@workbench-kit/react 0.0.2-prototype.0.2.5 → 0.0.2-prototype.0.2.8

package/src/workbench/index.ts

@@ -1,5 +1,5 @@
-export { ActivityBar } from './ActivityBar';
-export type { ActivityBarItem, ActivityBarProps } from './ActivityBar';
+export { ActivityBar } from './shell/ActivityBar';
+export type { ActivityBarItem, ActivityBarProps } from './shell/ActivityBar';
 export { createStringDragMime, createTypedDragMime } from '../utils/dragMime';
 export type { TypedDragMime, TypedDragMimeOptions } from '../utils/dragMime';
 export {
@@ -11,13 +11,13 @@ export {
   readEditorTabDragPayload,
   resolveEditorTabDropTarget,
   resolveEditorTabStripDropTarget,
-} from './editor-tabs-dnd';
-export type { EditorTabDragPayload, EditorTabDropTarget } from './editor-tabs-dnd';
-export { useEditorTabsStripDnd } from './useEditorTabsStripDnd';
+} from './editor/editor-tabs-dnd';
+export type { EditorTabDragPayload, EditorTabDropTarget } from './editor/editor-tabs-dnd';
+export { useEditorTabsStripDnd } from './editor/useEditorTabsStripDnd';
 export type {
   UseEditorTabsStripDndOptions,
   UseEditorTabsStripDndResult,
-} from './useEditorTabsStripDnd';
+} from './editor/useEditorTabsStripDnd';
 export {
   WorkbenchArtifactModeControls,
   WorkbenchArtifactPreview,
@@ -28,7 +28,7 @@ export {
   getWorkbenchPreviewRenderer,
   getWorkbenchPreviewRendererMatch,
   selectWorkbenchPreviewRenderer,
-} from './ArtifactShell';
+} from './shell/ArtifactShell';
 export type {
   WorkbenchArtifactDescriptor,
   WorkbenchArtifactMode,
@@ -41,7 +41,7 @@ export type {
   WorkbenchPreviewRendererContext,
   WorkbenchPreviewRendererMatch,
   WorkbenchPreviewRendererMatchReason,
-} from './ArtifactShell';
+} from './shell/ArtifactShell';
 export {
   WorkbenchCommandGroupShell,
   WorkbenchCommandList,
@@ -58,9 +58,14 @@ export {
   isWorkbenchCommandExecutionPolicy,
   isWorkbenchCommandRunnable,
   resolveWorkbenchCommandExecutionPolicy,
-} from './CommandPalette';
-export { WorkbenchMarkdownPreview } from './MarkdownPreview';
-export type { WorkbenchMarkdownPreviewProps } from './MarkdownPreview';
+} from './commands/CommandPalette';
+export { WorkbenchMarkdownPreview } from './markdown/MarkdownPreview';
+export type { WorkbenchMarkdownPreviewProps } from './markdown/MarkdownPreview';
+export { sanitizeMarkdownHref } from './markdown/sanitizeMarkdownHref';
+export {
+  workbenchMarkdownRemarkPlugins,
+  workbenchMarkdownRehypePlugins,
+} from './markdown/markdownRemarkPlugins';
 export {
   ChatCommandProposalCard,
   ChatConversationBar,
@@ -81,6 +86,7 @@ export type {
   ChatHistoryMenuProps,
   ChatPanelProps,
   ChatPhasedRunProgressAction,
+  ChatPhasedRunProgressLabels,
   ChatPhasedRunProgressProps,
   ChatRenameDialogProps,
   ChatRunPhase,
@@ -101,17 +107,17 @@ export {
   isWorkbenchSaveShortcutEvent,
   useWorkbenchNativeContextMenuGuard,
   useWorkbenchNativeSaveGuard,
-} from './keyboard';
-export { resolveWorkbenchTheme, useResolvedWorkbenchTheme } from './theme';
-export type { ResolvedWorkbenchTheme } from './theme';
-export { useDeferredWorkbenchMount } from './useDeferredWorkbenchMount';
-export type { UseDeferredWorkbenchMountOptions } from './useDeferredWorkbenchMount';
+} from './commands/keyboard';
+export { resolveWorkbenchTheme, useResolvedWorkbenchTheme } from './theme/theme';
+export type { ResolvedWorkbenchTheme } from './theme/theme';
+export { useDeferredWorkbenchMount } from './shell/useDeferredWorkbenchMount';
+export type { UseDeferredWorkbenchMountOptions } from './shell/useDeferredWorkbenchMount';
 export {
   DEFAULT_WORKBENCH_HARD_RESET_CONFIRM_MESSAGE,
   DEFAULT_WORKBENCH_STORAGE_PREFIX,
   performWorkbenchHardReset,
-} from './hardReset';
-export type { WorkbenchHardResetOptions } from './hardReset';
+} from './shell/hardReset';
+export type { WorkbenchHardResetOptions } from './shell/hardReset';
 export {
   applyWorkbenchAppearance,
   applyWorkbenchThemeAttributes,
@@ -127,11 +133,11 @@ export {
   resolveActiveThemePreset,
   resolveWorkbenchThemeProviderAttributes,
   WORKBENCH_COLOR_SCHEME_OPTIONS,
-} from './themePresets';
+} from './theme/themePresets';
 export {
   WORKBENCH_APPEARANCE_FIELD_DESCRIPTIONS,
   WORKBENCH_APPEARANCE_FIELD_LABELS,
-} from './appearanceLabels';
+} from './shell/appearanceLabels';
 export type {
   DarkThemePresetId,
   LightThemePresetId,
@@ -144,34 +150,40 @@ export type {
   WorkbenchThemePresetOption,
   WorkbenchThemePresetManifestEntry,
   WorkbenchThemePresetSelection,
-} from './themePresets';
+} from './theme/themePresets';
 export {
   applyWorkbenchShellAttributes,
   DEFAULT_SHELL_PRESET,
   isShellPresetId,
   SHELL_PRESET_MANIFEST,
   SHELL_PRESET_OPTIONS,
-} from './shellPresets';
+} from './shell/shellPresets';
 export type {
   ShellPresetId,
   WorkbenchShellPresetManifestEntry,
   WorkbenchShellPresetOption,
-} from './shellPresets';
-export { WorkbenchThemeProvider } from './WorkbenchThemeProvider';
-export type { WorkbenchThemeProviderProps } from './WorkbenchThemeProvider';
-export { useWorkbenchAppearanceDocumentSync } from './useWorkbenchAppearanceDocumentSync';
-export { WorkbenchPlatformProvider, useWorkbenchHostPlatform } from './WorkbenchPlatformContext';
-export type { WorkbenchPlatformProviderProps } from './WorkbenchPlatformContext';
+} from './shell/shellPresets';
+export { WorkbenchThemeProvider } from './theme/WorkbenchThemeProvider';
+export type { WorkbenchThemeProviderProps } from './theme/WorkbenchThemeProvider';
+export { useWorkbenchAppearanceDocumentSync } from './shell/useWorkbenchAppearanceDocumentSync';
+export {
+  WorkbenchPlatformProvider,
+  useWorkbenchHostPlatform,
+} from './chrome/WorkbenchPlatformContext';
+export type { WorkbenchPlatformProviderProps } from './chrome/WorkbenchPlatformContext';
 export {
   resolveWorkbenchHostPlatform,
   resolveWorkbenchWindowChromeDataAttributes,
-} from './workbenchPlatformChrome';
-export type { WorkbenchHostPlatform, WorkbenchWindowChromeMode } from './workbenchPlatformChrome';
+} from './chrome/workbenchPlatformChrome';
+export type {
+  WorkbenchHostPlatform,
+  WorkbenchWindowChromeMode,
+} from './chrome/workbenchPlatformChrome';
 export {
   WorkbenchWindowChromeControls,
   shouldUseDarwinPlatformChrome,
-} from './WorkbenchWindowChromeControls';
-export type { WorkbenchWindowChromeControlsProps } from './WorkbenchWindowChromeControls';
+} from './shell/WorkbenchWindowChromeControls';
+export type { WorkbenchWindowChromeControlsProps } from './shell/WorkbenchWindowChromeControls';
 export {
   WorkbenchShortcutCommandBridge,
   getWorkbenchShortcutCommandBindings,
@@ -179,7 +191,7 @@ export {
   matchesWorkbenchShortcut,
   runWorkbenchShortcutCommand,
   useWorkbenchShortcutCommands,
-} from './ShortcutCommandBridge';
+} from './commands/ShortcutCommandBridge';
 export type { SlashCommandParseResult } from './chat/slashCommand';
 export type {
   WorkbenchCommandDescriptor,
@@ -201,8 +213,8 @@ export type {
   WorkbenchCommandSideEffect,
   WorkbenchCommandStatus,
   WorkbenchCommandSuggestProps,
-} from './CommandPalette';
-export type { ResolveWorkbenchCommandExecutionPolicyInput } from './CommandPalette';
+} from './commands/CommandPalette';
+export type { ResolveWorkbenchCommandExecutionPolicyInput } from './commands/CommandPalette';
 export type {
   UseWorkbenchShortcutCommandsOptions,
   WorkbenchShortcutCommandBinding,
@@ -214,7 +226,7 @@ export type {
   WorkbenchShortcutEventLike,
   WorkbenchShortcutMatchInput,
   WorkbenchShortcutPlatform,
-} from './ShortcutCommandBridge';
+} from './commands/ShortcutCommandBridge';
 export {
   WorkbenchConfirmationFlow,
   getWorkbenchConfirmationButtonVariant,
@@ -223,7 +235,7 @@ export {
   getWorkbenchConfirmationStatus,
   getWorkbenchConfirmationVariant,
   isWorkbenchConfirmationActionDisabled,
-} from './ConfirmationFlow';
+} from './commands/ConfirmationFlow';
 export type {
   WorkbenchConfirmationAction,
   WorkbenchConfirmationCancelContext,
@@ -234,7 +246,7 @@ export type {
   WorkbenchConfirmationReason,
   WorkbenchConfirmationSideEffect,
   WorkbenchConfirmationVariant,
-} from './ConfirmationFlow';
+} from './commands/ConfirmationFlow';
 export {
   WorkbenchAuthGate,
   WorkbenchLoginBrandMark,
@@ -306,7 +318,7 @@ export {
   createWorkbenchWorkspaceFolderMenuEntries,
   createWorkbenchWorkspaceTargetMenuEntries,
   getWorkbenchShowActivityCommandId,
-} from './commands';
+} from './commands/commands';
 export type {
   WorkbenchEditorCommandContext,
   WorkbenchSearchResultCommandContext,
@@ -315,18 +327,18 @@ export type {
   WorkbenchShellCommandPresetOptions,
   WorkbenchCommandSurface,
   WorkbenchWorkspaceCommandContext,
-} from './commands';
+} from './commands/commands';
 export {
   initializeWorkbenchShellState,
   useWorkbenchShellState,
   workbenchShellStateReducer,
-} from './shellState';
+} from './shell/shellState';
 export type {
   UseWorkbenchShellStateResult,
   WorkbenchShellAction,
   WorkbenchShellInitialState,
   WorkbenchShellState,
-} from './shellState';
+} from './shell/shellState';
 export {
   getWorkbenchStatusDescriptor,
   getWorkbenchStatusLabel,
@@ -336,11 +348,15 @@ export {
   isWorkbenchStatusDisabled,
   isWorkbenchStatusUnavailable,
   workbenchStatusFromLifecycleStatus,
-} from './status';
-export type { WorkbenchStatus, WorkbenchStatusDescriptor, WorkbenchStatusVariant } from './status';
-export { SplitView } from './SplitView';
-export type { SplitViewLayoutMode, SplitViewProps } from './SplitView';
-export { StatusBar, StatusBarItem, StatusBarSection } from './StatusBar';
+} from './shell/status';
+export type {
+  WorkbenchStatus,
+  WorkbenchStatusDescriptor,
+  WorkbenchStatusVariant,
+} from './shell/status';
+export { SplitView } from './shell/SplitView';
+export type { SplitViewLayoutMode, SplitViewProps } from './shell/SplitView';
+export { StatusBar, StatusBarItem, StatusBarSection } from './shell/StatusBar';
 export type {
   StatusBarItemModel,
   StatusBarItemProps,
@@ -348,7 +364,7 @@ export type {
   StatusBarSectionAlign,
   StatusBarSectionModel,
   StatusBarSectionProps,
-} from './StatusBar';
+} from './shell/StatusBar';
 export {
   WorkbenchTimeline,
   WorkbenchTimelineItem,
@@ -357,7 +373,7 @@ export {
   getWorkbenchTimelineEventLabel,
   getWorkbenchTimelineEventStatus,
   getWorkbenchTimelineMetadataEntries,
-} from './Timeline';
+} from './shell/Timeline';
 export type {
   WorkbenchTimelineEvent,
   WorkbenchTimelineEventKind,
@@ -369,7 +385,7 @@ export type {
   WorkbenchTimelineRenderMetadata,
   WorkbenchTimelineRenderPayload,
   WorkbenchTimelineVariant,
-} from './Timeline';
+} from './shell/Timeline';
 export {
   WorkbenchPanelRegion,
   WorkbenchNavigationPanel,
@@ -552,44 +568,47 @@ export {
   stringifyWorkbenchStructuredDataSchemaFieldValue,
   validateWorkbenchStructuredDataSchemaFieldValue,
 } from './settings';
-export { WorkbenchShell } from './WorkbenchShell';
-export type { WorkbenchShellProps } from './WorkbenchShell';
-export { WorkbenchViewEditor } from './WorkbenchViewEditor';
+export { WorkbenchShell } from './shell/WorkbenchShell';
+export type { WorkbenchShellProps } from './shell/WorkbenchShell';
+export { WorkbenchViewEditor } from './shell/WorkbenchViewEditor';
 export type {
   WorkbenchViewEditorDataAttributes,
   WorkbenchViewEditorEmptyState,
   WorkbenchViewEditorEmptyStateProps,
   WorkbenchViewEditorEmptyStateSurfaceProps,
   WorkbenchViewEditorProps,
-} from './WorkbenchViewEditor';
-export { WorkbenchEditorTabs } from './WorkbenchEditorTabs';
-export type { WorkbenchEditorTabsProps } from './WorkbenchEditorTabs';
+} from './shell/WorkbenchViewEditor';
+export { WorkbenchEditorTabs } from './editor/WorkbenchEditorTabs';
+export type { WorkbenchEditorTabsProps } from './editor/WorkbenchEditorTabs';
 export {
   createWorkbenchStandaloneEditorTabCommandContext,
   createWorkbenchStandaloneEditorTabContextMenuItems,
   isWorkbenchEditorTabClosable,
-} from './editorTabContextMenu';
+} from './editor/editorTabContextMenu';
 export type {
   CreateWorkbenchStandaloneEditorTabCommandContextInput,
   WorkbenchStandaloneEditorTabLike,
-} from './editorTabContextMenu';
-export { useWorkbenchEditorTabContextMenu } from './useWorkbenchEditorTabContextMenu';
+} from './editor/editorTabContextMenu';
+export { useWorkbenchEditorTabContextMenu } from './editor/useWorkbenchEditorTabContextMenu';
 export type {
   UseWorkbenchEditorTabContextMenuOptions,
   UseWorkbenchEditorTabContextMenuResult,
-} from './useWorkbenchEditorTabContextMenu';
-export { WorkbenchViewSidebar } from './WorkbenchViewSidebar';
-export type { WorkbenchViewSidebarItem, WorkbenchViewSidebarProps } from './WorkbenchViewSidebar';
+} from './editor/useWorkbenchEditorTabContextMenu';
+export { WorkbenchViewSidebar } from './shell/WorkbenchViewSidebar';
+export type {
+  WorkbenchViewSidebarItem,
+  WorkbenchViewSidebarProps,
+} from './shell/WorkbenchViewSidebar';
 export {
   WorkbenchDesktopTitleBar,
   WorkbenchDesktopWindowControls,
-} from './WorkbenchDesktopTitleBar';
+} from './shell/WorkbenchDesktopTitleBar';
 export type {
   WorkbenchDesktopTitleBarProps,
   WorkbenchDesktopWindowControlsProps,
-} from './WorkbenchDesktopTitleBar';
-export { WorkbenchStandaloneShell } from './WorkbenchStandaloneShell';
-export { WorkbenchCanvasShell } from './WorkbenchCanvasShell';
+} from './shell/WorkbenchDesktopTitleBar';
+export { WorkbenchStandaloneShell } from './shell/WorkbenchStandaloneShell';
+export { WorkbenchCanvasShell } from './shell/WorkbenchCanvasShell';
 export type {
   WorkbenchActivityLifecycleCallbackMap,
   WorkbenchActivityLifecycleCallbacks,
@@ -599,18 +618,18 @@ export type {
   WorkbenchPrimarySidebarLifecycleReason,
   WorkbenchStandaloneShellContext,
   WorkbenchStandaloneShellProps,
-} from './WorkbenchStandaloneShell';
+} from './shell/WorkbenchStandaloneShell';
 export {
   createWorkbenchStandaloneShellStateSnapshot,
   useWorkbenchStandaloneShellContext,
-} from './workbenchStandaloneShellReactContext';
+} from './shell/workbenchStandaloneShellReactContext';
 export type {
   WorkbenchStandaloneShellStateChange,
   WorkbenchStandaloneShellStateChangeKind,
   WorkbenchStandaloneShellStateSnapshot,
-} from './workbenchStandaloneShellReactContext';
-export { useWorkbenchStandaloneShellStateSync } from './useWorkbenchStandaloneShellStateSync';
-export type { WorkbenchCanvasShellProps } from './WorkbenchCanvasShell';
+} from './shell/workbenchStandaloneShellReactContext';
+export { useWorkbenchStandaloneShellStateSync } from './shell/useWorkbenchStandaloneShellStateSync';
+export type { WorkbenchCanvasShellProps } from './shell/WorkbenchCanvasShell';
 export type {
   WorkbenchActivityChangeEvent,
   WorkbenchActivityDescriptor,
@@ -625,9 +644,9 @@ export type {
   WorkbenchStatusController,
   WorkbenchTheme,
   WorkbenchWorkspaceController,
-} from './standalone';
-export { StructuredArtifactEditor } from './StructuredArtifactEditor';
-export type { StructuredArtifactEditorProps } from './StructuredArtifactEditor';
+} from './shell/standalone';
+export { StructuredArtifactEditor } from './shell/StructuredArtifactEditor';
+export type { StructuredArtifactEditorProps } from './shell/StructuredArtifactEditor';
 export type {
   WorkbenchDocument,
   WorkbenchDocumentAdapter,

package/src/workbench/management/ExtensionManagementPanel.tsx

@@ -7,6 +7,7 @@ import {
   extensionCategoryIconTone,
   formatExtensionCategoryLabel,
 } from './extension-category-display.js';
+import { resolveExtensionInstallOptions } from './extension-install-approval.js';
 import { ManagementFilterChips } from './ManagementFilterChips.js';
 import { ManagementCard, ManagementCardList } from './ManagementCard.js';
 import { ManagementGroup, ManagementGroups } from './ManagementGroup.js';
@@ -40,7 +41,9 @@ export function ExtensionManagementPanel({
   catalogLoading = false,
   className,
   installedEntries,
+  isInstallTrusted,
   onInstall,
+  onRememberInstallTrust,
   onToggleEnabled,
 }: ExtensionManagementPanelProps) {
   const [activeTab, setActiveTab] = useState<'installed' | 'browse'>(
@@ -103,12 +106,14 @@ export function ExtensionManagementPanel({
                 emptyLabel="No catalog extensions match the current filter."
                 entries={filteredBrowse}
                 groups={browseGroups}
+                isInstallTrusted={isInstallTrusted}
                 query={browseQuery}
                 showGroups={showBrowseGroups}
                 summary={`${filteredBrowse.length} of ${browseEntries.length} in catalog`}
                 onCategoryChange={setCategoryFilter}
                 onInstall={onInstall}
                 onQueryChange={setBrowseQuery}
+                onRememberInstallTrust={onRememberInstallTrust}
               />
             ),
           },
@@ -273,9 +278,11 @@ function BrowseExtensionsTab({
   emptyLabel,
   entries,
   groups,
+  isInstallTrusted,
   onCategoryChange,
   onInstall,
   onQueryChange,
+  onRememberInstallTrust,
   query,
   showGroups,
   summary,
@@ -286,9 +293,11 @@ function BrowseExtensionsTab({
   emptyLabel: string;
   entries: readonly ExtensionCatalogBrowseEntry[];
   groups: ReadonlyArray<{ category: string; entries: readonly ExtensionCatalogBrowseEntry[] }>;
+  isInstallTrusted?: ExtensionManagementPanelProps['isInstallTrusted'];
   onCategoryChange: (category: BrowseCategoryFilter) => void;
   onInstall?: ExtensionManagementPanelProps['onInstall'];
   onQueryChange: (query: string) => void;
+  onRememberInstallTrust?: ExtensionManagementPanelProps['onRememberInstallTrust'];
   query: string;
   showGroups: boolean;
   summary: string;
@@ -335,7 +344,9 @@ function BrowseExtensionsTab({
                   <li key={entry.id}>
                     <ExtensionCatalogCard
                       entry={entry}
+                      isInstallTrusted={isInstallTrusted}
                       onInstall={onInstall}
+                      onRememberInstallTrust={onRememberInstallTrust}
                       showCategory={false}
                     />
                   </li>
@@ -349,7 +360,13 @@ function BrowseExtensionsTab({
         <ManagementCardList>
           {flatEntries.map((entry) => (
             <li key={entry.id}>
-              <ExtensionCatalogCard entry={entry} onInstall={onInstall} showCategory />
+              <ExtensionCatalogCard
+                entry={entry}
+                isInstallTrusted={isInstallTrusted}
+                onInstall={onInstall}
+                onRememberInstallTrust={onRememberInstallTrust}
+                showCategory
+              />
             </li>
           ))}
         </ManagementCardList>
@@ -360,11 +377,15 @@ function BrowseExtensionsTab({
 
 function ExtensionCatalogCard({
   entry,
+  isInstallTrusted,
   onInstall,
+  onRememberInstallTrust,
   showCategory,
 }: {
   entry: ExtensionCatalogBrowseEntry;
+  isInstallTrusted?: ExtensionManagementPanelProps['isInstallTrusted'];
   onInstall?: ExtensionManagementPanelProps['onInstall'];
+  onRememberInstallTrust?: ExtensionManagementPanelProps['onRememberInstallTrust'];
   showCategory: boolean;
 }) {
   return (
@@ -378,7 +399,15 @@ function ExtensionCatalogCard({
           }
           type="button"
           variant={entry.installed ? 'default' : 'primary'}
-          onClick={() => onInstall?.(entry)}
+          onClick={() => {
+            if (!onInstall) return;
+            const options = resolveExtensionInstallOptions(entry, {
+              isTrusted: isInstallTrusted,
+              rememberTrust: onRememberInstallTrust,
+            });
+            if (!options) return;
+            onInstall(entry, options);
+          }}
         >
           {entry.installed ? 'Installed' : entry.installPlan?.blocked ? 'Blocked' : 'Install'}
         </Button>

package/src/workbench/management/ExtensionManagementSidebar.tsx

@@ -17,6 +17,7 @@ import {
   extensionCategoryIconTone,
   formatExtensionCategoryLabel,
 } from './extension-category-display.js';
+import { resolveExtensionInstallOptions } from './extension-install-approval.js';
 import { ManagementFilterChips } from './ManagementFilterChips.js';
 import type {
   ExtensionCatalogBrowseEntry,
@@ -57,8 +58,10 @@ export function ExtensionManagementSidebar({
   emptyInstalledLabel = 'No installed extensions match the filter.',
   emptyMarketplaceLabel = 'No marketplace extensions match the filter.',
   installedEntries,
+  isInstallTrusted,
   missingExtensionIds = [],
   onInstall,
+  onRememberInstallTrust,
   onToggleEnabled,
   pendingAction,
 }: ExtensionManagementSidebarProps) {
@@ -153,8 +156,10 @@ export function ExtensionManagementSidebar({
           catalogLoading={catalogLoading}
           emptyLabel={emptyMarketplaceLabel}
           entries={filteredBrowse}
+          isInstallTrusted={isInstallTrusted}
           pendingAction={pendingAction}
           onInstall={onInstall}
+          onRememberInstallTrust={onRememberInstallTrust}
         />
       ) : (
         <InstalledExtensionList
@@ -257,14 +262,18 @@ function MarketplaceExtensionList({
   catalogLoading,
   emptyLabel,
   entries,
+  isInstallTrusted,
   onInstall,
+  onRememberInstallTrust,
   pendingAction,
 }: {
   catalogError?: string | undefined;
   catalogLoading?: boolean | undefined;
   emptyLabel: string;
   entries: readonly ExtensionCatalogBrowseEntry[];
+  isInstallTrusted?: ExtensionManagementPanelProps['isInstallTrusted'];
   onInstall?: ExtensionManagementPanelProps['onInstall'];
+  onRememberInstallTrust?: ExtensionManagementPanelProps['onRememberInstallTrust'];
   pendingAction?: ExtensionManagementPendingAction | undefined;
 }) {
   if (catalogLoading) {
@@ -318,7 +327,15 @@ function MarketplaceExtensionList({
                 }
                 type="button"
                 variant={entry.installed ? 'default' : 'primary'}
-                onClick={() => onInstall?.(entry)}
+                onClick={() => {
+                  if (!onInstall) return;
+                  const options = resolveExtensionInstallOptions(entry, {
+                    isTrusted: isInstallTrusted,
+                    rememberTrust: onRememberInstallTrust,
+                  });
+                  if (!options) return;
+                  onInstall(entry, options);
+                }}
               >
                 {entry.installed
                   ? 'Installed'

package/src/workbench/management/IntegrationsShell.tsx

@@ -2,7 +2,7 @@ import type { ReactNode } from 'react';
 import { PanelHeader } from '../../layout/panel';
 import { WorkbenchEditorFrame, WorkbenchPanelScroll } from '../../layout/WorkbenchLayoutBase';
 import { WorkbenchPropertyHint } from '../../layout/WorkbenchPropertyPanel';
-import { SplitView } from '../SplitView';
+import { SplitView } from '../shell/SplitView';
 
 export interface IntegrationsShellProps {
   children: ReactNode;

package/src/workbench/management/WorkbenchDialogFrame.tsx

@@ -1,7 +1,7 @@
 import type { FormEventHandler, ReactNode } from 'react';
 import { Modal, type ModalBodyLayout, type ModalBodyPadding } from '../../modal/Modal';
-import type { WorkbenchWindowChromeMode } from '../workbenchPlatformChrome';
-import { WorkbenchModalPortal } from '../WorkbenchModalPortal';
+import type { WorkbenchWindowChromeMode } from '../chrome/workbenchPlatformChrome';
+import { WorkbenchModalPortal } from '../chrome/WorkbenchModalPortal';
 
 export type WorkbenchDialogBodyLayout = 'column-fill' | 'default' | 'padded-fill';
 export type WorkbenchDialogFrameSize =

package/src/workbench/management/extension-install-approval.ts

@@ -0,0 +1,72 @@
+import type { ExtensionCatalogBrowseEntry, ExtensionInstallOptions } from './types.js';
+
+export function extensionInstallRequiresApproval(entry: ExtensionCatalogBrowseEntry): boolean {
+  return Boolean(
+    entry.installPlan?.requiresApproval && !entry.installed && !entry.installPlan.blocked,
+  );
+}
+
+export function formatExtensionInstallApprovalMessage(entry: ExtensionCatalogBrowseEntry): string {
+  const permissions = entry.installPlan?.permissions ?? [];
+  const permissionLine =
+    permissions.length > 0
+      ? `Requested permissions: ${permissions.join(', ')}.`
+      : 'This package requests privileges that require approval.';
+
+  return [
+    `Install "${entry.displayName}"?`,
+    '',
+    permissionLine,
+    'Continue only if you trust this package.',
+  ].join('\n');
+}
+
+export interface ResolveExtensionInstallOptionsInput {
+  readonly confirm?: ((message: string) => boolean) | undefined;
+  /**
+   * When true (or when the predicate returns true), skip the confirm prompt and
+   * return `{ approved: true }`. Hosts typically back this with a durable trust
+   * store keyed by extension id + permission fingerprint.
+   */
+  readonly isTrusted?: boolean | ((entry: ExtensionCatalogBrowseEntry) => boolean) | undefined;
+  /** Called after the user explicitly confirms trust for this install. */
+  readonly rememberTrust?: ((entry: ExtensionCatalogBrowseEntry) => void) | undefined;
+}
+
+/**
+ * Resolve install options for UI actions.
+ *
+ * Approval is required when the install plan requests permissions. A trusted
+ * predicate may skip the prompt; otherwise the host confirm dialog runs and
+ * successful consent may be persisted via `rememberTrust`.
+ */
+export function resolveExtensionInstallOptions(
+  entry: ExtensionCatalogBrowseEntry,
+  confirmOrOptions: ((message: string) => boolean) | ResolveExtensionInstallOptionsInput = (
+    message,
+  ) => (typeof globalThis.confirm === 'function' ? globalThis.confirm(message) : false),
+): ExtensionInstallOptions | undefined {
+  if (!extensionInstallRequiresApproval(entry)) {
+    return {};
+  }
+
+  const options =
+    typeof confirmOrOptions === 'function' ? { confirm: confirmOrOptions } : confirmOrOptions;
+  const confirm =
+    options.confirm ??
+    ((message: string) =>
+      typeof globalThis.confirm === 'function' ? globalThis.confirm(message) : false);
+
+  const trusted =
+    typeof options.isTrusted === 'function' ? options.isTrusted(entry) : Boolean(options.isTrusted);
+  if (trusted) {
+    return { approved: true };
+  }
+
+  if (!confirm(formatExtensionInstallApprovalMessage(entry))) {
+    return undefined;
+  }
+
+  options.rememberTrust?.(entry);
+  return { approved: true };
+}

package/src/workbench/management/index.ts

@@ -112,6 +112,12 @@ export {
   extensionCategoryIconTone,
   formatExtensionCategoryLabel,
 } from './extension-category-display.js';
+export {
+  extensionInstallRequiresApproval,
+  formatExtensionInstallApprovalMessage,
+  resolveExtensionInstallOptions,
+  type ResolveExtensionInstallOptionsInput,
+} from './extension-install-approval.js';
 export type {
   AccountManagementEntry,
   AccountManagementEntryStatus,
@@ -122,6 +128,7 @@ export type {
   CommandManagementPanelProps,
   CommandManagementRunState,
   ExtensionCatalogBrowseEntry,
+  ExtensionInstallOptions,
   ExtensionManagementDiagnosticSummary,
   ExtensionManagementEntry,
   ExtensionManagementFeatureItem,