feat: 精简公共安装逻辑，新增 Codex、Claude Code、CC Switch、Clash Verge Rev

.github/workflows/extended.yml

@@ -0,0 +1,88 @@
+name: Extended installer checks
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+permissions:
+  contents: read
+concurrency:
+  group: extended-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  platforms:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1
+        with:
+          python-version: '3.x'
+      - run: python tools/generate.py --check
+      - run: python tools/generate_menus.py --check
+      - run: python tests/test_catalog.py
+      - name: Distribution and Termux routing
+        if: runner.os != 'Windows'
+        run: python3 tests/test_external.py
+      - name: PowerShell entries
+        shell: pwsh
+        run: ./tests/test-external.ps1
+      - name: Windows PowerShell 5.1 entries
+        if: runner.os == 'Windows'
+        shell: powershell
+        run: .\tests\test-external.ps1
+      - name: Real upstream CLI installs on Unix
+        if: runner.os != 'Windows'
+        shell: bash
+        run: |
+          export CODEX_HOME="$RUNNER_TEMP/codex-profile"
+          export CODEX_INSTALL_DIR="$RUNNER_TEMP/codex-bin"
+          bash codex.sh
+          bash codex.sh --check
+          bash claude-code.sh
+          bash claude-code.sh --check
+      - name: Real upstream CLI and portable CC Switch installs on Windows
+        if: runner.os == 'Windows'
+        shell: powershell
+        run: |
+          $env:CODEX_HOME="$env:RUNNER_TEMP\codex-profile"
+          $env:CODEX_INSTALL_DIR="$env:RUNNER_TEMP\codex-bin"
+          .\codex.ps1
+          if ($LASTEXITCODE -ne 0) { throw 'Codex install failed' }
+          .\codex.ps1 -Check
+          if ($LASTEXITCODE -ne 0) { throw 'Codex check failed' }
+          .\claude-code.ps1
+          if ($LASTEXITCODE -ne 0) { throw 'Claude install failed' }
+          .\claude-code.ps1 -Check
+          if ($LASTEXITCODE -ne 0) { throw 'Claude check failed' }
+          .\cc-switch.ps1 -Root "$env:RUNNER_TEMP\cc switch"
+          if ($LASTEXITCODE -ne 0) { throw 'CC Switch installation failed' }
+          .\cc-switch.ps1 -Root "$env:RUNNER_TEMP\cc switch" -Check
+          if ($LASTEXITCODE -ne 0) { throw 'CC Switch check failed' }
+  linux-libc:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        image: ['debian:12', 'alpine:3.22']
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
+      - name: Install CLIs in a clean glibc or musl userland
+        env:
+          IMAGE: ${{ matrix.image }}
+        run: |
+          docker run --rm -v "$PWD:/src:ro" "$IMAGE" sh -ec '
+            if command -v apk >/dev/null; then apk add --no-cache bash curl ca-certificates;
+            else apt-get update && apt-get install -y bash curl ca-certificates; fi
+            export LMM_LIB_DIR=/src/templates/lib
+            bash /src/codex.sh --install-deps
+            bash /src/codex.sh --check
+            bash /src/claude-code.sh --install-deps
+            bash /src/claude-code.sh --check
+          '

.github/workflows/test.yml

@@ -15,6 +15,8 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
+        with:
+          fetch-depth: 0
       - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38
         with:
           node-version: 24.21.0
@@ -29,19 +31,39 @@ jobs:
           if ($errors.Count) { throw ($errors | Out-String) }
           ./menu.ps1 -Help
       - run: python tools/generate.py --check
+      - run: python tools/generate_menus.py --check
       - name: Shell fault-injection tests
         if: runner.os != 'Windows'
-        run: python3 tests/test_installers.py
+        run: |
+          python3 tests/test_installers.py
+          python3 tests/test_official_policy.py
+          python3 tests/test_library_loader.py
+          python3 tests/test_bounded.py
       - name: ShellCheck
         if: runner.os == 'Linux'
         run: shellcheck *.sh
       - name: PowerShell checks
         shell: pwsh
-        run: ./tests/test-powershell.ps1
+        run: |
+          ./tests/test-powershell.ps1
+          ./tests/test-official-policy.ps1
+          ./tests/test-library-loader.ps1
       - name: Windows PowerShell 5.1 checks
         if: runner.os == 'Windows'
         shell: powershell
-        run: .\tests\test-powershell.ps1
+        run: |
+          .\tests\test-powershell.ps1
+          .\tests\test-official-policy.ps1
+          .\tests\test-library-loader.ps1
+      - name: Install real Pi on Unix with lifecycle scripts disabled
+        if: runner.os != 'Windows'
+        shell: bash
+        run: |
+          export PI_CODING_AGENT_DIR="$RUNNER_TEMP/pi-profile"
+          npm_config_ignore_scripts=true bash pi.sh --root "$RUNNER_TEMP/lmm clients" --no-path --network official
+          "$RUNNER_TEMP/lmm clients/bin/pi" --version
+          "$RUNNER_TEMP/lmm clients/bin/pi" list
+          bash pi.sh --root "$RUNNER_TEMP/lmm clients" --check
       - name: Install real CLI on Unix
         if: runner.os != 'Windows'
         shell: bash