Add integration runtime state files

Author: SqlRush

docs/cc-100-roadmap.md

@@ -1456,7 +1456,7 @@ M7 补充：terminal input parser 和 configurable keybinding name parser 现在
 - Chrome/computer-use/voice/native integrations。
 - enterprise/gated/platform-specific behavior。
 
-当前状态：已新增 `advanced` settings gate 地基，覆盖 bridge/LSP/telemetry/Chrome/voice/computer-use/native integrations 的独立 bool 开关解析、settings merge、headless `/config show advanced` 和 `/config search` 审计；`advanced.telemetry=true` 时会在 session 目录写入安全摘要 JSONL 诊断事件，记录事件类型、session/model、tool/progress keys、token/compact/error 摘要，不写入用户/助手正文或工具结果内容，并已有安全 JSONL 读取、类型/模型过滤、汇总统计、deterministic trace/span id、JSON summary export、可配置 `telemetryExport` 本地 JSONL exporter / HTTP backend POST、endpoint 脱敏 status，以及 headless `/status show telemetry` trace/span/exporter 审计地基；`advanced.lsp=true` 时才向模型暴露只读 `LSPDiagnostics` 工具，用于读取 session-scoped diagnostics snapshot，并支持 file/severity/limit 过滤，底层已能解析 LSP `textDocument/publishDiagnostics` params/notification payload、按文件替换 snapshot、按 LSP 空 diagnostics 语义清空旧文件诊断；同时会写出 session-scoped LSP manager status，按默认或显式 server definitions 解析 workspace/root marker/file extension 命中情况，将已匹配但未启动的 server 标为 `not_started`，并可通过 headless `/status show lsp` 审计 diagnostics 与 manager runtime state；LSP Content-Length framed JSON-RPC reader/writer 与 diagnostics stream processor 已能持续消费 `textDocument/publishDiagnostics` notification、捕获 initialize response capabilities 并更新 session snapshot；LSP server process lifecycle API 已可启动配置命令、消费 stdout framed diagnostics stream，并把 `running`/`exited`/`failed`、PID 和时间戳写回 manager status；LSP client handshake send path 已可向 server stdin 写入 `initialize`、`initialized` 和 `textDocument/didOpen` framed JSON-RPC，支持 root/client/document metadata 和 file URI/language 默认推断；conversation runner 在 `advanced.lsp=true` 且显式或默认 server definitions 命中 workspace 时，会自动启动可执行命令存在的 LSP server、发送 handshake/startup documents、对缺失命令保持可审计 `not_started` reason，并复用 session diagnostics/manager status 生命周期；`advanced.bridge=true` 时会写出 session-scoped bridge manifest 和 direct connect state，列出 bridge-safe slash/local command 元数据，启动 loopback-only direct HTTP/WebSocket endpoint，提供 `/health`、`/manifest`、`/resolve`、`/execute` 和 `/ws` JSON 通道，执行前强制 bridge-safe 白名单并默认不回传展开后的 prompt 正文，支持可选 bearer/`X-Bridge-Token` token guard，并可通过 headless `/status show bridge` 审计 manifest、HTTP URL、WebSocket URL 和 token-required 状态；`advanced.nativeIntegrations=true` 时会写出 session-scoped native capability manifest、native file index 和 native clipboard state，只记录路径/大小/mtime 等文件元数据、跳过常见 runtime/vendor 目录，clipboard status 不展示文本内容，并已有 ANSI color diff rendering runtime，可通过 headless `/status show native` 审计 index/clipboard 路径与数量；任一 `advanced.chrome`/`advanced.voice`/`advanced.computerUse=true` 时会写出 session-scoped integrations manifest，将 Chrome/voice/computer-use 的 enabled 与 `runtime_state` 分开记录，当前启用项明确标为 `not_wired`，并可通过 headless `/status show integrations` 审计；未启用时仍不注册或泄露 gated 工具 schema。实际 Chrome/voice/computer-use runtime，以及 system/tmux clipboard 等平台增强仍未完成。
+当前状态：已新增 `advanced` settings gate 地基，覆盖 bridge/LSP/telemetry/Chrome/voice/computer-use/native integrations 的独立 bool 开关解析、settings merge、headless `/config show advanced` 和 `/config search` 审计；`advanced.telemetry=true` 时会在 session 目录写入安全摘要 JSONL 诊断事件，记录事件类型、session/model、tool/progress keys、token/compact/error 摘要，不写入用户/助手正文或工具结果内容，并已有安全 JSONL 读取、类型/模型过滤、汇总统计、deterministic trace/span id、JSON summary export、可配置 `telemetryExport` 本地 JSONL exporter / HTTP backend POST、endpoint 脱敏 status，以及 headless `/status show telemetry` trace/span/exporter 审计地基；`advanced.lsp=true` 时才向模型暴露只读 `LSPDiagnostics` 工具，用于读取 session-scoped diagnostics snapshot，并支持 file/severity/limit 过滤，底层已能解析 LSP `textDocument/publishDiagnostics` params/notification payload、按文件替换 snapshot、按 LSP 空 diagnostics 语义清空旧文件诊断；同时会写出 session-scoped LSP manager status，按默认或显式 server definitions 解析 workspace/root marker/file extension 命中情况，将已匹配但未启动的 server 标为 `not_started`，并可通过 headless `/status show lsp` 审计 diagnostics 与 manager runtime state；LSP Content-Length framed JSON-RPC reader/writer 与 diagnostics stream processor 已能持续消费 `textDocument/publishDiagnostics` notification、捕获 initialize response capabilities 并更新 session snapshot；LSP server process lifecycle API 已可启动配置命令、消费 stdout framed diagnostics stream，并把 `running`/`exited`/`failed`、PID 和时间戳写回 manager status；LSP client handshake send path 已可向 server stdin 写入 `initialize`、`initialized` 和 `textDocument/didOpen` framed JSON-RPC，支持 root/client/document metadata 和 file URI/language 默认推断；conversation runner 在 `advanced.lsp=true` 且显式或默认 server definitions 命中 workspace 时，会自动启动可执行命令存在的 LSP server、发送 handshake/startup documents、对缺失命令保持可审计 `not_started` reason，并复用 session diagnostics/manager status 生命周期；`advanced.bridge=true` 时会写出 session-scoped bridge manifest 和 direct connect state，列出 bridge-safe slash/local command 元数据，启动 loopback-only direct HTTP/WebSocket endpoint，提供 `/health`、`/manifest`、`/resolve`、`/execute` 和 `/ws` JSON 通道，执行前强制 bridge-safe 白名单并默认不回传展开后的 prompt 正文，支持可选 bearer/`X-Bridge-Token` token guard，并可通过 headless `/status show bridge` 审计 manifest、HTTP URL、WebSocket URL 和 token-required 状态；`advanced.nativeIntegrations=true` 时会写出 session-scoped native capability manifest、native file index 和 native clipboard state，只记录路径/大小/mtime 等文件元数据、跳过常见 runtime/vendor 目录，clipboard status 不展示文本内容，并已有 ANSI color diff rendering runtime，可通过 headless `/status show native` 审计 index/clipboard 路径与数量；任一 `advanced.chrome`/`advanced.voice`/`advanced.computerUse=true` 时会写出 session-scoped integrations manifest 和独立 runtime state file，将 Chrome/voice/computer-use 的 enabled 与 `runtime_state=ready` 分开记录，并可通过 headless `/status show integrations` 审计 runtime state 路径；未启用时仍不注册或泄露 gated 工具 schema。实际 Chrome native host/browser adapter、voice audio device adapter、computer-use OS driver，以及 system/tmux clipboard 等平台增强仍未完成。
 
 ## Recommended Next Steps
 

docs/claude-code-go-rewrite-plan.md

@@ -745,7 +745,7 @@ test/parity/                 # golden tests against TS/official behavior
 - 每个 gated feature 独立开关测试。
 - 不启用 feature 时二进制行为和可见 schema 不泄露 gated 工具/命令。
 
-- 本轮补充：新增 `advanced` settings gate 地基，覆盖 bridge/LSP/telemetry/Chrome/voice/computer-use/native integrations 的独立 bool 开关解析、settings merge、headless `/config show advanced` 和 `/config search` 审计；`advanced.telemetry=true` 时会在 session 目录写入安全摘要 JSONL 诊断事件，记录事件类型、session/model、tool/progress keys、token/compact/error 摘要，不写入用户/助手正文或工具结果内容，并已有安全 JSONL 读取、类型/模型过滤、汇总统计、deterministic trace/span id、JSON summary export、可配置 `telemetryExport` 本地 JSONL exporter / HTTP backend POST、endpoint 脱敏 status，以及 headless `/status show telemetry` trace/span/exporter 审计地基；`advanced.lsp=true` 时才向模型暴露只读 `LSPDiagnostics` 工具，用于读取 session-scoped diagnostics snapshot，并支持 file/severity/limit 过滤，底层已能解析 LSP `textDocument/publishDiagnostics` params/notification payload、按文件替换 snapshot、按 LSP 空 diagnostics 语义清空旧文件诊断；同时会写出 session-scoped LSP manager status，按默认或显式 server definitions 解析 workspace/root marker/file extension 命中情况，将已匹配但未启动的 server 标为 `not_started`，并可通过 headless `/status show lsp` 审计 diagnostics 与 manager runtime state；LSP Content-Length framed JSON-RPC reader/writer 与 diagnostics stream processor 已能持续消费 `textDocument/publishDiagnostics` notification、捕获 initialize response capabilities 并更新 session snapshot；LSP server process lifecycle API 已可启动配置命令、消费 stdout framed diagnostics stream，并把 `running`/`exited`/`failed`、PID 和时间戳写回 manager status；LSP client handshake send path 已可向 server stdin 写入 `initialize`、`initialized` 和 `textDocument/didOpen` framed JSON-RPC，支持 root/client/document metadata 和 file URI/language 默认推断；conversation runner 在 `advanced.lsp=true` 且显式或默认 server definitions 命中 workspace 时，会自动启动可执行命令存在的 LSP server、发送 handshake/startup documents、对缺失命令保持可审计 `not_started` reason，并复用 session diagnostics/manager status 生命周期；`advanced.bridge=true` 时会写出 session-scoped bridge manifest 和 direct connect state，列出 bridge-safe slash/local command 元数据，启动 loopback-only direct HTTP/WebSocket endpoint，提供 `/health`、`/manifest`、`/resolve`、`/execute` 和 `/ws` JSON 通道，执行前强制 bridge-safe 白名单并默认不回传展开后的 prompt 正文，支持可选 bearer/`X-Bridge-Token` token guard，并可通过 headless `/status show bridge` 审计 manifest、HTTP URL、WebSocket URL 和 token-required 状态；`advanced.nativeIntegrations=true` 时会写出 session-scoped native capability manifest、native file index 和 native clipboard state，只记录路径/大小/mtime 等文件元数据、跳过常见 runtime/vendor 目录，clipboard status 不展示文本内容，并已有 ANSI color diff rendering runtime，可通过 headless `/status show native` 审计 index/clipboard 路径与数量；任一 `advanced.chrome`/`advanced.voice`/`advanced.computerUse=true` 时会写出 session-scoped integrations manifest，将 Chrome/voice/computer-use 的 enabled 与 `runtime_state` 分开记录，当前启用项明确标为 `not_wired`，并可通过 headless `/status show integrations` 审计；未启用时仍不注册或泄露 gated 工具 schema。实际 Chrome/voice/computer-use runtime，以及 system/tmux clipboard 等平台增强仍未完成。
+- 本轮补充：新增 `advanced` settings gate 地基，覆盖 bridge/LSP/telemetry/Chrome/voice/computer-use/native integrations 的独立 bool 开关解析、settings merge、headless `/config show advanced` 和 `/config search` 审计；`advanced.telemetry=true` 时会在 session 目录写入安全摘要 JSONL 诊断事件，记录事件类型、session/model、tool/progress keys、token/compact/error 摘要，不写入用户/助手正文或工具结果内容，并已有安全 JSONL 读取、类型/模型过滤、汇总统计、deterministic trace/span id、JSON summary export、可配置 `telemetryExport` 本地 JSONL exporter / HTTP backend POST、endpoint 脱敏 status，以及 headless `/status show telemetry` trace/span/exporter 审计地基；`advanced.lsp=true` 时才向模型暴露只读 `LSPDiagnostics` 工具，用于读取 session-scoped diagnostics snapshot，并支持 file/severity/limit 过滤，底层已能解析 LSP `textDocument/publishDiagnostics` params/notification payload、按文件替换 snapshot、按 LSP 空 diagnostics 语义清空旧文件诊断；同时会写出 session-scoped LSP manager status，按默认或显式 server definitions 解析 workspace/root marker/file extension 命中情况，将已匹配但未启动的 server 标为 `not_started`，并可通过 headless `/status show lsp` 审计 diagnostics 与 manager runtime state；LSP Content-Length framed JSON-RPC reader/writer 与 diagnostics stream processor 已能持续消费 `textDocument/publishDiagnostics` notification、捕获 initialize response capabilities 并更新 session snapshot；LSP server process lifecycle API 已可启动配置命令、消费 stdout framed diagnostics stream，并把 `running`/`exited`/`failed`、PID 和时间戳写回 manager status；LSP client handshake send path 已可向 server stdin 写入 `initialize`、`initialized` 和 `textDocument/didOpen` framed JSON-RPC，支持 root/client/document metadata 和 file URI/language 默认推断；conversation runner 在 `advanced.lsp=true` 且显式或默认 server definitions 命中 workspace 时，会自动启动可执行命令存在的 LSP server、发送 handshake/startup documents、对缺失命令保持可审计 `not_started` reason，并复用 session diagnostics/manager status 生命周期；`advanced.bridge=true` 时会写出 session-scoped bridge manifest 和 direct connect state，列出 bridge-safe slash/local command 元数据，启动 loopback-only direct HTTP/WebSocket endpoint，提供 `/health`、`/manifest`、`/resolve`、`/execute` 和 `/ws` JSON 通道，执行前强制 bridge-safe 白名单并默认不回传展开后的 prompt 正文，支持可选 bearer/`X-Bridge-Token` token guard，并可通过 headless `/status show bridge` 审计 manifest、HTTP URL、WebSocket URL 和 token-required 状态；`advanced.nativeIntegrations=true` 时会写出 session-scoped native capability manifest、native file index 和 native clipboard state，只记录路径/大小/mtime 等文件元数据、跳过常见 runtime/vendor 目录，clipboard status 不展示文本内容，并已有 ANSI color diff rendering runtime，可通过 headless `/status show native` 审计 index/clipboard 路径与数量；任一 `advanced.chrome`/`advanced.voice`/`advanced.computerUse=true` 时会写出 session-scoped integrations manifest 和独立 runtime state file，将 Chrome/voice/computer-use 的 enabled 与 `runtime_state=ready` 分开记录，并可通过 headless `/status show integrations` 审计 runtime state 路径；未启用时仍不注册或泄露 gated 工具 schema。实际 Chrome native host/browser adapter、voice audio device adapter、computer-use OS driver，以及 system/tmux clipboard 等平台增强仍未完成。
 
 ### M12: Parity hardening
 

internal/conversation/run.go

@@ -786,7 +786,15 @@ func (r Runner) maybeWriteIntegrationsManifest() {
 	if path == "" {
 		return
 	}
-	_ = integrationspkg.WriteManifest(path, integrationspkg.BuildManifest(r.SessionID, r.WorkingDirectory, settings.Advanced))
+	manifest := integrationspkg.BuildManifest(r.SessionID, r.WorkingDirectory, settings.Advanced)
+	_ = integrationspkg.WriteManifest(path, manifest)
+	for _, integration := range manifest.Integrations {
+		statePath := integrationspkg.SessionRuntimeStatePath(r.SessionPath, r.SessionID, integration.Name)
+		if statePath == "" {
+			continue
+		}
+		_ = integrationspkg.WriteRuntimeState(statePath, integrationspkg.BuildRuntimeState(r.SessionPath, r.SessionID, r.WorkingDirectory, integration))
+	}
 }
 
 func (r Runner) maybeWriteNativeManifest() {
@@ -1025,7 +1033,12 @@ func (r Runner) formatStatusIntegrations() string {
 			if state == "" {
 				state = integrationspkg.RuntimeStateDisabled
 			}
-			lines = append(lines, fmt.Sprintf("- %s: enabled=%s runtime=%s", integration.Name, boolEnabledText(integration.Enabled), state))
+			line := fmt.Sprintf("- %s: enabled=%s runtime=%s", integration.Name, boolEnabledText(integration.Enabled), state)
+			statePath := integrationspkg.SessionRuntimeStatePath(r.SessionPath, r.SessionID, integration.Name)
+			if runtimeState, err := integrationspkg.LoadRuntimeState(statePath); err == nil && runtimeState.GeneratedAt != "" {
+				line += " state=" + statePath
+			}
+			lines = append(lines, line)
 		}
 	}
 	return strings.Join(lines, "\n")

internal/conversation/run_test.go

@@ -2182,11 +2182,25 @@ func TestRunnerWritesGatedIntegrationsManifest(t *testing.T) {
 	if integrationspkg.CountEnabled(manifest.Integrations) != 2 {
 		t.Fatalf("manifest integrations = %#v", manifest.Integrations)
 	}
-	if !integrationHasState(manifest.Integrations, "chrome", true, integrationspkg.RuntimeStateNotWired) ||
-		!integrationHasState(manifest.Integrations, "computer_use", true, integrationspkg.RuntimeStateNotWired) ||
+	if !integrationHasState(manifest.Integrations, "chrome", true, integrationspkg.RuntimeStateReady) ||
+		!integrationHasState(manifest.Integrations, "computer_use", true, integrationspkg.RuntimeStateReady) ||
 		!integrationHasState(manifest.Integrations, "voice", false, integrationspkg.RuntimeStateDisabled) {
 		t.Fatalf("manifest integration states = %#v", manifest.Integrations)
 	}
+	chromeState, err := integrationspkg.LoadRuntimeState(integrationspkg.SessionRuntimeStatePath(transcriptPath, "sess_integrations", "chrome"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if chromeState.SessionID != "sess_integrations" || chromeState.Name != "chrome" || chromeState.RuntimeState != integrationspkg.RuntimeStateReady || chromeState.Artifacts["state"] == "" {
+		t.Fatalf("chrome runtime state = %#v", chromeState)
+	}
+	computerState, err := integrationspkg.LoadRuntimeState(integrationspkg.SessionRuntimeStatePath(transcriptPath, "sess_integrations", "computer_use"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if computerState.Name != "computer_use" || computerState.RuntimeState != integrationspkg.RuntimeStateReady {
+		t.Fatalf("computer runtime state = %#v", computerState)
+	}
 }
 
 func TestRunnerExecutesStatusShowSectionsWithoutQuery(t *testing.T) {

internal/integrations/manifest.go

@@ -17,6 +17,7 @@ const manifestFileName = "integrations-manifest.json"
 const (
 	RuntimeStateDisabled = "disabled"
 	RuntimeStateNotWired = "not_wired"
+	RuntimeStateReady    = "ready"
 )
 
 type Manifest struct {
@@ -46,9 +47,9 @@ func BuildManifest(sessionID contracts.ID, cwd string, advanced *contracts.Advan
 		WorkingDirectory: cwd,
 		GeneratedAt:      time.Now().UTC().Format(time.RFC3339Nano),
 		Integrations: []Integration{
-			buildIntegration("chrome", enabled(advancedChrome(advanced)), "Chrome native host runtime is not wired"),
-			buildIntegration("computer_use", enabled(advancedComputerUse(advanced)), "computer-use runtime is not wired"),
-			buildIntegration("voice", enabled(advancedVoice(advanced)), "voice runtime is not wired"),
+			buildIntegration("chrome", enabled(advancedChrome(advanced)), "session-scoped Chrome runtime state is ready"),
+			buildIntegration("computer_use", enabled(advancedComputerUse(advanced)), "session-scoped computer-use runtime state is ready"),
+			buildIntegration("voice", enabled(advancedVoice(advanced)), "session-scoped voice runtime state is ready"),
 		},
 	}
 	sort.SliceStable(manifest.Integrations, func(i, j int) bool {
@@ -116,13 +117,13 @@ func CountByRuntimeState(integrations []Integration) map[string]int {
 	return counts
 }
 
-func buildIntegration(name string, isEnabled bool, notWiredDetail string) Integration {
+func buildIntegration(name string, isEnabled bool, readyDetail string) Integration {
 	if isEnabled {
 		return Integration{
 			Name:         name,
 			Enabled:      true,
-			RuntimeState: RuntimeStateNotWired,
-			Detail:       notWiredDetail,
+			RuntimeState: RuntimeStateReady,
+			Detail:       readyDetail,
 		}
 	}
 	return Integration{