✨ feat: add extension system documentation and commands

- Introduce a new documentation file for the Extensions System in VibeAuracle, detailing the structure and management commands for extensions.
- Update the usage documentation to include commands for managing installed extensions.
- Refactor extension.go to streamline imports and enhance clarity.
- Update go.mod and go.sum to include the uuid package as a dependency.

Author: nathfavour

docs/docs/extensions.md

@@ -0,0 +1,54 @@
+---
+sidebar_position: 12
+---
+
+# Extensions System
+
+VibeAuracle features a professional-grade extension system where tools are treated as user-space applications. This allows for granular control over tool permissions, communication methods, and lifecycle management.
+
+## 📁 Extension Structure
+
+Each extension resides in its own directory within the VibeAuracle data directory:
+`~/.vibeauracle/vibes/{extension-uuid}/vibe.json`
+
+### `vibe.json` Schema
+
+```json
+{
+  "uuid": "unique-identifier",
+  "name": "extension-name",
+  "description": "helpful description",
+  "version": "0.1.0",
+  "enabled": true,
+  "comms": {
+    "tui": true,
+    "cli": true,
+    "uds": true
+  },
+  "capabilities": {
+    "agentic": true,
+    "read_only": false
+  }
+}
+```
+
+## 🛠️ Management Commands
+
+| Command | Description |
+|---------|-------------|
+| `vibeaura extension list` | List all installed extensions and their status. |
+| `vibeaura extension register <name> <desc>` | Generate a unique `vibe.json` for a new tool. |
+| `vibeaura extension enable <uuid>` | Enable an extension. |
+| `vibeaura extension disable <uuid>` | Disable an extension. |
+| `vibeaura extension install <repo>` | (Planned) Install from a remote repository. |
+| `vibeaura extension uninstall <uuid>` | Remove an extension and its data. |
+
+## 🚀 Pre-installed Extensions
+
+VibeAuracle comes with two core extensions enabled by default:
+1. **Auracrab**: Intelligent Rust toolchain assistant.
+2. **Autocommiter**: AI-powered git commit automator.
+
+## 🛡️ Security
+
+Extensions that are disabled or do not have `agentic: true` capability cannot be invoked by the AI agent, even if their binaries are present on the system. This provides a robust "opt-in" model for all third-party integrations.

docs/docs/usage.md

@@ -17,6 +17,7 @@ VibeAuracle provides both an interactive TUI and a set of CLI commands for syste
 | `vibeaura config` | View or update configuration |
 | `vibeaura auth` | Manage credentials securely |
 | `vibeaura daemon start` | Start the background IPC server |
+| `vibeaura extension list` | Manage installed AI extensions |
 | `vibeaura uninstall` | Remove the tool but keep your data |
 
 ## TUI Commands (Inside the Chat)

internal/vibe/extension.go

@@ -1,15 +1,13 @@
 package vibe
 
 import (
-	"context"
 	"encoding/json"
 	"fmt"
 	"os"
 	"path/filepath"
 	"sync"
 
 	"github.com/google/uuid"
-	"github.com/nathfavour/vibeauracle/sys"
 )
 
 // ExtensionComms defines preferred communication methods

internal/vibe/go.mod

@@ -1,3 +1,5 @@
 module github.com/nathfavour/vibeauracle/internal/vibe
 
 go 1.25.5
+
+require github.com/google/uuid v1.6.0 // indirect

internal/vibe/go.sum

@@ -0,0 +1,2 @@
+github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
+github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=