code-workspace-zhuiyi 0.1.0-beta.7 → 0.1.0-beta.8

package/README.md

@@ -13,7 +13,7 @@ Code Workspace is a local multi-project registry and safety layer for Claude Cod
 npm install -g @icebearx-ai/code-workspace
 ```
 
-The package provides `code-workspace` and the shorter alias `code-w`.
+The package provides the `code-workspace` command and the shorter `codew` alias. The legacy `code-w` alias remains available for compatibility.
 
 ## Initialize
 
@@ -50,13 +50,13 @@ It does not create `openspec/`, install native `/opsx` commands, or install nati
 `init` can install integrations from the versioned `extensions/` repository shipped inside this npm package. Select extension names interactively, or pass a comma-separated name list non-interactively. The dedicated install command accepts one or more names; without names it opens the built-in extension multiselect, where ESC exits without changes:
 
 ```bash
-code-w init . --extensions zhuiyi-jira-mcp --yes
-code-w init . --extensions zhuiyi-opensvn-mcp --yes
-code-w init . --extensions none --yes
-code-w extension install
-code-w extension install zhuiyi-jira-mcp --yes
-code-w extension install zhuiyi-opensvn-mcp --yes
-code-w extension uninstall zhuiyi-jira-mcp --yes
+codew init . --extensions zhuiyi-jira-mcp --yes
+codew init . --extensions zhuiyi-opensvn-mcp --yes
+codew init . --extensions none --yes
+codew extension install
+codew extension install zhuiyi-jira-mcp --yes
+codew extension install zhuiyi-opensvn-mcp --yes
+codew extension uninstall zhuiyi-jira-mcp --yes
 ```
 
 The Workspace operation lock shared by init, extension install, and extension uninstall is configured in the Code Workspace project's `.env` (not in the target Workspace). `CODE_WORKSPACE_INIT_LOCK_UPDATE_MS` defaults to `5000`, and `CODE_WORKSPACE_INIT_LOCK_STALE_MS` defaults to `30000`; process environment variables take precedence. See `.env.example` for the project configuration names.
@@ -67,7 +67,7 @@ Users select names, not versions; `zhuiyi-jira-mcp@0.1.0` is intentionally rejec
 
 The bundled `zhuiyi-jira-mcp` and `zhuiyi-opensvn-mcp` extensions configure the Jira and OpenSVN MCP services for the selected Agent tools. They do not create an `openspec/` directory or install native OpenSpec commands.
 
-`zhuiyi-opensvn-mcp` accesses OpenSVN static resources through `opssvn.in.wezhuiyi.com`. Its runtime configuration requires `SVN_AUTHORIZATION` and optionally accepts `SVN_OUTPUT_DIR` and `SVN_MAX_RESOURCES`; credentials are not stored in the extension package and should be supplied through local configuration or the runtime environment.
+`zhuiyi-opensvn-mcp` accesses OpenSVN static resources through `opssvn.in.wezhuiyi.com`. Its bundled configuration sets `SVN_OUTPUT_DIR` to `.mcp-cache-opensvn`, requires `SVN_AUTHORIZATION`, and defaults `SVN_MAX_RESOURCES` to `200`; credentials are not stored in the extension package and should be supplied through local configuration or the runtime environment.
 
 Extension entries run in separate Node processes and generate files in temporary staging directories. The host rejects undeclared, missing, symbolic-link, non-file, path-escaping, conflicting, and checksum-mismatched artifacts before transactionally installing them. Per-Workspace state is stored in `.code-workspace/ext-manifest.json`. A failed extension is reported as a warning and does not roll back successful core initialization or stop later extensions; a failed upgrade restores and retains the previous installed version.
 
@@ -78,7 +78,7 @@ verified by Code Workspace; extensions never patch the real Workspace directly.
 recorded installed state and does not execute extension code. Unknown changes to extension-owned
 files or contributions stop the operation instead of being overwritten.
 
-This is fault isolation, not a malicious-code security sandbox. The experimental release trusts only extension code shipped with Code Workspace; network sources, external extension directories, dependencies, arbitrary patches, force uninstall, disable commands, and automatic extension updates through `code-w update` are not supported. The developer contract is in `docs/extensions.md`.
+This is fault isolation, not a malicious-code security sandbox. The experimental release trusts only extension code shipped with Code Workspace; network sources, external extension directories, dependencies, arbitrary patches, force uninstall, disable commands, and automatic extension updates through `codew update` are not supported. The developer contract is in `docs/extensions.md`.
 
 ## Register projects
 

package/README.zh-CN.md

@@ -13,7 +13,7 @@ Code Workspace 是面向 Claude Code 与 Codex 的本地多项目注册表和安
 npm install -g @icebearx-ai/code-workspace
 ```
 
-软件包提供 `code-workspace` 命令及短别名 `code-w`。
+软件包提供 `code-workspace` 命令及短别名 `codew`。为保持兼容，旧别名 `code-w` 仍然可用。
 
 ## 初始化
 
@@ -50,13 +50,13 @@ code-workspace init . \
 `init` 可以从 npm 包内随附的版本化 `extensions/` 仓库安装集成。交互模式按扩展名多选；非交互模式传入逗号分隔的扩展名。独立安装命令接受一个或多个扩展名；不传名称时打开内置扩展多选，按 ESC 可无修改退出：
 
 ```bash
-code-w init . --extensions zhuiyi-jira-mcp --yes
-code-w init . --extensions zhuiyi-opensvn-mcp --yes
-code-w init . --extensions none --yes
-code-w extension install
-code-w extension install zhuiyi-jira-mcp --yes
-code-w extension install zhuiyi-opensvn-mcp --yes
-code-w extension uninstall zhuiyi-jira-mcp --yes
+codew init . --extensions zhuiyi-jira-mcp --yes
+codew init . --extensions zhuiyi-opensvn-mcp --yes
+codew init . --extensions none --yes
+codew extension install
+codew extension install zhuiyi-jira-mcp --yes
+codew extension install zhuiyi-opensvn-mcp --yes
+codew extension uninstall zhuiyi-jira-mcp --yes
 ```
 
 `init`、扩展安装和扩展卸载共享的 Workspace 操作锁配置在 Code Workspace 项目自身的 `.env` 中（不在目标 Workspace 中）。`CODE_WORKSPACE_INIT_LOCK_UPDATE_MS` 默认值为 `5000`，`CODE_WORKSPACE_INIT_LOCK_STALE_MS` 默认值为 `30000`；进程环境变量优先于 `.env`。配置项名称见 `.env.example`。
@@ -67,7 +67,7 @@ code-w extension uninstall zhuiyi-jira-mcp --yes
 
 当前随包提供的内置扩展包括 `zhuiyi-jira-mcp` 和 `zhuiyi-opensvn-mcp`，分别用于为选中的 Agent 工具配置 Jira MCP 与 OpenSVN MCP 服务；它们不会创建 `openspec/` 目录，也不会安装 OpenSpec 原生命令。
 
-`zhuiyi-opensvn-mcp` 使用 `opssvn.in.wezhuiyi.com` 访问 OpenSVN 静态资源。运行时必须在对应 Agent 配置中提供 `SVN_AUTHORIZATION`，可选配置 `SVN_OUTPUT_DIR` 和 `SVN_MAX_RESOURCES`；认证信息不会写入扩展包，应通过本地配置或运行环境注入。
+`zhuiyi-opensvn-mcp` 使用 `opssvn.in.wezhuiyi.com` 访问 OpenSVN 静态资源。内置配置将 `SVN_OUTPUT_DIR` 设为 `.mcp-cache-opensvn`，运行时必须提供 `SVN_AUTHORIZATION`，`SVN_MAX_RESOURCES` 默认为 `200`；认证信息不会写入扩展包，应通过本地配置或运行环境注入。
 
 扩展入口在独立 Node 进程中运行，只向临时 staging 目录生成文件。Host 会在事务安装前拒绝未声明、缺失、符号链接、非文件、路径逃逸、目标冲突和 hash 不匹配的制品。Workspace 状态存放在 `.code-workspace/ext-manifest.json`。扩展失败以 warning 报告，不回滚已成功的核心初始化，也不阻止后续扩展；升级失败会恢复并保留旧的已安装版本。
 
@@ -76,7 +76,7 @@ code-w extension uninstall zhuiyi-jira-mcp --yes
 Workspace 合成和验证，扩展不会直接 patch 真实 Workspace。卸载只使用已安装状态，不执行
 扩展代码；扩展所有的文件或贡献存在未知修改时会拒绝覆盖或删除。
 
-这是故障隔离，不是恶意代码安全沙箱。试验版本只信任随 Code Workspace 发布的扩展代码；暂不支持网络源、外部扩展目录、扩展依赖、任意 patch、强制卸载、禁用命令，也不会通过 `code-w update` 自动更新扩展。开发契约见 `docs/extensions.zh-CN.md`。
+这是故障隔离，不是恶意代码安全沙箱。试验版本只信任随 Code Workspace 发布的扩展代码；暂不支持网络源、外部扩展目录、扩展依赖、任意 patch、强制卸载、禁用命令，也不会通过 `codew update` 自动更新扩展。开发契约见 `docs/extensions.zh-CN.md`。
 
 ## 注册项目
 

package/artifacts/manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 2,
-  "releaseVersion": "0.1.0-beta.7",
+  "releaseVersion": "0.1.0-beta.8",
   "requirements": {
     "node": ">=20.19.0"
   },
@@ -13,13 +13,13 @@
       "id": "workspace-user-guide-en-US",
       "kind": "asset",
       "path": "templates/user-guide/en-US.md",
-      "sha256": "a05c1611df919bcb05843d703a5a08c9d7e312c7dd69d1ac198f8bcfc266ec67"
+      "sha256": "919217e7d7a1c59775f13803a1bf7645b48c01ba53bbb2cea9d666022c7ce7fc"
     },
     {
       "id": "workspace-user-guide-zh-CN",
       "kind": "asset",
       "path": "templates/user-guide/zh-CN.md",
-      "sha256": "b4fb6dee108832c02fc09e179c051678406d486f341b3174aa5e57b4053d740a"
+      "sha256": "c41dd91cfeef475b48785f19253e1213fe14b3208b12c9dfd3e7aa7dad13a4a7"
     }
   ],
   "managedFiles": [
@@ -49,7 +49,7 @@
       "allowMissing": true,
       "desired": {
         "source": "templates/agents/WORKSPACE_GUARD.md.template",
-        "sha256": "6510cce83138fad46330d2c175506e56e9c98d5086195a699eafc7cc74163bf3"
+        "sha256": "bddb8e2ee25b7a63614b4297453e5803d2740fc475d97f5d8489dbaf17380c2c"
       },
       "render": {
         "variables": [
@@ -72,7 +72,7 @@
       "allowMissing": true,
       "desired": {
         "source": "templates/agents/WORKSPACE_GUARD.md.template",
-        "sha256": "6510cce83138fad46330d2c175506e56e9c98d5086195a699eafc7cc74163bf3"
+        "sha256": "bddb8e2ee25b7a63614b4297453e5803d2740fc475d97f5d8489dbaf17380c2c"
       },
       "render": {
         "variables": [
@@ -98,7 +98,7 @@
       "allowMissing": true,
       "desired": {
         "source": "templates/codex/hooks.json",
-        "sha256": "64d68809a2681b11d4b50bee3ca711fa8f5ea0a297c2281e5c7f8937e968e22e"
+        "sha256": "ecba346e0ce73d931802615dd798b952f1d0afabef3c67d7d1ee21f81b133b46"
       },
       "provenance": {
         "kind": "template"
@@ -158,7 +158,7 @@
       "allowMissing": true,
       "desired": {
         "source": "templates/agents/skills/code-workspace-resolve-branch/SKILL.md",
-        "sha256": "d09b0e1847f5b39e6409ba3ac43f26fa5829a15690a3e216576e51535fb6b161"
+        "sha256": "df8c65fbadf917b7247bbd1f40144da8c904a95f2b3ee905a4d2d6176e0a5f1b"
       },
       "provenance": {
         "kind": "template"
@@ -173,7 +173,7 @@
       "allowMissing": true,
       "desired": {
         "source": "templates/agents/skills/code-workspace-resolve-branch/SKILL.md",
-        "sha256": "d09b0e1847f5b39e6409ba3ac43f26fa5829a15690a3e216576e51535fb6b161"
+        "sha256": "df8c65fbadf917b7247bbd1f40144da8c904a95f2b3ee905a4d2d6176e0a5f1b"
       },
       "provenance": {
         "kind": "template"

package/artifacts/templates/agents/WORKSPACE_GUARD.md.template

@@ -9,13 +9,13 @@ The registry is authoritative for project identity, ownership, location, and the
 If the user explicitly names a registered project, resolve it directly:
 
 ```bash
-code-w project show "<project.name>" --json
+codew project show "<project.name>" --json
 ```
 
 Only when project ownership cannot be determined, list registry metadata:
 
 ```bash
-code-w project list --json
+codew project list --json
 ```
 
 Use `name`, `type`, and `context` only to identify relevant candidates and ask the user to choose. Do not inspect candidate repositories while selecting.
@@ -33,27 +33,26 @@ Meta, help, or workspace-tool maintenance tasks that do not depend on registered
 Before reading or modifying selected project code, run:
 
 ```bash
-code-w project verify "<project.name>" --json
+codew project verify "<project.name>" --json
 ```
 
 For several explicitly selected projects, use:
 
 ```bash
-code-w project verify "<project-a>" "<project-b>" --json
+codew project verify "<project-a>" "<project-b>" --json
 ```
 
 - For one project, continue only when the targeted result has `ok: true`. For a multi-project result, evaluate every ordered project result independently: continue passed projects and keep failed projects paused even when the top-level `ok` is false.
 - On `PROJECT_BRANCH_MISMATCH`, pause affected project work and invoke the installed `code-workspace-resolve-branch` Skill. The Skill may combine mismatches from the explicitly selected scope into one concise question; do not choose a branch direction yourself.
-- For any other failure, report the targeted diagnostics and wait for user direction for the affected project; a failure in one batch result does not block unrelated successful selected projects. Do not escalate to full-workspace validation.
-- The branch Skill completes after `project branch verify` confirms alignment; it does not own overall project readiness. After its handoff, discard branch-dependent context and rerun targeted `project verify` for the successfully reconciled projects before resuming work.
-- If that overall verification fails for a non-branch reason, keep the affected project paused and handle the project-level diagnostic here without treating the branch Skill as failed. If a new `PROJECT_BRANCH_MISMATCH` appears because the branch drifted again, re-enter the Skill. Do not list or verify unrelated projects.
+- For any other failure, report the targeted diagnostics and wait for user direction for the affected project; a failure in one batch result does not block unrelated successful selected projects. Do not escalate to full-workspace validation. Do not list or verify unrelated projects.
+- The branch Skill completes after `project branch verify` confirms alignment; it does not own overall project readiness. After its handoff, proceed directly to `project branch update-latest` without rerunning targeted `project verify`. If update-latest reports a new `PROJECT_BRANCH_MISMATCH`, re-enter the Skill using the new CLI observation.
 - After branch verification succeeds—including projects whose branches were already aligned—run `project branch update-latest` for the selected projects:
 
 ```bash
-code-w project branch update-latest "<project-a>" "<project-b>" --json
+codew project branch update-latest "<project-a>" "<project-b>" --json
 ```
 
-  Pass each selected project name as a separate argument; for a single project, pass only that project name. Evaluate each project result independently, including when the batch-level `ok` is `false`: continue only for projects whose individual result has `ok: true`, and treat `disabled` and `already-latest` as successful skips. If an update fails, keep that project paused and do not run ad-hoc `fetch`, `pull`, `reset`, `stash`, or `rebase` commands. For each successful or skipped project, discard pre-update context and rerun targeted `project verify` before starting project work.
+  Pass each selected project name as a separate argument; for a single project, pass only that project name. Evaluate each project result independently, including when the batch-level `ok` is `false`: continue only for projects whose individual result has `ok: true`, and treat `disabled` and `already-latest` as successful skips. If an update fails, keep that project paused and do not run ad-hoc `fetch`, `pull`, `reset`, `stash`, or `rebase` commands. Do not rerun targeted `project verify` after update-latest. For each `fastForwarded: true` result, discard pre-update context and re-read the project files and instructions before starting project work; `disabled` and `already-latest` results may continue with the existing context.
 
 ## Workspace Write Boundary
 
@@ -63,7 +62,7 @@ The AI/Agent MUST NOT directly create, edit, move, or delete Workspace-owned fil
 - `.codex/config.toml`
 - `CLAUDE.md`, `AGENTS.md`, or other managed workspace files
 
-AI/Agent registry changes must use an approved `code-w` command. Users may manually edit `.code-workspace/config.yaml` and are responsible for the resulting configuration; AI/Agent must not imitate that edit with a script or direct file write. The CLI owns confirmation, concurrency checks, persistence or safe external effects, postconditions, rollback/compensation, and structured output. This boundary does not prevent user-requested production-code changes inside the selected external `project.location`.
+AI/Agent registry changes must use an approved `codew` command. Users may manually edit `.code-workspace/config.yaml` and are responsible for the resulting configuration; AI/Agent must not imitate that edit with a script or direct file write. The CLI owns confirmation, concurrency checks, persistence or safe external effects, postconditions, rollback/compensation, and structured output. This boundary does not prevent user-requested production-code changes inside the selected external `project.location`.
 
 ## Responsibilities
 

package/artifacts/templates/agents/skills/code-workspace-resolve-branch/SKILL.md

@@ -12,7 +12,7 @@ Resolve only the already selected registered project or projects. This Skill own
 Run one command from the Workspace for all selected projects whose targeted verification reported `PROJECT_BRANCH_MISMATCH`. Pass each project name as a separate argument; do not join names with commas:
 
 ```bash
-code-w project branch inspect "<project-a>" "<project-b>" --json
+codew project branch inspect "<project-a>" "<project-b>" --json
 ```
 
 For one project, require the existing standard envelope whose `data` contains all of: `project.name`, `project.location`, `registeredBranch`, `actualBranch`, `matches`, `worktreeClean`, `registeredBranchExists`, and `remoteBranchCandidates`. For several projects, read the ordered `data.results`; each successful result contains those facts in its `data`, while failed results are explained by the top-level diagnostics. Do not infer or independently inspect missing values.
@@ -67,8 +67,8 @@ Ask rules:
 
 ## Apply valid choices through the CLI
 
-- Group every project that selected choice 1 into one `code-w project branch use-registered "<project-a>" "<project-b>" --allow-remote --yes --json` invocation. Include only projects for which choice 1 is available. `--allow-remote` is harmless for projects whose local registered branch already exists and permits creation only from an existing unique remote-tracking branch.
-- Group every project that selected choice 2 into one `code-w project branch accept-actual "<project-a>" "<project-b>" --yes --json` invocation.
+- Group every project that selected choice 1 into one `codew project branch use-registered "<project-a>" "<project-b>" --allow-remote --yes --json` invocation. Include only projects for which choice 1 is available. `--allow-remote` is harmless for projects whose local registered branch already exists and permits creation only from an existing unique remote-tracking branch.
+- Group every project that selected choice 2 into one `codew project branch accept-actual "<project-a>" "<project-b>" --yes --json` invocation.
 - For choice 3, keep that project paused until the user confirms manual resolution is complete. Do not reuse any pre-resolution branch facts.
 
 If the registered branch is absent both locally and from remote-tracking refs, do not add `--remote` automatically. Tell the user that an explicit direct CLI invocation such as `project branch use-registered <name> --remote origin --yes --json` is required to authorize network fetch.
@@ -80,7 +80,7 @@ After all choices are valid and complete, run each non-empty automatic direction
 After both automatic direction groups finish, collect projects whose operations succeeded or skipped together with projects that were already matching during inspection, discard their cached branch-dependent context, and run one branch-only verification. After the user confirms one or more manual resolutions, verify those confirmed projects the same way:
 
 ```bash
-code-w project branch verify "<project-a>" "<project-b>" --json
+codew project branch verify "<project-a>" "<project-b>" --json
 ```
 
 Use each result independently. A successful result means branch reconciliation is complete and branch alignment has been verified for that project; a failed result remains unresolved. Complete all independent automatic operations and branch verification before giving one consolidated report of inspected failures, successful changes, skips, branch-verification failures, and projects awaiting manual handling.

package/artifacts/templates/codex/hooks.json

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "code-w monitor report",
+            "command": "codew monitor report",
             "timeout": 1
           }
         ]
@@ -18,7 +18,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "code-w monitor report",
+            "command": "codew monitor report",
             "timeout": 1
           }
         ]
@@ -30,7 +30,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "code-w monitor report",
+            "command": "codew monitor report",
             "timeout": 1
           }
         ]
@@ -42,7 +42,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "code-w monitor report",
+            "command": "codew monitor report",
             "timeout": 1
           }
         ]
@@ -54,7 +54,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "code-w monitor report",
+            "command": "codew monitor report",
             "timeout": 1
           }
         ]
@@ -65,7 +65,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "code-w monitor report",
+            "command": "codew monitor report",
             "timeout": 1
           }
         ]
@@ -76,7 +76,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "code-w monitor report",
+            "command": "codew monitor report",
             "timeout": 1
           }
         ]

package/artifacts/templates/user-guide/en-US.md

@@ -24,8 +24,8 @@ Upgrade the global package, update the current workspace's managed files, then v
 
 ```bash
 npm install -g @icebearx-ai/code-workspace@latest
-code-w update
-code-w doctor
+codew update
+codew doctor
 ```
 
 `update` refreshes managed instructions, Workspace skills, hooks, and this guide. It stops if a managed file contains unknown local changes. Review the file first; use `--force` only when replacing those changes is intentional.
@@ -35,14 +35,14 @@ code-w doctor
 Choose the Workspace language during initialization, or pass it explicitly:
 
 ```bash
-code-w init --language en-US
-code-w language
+codew init --language en-US
+codew language
 ```
 
 The selected preference is stored at `workspace.language` in `.code-workspace/config.yaml`. Change an initialized workspace with:
 
 ```bash
-code-w update --language en-US
+codew update --language en-US
 ```
 
 This also switches this managed guide. Existing project context is not translated.
@@ -52,7 +52,7 @@ This also switches this managed guide. Existing project context is not translate
 Start one global monitor for all workspaces:
 
 ```bash
-code-w monitor
+codew monitor
 ```
 
 Open the printed local URL. The dashboard shows workspaces, execution state, pending approvals, completed turns, and live signals. Monitor language is selected on the page and is independent of `workspace.language`.
@@ -60,7 +60,7 @@ Open the printed local URL. The dashboard shows workspaces, execution state, pen
 Use another port when necessary:
 
 ```bash
-code-w monitor --port 8080
+codew monitor --port 8080
 ```
 
 Each participating workspace must use the same URL in `.code-workspace/config.yaml`. After initialization, review and trust the project hooks with `/hooks` in Codex.
@@ -69,17 +69,17 @@ Each participating workspace must use the same URL in `.code-workspace/config.ya
 
 ```bash
 # Check installation and workspace health
-code-w doctor
+codew doctor
 
 # Update all managed files
-code-w update
+codew update
 
 # Apply Agent project directory authorization
-code-w permissions apply --yes
+codew permissions apply --yes
 
 # Validate local projects
-code-w project verify
-code-w project verify <project-name>
+codew project verify
+codew project verify <project-name>
 ```
 
 Directory access is authorized by the user. Code Workspace shows the requested changes, applies and verifies them, and reports the result. `permissions apply` grants missing registered-project access without revoking additional directories. Ordinary `update` does not change authorization.

package/artifacts/templates/user-guide/zh-CN.md

@@ -24,8 +24,8 @@ Claude Code：
 
 ```bash
 npm install -g @icebearx-ai/code-workspace@latest
-code-w update
-code-w doctor
+codew update
+codew doctor
 ```
 
 `update` 会更新托管指令、Workspace 技能、Hook 和本指南。如果托管文件包含未知的本地修改，更新会停止。请先检查文件；只有明确要覆盖这些修改时才使用 `--force`。
@@ -35,14 +35,14 @@ code-w doctor
 初始化时可选择 Workspace 语言，也可以显式指定：
 
 ```bash
-code-w init --language zh-CN
-code-w language
+codew init --language zh-CN
+codew language
 ```
 
 所选偏好保存在 `.code-workspace/config.yaml` 的 `workspace.language`。已有工作区可通过以下命令切换语言：
 
 ```bash
-code-w update --language zh-CN
+codew update --language zh-CN
 ```
 
 该操作也会切换本托管指南。已有项目 context 不会自动翻译。
@@ -52,7 +52,7 @@ code-w update --language zh-CN
 为所有工作区启动一个全局 Monitor：
 
 ```bash
-code-w monitor
+codew monitor
 ```
 
 打开命令输出的本地地址。面板会显示工作区、执行状态、待授权请求、已完成轮次和实时信号。Monitor 语言在页面中单独选择，与 `workspace.language` 相互独立。
@@ -60,7 +60,7 @@ code-w monitor
 必要时可使用其他端口：
 
 ```bash
-code-w monitor --port 8080
+codew monitor --port 8080
 ```
 
 所有参与监控的工作区都必须在 `.code-workspace/config.yaml` 中使用相同 URL。初始化后，请在 Codex 中使用 `/hooks` 检查并信任项目 Hook。
@@ -69,17 +69,17 @@ code-w monitor --port 8080
 
 ```bash
 # 检查安装和工作区健康状态
-code-w doctor
+codew doctor
 
 # 更新所有托管文件
-code-w update
+codew update
 
 # 应用 Agent 项目目录授权
-code-w permissions apply --yes
+codew permissions apply --yes
 
 # 校验本地项目
-code-w project verify
-code-w project verify <project-name>
+codew project verify
+codew project verify <project-name>
 ```
 
 目录访问由用户授权。Code Workspace 负责展示请求的变更、实施并验证变更，以及报告结果。`permissions apply` 只补齐已注册项目缺失的授权，不撤销额外目录。普通 `update` 不会改变授权。

package/bin/code-workspace.js

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
 
 const { main } = require("../src/cli");
+const { hostJsonRequested } = require("../src/cli/parser");
 const { renderResult } = require("../src/cli/renderer");
 const { failure } = require("../src/cli/result");
 
-const json = process.argv.some((arg) => arg === "--json" || arg.startsWith("--json="));
+const json = hostJsonRequested(process.argv);
 
 main(process.argv)
   .then((result) => renderResult(result, { json }))

package/docs/extension-architecture.zh-CN.md

@@ -93,6 +93,12 @@ extensions/<extension-id>/<version>/
 
 Host 明确声明自己支持的 Extension Spec 版本集合，只有 manifest 的 `extensionSpecVersion` 属于该集合时才会执行扩展。静态 manifest 用于发现、规划、冲突预检和用户确认。它不描述扩展业务实现，不包含需要由 Host 理解的下载 URL、npm 包信息或归档格式。
 
+manifest 还可以声明独立的 `runtime` 入口。Runtime Host 只负责按 Store 中的精确版本校验
+入口、创建最小 context、管理 oneshot 或 service 进程生命周期；扩展 ID 后的参数由扩展自行
+解释。`workspace` runtime 依赖当前 Workspace activation，`global` runtime 不依赖全局
+Workspace，也不因此获得任意 Workspace 路径或凭证。Runtime 子进程与初始化子进程一样属于
+可信代码执行，不是安全沙箱。
+
 入口可能继续读取扩展包内的辅助代码、模板和私有元数据，因此仅校验 `init.js` 不能冻结完整执行输入。Host 在规划时还需要计算整个扩展版本目录的规范摘要，并在执行前重新验证，以防 manifest、入口、辅助代码或模板在计划确认后发生变化。
 
 ### 4.5 初始化入口

package/extensions/monitor/1.0.0/assets/i18n-icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" viewBox="0 0 24 24" class="vt-locales-btn-icon" data-v-6229553e=""><path d="M0 0h24v24H0z" fill="none"></path><path d=" M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z " class="css-c4d79v"></path></svg>

package/extensions/monitor/1.0.0/assets/logo-vector.svg

@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg"
+     width="1254" height="1254" viewBox="0 0 1254 1254"
+     role="img" aria-label="Geometric teal-blue logo">
+  <defs>
+    <linearGradient id="logoGradient" x1="320" y1="175" x2="860" y2="1080" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#19AEB8"/>
+      <stop offset="0.48" stop-color="#087DA5"/>
+      <stop offset="1" stop-color="#07528C"/>
+    </linearGradient>
+  </defs>
+
+  <g fill="none"
+     stroke="url(#logoGradient)"
+     stroke-width="118"
+     stroke-linecap="butt"
+     stroke-linejoin="round">
+    <path d="M 794 289
+             L 630 184
+             L 291 394
+             L 291 786
+             L 630 1020
+             L 973 786
+             L 973 393
+             L 914 354"/>
+    <path d="M 850 386
+             L 617 526
+             L 617 850"/>
+  </g>
+</svg>

package/extensions/monitor/1.0.0/i18n/index.js

@@ -0,0 +1,33 @@
+const fs = require("node:fs");
+const path = require("node:path");
+
+const LOCALES_DIRECTORY = path.join(__dirname, "locales");
+const MONITOR_LOCALES = Object.freeze(
+  fs.readdirSync(LOCALES_DIRECTORY)
+    .filter((file) => file.endsWith(".js"))
+    .sort()
+    .map((file) => require(path.join(LOCALES_DIRECTORY, file)))
+    .sort((left, right) => left.code.localeCompare(right.code))
+);
+const LOCALES_BY_CODE = new Map(MONITOR_LOCALES.map((locale) => [locale.code, locale]));
+
+if (MONITOR_LOCALES.length === 0) throw new Error("At least one monitor locale must be registered");
+if (LOCALES_BY_CODE.size !== MONITOR_LOCALES.length) throw new Error("Duplicate monitor locale code");
+for (const locale of MONITOR_LOCALES) {
+  if (!locale?.code || !locale.label || !locale.messages) throw new Error(`Invalid monitor locale: ${locale?.code || "<missing>"}`);
+}
+const defaults = MONITOR_LOCALES.filter((locale) => locale.default === true);
+if (defaults.length !== 1) throw new Error("Exactly one monitor locale must be the default");
+
+const DEFAULT_MONITOR_LANGUAGE = defaults[0].code;
+const MONITOR_MESSAGES = Object.freeze(Object.fromEntries(
+  MONITOR_LOCALES.map((locale) => [locale.code, locale.messages])
+));
+
+function getMonitorLocale(code) {
+  const locale = LOCALES_BY_CODE.get(String(code || "").trim());
+  if (!locale) throw new Error(`Unsupported monitor locale: ${code || "<missing>"}`);
+  return locale;
+}
+
+module.exports = { DEFAULT_MONITOR_LANGUAGE, MONITOR_LOCALES, MONITOR_MESSAGES, getMonitorLocale };

package/extensions/monitor/1.0.0/i18n/locales/en-US.js

@@ -0,0 +1,85 @@
+module.exports = {
+  code: "en-US",
+  label: "English",
+  default: true,
+  messages: {
+    title: "Code Workspace Monitor",
+    eyebrow: "Local runtime center",
+    language: "Language",
+    summary: "Monitor summary",
+    workspaces: "Workspaces",
+    sessions: "Sessions",
+    turns: "Turns",
+    active: "Active sessions",
+    execution: "Execution",
+    signals: "Live signals",
+    waitingData: "Waiting for data",
+    nodes: "{count} nodes",
+    pending: " · {count} to review",
+    events: "{count} events",
+    updated: "Updated {value}",
+    never: "never",
+    justNow: "just now",
+    seconds: "{count} seconds ago",
+    minutes: "{count} minutes ago",
+    hours: "{count} hours ago",
+    workspaceMeta: "{active} active / {sessions} total sessions · {signals} signals · {updated}",
+    approval: "Approval {count}",
+    complete: "Complete {count}",
+    actions: "actions",
+    removeWorkspace: "Remove workspace",
+    removeSession: "Delete session",
+    emptyWorkspaces: "No workspace signals yet",
+    waitingAgent: "Waiting for Agent signals",
+    waitingAgentDetail:
+      "Enable monitoring in a workspace and trust its Codex hooks.",
+    session: "Session",
+    lastSignal: "Last signal {value}",
+    inactiveReason: "No signal received for more than 10 minutes",
+    turn: "Turn",
+    tool: "Tool",
+    signalsCount: "{count} signals",
+    noSessions: "No session records.",
+    noTurns: "No turn details yet.",
+    noEvents: "No events",
+    soundUnavailable: "Notification sound unavailable",
+    soundWarning: "Unable to enable monitor sound:",
+    soundLoadingTitle: "Loading notification sound",
+    soundFirstUse:
+      "Sound is on; interact with the page once to enable playback",
+    soundDisable: "Disable notification sound",
+    soundEnable: "Enable notification sound",
+    soundLoading: "Loading sound",
+    soundOn: "Sound on",
+    soundOff: "Sound off",
+    removeConfirm:
+      "Remove “{name}” from the monitor? It will return automatically when a new signal arrives.",
+    removeSessionConfirm:
+      "Delete session “{id}” and its related signals?",
+    removeActiveSessionConfirm:
+      "Session “{id}” is still active. Delete it? It will return when a new signal arrives.",
+    live: "Live",
+    connecting: "Connecting",
+    reconnecting: "Reconnecting",
+    status: {
+      IDLE: "Idle",
+      RUNNING: "Running",
+      WAITING_APPROVAL: "Waiting approval",
+      RECENT_COMPLETE: "Just completed",
+      STOPPED: "Stopped",
+      ACTIVE: "Active",
+      INACTIVE: "Inactive",
+      ENDED: "Ended",
+      SESSION_ENDED: "Session ended",
+    },
+    event: {
+      "turn.started": "Turn started",
+      "approval.requested": "Approval requested",
+      "tool.completed": "Tool completed",
+      "subagent.started": "Subagent started",
+      "subagent.stopped": "Subagent stopped",
+      "turn.stopped": "Turn completed",
+      "session.ended": "Session ended",
+    },
+  },
+};