fix(plugin-host): gate execution and close lifecycle gaps

Author: limityan

.github/workflows/cli-package-manual.yml

@@ -127,6 +127,16 @@ jobs:
         with:
           ref: ${{ needs.prepare.outputs.checkout_ref }}
 
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.14"
+
+      - name: Build plugin Host resources
+        run: |
+          bun install --cwd src/apps/extension-host --frozen-lockfile
+          bun run --cwd src/apps/extension-host build
+
       - name: Install Linux system dependencies
         if: runner.os == 'Linux'
         shell: bash

.github/workflows/cli-package.yml

@@ -105,6 +105,16 @@ jobs:
         with:
           ref: ${{ needs.prepare.outputs.checkout_ref }}
 
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.14"
+
+      - name: Build plugin Host resources
+        run: |
+          bun install --cwd src/apps/extension-host --frozen-lockfile
+          bun run --cwd src/apps/extension-host build
+
       - name: Setup Rust toolchain
         uses: dtolnay/rust-toolchain@stable
         with:

.github/workflows/linux-binaries.yml

@@ -57,6 +57,16 @@ jobs:
         with:
           ref: ${{ inputs.checkout_ref }}
 
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.14"
+
+      - name: Build plugin Host resources
+        run: |
+          bun install --cwd src/apps/extension-host --frozen-lockfile
+          bun run --cwd src/apps/extension-host build
+
       - name: Install Linux system dependencies
         shell: bash
         run: |

.github/workflows/nightly.yml

@@ -106,6 +106,11 @@ jobs:
     steps:
       - uses: actions/checkout@v5
 
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.14"
+
       - name: Install Linux system dependencies (Tauri bundler)
         if: runner.os == 'Linux'
         shell: bash
@@ -167,6 +172,11 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      - name: Build plugin Host resources
+        run: |
+          bun install --cwd src/apps/extension-host --frozen-lockfile
+          bun run --cwd src/apps/extension-host build
+
       - name: Generate web API bindings
         run: pnpm --dir src/web-ui run gen:types
 

Cargo.lock

@@ -26,8 +26,9 @@ workspace、project、session、turn、run 和 working directory 是不同事实
 决定 Plugin Host 进程数量。只有某项并发或权威状态确实要求单一实例时，负责该状态的归属模块才能把 workspace
 或其他身份加入自己的状态键，并说明清理与迁移语义。
 
-Rust 主应用不执行第三方 JS/TS，也没有 Plugin Host 对象。它通过 `PluginRuntimeClient`、生态适配器和 services 层
-现有脚本执行实现向子进程发送类型明确的请求，并把结果交回 Tool、Config、Permission、Session、Event、TUI 等现有归属模块。
+当前产品运行路径不执行第三方 package 插件。仓库中的 Bun Host、RPC 和 OpenCode 适配代码是协议与进程隔离基础，
+由 fixture/mock 验证；Desktop 与 CLI 的自动启动策略保持关闭。在 contribution 归属、执行许可和故障恢复接入既有
+Tool、Config、Permission、Session、Event、TUI 等模块之前，不得把这套基础设施视为已交付的插件执行能力。
 
 ## 2. 职责
 
@@ -256,6 +257,7 @@ flowchart LR
   subgraph Current["current implementation"]
     Manifest["Plugin manifest"] --> Static["Static preview"]
     Script["Standalone .js tool"] --> Worker["Dedicated worker"]
+    Fixture["Protocol fixtures"] --> Foundation["Bun Host foundation"]
   end
 
   subgraph Planned["planned runtime"]
@@ -272,6 +274,8 @@ flowchart LR
 当前受管 `bitfun.plugin.json` 链路仍只有来源校验、启停记录、CLI 诊断和 custom tool 静态预览，不执行 package
 plugin、Hook、完整 Client 或 TUI 插件入口。与其独立的 standalone `.js` Tool 端到端能力当前由
 `ScriptToolRuntime` 为每个脚本启动 Node worker；这是现有窄实现事实，不是目标 package-plugin 的进程模型。
+Bun Host 基础设施仅覆盖模块加载、RPC/HTTP 桥和进程树生命周期等隔离边界；配置插件时 CLI 会明确报告该执行链路
+尚未启用，不会静默导入或运行插件代码。
 
 因此当前代码不得声称已经具备共享 Plugin Host、安全重启、通用进程级恢复或 Bun 兼容。目标实现应先用
 固定 OpenCode fixture 验证多个插件的顺序初始化、Hook 顺序、共享进程崩溃、安全重启和状态恢复，再替换现有

docs/architecture/extensions/plugin-runtime-design.md

@@ -967,7 +967,12 @@ impl CliAgentRuntimeClient {
         if matches!(&self.backend, CliAgentRuntimeBackend::Shared(_)) {
             return Ok(());
         }
-        let binding = self.session_workspace_binding(session_id).await?;
+        // Session creation holds session_id until activation has completed.
+        // Resolve directly instead of re-locking that non-reentrant mutex.
+        let project_workspace = self.project_workspace_path_buf();
+        let binding = self
+            .resolve_session_workspace_binding(session_id, &project_workspace)
+            .await?;
         self.ensure_embedded_plugin_workspace_ready(&binding).await
     }
 

src/apps/cli/src/agent/runtime_client.rs

@@ -52,7 +52,7 @@ use modes::chat::ChatMode;
 use modes::exec::{ExecApprovalMode, ExecOutputFormat};
 
 pub(crate) const PLUGIN_HOST_LAUNCH_POLICY: bitfun_core::plugin_host::PluginHostLaunchPolicy =
-    bitfun_core::plugin_host::PluginHostLaunchPolicy::Enabled;
+    bitfun_core::plugin_host::PluginHostLaunchPolicy::Disabled;
 
 // ======================== Global MCP Service ========================
 
@@ -563,7 +563,10 @@ impl BootstrapProfile {
     }
 
     const fn starts_plugin_host(self) -> bool {
-        matches!(self, Self::Interactive | Self::Execution)
+        matches!(
+            PLUGIN_HOST_LAUNCH_POLICY,
+            bitfun_core::plugin_host::PluginHostLaunchPolicy::Enabled
+        ) && matches!(self, Self::Interactive | Self::Execution)
     }
 }
 
@@ -818,6 +821,12 @@ async fn initialize_core_services_for_deployment(
         .await
         .map_err(|error| anyhow!("Failed to initialize global config service: {error}"))?;
     tracing::info!("Global config service initialized");
+    if matches!(
+        bootstrap_profile,
+        BootstrapProfile::Interactive | BootstrapProfile::Execution
+    ) {
+        plugin_host_activation::ensure_configured_plugin_execution_supported().await?;
+    }
     if bootstrap_profile.starts_plugin_host() {
         match bitfun_core::plugin_host::initialize_configured_plugin_host_with_log_file(
             PLUGIN_HOST_LAUNCH_POLICY,
@@ -1830,8 +1839,8 @@ mod bootstrap_profile_tests {
     #[test]
     fn profiles_start_only_their_requested_background_services() {
         let cases = [
-            (BootstrapProfile::Interactive, true, true, true),
-            (BootstrapProfile::Execution, false, true, true),
+            (BootstrapProfile::Interactive, true, true, false),
+            (BootstrapProfile::Execution, false, true, false),
             (BootstrapProfile::Management, false, false, false),
         ];
 

src/apps/cli/src/main.rs

@@ -1,5 +1,6 @@
 use std::path::PathBuf;
 
+use bitfun_core::BitFunResult;
 use bitfun_runtime_ports::AgentSessionWorkspaceBinding;
 
 #[derive(Debug, Clone, PartialEq, Eq)]
@@ -24,35 +25,42 @@ fn activation_target(
     })
 }
 
-pub(crate) async fn ensure_plugin_workspace_ready(
-    binding: &AgentSessionWorkspaceBinding,
-) -> bitfun_core::BitFunResult<()> {
+pub(crate) async fn ensure_configured_plugin_execution_supported() -> BitFunResult<bool> {
     // Plugin activation is optional. Isolated Runtime clients (including unit
     // tests) may create sessions before the process-level config service is
     // initialized; that must not make ordinary session creation fail.
     if !bitfun_core::service::config::GlobalConfigManager::is_initialized() {
-        tracing::debug!(
-            workspace_path = %binding.workspace_path,
-            "Configured plugin host activation skipped before global config initialization"
-        );
+        return Ok(false);
+    }
+
+    let config_service = bitfun_core::service::config::get_global_config_service().await?;
+    let config: bitfun_core::service::config::GlobalConfig =
+        config_service.get_config(None).await?;
+    let has_configured_plugins = config.has_configured_plugins();
+    if has_configured_plugins
+        && crate::PLUGIN_HOST_LAUNCH_POLICY
+            == bitfun_core::plugin_host::PluginHostLaunchPolicy::Disabled
+    {
+        return Err(bitfun_core::BitFunError::NotImplemented(
+            "Configured Plugin Host execution is not enabled; plugin definitions were not imported or executed"
+            .to_string(),
+        ));
+    }
+    Ok(has_configured_plugins)
+}
+
+pub(crate) async fn ensure_plugin_workspace_ready(
+    binding: &AgentSessionWorkspaceBinding,
+) -> BitFunResult<()> {
+    if !ensure_configured_plugin_execution_supported().await? {
         return Ok(());
     }
 
     let Some(target) = activation_target(binding) else {
-        let config_service = bitfun_core::service::config::get_global_config_service().await?;
-        let config: bitfun_core::service::config::GlobalConfig =
-            config_service.get_config(None).await?;
-        if config.has_configured_plugins() {
-            return Err(bitfun_core::BitFunError::NotImplemented(
-                "Configured Plugin Host is unsupported for Remote CLI workspaces; no controller-local fallback was attempted"
-                    .to_string(),
-            ));
-        }
-        tracing::debug!(
-            workspace_path = %binding.workspace_path,
-            "Configured plugin host activation skipped for remote CLI workspace"
-        );
-        return Ok(());
+        return Err(bitfun_core::BitFunError::NotImplemented(
+            "Configured Plugin Host is unsupported for Remote CLI workspaces; no controller-local fallback was attempted"
+                .to_string(),
+        ));
     };
 
     bitfun_core::plugin_host::ensure_configured_plugin_instance(
@@ -102,4 +110,12 @@ mod tests {
 
         assert_eq!(activation_target(&binding), None);
     }
+
+    #[test]
+    fn cli_does_not_enable_unowned_plugin_execution() {
+        assert_eq!(
+            crate::PLUGIN_HOST_LAUNCH_POLICY,
+            bitfun_core::plugin_host::PluginHostLaunchPolicy::Disabled
+        );
+    }
 }