code-workspace-zhuiyi 0.1.0-beta.8 → 0.1.0-beta.9

package/README.md

@@ -33,7 +33,7 @@ code-workspace init . \
   --yes
 ```
 
-Use `--tools claude`, `--tools codex`, or `--tools none` to override the default tool selection. Codex monitoring is enabled by default when Codex is selected; use `--no-monitor` to disable it.
+Use `--tools claude`, `--tools codex`, or `--tools none` to override the default tool selection. Monitoring is not enabled implicitly; install the `monitor` extension with `--extensions monitor` or through the interactive extension picker.
 
 Initialization writes only Workspace-owned state and integrations:
 
@@ -41,7 +41,7 @@ Initialization writes only Workspace-owned state and integrations:
 - `USER_GUIDE.md`
 - `CLAUDE.md` and/or `AGENTS.md`
 - Workspace-specific commands and skills whose names start with `code-workspace-` or use the `/code-workspace` namespace
-- `.codex/hooks.json` when monitoring is enabled
+- `.codex/hooks.json` is written by the `monitor` extension when that extension is installed
 
 It does not create `openspec/`, install native `/opsx` commands, or install native `openspec-*` skills.
 
@@ -185,13 +185,14 @@ code-workspace language --json
 
 ## Monitor
 
+Monitor ships as the built-in `monitor` extension. Install it into a workspace and run its dashboard through the generic extension runtime:
+
 ```bash
-code-workspace monitor --port 3211
+code-workspace extension install monitor --yes
+code-workspace ext monitor serve --port 3211
 ```
 
-The monitor binds to loopback, combines events from multiple initialized workspaces, and keeps hook reporting failure-open. Review and trust project hooks in Codex before relying on reports.
-
-## Completion
+The monitor binds to loopback, combines events from multiple initialized workspaces, and keeps hook reporting (`codew ext monitor report`) failure-open. Review and trust project hooks in Codex before relying on reports.
 
 ```bash
 code-workspace completion --shell zsh

package/README.zh-CN.md

@@ -33,7 +33,7 @@ code-workspace init . \
   --yes
 ```
 
-可用 `--tools claude`、`--tools codex` 或 `--tools none` 覆盖默认工具选择。选择 Codex 时默认启用监控；可传 `--no-monitor` 关闭。
+可用 `--tools claude`、`--tools codex` 或 `--tools none` 覆盖默认工具选择。监控不会隐式启用；请通过 `--extensions monitor` 或交互式扩展选择安装 `monitor` 扩展。
 
 初始化只写入 Workspace 自有状态和集成：
 
@@ -41,7 +41,7 @@ code-workspace init . \
 - `USER_GUIDE.md`
 - `CLAUDE.md` 和/或 `AGENTS.md`
 - 名称以 `code-workspace-` 开头或使用 `/code-workspace` 命名空间的 Workspace 专用命令与 Skill
-- 启用监控时的 `.codex/hooks.json`
+- 安装 `monitor` 扩展时由扩展写入的 `.codex/hooks.json`
 
 它不会创建 `openspec/`，不会安装原生 `/opsx` 命令，也不会安装原生 `openspec-*` Skill。
 
@@ -183,11 +183,14 @@ code-workspace language --json
 
 ## 监控
 
+监控以内置 `monitor` 扩展的形式提供。先在 Workspace 中安装扩展，再通过通用扩展运行时启动面板：
+
 ```bash
-code-workspace monitor --port 3211
+code-workspace extension install monitor --yes
+code-workspace ext monitor serve --port 3211
 ```
 
-监控服务仅绑定 loopback，可汇总多个已初始化工作区的事件；hook 上报失败不会阻断 Agent。依赖监控前，请在 Codex 中检查并信任项目 hook。
+监控服务仅绑定 loopback，可汇总多个已初始化工作区的事件；hook 上报（`codew ext monitor report`）失败不会阻断 Agent。依赖监控前，请在 Codex 中检查并信任项目 hook。
 
 ## 命令补全
 

package/artifacts/manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 2,
-  "releaseVersion": "0.1.0-beta.8",
+  "releaseVersion": "0.1.0-beta.9",
   "requirements": {
     "node": ">=20.19.0"
   },
@@ -13,13 +13,13 @@
       "id": "workspace-user-guide-en-US",
       "kind": "asset",
       "path": "templates/user-guide/en-US.md",
-      "sha256": "919217e7d7a1c59775f13803a1bf7645b48c01ba53bbb2cea9d666022c7ce7fc"
+      "sha256": "a91d45e4fc11b4f3eb3c651a4fcee6d981b0d076d93063e0480c5c3e377ea5d2"
     },
     {
       "id": "workspace-user-guide-zh-CN",
       "kind": "asset",
       "path": "templates/user-guide/zh-CN.md",
-      "sha256": "c41dd91cfeef475b48785f19253e1213fe14b3208b12c9dfd3e7aa7dad13a4a7"
+      "sha256": "43bfd67f0725c4834cf33bb7ab96cbe090db6f4373f0b58d01276db293cb9598"
     }
   ],
   "managedFiles": [
@@ -86,24 +86,6 @@
         "kind": "template"
       }
     },
-    {
-      "id": "workspace-codex-monitor-hooks",
-      "target": ".codex/hooks.json",
-      "tools": [
-        "codex"
-      ],
-      "capabilities": [
-        "monitor"
-      ],
-      "allowMissing": true,
-      "desired": {
-        "source": "templates/codex/hooks.json",
-        "sha256": "ecba346e0ce73d931802615dd798b952f1d0afabef3c67d7d1ee21f81b133b46"
-      },
-      "provenance": {
-        "kind": "template"
-      }
-    },
     {
       "id": "workspace-claude-add-projects-command",
       "target": ".claude/commands/code-workspace/add-projects.md",

package/artifacts/templates/user-guide/en-US.md

@@ -49,10 +49,11 @@ This also switches this managed guide. Existing project context is not translate
 
 ## Use the Agent monitor
 
-Start one global monitor for all workspaces:
+Monitoring ships as the built-in `monitor` extension. Install it in a workspace and start one global monitor for all workspaces:
 
 ```bash
-codew monitor
+codew extension install monitor --yes
+codew ext monitor
 ```
 
 Open the printed local URL. The dashboard shows workspaces, execution state, pending approvals, completed turns, and live signals. Monitor language is selected on the page and is independent of `workspace.language`.
@@ -60,10 +61,10 @@ Open the printed local URL. The dashboard shows workspaces, execution state, pen
 Use another port when necessary:
 
 ```bash
-codew monitor --port 8080
+codew ext monitor serve --port 8080
 ```
 
-Each participating workspace must use the same URL in `.code-workspace/config.yaml`. After initialization, review and trust the project hooks with `/hooks` in Codex.
+The extension reports to the URL recorded in `.code-workspace/monitor-reporting.json`. After installation, review and trust the project hooks with `/hooks` in Codex.
 
 ## Practical commands
 

package/artifacts/templates/user-guide/zh-CN.md

@@ -49,10 +49,11 @@ codew update --language zh-CN
 
 ## 使用 Agent Monitor
 
-为所有工作区启动一个全局 Monitor：
+监控以内置 `monitor` 扩展的形式提供。先在 Workspace 中安装扩展，再为所有工作区启动一个全局 Monitor：
 
 ```bash
-codew monitor
+codew extension install monitor --yes
+codew ext monitor
 ```
 
 打开命令输出的本地地址。面板会显示工作区、执行状态、待授权请求、已完成轮次和实时信号。Monitor 语言在页面中单独选择，与 `workspace.language` 相互独立。
@@ -60,10 +61,10 @@ codew monitor
 必要时可使用其他端口：
 
 ```bash
-codew monitor --port 8080
+codew ext monitor serve --port 8080
 ```
 
-所有参与监控的工作区都必须在 `.code-workspace/config.yaml` 中使用相同 URL。初始化后，请在 Codex 中使用 `/hooks` 检查并信任项目 Hook。
+扩展会向 `.code-workspace/monitor-reporting.json` 中记录的 URL 上报。安装后，请在 Codex 中使用 `/hooks` 检查并信任项目 Hook。
 
 ## 实用命令
 

package/docs/extension-architecture.zh-CN.md

@@ -181,13 +181,23 @@ installed manifest 是 Host 持久化的最终安装事实，保存在 Workspace
 - 卸载前验证文件未发生未知修改；
 - 验证成功后删除该文件。
 
-### 6.2 独占目录
+### 6.2 种子文件（seeded）
+
+`seeded` 是 `file` 的一种特殊所有权：Host 只在目标文件缺失时写入扩展提供的默认内容（种子），之后把该文件视为用户所有。Host 负责：
+
+- 首次安装且目标缺失时写入默认内容；
+- 升级时永不覆盖已存在的用户内容，也不做漂移检查；
+- 卸载时直接删除该文件，即使内容已被用户修改。
+
+该能力用于「随扩展安装、之后归用户拥有」的本地配置文件（例如 monitor 的上报地址与开关）。
+
+### 6.3 独占目录
 
 一个扩展独占一个 Workspace 相对目录目标。它用于安装包含多个文件的运行时，例如预构建的 Jira MCP 包。
 
 Host 将目录视为一个制品，使用规范化目录摘要检测漂移，并通过 staging、备份和 rename 完成可恢复提交。目录摘要算法必须固定路径规则、排序、文件类型和文件内容计算方式。
 
-### 6.3 共享文本块
+### 6.4 共享文本块
 
 扩展提供一个文本片段，Host 使用稳定的扩展 id 和输出 id 标记，将其合成到声明的共享文本目标中。
 
@@ -200,7 +210,7 @@ Host 负责：
 
 该能力覆盖当前 Codex TOML 配置需求，但协议不包含 Codex 或 MCP 业务字段。
 
-### 6.4 JSON 对象成员
+### 6.5 JSON 对象成员
 
 扩展提供一个 JSON 值，并在静态 manifest 中声明目标文件和唯一成员位置。Host 只拥有该成员，不拥有整个 JSON 文件。
 
@@ -214,7 +224,7 @@ Host 负责：
 
 该能力覆盖 `.mcp.json` 中单个 MCP server 的需求，但核心不验证 server 的 Jira 业务含义。
 
-### 6.5 暂不增加的输出
+### 6.6 暂不增加的输出
 
 基础版不增加 `remote-archive` 之类的下载型制品。下载和解压是扩展准备候选目录的实现过程，不是 Host 的安装制品语义。
 
@@ -377,6 +387,7 @@ node init.js --context <context-file> --output <staging-directory> --result <res
 
 - 独占目标同时只能由一个扩展拥有。
 - 共享目标由 Host 管理多个局部 contribution 的所有权。
+- 种子文件目标在首次安装后视为用户所有，升级不覆盖、卸载删除、不参与漂移检查。
 - 静态 manifest 是安装意图，不是已安装事实。
 - 初始化结果是扩展声明，不是可信事实。
 - installed manifest 是 Host 验证后的事实来源。

package/extensions/monitor/1.0.0/runtime.js

@@ -43,7 +43,7 @@ async function main() {
   // Rebind the callback to the concrete store and replay persisted facts.
   monitor.store = monitor.store;
   for (const event of persisted) {
-    try { monitor.store.accept(event, true); } catch { /* ignore corrupt historical events */ }
+    try { monitor.store.accept(event); } catch { /* ignore corrupt historical events */ }
   }
   loading = false;
   save();
@@ -73,3 +73,4 @@ main().catch((error) => {
   process.stderr.write(`${error.message}\n`);
   process.exitCode = 1;
 });
+

package/extensions/monitor/1.1.0/assets/i18n-icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false" viewBox="0 0 24 24" class="vt-locales-btn-icon" data-v-6229553e=""><path d="M0 0h24v24H0z" fill="none"></path><path d=" M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z " class="css-c4d79v"></path></svg>

package/extensions/monitor/1.1.0/assets/logo-vector.svg

@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg"
+     width="1254" height="1254" viewBox="0 0 1254 1254"
+     role="img" aria-label="Geometric teal-blue logo">
+  <defs>
+    <linearGradient id="logoGradient" x1="320" y1="175" x2="860" y2="1080" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#19AEB8"/>
+      <stop offset="0.48" stop-color="#087DA5"/>
+      <stop offset="1" stop-color="#07528C"/>
+    </linearGradient>
+  </defs>
+
+  <g fill="none"
+     stroke="url(#logoGradient)"
+     stroke-width="118"
+     stroke-linecap="butt"
+     stroke-linejoin="round">
+    <path d="M 794 289
+             L 630 184
+             L 291 394
+             L 291 786
+             L 630 1020
+             L 973 786
+             L 973 393
+             L 914 354"/>
+    <path d="M 850 386
+             L 617 526
+             L 617 850"/>
+  </g>
+</svg>

package/extensions/monitor/1.1.0/init.js

@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+
+const fs = require("node:fs");
+const path = require("node:path");
+
+function option(name) {
+  const index = process.argv.indexOf(name);
+  return index >= 0 ? process.argv[index + 1] : null;
+}
+
+function main() {
+  const contextFile = option("--context");
+  const outputRoot = option("--output");
+  const resultFile = option("--result");
+  if (!contextFile || !outputRoot || !resultFile) throw new Error("Usage: init.js --context <file> --output <directory> --result <file>");
+  const context = JSON.parse(fs.readFileSync(contextFile, "utf8"));
+  if (context.schemaVersion !== 1 || context.extensionSpecVersion !== 1 || context.extension?.id !== "monitor" || !context.extension.version || !context.workspace || !Array.isArray(context.tools)) throw new Error("Invalid monitor extension context");
+  fs.mkdirSync(outputRoot, { recursive: true });
+  const config = {
+    schemaVersion: 1,
+    enable: true,
+    url: "http://127.0.0.1:3211",
+    workspace: context.workspace,
+    service: { id: "monitor", compatibilityGroup: "v1" },
+  };
+  const source = "monitor-reporting.json";
+  fs.writeFileSync(path.join(outputRoot, source), `${JSON.stringify(config, null, 2)}\n`, { mode: 0o600 });
+  const outputs = [{ id: "reporting-config", source }];
+  fs.writeFileSync(resultFile, `${JSON.stringify({
+    schemaVersion: 1,
+    extensionSpecVersion: 1,
+    extension: { id: "monitor", version: context.extension.version },
+    outputs,
+  }, null, 2)}\n`, { mode: 0o600 });
+}
+
+main();

package/extensions/monitor/1.1.0/manifest.json

@@ -0,0 +1,39 @@
+{
+  "schemaVersion": 3,
+  "extensionSpecVersion": 1,
+  "experimental": true,
+  "id": "monitor",
+  "name": "Code Workspace Monitor",
+  "version": "1.1.0",
+  "entry": "init.js",
+  "entrySha256": "b80b9b88aa25b523433a63983e8c74883c18153a95e14302c4c0af3709770ab1",
+  "timeoutMs": 120000,
+  "capabilities": {},
+  "outputs": [
+    {
+      "id": "reporting-config",
+      "kind": "file",
+      "ownership": "seeded",
+      "target": ".code-workspace/monitor-reporting.json"
+    }
+  ],
+  "hooks": [
+    { "id": "monitor-task-started", "event": "task.started", "command": "codew ext monitor report", "tools": ["codex", "claude"], "timeoutMs": 2 },
+    { "id": "monitor-task-activity", "event": "task.activity", "command": "codew ext monitor report", "tools": ["codex", "claude"], "timeoutMs": 2 },
+    { "id": "monitor-write-before", "event": "write.before", "command": "codew ext monitor report", "tools": ["codex", "claude"], "timeoutMs": 2 },
+    { "id": "monitor-write-after", "event": "write.after", "command": "codew ext monitor report", "tools": ["codex", "claude"], "timeoutMs": 2 },
+    { "id": "monitor-turn-ended", "event": "task.turn-ended", "command": "codew ext monitor report", "tools": ["codex", "claude"], "timeoutMs": 2 },
+    { "id": "monitor-task-ended", "event": "task.ended", "command": "codew ext monitor report", "tools": ["codex", "claude"], "timeoutMs": 2 },
+    { "id": "monitor-subagent-started", "event": "task.subagent-started", "command": "codew ext monitor report", "tools": ["codex", "claude"], "timeoutMs": 2 },
+    { "id": "monitor-subagent-ended", "event": "task.subagent-ended", "command": "codew ext monitor report", "tools": ["codex", "claude"], "timeoutMs": 2 }
+  ],
+  "runtime": {
+    "runtimeProtocolVersion": 1,
+    "entry": "runtime.js",
+    "entrySha256": "df2c30b8541373b6b140c99a2e7ac22d864104e24cdf6a388860480c6f1fdd41",
+    "scope": "global",
+    "mode": "service",
+    "timeoutMs": 3000,
+    "service": { "id": "monitor", "compatibilityGroup": "v1", "singleton": "user" }
+  }
+}

package/{src/monitor/index.js → extensions/monitor/1.1.0/monitor.js}

@@ -8,10 +8,10 @@ const DEFAULT_MONITOR_HOST = "127.0.0.1";
 const DEFAULT_MONITOR_PORT = 3211;
 const DEFAULT_SESSION_INACTIVITY_MS = 10 * 60 * 1000;
 const MONITOR_ASSETS = new Map([
-  ["/assets/request_tip.mp3", { file: path.join(__dirname, "..", "..", "assets", "request_tip.mp3"), type: "audio/mpeg" }],
-  ["/assets/session_finish.mp3", { file: path.join(__dirname, "..", "..", "assets", "session_finish.mp3"), type: "audio/mpeg" }],
-  ["/assets/logo-vector.svg", { file: path.join(__dirname, "..", "..", "assets", "logo-vector.svg"), type: "image/svg+xml; charset=utf-8" }],
-  ["/assets/i18n-icon.svg", { file: path.join(__dirname, "..", "..", "assets", "i18n-icon.svg"), type: "image/svg+xml; charset=utf-8" }],
+  ["/assets/request_tip.mp3", { file: path.join(__dirname, "assets", "request_tip.mp3"), type: "audio/mpeg" }],
+  ["/assets/session_finish.mp3", { file: path.join(__dirname, "assets", "session_finish.mp3"), type: "audio/mpeg" }],
+  ["/assets/logo-vector.svg", { file: path.join(__dirname, "assets", "logo-vector.svg"), type: "image/svg+xml; charset=utf-8" }],
+  ["/assets/i18n-icon.svg", { file: path.join(__dirname, "assets", "i18n-icon.svg"), type: "image/svg+xml; charset=utf-8" }],
 ]);
 
 const EVENT_DEFINITIONS = {
@@ -90,10 +90,10 @@ function createMonitorStore(options = {}) {
     for (const response of subscribers) response.write(payload);
   }
 
-  function accept(event) {
+  function accept(event, replay = false) {
     if (!validEvent(event)) throw new Error("invalid event payload");
     if (events.some((current) => current.eventId === event.eventId)) return { duplicate: true };
-    const receivedAt = nowIso();
+    const receivedAt = replay && event.timestamp ? event.timestamp : nowIso();
     const storedEvent = { ...event, timestamp: event.timestamp || receivedAt };
     const previous = workspaces.get(event.workspace.uuid) || {
       uuid: event.workspace.uuid,
@@ -130,6 +130,7 @@ function createMonitorStore(options = {}) {
     events.unshift(storedEvent);
     if (events.length > maxEvents) events.length = maxEvents;
     publish({ event: storedEvent, workspace: previous });
+    options.onChange?.();
     return { duplicate: false, workspaceUuid: previous.uuid };
   }
 
@@ -139,6 +140,7 @@ function createMonitorStore(options = {}) {
       if (events[index].workspace.uuid === uuid) events.splice(index, 1);
     }
     publish({ workspaceRemoved: uuid });
+    options.onChange?.();
     return { removed: true, workspaceUuid: uuid };
   }
 
@@ -163,6 +165,7 @@ function createMonitorStore(options = {}) {
       workspace.firstSeenAt
     );
     publish({ sessionRemoved: { workspaceUuid, sessionId } });
+    options.onChange?.();
     return { removed: true, workspaceUuid, sessionId, removedEvents };
   }
 
@@ -308,14 +311,14 @@ function startMonitor(options = {}) {
   });
 }
 
-async function reportHookEvent(input, config, options = {}) {
-  if (!config.monitor?.enable || !config.workspace) return { action: "skip", reason: "monitor disabled" };
-  const event = normalizeHookEvent(input, config);
+async function reportHookEvent(input, reporting, options = {}) {
+  if (!reporting?.enable || !reporting?.workspace) return { action: "skip", reason: "monitor disabled" };
+  const event = normalizeHookEvent(input, reporting);
   if (!event) return { action: "skip", reason: "unsupported event" };
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), options.timeoutMs || 300);
   try {
-    const response = await (options.fetch || fetch)(`${config.monitor.url}/api/v1/events`, {
+    const response = await (options.fetch || fetch)(`${reporting.url}/api/v1/events`, {
       method: "POST",
       headers: { "content-type": "application/json" },
       body: JSON.stringify(event),
@@ -329,6 +332,29 @@ async function reportHookEvent(input, config, options = {}) {
   }
 }
 
+function findReportingConfig(startDirectory) {
+  let directory = path.resolve(startDirectory);
+  for (;;) {
+    const candidate = path.join(directory, ".code-workspace", "monitor-reporting.json");
+    if (fs.existsSync(candidate)) return candidate;
+    const parent = path.dirname(directory);
+    if (parent === directory) return null;
+    directory = parent;
+  }
+}
+
+function loadReportingConfig(startDirectory) {
+  const file = findReportingConfig(startDirectory);
+  if (!file) return null;
+  try {
+    const value = JSON.parse(fs.readFileSync(file, "utf8"));
+    if (value?.schemaVersion !== 1 || !value?.workspace?.uuid || typeof value.url !== "string") return null;
+    return value;
+  } catch {
+    return null;
+  }
+}
+
 module.exports = {
   DEFAULT_MONITOR_HOST,
   DEFAULT_MONITOR_PORT,
@@ -336,6 +362,8 @@ module.exports = {
   EVENT_DEFINITIONS,
   createMonitorServer,
   createMonitorStore,
+  findReportingConfig,
+  loadReportingConfig,
   normalizeHookEvent,
   reportHookEvent,
   startMonitor,

package/extensions/monitor/1.1.0/runtime.js

@@ -0,0 +1,105 @@
+#!/usr/bin/env node
+
+const fs = require("node:fs");
+const path = require("node:path");
+const { createMonitorServer, DEFAULT_MONITOR_HOST, DEFAULT_MONITOR_PORT, loadReportingConfig, reportHookEvent } = require("./monitor");
+
+function readContext() {
+  const file = process.env.CODE_WORKSPACE_RUNTIME_CONTEXT;
+  if (!file) throw new Error("CODE_WORKSPACE_RUNTIME_CONTEXT is required");
+  const context = JSON.parse(fs.readFileSync(file, "utf8"));
+  if (context.schemaVersion !== 1 || context.mode !== "service" || context.extension?.id !== "monitor") throw new Error("Invalid monitor runtime context");
+  return context;
+}
+
+function option(name, fallback) {
+  const index = process.argv.indexOf(name);
+  return index >= 0 && process.argv[index + 1] ? process.argv[index + 1] : fallback;
+}
+
+async function readStdinJson() {
+  const chunks = [];
+  for await (const chunk of process.stdin) chunks.push(chunk);
+  try {
+    return JSON.parse(Buffer.concat(chunks).toString("utf8") || "{}");
+  } catch {
+    return {};
+  }
+}
+
+// Hook entry: always exit 0 so an unavailable monitor never blocks Agent tools.
+async function report() {
+  try {
+    const input = await readStdinJson();
+    const reporting = loadReportingConfig(process.cwd());
+    await reportHookEvent(input, reporting || { enable: false });
+  } catch {
+    /* failure-open by contract */
+  }
+}
+
+async function serve(context) {
+  const dataDirectory = context.dataDirectory;
+  fs.mkdirSync(dataDirectory, { recursive: true });
+  const dataFile = path.join(dataDirectory, "monitor-events.json");
+  let loading = true;
+  let persisted = [];
+  try {
+    const value = JSON.parse(fs.readFileSync(dataFile, "utf8"));
+    if (Array.isArray(value)) persisted = value;
+  } catch { /* first run or an incomplete file */ }
+  const save = () => {
+    if (loading) return;
+    const temporary = `${dataFile}.tmp-${process.pid}`;
+    fs.writeFileSync(temporary, `${JSON.stringify(monitor.store.snapshot().events, null, 2)}\n`, { mode: 0o600 });
+    fs.renameSync(temporary, dataFile);
+  };
+  const monitor = createMonitorServer({
+    host: option("--host", DEFAULT_MONITOR_HOST),
+    port: Number(option("--port", DEFAULT_MONITOR_PORT)),
+    store: undefined,
+    onChange: save,
+  });
+  // Rebind the callback to the concrete store and replay persisted facts.
+  monitor.store = monitor.store;
+  for (const event of persisted) {
+    try { monitor.store.accept(event); } catch { /* ignore corrupt historical events */ }
+  }
+  loading = false;
+  save();
+  await new Promise((resolve, reject) => {
+    const onError = (error) => reject(error);
+    monitor.server.once("error", onError);
+    monitor.server.listen(monitor.port, monitor.host, () => {
+      monitor.server.off("error", onError);
+      if (context.readiness?.file) fs.writeFileSync(context.readiness.file, "ready\n", { mode: 0o600 });
+      resolve();
+    });
+  });
+  process.stdout.write(`Code Workspace Monitor listening on http://${monitor.host}:${monitor.port}\n`);
+  await new Promise((resolve) => {
+    let closing = false;
+    const close = () => {
+      if (closing) return;
+      closing = true;
+      monitor.server.close(() => { save(); resolve(); });
+    };
+    process.once("SIGINT", close);
+    process.once("SIGTERM", close);
+  });
+}
+
+async function main() {
+  const command = process.argv[2];
+  const context = readContext();
+  if (command === "report") {
+    await report();
+    return;
+  }
+  await serve(context);
+}
+
+main().catch((error) => {
+  process.stderr.write(`${error.message}\n`);
+  process.exitCode = 1;
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-workspace-zhuiyi",
-  "version": "0.1.0-beta.8",
+  "version": "0.1.0-beta.9",
   "description": "Local multi-project registry and safety layer for AI coding workspaces",
   "author": "icebearx-ai",
   "license": "MIT",
@@ -26,7 +26,6 @@
     "src/hooks",
     "src/i18n",
     "src/init",
-    "src/monitor",
     "artifacts",
     "extensions",
     "docs/extension-architecture.zh-CN.md",
@@ -44,7 +43,6 @@
   },
   "scripts": {
     "test": "node --test src/__test__/*.test.js",
-    "dev:monitor": "node bin/code-workspace.js monitor",
     "check": "npm test && npm run cli:architecture-check && npm run pack:check",
     "cli:architecture-check": "node scripts/check-cli-architecture.js",
     "pack:check": "npm pack --dry-run",

package/schemas/extension-manifest-v3.json

@@ -37,7 +37,7 @@
         "properties": {
           "id": { "$ref": "#/$defs/id" },
           "kind": { "enum": ["file", "directory", "text-block", "json-member"] },
-          "ownership": { "enum": ["exclusive", "shared"] },
+          "ownership": { "enum": ["exclusive", "shared", "seeded"] },
           "target": { "$ref": "#/$defs/relativePath" },
           "selector": { "type": "string", "pattern": "^/(?:[^~/]|~[01])+(?:/(?:[^~/]|~[01])+)*$" },
           "format": { "enum": ["text", "toml"] },
@@ -50,7 +50,11 @@
         },
         "allOf": [
           {
-            "if": { "properties": { "kind": { "enum": ["file", "directory"] } } },
+            "if": { "properties": { "kind": { "const": "file" } } },
+            "then": { "properties": { "ownership": { "enum": ["exclusive", "seeded"] } } }
+          },
+          {
+            "if": { "properties": { "kind": { "const": "directory" } } },
             "then": { "properties": { "ownership": { "const": "exclusive" } } }
           },
           {

package/spec/extension/v1/specification.en-US.md

@@ -106,6 +106,12 @@ block only that runtime and do not change installation compatibility. Runtime su
 security sandbox. `global` means that a process may serve multiple Workspaces, not that it receives
 arbitrary Workspace paths, files, or credentials.
 
+For `service` runtimes invoked through `codew ext <id>`, the Host applies a fixed argv convention:
+an empty argv or a leading `serve` starts or attaches to the singleton service; any other leading
+argument runs the runtime entry as a short-lived command with inherited stdio, the caller's working
+directory, and no service-registry or readiness handshake. Command invocations resolve with the
+child's exit status and remain bounded by the declared `timeoutMs`.
+
 Before confirmation, the Host MUST freeze the manifest, entry, and complete extension-version directory digest. The Host MUST verify them again before execution. An extension MUST NOT use a dynamic result to expand the declarations in its manifest.
 
 ## 4. Execution Entry
@@ -141,6 +147,7 @@ Spec v1 supports four output kinds:
 | kind | ownership | Lifecycle semantics |
 |---|---|---|
 | `file` | `exclusive` | The Host exclusively writes, digests, drift-checks, and removes one regular file |
+| `file` | `seeded` | The Host writes defaults only when the target is absent, never overwrites user edits, skips drift checks, and removes the file on uninstall |
 | `directory` | `exclusive` | The Host exclusively replaces, canonically digests, drift-checks, and recursively removes a directory |
 | `text-block` | `shared` | The Host manages a marked text contribution using the extension id and output id |
 | `json-member` | `shared` | The Host manages one member selected by JSON Pointer while preserving other content |