@mininglamp-oss/octo-runtime 1.1.0 → 1.1.2

package/node_modules/@mininglamp-oss/octo-runtime-adapter-opencode/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@mininglamp-oss/octo-runtime-adapter-opencode",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "private": true,
   "type": "module",
   "exports": "./dist/index.js",
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.0",
-    "@mininglamp-oss/octo-runtime-adapter-acp": "1.1.0",
-    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.0"
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.2",
+    "@mininglamp-oss/octo-runtime-adapter-acp": "1.1.2",
+    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.2"
   },
   "types": "./dist/index.d.ts",
   "files": [

package/node_modules/@mininglamp-oss/octo-runtime-adapter-qodercli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-adapter-qodercli",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "private": true,
   "type": "module",
   "exports": "./dist/index.js",
@@ -9,6 +9,6 @@
     "dist"
   ],
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-adapter-acp": "1.1.0"
+    "@mininglamp-oss/octo-runtime-adapter-acp": "1.1.2"
   }
 }

package/node_modules/@mininglamp-oss/octo-runtime-adapter-qoderclicn/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mininglamp-oss/octo-runtime-adapter-qoderclicn",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "private": true,
   "type": "module",
   "exports": "./dist/index.js",
@@ -9,6 +9,6 @@
     "dist"
   ],
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-adapter-acp": "1.1.0"
+    "@mininglamp-oss/octo-runtime-adapter-acp": "1.1.2"
   }
 }

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/approval.d.ts

@@ -7,10 +7,14 @@ export declare class AcpApprovalBridge {
     readonly options: {
         providerDecisions?: boolean;
         providerManagedExpiry?: boolean;
+        /** 仅由 Adapter 在首个审批前设置，用于已授权的原生兼容回退；不改写请求策略与身份。 */
+        effectiveApprovalMode?: "ask" | "full_access";
     };
     constructor(request: InvokeRequest, timeoutMs?: number, options?: {
         providerDecisions?: boolean;
         providerManagedExpiry?: boolean;
+        /** 仅由 Adapter 在首个审批前设置，用于已授权的原生兼容回退；不改写请求策略与身份。 */
+        effectiveApprovalMode?: "ask" | "full_access";
     });
     requestPermission(params: RecordValue, providerExpiresAt?: number): Promise<RecordValue>;
     respond(response: InteractionResponse): Promise<void>;

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/approval.js

@@ -24,6 +24,7 @@ export class AcpApprovalBridge {
     requestPermission(params, providerExpiresAt) {
         if (this.#closed || this.request.signal?.aborted)
             return Promise.reject(new Error("APPROVAL_WAIT_UNAVAILABLE"));
+        const automatic = (this.options.effectiveApprovalMode ?? this.request.approvalMode) === "full_access";
         const options = Array.isArray(params.options) ? params.options.filter(isObject) : [];
         const option = (kind) => {
             const candidate = options.find((value) => value.kind === kind);
@@ -34,7 +35,7 @@ export class AcpApprovalBridge {
         const allow = option("allow_once");
         const always = this.options.providerDecisions ? option("allow_always") : undefined;
         const decline = option("reject_once");
-        if (!allow && !always && !decline && this.request.approvalMode !== "full_access")
+        if (!allow && !always && !decline && !automatic)
             return Promise.resolve(cancelled());
         if (this.#pending.size >= 16 || this.request.signal?.aborted)
             return Promise.reject(new Error("APPROVAL_WAIT_UNAVAILABLE"));
@@ -90,10 +91,8 @@ export class AcpApprovalBridge {
                 written,
                 confirm,
                 fail,
-                responding: this.request.approvalMode === "full_access",
-                ...(this.request.approvalMode === "full_access"
-                    ? { automaticOutcome: allow ? "accepted" : "cancelled" }
-                    : {})
+                responding: automatic,
+                ...(automatic ? { automaticOutcome: allow ? "accepted" : "cancelled" } : {})
             });
         });
         const tool = isObject(params.toolCall)
@@ -140,7 +139,7 @@ export class AcpApprovalBridge {
                 }
             }
         });
-        if (this.request.approvalMode === "full_access")
+        if (automatic)
             this.#pending.get(interactionId).resolve(allow ? selected(allow) : cancelled());
         return result;
     }

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/index.d.ts

@@ -15,6 +15,7 @@ export { watchLineLimit } from "./line-limit.js";
 export { readBoundedLines } from "./bounded-lines.js";
 export { HourlyLogWriter, HOURLY_LOG_MAX_BYTES } from "./hourly-log.js";
 export { RuntimeLogging, assertRuntimeLogging, noopRuntimeLog, type RuntimeLog, type RuntimeLogLevel, type RuntimeLoggingOptions } from "./runtime-log.js";
+export { extraStatusRecord, type ExtraStatusRecord } from "./service-status.js";
 export { sanitizePublicValue } from "./public-display.js";
 export { DEFAULT_REASONING_LEVEL_MAPS, OMNI_REASONING_LEVELS, mapReasoningEffort, reasoningLevelMap, type OmniReasoningLevel, type ReasoningLevelMap } from "./reasoning.js";
 export interface AdapterMetadata {

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/index.js

@@ -21,6 +21,7 @@ export { watchLineLimit } from "./line-limit.js";
 export { readBoundedLines } from "./bounded-lines.js";
 export { HourlyLogWriter, HOURLY_LOG_MAX_BYTES } from "./hourly-log.js";
 export { RuntimeLogging, assertRuntimeLogging, noopRuntimeLog } from "./runtime-log.js";
+export { extraStatusRecord } from "./service-status.js";
 export { sanitizePublicValue } from "./public-display.js";
 export { DEFAULT_REASONING_LEVEL_MAPS, OMNI_REASONING_LEVELS, mapReasoningEffort, reasoningLevelMap } from "./reasoning.js";
 /**

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/module-manifest.d.ts

@@ -0,0 +1,33 @@
+export interface AdapterModuleEntry {
+    type?: string;
+    module: string;
+    export: string;
+    factory: boolean;
+    options: Record<string, unknown>;
+    sourceManifest: string;
+}
+export interface ExtraModuleEntry {
+    name: string;
+    module: string;
+    sourceManifest: string;
+}
+export interface ModuleManifest {
+    version: 1;
+    adapters: AdapterModuleEntry[];
+    extras: ExtraModuleEntry[];
+}
+/** CLI 清单边界：只校验声明、不导入模块；来源路径始终随条目保留，不能用合并位置替换。 */
+export declare function parseModuleManifest(value: unknown, source: string, { legacy }?: {
+    legacy?: boolean | undefined;
+}): ModuleManifest;
+/** 只有可选用户文件的 ENOENT 表示无扩展；权限、JSON 或格式错误必须保留失败。 */
+export declare function readModuleManifest(file: string, { optional, legacy }?: {
+    optional?: boolean | undefined;
+    legacy?: boolean | undefined;
+}): Promise<ModuleManifest>;
+/** 内置优先、用户追加；冲突项在解析/import 前剔除，诊断不得包含 options 或业务配置。 */
+export declare function mergeModuleManifests(builtin: ModuleManifest, extension: ModuleManifest, report?: (message: string) => void): ModuleManifest;
+/** 按原始清单解析裸包的 ESM import/exports；本机路径先转 URL，避免 Windows 盘符误判。 */
+export declare function resolveModuleSpecifier(module: string, sourceManifest: string): string;
+/** 仅解析选中 Adapter，生成可跨进程的启动快照；不提前解析或加载 Extra。 */
+export declare function resolveAdapterModules(manifest: ModuleManifest): AdapterModuleEntry[];

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/module-manifest.js

@@ -0,0 +1,118 @@
+import { readFile } from "node:fs/promises";
+import { dirname, isAbsolute, resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+import { resolve as resolveEsm } from "import-meta-resolve";
+/** CLI 清单边界：只校验声明、不导入模块；来源路径始终随条目保留，不能用合并位置替换。 */
+export function parseModuleManifest(value, source, { legacy = false } = {}) {
+    const manifest = record(value, "manifest");
+    if (manifest.version !== 1)
+        throw new TypeError("manifest.version must be 1");
+    if (!Array.isArray(manifest.adapters))
+        throw new TypeError("manifest.adapters must be an array");
+    const extras = manifest.extras === undefined && legacy ? [] : manifest.extras;
+    if (!Array.isArray(extras))
+        throw new TypeError("manifest.extras must be an array");
+    const sourceManifest = resolve(source);
+    const adapters = manifest.adapters.map((value, index) => {
+        const entry = record(value, `adapters[${index}]`);
+        const type = entry.type === undefined && legacy ? undefined : text(entry.type, "adapter.type");
+        if (entry.factory !== undefined && typeof entry.factory !== "boolean")
+            throw new TypeError("adapter.factory must be a boolean");
+        return {
+            ...(type === undefined ? {} : { type }),
+            module: text(entry.module, "adapter.module"),
+            export: entry.export === undefined ? "default" : text(entry.export, "adapter.export"),
+            factory: entry.factory === true,
+            options: entry.options === undefined ? {} : record(entry.options, "adapter.options"),
+            sourceManifest
+        };
+    });
+    const extraEntries = extras.map((value, index) => {
+        const entry = record(value, `extras[${index}]`);
+        const name = text(entry.name, "extra.name");
+        if (!/^[a-z][a-z0-9-]{0,63}$/.test(name))
+            throw new TypeError("extra.name is invalid");
+        return { name, module: text(entry.module, "extra.module"), sourceManifest };
+    });
+    unique(adapters, (entry) => entry.type, "adapter.type");
+    unique(extraEntries, (entry) => entry.name, "extra.name");
+    return { version: 1, adapters, extras: extraEntries };
+}
+/** 只有可选用户文件的 ENOENT 表示无扩展；权限、JSON 或格式错误必须保留失败。 */
+export async function readModuleManifest(file, { optional = false, legacy = false } = {}) {
+    let content;
+    try {
+        content = await readFile(file, "utf8");
+    }
+    catch (error) {
+        if (optional && error.code === "ENOENT")
+            return { version: 1, adapters: [], extras: [] };
+        throw error;
+    }
+    try {
+        return parseModuleManifest(JSON.parse(content), file, { legacy });
+    }
+    catch (error) {
+        throw Object.assign(new TypeError(`Invalid manifest ${file}: ${error instanceof Error ? error.message : "invalid JSON"}`, { cause: error }), { code: "MANIFEST_INVALID" });
+    }
+}
+/** 内置优先、用户追加；冲突项在解析/import 前剔除，诊断不得包含 options 或业务配置。 */
+export function mergeModuleManifests(builtin, extension, report = () => { }) {
+    function merge(first, second, key) {
+        const seen = new Set(first.map(key).filter((value) => value !== undefined));
+        return [
+            ...first,
+            ...second.filter((entry) => {
+                const name = key(entry);
+                if (name !== undefined && seen.has(name)) {
+                    report(`Ignoring extension module "${name}": built-in declaration takes precedence`);
+                    return false;
+                }
+                if (name !== undefined)
+                    seen.add(name);
+                return true;
+            })
+        ];
+    }
+    return {
+        version: 1,
+        adapters: merge(builtin.adapters, extension.adapters, (entry) => entry.type),
+        extras: merge(builtin.extras, extension.extras, (entry) => entry.name)
+    };
+}
+/** 按原始清单解析裸包的 ESM import/exports；本机路径先转 URL，避免 Windows 盘符误判。 */
+export function resolveModuleSpecifier(module, sourceManifest) {
+    if (module.startsWith(".") || isAbsolute(module))
+        return pathToFileURL(resolve(dirname(sourceManifest), module)).href;
+    if (/^[a-z][a-z0-9+.-]*:/i.test(module))
+        return module;
+    return resolveEsm(module, pathToFileURL(resolve(sourceManifest)).href);
+}
+/** 仅解析选中 Adapter，生成可跨进程的启动快照；不提前解析或加载 Extra。 */
+export function resolveAdapterModules(manifest) {
+    return manifest.adapters.map((entry) => ({
+        ...entry,
+        module: resolveModuleSpecifier(entry.module, entry.sourceManifest)
+    }));
+}
+function record(value, label) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError(`${label} must be an object`);
+    return value;
+}
+function text(value, label) {
+    if (typeof value !== "string" || !value.trim())
+        throw new TypeError(`${label} must be a non-empty string`);
+    return value;
+}
+function unique(entries, key, label) {
+    const seen = new Set();
+    for (const entry of entries) {
+        const value = key(entry);
+        if (value === undefined)
+            continue;
+        if (seen.has(value))
+            throw new TypeError(`duplicate ${label}: ${value}`);
+        seen.add(value);
+    }
+}

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/runtime-log-worker.js

@@ -1,4 +1,4 @@
-/** 日志专用线程：复用小时桶、容量与跨进程互斥，不运行任何业务逻辑。 */
+/** Dedicated log thread: reuse hourly retention, capacity limits and cross-process exclusion. */
 import { parentPort, workerData } from "node:worker_threads";
 import { join } from "node:path";
 import { HourlyLogWriter } from "./hourly-log.js";
@@ -13,8 +13,10 @@ parentPort.on("message", (message) => {
         return;
     }
     try {
-        const category = message.extra ?? "kernel";
-        const key = message.extra ? `extra:${message.extra}` : "kernel";
+        const category = message.extra
+            ? `${message.extra}${message.status ? "-status" : ""}`
+            : "kernel";
+        const key = message.extra ? `extra:${category}` : "kernel";
         let writer = writers.get(key);
         if (!writer && writers.size < 128) {
             writer = new HourlyLogWriter(message.extra ? join(directory, "extras") : directory, category, { onError: () => { } });
@@ -23,7 +25,7 @@ parentPort.on("message", (message) => {
         writer?.write(message.line);
     }
     catch {
-        /* 写入失败只丢弃本条诊断，不影响执行。 */
+        /* Dropping a diagnostic must never affect execution. */
     }
-    parentPort.postMessage("written");
+    parentPort.postMessage({ written: message.status === true });
 });

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/runtime-log.d.ts

@@ -1,7 +1,10 @@
+import { type ExtraStatusRecord } from "./service-status.js";
 export type RuntimeLogLevel = "info" | "warn" | "error";
 export type RuntimeLog = (level: RuntimeLogLevel, event: string, data?: Readonly<Record<string, unknown>>) => void;
 export interface RuntimeLoggingOptions {
     directory: string;
+    /** In-process status sink; SDK defaults to silence. Never placed in JSON config or workerData. */
+    statusOutput?: (record: ExtraStatusRecord) => void;
 }
 export declare const noopRuntimeLog: RuntimeLog;
 export declare function assertRuntimeLogging(options?: RuntimeLoggingOptions): void;

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/runtime-log.js

@@ -1,6 +1,7 @@
-/** 宿主可选的结构化日志；只接受执行元数据，磁盘写入隔离在有界 Worker。 */
+/** Optional metadata logging; bounded queues isolate filesystem writes in a dedicated worker. */
 import { isAbsolute } from "node:path";
 import { Worker } from "node:worker_threads";
+import { extraStatusRecord } from "./service-status.js";
 export const noopRuntimeLog = () => { };
 const strings = new Set([
     "run_id",
@@ -30,11 +31,15 @@ export function assertRuntimeLogging(options) {
     if (options !== undefined &&
         (!options || typeof options.directory !== "string" || !isAbsolute(options.directory)))
         throw new TypeError("LOG_DIRECTORY_MUST_BE_ABSOLUTE");
+    if (options?.statusOutput !== undefined && typeof options.statusOutput !== "function")
+        throw new TypeError("LOG_STATUS_OUTPUT_INVALID");
 }
 /** F31：.octospec/tasks/gateway-august-feature-assessment/assessment.md */
 export class RuntimeLogging {
     #worker;
     #pending = 0;
+    #statusPending = 0;
+    #statusOutput;
     #closed = false;
     #closing;
     #done;
@@ -42,27 +47,31 @@ export class RuntimeLogging {
         assertRuntimeLogging(options);
         if (!options)
             return;
+        this.#statusOutput = options.statusOutput;
         try {
             this.#worker = new Worker(new URL("./runtime-log-worker.js", import.meta.url), {
-                workerData: options
+                workerData: { directory: options.directory }
             });
         }
         catch {
-            this.#closed = true;
             return;
         }
         this.#worker.on("message", (message) => {
-            if (message === "written")
-                this.#pending = Math.max(0, this.#pending - 1);
+            if (typeof message === "object") {
+                if (message.written)
+                    this.#statusPending = Math.max(0, this.#statusPending - 1);
+                else
+                    this.#pending = Math.max(0, this.#pending - 1);
+            }
             if (message === "closed")
                 this.#done?.();
         });
         this.#worker.on("error", () => {
-            this.#closed = true;
+            this.#worker = undefined;
             this.#done?.();
         });
         this.#worker.on("exit", () => {
-            this.#closed = true;
+            this.#worker = undefined;
             this.#done?.();
         });
         this.#worker.unref();
@@ -74,13 +83,39 @@ export class RuntimeLogging {
         return (level, event, data) => this.#write("extra", name, level, event, data);
     }
     #write(source, extra, level, event, data) {
-        if (!this.#worker || this.#closed || this.#pending >= 128)
+        if (this.#closed)
+            return;
+        if (extra) {
+            try {
+                const status = extraStatusRecord(extra, level, event, data);
+                if (status) {
+                    // Sink and mirror fail independently; neither failure may affect service recovery.
+                    try {
+                        const result = this.#statusOutput?.(status);
+                        // TypeScript permits async functions in void sinks; observe rejection without waiting.
+                        if (result && typeof result.then === "function")
+                            void Promise.resolve(result).catch(() => undefined);
+                    }
+                    catch {
+                        /* A host sink failure must not suppress the independent file mirror. */
+                    }
+                    if (this.#worker && this.#statusPending < 128) {
+                        this.#worker.postMessage({ extra, status: true, line: `${JSON.stringify(status)}\n` });
+                        this.#statusPending++;
+                    }
+                }
+            }
+            catch {
+                /* Untrusted diagnostic getters must not escape into service execution. */
+            }
+        }
+        if (!this.#worker || this.#pending >= 128)
             return;
         try {
             if (!["info", "warn", "error"].includes(level) || !/^[a-z][a-z0-9_.-]{0,63}$/.test(event))
                 return;
             const safe = {};
-            // 不做任意对象脱敏或正文截断：白名单之外的字段直接不读取、不序列化。
+            // Ignore unknown fields entirely instead of serializing or truncating arbitrary bodies.
             for (const key of strings) {
                 const value = data?.[key];
                 if (typeof value === "string" &&
@@ -105,7 +140,7 @@ export class RuntimeLogging {
             this.#pending++;
         }
         catch {
-            /* 日志不能中断执行，包括恶意 getter 或已退出的 Worker。 */
+            /* Diagnostics cannot interrupt execution, including getter errors or an exited worker. */
         }
     }
     close() {

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/service-status.d.ts

@@ -0,0 +1,11 @@
+import type { RuntimeLogLevel } from "./runtime-log.js";
+export interface ExtraStatusRecord {
+    time: string;
+    level: RuntimeLogLevel;
+    source: "extra";
+    extra_type: string;
+    event: string;
+    data: Record<string, string | number>;
+}
+/** Rebuild status records from a separate allowlist, including when reading persisted files. */
+export declare function extraStatusRecord(extra: string, level: RuntimeLogLevel, event: string, data?: Readonly<Record<string, unknown>>, time?: string): ExtraStatusRecord | undefined;

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/dist/service-status.js

@@ -0,0 +1,70 @@
+const events = new Set([
+    "service.initializing",
+    "service.ready",
+    "service.closing",
+    "service.closed",
+    "service.failed",
+    "service.cleanup_incomplete",
+    "service.output_dropped",
+    "kernel.available",
+    "kernel.unavailable",
+    "channel.connecting",
+    "channel.connected",
+    "channel.disconnected",
+    "channel.connection_failed",
+    "channel.retry_started",
+    "channel.retry_scheduled",
+    "channel.stopped",
+    "channel.diagnostic"
+]);
+const states = new Set([
+    "created",
+    "initializing",
+    "ready",
+    "closing",
+    "closed",
+    "failed",
+    "connecting",
+    "online",
+    "retrying",
+    "stopped",
+    "available",
+    "unavailable"
+]);
+/** Rebuild status records from a separate allowlist, including when reading persisted files. */
+export function extraStatusRecord(extra, level, event, data, time = new Date().toISOString()) {
+    if (!/^[a-z][a-z0-9-]{0,63}$/.test(extra) ||
+        !["info", "warn", "error"].includes(level) ||
+        !events.has(event))
+        return;
+    if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(time) ||
+        !Number.isFinite(Date.parse(time)))
+        return;
+    if (event === "channel.diagnostic" && data?.code !== "IM_DISPOSE_FAILED")
+        return;
+    const safe = {};
+    for (const key of ["state", "code", "endpoint_id"]) {
+        const value = data?.[key];
+        if (typeof value !== "string")
+            continue;
+        if (key === "state"
+            ? states.has(value)
+            : key === "endpoint_id"
+                ? /^[a-f0-9]{64}$/.test(value)
+                : /^[A-Z][A-Z0-9_]{0,95}$/.test(value))
+            safe[key] = value;
+    }
+    for (const key of ["attempt", "delay_ms", "dropped_count"]) {
+        const value = data?.[key];
+        if (typeof value === "number" && Number.isSafeInteger(value) && value >= 0)
+            safe[key] = value;
+    }
+    return Object.freeze({
+        time,
+        level,
+        source: "extra",
+        extra_type: extra,
+        event,
+        data: Object.freeze(safe)
+    });
+}

package/node_modules/@mininglamp-oss/octo-runtime-adapter-sdk/package.json

@@ -1,14 +1,16 @@
 {
   "name": "@mininglamp-oss/octo-runtime-adapter-sdk",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "private": true,
   "type": "module",
   "exports": {
     ".": "./dist/index.js",
-    "./process-cleanup": "./dist/process-cleanup.js"
+    "./process-cleanup": "./dist/process-cleanup.js",
+    "./module-manifest": "./dist/module-manifest.js"
   },
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.0"
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.2",
+    "import-meta-resolve": "4.2.0"
   },
   "types": "./dist/index.d.ts",
   "files": [

package/node_modules/@mininglamp-oss/octo-runtime-adapter-zcode-gui/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@mininglamp-oss/octo-runtime-adapter-zcode-gui",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "private": true,
   "type": "module",
   "exports": "./dist/index.js",
   "dependencies": {
-    "@mininglamp-oss/octo-runtime-protocol": "1.1.0",
-    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.0"
+    "@mininglamp-oss/octo-runtime-protocol": "1.1.2",
+    "@mininglamp-oss/octo-runtime-adapter-sdk": "1.1.2"
   },
   "types": "./dist/index.d.ts",
   "files": [

package/node_modules/@mininglamp-oss/octo-runtime-cli/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "commit": "d064cfe78f6818d3c451ecf803a280245f4b0496",
+  "commit": "5c1921dced4b0852e41426f1c04582159082f482",
   "dirty": false,
-  "buildTime": "2026-10-21T06:46:27.212Z"
+  "buildTime": "2026-10-22T12:44:46.791Z"
 }

package/node_modules/@mininglamp-oss/octo-runtime-cli/dist/extras.d.ts

@@ -1,6 +1,8 @@
-import { type ExtraDescriptor, type StoredExtra } from "@mininglamp-oss/octo-runtime-host-sdk";
+import { type ExtraRegistration, type StoredExtra } from "@mininglamp-oss/octo-runtime-host-sdk";
 import { type RuntimePaths } from "./state.js";
+import { type ModuleManifest } from "@mininglamp-oss/octo-runtime-adapter-sdk/module-manifest";
 /** Generic full replacement: no platform-specific CLI fields or validation. */
 export declare function setExtra(paths: RuntimePaths, name: string, input: NodeJS.ReadableStream): Promise<unknown>;
-export declare function readExtra(paths: RuntimePaths, name: string): Promise<ExtraDescriptor>;
+/** CLI 将模块目录与业务配置装配；仅 load 时解析/import，禁用项及未启动项不执行模块。 */
+export declare function readExtra(paths: RuntimePaths, name: string, manifest: ModuleManifest): Promise<ExtraRegistration>;
 export declare function getExtra(paths: RuntimePaths, name: string): Promise<StoredExtra>;

package/node_modules/@mininglamp-oss/octo-runtime-cli/dist/extras.js

@@ -1,6 +1,7 @@
 import { join } from "node:path";
-import { assertExtraName, assertStoredExtra, readExtraDirectory } from "@mininglamp-oss/octo-runtime-host-sdk";
+import { assertExtraName, assertStoredExtra, readStoredExtra } from "@mininglamp-oss/octo-runtime-host-sdk";
 import { withSetupLock, writeJsonAtomic } from "./state.js";
+import { resolveModuleSpecifier } from "@mininglamp-oss/octo-runtime-adapter-sdk/module-manifest";
 /** Generic full replacement: no platform-specific CLI fields or validation. */
 export async function setExtra(paths, name, input) {
     assertExtraName(name);
@@ -29,33 +30,31 @@ export async function setExtra(paths, name, input) {
         return { saved: true, name, file, reload_required: true };
     });
 }
-export async function readExtra(paths, name) {
+/** CLI 将模块目录与业务配置装配；仅 load 时解析/import，禁用项及未启动项不执行模块。 */
+export async function readExtra(paths, name, manifest) {
     assertExtraName(name);
-    const entries = await readExtraDirectory(join(paths.home, "extras"));
-    const entry = entries.find((item) => item.name === name);
+    const stored = await getExtra(paths, name);
+    const entry = manifest.extras.find((item) => item.name === name);
     if (!entry)
-        throw new Error("EXTRA_NOT_REGISTERED");
-    // Invalid stored declarations carry a controlled read error through their loader.
-    if (!entry.module)
-        await entry.load();
+        throw new Error("EXTRA_MANIFEST_DECLARATION_REQUIRED");
+    if (stored.module !== undefined && stored.module !== entry.module)
+        throw new Error("EXTRA_MODULE_MIGRATION_REQUIRED");
     return {
         name,
         module: entry.module,
-        config: entry.config,
-        ...(entry.enabled === undefined ? {} : { enabled: entry.enabled })
+        config: stored.config,
+        enabled: stored.enabled,
+        load: () => import(resolveModuleSpecifier(entry.module, entry.sourceManifest))
     };
 }
 export async function getExtra(paths, name) {
     assertExtraName(name);
-    const entries = await readExtraDirectory(join(paths.home, "extras"));
-    const entry = entries.find((item) => item.name === name);
-    if (!entry)
-        throw new Error("EXTRA_NOT_REGISTERED");
-    if (!entry.module)
-        await entry.load();
-    return {
-        module: entry.module,
-        ...(entry.enabled === undefined ? {} : { enabled: entry.enabled }),
-        config: entry.config
-    };
+    try {
+        return await readStoredExtra(join(paths.home, "extras"), name);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            throw new Error("EXTRA_NOT_REGISTERED", { cause: error });
+        throw error;
+    }
 }