CI 预检：额度监控 PR 冲突解决

.gitattributes

@@ -0,0 +1,5 @@
+# The bundled ui-render skill is compiled into the binary (`include_str!` in
+# src-tauri/src/commands/generative_ui.rs), installed for agents byte for byte,
+# and must equal what src/lib/json-render/skill.ts generates, which is LF.
+# Windows checkouts convert text to CRLF by default (core.autocrlf), so pin it.
+src-tauri/genui/** text eol=lf

.github/workflows/test.yml

@@ -69,7 +69,7 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-22.04, macos-latest, windows-latest]
-        mode: [desktop, server]
+        mode: [desktop, server, cli]
         include:
           - mode: desktop
             # `test-utils` exposes test scaffolding (AppState::new_for_test,
@@ -86,14 +86,22 @@ jobs:
             # need for webkit/appindicator system libs. `--lib` skips
             # integration tests for `cargo test`, so `test-utils` is not
             # required here.
-            cargo_args: "--no-default-features --bin codeg-server --lib"
+            cargo_args: "--no-default-features --features server-bin --bin codeg-server --lib"
             # Server clippy intentionally skips `--all-targets`: integration
             # tests are already linted in the desktop cells, and pulling
             # them in here would force `test-utils` (a test-only feature)
             # into the server build matrix. Lint scope here is lib + the
             # codeg-server binary, which is exactly the cfg-gated surface
             # that this cell exists to verify.
-            clippy_args: "--no-default-features --bin codeg-server --lib"
+            clippy_args: "--no-default-features --features server-bin --bin codeg-server --lib"
+          - mode: cli
+            # The `codeg-cli` client (`src/cli/`), which only `cli-bin`
+            # compiles: the server cells leave it out, and the Windows
+            # desktop cell only builds its tests (`--no-run`), so without
+            # this cell they would never run on Windows. The runtime side
+            # (`cli_run`) is in the lib, which the server cells test already.
+            cargo_args: "--no-default-features --features cli-bin --lib cli::"
+            clippy_args: "--no-default-features --features cli-bin --bin codeg-cli --lib"
     steps:
       - uses: actions/checkout@v4
 
@@ -160,3 +168,84 @@ jobs:
             echo "::error::Web handlers must call commands/*_core, not services directly."
             exit 1
           fi
+
+  install-sh:
+    # install.sh stops what runs the files it replaces, and nothing else: on
+    # Linux `cp` onto a running program fails, but the desktop app, other
+    # users, other directories and containers run a codeg-server or codeg-mcp
+    # of their own. The test runs the script's stop section against fake
+    # programs; the installer itself downloads a release and writes to
+    # /usr/local/bin, so it is not run. /bin/bash: on macOS that is 3.2, what
+    # `curl … | bash` gets there. Linux runs it once more as root, for
+    # processes of other mount namespaces.
+    name: install.sh on ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-22.04, macos-latest]
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: install.sh parses
+        run: /bin/bash -n install.sh
+
+      - name: install.sh stops only what runs the files it replaces
+        env:
+          CODEG_INSTALL_TEST_STRICT: "1"
+        run: /bin/bash scripts/test-install-stop.sh install.sh
+
+      - name: The same, as root
+        if: runner.os == 'Linux'
+        run: sudo CODEG_INSTALL_TEST_STRICT=1 /bin/bash scripts/test-install-stop.sh install.sh
+
+  install-ps1:
+    # Two Windows PowerShell 5.1 traps that PowerShell 7 never hits. First,
+    # `.\install.ps1` reads a script without a BOM in the ANSI code page,
+    # where a UTF-8 em-dash ends in a curly quote that closes the string it is
+    # in — and then the whole script fails to parse (`irm … | iex` decodes
+    # UTF-8, so it is spared this one). Second, Join-Path takes two paths: a
+    # third fails when its line runs, however the script was loaded — the
+    # README's `irm … | iex` included.
+    name: install.ps1 in Windows PowerShell 5.1
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check install.ps1 as Windows PowerShell 5.1 reads and runs it
+        shell: powershell
+        run: |
+          $bytes = [System.IO.File]::ReadAllBytes((Join-Path $PWD "install.ps1"))
+          if ($bytes.Length -ge 3 -and $bytes[0] -eq 0xEF -and $bytes[1] -eq 0xBB -and $bytes[2] -eq 0xBF) {
+            $text = [System.Text.Encoding]::UTF8.GetString($bytes, 3, $bytes.Length - 3)
+          } else {
+            $text = [System.Text.Encoding]::Default.GetString($bytes)
+          }
+          $tokens = $null
+          $errors = $null
+          $ast = [System.Management.Automation.Language.Parser]::ParseInput($text, [ref]$tokens, [ref]$errors)
+          if ($errors) {
+            foreach ($e in $errors) {
+              Write-Host "::error file=install.ps1,line=$($e.Extent.StartLineNumber)::$($e.Message)"
+            }
+            exit 1
+          }
+          # Windows PowerShell 5.1's Join-Path takes two paths (it has no
+          # -AdditionalChildPath): a third fails when the line runs, not when
+          # the script parses.
+          $bad = $false
+          $calls = $ast.FindAll({
+            param($node)
+            $node -is [System.Management.Automation.Language.CommandAst] -and
+              $node.GetCommandName() -eq "Join-Path"
+          }, $true)
+          foreach ($call in $calls) {
+            $paths = @($call.CommandElements | Select-Object -Skip 1 | Where-Object {
+              $_ -isnot [System.Management.Automation.Language.CommandParameterAst]
+            })
+            if ($paths.Count -gt 2) {
+              Write-Host "::error file=install.ps1,line=$($call.Extent.StartLineNumber)::Join-Path with $($paths.Count) paths fails in Windows PowerShell 5.1"
+              $bad = $true
+            }
+          }
+          if ($bad) { exit 1 }

.gitignore

@@ -21,6 +21,10 @@ next-env.d.ts
 # Monaco editor local files (copied from node_modules)
 public/vs
 
+# PDF.js runtime files: worker, CMaps, standard fonts, wasm decoders, ICC
+# profiles (copied from node_modules by postinstall; see src/lib/pdfjs.ts)
+public/pdfjs
+
 # Editor directories and files
 .vscode/*
 !.vscode/extensions.json

AGENTS.md

@@ -37,13 +37,13 @@ cargo test --features test-utils
 cargo clippy --all-targets --features test-utils -- -D warnings
 
 # 服务器模式
-cargo check --no-default-features --bin codeg-server
-cargo test --no-default-features --bin codeg-server --lib
-cargo clippy --no-default-features --bin codeg-server --lib -- -D warnings
+cargo check --no-default-features --features server-bin --bin codeg-server
+cargo test --no-default-features --features server-bin --bin codeg-server --lib
+cargo clippy --no-default-features --features server-bin --bin codeg-server --lib -- -D warnings
 
 # codeg-mcp 协作伴生进程（多智能体委托）
-cargo check --no-default-features --bin codeg-mcp
-cargo clippy --no-default-features --bin codeg-mcp -- -D warnings
+cargo check --no-default-features --features mcp-bin --bin codeg-mcp
+cargo clippy --no-default-features --features mcp-bin --bin codeg-mcp -- -D warnings
 
 # 解析器快照评审（输出变化时）
 cargo insta review
@@ -57,8 +57,10 @@ INSTA_UPDATE=auto cargo test --features test-utils     # 自动写新 .snap
 项目通过 Cargo feature flags 支持三种二进制：
 
 - **`codeg`**（`tauri-runtime`，默认）：完整桌面应用，包含 Tauri 窗口管理、系统通知、自动更新等
-- **`codeg-server`**（无 feature，`--no-default-features`）：独立服务器模式，仅编译 Axum HTTP API + WebSocket
-- **`codeg-mcp`**（无 feature）：per-launch stdio MCP 伴生进程，被注入到代理 CLI 的 MCP 配置中，向 LLM 暴露**异步**子智能体委托工具。
+- **`codeg-server`**（`--no-default-features --features server-bin`）：独立服务器模式，仅编译 Axum HTTP API + WebSocket
+- **`codeg-mcp`**（`--no-default-features --features mcp-bin`）：per-launch stdio MCP 伴生进程，被注入到代理 CLI 的 MCP 配置中，向 LLM 暴露**异步**子智能体委托工具。
+
+后两个（以及 `codeg-computer-helper` 的 `computer-helper`）各要一个默认不开的 feature：Tauri CLI 会把所有 feature 已开的二进制目标打进桌面安装包，不开就不进包。
 
 ### 共享核心
 

CLAUDE.md

@@ -37,13 +37,13 @@ cargo test --features test-utils
 cargo clippy --all-targets --features test-utils -- -D warnings
 
 # 服务器模式
-cargo check --no-default-features --bin codeg-server
-cargo test --no-default-features --bin codeg-server --lib
-cargo clippy --no-default-features --bin codeg-server --lib -- -D warnings
+cargo check --no-default-features --features server-bin --bin codeg-server
+cargo test --no-default-features --features server-bin --bin codeg-server --lib
+cargo clippy --no-default-features --features server-bin --bin codeg-server --lib -- -D warnings
 
 # codeg-mcp 协作伴生进程（多智能体委托）
-cargo check --no-default-features --bin codeg-mcp
-cargo clippy --no-default-features --bin codeg-mcp -- -D warnings
+cargo check --no-default-features --features mcp-bin --bin codeg-mcp
+cargo clippy --no-default-features --features mcp-bin --bin codeg-mcp -- -D warnings
 
 # 解析器快照评审（输出变化时）
 cargo insta review
@@ -57,8 +57,10 @@ INSTA_UPDATE=auto cargo test --features test-utils     # 自动写新 .snap
 项目通过 Cargo feature flags 支持三种二进制：
 
 - **`codeg`**（`tauri-runtime`，默认）：完整桌面应用，包含 Tauri 窗口管理、系统通知、自动更新等
-- **`codeg-server`**（无 feature，`--no-default-features`）：独立服务器模式，仅编译 Axum HTTP API + WebSocket
-- **`codeg-mcp`**（无 feature）：per-launch stdio MCP 伴生进程，被注入到代理 CLI 的 MCP 配置中，向 LLM 暴露**异步**子智能体委托工具。
+- **`codeg-server`**（`--no-default-features --features server-bin`）：独立服务器模式，仅编译 Axum HTTP API + WebSocket
+- **`codeg-mcp`**（`--no-default-features --features mcp-bin`）：per-launch stdio MCP 伴生进程，被注入到代理 CLI 的 MCP 配置中，向 LLM 暴露**异步**子智能体委托工具。
+
+后两个（以及 `codeg-computer-helper` 的 `computer-helper`）各要一个默认不开的 feature：Tauri CLI 会把所有 feature 已开的二进制目标打进桌面安装包，不开就不进包。
 
 ### 共享核心
 

Dockerfile

@@ -9,16 +9,17 @@ COPY public/ ./public/
 COPY next.config.ts tsconfig.json postcss.config.mjs components.json ./
 RUN pnpm build
 
-# Stage 2: Build Rust server binary + codeg-mcp companion
+# Stage 2: Build Rust server binary + codeg-mcp companion + codeg-cli
 FROM rust:slim-bookworm AS backend
 RUN apt-get update && apt-get install -y pkg-config libssl-dev && rm -rf /var/lib/apt/lists/*
 WORKDIR /app/src-tauri
 COPY src-tauri/ ./
 # codeg-mcp is the stdio MCP companion the runtime injects per session
 # (see acp/delegation/companion.rs). It must ship next to codeg-server so
 # `locate_codeg_mcp_binary()` finds it via the exe-sibling lookup.
-RUN cargo build --release --bin codeg-server --no-default-features \
- && cargo build --release --bin codeg-mcp --no-default-features
+RUN cargo build --release --bin codeg-server --no-default-features --features server-bin \
+ && cargo build --release --bin codeg-mcp --no-default-features --features mcp-bin \
+ && cargo build --release --bin codeg-cli --no-default-features --features cli-bin
 
 # Stage 3: Runtime
 FROM node:24-bookworm-slim
@@ -42,6 +43,9 @@ RUN apt-get update && apt-get install -y \
 
 COPY --from=backend /app/src-tauri/target/release/codeg-server /usr/local/bin/codeg-server
 COPY --from=backend /app/src-tauri/target/release/codeg-mcp /usr/local/bin/codeg-mcp
+# codeg-cli: `docker exec <container> codeg-cli run …` finds this server through
+# its discovery file under CODEG_DATA_DIR (/data/cli).
+COPY --from=backend /app/src-tauri/target/release/codeg-cli /usr/local/bin/codeg-cli
 COPY --from=frontend /app/out /app/web
 
 ENV CODEG_STATIC_DIR=/app/web

Dockerfile.ci

@@ -27,6 +27,9 @@ COPY dist/${TARGETARCH}/codeg-server /usr/local/bin/codeg-server
 # (see acp/delegation/companion.rs). It must ship next to codeg-server so
 # `locate_codeg_mcp_binary()` finds it via the exe-sibling lookup.
 COPY dist/${TARGETARCH}/codeg-mcp /usr/local/bin/codeg-mcp
+# codeg-cli: `docker exec <container> codeg-cli run …` finds this server through
+# its discovery file under CODEG_DATA_DIR (/data/cli).
+COPY dist/${TARGETARCH}/codeg-cli /usr/local/bin/codeg-cli
 COPY dist/web /app/web
 
 ENV CODEG_STATIC_DIR=/app/web