chainlesschain 0.162.143 → 0.162.148

package/src/assets/web-panel/assets/{vnode-CYE0CVkI.js → vnode-9ZpkA7bb.js}

@@ -1 +1 @@
-import{N as i,h as a,w as l}from"./index-DDGBasj6.js";import{a7 as o,k as g,C as d,F as f,A as p}from"./vendor-BvqAck49.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function V(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function v(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,V as b,c,v as t};
+import{N as i,h as a,w as l}from"./index-BtbbdLnf.js";import{a8 as o,k as g,C as d,F as f,A as p}from"./vendor-BMxUs6UX.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function V(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function v(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,V as b,c,v as t};

package/src/assets/web-panel/assets/{zoom-B2-MtXVF.js → zoom-DhtAfhl8.js}

@@ -1,4 +1,4 @@
-import{K as o}from"./index-DDGBasj6.js";import{i as f}from"./motion-DgWAtKps.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
+import{K as o}from"./index-BtbbdLnf.js";import{i as f}from"./motion-B5Bbe77U.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
         ${t}-enter,
         ${t}-appear
       `]:{transform:"scale(0)",opacity:0,animationTimingFunction:n.motionEaseOutCirc,"&-prepare":{transform:"none"}},[`${t}-leave`]:{animationTimingFunction:n.motionEaseInOutCirc}}]};export{h as i,c as z};

package/src/assets/web-panel/index.html

@@ -8,9 +8,9 @@
     // Injected by web-ui-server.js at serve time
     window.__CC_CONFIG__ = __CC_CONFIG_PLACEHOLDER__;
   </script>
-  <script type="module" crossorigin src="./assets/index-DDGBasj6.js"></script>
-  <link rel="modulepreload" crossorigin href="./assets/vendor-BvqAck49.js">
-  <link rel="modulepreload" crossorigin href="./assets/icons-DP3uiYxy.js">
+  <script type="module" crossorigin src="./assets/index-BtbbdLnf.js"></script>
+  <link rel="modulepreload" crossorigin href="./assets/vendor-BMxUs6UX.js">
+  <link rel="modulepreload" crossorigin href="./assets/icons-BsDmGpcT.js">
   <link rel="stylesheet" crossorigin href="./assets/index-Cq93VfoF.css">
 </head>
 <body>

package/src/auth/npm-auth.js

@@ -0,0 +1,65 @@
+/**
+ * npm authentication utilities (ESM)
+ * Mirrors Claude Code /login /logout behavior
+ * @module auth/npm-auth
+ */
+
+import { execSync } from "child_process";
+import { logger } from "../lib/logger.js";
+
+/**
+ * Check if user is currently logged in to npm
+ * @returns {boolean}
+ */
+export function isLoggedIn() {
+  try {
+    execSync("npm whoami", { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Get current npm username
+ * @returns {string|null}
+ */
+export function getCurrentUser() {
+  try {
+    return execSync("npm whoami", { encoding: "utf8" }).trim();
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Run npm login
+ * @returns {Promise<boolean>} success
+ */
+export async function login() {
+  try {
+    logger.info("Running npm login...");
+    execSync("npm login", { stdio: "inherit" });
+    return isLoggedIn();
+  } catch (err) {
+    logger.error(`Login failed: ${err.message}`);
+    return false;
+  }
+}
+
+/**
+ * Run npm logout
+ * @returns {Promise<boolean>} success
+ */
+export async function logout() {
+  try {
+    logger.info("Running npm logout...");
+    execSync("npm logout", { stdio: "inherit" });
+    return !isLoggedIn();
+  } catch (err) {
+    logger.error(`Logout failed: ${err.message}`);
+    return false;
+  }
+}
+
+export default { isLoggedIn, getCurrentUser, login, logout };

package/src/commands/agent.js

@@ -16,6 +16,7 @@ import {
 } from "../runtime/fallback-model.js";
 import { resolveImages, resolveVisionLlm } from "../lib/image-input.js";
 import { loadConfig } from "../lib/config-manager.js";
+import { normalizeAgentSandbox } from "../lib/agent-sandbox.js";
 
 /**
  * Resolve + validate `--add-dir` values into absolute, existing, de-duped
@@ -171,6 +172,15 @@ export function registerAgentCommand(program) {
       "--worktree",
       "Run this session in a fresh git worktree (isolated branch; auto-removed when the session changes nothing)",
     )
+    .option(
+      "--sandbox [image]",
+      "Run shell commands in an ephemeral Docker sandbox (network disabled by default)",
+    )
+    .option("--sandbox-network", "Allow network access inside --sandbox")
+    .option(
+      "--bg, --background",
+      "Start as a detached background agent and return its id immediately",
+    )
     .option("--agent-id <id>", "Agent id for scoped memory recall")
     .option("--recall-limit <n>", "Top-K memories to inject into system prompt")
     .option("--recall-query <q>", "Query string for startup memory recall")
@@ -308,7 +318,29 @@ export function registerAgentCommand(program) {
       "--replay-user-messages",
       "Stream-input mode: echo each accepted stdin user message back as a `user` event (transcript/correlation)",
     )
+    .option(
+      "--allow-dangerous-bypass",
+      "Bypass all permission prompts in headless mode (DANGEROUS: auto-approves all tool calls)",
+      false,
+    )
+    .option("-y, --yolo", "Alias for --allow-dangerous-bypass", false)
+    .option(
+      "--dangerously-skip-permissions",
+      "Alias for --allow-dangerous-bypass",
+      false,
+    )
     .action(async (task, options, command) => {
+      const bypassPermissions = !!(
+        options.allowDangerousBypass ||
+        options.yolo ||
+        options.dangerouslySkipPermissions
+      );
+      if (bypassPermissions) {
+        process.env.CC_BYPASS_PERMISSIONS = "1";
+        process.stderr.write(
+          "⚠️  DANGER MODE: All permissions bypassed, no prompts will be shown.\n",
+        );
+      }
       // --safe-mode flag OR CC_SAFE_MODE / CLAUDE_CODE_SAFE_MODE env (Claude-Code
       // 2.1.169 parity): flip every customization kill-switch BEFORE anything
       // loads. Permission rules stay active.
@@ -735,7 +767,62 @@ export function registerAgentCommand(program) {
         if (piped) prompt = piped;
       }
 
+      if (options.bg && !prompt) {
+        process.stderr.write(
+          "--bg requires a task via positional text, -p, or piped stdin.\n",
+        );
+        process.exitCode = 1;
+        return;
+      }
+
       if (prompt) {
+        if (options.bg) {
+          if (options.worktree) {
+            process.stderr.write(
+              "--bg and --worktree cannot be combined yet; create the worktree first and launch the background agent from it.\n",
+            );
+            process.exitCode = 1;
+            return;
+          }
+          const { launchBackgroundAgent } =
+            await import("../lib/background-agent-supervisor.js");
+          const childArgv = process.argv
+            .slice(2)
+            .filter((arg) => arg !== "--bg" && arg !== "--background");
+          const hasSessionArg = childArgv.some(
+            (arg) =>
+              arg === "--session" ||
+              arg === "--resume" ||
+              arg === "--continue" ||
+              arg === "-c",
+          );
+          const sessionId =
+            options.session ||
+            `session-${Date.now()}-${Math.random().toString(16).slice(2, 8)}`;
+          if (!hasSessionArg) childArgv.push("--session", sessionId);
+          const promptWasPiped =
+            positional.length === 0 &&
+            !(typeof options.print === "string" && options.print.trim());
+          if (promptWasPiped) childArgv.push(prompt);
+          const state = launchBackgroundAgent({
+            argv: childArgv,
+            cwd: process.cwd(),
+            sessionId,
+            title: prompt.slice(0, 100),
+          });
+          if (options.outputFormat === "json") {
+            console.log(JSON.stringify(state));
+          } else {
+            console.log(`Background agent started: ${state.id}`);
+            console.log(`  logs: cc agents logs ${state.id}`);
+            console.log(`  stop: cc agents stop ${state.id}`);
+          }
+          return;
+        }
+        const agentSandbox = normalizeAgentSandbox(options.sandbox, {
+          cwd: process.cwd(),
+          network: options.sandboxNetwork === true,
+        });
         // Resume requested onto a session with no headless (JSONL) transcript?
         // Warn instead of silently starting empty 鈥?headless resume rebuilds
         // from the JSONL store only (DB-only sessions are not replayable here).
@@ -775,6 +862,7 @@ export function registerAgentCommand(program) {
           allowedTools: parseToolList(options.allowedTools),
           disallowedTools: parseToolList(options.disallowedTools),
           additionalDirectories,
+          sandbox: agentSandbox,
           autoCheckpoint,
           maxTurns,
           // commander maps --no-file-refs 鈫?options.fileRefs === false
@@ -884,6 +972,10 @@ export function registerAgentCommand(program) {
         parkOnExit: options.parkOnExit, // false when --no-park-on-exit
         bundlePath: options.bundle || null,
         additionalDirectories,
+        sandbox: normalizeAgentSandbox(options.sandbox, {
+          cwd: process.cwd(),
+          network: options.sandboxNetwork === true,
+        }),
         autoCheckpoint,
         // --vim: start the REPL in vim-mode editing (also CC_VIM=1 or /vim).
         vimMode: options.vim === true,

package/src/commands/agents.js

@@ -22,6 +22,74 @@ export function registerAgentsCommand(program) {
     .command("agents")
     .description("User-defined subagents (.claude/agents/*.md)");
 
+  cmd
+    .command("background")
+    .alias("bg")
+    .description("List background agent sessions")
+    .option("--all", "Include completed, failed, stopped and lost sessions")
+    .option("--json", "Output as JSON")
+    .action(async (options) => {
+      const { listBackgroundAgents } =
+        await import("../lib/background-agent-supervisor.js");
+      const sessions = listBackgroundAgents({ all: options.all === true });
+      if (options.json) {
+        console.log(JSON.stringify(sessions, null, 2));
+        return;
+      }
+      if (sessions.length === 0) {
+        logger.log(chalk.gray("No background agents."));
+        return;
+      }
+      for (const session of sessions) {
+        const elapsed = session.endedAt
+          ? session.endedAt - session.startedAt
+          : Date.now() - session.startedAt;
+        logger.log(
+          `${chalk.cyan(session.id)}  ${session.status.padEnd(9)} ${Math.max(0, Math.round(elapsed / 1000))}s  ${session.title || ""}`,
+        );
+        logger.log(chalk.gray(`  pid ${session.pid}  ${session.cwd}`));
+      }
+    });
+
+  cmd
+    .command("logs <id>")
+    .description("Print recent output from a background agent")
+    .option("-n, --lines <n>", "Number of lines", "100")
+    .action(async (id, options) => {
+      try {
+        const { readBackgroundAgentState, readBackgroundAgentLog } =
+          await import("../lib/background-agent-supervisor.js");
+        if (!readBackgroundAgentState(id)) {
+          throw new Error(`Background agent not found: ${id}`);
+        }
+        process.stdout.write(
+          readBackgroundAgentLog(id, { lines: Number(options.lines) }),
+        );
+      } catch (error) {
+        logger.error(chalk.red(error.message));
+        process.exitCode = 1;
+      }
+    });
+
+  cmd
+    .command("stop <id>")
+    .description("Stop a running background agent")
+    .option("--json", "Output as JSON")
+    .action(async (id, options) => {
+      try {
+        const { stopBackgroundAgent } =
+          await import("../lib/background-agent-supervisor.js");
+        const state = stopBackgroundAgent(id);
+        if (options.json) console.log(JSON.stringify(state, null, 2));
+        else if (state.stopped)
+          logger.log(chalk.green(`Stopped background agent ${id}`));
+        else logger.log(chalk.gray(`${id} is already ${state.status}`));
+      } catch (error) {
+        logger.error(chalk.red(error.message));
+        process.exitCode = 1;
+      }
+    });
+
   // ── list ──────────────────────────────────────────────────────────────
   cmd
     .command("list")

package/src/commands/permissions.js

@@ -53,26 +53,33 @@ export function registerPermissionsCommand(program) {
   cmd
     .command("list")
     .alias("ls")
-    .description("Show the merged permission ruleset and where each rule came from")
+    .description(
+      "Show the merged permission ruleset and where each rule came from",
+    )
     .option("--json", "Output as JSON")
     .option("--settings <file>", "Also merge an explicit settings file")
     .action(async (options) => {
       try {
         const { loadSettings } = await import("../lib/settings-loader.cjs");
-        const { rules, sources, files } = loadSettings({
+        const { rules, sources, files, managed, managedFile } = loadSettings({
           cwd: process.cwd(),
           settingsFile: options.settings,
         });
         if (options.json) {
-          console.log(JSON.stringify({ rules, sources, files }, null, 2));
+          console.log(
+            JSON.stringify(
+              { rules, sources, files, managed, managedFile },
+              null,
+              2,
+            ),
+          );
           return;
         }
-        const total =
-          rules.allow.length + rules.ask.length + rules.deny.length;
+        const total = rules.allow.length + rules.ask.length + rules.deny.length;
         if (total === 0) {
           logger.log(
             chalk.gray(
-              "No permission rules. Add one: cc permissions add deny \"Bash(rm:*)\"\n" +
+              'No permission rules. Add one: cc permissions add deny "Bash(rm:*)"\n' +
                 "(or create .claude/settings.json with a permissions block)",
             ),
           );
@@ -89,6 +96,40 @@ export function registerPermissionsCommand(program) {
         if (files.length) {
           logger.log(chalk.dim(`\nsources: ${files.join(", ")}`));
         }
+        if (managedFile) {
+          logger.log(chalk.yellow(`managed policy: ${managedFile}`));
+          if (managed?.allowManagedPermissionRulesOnly) {
+            logger.log(
+              chalk.yellow("  user/project permission rules disabled"),
+            );
+          }
+          if (
+            managed?.disableBypassPermissionsMode === true ||
+            managed?.disableBypassPermissionsMode === "disable"
+          ) {
+            logger.log(chalk.yellow("  bypassPermissions disabled"));
+          }
+          if (managed?.allowManagedHooksOnly) {
+            logger.log(chalk.yellow("  only managed hooks may run"));
+          }
+          if (managed?.allowManagedMcpServersOnly) {
+            logger.log(
+              chalk.yellow("  only managed-allowed MCP servers may connect"),
+            );
+          }
+          if (managed?.requireSignedPlugins) {
+            logger.log(chalk.yellow("  signed plugin manifests required"));
+          }
+          if (
+            Array.isArray(managed?.allowedPlugins) ||
+            Array.isArray(managed?.deniedPlugins) ||
+            Array.isArray(managed?.blockedMarketplaces)
+          ) {
+            logger.log(
+              chalk.yellow("  managed plugin supply-chain policy active"),
+            );
+          }
+        }
       } catch (err) {
         logger.error(chalk.red(`permissions list failed: ${err.message}`));
         process.exitCode = 1;
@@ -131,7 +172,13 @@ export function registerPermissionsCommand(program) {
         if (options.json) {
           console.log(
             JSON.stringify(
-              { tool: concrete, args: toolArgs, decision, rule: result.rule, source },
+              {
+                tool: concrete,
+                args: toolArgs,
+                decision,
+                rule: result.rule,
+                source,
+              },
               null,
               2,
             ),
@@ -164,14 +211,19 @@ export function registerPermissionsCommand(program) {
   cmd
     .command("add <decision> <rule>")
     .description("Append a rule (allow|ask|deny) to a settings file")
-    .option("--local", "Write to .claude/settings.local.json (personal, gitignored)")
+    .option(
+      "--local",
+      "Write to .claude/settings.local.json (personal, gitignored)",
+    )
     .option("--user", "Write to ~/.claude/settings.json (all projects)")
     .action(async (decision, rule, options) => {
       try {
         const kind = String(decision || "").toLowerCase();
         if (!["allow", "ask", "deny"].includes(kind)) {
           logger.error(
-            chalk.red(`decision must be allow | ask | deny (got "${decision}")`),
+            chalk.red(
+              `decision must be allow | ask | deny (got "${decision}")`,
+            ),
           );
           process.exitCode = 1;
           return;
@@ -188,7 +240,11 @@ export function registerPermissionsCommand(program) {
           return;
         }
 
-        const scope = options.user ? "user" : options.local ? "local" : "project";
+        const scope = options.user
+          ? "user"
+          : options.local
+            ? "local"
+            : "project";
         const { addRule } = await import("../lib/settings-loader.cjs");
         const { file, added } = addRule({
           cwd: process.cwd(),

package/src/commands/plugin.js

@@ -5,6 +5,11 @@
 
 import chalk from "chalk";
 import { logger } from "../lib/logger.js";
+import {
+  enforcePluginPolicy,
+  loadPluginManagedPolicy,
+  verifyPluginManifest,
+} from "../lib/plugin-security.js";
 import { bootstrap, shutdown } from "../runtime/bootstrap.js";
 import {
   installPlugin,
@@ -90,9 +95,32 @@ export function registerPluginCommand(program) {
     .option("--description <desc>", "Plugin description")
     .option("--author <author>", "Plugin author")
     .option("--manifest <path>", "Plugin manifest file with skill declarations")
+    .option("--source <source>", "Plugin source or marketplace identifier")
+    .option("--sha256 <hex>", "Expected SHA-256 of the manifest")
+    .option("--signature <path>", "Detached Ed25519 signature of the manifest")
+    .option("--public-key <path>", "PEM public key used to verify --signature")
     .option("--json", "Output as JSON")
     .action(async (name, options) => {
       try {
+        const managed = loadPluginManagedPolicy();
+        enforcePluginPolicy(
+          { name, source: options.source, action: "install" },
+          managed,
+        );
+        let verifiedManifest = null;
+        let parsedManifest = null;
+        if (options.manifest || managed?.requireSignedPlugins) {
+          verifiedManifest = verifyPluginManifest({
+            manifestFile: options.manifest,
+            expectedSha256: options.sha256,
+            signatureFile: options.signature,
+            publicKeyFile: options.publicKey,
+            requireSignature: managed?.requireSignedPlugins === true,
+            trustedKeySha256: managed?.trustedPluginKeySha256,
+            requireTrustedKey: managed?.requireSignedPlugins === true,
+          });
+          parsedManifest = JSON.parse(verifiedManifest.bytes.toString("utf8"));
+        }
         const ctx = await bootstrap({ verbose: program.opts().verbose });
         if (!ctx.db) {
           logger.error("Database not available");
@@ -111,8 +139,9 @@ export function registerPluginCommand(program) {
         if (options.manifest) {
           try {
             const fs = await import("fs");
-            const manifestContent = fs.readFileSync(options.manifest, "utf-8");
-            const manifest = JSON.parse(manifestContent);
+            const manifest =
+              parsedManifest ||
+              JSON.parse(fs.readFileSync(options.manifest, "utf-8"));
             if (manifest.skills && manifest.skills.length > 0) {
               const path = await import("path");
               const pluginPath = path.dirname(path.resolve(options.manifest));
@@ -131,7 +160,17 @@ export function registerPluginCommand(program) {
         if (options.json) {
           console.log(
             JSON.stringify(
-              { ...result, skills: skillResult.installed },
+              {
+                ...result,
+                skills: skillResult.installed,
+                integrity: verifiedManifest
+                  ? {
+                      sha256: verifiedManifest.sha256,
+                      signatureVerified: verifiedManifest.signatureVerified,
+                      publicKeySha256: verifiedManifest.publicKeySha256,
+                    }
+                  : null,
+              },
               null,
               2,
             ),
@@ -205,6 +244,10 @@ export function registerPluginCommand(program) {
     .argument("<name>", "Plugin name")
     .action(async (name) => {
       try {
+        enforcePluginPolicy(
+          { name, action: "enable" },
+          loadPluginManagedPolicy(),
+        );
         const ctx = await bootstrap({ verbose: program.opts().verbose });
         if (!ctx.db) {
           logger.error("Database not available");
@@ -262,6 +305,10 @@ export function registerPluginCommand(program) {
     .argument("<version>", "New version")
     .action(async (name, version) => {
       try {
+        enforcePluginPolicy(
+          { name, action: "update" },
+          loadPluginManagedPolicy(),
+        );
         const ctx = await bootstrap({ verbose: program.opts().verbose });
         if (!ctx.db) {
           logger.error("Database not available");

package/src/commands/serve.js

@@ -27,6 +27,14 @@ export function registerServeCommand(program) {
       "Allow non-localhost connections (requires --token)",
     )
     .option("--project <path>", "Default project root for sessions")
+    .option(
+      "--remote-session-relay-url <url>",
+      "Signaling relay URL for Remote Session pairing",
+    )
+    .option(
+      "--remote-session-peer-id <id>",
+      "Stable relay peer ID for this local runtime",
+    )
     .option(
       "--http-port <port>",
       "Hosted HTTP port for Phase 5 envelope SSE (disabled if unset)",
@@ -47,6 +55,8 @@ export function registerServeCommand(program) {
           project: opts.project,
           httpPort: opts.httpPort ? parseInt(opts.httpPort, 10) : null,
           bundlePath: opts.bundle || null,
+          remoteSessionRelayUrl: opts.remoteSessionRelayUrl || null,
+          remoteSessionPeerId: opts.remoteSessionPeerId || null,
         });
         await runtime.startServer();
       } catch (err) {