xxt-skills-client 0.1.1

package/dist/register.js

@@ -0,0 +1,1972 @@
+import { spawn } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import * as tar from 'tar';
+const DEFAULT_PLUGINS = ['llmdoc', 'xxt-service-query', 'xxt-component', 'xxt-backend'];
+const DEFAULT_CLIENTS = ['claude', 'codex'];
+const DEFAULT_MCP_SERVERS = ['api-registry', 'code-search', 'dependency-graph', 'llmdoc-registry', 'service-discovery', 'component-registry'];
+const DEFAULT_PROJECT_CODEX_MARKETPLACE = 'xxt-coder-project';
+const DEFAULT_GLOBAL_CODEX_MARKETPLACE = 'xxt-coder-local';
+class BootstrapError extends Error {
+    exitCode;
+    details;
+    constructor(message, exitCode = 1, details) {
+        super(message);
+        this.name = 'BootstrapError';
+        this.exitCode = exitCode;
+        this.details = details;
+    }
+}
+function printJson(value) {
+    console.log(JSON.stringify(value, null, 2));
+}
+function printHuman(value) {
+    console.log(typeof value === 'string' ? value : JSON.stringify(value, null, 2));
+}
+function requireYes(yes) {
+    if (yes)
+        return;
+    throw new BootstrapError([
+        '⚠️ 危险操作检测！',
+        '操作类型：客户端插件生命周期操作',
+        '影响范围：可能写入当前项目的 .claude/.codex/.agents，以及本机 Claude/Codex 配置目录和插件缓存',
+        '风险评估：install/update/remove 会创建、覆盖或删除 xxtcoder 受管插件目录；pause/resume 会修改插件启用状态。',
+        '',
+        '请确认是否继续？[需要明确的"是"、"确认"、"继续"]',
+        '',
+        '本 CLI 使用 --yes 作为确认开关；请在命令末尾添加 --yes。',
+    ].join('\n'), 2);
+}
+async function exists(absPath) {
+    try {
+        await fs.stat(absPath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function isDirectory(absPath) {
+    try {
+        const st = await fs.stat(absPath);
+        return st.isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+async function readJsonLoose(absPath) {
+    const text = await fs.readFile(absPath, 'utf8');
+    return JSON.parse(text.replace(/^\uFEFF/, ''));
+}
+async function safeReadJsonLoose(absPath) {
+    if (!(await exists(absPath)))
+        return null;
+    try {
+        return await readJsonLoose(absPath);
+    }
+    catch {
+        return null;
+    }
+}
+async function writeJsonIfChanged(absPath, value) {
+    const next = `${JSON.stringify(value, null, 2)}\n`;
+    if (await exists(absPath)) {
+        const prev = (await fs.readFile(absPath, 'utf8')).replace(/^\uFEFF/, '');
+        if (prev === next)
+            return false;
+    }
+    await fs.mkdir(path.dirname(absPath), { recursive: true });
+    await fs.writeFile(absPath, next, 'utf8');
+    return true;
+}
+async function copyDir(srcAbs, dstAbs) {
+    await fs.mkdir(dstAbs, { recursive: true });
+    await fs.cp(srcAbs, dstAbs, { recursive: true, force: true });
+}
+async function removeIfExists(absPath) {
+    if (!(await exists(absPath)))
+        return false;
+    await fs.rm(absPath, { recursive: true, force: true });
+    return true;
+}
+async function moveDirIfExists(srcAbs, dstAbs, protectedRootAbs, label) {
+    assertInside(protectedRootAbs, srcAbs, `${label} source`);
+    assertInside(protectedRootAbs, dstAbs, `${label} target`);
+    if (!(await exists(srcAbs)))
+        return 'missing';
+    if (await exists(dstAbs))
+        return 'target-exists';
+    await fs.mkdir(path.dirname(dstAbs), { recursive: true });
+    await fs.rename(srcAbs, dstAbs);
+    return 'moved';
+}
+function assertInside(parentAbs, childAbs, label) {
+    const parent = path.resolve(parentAbs);
+    const child = path.resolve(childAbs);
+    const rel = path.relative(parent, child);
+    if (!rel || rel.startsWith('..') || path.isAbsolute(rel)) {
+        throw new BootstrapError(`${label} 不在允许目录内：${child}`, 3, { parent, child });
+    }
+}
+async function copyManagedDir(params) {
+    assertInside(params.protectedRootAbs, params.dstAbs, params.label);
+    const targetExists = await exists(params.dstAbs);
+    if (targetExists && !params.update) {
+        throw new BootstrapError(`${params.label} 已存在，新增模式不会覆盖：${params.dstAbs}；如需更新请执行 xxtcoder plugin update。`, 2);
+    }
+    const removedExisting = params.update ? await removeIfExists(params.dstAbs) : false;
+    await copyDir(params.srcAbs, params.dstAbs);
+    return { copied: true, removedExisting };
+}
+function normalizeBaseUrl(input, label) {
+    const raw = String(input ?? '').trim().replace(/\/+$/, '');
+    if (!raw)
+        throw new BootstrapError(`缺少 ${label}`, 2);
+    try {
+        const url = new URL(raw);
+        if (url.protocol !== 'http:' && url.protocol !== 'https:')
+            throw new Error('protocol');
+        return url.toString().replace(/\/+$/, '');
+    }
+    catch {
+        throw new BootstrapError(`${label} 必须是 http(s) URL：${raw}`, 2);
+    }
+}
+function parseClients(raw, fallback = DEFAULT_CLIENTS) {
+    const text = String(raw ?? '').trim();
+    const values = text ? text.split(',') : fallback;
+    const out = [];
+    for (const item of values) {
+        const value = String(item).trim();
+        if (!value)
+            continue;
+        if (value !== 'claude' && value !== 'codex')
+            throw new BootstrapError(`非法 client：${value}`, 2);
+        if (!out.includes(value))
+            out.push(value);
+    }
+    if (!out.length)
+        throw new BootstrapError('clients 不能为空', 2);
+    return out;
+}
+function parsePlugins(raw, fallback = DEFAULT_PLUGINS) {
+    const text = String(raw ?? '').trim();
+    const values = text ? text.split(',') : fallback;
+    const out = [];
+    for (const item of values) {
+        const value = String(item).trim();
+        if (!value)
+            continue;
+        if (value !== 'llmdoc' && value !== 'xxt-service-query' && value !== 'xxt-component' && value !== 'xxt-backend') {
+            throw new BootstrapError(`非法 plugin：${value}`, 2);
+        }
+        if (!out.includes(value))
+            out.push(value);
+    }
+    if (!out.length)
+        throw new BootstrapError('plugins 不能为空', 2);
+    return out;
+}
+function parseProfile(raw) {
+    const profile = String(raw ?? 'remote').trim();
+    if (profile === 'remote' || profile === 'hybrid')
+        return profile;
+    if (profile === 'local') {
+        throw new BootstrapError('最小客户端 bootstrap 暂只支持 remote/hybrid profile；local profile 需要完整服务端 CLI。', 2);
+    }
+    throw new BootstrapError(`非法 profile：${profile}`, 2);
+}
+function pluginFolder(kind) {
+    if (kind === 'llmdoc')
+        return 'llmdoc-plugin';
+    if (kind === 'xxt-component')
+        return 'xxt-component-plugin';
+    if (kind === 'xxt-backend')
+        return 'xxt-backend-plugin';
+    return 'xxt-service-query-plugin';
+}
+function pluginName(kind) {
+    if (kind === 'llmdoc')
+        return 'llmdoc';
+    if (kind === 'xxt-component')
+        return 'xxt-component-plugin';
+    if (kind === 'xxt-backend')
+        return 'xxt-backend-plugin';
+    return 'xxt-service-query-plugin';
+}
+function marketplaceName(kind, platform) {
+    if (platform === 'claude') {
+        if (kind === 'llmdoc')
+            return 'llmdoc-cc-plugin';
+        if (kind === 'xxt-component')
+            return 'xxt-component-plugin-local';
+        if (kind === 'xxt-backend')
+            return 'xxt-backend-local';
+        return 'xxt-service-query-local';
+    }
+    if (kind === 'llmdoc')
+        return 'local-personal';
+    if (kind === 'xxt-component')
+        return 'xxt-component-local';
+    if (kind === 'xxt-backend')
+        return 'xxt-backend-local';
+    return 'xxt-service-query-local';
+}
+function bootstrapCodexMarketplaceName(scope) {
+    return scope === 'project' ? DEFAULT_PROJECT_CODEX_MARKETPLACE : DEFAULT_GLOBAL_CODEX_MARKETPLACE;
+}
+function bootstrapCodexMarketplaceDisplayName(scope) {
+    return scope === 'project' ? 'XXT Coder Project Plugins' : 'XXT Coder Local Plugins';
+}
+function slugifyName(value) {
+    const slug = value
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 32);
+    return slug || 'project';
+}
+function shortHash(value) {
+    return createHash('sha1').update(value).digest('hex').slice(0, 8);
+}
+function defaultProjectCodexMarketplaceName(projectDir) {
+    const name = slugifyName(path.basename(path.resolve(projectDir)));
+    const hash = shortHash(path.resolve(projectDir).toLowerCase());
+    return `xxt-coder-${name}-${hash}`;
+}
+function codexEnv(params) {
+    return {
+        ...process.env,
+        CODEX_HOME: params.codexDir,
+        AGENTS_HOME: params.agentsDir,
+    };
+}
+function commandLineForLog(command, args) {
+    return [command, ...args].map((item) => item.includes(' ') ? `"${item}"` : item).join(' ');
+}
+async function runProcessJson(params) {
+    return new Promise((resolve, reject) => {
+        const commandLine = commandLineForLog(params.command, params.args);
+        const child = process.platform === 'win32'
+            ? spawn(process.env.ComSpec || 'cmd.exe', ['/d', '/s', '/c', params.command, ...params.args], {
+                cwd: params.cwd,
+                env: params.env,
+                windowsHide: true,
+                stdio: ['ignore', 'pipe', 'pipe'],
+            })
+            : spawn(params.command, params.args, {
+                cwd: params.cwd,
+                env: params.env,
+                windowsHide: true,
+                stdio: ['ignore', 'pipe', 'pipe'],
+            });
+        let stdout = '';
+        let stderr = '';
+        child.stdout.setEncoding('utf8');
+        child.stderr.setEncoding('utf8');
+        child.stdout.on('data', (chunk) => { stdout += chunk; });
+        child.stderr.on('data', (chunk) => { stderr += chunk; });
+        child.on('error', reject);
+        child.on('close', (status) => {
+            let parsed = null;
+            if (stdout.trim()) {
+                try {
+                    parsed = JSON.parse(stdout);
+                }
+                catch {
+                    parsed = null;
+                }
+            }
+            const ok = status === 0;
+            const result = {
+                ok,
+                status,
+                stdout,
+                stderr,
+                json: parsed,
+                commandLine,
+            };
+            if (!ok && !params.allowFailure) {
+                reject(new BootstrapError(`命令执行失败：${result.commandLine}\n${stderr || stdout}`, 3, result));
+                return;
+            }
+            resolve(result);
+        });
+    });
+}
+async function resolveCodexMarketplaceName(params) {
+    const data = await safeReadJsonLoose(params.marketplaceAbsPath);
+    const existingName = String(data?.name ?? '').trim();
+    const existingDisplayName = String(data?.interface?.displayName ?? '').trim();
+    const fallbackName = params.overrideName?.trim()
+        || (params.scope === 'project' && params.projectDir ? defaultProjectCodexMarketplaceName(params.projectDir) : bootstrapCodexMarketplaceName(params.scope));
+    return {
+        name: existingName || fallbackName,
+        displayName: existingDisplayName || bootstrapCodexMarketplaceDisplayName(params.scope),
+    };
+}
+async function ensureGitInfoExclude(projectRootAbs, relPaths) {
+    const gitDirAbs = path.join(projectRootAbs, '.git');
+    if (!(await isDirectory(gitDirAbs)))
+        return false;
+    const excludeAbs = path.join(gitDirAbs, 'info', 'exclude');
+    let text = (await exists(excludeAbs)) ? await fs.readFile(excludeAbs, 'utf8') : '';
+    const normalized = text.replace(/\r\n/g, '\n');
+    const lines = new Set(normalized.split('\n').map((line) => line.trim()).filter(Boolean));
+    let changed = false;
+    for (const rel of relPaths) {
+        const value = rel.replace(/\\/g, '/').replace(/^\/+/, '');
+        if (!lines.has(value)) {
+            text = `${text}${text.endsWith('\n') || !text ? '' : '\n'}${value}\n`;
+            lines.add(value);
+            changed = true;
+        }
+    }
+    if (!changed)
+        return false;
+    await fs.mkdir(path.dirname(excludeAbs), { recursive: true });
+    await fs.writeFile(excludeAbs, text, 'utf8');
+    return true;
+}
+async function resolveExistingAssetRoot(kind, platform) {
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    const candidates = [
+        path.resolve(here, 'client', pluginFolder(kind), platform),
+        path.resolve(here, '..', 'client', pluginFolder(kind), platform),
+        path.resolve(here, '..', '..', '..', 'client', pluginFolder(kind), platform),
+    ];
+    for (const candidate of candidates) {
+        const marker = platform === 'claude'
+            ? path.join(candidate, '.claude-plugin', 'plugin.json')
+            : path.join(candidate, '.codex-plugin', 'plugin.json');
+        if (await exists(marker))
+            return candidate;
+    }
+    throw new BootstrapError(`未找到 ${kind} ${platform} 插件资产`, 3, { candidates });
+}
+function serverCacheKey(serverUrl) {
+    return createHash('sha1').update(serverUrl).digest('hex').slice(0, 12);
+}
+function safePathSegment(value) {
+    return String(value || 'unknown').replace(/[^A-Za-z0-9._-]/g, '_');
+}
+async function sha256File(absPath) {
+    const buf = await fs.readFile(absPath);
+    return createHash('sha256').update(buf).digest('hex');
+}
+function findManifestAsset(manifest, kind, platform) {
+    const bundles = Array.isArray(manifest.assetBundles) ? manifest.assetBundles : [];
+    const item = bundles.find((bundle) => String(bundle?.id ?? '').trim() === kind);
+    const asset = item?.assets?.[platform];
+    const url = String(asset?.url ?? '').trim();
+    if (!url)
+        return null;
+    return {
+        url,
+        sha256: String(asset?.sha256 ?? '').trim() || undefined,
+        version: String(item?.version ?? '').trim() || undefined,
+    };
+}
+async function validatePluginAssetRoot(rootAbs, platform, label) {
+    const marker = platform === 'claude'
+        ? path.join(rootAbs, '.claude-plugin', 'plugin.json')
+        : path.join(rootAbs, '.codex-plugin', 'plugin.json');
+    if (!(await exists(marker))) {
+        throw new BootstrapError(`${label} 缺少插件 manifest：${marker}`, 3);
+    }
+}
+async function downloadFile(url, targetAbs) {
+    const response = await fetch(url);
+    if (!response.ok) {
+        throw new BootstrapError(`下载插件资产失败：HTTP ${response.status} ${url}`, 3);
+    }
+    const data = Buffer.from(await response.arrayBuffer());
+    await fs.mkdir(path.dirname(targetAbs), { recursive: true });
+    await fs.writeFile(targetAbs, data);
+}
+async function resolveAssetRoot(params) {
+    const asset = findManifestAsset(params.manifest, params.kind, params.platform);
+    if (!asset) {
+        return resolveExistingAssetRoot(params.kind, params.platform);
+    }
+    const version = safePathSegment(asset.version || '0.0.0');
+    const rootAbs = path.join(os.homedir(), '.xxtcoder', 'client-assets', serverCacheKey(params.serverUrl), pluginFolder(params.kind), params.platform, version);
+    const marker = params.platform === 'claude'
+        ? path.join(rootAbs, '.claude-plugin', 'plugin.json')
+        : path.join(rootAbs, '.codex-plugin', 'plugin.json');
+    if (!params.update && await exists(marker))
+        return rootAbs;
+    if (params.dryRun && await exists(marker))
+        return rootAbs;
+    const tgzAbs = path.join(path.dirname(rootAbs), `${version}.tgz`);
+    if (params.update || !(await exists(tgzAbs))) {
+        await downloadFile(asset.url, tgzAbs);
+    }
+    if (asset.sha256) {
+        const actual = await sha256File(tgzAbs);
+        if (actual !== asset.sha256) {
+            await removeIfExists(tgzAbs);
+            throw new BootstrapError(`插件资产校验失败：${params.kind}/${params.platform}`, 3, {
+                expected: asset.sha256,
+                actual,
+                url: asset.url,
+            });
+        }
+    }
+    await removeIfExists(rootAbs);
+    await fs.mkdir(rootAbs, { recursive: true });
+    await tar.x({ file: tgzAbs, cwd: rootAbs });
+    await validatePluginAssetRoot(rootAbs, params.platform, `${params.kind} ${params.platform} 插件资产`);
+    return rootAbs;
+}
+async function pluginVersion(srcRootAbs, platform) {
+    const manifestAbs = path.join(srcRootAbs, platform === 'claude' ? '.claude-plugin' : '.codex-plugin', 'plugin.json');
+    const manifest = await readJsonLoose(manifestAbs);
+    return String(manifest?.version ?? '').trim() || '0.0.0';
+}
+function escapeToml(value) {
+    return String(value).replace(/\\/g, '\\\\').replace(/"/g, '\\"');
+}
+function escapeRegExp(value) {
+    return String(value).replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+function upsertTomlSection(text, header, blockBody) {
+    const normalized = text.replace(/^\uFEFF/, '');
+    const headerRe = new RegExp(`^${escapeRegExp(header)}\\s*$`, 'm');
+    const match = headerRe.exec(normalized);
+    const block = `${header}\n${blockBody.trimEnd()}\n`;
+    if (!match) {
+        const prefix = normalized.trimEnd();
+        return `${prefix ? `${prefix}\n\n` : ''}${block}`;
+    }
+    const start = match.index;
+    const nextHeaderRel = normalized.slice(start + match[0].length).search(/\n\[/);
+    const end = nextHeaderRel >= 0 ? start + match[0].length + nextHeaderRel + 1 : normalized.length;
+    return `${normalized.slice(0, start)}${block}${normalized.slice(end)}`;
+}
+function tomlMcpServerSectionKeys(server) {
+    const bare = /^[A-Za-z0-9_-]+$/.test(server) ? `mcp_servers.${server}` : null;
+    const quoted = `mcp_servers."${escapeToml(server)}"`;
+    const key = bare ?? quoted;
+    return {
+        header: `[${key}]`,
+        key,
+        aliases: [key, ...(bare && bare !== quoted ? [quoted] : [])],
+    };
+}
+function removeTomlSections(text, predicate) {
+    const normalized = text.replace(/^\uFEFF/, '').replace(/\r\n/g, '\n');
+    const lines = normalized.split('\n');
+    const out = [];
+    let skip = false;
+    for (const line of lines) {
+        const match = /^\s*\[([^\]]+)\]\s*$/.exec(line);
+        if (match)
+            skip = predicate(match[1].trim());
+        if (!skip)
+            out.push(line);
+    }
+    return out.join('\n').trimEnd();
+}
+function upsertTomlMcpServer(text, server, blockBody) {
+    const section = tomlMcpServerSectionKeys(server);
+    const aliases = section.aliases;
+    const withoutOld = removeTomlSections(text, (key) => aliases.some((alias) => key === alias || key.startsWith(`${alias}.`)));
+    const block = `${section.header}\n${blockBody.trimEnd()}\n`;
+    return `${withoutOld ? `${withoutOld}\n\n` : ''}${block}`;
+}
+async function writeTextIfChanged(absPath, next) {
+    const prev = (await exists(absPath)) ? await fs.readFile(absPath, 'utf8') : '';
+    if (prev.replace(/^\uFEFF/, '') === next.replace(/^\uFEFF/, ''))
+        return false;
+    await fs.mkdir(path.dirname(absPath), { recursive: true });
+    await fs.writeFile(absPath, next, 'utf8');
+    return true;
+}
+function codexPluginSectionKey(pluginKey) {
+    return `plugins."${escapeToml(pluginKey)}"`;
+}
+function codexMarketplaceSectionAliases(marketplaceName) {
+    const bare = /^[A-Za-z0-9_-]+$/.test(marketplaceName) ? `marketplaces.${marketplaceName}` : null;
+    const quoted = `marketplaces."${escapeToml(marketplaceName)}"`;
+    return [quoted, ...(bare && bare !== quoted ? [bare] : [])];
+}
+async function setCodexPluginEnabled(configAbsPath, pluginKey, enabled) {
+    let text = (await exists(configAbsPath)) ? await fs.readFile(configAbsPath, 'utf8') : '';
+    text = upsertTomlSection(text, `[${codexPluginSectionKey(pluginKey)}]`, `enabled = ${enabled ? 'true' : 'false'}`);
+    return writeTextIfChanged(configAbsPath, text);
+}
+async function removeCodexPluginSections(configAbsPath, pluginKeys) {
+    if (!(await exists(configAbsPath)))
+        return false;
+    const keys = new Set(pluginKeys.map(codexPluginSectionKey));
+    const text = await fs.readFile(configAbsPath, 'utf8');
+    const next = removeTomlSections(text, (key) => keys.has(key));
+    return writeTextIfChanged(configAbsPath, next ? `${next}\n` : '');
+}
+async function removeCodexMarketplaceSection(configAbsPath, marketplaceName) {
+    if (!(await exists(configAbsPath)))
+        return false;
+    const aliases = codexMarketplaceSectionAliases(marketplaceName);
+    const text = await fs.readFile(configAbsPath, 'utf8');
+    const next = removeTomlSections(text, (key) => aliases.includes(key));
+    return writeTextIfChanged(configAbsPath, next ? `${next}\n` : '');
+}
+async function removeCodexMarketplacePlugins(marketplaceAbsPath, pluginNames) {
+    const data = await safeReadJsonLoose(marketplaceAbsPath);
+    if (!data)
+        return false;
+    const names = new Set(pluginNames);
+    const plugins = Array.isArray(data?.plugins) ? data.plugins : [];
+    const nextPlugins = plugins.filter((item) => !names.has(String(item?.name ?? '')));
+    if (nextPlugins.length === plugins.length)
+        return false;
+    return writeJsonIfChanged(marketplaceAbsPath, { ...data, plugins: nextPlugins });
+}
+async function writeCodexConfig(params) {
+    await fs.mkdir(path.dirname(params.configAbsPath), { recursive: true });
+    let text = (await exists(params.configAbsPath)) ? await fs.readFile(params.configAbsPath, 'utf8') : '';
+    for (const kind of params.plugins) {
+        const key = `${pluginName(kind)}@${params.marketplaceName}`;
+        text = upsertTomlSection(text, `[plugins."${escapeToml(key)}"]`, 'enabled = true');
+    }
+    for (const server of params.mcpServers) {
+        const section = tomlMcpServerSectionKeys(server);
+        const urlLine = `url = "${escapeToml(`${params.remoteMcpUrl.replace(/\/+$/, '')}/mcp/${server}`)}"`;
+        const body = params.auth.mode === 'env'
+            ? [urlLine, `bearer_token_env_var = "${escapeToml(params.auth.tokenEnv)}"`].join('\n')
+            : [
+                urlLine,
+                '',
+                `[${section.key}.http_headers]`,
+                `Authorization = "Bearer ${escapeToml(params.auth.token)}"`,
+            ].join('\n');
+        text = upsertTomlMcpServer(text, server, body);
+    }
+    const prev = (await exists(params.configAbsPath)) ? await fs.readFile(params.configAbsPath, 'utf8') : '';
+    if (prev.replace(/^\uFEFF/, '') === text.replace(/^\uFEFF/, ''))
+        return false;
+    await fs.writeFile(params.configAbsPath, text, 'utf8');
+    return true;
+}
+function claudeMcpJson(params) {
+    const base = params.remoteMcpUrl.replace(/\/+$/, '');
+    const servers = {};
+    for (const server of params.mcpServers) {
+        servers[server] = {
+            type: 'http',
+            url: `${base}/mcp/${server}`,
+            headers: {
+                Authorization: `Bearer ${params.token}`,
+            },
+        };
+    }
+    return `${JSON.stringify({ mcpServers: servers }, null, 2)}\n`;
+}
+function codexMcpJsonForAuth(params) {
+    const base = params.remoteMcpUrl.replace(/\/+$/, '');
+    const servers = {};
+    for (const server of params.mcpServers) {
+        servers[server] = params.auth.mode === 'env'
+            ? {
+                type: 'http',
+                url: `${base}/mcp/${server}`,
+                bearerTokenEnvVar: params.auth.tokenEnv,
+            }
+            : {
+                type: 'http',
+                url: `${base}/mcp/${server}`,
+                headers: {
+                    Authorization: `Bearer ${params.auth.token}`,
+                },
+            };
+    }
+    return `${JSON.stringify(servers, null, 2)}\n`;
+}
+async function codexMarketplaceHasPlugin(marketplaceAbsPath, name) {
+    const data = await safeReadJsonLoose(marketplaceAbsPath);
+    const plugins = Array.isArray(data?.plugins) ? data.plugins : [];
+    return plugins.some((item) => String(item?.name ?? '') === name);
+}
+async function claudeSettingsHasPlugin(settingsAbsPath, pluginSpec) {
+    const data = await safeReadJsonLoose(settingsAbsPath);
+    return data?.enabledPlugins?.[pluginSpec] === true;
+}
+async function claudeInstalledHasPlugin(installedAbsPath, pluginSpec) {
+    const data = await safeReadJsonLoose(installedAbsPath);
+    const list = data?.plugins?.[pluginSpec];
+    return Array.isArray(list) && list.length > 0;
+}
+async function codexConfigHasPlugin(configAbsPath, pluginKey) {
+    if (!(await exists(configAbsPath)))
+        return false;
+    const text = (await fs.readFile(configAbsPath, 'utf8')).replace(/^\uFEFF/, '');
+    const header = `\\[plugins\\."${escapeRegExp(pluginKey)}"\\]`;
+    return new RegExp(`^${header}\\s*$`, 'm').test(text);
+}
+async function codexConfigPluginEnabled(configAbsPath, pluginKey) {
+    if (!(await exists(configAbsPath)))
+        return null;
+    const text = (await fs.readFile(configAbsPath, 'utf8')).replace(/^\uFEFF/, '');
+    const key = codexPluginSectionKey(pluginKey);
+    const lines = text.replace(/\r\n/g, '\n').split('\n');
+    let inSection = false;
+    let seenSection = false;
+    for (const line of lines) {
+        const match = /^\s*\[([^\]]+)\]\s*$/.exec(line);
+        if (match) {
+            inSection = match[1].trim() === key;
+            if (inSection)
+                seenSection = true;
+            continue;
+        }
+        if (!inSection)
+            continue;
+        const enabledMatch = /^\s*enabled\s*=\s*(true|false)\s*$/i.exec(line);
+        if (enabledMatch)
+            return enabledMatch[1].toLowerCase() === 'true';
+    }
+    return seenSection ? null : null;
+}
+async function codexConfigHasMcpServer(configAbsPath, server) {
+    if (!(await exists(configAbsPath)))
+        return false;
+    const text = (await fs.readFile(configAbsPath, 'utf8')).replace(/^\uFEFF/, '');
+    return tomlMcpServerSectionKeys(server).aliases.some((key) => {
+        const header = `\\[${escapeRegExp(key)}\\]`;
+        return new RegExp(`^${header}\\s*$`, 'm').test(text);
+    });
+}
+async function assertNoCodexMcpConflicts(configAbsPath, servers, update) {
+    if (update)
+        return;
+    const conflicts = [];
+    for (const server of servers) {
+        if (await codexConfigHasMcpServer(configAbsPath, server))
+            conflicts.push(server);
+    }
+    if (conflicts.length) {
+        throw new BootstrapError(`Codex MCP 配置已存在，新增模式不会覆盖：${conflicts.join(', ')}；如需更新请执行 xxtcoder plugin update。`, 2, { configAbsPath, conflicts });
+    }
+}
+async function assertNoCodexPluginConflict(params) {
+    if (params.update)
+        return;
+    const conflicts = [];
+    if (await exists(params.pluginDirAbs))
+        conflicts.push(params.pluginDirAbs);
+    if (params.pluginCacheParentAbs && await exists(params.pluginCacheParentAbs))
+        conflicts.push(params.pluginCacheParentAbs);
+    if (await codexMarketplaceHasPlugin(params.marketplaceAbsPath, params.pluginNameValue)) {
+        conflicts.push(`${params.marketplaceAbsPath}:${params.pluginNameValue}`);
+    }
+    if (await codexConfigHasPlugin(params.configAbsPath, params.pluginKey))
+        conflicts.push(`${params.configAbsPath}:${params.pluginKey}`);
+    if (conflicts.length) {
+        throw new BootstrapError(`Codex 插件已存在，新增模式不会覆盖：${params.pluginKey}；如需更新请执行 xxtcoder plugin update。`, 2, { conflicts });
+    }
+}
+async function assertNoClaudePluginConflict(params) {
+    if (params.update)
+        return;
+    const conflicts = [];
+    if (params.pluginDirAbs && await exists(params.pluginDirAbs))
+        conflicts.push(params.pluginDirAbs);
+    if (params.pluginCacheParentAbs && await exists(params.pluginCacheParentAbs))
+        conflicts.push(params.pluginCacheParentAbs);
+    if (params.marketplaceDirAbs && await exists(params.marketplaceDirAbs))
+        conflicts.push(params.marketplaceDirAbs);
+    if (params.installedAbsPath && await claudeInstalledHasPlugin(params.installedAbsPath, params.pluginSpec)) {
+        conflicts.push(`${params.installedAbsPath}:${params.pluginSpec}`);
+    }
+    if (params.settingsAbsPath && await claudeSettingsHasPlugin(params.settingsAbsPath, params.pluginSpec)) {
+        conflicts.push(`${params.settingsAbsPath}:${params.pluginSpec}`);
+    }
+    if (conflicts.length) {
+        throw new BootstrapError(`Claude 插件已存在，新增模式不会覆盖：${params.pluginSpec}；如需更新请执行 xxtcoder plugin update。`, 2, { conflicts });
+    }
+}
+async function installClaudePlugin(params) {
+    const srcRootAbs = params.sourceRootAbs;
+    const version = await pluginVersion(srcRootAbs, 'claude');
+    const name = pluginName(params.kind);
+    const marketplace = marketplaceName(params.kind, 'claude');
+    const spec = `${name}@${marketplace}`;
+    const cacheParentDir = path.join(params.claudeDir, 'plugins', 'cache', marketplace, name);
+    const cacheDir = path.join(cacheParentDir, version);
+    const marketplaceDir = path.join(params.claudeDir, 'plugins', 'marketplaces', marketplace);
+    const installedAbs = path.join(params.claudeDir, 'plugins', 'installed_plugins.json');
+    const knownAbs = path.join(params.claudeDir, 'plugins', 'known_marketplaces.json');
+    const settingsAbs = path.join(params.claudeDir, 'settings.json');
+    const wrote = {
+        pluginCacheCopied: false,
+        marketplaceCopied: false,
+        removedExisting: false,
+        mcpJsonWritten: false,
+        installedPluginsUpdated: false,
+        knownMarketplacesUpdated: false,
+        settingsUpdated: false,
+    };
+    if (!params.dryRun) {
+        await assertNoClaudePluginConflict({
+            pluginSpec: spec,
+            pluginCacheParentAbs: cacheParentDir,
+            marketplaceDirAbs: marketplaceDir,
+            installedAbsPath: installedAbs,
+            settingsAbsPath: settingsAbs,
+            update: params.update,
+        });
+        if (params.update) {
+            assertInside(params.claudeDir, cacheParentDir, 'Claude plugin cache parent');
+            wrote.removedExisting = (await removeIfExists(cacheParentDir)) || wrote.removedExisting;
+        }
+        const cacheCopy = await copyManagedDir({
+            srcAbs: srcRootAbs,
+            dstAbs: cacheDir,
+            update: params.update,
+            protectedRootAbs: params.claudeDir,
+            label: 'Claude plugin cache',
+        });
+        const marketplaceCopy = await copyManagedDir({
+            srcAbs: srcRootAbs,
+            dstAbs: marketplaceDir,
+            update: params.update,
+            protectedRootAbs: params.claudeDir,
+            label: 'Claude marketplace copy',
+        });
+        wrote.pluginCacheCopied = cacheCopy.copied;
+        wrote.marketplaceCopied = marketplaceCopy.copied;
+        wrote.removedExisting = wrote.removedExisting || cacheCopy.removedExisting || marketplaceCopy.removedExisting;
+        await fs.writeFile(path.join(cacheDir, '.mcp.json'), params.mcpJsonText, 'utf8');
+        await fs.writeFile(path.join(marketplaceDir, '.mcp.json'), params.mcpJsonText, 'utf8');
+        wrote.mcpJsonWritten = true;
+        const installed = (await exists(installedAbs)) ? await readJsonLoose(installedAbs) : { version: 2, plugins: {} };
+        const plugins = installed?.plugins && typeof installed.plugins === 'object' && !Array.isArray(installed.plugins) ? installed.plugins : {};
+        const now = new Date().toISOString();
+        const list = Array.isArray(plugins[spec]) ? plugins[spec] : [];
+        const prevUser = list.find((item) => String(item?.scope ?? 'user') === 'user');
+        const other = list.filter((item) => String(item?.scope ?? 'user') !== 'user');
+        plugins[spec] = [
+            ...other,
+            {
+                scope: 'user',
+                installPath: cacheDir,
+                version,
+                installedAt: String(prevUser?.installedAt ?? '').trim() || now,
+                lastUpdated: now,
+            },
+        ];
+        wrote.installedPluginsUpdated = await writeJsonIfChanged(installedAbs, { version: 2, plugins });
+        const known = (await exists(knownAbs)) ? await readJsonLoose(knownAbs) : {};
+        known[marketplace] = {
+            source: { source: 'directory', path: marketplaceDir },
+            installLocation: marketplaceDir,
+            lastUpdated: now,
+        };
+        wrote.knownMarketplacesUpdated = await writeJsonIfChanged(knownAbs, known);
+        const settings = (await exists(settingsAbs)) ? await readJsonLoose(settingsAbs) : {};
+        const enabledPlugins = settings?.enabledPlugins && typeof settings.enabledPlugins === 'object' ? { ...settings.enabledPlugins } : {};
+        enabledPlugins[spec] = true;
+        const extraKnownMarketplaces = settings?.extraKnownMarketplaces && typeof settings.extraKnownMarketplaces === 'object'
+            ? { ...settings.extraKnownMarketplaces }
+            : {};
+        extraKnownMarketplaces[marketplace] = { source: { source: 'directory', path: marketplaceDir } };
+        wrote.settingsUpdated = await writeJsonIfChanged(settingsAbs, { ...settings, extraKnownMarketplaces, enabledPlugins });
+    }
+    return { kind: params.kind, platform: 'claude', sourceRootAbs: srcRootAbs, version, target: cacheDir, wrote };
+}
+async function upsertCodexMarketplace(params) {
+    const data = (await exists(params.marketplaceAbsPath))
+        ? await readJsonLoose(params.marketplaceAbsPath)
+        : { name: params.marketplaceName, interface: { displayName: params.marketplaceDisplayName }, plugins: [] };
+    const plugins = Array.isArray(data?.plugins) ? data.plugins.slice() : [];
+    const entry = {
+        name: params.pluginName,
+        source: { source: 'local', path: params.pluginPathRel },
+        policy: { installation: 'AVAILABLE', authentication: 'ON_INSTALL' },
+        category: 'Productivity',
+    };
+    const index = plugins.findIndex((item) => String(item?.name ?? '') === params.pluginName);
+    if (index >= 0)
+        plugins[index] = entry;
+    else
+        plugins.push(entry);
+    return writeJsonIfChanged(params.marketplaceAbsPath, {
+        ...data,
+        name: data?.name || params.marketplaceName,
+        interface: data?.interface || { displayName: params.marketplaceDisplayName },
+        plugins,
+    });
+}
+async function installCodexPlugin(params) {
+    const srcRootAbs = params.sourceRootAbs;
+    const version = await pluginVersion(srcRootAbs, 'codex');
+    const name = pluginName(params.kind);
+    const pluginDir = path.join(params.codexDir, 'plugins', name);
+    const cacheParentDir = path.join(params.codexDir, 'plugins', 'cache', params.marketplaceName, name);
+    const cacheDir = path.join(cacheParentDir, version);
+    const marketplaceAbs = path.join(params.agentsDir, 'plugins', 'marketplace.json');
+    const configAbs = path.join(params.codexDir, 'config.toml');
+    const pluginKey = `${name}@${params.marketplaceName}`;
+    const wrote = {
+        pluginFilesCopied: false,
+        pluginCacheCopied: false,
+        removedExisting: false,
+        mcpJsonWritten: false,
+        marketplaceUpdated: false,
+    };
+    if (!params.dryRun) {
+        await assertNoCodexPluginConflict({
+            pluginNameValue: name,
+            pluginKey,
+            pluginDirAbs: pluginDir,
+            pluginCacheParentAbs: cacheParentDir,
+            marketplaceAbsPath: marketplaceAbs,
+            configAbsPath: configAbs,
+            update: params.update,
+        });
+        if (params.update) {
+            assertInside(params.codexDir, cacheParentDir, 'Codex plugin cache parent');
+            wrote.removedExisting = (await removeIfExists(cacheParentDir)) || wrote.removedExisting;
+        }
+        const pluginCopy = await copyManagedDir({
+            srcAbs: srcRootAbs,
+            dstAbs: pluginDir,
+            update: params.update,
+            protectedRootAbs: params.codexDir,
+            label: 'Codex plugin working copy',
+        });
+        const cacheCopy = await copyManagedDir({
+            srcAbs: srcRootAbs,
+            dstAbs: cacheDir,
+            update: params.update,
+            protectedRootAbs: params.codexDir,
+            label: 'Codex plugin cache',
+        });
+        wrote.pluginFilesCopied = pluginCopy.copied;
+        wrote.pluginCacheCopied = cacheCopy.copied;
+        wrote.removedExisting = wrote.removedExisting || pluginCopy.removedExisting || cacheCopy.removedExisting;
+        await fs.writeFile(path.join(pluginDir, '.mcp.json'), params.mcpJsonText, 'utf8');
+        await fs.writeFile(path.join(cacheDir, '.mcp.json'), params.mcpJsonText, 'utf8');
+        wrote.mcpJsonWritten = true;
+        wrote.marketplaceUpdated = await upsertCodexMarketplace({
+            marketplaceAbsPath: marketplaceAbs,
+            marketplaceName: params.marketplaceName,
+            marketplaceDisplayName: params.marketplaceDisplayName,
+            pluginName: name,
+            pluginPathRel: `./.codex/plugins/${name}`,
+        });
+    }
+    return { kind: params.kind, platform: 'codex', sourceRootAbs: srcRootAbs, version, marketplace: params.marketplaceName, target: pluginDir, wrote };
+}
+async function installClaudeProjectPlugin(params) {
+    const srcRootAbs = params.sourceRootAbs;
+    const version = await pluginVersion(srcRootAbs, 'claude');
+    const name = pluginName(params.kind);
+    const targetDir = path.join(params.projectDir, '.claude', 'skills', name);
+    const pausedDir = path.join(params.projectDir, '.claude', '.xxtcoder-paused', 'skills', name);
+    const spec = `${name}@skills-dir`;
+    const mcpRel = path.join('.claude', 'skills', name, '.mcp.json');
+    const wrote = {
+        pluginFilesCopied: false,
+        removedExisting: false,
+        mcpJsonWritten: false,
+        gitInfoExcludeUpdated: false,
+    };
+    if (!params.dryRun) {
+        if (!params.update && await exists(pausedDir)) {
+            throw new BootstrapError(`Claude 插件已暂停存在，新增模式不会覆盖：${pausedDir}；如需更新请执行 xxtcoder plugin update。`, 2);
+        }
+        if (params.update) {
+            assertInside(params.projectDir, pausedDir, 'Claude paused project plugin update');
+            wrote.removedExisting = (await removeIfExists(pausedDir)) || wrote.removedExisting;
+        }
+        await assertNoClaudePluginConflict({
+            pluginSpec: spec,
+            pluginDirAbs: targetDir,
+            update: params.update,
+        });
+        const copied = await copyManagedDir({
+            srcAbs: srcRootAbs,
+            dstAbs: targetDir,
+            update: params.update,
+            protectedRootAbs: params.projectDir,
+            label: 'Claude project plugin',
+        });
+        wrote.pluginFilesCopied = copied.copied;
+        wrote.removedExisting = copied.removedExisting;
+        await fs.writeFile(path.join(targetDir, '.mcp.json'), params.mcpJsonText, 'utf8');
+        wrote.mcpJsonWritten = true;
+        wrote.gitInfoExcludeUpdated = await ensureGitInfoExclude(params.projectDir, [mcpRel]);
+    }
+    return { kind: params.kind, platform: 'claude', scope: 'project', sourceRootAbs: srcRootAbs, version, target: targetDir, wrote };
+}
+async function installCodexProjectPlugin(params) {
+    const srcRootAbs = params.sourceRootAbs;
+    const version = await pluginVersion(srcRootAbs, 'codex');
+    const name = pluginName(params.kind);
+    const pluginDir = path.join(params.projectDir, '.codex', 'plugins', name);
+    const marketplaceAbs = path.join(params.projectDir, '.agents', 'plugins', 'marketplace.json');
+    const configAbs = path.join(params.projectDir, '.codex', 'config.toml');
+    const pluginKey = `${name}@${params.marketplaceName}`;
+    const mcpRel = path.join('.codex', 'plugins', name, '.mcp.json');
+    const wrote = {
+        pluginFilesCopied: false,
+        removedExisting: false,
+        mcpJsonWritten: false,
+        marketplaceUpdated: false,
+        gitInfoExcludeUpdated: false,
+    };
+    if (!params.dryRun) {
+        await assertNoCodexPluginConflict({
+            pluginNameValue: name,
+            pluginKey,
+            pluginDirAbs: pluginDir,
+            marketplaceAbsPath: marketplaceAbs,
+            configAbsPath: configAbs,
+            update: params.update,
+        });
+        const copied = await copyManagedDir({
+            srcAbs: srcRootAbs,
+            dstAbs: pluginDir,
+            update: params.update,
+            protectedRootAbs: params.projectDir,
+            label: 'Codex project plugin',
+        });
+        wrote.pluginFilesCopied = copied.copied;
+        wrote.removedExisting = copied.removedExisting;
+        await fs.writeFile(path.join(pluginDir, '.mcp.json'), params.mcpJsonText, 'utf8');
+        wrote.mcpJsonWritten = true;
+        wrote.marketplaceUpdated = await upsertCodexMarketplace({
+            marketplaceAbsPath: marketplaceAbs,
+            marketplaceName: params.marketplaceName,
+            marketplaceDisplayName: params.marketplaceDisplayName,
+            pluginName: name,
+            pluginPathRel: `./.codex/plugins/${name}`,
+        });
+        wrote.gitInfoExcludeUpdated = await ensureGitInfoExclude(params.projectDir, [mcpRel, '.codex/config.toml']);
+    }
+    return {
+        kind: params.kind,
+        platform: 'codex',
+        scope: 'project',
+        sourceRootAbs: srcRootAbs,
+        version,
+        marketplace: params.marketplaceName,
+        target: pluginDir,
+        wrote,
+    };
+}
+async function codexCliMarketplaceAdd(params) {
+    if (params.dryRun) {
+        return { skipped: true, commandLine: commandLineForLog('codex', ['plugin', 'marketplace', 'add', params.projectDir, '--json']) };
+    }
+    await fs.mkdir(params.codexDir, { recursive: true });
+    await fs.mkdir(params.agentsDir, { recursive: true });
+    const result = await runProcessJson({
+        command: 'codex',
+        args: ['plugin', 'marketplace', 'add', params.projectDir, '--json'],
+        cwd: params.projectDir,
+        env: codexEnv(params),
+    });
+    return { skipped: false, ...result };
+}
+async function codexCliPluginAdd(params) {
+    if (params.dryRun) {
+        return { skipped: true, commandLine: commandLineForLog('codex', ['plugin', 'add', params.pluginKey, '--json']) };
+    }
+    await fs.mkdir(params.codexDir, { recursive: true });
+    await fs.mkdir(params.agentsDir, { recursive: true });
+    const result = await runProcessJson({
+        command: 'codex',
+        args: ['plugin', 'add', params.pluginKey, '--json'],
+        cwd: params.projectDir,
+        env: codexEnv(params),
+    });
+    return { skipped: false, ...result };
+}
+async function codexCliPluginRemove(params) {
+    if (params.dryRun) {
+        return { skipped: true, commandLine: commandLineForLog('codex', ['plugin', 'remove', params.pluginKey, '--json']) };
+    }
+    await fs.mkdir(params.codexDir, { recursive: true });
+    await fs.mkdir(params.agentsDir, { recursive: true });
+    const result = await runProcessJson({
+        command: 'codex',
+        args: ['plugin', 'remove', params.pluginKey, '--json'],
+        cwd: params.projectDir,
+        env: codexEnv(params),
+        allowFailure: true,
+    });
+    return { skipped: false, ...result };
+}
+async function codexCliMarketplaceRemove(params) {
+    if (params.dryRun) {
+        return { skipped: true, commandLine: commandLineForLog('codex', ['plugin', 'marketplace', 'remove', params.marketplaceName, '--json']) };
+    }
+    await fs.mkdir(params.codexDir, { recursive: true });
+    await fs.mkdir(params.agentsDir, { recursive: true });
+    const result = await runProcessJson({
+        command: 'codex',
+        args: ['plugin', 'marketplace', 'remove', params.marketplaceName, '--json'],
+        cwd: params.projectDir,
+        env: codexEnv(params),
+        allowFailure: true,
+    });
+    return { skipped: false, ...result };
+}
+async function codexCliPluginList(params) {
+    await fs.mkdir(params.codexDir, { recursive: true });
+    await fs.mkdir(params.agentsDir, { recursive: true });
+    return runProcessJson({
+        command: 'codex',
+        args: ['plugin', 'list', '--available', '--json', '--marketplace', params.marketplaceName],
+        cwd: params.projectDir,
+        env: codexEnv(params),
+        allowFailure: true,
+    });
+}
+function codexListPluginStatus(data, pluginKey) {
+    const installed = Array.isArray(data?.installed) ? data.installed : [];
+    const available = Array.isArray(data?.available) ? data.available : [];
+    const item = [...installed, ...available].find((entry) => String(entry?.pluginId ?? '') === pluginKey);
+    if (!item)
+        return { installed: false, enabled: false, found: false };
+    return {
+        installed: Boolean(item.installed),
+        enabled: Boolean(item.enabled),
+        found: true,
+    };
+}
+async function activateCodexProjectPlugins(params) {
+    const actions = [];
+    actions.push({
+        action: 'codex-marketplace-add',
+        marketplace: params.marketplaceName,
+        result: await codexCliMarketplaceAdd(params),
+    });
+    for (const kind of params.plugins) {
+        const pluginKey = `${pluginName(kind)}@${params.marketplaceName}`;
+        if (params.reinstall) {
+            actions.push({
+                action: 'codex-plugin-remove-before-add',
+                pluginKey,
+                result: await codexCliPluginRemove({ ...params, pluginKey }),
+            });
+        }
+        actions.push({
+            action: 'codex-plugin-add',
+            pluginKey,
+            result: await codexCliPluginAdd({ ...params, pluginKey }),
+        });
+    }
+    if (!params.dryRun) {
+        const list = await codexCliPluginList(params);
+        for (const kind of params.plugins) {
+            const pluginKey = `${pluginName(kind)}@${params.marketplaceName}`;
+            const status = codexListPluginStatus(list.json, pluginKey);
+            if (!status.installed || !status.enabled) {
+                throw new BootstrapError(`Codex 插件安装后未处于 enabled 状态：${pluginKey}`, 3, { list, status });
+            }
+        }
+        actions.push({ action: 'codex-plugin-list-verify', marketplace: params.marketplaceName, result: list });
+    }
+    return actions;
+}
+async function pluginKindsFromProjectMarketplace(projectDir) {
+    const data = await safeReadJsonLoose(path.join(projectDir, '.agents', 'plugins', 'marketplace.json'));
+    const plugins = Array.isArray(data?.plugins) ? data.plugins : [];
+    const kinds = [];
+    for (const item of plugins) {
+        const name = String(item?.name ?? '').trim();
+        const kind = DEFAULT_PLUGINS.find((candidate) => pluginName(candidate) === name);
+        if (kind && !kinds.includes(kind))
+            kinds.push(kind);
+    }
+    return kinds.length ? kinds : null;
+}
+async function resolveLifecyclePlugins(raw, projectDir, fallback = DEFAULT_PLUGINS) {
+    const text = String(raw ?? '').trim();
+    if (text)
+        return parsePlugins(text, fallback);
+    return (await pluginKindsFromProjectMarketplace(projectDir)) ?? fallback;
+}
+async function removeClaudeProjectPlugins(params) {
+    const results = [];
+    for (const kind of params.plugins) {
+        const name = pluginName(kind);
+        const target = path.join(params.projectDir, '.claude', 'skills', name);
+        const paused = path.join(params.projectDir, '.claude', '.xxtcoder-paused', 'skills', name);
+        assertInside(path.join(params.projectDir, '.claude', 'skills'), target, 'Claude project plugin remove');
+        assertInside(path.join(params.projectDir, '.claude', '.xxtcoder-paused', 'skills'), paused, 'Claude paused project plugin remove');
+        const removed = params.dryRun ? false : await removeIfExists(target);
+        const pausedRemoved = params.dryRun ? false : await removeIfExists(paused);
+        results.push({ platform: 'claude', action: 'remove-project-plugin', kind, target, paused, removed, pausedRemoved });
+    }
+    return results;
+}
+async function setClaudeProjectPluginsEnabled(params) {
+    const results = [];
+    for (const kind of params.plugins) {
+        const name = pluginName(kind);
+        const active = path.join(params.projectDir, '.claude', 'skills', name);
+        const paused = path.join(params.projectDir, '.claude', '.xxtcoder-paused', 'skills', name);
+        const result = params.dryRun
+            ? 'dry-run'
+            : params.enabled
+                ? await moveDirIfExists(paused, active, params.projectDir, 'Claude project plugin resume')
+                : await moveDirIfExists(active, paused, params.projectDir, 'Claude project plugin pause');
+        results.push({
+            platform: 'claude',
+            action: params.enabled ? 'resume-project-plugin' : 'pause-project-plugin',
+            kind,
+            active,
+            paused,
+            result,
+        });
+    }
+    return results;
+}
+async function removeCodexProjectPlugins(params) {
+    const results = [];
+    const pluginNames = params.plugins.map(pluginName);
+    for (const kind of params.plugins) {
+        const name = pluginName(kind);
+        const pluginKey = `${name}@${params.marketplaceName}`;
+        const target = path.join(params.projectDir, '.codex', 'plugins', name);
+        assertInside(path.join(params.projectDir, '.codex', 'plugins'), target, 'Codex project plugin remove');
+        const cliRemove = await codexCliPluginRemove({ ...params, pluginKey });
+        const removed = params.dryRun ? false : await removeIfExists(target);
+        results.push({ platform: 'codex', action: 'remove-project-plugin', kind, pluginKey, target, removed, cliRemove });
+    }
+    const marketplaceAbs = path.join(params.projectDir, '.agents', 'plugins', 'marketplace.json');
+    const configAbs = path.join(params.projectDir, '.codex', 'config.toml');
+    const marketplaceUpdated = params.dryRun ? false : await removeCodexMarketplacePlugins(marketplaceAbs, pluginNames);
+    const projectConfigUpdated = params.dryRun ? false : await removeCodexPluginSections(configAbs, pluginNames.map((name) => `${name}@${params.marketplaceName}`));
+    const userConfigAbs = path.join(params.codexDir, 'config.toml');
+    const marketplaceRemove = await codexCliMarketplaceRemove(params);
+    const userMarketplaceSectionRemoved = params.dryRun ? false : await removeCodexMarketplaceSection(userConfigAbs, params.marketplaceName);
+    results.push({
+        platform: 'codex',
+        action: 'remove-project-marketplace',
+        marketplace: params.marketplaceName,
+        marketplaceAbs,
+        marketplaceUpdated,
+        projectConfigUpdated,
+        userMarketplaceSectionRemoved,
+        marketplaceRemove,
+    });
+    return results;
+}
+async function setCodexProjectPluginsEnabled(params) {
+    const results = [];
+    const userConfigAbs = path.join(params.codexDir, 'config.toml');
+    const projectConfigAbs = path.join(params.projectDir, '.codex', 'config.toml');
+    if (params.enabled && !params.dryRun) {
+        const list = await codexCliPluginList(params);
+        const missing = params.plugins.filter((kind) => {
+            const pluginKey = `${pluginName(kind)}@${params.marketplaceName}`;
+            return !codexListPluginStatus(list.json, pluginKey).installed;
+        });
+        if (missing.length) {
+            results.push(...await activateCodexProjectPlugins({ ...params, plugins: missing }));
+        }
+    }
+    for (const kind of params.plugins) {
+        const pluginKey = `${pluginName(kind)}@${params.marketplaceName}`;
+        const userConfigUpdated = params.dryRun ? false : await setCodexPluginEnabled(userConfigAbs, pluginKey, params.enabled);
+        const projectConfigUpdated = params.dryRun ? false : await setCodexPluginEnabled(projectConfigAbs, pluginKey, params.enabled);
+        results.push({
+            platform: 'codex',
+            action: params.enabled ? 'resume-plugin' : 'pause-plugin',
+            kind,
+            pluginKey,
+            userConfigAbs,
+            projectConfigAbs,
+            userConfigUpdated,
+            projectConfigUpdated,
+        });
+    }
+    return results;
+}
+async function setCodexGlobalPluginsEnabled(params) {
+    const results = [];
+    const configAbs = path.join(params.codexDir, 'config.toml');
+    for (const kind of params.plugins) {
+        const pluginKey = `${pluginName(kind)}@${params.marketplaceName}`;
+        const updated = params.dryRun ? false : await setCodexPluginEnabled(configAbs, pluginKey, params.enabled);
+        results.push({
+            platform: 'codex',
+            action: params.enabled ? 'resume-plugin' : 'pause-plugin',
+            scope: 'global',
+            kind,
+            pluginKey,
+            configAbs,
+            updated,
+        });
+    }
+    return results;
+}
+async function setClaudeGlobalPluginsEnabled(params) {
+    const settingsAbs = path.join(params.claudeDir, 'settings.json');
+    const settings = (await exists(settingsAbs)) ? await readJsonLoose(settingsAbs) : {};
+    const enabledPlugins = settings?.enabledPlugins && typeof settings.enabledPlugins === 'object' ? { ...settings.enabledPlugins } : {};
+    const results = [];
+    for (const kind of params.plugins) {
+        const spec = `${pluginName(kind)}@${marketplaceName(kind, 'claude')}`;
+        enabledPlugins[spec] = params.enabled;
+        results.push({ platform: 'claude', action: params.enabled ? 'resume-plugin' : 'pause-plugin', scope: 'global', kind, spec, settingsAbs });
+    }
+    const updated = params.dryRun ? false : await writeJsonIfChanged(settingsAbs, { ...settings, enabledPlugins });
+    return results.map((item) => ({ ...item, updated }));
+}
+async function removeClaudeGlobalPlugins(params) {
+    const results = [];
+    const installedAbs = path.join(params.claudeDir, 'plugins', 'installed_plugins.json');
+    const knownAbs = path.join(params.claudeDir, 'plugins', 'known_marketplaces.json');
+    const settingsAbs = path.join(params.claudeDir, 'settings.json');
+    const installed = (await exists(installedAbs)) ? await readJsonLoose(installedAbs) : { version: 2, plugins: {} };
+    const installedPlugins = installed?.plugins && typeof installed.plugins === 'object' && !Array.isArray(installed.plugins) ? { ...installed.plugins } : {};
+    const known = (await exists(knownAbs)) ? await readJsonLoose(knownAbs) : {};
+    const settings = (await exists(settingsAbs)) ? await readJsonLoose(settingsAbs) : {};
+    const enabledPlugins = settings?.enabledPlugins && typeof settings.enabledPlugins === 'object' ? { ...settings.enabledPlugins } : {};
+    const extraKnownMarketplaces = settings?.extraKnownMarketplaces && typeof settings.extraKnownMarketplaces === 'object'
+        ? { ...settings.extraKnownMarketplaces }
+        : {};
+    for (const kind of params.plugins) {
+        const name = pluginName(kind);
+        const marketplace = marketplaceName(kind, 'claude');
+        const spec = `${name}@${marketplace}`;
+        const cacheParentDir = path.join(params.claudeDir, 'plugins', 'cache', marketplace, name);
+        const marketplaceDir = path.join(params.claudeDir, 'plugins', 'marketplaces', marketplace);
+        assertInside(params.claudeDir, cacheParentDir, 'Claude global plugin cache remove');
+        assertInside(params.claudeDir, marketplaceDir, 'Claude global marketplace remove');
+        const cacheRemoved = params.dryRun ? false : await removeIfExists(cacheParentDir);
+        const marketplaceRemoved = params.dryRun ? false : await removeIfExists(marketplaceDir);
+        delete installedPlugins[spec];
+        delete known[marketplace];
+        delete enabledPlugins[spec];
+        delete extraKnownMarketplaces[marketplace];
+        results.push({ platform: 'claude', action: 'remove-global-plugin', kind, spec, cacheParentDir, marketplaceDir, cacheRemoved, marketplaceRemoved });
+    }
+    const installedUpdated = params.dryRun ? false : await writeJsonIfChanged(installedAbs, { version: 2, plugins: installedPlugins });
+    const knownUpdated = params.dryRun ? false : await writeJsonIfChanged(knownAbs, known);
+    const settingsUpdated = params.dryRun ? false : await writeJsonIfChanged(settingsAbs, { ...settings, enabledPlugins, extraKnownMarketplaces });
+    return results.map((item) => ({ ...item, installedUpdated, knownUpdated, settingsUpdated }));
+}
+async function removeCodexGlobalPlugins(params) {
+    const results = [];
+    const marketplaceAbs = path.join(params.agentsDir, 'plugins', 'marketplace.json');
+    const configAbs = path.join(params.codexDir, 'config.toml');
+    const pluginNames = params.plugins.map(pluginName);
+    for (const kind of params.plugins) {
+        const name = pluginName(kind);
+        const pluginKey = `${name}@${params.marketplaceName}`;
+        const pluginDir = path.join(params.codexDir, 'plugins', name);
+        const cacheParentDir = path.join(params.codexDir, 'plugins', 'cache', params.marketplaceName, name);
+        assertInside(params.codexDir, pluginDir, 'Codex global plugin remove');
+        assertInside(params.codexDir, cacheParentDir, 'Codex global plugin cache remove');
+        const cliRemove = await codexCliPluginRemove({ ...params, pluginKey });
+        const pluginDirRemoved = params.dryRun ? false : await removeIfExists(pluginDir);
+        const cacheRemoved = params.dryRun ? false : await removeIfExists(cacheParentDir);
+        results.push({ platform: 'codex', action: 'remove-global-plugin', kind, pluginKey, pluginDir, cacheParentDir, pluginDirRemoved, cacheRemoved, cliRemove });
+    }
+    const marketplaceUpdated = params.dryRun ? false : await removeCodexMarketplacePlugins(marketplaceAbs, pluginNames);
+    const configUpdated = params.dryRun ? false : await removeCodexPluginSections(configAbs, pluginNames.map((name) => `${name}@${params.marketplaceName}`));
+    results.push({ platform: 'codex', action: 'remove-global-marketplace-entries', marketplaceAbs, configAbs, marketplaceUpdated, configUpdated });
+    return results;
+}
+async function getProjectLifecycleStatus(params) {
+    const codexList = params.clients.includes('codex') ? await codexCliPluginList(params) : null;
+    const userConfigAbs = path.join(params.codexDir, 'config.toml');
+    const projectConfigAbs = path.join(params.projectDir, '.codex', 'config.toml');
+    const items = [];
+    for (const kind of params.plugins) {
+        const name = pluginName(kind);
+        if (params.clients.includes('claude')) {
+            const claudeDir = path.join(params.projectDir, '.claude', 'skills', name);
+            const pausedDir = path.join(params.projectDir, '.claude', '.xxtcoder-paused', 'skills', name);
+            items.push({
+                platform: 'claude',
+                kind,
+                plugin: name,
+                projectFilesPresent: await exists(path.join(claudeDir, '.claude-plugin', 'plugin.json')),
+                pausedFilesPresent: await exists(path.join(pausedDir, '.claude-plugin', 'plugin.json')),
+                mcpConfigPresent: await exists(path.join(claudeDir, '.mcp.json')),
+                target: claudeDir,
+                pausedTarget: pausedDir,
+            });
+        }
+        if (params.clients.includes('codex')) {
+            const pluginKey = `${name}@${params.marketplaceName}`;
+            const codexDir = path.join(params.projectDir, '.codex', 'plugins', name);
+            const cliStatus = codexList ? codexListPluginStatus(codexList.json, pluginKey) : { found: false, installed: false, enabled: false };
+            items.push({
+                platform: 'codex',
+                kind,
+                plugin: name,
+                pluginKey,
+                marketplace: params.marketplaceName,
+                projectFilesPresent: await exists(path.join(codexDir, '.codex-plugin', 'plugin.json')),
+                mcpConfigPresent: await exists(path.join(codexDir, '.mcp.json')),
+                marketplaceEntryPresent: await codexMarketplaceHasPlugin(path.join(params.projectDir, '.agents', 'plugins', 'marketplace.json'), name),
+                userConfigEnabled: await codexConfigPluginEnabled(userConfigAbs, pluginKey),
+                projectConfigEnabled: await codexConfigPluginEnabled(projectConfigAbs, pluginKey),
+                cli: cliStatus,
+                target: codexDir,
+            });
+        }
+    }
+    return {
+        projectDir: params.projectDir,
+        codexDir: params.codexDir,
+        agentsDir: params.agentsDir,
+        marketplace: params.marketplaceName,
+        items,
+    };
+}
+async function getGlobalLifecycleStatus(params) {
+    const codexList = params.clients.includes('codex') ? await codexCliPluginList({
+        marketplaceName: params.marketplaceName,
+        projectDir: params.projectDir,
+        codexDir: params.codexDir,
+        agentsDir: params.agentsDir,
+    }) : null;
+    const codexConfigAbs = path.join(params.codexDir, 'config.toml');
+    const claudeSettingsAbs = path.join(params.claudeDir, 'settings.json');
+    const claudeSettings = await safeReadJsonLoose(claudeSettingsAbs);
+    const items = [];
+    for (const kind of params.plugins) {
+        const name = pluginName(kind);
+        if (params.clients.includes('claude')) {
+            const marketplace = marketplaceName(kind, 'claude');
+            const spec = `${name}@${marketplace}`;
+            const cacheParent = path.join(params.claudeDir, 'plugins', 'cache', marketplace, name);
+            items.push({
+                platform: 'claude',
+                kind,
+                plugin: name,
+                pluginKey: spec,
+                cachePresent: await exists(cacheParent),
+                enabled: claudeSettings?.enabledPlugins?.[spec] === true,
+                target: cacheParent,
+            });
+        }
+        if (params.clients.includes('codex')) {
+            const pluginKey = `${name}@${params.marketplaceName}`;
+            const cacheParent = path.join(params.codexDir, 'plugins', 'cache', params.marketplaceName, name);
+            items.push({
+                platform: 'codex',
+                kind,
+                plugin: name,
+                pluginKey,
+                marketplace: params.marketplaceName,
+                cachePresent: await exists(cacheParent),
+                configEnabled: await codexConfigPluginEnabled(codexConfigAbs, pluginKey),
+                cli: codexList ? codexListPluginStatus(codexList.json, pluginKey) : { found: false, installed: false, enabled: false },
+                target: cacheParent,
+            });
+        }
+    }
+    return {
+        claudeDir: params.claudeDir,
+        codexDir: params.codexDir,
+        agentsDir: params.agentsDir,
+        marketplace: params.marketplaceName,
+        items,
+    };
+}
+async function preflightBootstrapWrites(params) {
+    if (params.update)
+        return;
+    if (params.clients.includes('claude')) {
+        for (const kind of params.plugins) {
+            const name = pluginName(kind);
+            if (params.scope === 'project') {
+                await assertNoClaudePluginConflict({
+                    pluginSpec: `${name}@skills-dir`,
+                    pluginDirAbs: path.join(params.projectDir, '.claude', 'skills', name),
+                    update: false,
+                });
+            }
+            else {
+                const marketplace = marketplaceName(kind, 'claude');
+                await assertNoClaudePluginConflict({
+                    pluginSpec: `${name}@${marketplace}`,
+                    pluginCacheParentAbs: path.join(params.claudeDir, 'plugins', 'cache', marketplace, name),
+                    marketplaceDirAbs: path.join(params.claudeDir, 'plugins', 'marketplaces', marketplace),
+                    installedAbsPath: path.join(params.claudeDir, 'plugins', 'installed_plugins.json'),
+                    settingsAbsPath: path.join(params.claudeDir, 'settings.json'),
+                    update: false,
+                });
+            }
+        }
+    }
+    if (params.clients.includes('codex')) {
+        const marketplaceAbs = params.scope === 'project'
+            ? path.join(params.projectDir, '.agents', 'plugins', 'marketplace.json')
+            : path.join(params.agentsDir, 'plugins', 'marketplace.json');
+        const configAbs = params.scope === 'project'
+            ? path.join(params.projectDir, '.codex', 'config.toml')
+            : path.join(params.codexDir, 'config.toml');
+        await assertNoCodexMcpConflicts(configAbs, params.mcpServers, false);
+        for (const kind of params.plugins) {
+            const name = pluginName(kind);
+            const pluginKey = `${name}@${params.codexMarketplaceName}`;
+            await assertNoCodexPluginConflict({
+                pluginNameValue: name,
+                pluginKey,
+                pluginDirAbs: params.scope === 'project'
+                    ? path.join(params.projectDir, '.codex', 'plugins', name)
+                    : path.join(params.codexDir, 'plugins', name),
+                pluginCacheParentAbs: params.scope === 'project'
+                    ? undefined
+                    : path.join(params.codexDir, 'plugins', 'cache', params.codexMarketplaceName, name),
+                marketplaceAbsPath: marketplaceAbs,
+                configAbsPath: configAbs,
+                update: false,
+            });
+        }
+    }
+}
+async function fetchManifest(serverUrl) {
+    const response = await fetch(`${serverUrl}/v1/client-access/manifest`);
+    const data = await response.json().catch(() => null);
+    if (!response.ok || !data?.ok) {
+        const message = data?.error?.message || `获取客户端接入 manifest 失败：HTTP ${response.status}`;
+        throw new BootstrapError(message, 3, data?.error?.details);
+    }
+    return data.data;
+}
+async function fetchBootstrapConfig(serverUrl) {
+    const response = await fetch(`${serverUrl}/v1/client-access/bootstrap-config`);
+    const data = await response.json().catch(() => null);
+    if (!response.ok || !data?.ok) {
+        const message = data?.error?.message || `获取客户端 bootstrap 配置失败：HTTP ${response.status}`;
+        throw new BootstrapError(message, 3, data?.error?.details);
+    }
+    return data.data;
+}
+async function checkRemoteMcp(remoteMcpUrl) {
+    try {
+        const [health, ready] = await Promise.all([
+            fetch(`${remoteMcpUrl.replace(/\/+$/, '')}/health`).then((r) => r.ok).catch(() => false),
+            fetch(`${remoteMcpUrl.replace(/\/+$/, '')}/ready`).then((r) => r.ok).catch(() => false),
+        ]);
+        return { health, ready, error: null };
+    }
+    catch (e) {
+        return { health: false, ready: false, error: e instanceof Error ? e.message : String(e) };
+    }
+}
+async function runBootstrap(options, globals) {
+    const serverUrl = normalizeBaseUrl(options.serverUrl, '--server-url');
+    const manifest = await fetchManifest(serverUrl);
+    const manifestPlugins = parsePlugins(manifest.plugins, DEFAULT_PLUGINS);
+    const manifestClients = parseClients(manifest.clients, DEFAULT_CLIENTS);
+    const clients = parseClients(options.clients, manifestClients);
+    const plugins = parsePlugins(options.plugins, manifestPlugins);
+    const profile = parseProfile(options.profile || manifest.defaultProfile || 'remote');
+    const scope = options.global ? 'global' : 'project';
+    const update = Boolean(options.update);
+    const projectDir = path.resolve(String(options.projectDir ?? process.cwd()));
+    const tokenEnv = String(options.tokenEnv ?? '').trim();
+    const remoteMcpUrl = normalizeBaseUrl(options.mcpUrl || manifest.remoteMcpUrl, '--mcp-url 或 manifest.remoteMcpUrl');
+    const dryRun = Boolean(options.dryRun);
+    const json = Boolean(options.json || globals?.json);
+    if (!dryRun)
+        requireYes(options.yes);
+    let resolvedAuth;
+    if (tokenEnv) {
+        resolvedAuth = { mode: 'env', tokenEnv, token: String(process.env[tokenEnv] ?? '').trim() };
+    }
+    else if (dryRun) {
+        resolvedAuth = { mode: 'inline', token: '<server-managed-token>' };
+    }
+    else {
+        const bootstrapConfig = await fetchBootstrapConfig(serverUrl);
+        const token = String(bootstrapConfig.token?.value ?? '').trim();
+        if (!token)
+            throw new BootstrapError('服务端未配置 Remote MCP Auth Token，无法执行隐藏 bootstrap。', 2);
+        resolvedAuth = { mode: 'inline', token };
+    }
+    if (!dryRun && resolvedAuth.mode === 'env' && clients.includes('claude') && !resolvedAuth.token) {
+        throw new BootstrapError(`环境变量 ${resolvedAuth.tokenEnv} 未设置，无法为 Claude .mcp.json 写入 Authorization header`, 2);
+    }
+    if (scope === 'project' && !(await isDirectory(projectDir))) {
+        throw new BootstrapError(`--project-dir 不是有效目录：${projectDir}`, 2);
+    }
+    const claudeDir = path.resolve(String(options.claudeDir ?? process.env.CLAUDE_DIR ?? path.join(os.homedir(), '.claude')));
+    const codexDir = path.resolve(String(options.codexDir ?? process.env.CODEX_HOME ?? path.join(os.homedir(), '.codex')));
+    const agentsDir = path.resolve(String(options.agentsDir ?? process.env.AGENTS_HOME ?? path.join(os.homedir(), '.agents')));
+    const mcpServers = Array.isArray(manifest.mcpServers) && manifest.mcpServers.length
+        ? manifest.mcpServers.map((item) => String(item).trim()).filter(Boolean)
+        : DEFAULT_MCP_SERVERS;
+    const codexMarketplaceAbs = scope === 'project'
+        ? path.join(projectDir, '.agents', 'plugins', 'marketplace.json')
+        : path.join(agentsDir, 'plugins', 'marketplace.json');
+    const codexMarketplace = await resolveCodexMarketplaceName({
+        marketplaceAbsPath: codexMarketplaceAbs,
+        scope,
+        projectDir,
+        overrideName: options.marketplace,
+    });
+    const plan = {
+        serverUrl,
+        remoteMcpUrl,
+        profile,
+        scope,
+        update,
+        authMode: resolvedAuth.mode,
+        tokenEnv: resolvedAuth.mode === 'env' ? resolvedAuth.tokenEnv : null,
+        clients,
+        plugins,
+        targets: {
+            projectDir: scope === 'project' ? projectDir : null,
+            claudeDir: scope === 'global' && clients.includes('claude') ? claudeDir : null,
+            codexDir: scope === 'global' && clients.includes('codex') ? codexDir : null,
+            agentsDir: scope === 'global' && clients.includes('codex') ? agentsDir : null,
+            codexMarketplace: clients.includes('codex') ? codexMarketplaceAbs : null,
+        },
+    };
+    const results = [];
+    const claudeToken = resolvedAuth.mode === 'inline' ? resolvedAuth.token : (resolvedAuth.token || '<token-from-env>');
+    const claudeMcp = claudeMcpJson({ remoteMcpUrl, token: claudeToken, mcpServers });
+    const codexMcp = codexMcpJsonForAuth({ remoteMcpUrl, auth: resolvedAuth, mcpServers });
+    if (!dryRun) {
+        await preflightBootstrapWrites({
+            scope,
+            clients,
+            plugins,
+            update,
+            projectDir,
+            claudeDir,
+            codexDir,
+            agentsDir,
+            codexMarketplaceName: codexMarketplace.name,
+            mcpServers,
+        });
+    }
+    const assetRoots = new Map();
+    for (const kind of plugins) {
+        for (const platform of clients) {
+            const sourceRootAbs = await resolveAssetRoot({
+                manifest,
+                serverUrl,
+                kind,
+                platform,
+                update,
+                dryRun,
+            });
+            assetRoots.set(`${kind}:${platform}`, sourceRootAbs);
+        }
+    }
+    const assetRootFor = (kind, platform) => {
+        const value = assetRoots.get(`${kind}:${platform}`);
+        if (!value)
+            throw new BootstrapError(`插件资产未准备：${kind}/${platform}`, 3);
+        return value;
+    };
+    if (clients.includes('claude')) {
+        for (const kind of plugins) {
+            results.push(scope === 'project'
+                ? await installClaudeProjectPlugin({ kind, sourceRootAbs: assetRootFor(kind, 'claude'), projectDir, mcpJsonText: claudeMcp, dryRun, update })
+                : await installClaudePlugin({ kind, sourceRootAbs: assetRootFor(kind, 'claude'), claudeDir, mcpJsonText: claudeMcp, dryRun, update }));
+        }
+    }
+    if (clients.includes('codex')) {
+        const codexConfigAbs = scope === 'project' ? path.join(projectDir, '.codex', 'config.toml') : path.join(codexDir, 'config.toml');
+        for (const kind of plugins) {
+            results.push(scope === 'project'
+                ? await installCodexProjectPlugin({
+                    kind,
+                    sourceRootAbs: assetRootFor(kind, 'codex'),
+                    projectDir,
+                    marketplaceName: codexMarketplace.name,
+                    marketplaceDisplayName: codexMarketplace.displayName,
+                    mcpJsonText: codexMcp,
+                    dryRun,
+                    update,
+                })
+                : await installCodexPlugin({
+                    kind,
+                    sourceRootAbs: assetRootFor(kind, 'codex'),
+                    codexDir,
+                    agentsDir,
+                    marketplaceName: codexMarketplace.name,
+                    marketplaceDisplayName: codexMarketplace.displayName,
+                    mcpJsonText: codexMcp,
+                    dryRun,
+                    update,
+                }));
+        }
+        if (!dryRun) {
+            const updated = await writeCodexConfig({
+                configAbsPath: codexConfigAbs,
+                plugins,
+                marketplaceName: codexMarketplace.name,
+                remoteMcpUrl,
+                auth: resolvedAuth,
+                mcpServers,
+            });
+            const gitInfoExcludeUpdated = scope === 'project'
+                ? await ensureGitInfoExclude(projectDir, ['.codex/config.toml'])
+                : false;
+            results.push({ platform: 'codex', kind: 'config', scope, marketplace: codexMarketplace.name, target: codexConfigAbs, wrote: { configUpdated: updated, gitInfoExcludeUpdated } });
+        }
+        else {
+            results.push({ platform: 'codex', kind: 'config', scope, marketplace: codexMarketplace.name, target: codexConfigAbs, wrote: { configUpdated: false, gitInfoExcludeUpdated: false } });
+        }
+        if (scope === 'project') {
+            results.push({
+                platform: 'codex',
+                kind: 'activation',
+                scope,
+                marketplace: codexMarketplace.name,
+                actions: await activateCodexProjectPlugins({
+                    projectDir,
+                    codexDir,
+                    agentsDir,
+                    marketplaceName: codexMarketplace.name,
+                    plugins,
+                    dryRun,
+                    reinstall: update,
+                }),
+            });
+        }
+    }
+    const remoteCheck = dryRun ? null : await checkRemoteMcp(remoteMcpUrl);
+    const output = {
+        ok: true,
+        dryRun,
+        manifest: {
+            serverVersion: manifest.serverVersion ?? null,
+            recommendedSuite: manifest.recommendedSuite ?? null,
+            warnings: manifest.warnings ?? [],
+        },
+        plan,
+        results,
+        checks: {
+            remoteMcp: remoteCheck,
+        },
+    };
+    if (json)
+        printJson(output);
+    else
+        printHuman(output);
+}
+async function resolveLifecycleContext(options, globals, requireServer) {
+    const projectDir = path.resolve(String(options.projectDir ?? process.cwd()));
+    const scope = options.global ? 'global' : 'project';
+    const dryRun = Boolean(options.dryRun);
+    const json = Boolean(options.json || globals?.json);
+    const claudeDir = path.resolve(String(options.claudeDir ?? process.env.CLAUDE_DIR ?? path.join(os.homedir(), '.claude')));
+    const codexDir = path.resolve(String(options.codexDir ?? process.env.CODEX_HOME ?? path.join(os.homedir(), '.codex')));
+    const agentsDir = path.resolve(String(options.agentsDir ?? process.env.AGENTS_HOME ?? path.join(os.homedir(), '.agents')));
+    if (scope === 'project' && !(await isDirectory(projectDir))) {
+        throw new BootstrapError(`--project-dir 不是有效目录：${projectDir}`, 2);
+    }
+    let manifest = null;
+    let serverUrl = null;
+    if (requireServer) {
+        serverUrl = normalizeBaseUrl(options.serverUrl, '--server-url');
+        manifest = await fetchManifest(serverUrl);
+    }
+    const manifestClients = manifest ? parseClients(manifest.clients, DEFAULT_CLIENTS) : DEFAULT_CLIENTS;
+    const clients = parseClients(options.clients, manifestClients);
+    const manifestPlugins = manifest ? parsePlugins(manifest.plugins, DEFAULT_PLUGINS) : DEFAULT_PLUGINS;
+    const plugins = requireServer
+        ? parsePlugins(options.plugins, manifestPlugins)
+        : await resolveLifecyclePlugins(options.plugins, projectDir, manifestPlugins);
+    const codexMarketplaceAbs = scope === 'project'
+        ? path.join(projectDir, '.agents', 'plugins', 'marketplace.json')
+        : path.join(agentsDir, 'plugins', 'marketplace.json');
+    const codexMarketplace = await resolveCodexMarketplaceName({
+        marketplaceAbsPath: codexMarketplaceAbs,
+        scope,
+        projectDir,
+        overrideName: options.marketplace,
+    });
+    return {
+        projectDir,
+        scope,
+        dryRun,
+        json,
+        claudeDir,
+        codexDir,
+        agentsDir,
+        clients,
+        plugins,
+        codexMarketplace,
+        codexMarketplaceAbs,
+        manifest,
+        serverUrl,
+    };
+}
+async function runPluginInstall(options, globals, update) {
+    const merged = { ...options, update };
+    await runBootstrap(merged, globals);
+}
+async function runPluginStatus(options, globals) {
+    const ctx = await resolveLifecycleContext(options, globals, false);
+    const status = ctx.scope === 'project'
+        ? await getProjectLifecycleStatus({
+            projectDir: ctx.projectDir,
+            codexDir: ctx.codexDir,
+            agentsDir: ctx.agentsDir,
+            marketplaceName: ctx.codexMarketplace.name,
+            plugins: ctx.plugins,
+            clients: ctx.clients,
+        })
+        : await getGlobalLifecycleStatus({
+            claudeDir: ctx.claudeDir,
+            codexDir: ctx.codexDir,
+            agentsDir: ctx.agentsDir,
+            projectDir: ctx.projectDir,
+            marketplaceName: ctx.codexMarketplace.name,
+            plugins: ctx.plugins,
+            clients: ctx.clients,
+        });
+    const output = { ok: true, action: 'status', scope: ctx.scope, status };
+    if (ctx.json)
+        printJson(output);
+    else
+        printHuman(output);
+}
+async function runPluginPauseResume(options, globals, enabled) {
+    const ctx = await resolveLifecycleContext(options, globals, false);
+    if (!ctx.dryRun)
+        requireYes(options.yes);
+    const results = [];
+    if (ctx.scope === 'project') {
+        if (ctx.clients.includes('claude')) {
+            results.push(...await setClaudeProjectPluginsEnabled({
+                projectDir: ctx.projectDir,
+                plugins: ctx.plugins,
+                enabled,
+                dryRun: ctx.dryRun,
+            }));
+        }
+        if (ctx.clients.includes('codex')) {
+            results.push(...await setCodexProjectPluginsEnabled({
+                projectDir: ctx.projectDir,
+                codexDir: ctx.codexDir,
+                agentsDir: ctx.agentsDir,
+                marketplaceName: ctx.codexMarketplace.name,
+                plugins: ctx.plugins,
+                enabled,
+                dryRun: ctx.dryRun,
+            }));
+        }
+    }
+    else {
+        if (ctx.clients.includes('claude')) {
+            results.push(...await setClaudeGlobalPluginsEnabled({
+                claudeDir: ctx.claudeDir,
+                plugins: ctx.plugins,
+                enabled,
+                dryRun: ctx.dryRun,
+            }));
+        }
+        if (ctx.clients.includes('codex')) {
+            results.push(...await setCodexGlobalPluginsEnabled({
+                codexDir: ctx.codexDir,
+                marketplaceName: ctx.codexMarketplace.name,
+                plugins: ctx.plugins,
+                enabled,
+                dryRun: ctx.dryRun,
+            }));
+        }
+    }
+    const output = { ok: true, action: enabled ? 'resume' : 'pause', dryRun: ctx.dryRun, scope: ctx.scope, marketplace: ctx.codexMarketplace.name, results };
+    if (ctx.json)
+        printJson(output);
+    else
+        printHuman(output);
+}
+async function runPluginRemove(options, globals) {
+    const ctx = await resolveLifecycleContext(options, globals, false);
+    if (!ctx.dryRun)
+        requireYes(options.yes);
+    const results = [];
+    if (ctx.scope === 'project') {
+        if (ctx.clients.includes('claude')) {
+            results.push(...await removeClaudeProjectPlugins({
+                projectDir: ctx.projectDir,
+                plugins: ctx.plugins,
+                dryRun: ctx.dryRun,
+            }));
+        }
+        if (ctx.clients.includes('codex')) {
+            results.push(...await removeCodexProjectPlugins({
+                projectDir: ctx.projectDir,
+                codexDir: ctx.codexDir,
+                agentsDir: ctx.agentsDir,
+                marketplaceName: ctx.codexMarketplace.name,
+                plugins: ctx.plugins,
+                dryRun: ctx.dryRun,
+            }));
+        }
+    }
+    else {
+        if (ctx.clients.includes('claude')) {
+            results.push(...await removeClaudeGlobalPlugins({
+                claudeDir: ctx.claudeDir,
+                plugins: ctx.plugins,
+                dryRun: ctx.dryRun,
+            }));
+        }
+        if (ctx.clients.includes('codex')) {
+            results.push(...await removeCodexGlobalPlugins({
+                projectDir: ctx.projectDir,
+                codexDir: ctx.codexDir,
+                agentsDir: ctx.agentsDir,
+                marketplaceName: ctx.codexMarketplace.name,
+                plugins: ctx.plugins,
+                dryRun: ctx.dryRun,
+            }));
+        }
+    }
+    const output = { ok: true, action: 'remove', dryRun: ctx.dryRun, scope: ctx.scope, marketplace: ctx.codexMarketplace.name, results };
+    if (ctx.json)
+        printJson(output);
+    else
+        printHuman(output);
+}
+function addInstallOptions(command) {
+    return command
+        .requiredOption('--server-url <url>', 'XXT Coder WebUI 地址，例如 http://xxt-coder:8100')
+        .option('--clients <list>', '客户端列表：claude,codex（默认使用服务端推荐）')
+        .option('--profile <remote|hybrid>', 'MCP profile（默认 remote）')
+        .option('--token-env <name>', '高级用法：改为让 Codex 运行时从环境变量读取 Remote MCP token')
+        .option('--mcp-url <url>', '覆盖服务端 manifest 中的 Remote MCP URL')
+        .option('--plugins <list>', '插件列表：llmdoc,xxt-service-query,xxt-component,xxt-backend')
+        .option('--project-dir <path>', '项目级安装目录（默认当前执行目录）')
+        .option('-g, --global', '安装到用户级 Claude/Codex 配置目录（默认不写全局）', false)
+        .option('--marketplace <name>', '覆盖 Codex marketplace 名称（默认项目级自动生成稳定名称）')
+        .option('--claude-dir <path>', '全局模式 Claude 配置目录（默认 ~/.claude；可指向临时目录验证）')
+        .option('--codex-dir <path>', 'Codex 配置目录（默认 ~/.codex；可指向临时目录验证）')
+        .option('--agents-dir <path>', 'Agents 配置目录（默认 ~/.agents；可指向临时目录验证）')
+        .option('--dry-run', '只输出计划，不写入文件', false)
+        .option('--yes', '确认写入本机客户端配置', false)
+        .option('--json', '输出 JSON', false);
+}
+function addLifecycleOptions(command) {
+    return command
+        .option('--clients <list>', '客户端列表：claude,codex（默认 claude,codex）')
+        .option('--plugins <list>', '插件列表：llmdoc,xxt-service-query,xxt-component,xxt-backend；默认从项目 marketplace 识别，识别不到则使用全部')
+        .option('--project-dir <path>', '项目级安装目录（默认当前执行目录）')
+        .option('-g, --global', '操作用户级 Claude/Codex 配置目录（默认项目级）', false)
+        .option('--marketplace <name>', '覆盖 Codex marketplace 名称')
+        .option('--claude-dir <path>', '全局模式 Claude 配置目录（默认 ~/.claude；可指向临时目录验证）')
+        .option('--codex-dir <path>', 'Codex 配置目录（默认 ~/.codex；可指向临时目录验证）')
+        .option('--agents-dir <path>', 'Agents 配置目录（默认 ~/.agents；可指向临时目录验证）')
+        .option('--dry-run', '只输出计划，不写入文件', false)
+        .option('--yes', '确认写入本机客户端配置', false)
+        .option('--json', '输出 JSON', false);
+}
+async function runCommandWithJsonError(options, globals, fn) {
+    try {
+        await fn();
+    }
+    catch (e) {
+        if (options.json || globals.json) {
+            printJson({
+                ok: false,
+                error: {
+                    message: e instanceof Error ? e.message : String(e),
+                    details: e instanceof BootstrapError ? e.details : undefined,
+                },
+            });
+        }
+        throw e;
+    }
+}
+export function registerBootstrapCommands(program) {
+    const plugin = program
+        .command('plugin')
+        .description('管理 XXT Coder 客户端插件生命周期');
+    addInstallOptions(plugin
+        .command('install')
+        .description('安装并启用 Claude/Codex 插件和 Remote MCP 配置'))
+        .action(async function (options) {
+        const globals = this.optsWithGlobals?.() ?? {};
+        await runCommandWithJsonError(options, globals, () => runPluginInstall(options, globals, false));
+    });
+    addInstallOptions(plugin
+        .command('update')
+        .description('更新并重新启用 Claude/Codex 插件和 Remote MCP 配置'))
+        .action(async function (options) {
+        const globals = this.optsWithGlobals?.() ?? {};
+        await runCommandWithJsonError(options, globals, () => runPluginInstall(options, globals, true));
+    });
+    addLifecycleOptions(plugin
+        .command('status')
+        .description('查看 Claude/Codex 插件真实安装与启用状态'))
+        .action(async function (options) {
+        const globals = this.optsWithGlobals?.() ?? {};
+        await runCommandWithJsonError(options, globals, () => runPluginStatus(options, globals));
+    });
+    addLifecycleOptions(plugin
+        .command('pause')
+        .description('暂停 Claude/Codex 插件，不删除受管插件文件'))
+        .action(async function (options) {
+        const globals = this.optsWithGlobals?.() ?? {};
+        await runCommandWithJsonError(options, globals, () => runPluginPauseResume(options, globals, false));
+    });
+    addLifecycleOptions(plugin
+        .command('resume')
+        .description('恢复 Claude/Codex 插件；Codex cache 缺失时会重新安装'))
+        .action(async function (options) {
+        const globals = this.optsWithGlobals?.() ?? {};
+        await runCommandWithJsonError(options, globals, () => runPluginPauseResume(options, globals, true));
+    });
+    addLifecycleOptions(plugin
+        .command('remove')
+        .description('移除 Claude/Codex 插件注册、缓存和 xxtcoder 受管项目文件'))
+        .action(async function (options) {
+        const globals = this.optsWithGlobals?.() ?? {};
+        await runCommandWithJsonError(options, globals, () => runPluginRemove(options, globals));
+    });
+    program
+        .command('bootstrap')
+        .description('兼容入口：等价于 xxtcoder plugin install')
+        .requiredOption('--server-url <url>', 'XXT Coder WebUI 地址，例如 http://xxt-coder:8100')
+        .option('--clients <list>', '客户端列表：claude,codex（默认使用服务端推荐）')
+        .option('--profile <remote|hybrid>', 'MCP profile（默认 remote）')
+        .option('--token-env <name>', '高级用法：改为让 Codex 运行时从环境变量读取 Remote MCP token')
+        .option('--mcp-url <url>', '覆盖服务端 manifest 中的 Remote MCP URL')
+        .option('--plugins <list>', '插件列表：llmdoc,xxt-service-query,xxt-component,xxt-backend')
+        .option('--project-dir <path>', '项目级安装目录（默认当前执行目录）')
+        .option('-g, --global', '安装到用户级 Claude/Codex 配置目录（默认不写全局）', false)
+        .option('--marketplace <name>', '覆盖 Codex marketplace 名称（默认项目级自动生成稳定名称）')
+        .option('--update', '更新已有安装；不加时发现同名插件或 MCP 配置会报错', false)
+        .option('--claude-dir <path>', '全局模式 Claude 配置目录（默认 ~/.claude；可指向临时目录验证）')
+        .option('--codex-dir <path>', '全局模式 Codex 配置目录（默认 ~/.codex；可指向临时目录验证）')
+        .option('--agents-dir <path>', '全局模式 Agents 配置目录（默认 ~/.agents；可指向临时目录验证）')
+        .option('--dry-run', '只输出计划，不写入文件', false)
+        .option('--yes', '确认写入本机客户端配置', false)
+        .option('--json', '输出 JSON', false)
+        .action(async function (options) {
+        const globals = this.optsWithGlobals?.() ?? {};
+        try {
+            await runBootstrap(options, globals);
+        }
+        catch (e) {
+            if (options.json || globals.json) {
+                printJson({
+                    ok: false,
+                    error: {
+                        message: e instanceof Error ? e.message : String(e),
+                        details: e instanceof BootstrapError ? e.details : undefined,
+                    },
+                });
+            }
+            throw e;
+        }
+    });
+}