllerRuntimeTestHooks?.beforeMutationEvidenceCapture?.();
                     const operationInventory = createOperationInventoryReader();
-                    const currentEvidence = await captureEvidence(intent, undefined, undefined, operationInventory, true);
+                    const currentEvidence = await captureEvidence(intent, undefined, undefined, operationInventory, true, undefined, codexObservationSession, intent.kind === 'pluginWriteBatch'
+                        ? expectedEvidence
+                        : undefined);
+                    if (intent.kind === 'pluginWriteBatch') {
+                        const expectedBatch = expectedEvidence;
+                        const currentBatch = currentEvidence;
+                        const reviewedGroups = expectedBatch.groups.map((group) => ({
+                            groupId: group.groupId,
+                            sourceId: group.sourceId,
+                            platform: group.platform,
+                            scope: group.scope,
+                            requestedPluginIds: group.requestedPluginIds,
+                            executable: group.executable,
+                            planFingerprint: group.preview.operationPlan
+                                ? createBatchIntentCompatiblePlanFingerprint(group.preview.operationPlan)
+                                : undefined,
+                        }));
+                        const currentGroups = currentBatch.groups.map((group) => ({
+                            groupId: group.groupId,
+                            sourceId: group.sourceId,
+                            platform: group.platform,
+                            scope: group.scope,
+                            requestedPluginIds: group.requestedPluginIds,
+                            executable: expectedBatch.groups.find((reviewed) => reviewed.groupId === group.groupId)
+                                ?.executable === false ? false : group.executable,
+                            planFingerprint: expectedBatch.groups.find((reviewed) => reviewed.groupId === group.groupId)
+                                ?.executable === false
+                                ? undefined
+                                : group.preview.operationPlan
+                                    ? createBatchIntentCompatiblePlanFingerprint(group.preview.operationPlan)
+                                    : undefined,
+                        }));
+                        if (expectedBatch.catalog.configDigest !== currentBatch.catalog.configDigest
+                            || JSON.stringify(expectedBatch.requestedPluginIds)
+                                !== JSON.stringify(currentBatch.requestedPluginIds)
+                            || JSON.stringify(reviewedGroups) !== JSON.stringify(currentGroups)) {
+                            throw operationReviewStale('确认后批量目标或写入计划发生变化。');
+                        }
+                        await tuiControllerRuntimeTestHooks?.afterMutationEvidenceCapture?.();
+                        const groupResults = [];
+                        const completedTargetKeys = new Set();
+                        let executedGroupCount = 0;
+                        const appendStoppedGroups = (startIndex, staleMessage) => {
+                            for (const [offset, stopped] of expectedBatch.groups.slice(startIndex).entries()) {
+                                groupResults.push({
+                                    groupId: stopped.groupId,
+                                    sourceId: stopped.sourceId,
+                                    platform: stopped.platform,
+                                    scope: stopped.scope,
+                                    requestedPluginIds: stopped.requestedPluginIds,
+                                    result: !stopped.executable ? stopped.preview : failedWriteCommandResult(intent.action, stopped.requestedPluginIds, { cwd: context.cwd, platform: stopped.platform, scope: stopped.scope }, offset === 0
+                                        ? new TuiOperationBlockedError('operationReviewStale', staleMessage)
+                                        : new TuiOperationBlockedError('batchNotStarted', '前一个批量组的写入计划已变化，因此这个组没有开始。')),
+                                });
+                            }
+                        };
+                        for (const [groupIndex, reviewed] of expectedBatch.groups.entries()) {
+                            const current = currentBatch.groups.find((group) => group.groupId === reviewed.groupId);
+                            if (!reviewed.executable) {
+                                groupResults.push({
+                                    groupId: reviewed.groupId,
+                                    sourceId: reviewed.sourceId,
+                                    platform: reviewed.platform,
+                                    scope: reviewed.scope,
+                                    requestedPluginIds: reviewed.requestedPluginIds,
+                                    result: reviewed.preview,
+                                });
+                                continue;
+                            }
+                            const groupInventory = groupResults.length === 0
+                                ? operationInventory
+                                : createOperationInventoryReader();
+                            let executionPreview = current.preview;
+                            if (completedTargetKeys.size > 0) {
+                                executionPreview = await runBatchWriteGroup({
+                                    intent,
+                                    group: current,
+                                    cwd: context.cwd,
+                                    runtime: {
+                                        ...context,
+                                        awHomeMutationToken,
+                                        inventoryCatalogSourceReferences: groupInventory,
+                                        expectedCatalogConfigDigest: expectedBatch.catalog.configDigest,
+                                        previewOperationPlan: true,
+                                        ...(codexObservationSession ? { codexObservationSession } : {}),
+                                    },
+                                });
+                                if (!reviewed.preview.operationPlan || !executionPreview.operationPlan
+                                    || createBatchIntentCompatiblePlanFingerprint(reviewed.preview.operationPlan, completedTargetKeys) !== createBatchIntentCompatiblePlanFingerprint(executionPreview.operationPlan, completedTargetKeys)) {
+                                    appendStoppedGroups(groupIndex, '前序批量结果改变了这个组的实际写入计划。');
+                                    break;
+                                }
+                            }
+                            const requiresManagedCodex = reviewed.preview.codexManagerPreview?.state === 'requires-install';
+                            const result = await runBatchWriteGroup({
+                                intent,
+                                group: current,
+                                cwd: context.cwd,
+                                runtime: {
+                                    ...context,
+                                    awHomeMutationToken,
+                                    preApplyConfirmed: true,
+                                    inventoryCatalogSourceReferences: groupInventory,
+                                    expectedCatalogConfigDigest: expectedBatch.catalog.configDigest,
+                                    ...(executionPreview.operationPlan ? {
+                                        expectedPlanFingerprint: executionPreview.operationPlan.planFingerprint,
+                                    } : {}),
+                                    ...(requiresManagedCodex ? {
+                                        managedCodexAuthorizer: async () => true,
+                                    } : {}),
+                                    ...(codexObservationSession ? { codexObservationSession } : {}),
+                                },
+                            });
+                            if (writeReviewIsStale(result)) {
+                                if (executedGroupCount === 0)
+                                    throwIfWriteReviewStale(result);
+                                appendStoppedGroups(groupIndex, '这个组的实际写入计划发生变化。');
+                                break;
+                            }
+                            executedGroupCount += 1;
+                            for (const target of result.targetResults) {
+                                if (target.state === 'completed') {
+                                    completedTargetKeys.add([
+                                        target.target.pluginId,
+                                        target.target.platform,
+                                        target.target.scope,
+                                    ].join('\0'));
+                                }
+                            }
+                            groupResults.push({
+                                groupId: reviewed.groupId,
+                                sourceId: reviewed.sourceId,
+                                platform: reviewed.platform,
+                                scope: reviewed.scope,
+                                requestedPluginIds: reviewed.requestedPluginIds,
+                                result,
+                            });
+                        }
+                        const merged = mergeWriteCommandResults(groupResults.map((group) => group.result));
+                        return {
+                            ...merged,
+                            requestedPluginIds: expectedBatch.requestedPluginIds,
+                            groupResults,
+                        };
+                    }
                     if (intent.kind !== 'pluginWrite'
                         && !operationEvidenceMatches(expectedEvidence, currentEvidence)) {
                         throw new TuiOperationBlockedError('operationReviewStale', '确认后状态发生变化。');
@@ -1877,6 +2513,9 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                             cwd: context.cwd,
                             platform: intent.platform,
                             scope: intent.scope,
+                            ...(reviewedScriptTimeoutMs(intent) === undefined
+                                ? {}
+                                : { scriptTimeoutMs: reviewedScriptTimeoutMs(intent) }),
                             ...(intent.action === 'install' && intent.dependencyScopeOverrides
                                 ? { dependencyScopeOverrides: intent.dependencyScopeOverrides }
                                 : {}),
@@ -1895,12 +2534,21 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                         }[intent.action];
                         const currentSource = currentEvidence.source;
                         const offlineCleanup = currentEvidence.offlineCleanup;
+                        const reviewedOfflineCleanup = expectedEvidence.offlineCleanup;
+                        if ((offlineCleanup || reviewedOfflineCleanup)
+                            && (!offlineCleanup
+                                || !reviewedOfflineCleanup
+                                || !offlineCleanupEvidenceMatches(reviewedOfflineCleanup, offlineCleanup))) {
+                            throw new TuiOperationBlockedError('operationReviewStale', '确认后离线清理证据发生变化。');
+                        }
                         if (!offlineCleanup && (!expectedEvidence.source || !currentSource)) {
                             throw new TuiOperationBlockedError('operationReviewStale', '确认信息缺少来源身份。');
                         }
                         const result = await command([intent.pluginId], options, {
                             ...context,
+                            ...(codexObservationSession ? { codexObservationSession } : {}),
                             awHomeMutationToken,
+                            preApplyConfirmed: true,
                             inventoryCatalogSourceReferences: operationInventory,
                             ...(expectedEvidence.operationPlan
                                 ? { expectedPlanFingerprint: expectedEvidence.operationPlan.planFingerprint }
@@ -1913,14 +2561,18 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                             ...(expectedEvidence.codexManager?.state === 'requires-install'
                                 ? { managedCodexAuthorizer: async () => true }
                                 : {}),
-                            ...(offlineCleanup
-                                ? { expectedOfflineCleanupEvidence: offlineCleanup }
+                            ...(reviewedOfflineCleanup
+                                ? { expectedOfflineCleanupEvidence: reviewedOfflineCleanup }
                                 : { reviewPreflight: (actual) => assertSourceEvidenceMatches(currentSource, actual) }),
                         });
                         throwIfWriteReviewStale(result);
                         return result;
                     }
                     if (intent.kind === 'configSave' || intent.kind === 'configReset') {
+                        const operationRebuildResults = [];
+                        const operationDiagnosticSink = (results) => {
+                            operationRebuildResults.push(...structuredClone(results));
+                        };
                         const currentSource = currentEvidence.source;
                         if (intent.kind === 'configReset') {
                             const parsed = parsePluginId(intent.pluginId);
@@ -1937,6 +2589,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                                 rebuildRuntime: { ...context, awHomeMutationToken },
                                 awHomeMutationToken,
                                 apply: false,
+                                sharedNativeApplyConfirmed: false,
                             });
                         }
                         if (!currentSource) {
@@ -1950,7 +2603,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                             ...(catalogOperation ? { operationContext: catalogOperation } : {}),
                             consume: async ({ plugin, source }) => {
                                 assertSourceEvidenceMatches(currentSource, sourceEvidenceForPlugin(source, plugin.manifest.name));
-                                const applyTargets = intent.apply
+                                const applyTargets = intent.retryApply || intent.apply
                                     ? currentEvidence.config?.affectedTargets.map((target) => ({
                                         pluginName: plugin.manifest.name,
                                         platform: target.platform,
@@ -1967,6 +2620,10 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                                         rebuildRuntime: {
                                             ...context,
                                             awHomeMutationToken,
+                                            operationDiagnosticSink,
+                                            ...(reviewedScriptTimeoutMs(intent) === undefined
+                                                ? {}
+                                                : { scriptTimeoutMs: reviewedScriptTimeoutMs(intent) }),
                                             ...(catalogOperation ? {
                                                 catalogOperationContext: catalogOperation,
                                                 expectedGenerationSetDigest: expectedEvidence.catalog.generationSetDigest,
@@ -1974,6 +2631,9 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                                         },
                                         awHomeMutationToken,
                                         applyTargets,
+                                        sharedNativeApplyConfirmed: true,
+                                        preApplyConfirmed: true,
+                                        preApplyAuthorizedTargets: expectedEvidence.config?.preApplyAuthorization ?? [],
                                     })
                                     : await applyPluginConfigWrite({
                                         plugin,
@@ -1985,6 +2645,10 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                                         rebuildRuntime: {
                                             ...context,
                                             awHomeMutationToken,
+                                            operationDiagnosticSink,
+                                            ...(reviewedScriptTimeoutMs(intent) === undefined
+                                                ? {}
+                                                : { scriptTimeoutMs: reviewedScriptTimeoutMs(intent) }),
                                             ...(catalogOperation ? {
                                                 catalogOperationContext: catalogOperation,
                                                 expectedGenerationSetDigest: expectedEvidence.catalog.generationSetDigest,
@@ -1993,13 +2657,18 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                                         awHomeMutationToken,
                                         applyTargets,
                                         request: { updates: intent.updates, removeKeys: intent.removeKeys },
+                                        sharedNativeApplyConfirmed: true,
+                                        preApplyConfirmed: true,
+                                        preApplyAuthorizedTargets: expectedEvidence.config?.preApplyAuthorization ?? [],
                                     });
-                                return result;
+                                return { ...result, operationRebuildResults };
                             },
                         });
                     }
                     throw new TuiOperationBlockedError('operationNotImplemented', '这个写操作尚未接入新 Controller。');
                 },
+            }).finally(async () => {
+                await codexObservationSession?.dispose();
             });
         },
     };