@linghun/tui 0.1.0

package/dist/chunk-LVIM2PA7.js

@@ -0,0 +1,663 @@
+import {
+  redactedPath,
+  runCommandCapture
+} from "./chunk-RVY34HK4.js";
+import {
+  formatFeatureFlags,
+  getFeatureFlags
+} from "./chunk-E72U7WW7.js";
+import {
+  createHookState,
+  createPluginState,
+  createSkillState,
+  stableId
+} from "./chunk-QLRTQHTR.js";
+import {
+  getRuntimeStatusProvider
+} from "./chunk-3LT6OWQ2.js";
+import {
+  stableHash
+} from "./chunk-4T5DJW54.js";
+import {
+  formatError,
+  sanitizeDiagnosticText,
+  truncateDisplay
+} from "./chunk-OMZYPQVA.js";
+
+// src/extension-command-runtime.ts
+import { randomUUID } from "crypto";
+import { mkdir, mkdtemp, readFile, rm, stat, writeFile } from "fs/promises";
+import { tmpdir } from "os";
+import { basename, extname, join, resolve } from "path";
+import { resetExtensionTrustForInstall, saveExtensionEnablement } from "@linghun/config";
+function formatConfigOverview(context) {
+  const zh = context.language === "zh-CN";
+  const yes = zh ? "\u662F" : "yes";
+  const no = zh ? "\u5426" : "no";
+  const onOff = (b) => b ? yes : no;
+  const executor = context.config.modelRoutes.routes.find((r) => r.role === "executor");
+  const trust = context.config.workspaceTrust;
+  const trustLabel = trust.recorded ? trust.level === "trusted" ? zh ? "\u5DF2\u4FE1\u4EFB" : "trusted" : zh ? "\u53D7\u9650" : "restricted" : zh ? "\u672A\u8BB0\u5F55" : "unrecorded";
+  const mcpServers = context.config.mcp.enabledServers.join(", ") || (zh ? "\u65E0" : "none");
+  const indexStatus = context.index.status || (zh ? "\u672A\u77E5" : "unknown");
+  const cacheCount = context.cache.history.length;
+  const bgRunning = context.backgroundTasks.filter((t) => t.status === "running").length;
+  const skillsTrusted = context.skills.trustedIds.length;
+  const pluginsTrusted = context.plugins.trustedIds.length;
+  const remoteEnabled = Boolean(
+    context.config.remote?.enabled
+  );
+  if (zh) {
+    return [
+      "\u914D\u7F6E\u6982\u89C8\uFF08\u4E00\u7AD9\u5F0F\u53EA\u8BFB\uFF09",
+      `- \u8BED\u8A00\uFF1A${context.config.language}\uFF08\u7528 /language en-US \u5207\u6362\uFF09`,
+      `- \u6A21\u578B\uFF1A${context.model}\uFF08\u6267\u884C\u5668\u5DE5\u5177 ${onOff(Boolean(executor?.allowTools))}\uFF1B\u7528 /model\u3001/model doctor\u3001/model route \u67E5\u770B\u4E0E\u8BCA\u65AD\uFF09`,
+      `- \u6743\u9650\u6A21\u5F0F\uFF1A${context.permissionMode}\uFF08\u7528 /mode \u5207\u6362\uFF1B\u89C4\u5219\u7528 /permissions\uFF09`,
+      `- \u5DE5\u4F5C\u533A\u4FE1\u4EFB\uFF1A${trustLabel}\uFF08\u7528 /trust \u8C03\u6574\uFF09`,
+      `- \u7D22\u5F15\uFF1A${indexStatus}\uFF08\u7528 /index status\u3001/index doctor\u3001/index check\uFF09`,
+      `- MCP\uFF1A\u5DF2\u914D\u7F6E\u670D\u52A1 ${mcpServers}\uFF08\u7528 /mcp\u3001/mcp doctor\u3001/mcp tools\uFF09`,
+      "- \u8BB0\u5FC6\uFF1A\u7528 /memory\u3001/memory storage\u3001/memory review\u3001/memory learn",
+      `- \u7F13\u5B58\uFF1A\u5386\u53F2 ${cacheCount} \u6761\uFF08\u7528 /cache status\u3001/cache-log\u3001/usage\u3001/stats\uFF09`,
+      `- \u540E\u53F0\uFF1A\u8FD0\u884C\u4E2D ${bgRunning}\uFF08\u7528 /background\u3001/job\u3001/details\uFF09`,
+      `- \u8FDC\u7A0B\uFF1A${onOff(remoteEnabled)}\uFF08\u7528 /remote\uFF09`,
+      `- \u94A9\u5B50\uFF1A${onOff(context.hooks.enabled)}\uFF1B\u9879\u76EE\u4FE1\u4EFB ${onOff(context.hooks.projectTrusted)}\uFF08\u7528 /doctor hooks\uFF09`,
+      `- \u63D2\u4EF6\uFF1A\u53D1\u73B0 ${onOff(context.plugins.enabled)}\uFF1B\u4FE1\u4EFB id \u6570 ${pluginsTrusted}\uFF08\u7528 /plugins\u3001/plugins doctor\uFF09`,
+      `- \u6280\u80FD\uFF1A\u53D1\u73B0 ${onOff(context.skills.enabled)}\uFF1B\u4FE1\u4EFB id \u6570 ${skillsTrusted}\uFF08\u7528 /skills\u3001/skills status\uFF09`,
+      `- \u5DE5\u4F5C\u6D41\uFF1A\u53D1\u73B0 ${onOff(context.workflows.enabled)}\uFF08\u7528 /workflows\uFF09`,
+      "\u4E0B\u4E00\u6B65\uFF1A\u76F4\u63A5\u8F93\u5165\u5BF9\u5E94 slash \u8FDB\u5165\uFF1B\u7528 /features \u67E5\u770B\u9ED8\u8BA4\u529F\u80FD\u7B56\u7565\uFF0C\u7528 /help all \u67E5\u770B\u5B8C\u6574\u547D\u4EE4\u8868\u3002"
+    ].join("\n");
+  }
+  return [
+    "Configuration overview (one-stop read-only)",
+    `- language: ${context.config.language} (switch via /language en-US)`,
+    `- model: ${context.model} (executor tools ${onOff(Boolean(executor?.allowTools))}; use /model, /model doctor, /model route)`,
+    `- permission mode: ${context.permissionMode} (switch via /mode; rules via /permissions)`,
+    `- workspace trust: ${trustLabel} (adjust via /trust)`,
+    `- index: ${indexStatus} (use /index status, /index doctor, /index check)`,
+    `- MCP: configured servers ${mcpServers} (use /mcp, /mcp doctor, /mcp tools)`,
+    "- memory: use /memory, /memory storage, /memory review, /memory learn",
+    `- cache: history ${cacheCount} (use /cache status, /cache-log, /usage, /stats)`,
+    `- background: running ${bgRunning} (use /background, /job, /details)`,
+    `- remote: ${onOff(remoteEnabled)} (use /remote)`,
+    `- hooks: ${onOff(context.hooks.enabled)}; project trusted ${onOff(context.hooks.projectTrusted)} (use /doctor hooks)`,
+    `- plugins: discover ${onOff(context.plugins.enabled)}; trusted ids ${pluginsTrusted} (use /plugins, /plugins doctor)`,
+    `- skills: discover ${onOff(context.skills.enabled)}; trusted ids ${skillsTrusted} (use /skills, /skills status)`,
+    `- workflows: discover ${onOff(context.workflows.enabled)} (use /workflows)`,
+    "Next: type the slash to enter the panel. /features for default policy. /help all for the full command list."
+  ].join("\n");
+}
+function formatFeaturePolicy(context) {
+  return [
+    "Feature policy\uFF08default CCB-style posture\uFF09",
+    "Recommended foundation\uFF08default on / visible\uFF09",
+    `- language: ${context.config.language}; en-US available via /language en-US`,
+    `- model/tool loop: provider tools ${context.config.modelRoutes.routes.find((route) => route.role === "executor")?.allowTools ? "yes" : "no"}; evidence and long output are kept in details, available via /details`,
+    `- cache/stats: /cache status, /break-cache status, /usage, /stats; history ${context.cache.history.length}`,
+    `- model doctor: /model doctor and /model route doctor; provider ${getRuntimeStatusProvider(context)} model ${context.model}`,
+    "- index: status/search/architecture are readonly; init fast/refresh are safe local actions with safety scan; auto full-repo index on startup no",
+    `- codebase-memory MCP: discoverable/diagnosable via /mcp doctor; enabled servers ${context.config.mcp.enabledServers.join(",") || "none"}`,
+    `- permissions: project allowlist visible via /permissions; default mode ${context.permissionMode}`,
+    "Advanced/high-cost/automation\uFF08discoverable, not auto-run\uFF09",
+    "- memory: controlled extraction runtime on when learning is active; stable taxonomy memory writes only to dedicated memory dir; review via /memory review",
+    `- skills: discover manifests ${context.skills.enabled ? "yes" : "no"}; auto execute no; trusted ids ${context.skills.trustedIds.join(",") || "none"}`,
+    `- workflows: discover templates ${context.workflows.enabled ? "yes" : "no"}; auto run no; /workflows <name> only shows Start Gate`,
+    `- plugins: discover manifests ${context.plugins.enabled ? "yes" : "no"}; auto execute no; trusted ids ${context.plugins.trustedIds.join(",") || "none"}`,
+    "- agents/background: manual commands only; verifier auto fork no; coordinator/multi-worker unsupported",
+    "Dangerous defaults\uFF08off\uFF09",
+    "- mode switching: direct /mode and Shift+Tab cycling; switching modes does not bypass hard denies, path safety, or the permission pipeline",
+    `- hooks: enabled ${context.hooks.enabled ? "yes" : "no"}; project trusted ${context.hooks.projectTrusted ? "yes" : "no"}; auto execution no`,
+    "- auto accept all edits no; auto dependency install no; auto networking no; delete/rename/restore auto execution no",
+    "- plugin marketplace auto install/update no; remote bridge/control auto connect no; continuous phase progression no",
+    "Runtime feature flags\uFF08local, not remote GrowthBook\uFF09",
+    ...formatFeatureFlags(getFeatureFlags(context)),
+    "Unsupported / pending",
+    "- remote channels, voice, computer-use/browser control, daemon jobs, plugin marketplace, and AI sessions auto injection are not default features."
+  ].join("\n");
+}
+function formatSkills(context) {
+  const lines = [
+    "Skills\uFF08summary-first / load-on-demand\uFF09",
+    `- projectDir: ${context.skills.projectDir}`,
+    `- userDir: ${context.skills.userDir}`,
+    `- enabled: ${context.skills.enabled ? "yes" : "no"}`,
+    `- evolution candidates: ${context.skills.evolutionCandidates.length}\uFF08candidate only; auto enable no\uFF09`
+  ];
+  if (context.skills.lastError) {
+    lines.push(`- lastError: ${context.skills.lastError}`);
+  }
+  if (context.skills.skills.length === 0) {
+    lines.push(
+      "- none\uFF1A\u53EF\u8FD0\u884C /skills add \u67E5\u770B\u6CE8\u518C\u8DEF\u5F84\uFF0C\u6216 /skills install local <path> \u5B89\u88C5\u672C\u5730 skill manifest\u3002"
+    );
+  }
+  for (const skill of context.skills.skills) {
+    const error = skill.lastError ? `; last error ${skill.lastError}` : "";
+    lines.push(
+      `- ${skill.id}: ${skill.enabled ? "enabled" : "disabled"}; trusted ${skill.trusted ? "yes" : "no"}; source ${skill.source}; scope ${skill.scope}; version ${skill.version}; triggers ${skill.triggers.join(",") || "-"}; write ${skill.mayWrite ? "yes" : "no"}; bash ${skill.mayExecute ? "yes" : "no"}; network ${skill.mayNetwork ? "yes" : "no"}; summary ${skill.summary}${error}`
+    );
+  }
+  lines.push(
+    "- note: \u9ED8\u8BA4\u53EA\u52A0\u8F7D metadata/description/triggers/stable summary\uFF1B\u4E0D\u4F1A\u628A skill \u6B63\u6587\u585E\u8FDB prompt\uFF1Bevolution candidate \u53EA\u8BB0\u5F55\u5EFA\u8BAE\uFF0C\u4E0D\u5199\u6587\u4EF6\u3001\u4E0D\u542F\u7528\u3002"
+  );
+  return lines.join("\n");
+}
+function createSkillEvolutionCandidate(summary, source) {
+  return {
+    id: randomUUID(),
+    status: "candidate",
+    summary: truncateDisplay(summary.replace(/\s+/g, " "), 240),
+    triggerCondition: "repeated verified workflow success or explicit user request",
+    source,
+    risk: "medium",
+    suggestedPath: "manual-review-only; use /skills install local <path> after creating a trusted manifest",
+    createdAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function formatWorkflows(context) {
+  const isEn = context.language === "en-US";
+  return [
+    isEn ? "Workflows (local templates + real runner entry)" : "Workflows\uFF08\u672C\u5730\u6A21\u677F\u4E0E\u771F\u5B9E runner \u5165\u53E3\uFF09",
+    ...context.workflows.templates.map(
+      (item) => `- ${item.id}: purpose ${item.purpose}; risk ${item.risk}; writes files ${item.writesFiles ? "yes" : "no"}; validation ${item.recommendedValidation.join(" | ")}`
+    ),
+    isEn ? "- preview: /workflows plan <goal> generates preview only, no execution." : "- preview: /workflows plan <goal> \u53EA\u751F\u6210\u9884\u89C8\uFF0C\u4E0D\u6267\u884C\u3002",
+    isEn ? "- run: /workflows run <goal> reuses durable job runner, writes real task/transcript/report." : "- run: /workflows run <goal> \u590D\u7528 durable job runner\uFF0C\u5199\u5165\u771F\u5B9E task/transcript/report\u3002",
+    isEn ? "- gate: /workflows <name> enters start confirmation; write/bash/network/install still go through permission pipeline." : "- gate: /workflows <name> \u53EA\u8FDB\u5165\u542F\u52A8\u786E\u8BA4\u8BF4\u660E\uFF1B\u5199\u6587\u4EF6/Bash/\u8054\u7F51/\u5B89\u88C5\u4F9D\u8D56\u4ECD\u8D70\u6743\u9650\u7BA1\u9053\u3002"
+  ].join("\n");
+}
+function formatPlugins(context) {
+  const lines = [
+    "Plugins\uFF08\u672C\u5730 manifest loader\uFF09",
+    `- projectDir: ${context.plugins.projectDir}`,
+    `- userDir: ${context.plugins.userDir}`,
+    `- enabled: ${context.plugins.enabled ? "yes" : "no"}`
+  ];
+  if (context.plugins.lastError) {
+    lines.push(`- lastError: ${context.plugins.lastError}`);
+  }
+  if (context.plugins.plugins.length === 0) {
+    lines.push(
+      "- none\uFF1A\u628A\u672C\u5730 manifest \u653E\u5230 project/user plugins \u76EE\u5F55\uFF0C\u6216\u8FD0\u884C /plugins install local <path>\uFF1BGit/GitHub \u4EC5\u652F\u6301\u53D7\u63A7 metadata \u5B89\u88C5\u3002"
+    );
+  }
+  for (const plugin of context.plugins.plugins) {
+    lines.push(
+      `- ${plugin.id}: ${plugin.enabled ? "enabled" : "disabled"}; trusted ${plugin.trusted ? "yes" : "no"}; source ${plugin.source}; scope ${plugin.scope}; version ${plugin.version}; write ${plugin.mayWrite ? "yes" : "no"}; bash ${plugin.mayExecute ? "yes" : "no"}; network ${plugin.mayNetwork ? "yes" : "no"}; commands ${plugin.contributions.commands.join(",") || "-"}; hooks ${plugin.contributions.hooks.join(",") || "-"}; workflows ${plugin.contributions.workflows.join(",") || "-"}; skills ${plugin.contributions.skills.join(",") || "-"}`
+    );
+  }
+  lines.push("- note: plugin \u8D21\u732E\u9879\u7A33\u5B9A\u6392\u5E8F\uFF1B\u8D21\u732E\u5DE5\u5177\u4ECD\u8D70\u7EDF\u4E00\u6743\u9650\u7BA1\u9053\uFF0C\u52A0\u8F7D\u5931\u8D25\u9694\u79BB\u3002");
+  return lines.join("\n");
+}
+function formatPluginsDoctor(context) {
+  return [
+    "Plugins doctor",
+    `- manifest count: ${context.plugins.plugins.length}`,
+    `- disabled ids: ${context.plugins.disabledIds.join(",") || "none"}`,
+    `- trusted ids: ${context.plugins.trustedIds.join(",") || "none"}`,
+    ...context.plugins.plugins.map((plugin) => {
+      const risk = !plugin.trusted ? `BLOCK untrusted ${plugin.source}` : "ok";
+      const error = plugin.lastError ? `; last error ${plugin.lastError}` : "";
+      return `- ${plugin.id}: ${risk}; path ${plugin.path}; permissions ${plugin.permissions.join(",") || "none"}${error}`;
+    }),
+    "- boundary: \u4E0D\u6267\u884C\u8FDC\u7A0B\u5B89\u88C5/\u81EA\u52A8\u66F4\u65B0/\u5B8C\u6574\u6C99\u7BB1\uFF1B\u672A\u4FE1\u4EFB extension \u4E0D\u5F97\u5199\u6587\u4EF6\u3001\u8054\u7F51\u6216\u6267\u884C\u547D\u4EE4\u3002"
+  ].join("\n");
+}
+function formatHooksDoctor(context) {
+  const cacheImpact = stableHash(createExtensionFreshnessSummaryForDoctor(context));
+  const lines = [
+    "Hooks doctor",
+    `- hooks enabled: ${context.hooks.enabled ? "yes" : "no"}\uFF08\u9ED8\u8BA4\u5173\u95ED\uFF09`,
+    `- project trusted: ${context.hooks.projectTrusted ? "yes" : "no"}`,
+    `- timeout: ${context.hooks.timeoutMs}ms`,
+    `- output limit: ${context.hooks.outputLimitBytes} bytes`,
+    `- cache impact hash: ${cacheImpact}`
+  ];
+  if (context.hooks.hooks.length === 0) {
+    lines.push("- hooks: none");
+  }
+  for (const hook of context.hooks.hooks) {
+    lines.push(
+      `- ${hook.id}: event ${hook.event}; enabled ${hook.enabled ? "yes" : "no"}; trusted ${hook.trusted ? "yes" : "no"}; source ${hook.source}; scope ${hook.scope}; path ${hook.path}; timeout ${hook.timeoutMs}ms; output limit ${hook.outputLimitBytes} bytes; permissions ${hook.permissions.join(",") || "none"}; log ${hook.logPath ?? "-"}; last error ${hook.lastError ?? "none"}`
+    );
+  }
+  lines.push(
+    "- boundary: hook \u8BCA\u65AD\u53EA\u68C0\u67E5\u6765\u6E90\u3001\u8FB9\u754C\u548C\u53EF\u89C1\u72B6\u6001\uFF0C\u4E0D\u6267\u884C\u5B8C\u6574 hook \u811A\u672C\uFF1Bhook \u4E0D\u80FD\u7ED5\u8FC7\u6743\u9650\u7CFB\u7EDF\uFF1B\u5931\u8D25\u9694\u79BB\uFF1B\u663E\u793A\u8F93\u51FA\u6309 outputLimitBytes \u622A\u65AD\uFF0C\u5B8C\u6574\u8F93\u51FA\u53EA\u80FD\u5199 logPath\u3002"
+  );
+  return lines.join("\n");
+}
+function formatTrustNotice(kind, item) {
+  return [
+    `Trust notice\uFF1A\u5373\u5C06\u542F\u7528 ${kind} ${item.id}`,
+    `- source: ${item.source}`,
+    `- path: ${item.path}`,
+    `- version: ${item.version}`,
+    `- sourceUrl: ${item.lifecycle.sourceUrl ? sanitizeDiagnosticText(item.lifecycle.sourceUrl) : "-"}`,
+    `- ref/commit: ${item.lifecycle.ref ?? "-"}/${item.lifecycle.commit ?? "-"}`,
+    `- installedAt: ${item.lifecycle.installedAt ?? "unknown"}`,
+    `- permissions: ${item.permissions.join(",") || "none"}`,
+    `- trust: ${item.trusted ? "trusted" : "untrusted"}`,
+    `- may write ${item.mayWrite ? "yes" : "no"}; may execute ${item.mayExecute ? "yes" : "no"}; may network ${item.mayNetwork ? "yes" : "no"}`,
+    "- \u672A\u4FE1\u4EFB extension \u4E0D\u5F97\u5199\u6587\u4EF6\u3001\u8054\u7F51\u6216\u6267\u884C\u547D\u4EE4\uFF1B\u5B9E\u9645\u5DE5\u5177\u8C03\u7528\u4ECD\u8D70\u6743\u9650\u7BA1\u9053\u3002"
+  ].join("\n");
+}
+function formatExtensionStatus(kind, context) {
+  const items = kind === "skills" ? context.skills.skills : context.plugins.plugins;
+  const title = kind === "skills" ? "Skills Connect Lite status" : "Plugins Connect Lite status";
+  const disabledIds = kind === "skills" ? context.skills.disabledIds : context.plugins.disabledIds;
+  const trustedIds = kind === "skills" ? context.skills.trustedIds : context.plugins.trustedIds;
+  return [
+    title,
+    "- lifecycle: add/install, validate, enable/disable, remove/update, trust notice, doctor/status",
+    `- installed: ${items.length}`,
+    `- disabled ids: ${disabledIds.join(",") || "none"}`,
+    `- trusted ids: ${trustedIds.join(",") || "none"}`,
+    ...items.map((item) => {
+      const source = item.lifecycle.sourceUrl ? `source url ${sanitizeDiagnosticText(item.lifecycle.sourceUrl)}` : `local path ${redactedPath(item.lifecycle.localPath)}`;
+      return `- ${item.id}: ${item.enabled ? "enabled" : "disabled"}; trust ${item.lifecycle.trustLevel}; ${source}; ref ${item.lifecycle.ref ?? "-"}; commit ${item.lifecycle.commit ?? "-"}; permissions ${item.lifecycle.permissionSummary}; discovered ${item.lifecycle.discovered ? "yes" : "no"}; registered ${item.lifecycle.registered ? "yes" : "no"}; schema loaded ${item.lifecycle.schemaLoaded ? "yes" : "no"}; runtime ${item.lifecycle.runtimeVersion}${item.lastError ? `; load error ${truncateDisplay(item.lastError, 80)}` : ""}`;
+    }),
+    "- boundary: Git/GitHub \u5B89\u88C5\u53EA\u505A\u53D7\u63A7 clone/fetch \u548C manifest/SKILL.md \u8BFB\u53D6\uFF1B\u4E0D\u6267\u884C postinstall\u3001hook\u3001\u4ED3\u5E93\u811A\u672C\u6216\u7B2C\u4E09\u65B9\u4EE3\u7801\u3002"
+  ].join("\n");
+}
+function parseExtensionInstallRequest(args) {
+  const [first, second, ...remaining] = args;
+  if (!first) {
+    return null;
+  }
+  let source;
+  let locator;
+  let rest;
+  if (first === "local" || first === "git" || first === "github") {
+    if (!second) {
+      return null;
+    }
+    source = first;
+    locator = second;
+    rest = remaining;
+  } else if (first.startsWith("github:")) {
+    source = "github";
+    locator = first.slice("github:".length);
+    rest = [second, ...remaining].filter((item) => Boolean(item));
+  } else if (isGitLocator(first)) {
+    source = "git";
+    locator = first;
+    rest = [second, ...remaining].filter((item) => Boolean(item));
+  } else {
+    source = "local";
+    locator = first;
+    rest = [second, ...remaining].filter((item) => Boolean(item));
+  }
+  if (!locator) {
+    return null;
+  }
+  let scope = "project";
+  let ref;
+  let confirmNetwork = false;
+  for (let index = 0; index < rest.length; index += 1) {
+    const value = rest[index];
+    if (value === "--scope" && (rest[index + 1] === "project" || rest[index + 1] === "user")) {
+      scope = rest[index + 1];
+      index += 1;
+      continue;
+    }
+    if (value === "--ref" && rest[index + 1]) {
+      ref = rest[index + 1];
+      index += 1;
+      continue;
+    }
+    if (value === "--confirm-network") {
+      confirmNetwork = true;
+    }
+  }
+  return { source, locator, scope, ref, confirmNetwork };
+}
+function isGitLocator(value) {
+  return /^https?:\/\//iu.test(value) || /^git@/iu.test(value) || value.endsWith(".git");
+}
+function formatExtensionInstallGate(kind, request, command) {
+  return [
+    `Connect Lite Start Gate\uFF1A${kind} install ${request.source}`,
+    `- source: ${sanitizeDiagnosticText(request.locator)}`,
+    `- scope: ${request.scope}`,
+    `- ref: ${request.ref ?? "default"}`,
+    "- risk: network + third-party extension metadata; install \u524D\u53EA\u8BFB\u53D6 manifest / SKILL.md / metadata\u3002",
+    "- boundary: \u4E0D\u6267\u884C\u4ED3\u5E93\u811A\u672C\u3001postinstall\u3001hook\u3001\u4F9D\u8D56\u5B89\u88C5\u6216\u4EFB\u610F\u7B2C\u4E09\u65B9\u4EE3\u7801\u3002",
+    "- recovery: \u5931\u8D25\u4E0D\u4F1A\u8986\u76D6\u5DF2\u6709\u542F\u7528\u9879\uFF1B\u53EF\u8FD0\u884C status/doctor \u67E5\u770B\u6765\u6E90\u3001\u52A0\u8F7D\u9519\u8BEF\u548C\u4E0B\u4E00\u6B65\u3002",
+    "- permission: --confirm-network \u662F exact-command Start Gate confirmation\uFF0C\u4E0D\u662F\u5B8C\u6574 permission approval\uFF1B\u540E\u7EED\u5DE5\u5177/Bash/\u8054\u7F51\u4ECD\u8D70\u6743\u9650\u7BA1\u9053\uFF0C\u786E\u8BA4\u6267\u884C\u4F1A\u5199\u5165 audit event\u3002",
+    `- exact command: ${formatExtensionInstallExactCommand(command, request)}`
+  ].join("\n");
+}
+function formatExtensionInstallExactCommand(command, request) {
+  const parts = [command];
+  if (!/\supdate\s/u.test(command)) {
+    parts.push(request.source, request.locator);
+    if (request.scope !== "project") {
+      parts.push("--scope", request.scope);
+    }
+  }
+  if (request.ref) {
+    parts.push("--ref", request.ref);
+  }
+  parts.push("--confirm-network");
+  return parts.join(" ");
+}
+async function installExtensionFromRequest(kind, request, context, onNetworkConfirmed) {
+  const targetDir = getExtensionTargetDir(kind, request.scope, context);
+  await mkdir(targetDir, { recursive: true });
+  if (request.source === "local") {
+    const localPath = resolve(context.projectPath, request.locator);
+    const result = await installExtensionFromDirectory(kind, localPath, targetDir, {
+      localPath,
+      source: "local"
+    });
+    if (result.ok) {
+      context.config = await resetExtensionTrustForInstall(kind, result.id, context.projectPath);
+    }
+    return result;
+  }
+  if (request.confirmNetwork) {
+    await onNetworkConfirmed?.(
+      `connect_lite_network_start_gate_confirmed: kind ${kind}; source ${request.source}; scope ${request.scope}; ref ${request.ref ?? "default"}; locator ${sanitizeDiagnosticText(request.locator)}; boundary exact-command_start_gate_not_full_permission_approval`
+    );
+  }
+  if (!request.confirmNetwork) {
+    return { ok: false, summary: "network confirmation required" };
+  }
+  const sourceUrl = request.source === "github" ? githubRepoToUrl(request.locator) : request.locator;
+  if (!sourceUrl) {
+    return { ok: false, summary: "GitHub repo \u683C\u5F0F\u5E94\u4E3A owner/repo\uFF0C\u6216\u4F7F\u7528\u5B8C\u6574 Git URL\u3002" };
+  }
+  const tempRoot = await mkdtemp(join(tmpdir(), "linghun-connect-lite-"));
+  try {
+    const cloneArgs = ["-c", "core.hooksPath=/dev/null", "clone", "--depth", "1"];
+    if (request.ref) {
+      cloneArgs.push("--branch", request.ref);
+    }
+    cloneArgs.push("--", sourceUrl, tempRoot);
+    const clone = await runCommandCapture("git", cloneArgs, context.projectPath, 6e4);
+    if (clone.exitCode !== 0) {
+      return { ok: false, summary: `\u53D7\u63A7 git clone/fetch \u5931\u8D25\uFF1A${clone.summary}` };
+    }
+    const commit = await runCommandCapture(
+      "git",
+      ["-C", tempRoot, "rev-parse", "HEAD"],
+      context.projectPath,
+      1e4
+    );
+    const result = await installExtensionFromDirectory(kind, tempRoot, targetDir, {
+      sourceUrl,
+      ref: request.ref,
+      commit: commit.exitCode === 0 ? commit.stdout.trim().slice(0, 40) : void 0
+    });
+    if (result.ok) {
+      context.config = await resetExtensionTrustForInstall(kind, result.id, context.projectPath);
+    }
+    return result;
+  } finally {
+    await rm(tempRoot, { recursive: true, force: true });
+  }
+}
+function githubRepoToUrl(locator) {
+  if (/^https?:\/\//iu.test(locator) || locator.endsWith(".git")) {
+    return locator;
+  }
+  if (/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/u.test(locator)) {
+    return `https://github.com/${locator}.git`;
+  }
+  return null;
+}
+function getExtensionTargetDir(kind, scope, context) {
+  if (kind === "skills") {
+    return scope === "project" ? context.skills.projectDir : context.skills.userDir;
+  }
+  return scope === "project" ? context.plugins.projectDir : context.plugins.userDir;
+}
+async function installExtensionFromDirectory(kind, sourcePath, targetDir, lifecycle) {
+  const manifest = await readExtensionSourceManifest(kind, sourcePath);
+  if (!manifest.ok) {
+    return manifest;
+  }
+  const id = stableId(manifest.value.id, basename(sourcePath, extname(sourcePath)));
+  const outputPath = join(targetDir, `${id}.json`);
+  const value = {
+    ...manifest.value,
+    id,
+    source: lifecycle.source ?? manifest.value.source ?? "third-party",
+    lifecycle: {
+      ...lifecycle,
+      installedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      trustLevel: "untrusted"
+    }
+  };
+  await writeFile(outputPath, `${JSON.stringify(value, null, 2)}
+`, "utf8");
+  return {
+    ok: true,
+    id,
+    summary: `\u5DF2\u5B89\u88C5 ${kind === "skills" ? "skill" : "plugin"} manifest\uFF1A${id}`
+  };
+}
+async function readExtensionSourceManifest(kind, sourcePath) {
+  const resolved = resolve(sourcePath);
+  const info = await stat(resolved).catch(() => null);
+  if (!info) {
+    return { ok: false, summary: `\u6765\u6E90\u4E0D\u5B58\u5728\uFF1A${redactedPath(resolved)}` };
+  }
+  const candidates = info.isDirectory() ? [
+    kind === "skills" ? "skill.json" : "plugin.json",
+    kind === "skills" ? "linghun-skill.json" : "linghun-plugin.json",
+    "manifest.json",
+    "metadata.json"
+  ].map((file) => join(resolved, file)) : [resolved];
+  for (const candidate of candidates) {
+    const content = await readFile(candidate, "utf8").catch(() => null);
+    if (!content) {
+      continue;
+    }
+    try {
+      const parsed = JSON.parse(content);
+      return { ok: true, value: parsed };
+    } catch (error) {
+      return {
+        ok: false,
+        summary: `manifest JSON \u65E0\u6548\uFF1A${redactedPath(candidate)} ${formatError(error)}`
+      };
+    }
+  }
+  if (kind === "skills" && info.isDirectory()) {
+    const markdown = await readFile(join(resolved, "SKILL.md"), "utf8").catch(() => null);
+    if (markdown) {
+      const title = markdown.match(/^#\s+(.+)$/mu)?.[1]?.trim() ?? basename(resolved);
+      const summary = markdown.split(/\r?\n/u).map((line) => line.trim()).find((line) => line && !line.startsWith("#"));
+      return {
+        ok: true,
+        value: {
+          id: stableId(title, basename(resolved)),
+          name: title,
+          description: summary ?? title,
+          summary: summary ?? title,
+          triggers: [],
+          permissions: ["read"]
+        }
+      };
+    }
+  }
+  return {
+    ok: false,
+    summary: "\u672A\u627E\u5230 manifest.json / metadata.json / skill.json / plugin.json\uFF1Bskill \u53EF\u63D0\u4F9B SKILL.md\u3002"
+  };
+}
+async function refreshExtensionState(kind, context) {
+  if (kind === "skills") {
+    context.skills = await createSkillState(context.config, context.projectPath);
+    return;
+  }
+  context.plugins = await createPluginState(context.config, context.projectPath);
+  context.hooks = await createHookState(context.config, context.projectPath);
+}
+async function removeExtension(kind, id, context) {
+  const item = kind === "skills" ? context.skills.skills.find((skill) => skill.id === id) : context.plugins.plugins.find((plugin) => plugin.id === id);
+  if (!item) {
+    return `\u672A\u627E\u5230 ${kind === "skills" ? "skill" : "plugin"}\uFF1A${id}`;
+  }
+  await rm(item.path, { force: true });
+  context.config = await saveExtensionEnablement(kind, id, false, context.projectPath);
+  await refreshExtensionState(kind, context);
+  return `\u5DF2\u79FB\u9664 ${kind === "skills" ? "skill" : "plugin"}\uFF1A${id}\uFF1B\u82E5\u9700\u8981\u6062\u590D\uFF0C\u8BF7\u4ECE\u539F source \u91CD\u65B0 install\u3002`;
+}
+async function updateExtension(kind, id, context, args, onNetworkConfirmed) {
+  const item = kind === "skills" ? context.skills.skills.find((skill) => skill.id === id) : context.plugins.plugins.find((plugin) => plugin.id === id);
+  if (!item) {
+    return `\u672A\u627E\u5230 ${kind === "skills" ? "skill" : "plugin"}\uFF1A${id}`;
+  }
+  const source = item.lifecycle.sourceUrl ? "git" : "local";
+  const refIndex = args.indexOf("--ref");
+  if (refIndex !== -1) {
+    const refValue = args[refIndex + 1];
+    if (refValue === void 0 || refValue.trim().length === 0 || refValue.startsWith("--")) {
+      return "--ref \u9700\u8981\u63D0\u4F9B\u975E\u7A7A ref\uFF0C\u4F8B\u5982 --ref v1.0.0\u3002";
+    }
+  }
+  const request = {
+    source,
+    locator: item.lifecycle.sourceUrl ?? item.lifecycle.localPath ?? item.path,
+    scope: item.scope,
+    ref: refIndex === -1 ? item.lifecycle.ref : args[refIndex + 1],
+    confirmNetwork: args.includes("--confirm-network")
+  };
+  if (source === "git" && !request.confirmNetwork) {
+    return formatExtensionInstallGate(kind, request, `/${kind} update ${id}`);
+  }
+  const result = await installExtensionFromRequest(kind, request, context, onNetworkConfirmed);
+  if (result.ok) {
+    await refreshExtensionState(kind, context);
+    return `\u5DF2\u66F4\u65B0 ${kind === "skills" ? "skill" : "plugin"}\uFF1A${id}\uFF1B${result.summary}`;
+  }
+  return result.summary;
+}
+function validateExtensionItems(kind, context, id) {
+  const items = kind === "skills" ? context.skills.skills : context.plugins.plugins;
+  const selected = id ? items.filter((item) => item.id === id) : items;
+  if (selected.length === 0) {
+    return id ? `\u672A\u627E\u5230 ${kind === "skills" ? "skill" : "plugin"}\uFF1A${id}` : `\u6CA1\u6709\u5DF2\u53D1\u73B0\u7684 ${kind} manifest\u3002`;
+  }
+  return [
+    `${kind === "skills" ? "Skills" : "Plugins"} validate`,
+    ...selected.map((item) => {
+      const problems = [];
+      if (!item.lifecycle.discovered) problems.push("not discovered");
+      if (!item.lifecycle.registered) problems.push("not registered");
+      if (!item.trusted) problems.push("untrusted");
+      if (!item.lifecycle.schemaLoaded) problems.push("schema not loaded");
+      if (item.lifecycle.runtimeVersion !== "compatible") problems.push("runtime incompatible");
+      if (item.lastError) problems.push("load error");
+      return `- ${item.id}: ${problems.length === 0 ? "ok" : problems.join("; ")}; next ${problems.length === 0 ? "enable/use explicit command" : `run /${kind} doctor, then validate/enable after fixing`}`;
+    })
+  ].join("\n");
+}
+function validateExtensionContributionExecution(kind, id, contribution, context) {
+  const item = kind === "skills" ? context.skills.skills.find((skill) => skill.id === id) : context.plugins.plugins.find((plugin2) => plugin2.id === id);
+  if (!item) {
+    return {
+      ok: false,
+      summary: `Connect Lite guard: ${kind}:${id} \u672A\u53D1\u73B0\uFF0C\u5DF2\u62D2\u7EDD\u6267\u884C\u3002\u8BF7\u5148 install/validate\u3002`
+    };
+  }
+  if (!item.enabled || !item.trusted) {
+    return {
+      ok: false,
+      summary: `Connect Lite guard: ${kind}:${id} \u672A\u542F\u7528\u6216\u672A\u4FE1\u4EFB\uFF0C\u5DF2\u62D2\u7EDD\u6267\u884C\u3002\u8BF7\u5148 validate/enable/doctor\u3002`
+    };
+  }
+  if (!item.lifecycle.discovered || !item.lifecycle.registered || !item.lifecycle.schemaLoaded) {
+    return {
+      ok: false,
+      summary: `Connect Lite guard: ${kind}:${id} \u5C1A\u672A\u5B8C\u6210 discover/register/schema load\uFF0C\u5DF2\u62D2\u7EDD\u6267\u884C\u3002\u8BF7\u5148 validate/doctor\u3002`
+    };
+  }
+  if (item.lifecycle.runtimeVersion !== "compatible") {
+    return {
+      ok: false,
+      summary: `Connect Lite guard: ${kind}:${id} runtime version ${item.lifecycle.runtimeVersion} \u4E0D\u517C\u5BB9\uFF0C\u5DF2\u62D2\u7EDD\u6267\u884C\u3002\u8BF7 update \u6216 disable\u3002`
+    };
+  }
+  if (kind === "skills") {
+    const skill = item;
+    if (!skill.triggers.includes(contribution)) {
+      return {
+        ok: false,
+        summary: `Connect Lite guard: skill:${id} \u672A\u6CE8\u518C\u89E6\u53D1\u9879 ${contribution}\uFF0C\u5DF2\u62D2\u7EDD\u76F2\u6267\u884C\u3002`
+      };
+    }
+    return { ok: true };
+  }
+  const plugin = item;
+  const contributions = Object.values(plugin.contributions).flat();
+  if (!contributions.includes(contribution)) {
+    return {
+      ok: false,
+      summary: `Connect Lite guard: plugin:${id} \u672A\u6CE8\u518C\u8D21\u732E\u9879 ${contribution}\uFF0C\u5DF2\u62D2\u7EDD\u76F2\u6267\u884C\u3002`
+    };
+  }
+  return { ok: true };
+}
+function createExtensionFreshnessSummaryForDoctor(context) {
+  return {
+    skills: context.skills.skills.map((skill) => ({
+      id: skill.id,
+      enabled: skill.enabled,
+      source: skill.source,
+      trusted: skill.trusted,
+      triggers: skill.triggers,
+      summary: skill.summary,
+      permissions: skill.permissions
+    })).sort((a, b) => a.id.localeCompare(b.id)),
+    workflows: context.workflows.templates.map((workflow) => ({
+      id: workflow.id,
+      risk: workflow.risk,
+      writesFiles: workflow.writesFiles,
+      validation: workflow.recommendedValidation
+    })).sort((a, b) => a.id.localeCompare(b.id)),
+    hooks: context.hooks.hooks.map((hook) => ({
+      id: hook.id,
+      event: hook.event,
+      enabled: hook.enabled,
+      trusted: hook.trusted,
+      permissions: hook.permissions
+    })).sort((a, b) => `${a.event}:${a.id}`.localeCompare(`${b.event}:${b.id}`)),
+    plugins: context.plugins.plugins.map((plugin) => ({
+      id: plugin.id,
+      enabled: plugin.enabled,
+      source: plugin.source,
+      trusted: plugin.trusted,
+      permissions: plugin.permissions,
+      contributions: plugin.contributions
+    })).sort((a, b) => a.id.localeCompare(b.id))
+  };
+}
+
+export {
+  formatConfigOverview,
+  formatFeaturePolicy,
+  formatSkills,
+  createSkillEvolutionCandidate,
+  formatWorkflows,
+  formatPlugins,
+  formatPluginsDoctor,
+  formatHooksDoctor,
+  formatTrustNotice,
+  formatExtensionStatus,
+  parseExtensionInstallRequest,
+  isGitLocator,
+  formatExtensionInstallGate,
+  formatExtensionInstallExactCommand,
+  installExtensionFromRequest,
+  githubRepoToUrl,
+  getExtensionTargetDir,
+  installExtensionFromDirectory,
+  readExtensionSourceManifest,
+  refreshExtensionState,
+  removeExtension,
+  updateExtension,
+  validateExtensionItems,
+  validateExtensionContributionExecution
+};