@wipcomputer/wip-ldm-os 0.4.28 → 0.4.30

package/SKILL.md

@@ -5,7 +5,7 @@ license: MIT
 interface: [cli, skill]
 metadata:
   display-name: "LDM OS"
-  version: "0.4.28"
+  version: "0.4.30"
   homepage: "https://github.com/wipcomputer/wip-ldm-os"
   author: "Parker Todd Brooks"
   category: infrastructure

package/bin/ldm.js

@@ -30,6 +30,7 @@ const LDM_ROOT = join(HOME, '.ldm');
 const LDM_EXTENSIONS = join(LDM_ROOT, 'extensions');
 const VERSION_PATH = join(LDM_ROOT, 'version.json');
 const REGISTRY_PATH = join(LDM_EXTENSIONS, 'registry.json');
+const LDM_TMP = join(LDM_ROOT, 'tmp');
 
 // Install log (#101): append to ~/.ldm/logs/install.log
 import { appendFileSync } from 'node:fs';
@@ -227,7 +228,21 @@ function loadCatalog() {
 }
 
 function findInCatalog(id) {
-  return loadCatalog().find(c => c.id === id);
+  const q = id.toLowerCase();
+  const catalog = loadCatalog();
+  // Exact id match
+  const exact = catalog.find(c => c.id === id);
+  if (exact) return exact;
+  // Partial id match (e.g. "xai-grok" matches "wip-xai-grok")
+  const partial = catalog.find(c => c.id.toLowerCase().includes(q) || q.includes(c.id.toLowerCase()));
+  if (partial) return partial;
+  // Name match (case-insensitive, e.g. "xAI Grok")
+  const byName = catalog.find(c => c.name && c.name.toLowerCase() === q);
+  if (byName) return byName;
+  // registryMatches match
+  const byRegistry = catalog.find(c => (c.registryMatches || []).some(m => m.toLowerCase() === q));
+  if (byRegistry) return byRegistry;
+  return null;
 }
 
 // ── ldm init ──
@@ -484,8 +499,22 @@ async function cmdInstall() {
     return cmdInstallCatalog();
   }
 
+  // If target is a private repo (org/name-private), redirect to public (#134)
+  let resolvedTarget = target;
+  if (target.match(/^[\w-]+\/[\w.-]+-private$/) && !existsSync(resolve(target))) {
+    const publicRepo = target.replace(/-private$/, '');
+    const catalogHit = findInCatalog(basename(publicRepo));
+    if (catalogHit) {
+      console.log(`  Redirecting ${target} to public repo: ${catalogHit.repo}`);
+      resolvedTarget = catalogHit.repo;
+    } else {
+      console.log(`  Redirecting ${target} to public repo: ${publicRepo}`);
+      resolvedTarget = publicRepo;
+    }
+  }
+
   // Check if target is a catalog ID (e.g. "memory-crystal")
-  const catalogEntry = findInCatalog(target);
+  const catalogEntry = findInCatalog(resolvedTarget);
   if (catalogEntry) {
     console.log('');
     console.log(`  Resolved "${target}" via catalog to ${catalogEntry.repo}`);
@@ -493,10 +522,11 @@ async function cmdInstall() {
     // Use the repo field to clone from GitHub
     const repoTarget = catalogEntry.repo;
     const repoName = basename(repoTarget);
-    const repoPath = join('/tmp', `ldm-install-${repoName}`);
+    const repoPath = join(LDM_TMP, `ldm-install-${repoName}`);
     const httpsUrl = `https://github.com/${repoTarget}.git`;
     const sshUrl = `git@github.com:${repoTarget}.git`;
 
+    mkdirSync(LDM_TMP, { recursive: true });
     console.log(`  Cloning ${repoTarget}...`);
     try {
       if (existsSync(repoPath)) {
@@ -523,8 +553,8 @@ async function cmdInstall() {
 
     await installFromPath(repoPath);
 
-    // Clean up /tmp/ clone after install (#32)
-    if (!DRY_RUN && (repoPath.startsWith('/tmp/') || repoPath.startsWith('/private/tmp/'))) {
+    // Clean up staging clone after install (#32, #135)
+    if (!DRY_RUN && repoPath.startsWith(LDM_TMP)) {
       try { execSync(`rm -rf "${repoPath}"`, { stdio: 'pipe' }); } catch {}
     }
     return;
@@ -534,10 +564,10 @@ async function cmdInstall() {
   let repoPath;
 
   // Check if target looks like an npm package (starts with @ or is a plain name without /)
-  if (target.startsWith('@') || (!target.includes('/') && !existsSync(resolve(target)))) {
+  if (resolvedTarget.startsWith('@') || (!resolvedTarget.includes('/') && !existsSync(resolve(resolvedTarget)))) {
     // Try npm install to temp dir
-    const npmName = target;
-    const tempDir = join('/tmp', `ldm-install-npm-${Date.now()}`);
+    const npmName = resolvedTarget;
+    const tempDir = join(LDM_TMP, `ldm-install-npm-${Date.now()}`);
     console.log('');
     console.log(`  Installing ${npmName} from npm...`);
     try {
@@ -560,19 +590,20 @@ async function cmdInstall() {
     }
   }
 
-  if (!repoPath && (target.startsWith('http') || target.startsWith('git@') || target.match(/^[\w-]+\/[\w.-]+$/))) {
-    const isShorthand = target.match(/^[\w-]+\/[\w.-]+$/);
+  if (!repoPath && (resolvedTarget.startsWith('http') || resolvedTarget.startsWith('git@') || resolvedTarget.match(/^[\w-]+\/[\w.-]+$/))) {
+    const isShorthand = resolvedTarget.match(/^[\w-]+\/[\w.-]+$/);
     const httpsUrl = isShorthand
-      ? `https://github.com/${target}.git`
-      : target;
+      ? `https://github.com/${resolvedTarget}.git`
+      : resolvedTarget;
     const sshUrl = isShorthand
-      ? `git@github.com:${target}.git`
-      : target.replace(/^https:\/\/github\.com\//, 'git@github.com:');
+      ? `git@github.com:${resolvedTarget}.git`
+      : resolvedTarget.replace(/^https:\/\/github\.com\//, 'git@github.com:');
     const repoName = basename(httpsUrl).replace('.git', '');
-    repoPath = join('/tmp', `ldm-install-${repoName}`);
+    repoPath = join(LDM_TMP, `ldm-install-${repoName}`);
 
+    mkdirSync(LDM_TMP, { recursive: true });
     console.log('');
-    console.log(`  Cloning ${isShorthand ? target : httpsUrl}...`);
+    console.log(`  Cloning ${isShorthand ? resolvedTarget : httpsUrl}...`);
     try {
       if (existsSync(repoPath)) {
         execSync(`rm -rf "${repoPath}"`, { stdio: 'pipe' });
@@ -590,7 +621,7 @@ async function cmdInstall() {
       process.exit(1);
     }
   } else if (!repoPath) {
-    repoPath = resolve(target);
+    repoPath = resolve(resolvedTarget);
     if (!existsSync(repoPath)) {
       console.error(`  x Path not found: ${repoPath}`);
       process.exit(1);
@@ -605,8 +636,8 @@ async function cmdInstall() {
 
   await installFromPath(repoPath);
 
-  // Clean up /tmp/ clone after install (#32)
-  if (!DRY_RUN && (repoPath.startsWith('/tmp/') || repoPath.startsWith('/private/tmp/'))) {
+  // Clean up staging clone after install (#32, #135)
+  if (!DRY_RUN && repoPath.startsWith(LDM_TMP)) {
     try { execSync(`rm -rf "${repoPath}"`, { stdio: 'pipe' }); } catch {}
   }
 }
@@ -918,13 +949,21 @@ async function cmdInstallCatalog() {
       }
     } catch {}
 
-    // Check orphaned /tmp/ dirs
+    // Check orphaned staging dirs (old /tmp/ and new ~/.ldm/tmp/)
     try {
       const tmpCount = readdirSync('/private/tmp').filter(d => d.startsWith('ldm-install-')).length;
       if (tmpCount > 0) {
         healthIssues.push(`  ! ${tmpCount} orphaned /tmp/ldm-install-* dirs (would clean up)`);
       }
     } catch {}
+    try {
+      if (existsSync(LDM_TMP)) {
+        const ldmTmpCount = readdirSync(LDM_TMP).filter(d => d.startsWith('ldm-install-')).length;
+        if (ldmTmpCount > 0) {
+          healthIssues.push(`  ! ${ldmTmpCount} orphaned ~/.ldm/tmp/ldm-install-* dirs (would clean up)`);
+        }
+      }
+    } catch {}
 
     if (healthIssues.length > 0) {
       console.log('');
@@ -1075,7 +1114,7 @@ async function cmdInstallCatalog() {
     }
   } catch {}
 
-  // 3. Clean orphaned /tmp/ldm-install-* dirs
+  // 3. Clean orphaned staging dirs (old /tmp/ and new ~/.ldm/tmp/)
   try {
     const tmpDirs = readdirSync('/private/tmp').filter(d => d.startsWith('ldm-install-'));
     if (tmpDirs.length > 0) {
@@ -1087,6 +1126,19 @@ async function cmdInstallCatalog() {
       console.log(`  + Cleaned ${tmpDirs.length} orphaned /tmp/ clone(s)`);
     }
   } catch {}
+  try {
+    if (existsSync(LDM_TMP)) {
+      const ldmTmpDirs = readdirSync(LDM_TMP).filter(d => d.startsWith('ldm-install-'));
+      if (ldmTmpDirs.length > 0) {
+        console.log(`  Cleaning ${ldmTmpDirs.length} orphaned ~/.ldm/tmp/ dirs...`);
+        for (const d of ldmTmpDirs) {
+          try { execSync(`rm -rf "${join(LDM_TMP, d)}"`, { stdio: 'pipe', timeout: 10000 }); } catch {}
+        }
+        healthFixes++;
+        console.log(`  + Cleaned ${ldmTmpDirs.length} orphaned ~/.ldm/tmp/ clone(s)`);
+      }
+    }
+  } catch {}
 
   if (healthFixes > 0) {
     console.log(`  ${healthFixes} health issue(s) fixed.`);
@@ -1936,6 +1988,308 @@ async function main() {
     process.exit(0);
   }
 
+  // ── ldm enable / disable (#111) ──
+
+  async function cmdEnable() {
+    const target = args.slice(1).find(a => !a.startsWith('--'));
+    if (!target) {
+      console.log('  Usage: ldm enable <extension|stack>');
+      console.log('  Example: ldm enable devops-toolbox');
+      console.log('  Stacks: core, web, all');
+      process.exit(1);
+    }
+
+    const { enableExtension } = await import('../lib/deploy.mjs');
+    const stacks = loadCatalog()?.stacks || {};
+    const components = loadCatalog()?.components || [];
+
+    // Resolve stack to component list
+    let names = [target];
+    if (stacks[target]) {
+      const stack = stacks[target];
+      names = stack.components || [];
+      if (stack.includes) {
+        for (const inc of stack.includes) {
+          if (stacks[inc]?.components) names.push(...stacks[inc].components);
+        }
+      }
+    }
+    // Map catalog IDs to registry names
+    const resolvedNames = [];
+    for (const n of names) {
+      const comp = components.find(c => c.id === n);
+      if (comp) {
+        resolvedNames.push(comp.id);
+        for (const m of (comp.registryMatches || [])) resolvedNames.push(m);
+      } else {
+        resolvedNames.push(n);
+      }
+    }
+    const uniqueNames = [...new Set(resolvedNames)];
+
+    const registry = readJSON(REGISTRY_PATH);
+    console.log('');
+    for (const name of uniqueNames) {
+      if (!registry?.extensions?.[name]) continue;
+      const result = await enableExtension(name);
+      if (result.ok) {
+        console.log(`  + ${name}: ${result.reason}`);
+      } else {
+        console.log(`  ! ${name}: ${result.reason}`);
+      }
+    }
+    console.log('');
+  }
+
+  async function cmdDisable() {
+    const target = args.slice(1).find(a => !a.startsWith('--'));
+    if (!target) {
+      console.log('  Usage: ldm disable <extension|stack>');
+      process.exit(1);
+    }
+
+    const { disableExtension } = await import('../lib/deploy.mjs');
+    const stacks = loadCatalog()?.stacks || {};
+    const components = loadCatalog()?.components || [];
+
+    let names = [target];
+    if (stacks[target]) {
+      const stack = stacks[target];
+      names = stack.components || [];
+      if (stack.includes) {
+        for (const inc of stack.includes) {
+          if (stacks[inc]?.components) names.push(...stacks[inc].components);
+        }
+      }
+    }
+    const resolvedNames = [];
+    for (const n of names) {
+      const comp = components.find(c => c.id === n);
+      if (comp) {
+        resolvedNames.push(comp.id);
+        for (const m of (comp.registryMatches || [])) resolvedNames.push(m);
+      } else {
+        resolvedNames.push(n);
+      }
+    }
+    const uniqueNames = [...new Set(resolvedNames)];
+
+    const registry = readJSON(REGISTRY_PATH);
+    console.log('');
+    for (const name of uniqueNames) {
+      if (!registry?.extensions?.[name]) continue;
+      const result = disableExtension(name);
+      if (result.ok) {
+        console.log(`  - ${name}: ${result.reason}`);
+      } else {
+        console.log(`  ! ${name}: ${result.reason}`);
+      }
+    }
+    console.log('');
+  }
+
+  // ── ldm uninstall (#114) ──
+
+  async function cmdUninstall() {
+    const keepData = !args.includes('--all');
+    const isDryRun = args.includes('--dry-run');
+
+    console.log('');
+    console.log('  LDM OS Uninstall');
+    console.log('  ────────────────────────────────────');
+
+    if (keepData) {
+      console.log('  Your data will be PRESERVED:');
+      console.log('    ~/.ldm/memory/     (crystal.db, shared memory)');
+      console.log('    ~/.ldm/agents/     (identity, journals, daily logs)');
+      console.log('');
+      console.log('  Use --all to remove everything including data.');
+    } else {
+      console.log('  WARNING: --all flag set. ALL data will be removed.');
+      console.log('  This includes crystal.db, agent files, journals, everything.');
+    }
+
+    console.log('');
+    console.log('  Will remove:');
+
+    // 1. MCP servers
+    const claudeJsonPath = join(HOME, '.claude.json');
+    try {
+      const claudeJson = JSON.parse(readFileSync(claudeJsonPath, 'utf8'));
+      const mcpNames = Object.keys(claudeJson.mcpServers || {}).filter(n =>
+        n.includes('crystal') || n.includes('wip-') || n.includes('memory') ||
+        n.includes('grok') || n.includes('lesa') || n.includes('1password')
+      );
+      if (mcpNames.length > 0) {
+        console.log(`    MCP servers: ${mcpNames.join(', ')}`);
+      }
+    } catch {}
+
+    // 2. CC hooks
+    const settingsPath = join(HOME, '.claude', 'settings.json');
+    try {
+      const settings = JSON.parse(readFileSync(settingsPath, 'utf8'));
+      let hookCount = 0;
+      for (const [event, entries] of Object.entries(settings.hooks || {})) {
+        for (const entry of (Array.isArray(entries) ? entries : [])) {
+          for (const h of (entry.hooks || [])) {
+            if (h.command?.includes('.ldm') || h.command?.includes('wip-')) hookCount++;
+          }
+        }
+      }
+      if (hookCount > 0) console.log(`    CC hooks: ${hookCount} hook(s)`);
+    } catch {}
+
+    // 3. Skills
+    const skillsDir = join(HOME, '.openclaw', 'skills');
+    try {
+      const skills = readdirSync(skillsDir).filter(d => d !== '.DS_Store');
+      if (skills.length > 0) console.log(`    Skills: ${skills.join(', ')}`);
+    } catch {}
+
+    // 4. Cron jobs
+    try {
+      const crontab = execSync('crontab -l 2>/dev/null', { encoding: 'utf8' });
+      const ldmLines = crontab.split('\n').filter(l => l.includes('.ldm') || l.includes('crystal-capture') || l.includes('process-monitor'));
+      if (ldmLines.length > 0) console.log(`    Cron jobs: ${ldmLines.length}`);
+    } catch {}
+
+    // 5. Global npm packages
+    try {
+      const npmList = execSync('npm list -g --depth=0 --json 2>/dev/null', { encoding: 'utf8' });
+      const deps = JSON.parse(npmList).dependencies || {};
+      const wipPkgs = Object.keys(deps).filter(n => n.startsWith('@wipcomputer/'));
+      if (wipPkgs.length > 0) console.log(`    npm packages: ${wipPkgs.join(', ')}`);
+    } catch {}
+
+    // 6. Directories
+    console.log(`    ~/.ldm/extensions/`);
+    if (!keepData) {
+      console.log(`    ~/.ldm/memory/`);
+      console.log(`    ~/.ldm/agents/`);
+    }
+    console.log(`    ~/.ldm/state/, bin/, hooks/, logs/, sessions/, messages/`);
+
+    if (isDryRun) {
+      console.log('');
+      console.log('  Dry run. Nothing removed.');
+      console.log('');
+      return;
+    }
+
+    // Confirm
+    if (process.stdin.isTTY) {
+      const { createInterface } = await import('readline');
+      const rl = createInterface({ input: process.stdin, output: process.stdout });
+      const answer = await new Promise(resolve => {
+        rl.question('\n  Type "uninstall" to confirm: ', resolve);
+      });
+      rl.close();
+      if (answer.trim() !== 'uninstall') {
+        console.log('  Cancelled.');
+        return;
+      }
+    }
+
+    console.log('');
+    console.log('  Removing...');
+
+    // 1. Unregister MCP servers
+    try {
+      const claudeJson = JSON.parse(readFileSync(claudeJsonPath, 'utf8'));
+      const mcpNames = Object.keys(claudeJson.mcpServers || {}).filter(n =>
+        n.includes('crystal') || n.includes('wip-') || n.includes('memory') ||
+        n.includes('grok') || n.includes('lesa') || n.includes('1password')
+      );
+      for (const name of mcpNames) {
+        delete claudeJson.mcpServers[name];
+      }
+      writeFileSync(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + '\n');
+      console.log(`  + Removed ${mcpNames.length} MCP server(s)`);
+    } catch {}
+
+    // 2. Remove CC hooks
+    try {
+      const settings = JSON.parse(readFileSync(settingsPath, 'utf8'));
+      let removed = 0;
+      for (const [event, entries] of Object.entries(settings.hooks || {})) {
+        if (!Array.isArray(entries)) continue;
+        for (const entry of entries) {
+          if (!entry.hooks) continue;
+          const before = entry.hooks.length;
+          entry.hooks = entry.hooks.filter(h => !h.command?.includes('.ldm') && !h.command?.includes('wip-'));
+          removed += before - entry.hooks.length;
+        }
+        settings.hooks[event] = entries.filter(e => e.hooks?.length > 0);
+      }
+      writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
+      console.log(`  + Removed ${removed} CC hook(s)`);
+    } catch {}
+
+    // 3. Remove skills
+    try {
+      const skills = readdirSync(skillsDir).filter(d => d !== '.DS_Store');
+      for (const s of skills) {
+        execSync(`rm -rf "${join(skillsDir, s)}"`, { stdio: 'pipe' });
+      }
+      console.log(`  + Removed ${skills.length} skill(s)`);
+    } catch {}
+
+    // 4. Remove cron jobs
+    try {
+      const crontab = execSync('crontab -l 2>/dev/null', { encoding: 'utf8' });
+      const filtered = crontab.split('\n').filter(l =>
+        !l.includes('.ldm') && !l.includes('crystal-capture') && !l.includes('process-monitor')
+      ).join('\n');
+      execSync(`echo "${filtered}" | crontab -`, { stdio: 'pipe' });
+      console.log('  + Cleaned cron jobs');
+    } catch {}
+
+    // 5. Remove npm packages
+    try {
+      const npmList = execSync('npm list -g --depth=0 --json 2>/dev/null', { encoding: 'utf8' });
+      const deps = JSON.parse(npmList).dependencies || {};
+      const wipPkgs = Object.keys(deps).filter(n => n.startsWith('@wipcomputer/'));
+      for (const pkg of wipPkgs) {
+        if (pkg === '@wipcomputer/wip-ldm-os') continue; // uninstall self last
+        try { execSync(`npm uninstall -g ${pkg}`, { stdio: 'pipe', timeout: 30000 }); } catch {}
+      }
+      console.log(`  + Removed ${wipPkgs.length - 1} npm package(s)`);
+    } catch {}
+
+    // 6. Remove directories
+    const dirsToRemove = ['extensions', 'state', 'bin', 'hooks', 'logs', 'sessions', 'messages', 'shared', '_trash'];
+    if (!keepData) {
+      dirsToRemove.push('memory', 'agents', 'secrets', 'backups');
+    }
+    for (const dir of dirsToRemove) {
+      const p = join(LDM_ROOT, dir);
+      if (existsSync(p)) {
+        execSync(`rm -rf "${p}"`, { stdio: 'pipe' });
+      }
+    }
+    // Remove config and version files
+    for (const f of ['version.json', 'config.json']) {
+      const p = join(LDM_ROOT, f);
+      if (existsSync(p)) unlinkSync(p);
+    }
+    console.log('  + Removed ~/.ldm/ contents');
+
+    if (keepData) {
+      console.log('');
+      console.log('  Preserved:');
+      console.log('    ~/.ldm/memory/   (your data)');
+      console.log('    ~/.ldm/agents/   (identity + journals)');
+    }
+
+    // 7. Self-uninstall
+    console.log('');
+    console.log('  To finish, run: npm uninstall -g @wipcomputer/wip-ldm-os');
+    console.log('');
+    console.log('  LDM OS uninstalled.');
+    console.log('');
+  }
+
   if (command === '--version' || command === '-v') {
     console.log(PKG_VERSION);
     process.exit(0);
@@ -1973,6 +2327,15 @@ async function main() {
     case 'updates':
       await cmdUpdates();
       break;
+    case 'enable':
+      await cmdEnable();
+      break;
+    case 'disable':
+      await cmdDisable();
+      break;
+    case 'uninstall':
+      await cmdUninstall();
+      break;
     default:
       console.error(`  Unknown command: ${command}`);
       console.error(`  Run: ldm --help`);

package/catalog.json

@@ -4,7 +4,12 @@
     "core": {
       "name": "WIP Core",
       "description": "Essential tools for all WIP.computer team members.",
-      "components": ["memory-crystal", "wip-ai-devops-toolbox", "wip-1password", "wip-markdown-viewer"],
+      "components": [
+        "memory-crystal",
+        "wip-ai-devops-toolbox",
+        "wip-1password",
+        "wip-markdown-viewer"
+      ],
       "mcpServers": []
     },
     "web": {
@@ -12,17 +17,54 @@
       "description": "Frontend tools for Next.js, React, Tailwind projects.",
       "components": [],
       "mcpServers": [
-        { "name": "playwright", "command": "npx", "args": ["-y", "@playwright/mcp@latest", "--browser", "chromium"] },
-        { "name": "next-devtools", "command": "npx", "args": ["-y", "next-devtools-mcp@latest"] },
-        { "name": "shadcn", "command": "npx", "args": ["-y", "shadcn@latest", "mcp"] },
-        { "name": "tailwindcss-docs", "command": "npx", "args": ["-y", "tailwindcss-docs-mcp"] }
+        {
+          "name": "playwright",
+          "command": "npx",
+          "args": [
+            "-y",
+            "@playwright/mcp@latest",
+            "--browser",
+            "chromium"
+          ]
+        },
+        {
+          "name": "next-devtools",
+          "command": "npx",
+          "args": [
+            "-y",
+            "next-devtools-mcp@latest"
+          ]
+        },
+        {
+          "name": "shadcn",
+          "command": "npx",
+          "args": [
+            "-y",
+            "shadcn@latest",
+            "mcp"
+          ]
+        },
+        {
+          "name": "tailwindcss-docs",
+          "command": "npx",
+          "args": [
+            "-y",
+            "tailwindcss-docs-mcp"
+          ]
+        }
       ]
     },
     "all": {
       "name": "Everything",
       "description": "All WIP tools + web dev stack.",
-      "includes": ["core", "web"],
-      "components": ["wip-xai-grok", "wip-xai-x"],
+      "includes": [
+        "core",
+        "web"
+      ],
+      "components": [
+        "wip-xai-grok",
+        "wip-xai-x"
+      ],
       "mcpServers": []
     }
   },
@@ -33,14 +75,24 @@
       "description": "Persistent memory for your AI. Search, capture, consolidation.",
       "npm": "@wipcomputer/memory-crystal",
       "repo": "wipcomputer/memory-crystal",
-      "registryMatches": ["memory-crystal"],
-      "cliMatches": ["crystal"],
+      "registryMatches": [
+        "memory-crystal"
+      ],
+      "cliMatches": [
+        "crystal"
+      ],
       "recommended": true,
       "status": "stable",
       "postInstall": "crystal doctor",
       "installs": {
-        "cli": ["crystal"],
-        "mcp": ["crystal_search", "crystal_remember", "crystal_forget"],
+        "cli": [
+          "crystal"
+        ],
+        "mcp": [
+          "crystal_search",
+          "crystal_remember",
+          "crystal_forget"
+        ],
         "ocPlugin": "agent_end hook (conversation capture every turn)",
         "ccHook": "Stop hook (crystal capture + daily log)",
         "cron": "crystal-capture.sh (every 1 min, backup capture)",
@@ -53,14 +105,41 @@
       "description": "Release pipeline, license compliance, repo management, identity file protection.",
       "npm": "@wipcomputer/wip-ai-devops-toolbox",
       "repo": "wipcomputer/wip-ai-devops-toolbox",
-      "registryMatches": ["wip-repos", "wip-release", "wip-file-guard", "wip-license-hook", "wip-repo-permissions-hook", "deploy-public", "post-merge-rename", "wip-license-guard", "wip-repo-init", "wip-readme-format", "wip-branch-guard"],
-      "cliMatches": ["wip-release", "wip-repos", "wip-file-guard", "wip-branch-guard"],
+      "registryMatches": [
+        "wip-repos",
+        "wip-release",
+        "wip-file-guard",
+        "wip-license-hook",
+        "wip-repo-permissions-hook",
+        "deploy-public",
+        "post-merge-rename",
+        "wip-license-guard",
+        "wip-repo-init",
+        "wip-readme-format",
+        "wip-branch-guard"
+      ],
+      "cliMatches": [
+        "wip-release",
+        "wip-repos",
+        "wip-file-guard",
+        "wip-branch-guard"
+      ],
       "recommended": false,
       "status": "stable",
       "postInstall": null,
       "installs": {
-        "cli": ["wip-release", "wip-repos", "wip-file-guard", "wip-install"],
-        "mcp": ["wip-release", "wip-repos", "wip-license-hook", "wip-repo-permissions-hook"],
+        "cli": [
+          "wip-release",
+          "wip-repos",
+          "wip-file-guard",
+          "wip-install"
+        ],
+        "mcp": [
+          "wip-release",
+          "wip-repos",
+          "wip-license-hook",
+          "wip-repo-permissions-hook"
+        ],
         "ccHook": "branch-guard (blocks writes on main), file-guard (protects identity files), repo-permissions (workspace boundaries)",
         "tools": "12 sub-tools: release, repos, file-guard, license-hook, license-guard, repo-permissions-hook, deploy-public, post-merge-rename, repo-init, readme-format, branch-guard, universal-installer"
       }
@@ -71,13 +150,20 @@
       "description": "1Password secrets for AI agents.",
       "npm": null,
       "repo": "wipcomputer/wip-1password",
-      "registryMatches": ["wip-1password", "op-secrets"],
+      "registryMatches": [
+        "wip-1password",
+        "op-secrets"
+      ],
       "cliMatches": [],
       "recommended": false,
       "status": "stable",
       "postInstall": null,
       "installs": {
-        "mcp": ["op_list_items", "op_read_secret", "op_test"],
+        "mcp": [
+          "op_list_items",
+          "op_read_secret",
+          "op_test"
+        ],
         "ocPlugin": "op-secrets (headless 1Password via service account)"
       }
     },
@@ -87,13 +173,20 @@
       "description": "Live markdown viewer for AI pair-editing. Updates render instantly in any browser.",
       "npm": "@wipcomputer/markdown-viewer",
       "repo": "wipcomputer/wip-markdown-viewer",
-      "registryMatches": ["wip-markdown-viewer", "markdown-viewer"],
-      "cliMatches": ["mdview"],
+      "registryMatches": [
+        "wip-markdown-viewer",
+        "markdown-viewer"
+      ],
+      "cliMatches": [
+        "mdview"
+      ],
       "recommended": false,
       "status": "stable",
       "postInstall": null,
       "installs": {
-        "cli": ["mdview"],
+        "cli": [
+          "mdview"
+        ],
         "web": "localhost:3000 (live reload markdown renderer)"
       }
     },
@@ -103,13 +196,23 @@
       "description": "xAI Grok API. Search the web, search X, generate images, generate video.",
       "npm": null,
       "repo": "wipcomputer/wip-xai-grok",
-      "registryMatches": ["wip-xai-grok", "grok-search"],
+      "registryMatches": [
+        "wip-xai-grok",
+        "grok-search"
+      ],
       "cliMatches": [],
       "recommended": false,
       "status": "stable",
       "postInstall": null,
       "installs": {
-        "mcp": ["grok_search_web", "grok_search_x", "grok_imagine", "grok_edit_image", "grok_generate_video", "grok_poll_video"]
+        "mcp": [
+          "grok_search_web",
+          "grok_search_x",
+          "grok_imagine",
+          "grok_edit_image",
+          "grok_generate_video",
+          "grok_poll_video"
+        ]
       }
     },
     {
@@ -118,13 +221,23 @@
       "description": "X Platform API. Read posts, search tweets, post, upload media.",
       "npm": null,
       "repo": "wipcomputer/wip-xai-x",
-      "registryMatches": ["wip-xai-x"],
+      "registryMatches": [
+        "wip-xai-x"
+      ],
       "cliMatches": [],
       "recommended": false,
       "status": "stable",
       "postInstall": null,
       "installs": {
-        "mcp": ["x_fetch_post", "x_search_recent", "x_get_bookmarks", "x_get_user", "x_post_tweet", "x_delete_tweet", "x_upload_media"]
+        "mcp": [
+          "x_fetch_post",
+          "x_search_recent",
+          "x_get_bookmarks",
+          "x_get_user",
+          "x_post_tweet",
+          "x_delete_tweet",
+          "x_upload_media"
+        ]
       }
     },
     {
@@ -133,13 +246,19 @@
       "description": "AI agent platform. Run AI agents 24/7 with identity, memory, and tool access.",
       "npm": null,
       "repo": "openclaw/openclaw",
-      "registryMatches": ["openclaw"],
-      "cliMatches": ["openclaw"],
+      "registryMatches": [
+        "openclaw"
+      ],
+      "cliMatches": [
+        "openclaw"
+      ],
       "recommended": false,
       "status": "stable",
       "postInstall": null,
       "installs": {
-        "cli": ["openclaw"],
+        "cli": [
+          "openclaw"
+        ],
         "runtime": "24/7 agent gateway on localhost:18789",
         "plugins": "Extensions system at ~/.openclaw/extensions/"
       }
@@ -150,7 +269,10 @@
       "description": "Memory consolidation protocol for AI agents with bounded context windows.",
       "npm": null,
       "repo": "wipcomputer/dream-weaver-protocol",
-      "registryMatches": ["dream-weaver-protocol", "dream-weaver"],
+      "registryMatches": [
+        "dream-weaver-protocol",
+        "dream-weaver"
+      ],
       "cliMatches": [],
       "recommended": false,
       "status": "stable",
@@ -159,23 +281,6 @@
         "skill": "SKILL.md (protocol documentation for agents)",
         "docs": "19-page paper on memory consolidation. No runtime components."
       }
-    },
-    {
-      "id": "wip-bridge",
-      "name": "Bridge",
-      "description": "Cross-platform agent bridge. Enables Claude Code CLI to talk to OpenClaw CLI without a human in the middle.",
-      "npm": null,
-      "repo": "wipcomputer/wip-bridge-deprecated",
-      "registryMatches": ["wip-bridge", "lesa-bridge"],
-      "cliMatches": [],
-      "recommended": false,
-      "status": "included",
-      "postInstall": null,
-      "installs": {
-        "note": "Included with LDM OS v0.3.0+. No separate install needed.",
-        "mcp": ["lesa_send_message", "lesa_check_inbox", "lesa_conversation_search", "lesa_memory_search", "lesa_read_workspace", "oc_skills_list"],
-        "cli": ["lesa"]
-      }
     }
   ]
 }

package/lib/deploy.mjs

@@ -76,11 +76,17 @@ function saveRegistry(registry) {
   writeJSON(REGISTRY_PATH, registry);
 }
 
+// Core extensions are always enabled. Everything else defaults to disabled on first install.
+const CORE_EXTENSIONS = new Set(['memory-crystal']);
+
 function updateRegistry(name, info) {
   const registry = loadRegistry();
+  const existing = registry.extensions[name];
+  const isCore = CORE_EXTENSIONS.has(name);
   registry.extensions[name] = {
-    ...registry.extensions[name],
+    ...existing,
     ...info,
+    enabled: existing?.enabled ?? isCore,
     updatedAt: new Date().toISOString(),
   };
   saveRegistry(registry);
@@ -772,16 +778,32 @@ export function installSingleTool(toolPath) {
     }
   }
 
+  // Only register MCP, hooks, and skills if extension is enabled (#111)
+  const registry = loadRegistry();
+  const isEnabled = registry.extensions?.[toolName]?.enabled ?? CORE_EXTENSIONS.has(toolName);
+
   if (interfaces.mcp) {
-    if (registerMCP(toolPath, interfaces.mcp, toolName)) installed++;
+    if (isEnabled) {
+      if (registerMCP(toolPath, interfaces.mcp, toolName)) installed++;
+    } else {
+      skip(`MCP: ${toolName} installed but not enabled. Run: ldm enable ${toolName}`);
+    }
   }
 
   if (interfaces.claudeCodeHook) {
-    if (installClaudeCodeHook(toolPath, interfaces.claudeCodeHook)) installed++;
+    if (isEnabled) {
+      if (installClaudeCodeHook(toolPath, interfaces.claudeCodeHook)) installed++;
+    } else {
+      skip(`Hook: ${toolName} installed but not enabled`);
+    }
   }
 
   if (interfaces.skill) {
-    if (installSkill(toolPath, toolName)) installed++;
+    if (isEnabled) {
+      if (installSkill(toolPath, toolName)) installed++;
+    } else {
+      skip(`Skill: ${toolName} installed but not enabled`);
+    }
   }
 
   if (interfaces.module) {
@@ -868,6 +890,93 @@ export async function installFromPath(repoPath) {
   return { tools: 1, interfaces: installed };
 }
 
+// ── Enable / Disable (#111) ──
+
+function unregisterMCP(name) {
+  try {
+    execSync(`claude mcp remove --scope user ${name} 2>/dev/null`, { stdio: 'pipe', timeout: 10000 });
+  } catch {}
+  // Also clean ~/.claude.json directly
+  const claudeJson = join(HOME, '.claude.json');
+  try {
+    const config = readJSON(claudeJson);
+    if (config?.mcpServers?.[name]) {
+      delete config.mcpServers[name];
+      writeJSON(claudeJson, config);
+    }
+  } catch {}
+}
+
+function removeClaudeCodeHook(name) {
+  const settingsPath = join(HOME, '.claude', 'settings.json');
+  try {
+    const settings = readJSON(settingsPath);
+    if (!settings?.hooks) return;
+    let changed = false;
+    for (const [event, entries] of Object.entries(settings.hooks)) {
+      if (!Array.isArray(entries)) continue;
+      for (const entry of entries) {
+        if (!entry.hooks || !Array.isArray(entry.hooks)) continue;
+        const before = entry.hooks.length;
+        entry.hooks = entry.hooks.filter(h => !h.command?.includes(name));
+        if (entry.hooks.length < before) changed = true;
+      }
+      // Remove empty entries
+      settings.hooks[event] = entries.filter(e => e.hooks?.length > 0);
+    }
+    if (changed) writeJSON(settingsPath, settings);
+  } catch {}
+}
+
+function removeSkill(name) {
+  const skillDir = join(OC_ROOT, 'skills', name);
+  try {
+    if (existsSync(skillDir)) {
+      execSync(`rm -rf "${skillDir}"`, { stdio: 'pipe' });
+    }
+  } catch {}
+}
+
+export async function enableExtension(name) {
+  const reg = loadRegistry();
+  const entry = reg.extensions?.[name];
+  if (!entry) return { ok: false, reason: 'not installed' };
+  if (entry.enabled) return { ok: true, reason: 'already enabled' };
+
+  const extPath = entry.ldmPath || join(LDM_EXTENSIONS, name);
+  if (!existsSync(extPath)) return { ok: false, reason: 'extension dir missing' };
+
+  const { detectInterfaces } = await import('./detect.mjs');
+  const { interfaces } = detectInterfaces(extPath);
+
+  if (interfaces.mcp) registerMCP(extPath, interfaces.mcp, name);
+  if (interfaces.claudeCodeHook) installClaudeCodeHook(extPath, interfaces.claudeCodeHook);
+  if (interfaces.skill) installSkill(extPath, name);
+
+  entry.enabled = true;
+  entry.updatedAt = new Date().toISOString();
+  saveRegistry(reg);
+  return { ok: true, reason: 'enabled' };
+}
+
+export function disableExtension(name) {
+  if (CORE_EXTENSIONS.has(name)) return { ok: false, reason: 'core extension, cannot disable' };
+
+  const reg = loadRegistry();
+  const entry = reg.extensions?.[name];
+  if (!entry) return { ok: false, reason: 'not installed' };
+  if (!entry.enabled) return { ok: true, reason: 'already disabled' };
+
+  unregisterMCP(name);
+  removeClaudeCodeHook(name);
+  removeSkill(name);
+
+  entry.enabled = false;
+  entry.updatedAt = new Date().toISOString();
+  saveRegistry(reg);
+  return { ok: true, reason: 'disabled' };
+}
+
 // ── Exports for ldm CLI ──
 
-export { loadRegistry, saveRegistry, updateRegistry, readJSON, writeJSON, runBuildIfNeeded };
+export { loadRegistry, saveRegistry, updateRegistry, readJSON, writeJSON, runBuildIfNeeded, CORE_EXTENSIONS };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-ldm-os",
-  "version": "0.4.28",
+  "version": "0.4.30",
   "type": "module",
   "description": "LDM OS: identity, memory, and sovereignty infrastructure for AI agents",
   "main": "src/boot/boot-hook.mjs",