docs(product-tdd): split extension runtime contract

- move shared extension state semantics into InKCre/docs
- absorb local runtime mechanics into app/business/extension/AGENTS.md
- remove the mixed local extension-runtime doc and record phase 5b

Author: xiaoland

app/business/extension/AGENTS.md

@@ -10,7 +10,7 @@
 - 修改 extension 安装、同步、启停、配置持久化逻辑
 - 修改 extension metadata 读取规则
 
-如果改动会影响跨模块契约，先读 [docs/_shared/20-product-tdd/](../../../docs/_shared/20-product-tdd/)；如果还涉及本仓库尚未拆分完的 runtime 细节，再读 [docs/20-product-tdd/extension-runtime.md](../../../docs/20-product-tdd/extension-runtime.md)。
+如果改动会影响跨模块契约，先读 [docs/_shared/20-product-tdd/](../../../docs/_shared/20-product-tdd/)；本仓库的 runtime mechanics 以本文件为准。
 
 ## 局部执行规则
 
@@ -41,6 +41,7 @@
 - `ExtensionBase.on_start()` 会加载配置、回写 `config_schema`、注册 API router、初始化 source 和 resolver。
 - `ExtensionBase.on_close()` 会把运行时配置保存回数据库。
 - `ExtensionManager.start_enabled()` 只启动当前 client 已启用的扩展。
+- start / close 不只是布尔状态切换；它们会修改当前 runtime 的 router、source、resolver 与配置状态。
 
 ### Metadata sources
 
@@ -62,10 +63,17 @@
 
 不要把“可从任意 URL 安装”写回文档，除非代码先支持。
 
+### State transition boundary
+
+- `installed`、`enabled`、`running` 是三个不同层级的状态。
+- `enable()` 处理当前 client 的允许运行状态，必要时才引发 runtime start。
+- `disable()` 处理当前 client 的允许运行状态移除，并在需要时关闭 runtime。
+- 若只想描述共享状态语义，写到 shared Product TDD；若涉及 `install()`、`enable()`、`disable()`、`start_enabled()` 的具体行为，留在这里。
+
 ## 编辑指引
 
 - 改 metadata 结构或安装布局时，同时更新这里和 [extensions/AGENTS.md](../../../extensions/AGENTS.md)。
-- 改 lifecycle 或 enablement 语义时，先判断 shared contract 是否变化；若是，先改 `InKCre/docs` 再 bump `docs/_shared`，并同步更新本地 [extension-runtime.md](../../../docs/20-product-tdd/extension-runtime.md) 中仍属本仓库的细节。
+- 改 lifecycle 或 enablement 语义时，先判断 shared contract 是否变化；若是，先改 `InKCre/docs` 再 bump `docs/_shared`，本地 runtime 细节则直接更新这里。
 - 若新增行为只是局部实现细节，优先写测试或代码注释，不要扩大本文件。
 
 ## 创建新 Extension 时要满足的最小形状

docs/20-product-tdd/extension-runtime.md

@@ -13,6 +13,7 @@ Progress checkpoint:
 - Phase 4 pilot implemented in `core-py` and pushed to `develop`
 - Phase 5 split gate recorded for remaining mixed docs
 - Phase 5A executed: shared skill relocated, local `info_base` guide upgraded, local mixed glossary removed
+- Phase 5B executed: `extension-runtime` split into shared state contract plus local runtime guide
 
 ## Intent
 
@@ -48,8 +49,9 @@ The previous read-only mirror fan-out design was judged brittle and operationall
 - `60-phase-5-mixed-doc-split-gate.md`
 - `61-phase-5-split-matrix.md`
 - `62-phase-5a-execution-output.md`
+- `63-phase-5b-execution-output.md`
 - `90-review-checklist.md`
 
 ## Immediate Next Step
 
-Proceed with the next gated split only after confirming which shared slices of `extension-runtime` and `info-base-ingestion` truly survive the shared-admission gate.
+Proceed with the final gated split only after confirming which shared slices of `info-base-ingestion` truly survive the shared-admission gate.

docs/_shared

@@ -83,6 +83,7 @@ Dependency:
 
 - Phase 0 completed.
 - Phase 1~3 local artifacts recorded in `31-phase-1-3-execution-output.md`.
-- Phase 4 rollout recorded in `51-phase-4-execution-output.md` and awaiting final review/commit.
+- Phase 4 rollout recorded in `51-phase-4-execution-output.md` and already pushed to `develop`.
 - Phase 5 planning recorded in `60-phase-5-mixed-doc-split-gate.md` and `61-phase-5-split-matrix.md`.
 - Phase 5A execution recorded in `62-phase-5a-execution-output.md`.
+- Phase 5B execution recorded in `63-phase-5b-execution-output.md`.

tasks/product-docs-repo-submodule/00-meta.md

@@ -6,7 +6,6 @@ Split the remaining mixed docs without centralizing `core-py`-local truth into `
 
 ## Remaining Mixed Inputs
 
-- `docs/20-product-tdd/extension-runtime.md`
 - `docs/20-product-tdd/info-base-ingestion.md`
 
 ## First-Principles Gate
@@ -29,9 +28,8 @@ If any gate fails, keep the statement local and improve the local container firs
 
 ### `docs/20-product-tdd/extension-runtime.md`
 
-- shared admission: partial and not yet fully proven
-- reason: some semantics may be cross-unit (`installed` vs `enabled`, client-scoped enablement), but many current bullets are still `core-py` runtime details
-- blocking risk: moving method-level lifecycle details into shared docs would lower maintainability
+- status: completed in Phase 5B
+- result: shared state semantics moved into `InKCre/docs/20-product-tdd/system-state-and-authority.md` and `InKCre/docs/20-product-tdd/cross-unit-contracts.md`; local runtime mechanics were absorbed into `app/business/extension/AGENTS.md`; the mixed local doc was removed
 
 ### `docs/20-product-tdd/info-base-ingestion.md`
 

tasks/product-docs-repo-submodule/00-phase-map.md

@@ -15,6 +15,8 @@ Status: completed in Phase 5A.
 
 ## `docs/20-product-tdd/extension-runtime.md`
 
+Status: completed in Phase 5B.
+
 | current cluster | target owner | target path | action | notes |
 | --- | --- | --- | --- | --- |
 | one extension ID per deployment / installation state authority | shared candidate | `InKCre/docs/20-product-tdd/system-state-and-authority.md` | rewrite if pressure is proven | express without `ExtensionModel` method-level detail |
@@ -36,11 +38,10 @@ Status: completed in Phase 5A.
 ## Recommended Execution Order
 
 1. rewrite `app/business/info_base/AGENTS.md` into a v9.2 local guide
-2. extract local runtime details from `docs/20-product-tdd/extension-runtime.md` into `app/business/extension/AGENTS.md`
-3. extract local ingestion mechanics from `docs/20-product-tdd/info-base-ingestion.md` into `app/business/info_base/AGENTS.md`
-4. only then populate shared `InKCre/docs/20-product-tdd/*` with the small set of statements that pass the shared-admission gate
+2. extract local ingestion mechanics from `docs/20-product-tdd/info-base-ingestion.md` into `app/business/info_base/AGENTS.md`
+3. only then populate shared `InKCre/docs/20-product-tdd/*` with the small set of statements that pass the shared-admission gate
 
 ## Recommendation
 
-Do not execute the remaining two splits in one commit.  
-`extension-runtime.md` and `info-base-ingestion.md` should remain gated until their shared slices can be expressed without `core-py` implementation leakage.
+Do not execute the remaining final split casually.  
+`info-base-ingestion.md` should remain gated until its shared slices can be expressed without `core-py` implementation leakage.

tasks/product-docs-repo-submodule/60-phase-5-mixed-doc-split-gate.md

@@ -0,0 +1,32 @@
+# Phase 5B Execution Output
+
+## Scope
+
+This file records the `extension-runtime` split of Phase 5:
+
+- move shared extension state semantics into `InKCre/docs`
+- absorb local runtime mechanics into `app/business/extension/AGENTS.md`
+- remove the mixed local Product TDD file
+
+## Shared Contract Output
+
+- updated `InKCre/docs/20-product-tdd/system-state-and-authority.md`
+  - extension installation authority is deployment-level and distinct from permission/runtime state
+- updated `InKCre/docs/20-product-tdd/cross-unit-contracts.md`
+  - `installed` / `enabled` / `running` are explicitly distinct
+  - enablement is client-scoped
+  - runtime start/stop has capability and API side effects
+
+## Local Output
+
+- updated `app/business/extension/AGENTS.md`
+  - local runtime mechanics are now the primary local source
+  - method-level state transition behavior stays local
+- removed local mixed file:
+  - `docs/20-product-tdd/extension-runtime.md`
+
+## Remaining Phase 5 Scope
+
+- `docs/20-product-tdd/info-base-ingestion.md`
+
+This remains gated until its shared slice can be written without `core-py`-only manager and resolver/storage leakage.