@lesliechan721/aw 0.1.0-beta.13 → 0.1.0-beta.15

package/dist/src/tui/controller-runtime.js

@@ -1,8 +1,8 @@
 import crypto from 'node:crypto';
 import path from 'node:path';
-import { statusCommandV7, statusTargetIntent, } from '../commands/status-v6.js';
+import { statusCommandV7, statusTargetActivation, statusTargetIntent, statusTargetOwnershipState, } from '../commands/status-v6.js';
 import { addCatalogSourceCommand, listCatalogSources, preflightCatalogSourceMutation, removeCatalogSourceCommand, setPrimaryCatalogSourceCommand, updateCatalogSourceCommand, } from '../commands/catalog-source.js';
-import { cleanupWriteCommand, failedWriteCommandResult, installWriteCommand, mergeWriteCommandResults, reinstallWriteCommand, syncWriteCommand, uninstallWriteCommand, } from '../commands/write-commands.js';
+import { cleanupWriteCommand, failedWriteCommandResult, installWriteCommand, mergeWriteCommandResults, reinstallWriteCommand, syncWriteCommand, taskWriteCommand, uninstallWriteCommand, } from '../commands/write-commands.js';
 import { resolveSyncIntentSelection } from '../commands/sync-command.js';
 import { parseScriptTimeoutMs, SCRIPT_TIMEOUT_DEFAULT_MS, } from '../commands/options.js';
 import { readCliPackageInfo } from '../utils/local-marketplace.js';
@@ -18,7 +18,9 @@ import { createBatchIntentCompatiblePlanFingerprint } from '../commands/operatio
 import { offlineCleanupEvidenceFromInventory, offlineCleanupEvidenceMatches, } from '../commands/offline-cleanup-evidence.js';
 import { inventoryCatalogSourceReferences } from '../utils/catalog-source-references.js';
 import { operationEvidenceMatches, operationEvidenceFingerprint, TuiConfigInvalidStoreError, TuiController, TuiOperationBlockedError, } from './controller.js';
-import { buildConfigGroups, buildConfigPage, projectPlatformPlacement, } from './model.js';
+import { buildConfigGroups, buildConfigPage, buildTuiViewModel, projectPlatformPlacement, } from './model.js';
+import { buildPluginWriteTaskCandidates, buildPluginWriteTaskDraft, evaluatePluginWriteTaskRestoreVersion, pluginWriteTaskTargetKey, } from './plugin-write-task.js';
+import { createCatalogManagementService, } from './catalog-management.js';
 import { projectCatalogSourceLocation } from '../utils/catalog-source-presentation.js';
 import { calculateCatalogSourceConfigFingerprint, calculateCatalogSourceIdentity, } from '../utils/catalog-source-identity.js';
 import { checkAwCapabilitySupport, readPluginManifest } from '../utils/manifest.js';
@@ -208,6 +210,9 @@ function pluginIntent(intent) {
     return 'pluginId' in intent;
 }
 function reviewedScriptTimeoutMs(intent) {
+    if (intent.kind === 'pluginWriteTask') {
+        return parseScriptTimeoutMs(intent.scriptTimeoutMs ?? SCRIPT_TIMEOUT_DEFAULT_MS);
+    }
     if ((intent.kind === 'pluginWrite' || intent.kind === 'pluginWriteBatch')
         && (intent.action === 'install' || intent.action === 'refreshAndSync'
             || intent.action === 'reinstall' || intent.action === 'sync')) {
@@ -229,9 +234,9 @@ function selectedBatchGroups(intent) {
         }));
     const normalizedTargets = rawTargets.map((target) => {
         if ((target.platform !== 'codex' && target.platform !== 'claude' && target.platform !== 'both')
-            || target.scope !== intent.scope
+            || (target.scope !== 'project' && target.scope !== 'user')
             || (intent.selection.kind === 'targets' && target.platform === 'both')) {
-            throw new TuiOperationBlockedError('batchTargetInvalid', '批量精确目标必须使用共同 scope 和单个平台。');
+            throw new TuiOperationBlockedError('batchTargetInvalid', '批量精确目标必须使用有效 scope 和单个平台。');
         }
         const pluginId = target.pluginId;
         const parsed = parsePluginId(pluginId);
@@ -364,40 +369,6 @@ async function loadDependencyOverviews(options) {
     const unsupportedPluginIds = new Set(options.status.pluginSummaries
         .filter((summary) => (summary.missingCapabilities?.length ?? 0) > 0)
         .map((summary) => summary.pluginId));
-    const placementReferences = new Map();
-    for (const consumer of options.status.payload.targets.filter((target) => target.state !== 'absent')) {
-        const consumerNode = nodes.get(consumer.pluginId);
-        if (!consumerNode)
-            continue;
-        for (const dependencyPluginId of consumerNode.dependencies) {
-            const dependencyTargets = (targetsByPlugin.get(dependencyPluginId) ?? [])
-                .filter((target) => target.platform === consumer.platform);
-            const projectTarget = dependencyTargets.find((target) => target.scope === 'project');
-            const userTarget = dependencyTargets.find((target) => target.scope === 'user');
-            const dependencyScope = consumer.scope === 'user'
-                ? 'user'
-                : userTarget && (!projectTarget
-                    || (userTarget.state !== 'absent' && projectTarget.state === 'absent'))
-                    ? 'user'
-                    : 'project';
-            const reference = {
-                consumer: {
-                    pluginId: consumer.pluginId,
-                    platform: consumer.platform,
-                    scope: consumer.scope,
-                    project: consumer.scope === 'project' ? 'current' : null,
-                },
-                dependency: {
-                    pluginId: dependencyPluginId,
-                    platform: consumer.platform,
-                    scope: dependencyScope,
-                    project: dependencyScope === 'project' ? 'current' : null,
-                },
-            };
-            const key = `${consumer.pluginId}\0${dependencyPluginId}`;
-            placementReferences.set(key, [...(placementReferences.get(key) ?? []), reference]);
-        }
-    }
     const placementsFor = (pluginId) => {
         const targets = targetsByPlugin.get(pluginId) ?? [];
         if (targets.length > 0) {
@@ -469,7 +440,7 @@ async function loadDependencyOverviews(options) {
                 })),
                 placements,
                 aggregateStatus: aggregateFor(dependency.pluginId, placements),
-                placementReferences: placementReferences.get(`${pluginId}\0${dependency.pluginId}`) ?? [],
+                placementReferences: [],
             };
         });
         const dependentIds = [...new Set(reverse.get(pluginId) ?? [])].sort();
@@ -483,7 +454,7 @@ async function loadDependencyOverviews(options) {
                 requiredBy: [],
                 placements,
                 aggregateStatus: aggregateFor(dependentId, placements),
-                placementReferences: placementReferences.get(`${dependentId}\0${pluginId}`) ?? [],
+                placementReferences: [],
             };
         });
         const targetBlockers = (targetsByPlugin.get(pluginId) ?? []).flatMap((target) => target.reasons.filter((error) => error.code.startsWith('dependency') || error.code === 'sourceChanged')
@@ -563,6 +534,7 @@ function createReviewStageReporter(options) {
     };
 }
 export function createTuiControllerDependencies(context, progressFeed, options = {}) {
+    const catalogManagement = createCatalogManagementService(context);
     const readInventory = options.inventoryCatalogSourceReferences
         ?? inventoryCatalogSourceReferences;
     const validatedStoreEntries = new Map();
@@ -597,6 +569,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
         };
     };
     const catalogOperationByEvidence = new WeakMap();
+    const taskCatalogOperationsByEvidence = new WeakMap();
     const codexManagerByEvidence = new WeakMap();
     let sessionCatalogOperationContext;
     let sessionStatusResult;
@@ -676,6 +649,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             const result = await statusCommandV7({
                 cwd: context.cwd,
                 env: context.env,
+                nativeCliRunner: context.nativeCliRunner,
                 cliVersion: packageInfo.version,
                 verbose: context.diagnostics.verbose,
                 ...(catalogOperationContext ? { catalogOperationContext } : {}),
@@ -768,6 +742,37 @@ export function createTuiControllerDependencies(context, progressFeed, options =
     };
     const captureEvidence = async (intent, signal, preparation, operationInventory = createOperationInventoryReader(), freshCatalog = false, reusableCandidate, codexObservationSession, frozenBatchEvidence) => {
         reviewedScriptTimeoutMs(intent);
+        if ((intent.kind === 'pluginWrite'
+            && (intent.platform === 'codex' || intent.platform === 'both')
+            || intent.kind === 'pluginWriteTask'
+                && intent.targets.some((target) => target.platform === 'codex'))
+            && !codexObservationSession) {
+            const observationSession = await createCodexNativeObservationSession({
+                exactCwd: context.cwd,
+                env: context.env,
+                runner: context.nativeCliRunner,
+            });
+            try {
+                return await captureEvidence(intent, signal, preparation, operationInventory, freshCatalog, reusableCandidate, observationSession, frozenBatchEvidence);
+            }
+            finally {
+                await observationSession.dispose();
+            }
+        }
+        if (intent.kind === 'catalogManagement') {
+            signal?.throwIfAborted();
+            await preparation?.reporter.emit('validate');
+            const managementEvidence = await catalogManagement.captureEvidence(intent);
+            signal?.throwIfAborted();
+            await preparation?.reporter.emit('evidence');
+            return {
+                catalog: {
+                    configDigest: managementEvidence.workspaceBinding ?? 'catalog-store',
+                    compositeDigest: managementEvidence.evidenceDigest,
+                },
+                catalogManagement: managementEvidence,
+            };
+        }
         if (intent.kind === 'configReset') {
             const parsed = parsePluginId(intent.pluginId);
             if (!parsed.sourceId || !parsed.pluginName) {
@@ -1157,10 +1162,394 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             }
             return evidence;
         }
-        if (!pluginIntent(intent) && intent.kind !== 'pluginWriteBatch') {
+        if (!pluginIntent(intent) && intent.kind !== 'pluginWriteBatch'
+            && intent.kind !== 'pluginWriteTask') {
             throw new TuiOperationBlockedError('operationNotImplemented', '这个写操作尚未接入新 Controller。');
         }
         signal?.throwIfAborted();
+        if (intent.kind === 'pluginWriteTask') {
+            await preparation?.reporter.emit('status');
+            const packageInfo = await readCliPackageInfo();
+            const configSnapshot = await readCatalogSourcesConfigSnapshot(context.env);
+            const requestedBySource = new Map();
+            for (const target of intent.targets) {
+                const parsed = parsePluginId(target.pluginId);
+                if (!parsed.sourceId || formatPluginId({
+                    sourceId: parsed.sourceId,
+                    pluginName: parsed.pluginName,
+                }) !== target.pluginId) {
+                    throw new TuiOperationBlockedError('invalidPluginId', '任务目标必须使用 canonical pluginId。');
+                }
+                requestedBySource.set(parsed.sourceId, [
+                    ...(requestedBySource.get(parsed.sourceId) ?? []),
+                    target,
+                ]);
+            }
+            const sources = [];
+            const executableTargets = [];
+            const causes = [];
+            const blockedTargets = [];
+            const observedTargets = [];
+            const observedRevisions = [];
+            const operationContexts = new Map();
+            await preparation?.reporter.emit('catalog');
+            for (const [sourceId, requestedTargets] of [...requestedBySource.entries()]
+                .sort(([left], [right]) => left.localeCompare(right, 'en'))) {
+                signal?.throwIfAborted();
+                let catalogOperation;
+                try {
+                    catalogOperation = !freshCatalog && sessionCatalogOperationContext
+                        ? selectCatalogOperationContext(sessionCatalogOperationContext, [sourceId])
+                        : await resolveCatalogOperationContext({
+                            sourceIds: [sourceId],
+                            env: context.env,
+                            ...(!freshCatalog ? { validatedStoreEntries, validatingStoreEntries } : {}),
+                            ...(signal ? { signal } : {}),
+                        });
+                }
+                catch {
+                    blockedTargets.push(...requestedTargets.map((target) => ({
+                        target,
+                        reason: 'targetUnavailable',
+                        issueIds: [],
+                    })));
+                    continue;
+                }
+                operationContexts.set(sourceId, catalogOperation);
+                const status = await statusCommandV7({
+                    plugins: [...new Set(requestedTargets.map((target) => target.pluginId))],
+                    cwd: context.cwd,
+                    env: context.env,
+                    nativeCliRunner: context.nativeCliRunner,
+                    ...(codexObservationSession ? { codexObservationSession } : {}),
+                    cliVersion: packageInfo.version,
+                    catalogOperationContext: catalogOperation,
+                    inventoryCatalogSourceReferences: operationInventory,
+                });
+                observedTargets.push(...status.payload.targets);
+                observedRevisions.push(...status.targetRevisions);
+                const model = buildTuiViewModel({
+                    status: status.payload,
+                    pluginSummaries: status.pluginSummaries,
+                    targetRevisions: status.targetRevisions,
+                });
+                const runtimeCandidates = intent.goal === 'restore'
+                    ? buildPluginWriteTaskCandidates(model, 'restore')
+                    : requestedTargets.map((target) => {
+                        const expected = target.expectedUpdate;
+                        const revision = status.targetRevisions.find((entry) => entry.pluginId === target.pluginId && entry.platform === target.platform
+                            && entry.scope === target.scope);
+                        const live = status.payload.targets.find((entry) => {
+                            if (entry.pluginId !== target.pluginId || entry.platform !== target.platform)
+                                return false;
+                            const desired = statusTargetIntent(entry);
+                            return entry.scope === target.scope || desired.scopes.includes(target.scope);
+                        });
+                        const generation = catalogOperation.generationSet.sources.find((entry) => entry.sourceId === sourceId);
+                        const eligible = Boolean(expected && live && revision
+                            && live.sourceIdentity === expected.sourceIdentity
+                            && generation?.storeKey === expected.generationKey
+                            && revision.revision.installedVersion === expected.installedVersion
+                            && revision.revision.availableVersion === expected.activeVersion
+                            && revision.revision.state === 'upgradeAvailable');
+                        return {
+                            target,
+                            displayName: model.plugins.find((plugin) => plugin.pluginId === target.pluginId)
+                                ?.displayName ?? parsePluginId(target.pluginId).pluginName,
+                            sourceId,
+                            eligible,
+                            ...(!eligible ? { blockReason: 'updateEvidenceIncomplete' } : {}),
+                            recommendedMethod: live?.state === 'ready' ? 'sync' : 'reinstall',
+                            issueIds: [],
+                        };
+                    });
+                const draft = buildPluginWriteTaskDraft({ ...intent, targets: requestedTargets }, model, runtimeCandidates);
+                blockedTargets.push(...draft.blockedTargets);
+                if (draft.executableTargets.length === 0)
+                    continue;
+                const methodsByTarget = new Map();
+                for (const cause of draft.causes) {
+                    const key = pluginWriteTaskTargetKey(cause.repairTarget);
+                    const methods = methodsByTarget.get(key) ?? new Set();
+                    methods.add(cause.method);
+                    methodsByTarget.set(key, methods);
+                }
+                const conflicted = new Set([...methodsByTarget].filter(([, methods]) => methods.size > 1)
+                    .map(([key]) => key));
+                if (conflicted.size > 0) {
+                    const blockedKeys = new Set(draft.causes.filter((cause) => conflicted.has(pluginWriteTaskTargetKey(cause.repairTarget)))
+                        .flatMap((cause) => cause.consumers.map(pluginWriteTaskTargetKey)));
+                    blockedTargets.push(...draft.executableTargets.filter((target) => blockedKeys.has(pluginWriteTaskTargetKey(target))).map((target) => ({
+                        target,
+                        reason: 'taskActionConflict',
+                        issueIds: draft.causes.filter((cause) => cause.consumers.some((consumer) => pluginWriteTaskTargetKey(consumer) === pluginWriteTaskTargetKey(target)))
+                            .map((cause) => cause.issueId),
+                    })));
+                    draft.executableTargets = draft.executableTargets.filter((target) => !blockedKeys.has(pluginWriteTaskTargetKey(target)));
+                    draft.causes = draft.causes.filter((cause) => cause.consumers.some((consumer) => !blockedKeys.has(pluginWriteTaskTargetKey(consumer))));
+                }
+                if (draft.executableTargets.length === 0)
+                    continue;
+                const taskTargets = () => draft.executableTargets.map((target) => {
+                    const direct = draft.causes.filter((cause) => pluginWriteTaskTargetKey(cause.repairTarget) === pluginWriteTaskTargetKey(target));
+                    return {
+                        pluginId: target.pluginId,
+                        platform: target.platform,
+                        scope: target.scope,
+                        method: direct.some((cause) => cause.method === 'reinstall')
+                            ? 'reinstall' : 'sync',
+                    };
+                });
+                const repairTargets = () => [...new Map(draft.causes.map((cause) => [
+                        pluginWriteTaskTargetKey(cause.repairTarget),
+                        { ...cause.repairTarget, method: cause.method },
+                    ])).values()];
+                let preview;
+                while (draft.executableTargets.length > 0) {
+                    preview = await taskWriteCommand(taskTargets(), {
+                        cwd: context.cwd,
+                        repairTargets: repairTargets(),
+                        ...(reviewedScriptTimeoutMs(intent) === undefined
+                            ? {} : { scriptTimeoutMs: reviewedScriptTimeoutMs(intent) }),
+                    }, {
+                        ...context,
+                        catalogOperationContext: catalogOperation,
+                        expectedGenerationSetDigest: catalogOperation.generationSetDigest,
+                        expectedCatalogConfigDigest: configSnapshot.digest,
+                        inventoryCatalogSourceReferences: operationInventory,
+                        previewOperationPlan: true,
+                        ...(codexObservationSession ? { codexObservationSession } : {}),
+                        ...(preparation ? {
+                            onPreviewStage: (stage) => stage === 'catalog' ? undefined : preparation.reporter.emit(stage),
+                        } : {}),
+                    });
+                    if (!preview.operationPlan) {
+                        blockedTargets.push(...draft.executableTargets.map((target) => ({
+                            target,
+                            reason: 'targetUnavailable',
+                            issueIds: draft.causes.filter((cause) => cause.consumers.some((consumer) => pluginWriteTaskTargetKey(consumer) === pluginWriteTaskTargetKey(target)))
+                                .map((cause) => cause.issueId),
+                        })));
+                        draft.executableTargets = [];
+                        draft.causes = [];
+                        break;
+                    }
+                    if (intent.goal === 'restore') {
+                        const grouped = new Map();
+                        const blockedByVersion = new Map();
+                        for (const cause of draft.causes) {
+                            const placements = (preview.dependencyPlan?.targets ?? []).filter((target) => target.pluginId === cause.repairTarget.pluginId
+                                && target.platform === cause.repairTarget.platform);
+                            const placement = placements.find((target) => target.requestedScope === cause.repairTarget.scope)
+                                ?? (placements.length === 1 ? placements[0] : undefined);
+                            if (!placement) {
+                                throw new TuiOperationBlockedError('taskRepairPlacementMissing', '任务修复目标无法绑定到依赖位置。');
+                            }
+                            const repairTarget = {
+                                pluginId: cause.repairTarget.pluginId,
+                                platform: cause.repairTarget.platform,
+                                scope: placement.requestedScope ?? placement.resolvedScope,
+                            };
+                            const version = evaluatePluginWriteTaskRestoreVersion(repairTarget, cause.restoreVersionEvidence?.state === 'absent', model);
+                            if (!version.evidence || version.blockReason) {
+                                for (const consumer of cause.consumers) {
+                                    const key = pluginWriteTaskTargetKey(consumer);
+                                    const current = blockedByVersion.get(key) ?? {
+                                        reason: version.blockReason ?? 'restoreVersionUnverified',
+                                        issueIds: new Set(),
+                                    };
+                                    if (version.blockReason === 'restoreVersionChanged') {
+                                        current.reason = version.blockReason;
+                                    }
+                                    current.issueIds.add(cause.issueId);
+                                    blockedByVersion.set(key, current);
+                                }
+                                continue;
+                            }
+                            const causeKey = ['restore', cause.sourceIdentity,
+                                pluginWriteTaskTargetKey(repairTarget)].join('\0');
+                            const current = grouped.get(causeKey);
+                            grouped.set(causeKey, {
+                                cause: {
+                                    ...cause,
+                                    causeKey,
+                                    issueId: [cause.issueId, ...(current?.issueIds ?? [])]
+                                        .sort((left, right) => left.localeCompare(right, 'en'))[0],
+                                    repairTarget,
+                                    consumers: [...new Map([
+                                            ...(current?.cause.consumers ?? []),
+                                            ...cause.consumers,
+                                        ].map((consumer) => [pluginWriteTaskTargetKey(consumer), consumer])).values()]
+                                        .sort((left, right) => pluginWriteTaskTargetKey(left)
+                                        .localeCompare(pluginWriteTaskTargetKey(right), 'en')),
+                                    restoreVersionEvidence: version.evidence,
+                                },
+                                issueIds: new Set([...(current?.issueIds ?? []), cause.issueId]),
+                                methods: new Set([...(current?.methods ?? []), cause.method]),
+                            });
+                        }
+                        for (const group of grouped.values()) {
+                            if (group.methods.size < 2)
+                                continue;
+                            for (const consumer of group.cause.consumers) {
+                                const key = pluginWriteTaskTargetKey(consumer);
+                                const current = blockedByVersion.get(key) ?? {
+                                    reason: 'taskActionConflict',
+                                    issueIds: new Set(),
+                                };
+                                group.issueIds.forEach((issueId) => current.issueIds.add(issueId));
+                                blockedByVersion.set(key, current);
+                            }
+                        }
+                        const newlyBlockedKeys = new Set(blockedByVersion.keys());
+                        blockedTargets.push(...draft.executableTargets.flatMap((target) => {
+                            const blocked = blockedByVersion.get(pluginWriteTaskTargetKey(target));
+                            return blocked ? [{
+                                    target,
+                                    reason: blocked.reason,
+                                    issueIds: [...blocked.issueIds].sort((left, right) => left.localeCompare(right, 'en')),
+                                }] : [];
+                        }));
+                        const normalizedCauses = [...grouped.values()]
+                            .filter((group) => group.methods.size === 1)
+                            .map((group) => ({
+                            ...group.cause,
+                            consumers: group.cause.consumers.filter((consumer) => !newlyBlockedKeys.has(pluginWriteTaskTargetKey(consumer))),
+                        }))
+                            .filter((cause) => cause.consumers.length > 0)
+                            .sort((left, right) => left.causeKey.localeCompare(right.causeKey, 'en'));
+                        const normalizedTargets = draft.executableTargets.filter((target) => !newlyBlockedKeys.has(pluginWriteTaskTargetKey(target)));
+                        const changed = JSON.stringify(normalizedCauses) !== JSON.stringify(draft.causes)
+                            || JSON.stringify(normalizedTargets) !== JSON.stringify(draft.executableTargets);
+                        draft.causes = normalizedCauses;
+                        draft.executableTargets = normalizedTargets;
+                        if (changed)
+                            continue;
+                    }
+                    const blockedPlanTargets = (preview.dependencyPlan?.targets ?? []).filter((target) => target.action === 'block' || target.errorCode !== undefined);
+                    if (blockedPlanTargets.length === 0)
+                        break;
+                    const requestedKeys = new Set(draft.executableTargets.map(pluginWriteTaskTargetKey));
+                    const errorCodesByRoot = new Map();
+                    for (const blockedPlanTarget of blockedPlanTargets) {
+                        const pending = [blockedPlanTarget];
+                        const visited = new Set();
+                        const mappedRoots = new Set();
+                        const repairKey = pluginWriteTaskTargetKey({
+                            pluginId: blockedPlanTarget.pluginId,
+                            platform: blockedPlanTarget.platform,
+                            scope: blockedPlanTarget.requestedScope ?? blockedPlanTarget.resolvedScope,
+                        });
+                        for (const cause of draft.causes) {
+                            if (pluginWriteTaskTargetKey(cause.repairTarget) !== repairKey)
+                                continue;
+                            cause.consumers.forEach((consumer) => mappedRoots.add(pluginWriteTaskTargetKey(consumer)));
+                        }
+                        while (pending.length > 0) {
+                            const current = pending.shift();
+                            const currentKey = pluginWriteTaskTargetKey({
+                                pluginId: current.pluginId,
+                                platform: current.platform,
+                                scope: current.requestedScope ?? current.resolvedScope,
+                            });
+                            if (visited.has(currentKey))
+                                continue;
+                            visited.add(currentKey);
+                            if (current.relation === 'requested' && requestedKeys.has(currentKey)) {
+                                mappedRoots.add(currentKey);
+                            }
+                            for (const consumer of current.requiredByTargets ?? []) {
+                                const consumerKey = pluginWriteTaskTargetKey(consumer);
+                                if (requestedKeys.has(consumerKey)) {
+                                    mappedRoots.add(consumerKey);
+                                    continue;
+                                }
+                                const placement = preview.dependencyPlan?.targets.find((target) => target.pluginId === consumer.pluginId && target.platform === consumer.platform
+                                    && (target.requestedScope ?? target.resolvedScope) === consumer.scope);
+                                if (placement)
+                                    pending.push(placement);
+                            }
+                        }
+                        if (mappedRoots.size === 0) {
+                            throw new TuiOperationBlockedError('taskPlanConsumerMissing', '任务计划中的阻止项无法映射到请求目标。');
+                        }
+                        for (const key of mappedRoots) {
+                            const codes = errorCodesByRoot.get(key) ?? new Set();
+                            codes.add(blockedPlanTarget.errorCode ?? 'writePlanBlocked');
+                            errorCodesByRoot.set(key, codes);
+                        }
+                    }
+                    blockedTargets.push(...draft.executableTargets.flatMap((target) => {
+                        const codes = errorCodesByRoot.get(pluginWriteTaskTargetKey(target));
+                        return codes ? [{
+                                target,
+                                reason: 'targetUnavailable',
+                                issueIds: draft.causes.filter((cause) => cause.consumers.some((consumer) => pluginWriteTaskTargetKey(consumer) === pluginWriteTaskTargetKey(target)))
+                                    .map((cause) => cause.issueId),
+                                errorCodes: [...codes].sort((left, right) => left.localeCompare(right, 'en')),
+                            }] : [];
+                    }));
+                    draft.executableTargets = draft.executableTargets.filter((target) => !errorCodesByRoot.has(pluginWriteTaskTargetKey(target)));
+                    draft.causes = draft.causes.map((cause) => ({
+                        ...cause,
+                        consumers: cause.consumers.filter((consumer) => !errorCodesByRoot.has(pluginWriteTaskTargetKey(consumer))),
+                    })).filter((cause) => cause.consumers.length > 0);
+                }
+                if (!preview?.operationPlan || draft.executableTargets.length === 0)
+                    continue;
+                const sourceIdentity = draft.causes[0]?.sourceIdentity
+                    ?? status.payload.catalog.sources.find((source) => source.id === sourceId)?.identity;
+                if (!sourceIdentity) {
+                    throw new TuiOperationBlockedError('taskSourceIdentityMissing', '任务来源身份不可验证。');
+                }
+                const sourceEvidence = {
+                    sourceId,
+                    sourceIdentity,
+                    requestedTargets: draft.executableTargets,
+                    causes: draft.causes,
+                    preview,
+                    executable: true,
+                };
+                sources.push(sourceEvidence);
+                executableTargets.push(...draft.executableTargets);
+                causes.push(...draft.causes);
+            }
+            const canonicalBlocked = [...new Map(blockedTargets.map((target) => [
+                    pluginWriteTaskTargetKey(target.target), target,
+                ])).values()].sort((left, right) => pluginWriteTaskTargetKey(left.target)
+                .localeCompare(pluginWriteTaskTargetKey(right.target), 'en'));
+            if (executableTargets.length === 0) {
+                throw new TuiOperationBlockedError('taskNoExecutableTargets', '任务没有可安全执行的目标。');
+            }
+            if (intent.executionPolicy === 'all' && canonicalBlocked.length > 0) {
+                throw new TuiOperationBlockedError('taskHasBlockedTargets', '部分目标需要先处理。请调整选择。');
+            }
+            await preparation?.reporter.emit('evidence');
+            const evidence = {
+                catalog: {
+                    configDigest: configSnapshot.digest,
+                    compositeDigest: digest(sources.map((source) => [
+                        source.sourceId,
+                        source.sourceIdentity,
+                        source.preview.operationPlan?.planFingerprint,
+                    ])),
+                },
+                taskPlan: {
+                    goal: intent.goal,
+                    requestedTargets: intent.targets,
+                    executableTargets: [...executableTargets].sort((left, right) => pluginWriteTaskTargetKey(left).localeCompare(pluginWriteTaskTargetKey(right), 'en')),
+                    causes: [...new Map(causes.map((cause) => [cause.causeKey, cause])).values()]
+                        .sort((left, right) => left.causeKey.localeCompare(right.causeKey, 'en')),
+                    blockedTargets: canonicalBlocked,
+                    sources,
+                    targetFingerprint: statusTargetFingerprint(observedTargets, observedRevisions),
+                    planFingerprint: '',
+                },
+            };
+            evidence.taskPlan.planFingerprint = operationEvidenceFingerprint(evidence);
+            taskCatalogOperationsByEvidence.set(evidence, operationContexts);
+            return evidence;
+        }
         if (intent.kind === 'pluginWriteBatch') {
             await preparation?.reporter.emit('status');
             const selection = await resolveBatchGroups(intent, context.env, context.cwd, frozenBatchEvidence?.requestedPluginIds);
@@ -1232,6 +1621,33 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             await preparation?.reporter.emit('evidence');
             signal?.throwIfAborted();
             const merged = mergeWriteCommandResults(groups.map((group) => group.preview));
+            const targetVersions = groups.flatMap((group) => {
+                if (group.platform === 'both')
+                    return [];
+                const platform = group.platform;
+                return group.requestedPluginIds.map((pluginId) => {
+                    const live = sessionStatusResult?.payload.targets.find((target) => target.pluginId === pluginId && target.platform === platform
+                        && (target.scope === group.scope || statusTargetIntent(target).scopes.includes(group.scope)
+                            || platform === 'codex' && statusTargetActivation(target)?.[group.scope] === true));
+                    const revision = sessionStatusResult?.targetRevisions?.find((target) => target.pluginId === pluginId && target.platform === platform
+                        && target.scope === group.scope)?.revision;
+                    const activation = live ? statusTargetActivation(live) : undefined;
+                    const ownership = live && live.scope === group.scope
+                        ? statusTargetOwnershipState(live) : 'absent';
+                    const present = ownership === 'present' || ownership === 'partial'
+                        || platform === 'codex' && activation?.[group.scope] === true;
+                    const planned = live ? statusTargetIntent(live).scopes.includes(group.scope) : false;
+                    return {
+                        pluginId,
+                        platform,
+                        scope: group.scope,
+                        presence: present ? 'installed'
+                            : ownership === 'absent' && planned ? 'new' : 'unknown',
+                        ...(revision?.installedVersion ? { installedVersion: revision.installedVersion } : {}),
+                        ...(revision?.availableVersion ? { availableVersion: revision.availableVersion } : {}),
+                    };
+                });
+            });
             const evidence = {
                 catalog: {
                     configDigest: configSnapshot.digest,
@@ -1240,6 +1656,13 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                 },
                 requestedPluginIds: selection.requestedPluginIds,
                 groups,
+                targetVersions: [...new Map(targetVersions.map((target) => [[
+                            target.pluginId, target.platform, target.scope,
+                        ].join('\0'), target])).values()].sort((left, right) => [
+                    left.pluginId, left.platform, left.scope,
+                ].join('\0').localeCompare([
+                    right.pluginId, right.platform, right.scope,
+                ].join('\0'), 'en')),
                 ...(merged.dependencyPlan ? { dependencyPlan: merged.dependencyPlan } : {}),
                 ...(merged.codexReconcilePlans ? { codexReconcilePlans: merged.codexReconcilePlans } : {}),
                 ...(merged.operationPlan ? { operationPlan: merged.operationPlan } : {}),
@@ -1440,6 +1863,8 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                 : {}),
             cwd: context.cwd,
             env: context.env,
+            nativeCliRunner: context.nativeCliRunner,
+            ...(codexObservationSession ? { codexObservationSession } : {}),
             cliVersion: packageInfo.version,
             ...(statusCatalogOperation ? { catalogOperationContext: statusCatalogOperation } : {}),
             inventoryCatalogSourceReferences: operationInventory,
@@ -1580,6 +2005,21 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                     };
                 },
             });
+        if (intent.kind === 'pluginWrite' && intent.expectedUpdate) {
+            const revision = status.targetRevisions.find((entry) => entry.pluginId === intent.pluginId && entry.platform === intent.platform
+                && entry.scope === intent.scope);
+            const generation = catalogOperation?.generationSet.sources.find((entry) => entry.sourceId === selected.source.sourceId);
+            if (intent.action !== 'sync'
+                || !('pluginVersion' in selected.source)
+                || selected.source.sourceIdentity !== intent.expectedUpdate.sourceIdentity
+                || selected.source.pluginVersion !== intent.expectedUpdate.activeVersion
+                || generation?.storeKey !== intent.expectedUpdate.generationKey
+                || revision?.revision.installedVersion !== intent.expectedUpdate.installedVersion
+                || revision?.revision.availableVersion !== intent.expectedUpdate.activeVersion
+                || revision.revision.state !== 'upgradeAvailable') {
+                throw operationReviewStale('插件更新版本或 Active Catalog 证据已变化。');
+            }
+        }
         let codexManager;
         let resolvedCodexManager;
         const hasDeclaredDependencies = (status.pluginSummaries.find((summary) => summary.pluginId === intent.pluginId)?.dependencyTotalCount ?? 0) > 0;
@@ -1743,6 +2183,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
         return evidence;
     };
     const dependencies = {
+        catalogManagement,
         beginCatalogSession(sessionOptions) {
             sessionCatalogOperationContext = undefined;
             if (sessionOptions?.reuseValidatedGenerations !== true) {
@@ -1817,11 +2258,25 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                     validatedStoreEntries.clear();
                     validatingStoreEntries.clear();
                 }
-                const evidence = await captureEvidence(intent, signal, {
-                    reporter,
-                    validateIntent: true,
-                }, createOperationInventoryReader(), intent.kind === 'pluginWrite'
-                    && intent.action === 'refreshAndSync', reusableCandidate);
+                const taskObservationSession = intent.kind === 'pluginWriteTask'
+                    && intent.targets.some((target) => target.platform === 'codex')
+                    ? await createCodexNativeObservationSession({
+                        exactCwd: context.cwd,
+                        env: context.env,
+                        runner: context.nativeCliRunner,
+                    })
+                    : undefined;
+                let evidence;
+                try {
+                    evidence = await captureEvidence(intent, signal, {
+                        reporter,
+                        validateIntent: true,
+                    }, createOperationInventoryReader(), intent.kind === 'pluginWrite'
+                        && intent.action === 'refreshAndSync', reusableCandidate, taskObservationSession);
+                }
+                finally {
+                    await taskObservationSession?.dispose();
+                }
                 if (preparationWarnings.length > 0)
                     evidence.preparationWarnings = preparationWarnings;
                 return evidence;
@@ -1835,6 +2290,10 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             return evidence.dependencyPlan;
         },
         async validateIntent(intent, signal) {
+            if (intent.kind === 'catalogManagement') {
+                signal.throwIfAborted();
+                return;
+            }
             if (intent.kind === 'catalogSourcesRecovery') {
                 signal.throwIfAborted();
                 return;
@@ -2082,6 +2541,25 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             };
         },
         async executeIntent(intent, expectedEvidence, signal) {
+            if (intent.kind === 'catalogManagement') {
+                signal?.throwIfAborted();
+                if (!expectedEvidence.catalogManagement) {
+                    throw new TuiOperationBlockedError('operationReviewStale', 'Catalog management Review evidence is missing.');
+                }
+                const progressLabels = {
+                    validate: '验证 Catalog 状态',
+                    build: '构建 Catalog snapshot',
+                    source: '更新开发来源',
+                    sync: '同步开发来源',
+                    prune: '清理 Catalog store',
+                    prepare: '准备发布计划',
+                    remote: '写入 Catalog 远端',
+                    verify: '验证操作结果',
+                };
+                return catalogManagement.execute(intent, expectedEvidence.catalogManagement, (stage) => {
+                    progressFeed?.setCurrent({ target: 'Catalog 管理', phase: progressLabels[stage] }, `Catalog 管理：${progressLabels[stage]}`);
+                });
+            }
             if (intent.kind === 'catalogSourcesRecovery') {
                 signal?.throwIfAborted();
                 return recoverInvalidCatalogSourcesConfig({ env: context.env });
@@ -2341,6 +2819,7 @@ export function createTuiControllerDependencies(context, progressFeed, options =
             }
             const codexObservationSession = intent.kind === 'pluginWrite'
                 || intent.kind === 'pluginWriteBatch'
+                || intent.kind === 'pluginWriteTask'
                 ? await createCodexNativeObservationSession({
                     exactCwd: context.cwd,
                     env: context.env,
@@ -2353,9 +2832,20 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                 action: async (awHomeMutationToken) => {
                     await tuiControllerRuntimeTestHooks?.beforeMutationEvidenceCapture?.();
                     const operationInventory = createOperationInventoryReader();
-                    const currentEvidence = await captureEvidence(intent, undefined, undefined, operationInventory, true, undefined, codexObservationSession, intent.kind === 'pluginWriteBatch'
-                        ? expectedEvidence
-                        : undefined);
+                    let currentEvidence;
+                    try {
+                        currentEvidence = await captureEvidence(intent, undefined, undefined, operationInventory, true, undefined, codexObservationSession, intent.kind === 'pluginWriteBatch'
+                            ? expectedEvidence
+                            : undefined);
+                    }
+                    catch (error) {
+                        const code = error instanceof TuiOperationBlockedError ? error.code : undefined;
+                        if (intent.kind === 'pluginWriteTask'
+                            && (code === 'taskHasBlockedTargets' || code === 'taskNoExecutableTargets')) {
+                            throw operationReviewStale('确认后任务可执行目标发生变化。');
+                        }
+                        throw error;
+                    }
                     if (intent.kind === 'pluginWriteBatch') {
                         const expectedBatch = expectedEvidence;
                         const currentBatch = currentEvidence;
@@ -2498,6 +2988,134 @@ export function createTuiControllerDependencies(context, progressFeed, options =
                             groupResults,
                         };
                     }
+                    if (intent.kind === 'pluginWriteTask') {
+                        const expectedTask = expectedEvidence;
+                        const currentTask = currentEvidence;
+                        if (!operationEvidenceMatches(expectedTask, currentTask)) {
+                            throw operationReviewStale('确认后任务目标、根因、版本或写入计划发生变化。');
+                        }
+                        await tuiControllerRuntimeTestHooks?.afterMutationEvidenceCapture?.();
+                        const operationContexts = taskCatalogOperationsByEvidence.get(currentEvidence)
+                            ?? new Map();
+                        const sourceResults = [];
+                        const completedTargetKeys = new Set();
+                        const preApplyExecutionCache = new Map();
+                        const commandTargets = (source) => source.requestedTargets.map((target) => {
+                            const direct = source.causes.filter((cause) => pluginWriteTaskTargetKey(cause.repairTarget) === pluginWriteTaskTargetKey(target));
+                            return {
+                                pluginId: target.pluginId,
+                                platform: target.platform,
+                                scope: target.scope,
+                                method: direct.some((cause) => cause.method === 'reinstall')
+                                    ? 'reinstall' : 'sync',
+                            };
+                        });
+                        const repairTargets = (source) => [...new Map(source.causes.map((cause) => [
+                                pluginWriteTaskTargetKey(cause.repairTarget),
+                                { ...cause.repairTarget, method: cause.method },
+                            ])).values()];
+                        const stoppedResult = (source, error) => mergeWriteCommandResults(source.requestedTargets.map((target) => failedWriteCommandResult('sync', [target.pluginId], {
+                            cwd: context.cwd,
+                            platform: target.platform,
+                            scope: target.scope,
+                        }, error)));
+                        const appendStoppedSources = (startIndex, message) => {
+                            for (const [offset, source] of expectedTask.taskPlan.sources.slice(startIndex).entries()) {
+                                sourceResults.push({
+                                    sourceId: source.sourceId,
+                                    sourceIdentity: source.sourceIdentity,
+                                    requestedTargets: source.requestedTargets,
+                                    result: stoppedResult(source, offset === 0
+                                        ? new TuiOperationBlockedError('operationReviewStale', message)
+                                        : new TuiOperationBlockedError('taskNotStarted', '前一个来源计划已变化，因此这个来源没有开始。')),
+                                });
+                            }
+                        };
+                        for (const [sourceIndex, reviewed] of expectedTask.taskPlan.sources.entries()) {
+                            const current = currentTask.taskPlan.sources.find((source) => source.sourceId === reviewed.sourceId);
+                            const catalogOperation = operationContexts.get(reviewed.sourceId);
+                            if (!current || !catalogOperation || current.sourceIdentity !== reviewed.sourceIdentity) {
+                                if (sourceResults.length === 0) {
+                                    throw operationReviewStale('确认后任务来源身份发生变化。');
+                                }
+                                appendStoppedSources(sourceIndex, '确认后任务来源身份发生变化。');
+                                break;
+                            }
+                            const sourceInventory = sourceResults.length === 0
+                                ? operationInventory : createOperationInventoryReader();
+                            let executionPreview = current.preview;
+                            if (completedTargetKeys.size > 0) {
+                                executionPreview = await taskWriteCommand(commandTargets(current), {
+                                    cwd: context.cwd,
+                                    repairTargets: repairTargets(current),
+                                    ...(reviewedScriptTimeoutMs(intent) === undefined
+                                        ? {} : { scriptTimeoutMs: reviewedScriptTimeoutMs(intent) }),
+                                }, {
+                                    ...context,
+                                    awHomeMutationToken,
+                                    catalogOperationContext: catalogOperation,
+                                    expectedGenerationSetDigest: catalogOperation.generationSetDigest,
+                                    expectedCatalogConfigDigest: expectedTask.catalog.configDigest,
+                                    inventoryCatalogSourceReferences: sourceInventory,
+                                    previewOperationPlan: true,
+                                    preApplyExecutionCache,
+                                    ...(codexObservationSession ? { codexObservationSession } : {}),
+                                });
+                                if (!reviewed.preview.operationPlan || !executionPreview.operationPlan
+                                    || createBatchIntentCompatiblePlanFingerprint(reviewed.preview.operationPlan, completedTargetKeys) !== createBatchIntentCompatiblePlanFingerprint(executionPreview.operationPlan, completedTargetKeys)) {
+                                    appendStoppedSources(sourceIndex, '前序结果改变了这个来源的实际写入计划。');
+                                    break;
+                                }
+                            }
+                            const requiresManagedCodex = reviewed.preview.codexManagerPreview?.state === 'requires-install';
+                            const result = await taskWriteCommand(commandTargets(current), {
+                                cwd: context.cwd,
+                                repairTargets: repairTargets(current),
+                                ...(reviewedScriptTimeoutMs(intent) === undefined
+                                    ? {} : { scriptTimeoutMs: reviewedScriptTimeoutMs(intent) }),
+                            }, {
+                                ...context,
+                                awHomeMutationToken,
+                                catalogOperationContext: catalogOperation,
+                                expectedGenerationSetDigest: catalogOperation.generationSetDigest,
+                                expectedCatalogConfigDigest: expectedTask.catalog.configDigest,
+                                inventoryCatalogSourceReferences: sourceInventory,
+                                preApplyConfirmed: true,
+                                preApplyExecutionCache,
+                                ...(executionPreview.operationPlan
+                                    ? { expectedPlanFingerprint: executionPreview.operationPlan.planFingerprint } : {}),
+                                ...(requiresManagedCodex ? { managedCodexAuthorizer: async () => true } : {}),
+                                ...(codexObservationSession ? { codexObservationSession } : {}),
+                            });
+                            if (writeReviewIsStale(result)) {
+                                if (sourceResults.length === 0)
+                                    throwIfWriteReviewStale(result);
+                                appendStoppedSources(sourceIndex, '这个来源的实际写入计划发生变化。');
+                                break;
+                            }
+                            for (const target of result.targetResults) {
+                                if (target.state === 'completed') {
+                                    completedTargetKeys.add([
+                                        target.target.pluginId,
+                                        target.target.platform,
+                                        target.target.scope,
+                                    ].join('\0'));
+                                }
+                            }
+                            sourceResults.push({
+                                sourceId: reviewed.sourceId,
+                                sourceIdentity: reviewed.sourceIdentity,
+                                requestedTargets: reviewed.requestedTargets,
+                                result,
+                            });
+                        }
+                        const merged = mergeWriteCommandResults(sourceResults.map((source) => source.result));
+                        return {
+                            ...merged,
+                            taskPlan: expectedTask.taskPlan,
+                            sourceResults,
+                        };
+                    }
                     if (intent.kind !== 'pluginWrite'
                         && !operationEvidenceMatches(expectedEvidence, currentEvidence)) {
                         throw new TuiOperationBlockedError('operationReviewStale', '确认后状态发生变化。');