feat: 实现瘦客户端 + 云端大脑架构

## Phase 1: 基础设施层
- 一键安装脚本 (scripts/install.sh)
  - 支持 macOS/Linux，自动检测系统架构
  - 依赖检查、服务注册、QR码配对
- 自动错误上报 (daemon/lib/telemetry/)
  - error_collector: 错误收集与脱敏
  - issue_reporter: GitHub Issue 自动创建
  - telemetry_config: 用户隐私同意管理

## Phase 2: 能力包热更新
- 能力包格式 (daemon/lib/capabilities/)
  - YAML 工作流定义，支持版本控制
  - capability_loader: 本地缓存 + 云端拉取
  - capability_registry: 9个内置能力
  - capability_updater: 自动更新检查
  - capability_executor: 工作流执行引擎

## Phase 3: 安全远程控制
- 设备配对 (daemon/lib/security/)
  - QR码扫码配对 + 端到端加密
  - HMAC 认证 + 时间戳验证
- 分级权限系统
  - auto/notify/confirm/deny 四级权限
  - 危险操作二次确认机制

## Phase 4: AI 自动修复
- 问题分析 (daemon/lib/autofix/)
  - 已知模式匹配 + AI 根因分析
  - 分类: known/user_error/environmental/performance
- 自动修复流水线
  - AI 生成修复 → 测试 → 灰度发布 (1%→10%→100%)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: cw

capabilities/examples/desktop.open_app.yaml

@@ -0,0 +1,36 @@
+# Example Capability Package: Open Application
+# This demonstrates the capability package format for OpenCLI
+
+id: desktop.open_app
+version: 1.0.0
+name: Open Application
+description: Opens an application by name on the desktop
+author: opencli
+min_executor_version: 0.1.0
+platforms: [macos, windows, linux]
+
+# Input parameters
+parameters:
+  - name: app_name
+    type: string
+    required: true
+    description: Name of the application to open
+
+# Execution workflow
+workflow:
+  - action: open_app
+    params:
+      app_name: "${app_name}"
+
+# Required base executors
+requires_executors:
+  - open_app
+
+# Tags for discovery
+tags:
+  - desktop
+  - app
+  - launch
+  - open
+
+is_system: true

capabilities/examples/workflow.multi_step.yaml

@@ -0,0 +1,65 @@
+# Example: Multi-Step Workflow Capability
+# Demonstrates complex workflow with conditions and error handling
+
+id: workflow.backup_and_notify
+version: 1.0.0
+name: Backup and Notify
+description: Creates a backup of files and sends a notification
+author: opencli
+min_executor_version: 0.2.0
+platforms: [macos, linux]
+
+parameters:
+  - name: source_dir
+    type: directory
+    required: true
+    description: Directory to backup
+
+  - name: backup_name
+    type: string
+    required: false
+    description: Name for the backup file
+    default: backup
+
+  - name: notify
+    type: bool
+    required: false
+    description: Whether to send notification on completion
+    default: true
+
+workflow:
+  # Step 1: Check if source directory exists
+  - action: file_operation
+    params:
+      operation: list
+      directory: "${source_dir}"
+    store_result: source_files
+    on_error: fail
+
+  # Step 2: Create backup archive
+  - action: run_command
+    params:
+      command: tar
+      args:
+        - -czf
+        - "/tmp/${backup_name}_$(date +%Y%m%d).tar.gz"
+        - "${source_dir}"
+    timeout: 5m
+    store_result: backup_result
+
+  # Step 3: Send notification if enabled
+  - action: system_notify
+    condition: "${notify} == true"
+    params:
+      title: Backup Complete
+      message: "Backup created: ${backup_name}"
+
+requires_executors:
+  - file_operation
+  - run_command
+  - system_notify
+
+tags:
+  - backup
+  - workflow
+  - automation

daemon/lib/autofix/autofix.dart

@@ -0,0 +1,29 @@
+/// OpenCLI AutoFix Module
+///
+/// Provides AI-powered issue analysis and automatic fix generation
+/// with gradual rollout capabilities.
+///
+/// Usage:
+/// ```dart
+/// final analyzer = IssueAnalyzer();
+/// final pipeline = AutofixPipeline(
+///   analyzer: analyzer,
+///   errorCollector: errorCollector,
+///   config: AutofixConfig(
+///     enabled: true,
+///     githubRepo: 'user/opencli',
+///     githubToken: 'ghp_...',
+///   ),
+/// );
+///
+/// pipeline.start();
+///
+/// // Manually create a fix
+/// final analysis = await analyzer.analyze(errorReport);
+/// final fix = await pipeline.createFix(errorReport, analysis);
+/// ```
+
+library autofix;
+
+export 'issue_analyzer.dart';
+export 'autofix_pipeline.dart';