code-workspace-zhuiyi 1.0.0-beta.3 → 1.0.0-beta.5

package/README.md

@@ -1,5 +1,7 @@
 # Code Workspace
 
+[English](README.md) | [简体中文](README.zh-CN.md)
+
 Code Workspace is a local multi-project registry and safety layer for Claude Code and Codex. It manages workspace identity, project locations and branches, agent instructions, writable-root permissions, validation, and optional monitoring.
 
 ## Requirements
@@ -13,11 +15,8 @@ Code Workspace is a local multi-project registry and safety layer for Claude Cod
 npm install -g code-workspace-zhuiyi@latest
 ```
 
-The package provides the `code-workspace` command and the shorter `codew` alias. The legacy `code-w` alias remains available for compatibility.
-
 ## Initialize
 
-
 Interactive initialization:
 
 ```bash
@@ -36,6 +35,8 @@ codew init .code-workspace \
   --yes
 ```
 
+Use `--dev false` for an extension-container Workspace; this skips Workspace dependency installation, disables the system development extension, and omits the project onboarding prompt. Run `codew init .code-workspace --dev true --yes` to enable development mode again. The default for a new Workspace is `true`, and an existing Workspace keeps its saved value when the option is omitted.
+
 Use `--tools claude`, `--tools codex`, or `--tools none` to override the default tool selection. Monitoring is not enabled implicitly; install the `monitor` extension with `--extensions monitor` or through the interactive extension picker.
 
 Initialization writes only Workspace-owned state and integrations:
@@ -224,16 +225,7 @@ codew language --json
 
 `update` refreshes only Workspace-owned managed assets and never changes Agent directory authorization. Unknown local edits stop the batch before writes; review them or pass `--force` explicitly.
 
-## Monitor
-
-Monitor is an ordinary Nexus extension. Install it into a workspace and run its dashboard through the generic extension runtime:
-
-```bash
-codew extension install monitor --yes
-codew ext monitor serve --port 3211
-```
-
-The monitor binds to loopback, combines events from multiple initialized workspaces, and keeps hook reporting (`codew ext monitor report`) failure-open. Review and trust project hooks in Codex before relying on reports.
+## Completion
 
 ```bash
 codew completion --shell zsh

package/README.zh-CN.md

@@ -1,5 +1,7 @@
 # Code Workspace
 
+[English](README.md) | [简体中文](README.zh-CN.md)
+
 Code Workspace 是面向 Claude Code 与 Codex 的本地多项目注册表和安全边界层，负责工作区身份、项目路径与分支、Agent 指令、可写目录权限、校验以及可选监控。
 
 ## 环境要求
@@ -13,8 +15,6 @@ Code Workspace 是面向 Claude Code 与 Codex 的本地多项目注册表和安
 npm install -g code-workspace-zhuiyi@latest
 ```
 
-软件包提供 `code-workspace` 命令及短别名 `codew`。为保持兼容，旧别名 `code-w` 仍然可用。
-
 ## 初始化
 
 交互式初始化：
@@ -35,6 +35,8 @@ codew init . \
   --yes
 ```
 
+如果这个 Workspace 主要作为扩展容器使用，可以传 `--dev false`；该模式会跳过 Workspace 依赖安装、停用系统开发扩展并省略项目引导提示。需要恢复开发模式时执行 `codew init . --dev true --yes`。新 Workspace 默认值为 `true`；已有 Workspace 省略该参数时沿用已保存的值。
+
 可用 `--tools claude`、`--tools codex` 或 `--tools none` 覆盖默认工具选择。监控不会隐式启用；请通过 `--extensions monitor` 或交互式扩展选择安装 `monitor` 扩展。
 
 初始化只写入 Workspace 自有状态和集成：
@@ -221,17 +223,6 @@ codew language --json
 
 `update` 只刷新 Workspace 自有托管资产，绝不会修改 Agent 目录授权。遇到未知本地修改时，会在任何写入前终止批次；请先审查修改，或显式传入 `--force`。
 
-## 监控
-
-监控以 Nexus 中的 `monitor` 扩展提供。先在 Workspace 中安装扩展，再通过通用扩展运行时启动面板：
-
-```bash
-codew extension install monitor --yes
-codew ext monitor serve --port 3211
-```
-
-监控服务仅绑定 loopback，可汇总多个已初始化工作区的事件；hook 上报（`codew ext monitor report`）失败不会阻断 Agent。依赖监控前，请在 Codex 中检查并信任项目 hook。
-
 ## 命令补全
 
 ```bash

package/artifacts/manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 2,
-  "releaseVersion": "1.0.0-beta.3",
+  "releaseVersion": "1.0.0-beta.5",
   "requirements": {
     "node": ">=20.19.0"
   },

package/docs/extension-development/extension-development-guide.zh-CN.md

@@ -35,7 +35,23 @@ Host 负责确认、校验、事务提交、状态记录、升级和卸载。
 
 ## 2. 包目录
 
-系统扩展使用固定版本目录；普通扩展在独立仓库中维护并发布到 Nexus：
+系统扩展使用固定版本目录；普通扩展建议使用 `extension init` 创建最小 package 空壳，再按 Extension Spec 添加能力并发布到 Nexus：
+
+```bash
+codew extension init ./example-extension --yes
+```
+
+开发 package 的目录结构为：
+
+```text
+example-extension/
+├── extension/
+│   ├── manifest.json
+│   └── init.js
+└── package.json
+```
+
+系统扩展仍使用固定版本目录：
 
 ```text
 extensions/<extension-id>/<version>/
@@ -45,7 +61,7 @@ extensions/<extension-id>/<version>/
     └── SKILL.md
 ```
 
-外部扩展仓库可以使用任意仓库根目录，但交给 `extension pack` 的 `<source>` 必须直接指向包含 `manifest.json` 和 `init.js` 的版本目录。
+公开 CLI 的 `extension pack <source>` 要求 `<source>` 直接指向包含 `package.json` 和 `extension/` 的 package 根目录。空壳尚未声明 `outputs`、`hooks` 或 `runtime` 时不能打包。
 
 命名要求：
 
@@ -53,11 +69,18 @@ extensions/<extension-id>/<version>/
 - `version` 必须是完整 SemVer，例如 `1.0.0`；
 - 已发布版本目录不可修改；新实现创建新的版本目录。
 
-不要在扩展目录中添加运输用 `package.json`。npm 包装由 `extension pack` 生成；真实扩展目录的 `packageSha256` 是 Extension 身份的一部分。
+根目录 `package.json` 是固定格式的 transport envelope，不要添加 `dependencies`、`scripts` 或其他 npm lifecycle 字段。`extension pack` 只校验并打包这个 envelope，不会自动生成或修改它。
+
+`extension init` 只询问扩展 id、显示名称、描述和版本，不预设扩展是 Skill、MCP、Hook 还是 Runtime。完成 manifest 能力声明后，再运行：
+
+```bash
+codew extension digest update ./example-extension --yes
+codew extension pack ./example-extension --output ./dist/extensions --json
+```
 
 ## 3. manifest
 
-Spec v1 使用 manifest schema v3。最小示例：
+Spec v1 使用 manifest schema v3。下面是声明了一个 file output 的最小完整示例；`extension init` 生成的空壳会在用户添加能力前缺少 `outputs`、`hooks` 或 `runtime`：
 
 ```json
 {
@@ -89,7 +112,13 @@ Spec v1 使用 manifest schema v3。最小示例：
 node -e "process.stdout.write(require('node:crypto').createHash('sha256').update(require('node:fs').readFileSync('extensions/example-extension/1.0.0/init.js')).digest('hex'))"
 ```
 
-每次修改 `init.js` 后都必须更新 `entrySha256`。其他文件不需要手工写摘要；Host 和打包器会计算完整目录摘要。
+每次修改 `init.js` 或 `extension/` 下其他文件后，使用 CLI 同步摘要：
+
+```bash
+codew extension digest update ./example-extension --yes
+```
+
+该命令会先更新 `extension/manifest.json.entrySha256`，再更新 `package.json.codeWorkspace.packageSha256`。
 
 ### 3.1 身份与展示
 
@@ -296,10 +325,10 @@ codew extension upgrade example-extension --yes
 
 ## 6. npm/Nexus 打包
 
-打包单个版本目录：
+打包单个 package 根目录：
 
 ```bash
-code-workspace extension pack extensions/example-extension/1.0.0 --output dist/extensions --json
+code-workspace extension pack ./example-extension --output dist/extensions --json
 ```
 
 输出目录缺失时会递归创建。目标文件已存在时命令拒绝覆盖；重复打包前使用新的输出目录，或清理上一次构建产物。
@@ -331,14 +360,16 @@ npm 身份固定映射为：
 
 打包器会：
 
-- 校验 manifest、入口摘要、目录类型和 Extension Spec；
-- 生成不含 dependencies、bundled dependencies 和 scripts 的 envelope；
+- 校验 package envelope、manifest、入口摘要、目录类型和 Extension Spec；
+- 原样保留已验证的 `package.json`，不生成或修改 envelope；
 - 只归档普通文件；
 - 拒绝符号链接、硬链接、特殊文件、路径逃逸和重复路径；
 - 限制最多 1024 个文件、单文件 2 MiB、载荷总计 16 MiB、envelope 64 KiB；
 - 重新读取 tarball 并验证 envelope、manifest、入口和 package digest；
 - 使用同目录临时文件并原子提交输出。
 
+开发 package 的 README 和其他根目录文件不会进入 tarball；最终内容严格由 `package.json.files` 中的 `extension` 决定。
+
 成功 JSON 返回 npm name、扩展身份、tarball 绝对路径、tarball integrity、manifest/entry/package digest 和文件清单。
 
 ## 7. 发布边界

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-workspace-zhuiyi",
-  "version": "1.0.0-beta.3",
+  "version": "1.0.0-beta.5",
   "description": "Local multi-project registry and safety layer for AI coding workspaces",
   "author": "icebearx-ai",
   "license": "MIT",

package/src/cli/commands/extension.js

@@ -1,3 +1,4 @@
+const path = require("node:path");
 const { LOCAL_DIRECTORY, loadState } = require("../../core/config");
 const { WorkspaceError } = require("../../core/errors");
 const {
@@ -13,7 +14,8 @@ const {
 const { loadInitManifest } = require("../../core/init");
 const { acquireInitLock } = require("../../core/init-lock");
 const { defaultExtensionStoreRoot } = require("../../core/extension-store");
-const { packExtensionToDirectory } = require("../../core/extension-package");
+const { packExtensionSourceToDirectory } = require("../../core/extension-package");
+const { digestUpdate, scaffoldExtensionPackage } = require("../../core/extension-scaffold");
 const { resolveExtensionSettings } = require("../../core/extension-settings");
 const { DEFAULT_NEXUS_REGISTRY } = require("../../core/nexus-extension-provider");
 const {
@@ -25,6 +27,7 @@ const {
 const { resolveWorkspaceTools } = require("../../core/tools");
 const { createInteractiveUi, formatExtensionChoice } = require("../../init/ui");
 const { createRegistryExtensionPicker } = require("../../init/registry-picker");
+const { formatExtensionChanges } = require("../../init/extension-summary");
 const { confirm } = require("../confirmation");
 const { selectionResult, success } = require("../result");
 
@@ -43,18 +46,11 @@ function formatUninstallPlan(plan) {
 }
 
 function formatInstallPlan(plans, options = {}) {
-  const actionFor = options.actionFor || (() => "install");
-  const title = options.title || `Install ${plans.length} extension${plans.length === 1 ? "" : "s"}:`;
-  return [
-    title,
-    ...plans.flatMap((plan) => [
-      `  ${actionFor(plan) === "update" ? "Update" : "Install"} ${plan.id}@${plan.version} [${plan.source || "local"}] [Extension Spec ${plan.extensionSpecVersion}]`,
-      `    PACKAGE ${plan.packageSha256}`,
-      ...(plan.capabilities.networkHosts || []).map((host) => `    NETWORK https://${host}`),
-      ...plan.artifacts.map((artifact) => `    WRITE ${artifact.target} (${artifact.kind})`),
-      ...(plan.hooks || []).map((hook) => `    HOOK ${hook.id} (${hook.event}${hook.tools?.length ? ` · ${hook.tools.join(",")}` : ""}) -> ${hook.command}`),
-    ]),
-  ].join("\n");
+  return formatExtensionChanges(plans.map((plan) => ({ ...plan, source: plan.source || "local" })), [], {
+    title: options.title,
+    actionFor: options.actionFor,
+    action: options.action,
+  });
 }
 
 function formatRegistrySearchText(result) {
@@ -136,18 +132,53 @@ function lifecycleResultEntry(entry, action) {
 function lifecycleResultText(results, action) {
   const actionFor = typeof action === "function" ? action : () => action;
   const lines = results.map((entry) => entry.status === "installed"
-    ? `${actionFor(entry) === "upgrade" || actionFor(entry) === "update" ? "Updated" : "Installed"} ${entry.id}@${entry.version}.`
-    : entry.status === "skipped"
-      ? `Skipped ${entry.id}@${entry.version}: already current.`
-      : `Failed ${entry.id}${entry.version ? `@${entry.version}` : ""}: ${entry.message}`);
+    ? `${actionFor(entry) === "upgrade" || actionFor(entry) === "update" ? "Updated" : "Installed"} ${entry.name || entry.id}@${entry.version}.`
+    : entry.status === "uninstalled"
+      ? `Uninstalled ${entry.name || entry.id}${entry.version ? `@${entry.version}` : ""}.`
+      : entry.status === "skipped"
+      ? `Skipped ${entry.name || entry.id}${entry.version ? `@${entry.version}` : ""}: already current.`
+      : `Failed ${entry.name || entry.id}${entry.version ? `@${entry.version}` : ""}: ${entry.message}`);
   const installed = results.filter((entry) => entry.status === "installed").length;
+  const uninstalled = results.filter((entry) => entry.status === "uninstalled").length;
   const skipped = results.filter((entry) => entry.status === "skipped").length;
   const failed = results.filter((entry) => entry.status === "failed").length;
   const hasUpdate = results.some((entry) => actionFor(entry) === "upgrade" || actionFor(entry) === "update");
-  lines.push(`Extensions: ${installed} ${hasUpdate ? "applied" : "installed"}, ${skipped} skipped, ${failed} failed.`);
+  lines.push(`Extensions: ${installed} ${hasUpdate ? "applied" : "installed"}, ${uninstalled} uninstalled, ${skipped} skipped, ${failed} failed.`);
   return lines.join("\n");
 }
 
+function uninstallResultEntry(entry) {
+  return {
+    name: entry.id,
+    ok: entry.status !== "failed",
+    action: entry.status === "skipped" ? "skip" : "uninstall",
+    status: entry.status,
+    version: entry.version || null,
+    ...(entry.reason ? { reason: entry.reason } : {}),
+    ...(entry.removed ? { removed: entry.removed } : {}),
+    ...(entry.code ? { code: entry.code } : {}),
+    ...(entry.message ? { message: entry.message } : {}),
+  };
+}
+
+function sameUninstallTarget(expected, current) {
+  return expected.id === current.id
+    && expected.version === current.version
+    && (expected.packageSha256 || null) === (current.packageSha256 || null)
+    && JSON.stringify(expected.targets || []) === JSON.stringify(current.targets || []);
+}
+
+function refreshUninstallPlan(root, frozenPlan) {
+  const currentPlan = planExtensionUninstall(root, frozenPlan.id);
+  if (currentPlan.action !== frozenPlan.action || !sameUninstallTarget(frozenPlan, currentPlan)) {
+    throw new WorkspaceError("EXTENSION_STATE_CONFLICT", `Extension ${frozenPlan.id} changed after confirmation.`, {
+      extension: frozenPlan.id,
+      remediation: "Re-run extension search and review the current extension selection.",
+    });
+  }
+  return currentPlan;
+}
+
 function validateInstallOptions(invocation) {
   if (invocation.options.version) {
     if (invocation.args.length !== 1) {
@@ -331,27 +362,55 @@ async function executeExtensionSearch(invocation) {
     }, "No extensions selected. No changes were made.");
   }
   const requested = normalizeExtensionNames(selected.map((entry) => entry.id));
-  const actionById = new Map(selected.map((entry) => [entry.id, entry.action === "update" ? "update" : "install"]));
+  const actionById = new Map(selected.map((entry) => [entry.id, entry.action || "install"]));
+  const installSelections = selected.filter((entry) => entry.action !== "uninstall" && entry.action !== "keep");
+  const uninstallSelections = selected.filter((entry) => entry.action === "uninstall");
+  const planningState = structuredClone(stateInspection.state);
+  for (const entry of uninstallSelections) delete planningState.extensions[entry.id];
   const tools = resolveWorkspaceTools({ state: loadState(invocation.root), manifestTools: loadInitManifest().tools }).tools;
-  const preparation = await prepareRegistryExtensionPlans({
-    ...dependencies,
-    requested,
-    tools,
-    state: stateInspection.state,
-    stateError: stateInspection.error,
-    extensionsRoot: dependencies.extensionsRoot,
-    extensionStoreRoot: dependencies.extensionStoreRoot || defaultExtensionStoreRoot(),
-    provider: dependencies.nexusProvider,
-  });
-  if (preparation.plans.length > 0) {
-    const planText = formatInstallPlan(preparation.plans, {
-      title: `Apply ${preparation.plans.length} extension${preparation.plans.length === 1 ? "" : "s"}:`,
+  const preparation = installSelections.length > 0
+    ? await prepareRegistryExtensionPlans({
+      ...dependencies,
+      requested: installSelections.map((entry) => entry.id),
+      tools,
+      state: planningState,
+      stateError: stateInspection.error,
+      extensionsRoot: dependencies.extensionsRoot,
+      extensionStoreRoot: dependencies.extensionStoreRoot || defaultExtensionStoreRoot(),
+      provider: dependencies.nexusProvider,
+    })
+    : { plans: [], failures: [], diagnostics: [] };
+  preparation.plans = preparation.plans.map((plan) => ({ ...plan, action: actionById.get(plan.id) || "install" }));
+  const uninstallPlans = [];
+  const uninstallPreparationFailures = [];
+  for (const entry of uninstallSelections) {
+    try {
+      uninstallPlans.push(planExtensionUninstall(invocation.root, entry.id));
+    } catch (error) {
+      uninstallPreparationFailures.push({ id: entry.id, version: null, status: "failed", code: error.code || "EXTENSION_UNINSTALL_FAILED", message: error.message, statePersisted: false, phase: "prepare" });
+    }
+  }
+  const effectiveUninstallPlans = uninstallPlans.filter((plan) => plan.action !== "skip");
+  if (preparation.plans.length > 0 || effectiveUninstallPlans.length > 0) {
+    const planText = formatExtensionChanges(preparation.plans, effectiveUninstallPlans, {
       actionFor: (plan) => actionById.get(plan.id) || "install",
     });
     if (!(await (dependencies.confirm || confirm)(`${planText}\nContinue?`, invocation.options))) {
       throw new WorkspaceError("CLI_CANCELLED", "Extension search selection cancelled.");
     }
   }
+  const uninstallResults = [];
+  for (const plan of effectiveUninstallPlans) {
+    try {
+      const currentPlan = refreshUninstallPlan(invocation.root, plan);
+      uninstallResults.push({ ...applyExtensionUninstall(currentPlan, {
+        ...(dependencies || {}),
+        extensionStoreRoot: dependencies.extensionStoreRoot || defaultExtensionStoreRoot(),
+      }), action: "uninstall" });
+    } catch (error) {
+      uninstallResults.push({ id: plan.id, version: plan.version, status: "failed", action: "uninstall", code: error.code || "EXTENSION_UNINSTALL_FAILED", message: error.message });
+    }
+  }
   const batch = runExtensionBatch(invocation.root, preparation.plans, (extension) => ({
     schemaVersion: 1,
     extensionSpecVersion: extension.extensionSpecVersion,
@@ -359,8 +418,8 @@ async function executeExtensionSearch(invocation) {
     workspace: { name: workspace.name, uuid: workspace.uuid, language: workspace.language },
     tools,
   }), {
-    requested,
-    preFailures: preparation.failures,
+    requested: installSelections.map((entry) => entry.id),
+    preFailures: [...preparation.failures, ...uninstallPreparationFailures],
     useExtensionStore: true,
     extensionStoreRoot: dependencies.extensionStoreRoot || defaultExtensionStoreRoot(),
   });
@@ -381,12 +440,32 @@ async function executeExtensionSearch(invocation) {
       extension: entry.id,
       version: entry.version,
     }))),
+    ...uninstallResults.filter((entry) => entry.status === "failed").map((entry) => ({
+      code: entry.code || "EXTENSION_UNINSTALL_FAILED",
+      severity: "error",
+      message: entry.message || `Extension ${entry.id} failed to uninstall.`,
+      extension: entry.id,
+      version: entry.version,
+    })),
   ];
-  const results = decorateBatchResults(batch, preparation.plans, invocation.options);
+  const installedResults = decorateBatchResults(batch, preparation.plans, invocation.options);
+  const resultById = new Map([
+    ...installedResults.map((entry) => [entry.id, entry]),
+    ...uninstallResults.map((entry) => [entry.id, entry]),
+    ...uninstallPreparationFailures.map((entry) => [entry.id, entry]),
+  ]);
+  const rawResults = selected.map((selection) => {
+    if (selection.action === "keep") {
+      return { id: selection.id, version: stateInspection.state.extensions[selection.id]?.installed?.version || null, status: "skipped", reason: "already-installed", action: "skip" };
+    }
+    const entry = resultById.get(selection.id);
+    return entry || { id: selection.id, status: "failed", message: "Extension operation did not run." };
+  });
+  const results = rawResults.map((entry) => lifecycleResultEntry(entry, entry.action || actionById.get(entry.id) || "install"));
   ui.close?.("Extension selection applied.");
-  return selectionResult("extension.search", requested, results.map((entry) => lifecycleResultEntry(entry, actionById.get(entry.id) || "install")), {
+  return selectionResult("extension.search", requested, results, {
     diagnostics,
-    text: lifecycleResultText(results, (entry) => actionById.get(entry.id) || "install"),
+    text: lifecycleResultText(results, (entry) => entry.action || actionById.get(entry.id) || "install"),
   });
 }
 
@@ -481,7 +560,7 @@ async function executeExtensionPack(invocation) {
   const command = "extension.pack";
   const dependencies = invocation.dependencies || {};
   const settings = resolveExtensionSettings(dependencies);
-  const result = await packExtensionToDirectory(invocation.args[0], invocation.options.output, {
+  const result = await packExtensionSourceToDirectory(invocation.args[0], invocation.options.output, {
     ...dependencies,
     scope: dependencies.scope || settings.values.scope,
   });
@@ -492,9 +571,56 @@ async function executeExtensionPack(invocation) {
   );
 }
 
+async function collectExtensionInitOptions(invocation, target) {
+  const options = { ...invocation.options };
+  const interactive = !options.json && options.yes !== true && process.stdin.isTTY && process.stdout.isTTY;
+  if (!interactive) return options;
+  const ui = await createInteractiveUi({
+    cancelCode: "EXTENSION_INIT_CANCELLED",
+    cancelMessage: "Extension initialization cancelled. No changes were made.",
+  });
+  const defaultId = path.basename(path.resolve(target)).toLowerCase();
+  ui.intro("Create Code Workspace extension package");
+  if (options.id === undefined) options.id = await ui.text("Extension id", defaultId);
+  const defaultName = String(options.id || defaultId).split("-").map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join(" ");
+  if (options.name === undefined) options.name = await ui.text("Extension name", defaultName);
+  if (options.description === undefined) options.description = await ui.text("Description", "Code Workspace extension.");
+  if (options.version === undefined) options.version = await ui.text("Version", "0.1.0");
+  ui.close("Extension metadata ready.");
+  return options;
+}
+
+async function executeExtensionInit(invocation) {
+  const command = "extension.init";
+  const target = invocation.args[0] || ".";
+  const options = await collectExtensionInitOptions(invocation, target);
+  const pathText = path.resolve(target);
+  const planText = `Create extension package shell in ${pathText}:\n  CREATE package.json\n  CREATE extension/manifest.json\n  CREATE extension/init.js\nContinue?`;
+  if (!(await confirm(planText, options))) throw new WorkspaceError("CLI_CANCELLED", "Extension package initialization cancelled.");
+  const result = scaffoldExtensionPackage(target, options);
+  const text = result.action === "skip"
+    ? `Extension package is already current: ${result.path}.`
+    : `Created extension package shell in ${result.path}.\nNext: add outputs, hooks, or runtime to extension/manifest.json.`;
+  return success(command, result, text);
+}
+
+async function executeExtensionDigestUpdate(invocation) {
+  const command = "extension.digest.update";
+  const target = invocation.args[0] || ".";
+  if (!(await confirm(`Update extension digests in ${path.resolve(target)}?`, invocation.options))) {
+    throw new WorkspaceError("CLI_CANCELLED", "Extension digest update cancelled.");
+  }
+  const result = digestUpdate(target);
+  return success(command, result, result.action === "skip"
+    ? `Extension digests are already current: ${result.path}.`
+    : `Updated extension digests in ${result.path}.`);
+}
+
 async function executeExtension(invocation) {
   const command = invocation.definition.path.join(".");
   if (command === "extension.pack") return await executeExtensionPack(invocation);
+  if (command === "extension.init") return await executeExtensionInit(invocation);
+  if (command === "extension.digest.update") return await executeExtensionDigestUpdate(invocation);
   if (command === "extension.search") {
     const dependencies = invocation.dependencies || {};
     const interactive = dependencies.interactive ?? (!invocation.options.json && invocation.options.yes !== true && process.stdin.isTTY && process.stdout.isTTY);
@@ -523,6 +649,8 @@ module.exports = {
   executeExtension,
   executeExtensionInstall,
   executeExtensionPack,
+  executeExtensionInit,
+  executeExtensionDigestUpdate,
   executeExtensionSearch,
   executeExtensionInfo,
   executeExtensionUninstall,