重构主控编排与运行时预热链路，统一工作区提示词/专家调度协议并补齐 wiki 记忆注入与写回闭环。

同时收敛启动与运维脚本默认行为（含 wiki worker）、更新 Admin 可观测性与相关测试，降低首轮时延并提高运行稳定性。

Made-with: Cursor

openclaw/scripts/lib/extension-import-boundary-checker.mjs

@@ -0,0 +1,104 @@
+import ts from "typescript";
+import { BUNDLED_PLUGIN_PATH_PREFIX } from "./bundled-plugin-paths.mjs";
+import {
+  collectTypeScriptInventory,
+  createCachedAsync,
+  formatGroupedInventoryHuman,
+  normalizeRepoPath,
+  resolveRepoSpecifier,
+  visitModuleSpecifiers,
+  writeLine,
+} from "./guard-inventory-utils.mjs";
+import {
+  collectTypeScriptFilesFromRoots,
+  resolveRepoRoot,
+  resolveSourceRoots,
+  toLine,
+} from "./ts-guard-utils.mjs";
+
+const repoRoot = resolveRepoRoot(import.meta.url);
+
+function compareEntries(left, right) {
+  return (
+    left.file.localeCompare(right.file) ||
+    left.line - right.line ||
+    left.kind.localeCompare(right.kind) ||
+    left.specifier.localeCompare(right.specifier) ||
+    left.reason.localeCompare(right.reason)
+  );
+}
+
+function classifyResolvedExtensionReason(kind, boundaryLabel) {
+  const verb =
+    kind === "export"
+      ? "re-exports"
+      : kind === "dynamic-import"
+        ? "dynamically imports"
+        : "imports";
+  return `${verb} bundled plugin file from ${boundaryLabel} boundary`;
+}
+
+function scanImportBoundaryViolations(sourceFile, filePath, boundaryLabel) {
+  const entries = [];
+  const relativeFile = normalizeRepoPath(repoRoot, filePath);
+
+  visitModuleSpecifiers(ts, sourceFile, ({ kind, specifier, specifierNode }) => {
+    const resolvedPath = resolveRepoSpecifier(repoRoot, specifier, filePath);
+    if (!resolvedPath?.startsWith(BUNDLED_PLUGIN_PATH_PREFIX)) {
+      return;
+    }
+    entries.push({
+      file: relativeFile,
+      line: toLine(sourceFile, specifierNode),
+      kind,
+      specifier,
+      resolvedPath,
+      reason: classifyResolvedExtensionReason(kind, boundaryLabel),
+    });
+  });
+
+  return entries;
+}
+
+export function createExtensionImportBoundaryChecker(params) {
+  const scanRoots = resolveSourceRoots(repoRoot, params.roots);
+
+  const collectInventory = createCachedAsync(async () => {
+    const files = (await collectTypeScriptFilesFromRoots(scanRoots))
+      .filter((filePath) => !params.shouldSkipFile?.(normalizeRepoPath(repoRoot, filePath)))
+      .toSorted((left, right) =>
+        normalizeRepoPath(repoRoot, left).localeCompare(normalizeRepoPath(repoRoot, right)),
+      );
+    return await collectTypeScriptInventory({
+      ts,
+      files,
+      compareEntries,
+      collectEntries(sourceFile, filePath) {
+        return scanImportBoundaryViolations(sourceFile, filePath, params.boundaryLabel);
+      },
+      shouldParseSource: params.skipSourcesWithoutBundledPluginPrefix
+        ? (source) => source.includes(BUNDLED_PLUGIN_PATH_PREFIX)
+        : undefined,
+    });
+  });
+
+  async function main(argv = process.argv.slice(2), io) {
+    const streams = io ?? { stdout: process.stdout, stderr: process.stderr };
+    const json = argv.includes("--json");
+    const inventory = await collectInventory();
+
+    if (json) {
+      writeLine(streams.stdout, JSON.stringify(inventory, null, 2));
+    } else {
+      writeLine(streams.stdout, formatGroupedInventoryHuman(params, inventory));
+      writeLine(
+        streams.stdout,
+        inventory.length === 0 ? "Boundary is clean." : "Boundary has violations.",
+      );
+    }
+
+    return inventory.length === 0 ? 0 : 1;
+  }
+
+  return { collectInventory, main };
+}