@danceiny/gotry 0.0.1-rc.16 → 0.0.1-rc.18

package/dist/scripts/bootstrap-tests.js

@@ -32,20 +32,19 @@ const c1 = runBootstrap([
     '--check-only'
 ], {});
 assert.equal(c1.code, 0, `--check-only 应 exit 0,实际 ${c1.code}\n${c1.out}`);
-assert.ok(c1.out.includes('hbcli'), '报告应含 hbcli 节');
-assert.ok(c1.out.includes('agent-reach'), '报告应含 agent-reach 节');
-assert.ok(c1.out.includes('flyai'), '报告应含 flyai(无需安装)节');
-assert.ok(c1.out.includes('dsh-better-sidebar'), '报告应含 dsh-better-sidebar 节(issue #25 产物查看面)');
-assert.ok(c1.out.includes('Session Bridge'), '报告应含会话扩展节(issue #21 传输层方案 C)');
-console.log('1. --check-only 探测报告 exit 0(hbcli/agent-reach/flyai/dsh-better-sidebar/会话扩展 五节齐)OK');
+assert.ok(c1.out.includes('Session Bridge'), '报告应含扩展就位节(issue #21 传输层方案 C)');
+assert.ok(!c1.out.includes('hbcli'), 'setup 不再替用户管 hbcli(已让出)');
+assert.ok(!c1.out.includes('agent-reach'), 'setup 不再替用户管 agent-reach(已让出)');
+assert.ok(!c1.out.includes('dsh-better-sidebar'), 'setup 不再替用户管 dsh-better-sidebar(已让出)');
+console.log('1. --check-only 探测报告 exit 0(扩展就位 + 让出 hbcli/agent-reach/sidebar)OK');
 const c2 = runBootstrap([
     '--auto'
 ], {
     GOTRY_SETUP_SKIP: '1'
 });
-assert.equal(c2.code, 0, '--auto 跳过态应 exit 0(永不挡 npm install)');
+assert.equal(c2.code, 0, '--auto 跳过态应 exit 0');
 assert.ok(c2.out.includes('跳过'), '应输出跳过说明');
-console.log('2. --auto + GOTRY_SETUP_SKIP=1 → exit 0(安装永不失败)OK');
+console.log('2. --auto + GOTRY_SETUP_SKIP=1 → exit 0(永不挡 npm install)OK');
 const c3 = runBootstrap([], {
     GOTRY_SETUP_SKIP: '1'
 });
@@ -55,48 +54,55 @@ console.log('3. 显式模式 + GOTRY_SETUP_SKIP=1 → exit 0 OK');
 const c4 = runBootstrap([
     '--check-only'
 ], {
-    GOTRY_SETUP_SIDEBAR: '0'
+    GOTRY_SETUP_EXTENSION: '0'
 });
 assert.equal(c4.code, 0, '单项跳过态应 exit 0');
-assert.ok(c4.out.includes('GOTRY_SETUP_SIDEBAR=0 跳过'), '应输出侧栏单项跳过说明');
-assert.ok(c4.out.includes('hbcli'), '其余节不受单项开关影响');
-console.log('4. GOTRY_SETUP_SIDEBAR=0 单项跳过(其余节照常)OK');
+assert.ok(c4.out.includes('GOTRY_SETUP_EXTENSION=0 跳过'), '应输出扩展单项跳过说明');
+console.log('4. GOTRY_SETUP_EXTENSION=0 单项跳过 OK');
 const c5 = runBootstrap([
-    '--check-only'
-], {});
-assert.ok(c5.out.includes('.gotry/extension'), '扩展报告应含落位路径 ~/.gotry/extension(绝对路径形态)');
-const c5b = runBootstrap([
-    '--check-only'
-], {
-    GOTRY_SETUP_EXTENSION: '0'
-});
-assert.equal(c5b.code, 0, '扩展单项跳过态应 exit 0');
-assert.ok(c5b.out.includes('GOTRY_SETUP_EXTENSION=0 跳过'), '应输出扩展单项跳过说明');
-console.log('5. 会话扩展节(check-only 报告 + GOTRY_SETUP_EXTENSION=0 单项跳过)OK');
-const c6 = runBootstrap([
     'wizard',
     '--dry-run'
 ], {});
-assert.equal(c6.code, 0, `wizard --dry-run 应 exit 0,实际 ${c6.code}\n${c6.out}`);
-assert.ok(c6.out.includes('dry-run'), '应输出 dry-run 字样');
-assert.ok(c6.out.includes('Gotry Wizard') || c6.out.includes('gotry-wizard') || c6.out.includes('3 步'), '应输出引导步骤');
-assert.ok(c6.out.includes('ensure-extension-files'), 'dry-run 应列 5 步');
-assert.ok(c6.out.includes('open-chrome-extensions'), 'dry-run 应列开 chrome://extensions');
-assert.ok(c6.out.includes('clipboard-extension-path'), 'dry-run 应列剪贴板');
-assert.ok(c6.out.includes('panel-guide'), 'dry-run 应列面板');
-assert.ok(c6.out.includes('watch-extension-ready'), 'dry-run 应列 watch precheck');
-console.log('6. wizard 子命令(--dry-run 零网络,5 步齐全 + 引导文案)OK');
-const c7 = runBootstrap([
+assert.equal(c5.code, 0, `wizard --dry-run 应 exit 0,实际 ${c5.code}\n${c5.out}`);
+assert.ok(c5.out.includes('dry-run'), '应输出 dry-run 字样');
+assert.ok(c5.out.includes('gotry-wizard'), '应输出 [gotry-wizard] 标签');
+assert.ok(c5.out.includes('ensure-extension-files'), 'dry-run 应列 ensure-extension-files');
+assert.ok(c5.out.includes('watch-extension-ready'), 'dry-run 应列 watch-extension-ready');
+console.log('5. wizard 子命令(--dry-run 零网络,2 步齐全 + 极简 stdout)OK');
+const c6 = runBootstrap([
     'wizard'
 ], {
     GOTRY_SETUP_EXTENSION: '0',
     GOTRY_ONBOARDING_TIMEOUT_MS: '600',
     GOTRY_ONBOARDING_INTERVAL_MS: '200'
 });
-assert.equal(c7.code, 1, `wizard(超时)应 exit 1,实际 ${c7.code}\n${c7.out}`);
-assert.ok(c7.out.includes('3 步') || c7.out.includes('gotry-wizard'), '应输出引导标题');
-console.log('7. wizard 真实路径(扩展未就绪,exit 1 + 引导标题 + 心跳)OK');
-console.log('BOOTSTRAP TESTS: 7/7 OK(探测报告/跳过开关/单项开关/postinstall 非致命/会话扩展/wizard --dry-run/wizard 真实)');
+assert.equal(c6.code, 1, `wizard(超时)应 exit 1,实际 ${c6.code}\n${c6.out}`);
+assert.ok(c6.out.includes('gotry-wizard'), '应输出 [gotry-wizard] 标签');
+console.log('6. wizard 真实路径(扩展未就绪,exit 1 + 心跳)OK');
+const c7 = runBootstrap([
+    '--check-only',
+    '--extension-from=github'
+], {
+    GOTRY_SETUP_HBCLI: '0',
+    GOTRY_SETUP_REACH: '0',
+    GOTRY_SETUP_SIDEBAR: '0',
+    GOTRY_EXTENSION_RELEASE_BASE: 'http://127.0.0.1:1/releases'
+});
+assert.equal(c7.code, 0, `github 通道降级应 exit 0,实际 ${c7.code}\n${c7.out}`);
+assert.ok(c7.out.includes('GitHub Releases 下载通道'), '应打印 github 通道标题');
+assert.ok(c7.out.includes('降级包内副本'), '失败应显式降级 bundled');
+const c7b = runBootstrap([
+    '--check-only',
+    '--extension-from=不合法值'
+], {
+    GOTRY_SETUP_HBCLI: '0',
+    GOTRY_SETUP_REACH: '0',
+    GOTRY_SETUP_SIDEBAR: '0'
+});
+assert.equal(c7b.code, 0, `非法 --extension-from 值应回落 bundled 且 exit 0,实际 ${c7b.code}\n${c7b.out}`);
+assert.ok(!c7b.out.includes('下载通道'), '非法值不应进入 github 通道');
+console.log('7. 扩展分发 github 通道(不可达基址即时降级 + 非法值回落 bundled)OK');
+console.log('BOOTSTRAP TESTS: 7/7 OK(扩展就位 + 跳过开关 / wizard --dry-run / wizard 真实 / 扩展分发通道 / 显式跳过 + auto 跳过 + 单项跳过)');
 
 
-//# sourceURL=/Users/bytedance/work/gotry-publish/ts/scripts/bootstrap-tests.ts
+//# sourceURL=ts/scripts/bootstrap-tests.ts

package/dist/scripts/build-changelog.js

@@ -276,4 +276,4 @@ if (process.argv[1]?.endsWith('build-changelog.ts')) {
 }
 
 
-//# sourceURL=/Users/bytedance/work/gotry-publish/ts/scripts/build-changelog.ts
+//# sourceURL=ts/scripts/build-changelog.ts

package/dist/scripts/changelog-tests.js

@@ -162,4 +162,4 @@ ok('parseCommit feat(scope)!: breaking change marker 容错');
 console.log(`changelog tests: ${passed} 组断言全绿(纯函数)`);
 
 
-//# sourceURL=/Users/bytedance/work/gotry-publish/ts/scripts/changelog-tests.ts
+//# sourceURL=ts/scripts/changelog-tests.ts

package/dist/scripts/companion-tests.js

@@ -109,4 +109,4 @@ pass('多人并存与 id 稳定性', ()=>{
 console.log(`\nCOMPANION TESTS: ${n}/4 OK(memory-design P2 守门面)`);
 
 
-//# sourceURL=/Users/bytedance/work/gotry-publish/ts/scripts/companion-tests.ts
+//# sourceURL=ts/scripts/companion-tests.ts

package/dist/scripts/diff-test.js

@@ -36,4 +36,4 @@ for (const id of Object.keys(tsV)){
 console.log('\nDIFF TEST OK: 双路径判定一致(纯 TS,无 Python 依赖)');
 
 
-//# sourceURL=/Users/bytedance/work/gotry-publish/ts/scripts/diff-test.ts
+//# sourceURL=ts/scripts/diff-test.ts

package/dist/scripts/dsh-runtime-closure-tests.js

@@ -0,0 +1,225 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { parsePnpmDshLock, parsePnpmRootDshImporter, REQUIRED_DSH_RUNTIME_PACKAGE_COUNT, validateDshRuntimeClosure, validatePnpmRootDshImporter } from './dsh-runtime-closure.js';
+const VERSION = '0.1.2-alpha.3';
+function validInput() {
+    return {
+        dependencies: {
+            '@deepseek-ai/dsh': VERSION,
+            '@deepseek-ai/dsh-session-title': VERSION
+        },
+        lockPackages: {
+            'node_modules/@deepseek-ai/dsh': {
+                version: VERSION
+            },
+            'node_modules/@deepseek-ai/dsh-session-title': {
+                version: VERSION
+            }
+        },
+        runtimeVersion: VERSION
+    };
+}
+test('accepts an exact coherent DSH prerelease closure', ()=>{
+    assert.deepEqual(validateDshRuntimeClosure(validInput()), {
+        names: [
+            '@deepseek-ai/dsh',
+            '@deepseek-ai/dsh-session-title'
+        ],
+        version: VERSION
+    });
+});
+test('rejects a lock package missing from the published direct dependencies', ()=>{
+    const input = validInput();
+    input.dependencies = {
+        '@deepseek-ai/dsh': VERSION
+    };
+    assert.throws(()=>validateDshRuntimeClosure(input), /DSH closure 未精确声明/);
+});
+test('rejects an extra ranged DSH dependency absent from the tested lock closure', ()=>{
+    const input = validInput();
+    input.dependencies['@deepseek-ai/dsh-web'] = '^0.1.2-alpha.3';
+    assert.throws(()=>validateDshRuntimeClosure(input), /DSH manifest 与 lock 集合不一致/);
+});
+test('rejects a nested DSH package from another prerelease', ()=>{
+    const input = validInput();
+    input.lockPackages['node_modules/@deepseek-ai/dsh/node_modules/@deepseek-ai/dsh-session-title'] = {
+        version: '0.1.2-alpha.4'
+    };
+    assert.throws(()=>validateDshRuntimeClosure(input), /DSH lock 版本漂移/);
+});
+test('rejects drift from the runtime spawn guard version', ()=>{
+    const input = validInput();
+    input.runtimeVersion = '0.1.2-alpha.4';
+    assert.throws(()=>validateDshRuntimeClosure(input), /DSH runtime guard 版本漂移/);
+});
+test('parses each pnpm DSH resolution once across packages and snapshots', ()=>{
+    const lock = `
+packages:
+  '@deepseek-ai/dsh@0.1.2-alpha.3': {}
+  '@deepseek-ai/dsh-session@0.1.2-alpha.3': {}
+snapshots:
+  '@deepseek-ai/dsh@0.1.2-alpha.3': {}
+`;
+    assert.deepEqual(parsePnpmDshLock(lock), {
+        'node_modules/@deepseek-ai/dsh': {
+            version: VERSION
+        },
+        'node_modules/@deepseek-ai/dsh-session': {
+            version: VERSION
+        }
+    });
+});
+test('preserves two pnpm resolutions of the same DSH package for mixed-version rejection', ()=>{
+    const lock = `
+packages:
+  '@deepseek-ai/dsh@0.1.2-alpha.3': {}
+  '@deepseek-ai/dsh-session@0.1.2-alpha.3': {}
+  '@deepseek-ai/dsh-session@0.1.2-alpha.4': {}
+`;
+    const parsed = parsePnpmDshLock(lock);
+    assert.equal(Object.keys(parsed).length, 3);
+    assert.throws(()=>validateDshRuntimeClosure({
+            dependencies: {
+                '@deepseek-ai/dsh': VERSION,
+                '@deepseek-ai/dsh-session': VERSION
+            },
+            lockPackages: parsed,
+            runtimeVersion: VERSION
+        }), /DSH lock 版本漂移/);
+});
+test('parses only the root pnpm importer DSH entries', ()=>{
+    const lock = `
+lockfileVersion: '9.0'
+importers:
+  .:
+    dependencies:
+      '@deepseek-ai/dsh':
+        specifier: 0.1.2-alpha.3
+        version: 0.1.2-alpha.3(peer@1.0.0)
+      '@deepseek-ai/dsh-session':
+        specifier: 0.1.2-alpha.3
+        version: 0.1.2-alpha.3
+  ts:
+    dependencies:
+      '@deepseek-ai/dsh-web':
+        specifier: 0.1.2-alpha.4
+        version: 0.1.2-alpha.4
+packages: {}
+`;
+    assert.deepEqual(parsePnpmRootDshImporter(lock), {
+        '@deepseek-ai/dsh': {
+            specifier: VERSION,
+            resolvedVersion: VERSION
+        },
+        '@deepseek-ai/dsh-session': {
+            specifier: VERSION,
+            resolvedVersion: VERSION
+        }
+    });
+});
+test('rejects a pnpm root importer missing a published DSH dependency', ()=>{
+    assert.throws(()=>validatePnpmRootDshImporter({
+            dependencies: validInput().dependencies,
+            importerEntries: {
+                '@deepseek-ai/dsh': {
+                    specifier: VERSION,
+                    resolvedVersion: VERSION
+                }
+            },
+            runtimeVersion: VERSION
+        }), /pnpm root importer 与 manifest 集合不一致/);
+});
+test('rejects a ranged DSH specifier in the pnpm root importer', ()=>{
+    assert.throws(()=>validatePnpmRootDshImporter({
+            dependencies: validInput().dependencies,
+            importerEntries: {
+                '@deepseek-ai/dsh': {
+                    specifier: VERSION,
+                    resolvedVersion: VERSION
+                },
+                '@deepseek-ai/dsh-session-title': {
+                    specifier: '^0.1.2-alpha.3',
+                    resolvedVersion: VERSION
+                }
+            },
+            runtimeVersion: VERSION
+        }), /pnpm root importer 未精确锁定/);
+});
+test('rejects a drifted resolved DSH version in the pnpm root importer', ()=>{
+    assert.throws(()=>validatePnpmRootDshImporter({
+            dependencies: validInput().dependencies,
+            importerEntries: {
+                '@deepseek-ai/dsh': {
+                    specifier: VERSION,
+                    resolvedVersion: '0.1.2-alpha.4'
+                },
+                '@deepseek-ai/dsh-session-title': {
+                    specifier: VERSION,
+                    resolvedVersion: VERSION
+                }
+            },
+            runtimeVersion: VERSION
+        }), /pnpm root importer resolved 版本漂移/);
+});
+test('rejects a missing resolved DSH version in the pnpm root importer', ()=>{
+    const lock = `
+importers:
+  .:
+    dependencies:
+      '@deepseek-ai/dsh':
+        specifier: 0.1.2-alpha.3
+`;
+    assert.throws(()=>parsePnpmRootDshImporter(lock), /pnpm root importer version 不可用/);
+});
+test('rejects duplicate resolved DSH versions in the pnpm root importer', ()=>{
+    const lock = `
+importers:
+  .:
+    dependencies:
+      '@deepseek-ai/dsh':
+        specifier: 0.1.2-alpha.3
+        version: 0.1.2-alpha.3
+        version: 0.1.2-alpha.4
+`;
+    assert.throws(()=>parsePnpmRootDshImporter(lock), /pnpm root importer version 不可用/);
+});
+test('rejects a coherent closure below the required package count', ()=>{
+    assert.throws(()=>validateDshRuntimeClosure({
+            ...validInput(),
+            expectedPackageCount: REQUIRED_DSH_RUNTIME_PACKAGE_COUNT
+        }), /DSH closure 包数量不符/);
+});
+test('rejects a coherent root importer below the required package count', ()=>{
+    assert.throws(()=>validatePnpmRootDshImporter({
+            dependencies: validInput().dependencies,
+            importerEntries: {
+                '@deepseek-ai/dsh': {
+                    specifier: VERSION,
+                    resolvedVersion: VERSION
+                },
+                '@deepseek-ai/dsh-session-title': {
+                    specifier: VERSION,
+                    resolvedVersion: VERSION
+                }
+            },
+            runtimeVersion: VERSION,
+            expectedPackageCount: REQUIRED_DSH_RUNTIME_PACKAGE_COUNT
+        }), /pnpm root importer 包数量不符/);
+});
+test('rejects duplicate DSH entries in the pnpm root importer', ()=>{
+    const lock = `
+importers:
+  .:
+    dependencies:
+      '@deepseek-ai/dsh':
+        specifier: 0.1.2-alpha.3
+        version: 0.1.2-alpha.3
+      '@deepseek-ai/dsh':
+        specifier: 0.1.2-alpha.3
+        version: 0.1.2-alpha.3
+`;
+    assert.throws(()=>parsePnpmRootDshImporter(lock), /pnpm root importer DSH 依赖重复/);
+});
+
+
+//# sourceURL=ts/scripts/dsh-runtime-closure-tests.ts

package/dist/scripts/dsh-runtime-closure.js

@@ -0,0 +1,150 @@
+export const REQUIRED_DSH_RUNTIME_PACKAGE_COUNT = 216;
+function yamlScalar(value) {
+    const trimmed = value.trim().replace(/\s+#.*$/, '');
+    const quoted = trimmed.match(/^(['"])(.*)\1$/);
+    return quoted?.[2] ?? trimmed;
+}
+function indentation(line) {
+    return line.match(/^ */)?.[0].length ?? 0;
+}
+function resolvedPnpmVersion(value) {
+    return yamlScalar(value).replace(/\(.+$/, '');
+}
+export function parsePnpmRootDshImporter(text) {
+    const lines = text.split(/\r?\n/);
+    const importers = lines.map((line, index)=>line === 'importers:' ? index : -1).filter((index)=>index >= 0);
+    if (importers.length !== 1) throw new Error('pnpm lock importers 区块不可用');
+    const importersStart = importers[0];
+    const importersEnd = lines.findIndex((line, index)=>index > importersStart && line.trim() !== '' && indentation(line) === 0);
+    const rootCandidates = lines.map((line, index)=>index > importersStart && (importersEnd < 0 || index < importersEnd) && /^ {2}(?:\.|'\.'|"\."):\s*$/.test(line) ? index : -1).filter((index)=>index >= 0);
+    if (rootCandidates.length !== 1) throw new Error('pnpm root importer 不唯一');
+    const rootStart = rootCandidates[0];
+    const rootEndRelative = lines.slice(rootStart + 1, importersEnd < 0 ? lines.length : importersEnd).findIndex((line)=>line.trim() !== '' && indentation(line) <= 2);
+    const rootEnd = rootEndRelative < 0 ? importersEnd < 0 ? lines.length : importersEnd : rootStart + 1 + rootEndRelative;
+    const dependencyBlocks = lines.map((line, index)=>index > rootStart && index < rootEnd && /^ {4}dependencies:\s*$/.test(line) ? index : -1).filter((index)=>index >= 0);
+    if (dependencyBlocks.length !== 1) throw new Error('pnpm root importer dependencies 区块不可用');
+    const dependenciesStart = dependencyBlocks[0];
+    const dependenciesEndRelative = lines.slice(dependenciesStart + 1, rootEnd).findIndex((line)=>line.trim() !== '' && indentation(line) <= 4);
+    const dependenciesEnd = dependenciesEndRelative < 0 ? rootEnd : dependenciesStart + 1 + dependenciesEndRelative;
+    const entries = lines.map((line, index)=>{
+        if (index <= dependenciesStart || index >= dependenciesEnd) return null;
+        const match = line.match(/^ {6}(['"]?)([^'":\s]+)\1:\s*$/);
+        return match ? {
+            index,
+            name: match[2]
+        } : null;
+    }).filter((entry)=>entry !== null);
+    const importerEntries = {};
+    for(let entryIndex = 0; entryIndex < entries.length; entryIndex += 1){
+        const entry = entries[entryIndex];
+        if (entry.name !== '@deepseek-ai/dsh' && !entry.name.startsWith('@deepseek-ai/dsh-')) continue;
+        if (Object.hasOwn(importerEntries, entry.name)) throw new Error(`pnpm root importer DSH 依赖重复:${entry.name}`);
+        const end = entries[entryIndex + 1]?.index ?? dependenciesEnd;
+        const block = lines.slice(entry.index + 1, end);
+        const specifiers = block.map((line)=>line.match(/^ {8}specifier:\s*(.+)$/)?.[1]).filter((value)=>value !== undefined);
+        if (specifiers.length !== 1) throw new Error(`pnpm root importer specifier 不可用:${entry.name}`);
+        const versions = block.map((line)=>line.match(/^ {8}version:\s*(.+)$/)?.[1]).filter((value)=>value !== undefined);
+        if (versions.length !== 1) throw new Error(`pnpm root importer version 不可用:${entry.name}`);
+        importerEntries[entry.name] = {
+            specifier: yamlScalar(specifiers[0]),
+            resolvedVersion: resolvedPnpmVersion(versions[0])
+        };
+    }
+    return importerEntries;
+}
+export function validatePnpmRootDshImporter(input) {
+    const manifestNames = Object.keys(input.dependencies).filter((name)=>name === '@deepseek-ai/dsh' || name.startsWith('@deepseek-ai/dsh-')).sort();
+    const importerNames = Object.keys(input.importerEntries).sort();
+    const missing = manifestNames.filter((name)=>!importerNames.includes(name));
+    const extra = importerNames.filter((name)=>!manifestNames.includes(name));
+    if (missing.length > 0 || extra.length > 0) {
+        throw new Error(`pnpm root importer 与 manifest 集合不一致:missing=${missing.join(',') || '-'};extra=${extra.join(',') || '-'}`);
+    }
+    for (const name of importerNames){
+        const importerEntry = input.importerEntries[name];
+        if (input.dependencies[name] !== input.runtimeVersion || importerEntry.specifier !== input.runtimeVersion) {
+            throw new Error(`pnpm root importer 未精确锁定:${name}@${input.runtimeVersion}`);
+        }
+        if (importerEntry.resolvedVersion !== input.runtimeVersion) {
+            throw new Error(`pnpm root importer resolved 版本漂移:${name}@${importerEntry.resolvedVersion}(expected ${input.runtimeVersion})`);
+        }
+    }
+    if (input.expectedPackageCount !== undefined && importerNames.length !== input.expectedPackageCount) {
+        throw new Error(`pnpm root importer 包数量不符:${importerNames.length}(expected ${input.expectedPackageCount})`);
+    }
+    return {
+        names: importerNames,
+        version: input.runtimeVersion
+    };
+}
+export function parsePnpmDshLock(text) {
+    const packages = {};
+    const seen = new Set();
+    const variants = new Map();
+    const entry = /^\s{2}['"]?(\@deepseek-ai\/dsh(?:-[^@'":\s]+)?)@([^'":\s(]+)(?:\([^'"]*\))?['"]?:/gm;
+    for (const match of text.matchAll(entry)){
+        const name = match[1];
+        const version = match[2];
+        const identity = `${name}@${version}`;
+        if (seen.has(identity)) continue;
+        seen.add(identity);
+        const variant = variants.get(name) ?? 0;
+        variants.set(name, variant + 1);
+        const prefix = variant === 0 ? '' : `.pnpm-variant-${variant}/node_modules/`;
+        packages[`node_modules/${prefix}${name}`] = {
+            version
+        };
+    }
+    return packages;
+}
+export function validateDshRuntimeClosure(input) {
+    const dshVersion = input.dependencies['@deepseek-ai/dsh'];
+    if (typeof dshVersion !== 'string' || !/^\d+\.\d+\.\d+-[0-9A-Za-z.-]+$/.test(dshVersion)) {
+        throw new Error('@deepseek-ai/dsh 必须以精确 prerelease 版本声明');
+    }
+    if (dshVersion !== input.runtimeVersion) {
+        throw new Error(`DSH runtime guard 版本漂移:${input.runtimeVersion}(manifest ${dshVersion})`);
+    }
+    const dshNodes = Object.entries(input.lockPackages).flatMap(([path, metadata])=>{
+        const match = path.match(/(?:^|\/)node_modules\/(\@deepseek-ai\/dsh(?:-[^/]+)?)$/);
+        return match ? [
+            {
+                name: match[1],
+                version: metadata.version
+            }
+        ] : [];
+    }).sort((left, right)=>left.name.localeCompare(right.name));
+    if (dshNodes.length === 0) throw new Error('package-lock 未解析到 DSH runtime closure');
+    for (const dependency of dshNodes){
+        if (dependency.version !== dshVersion) {
+            throw new Error(`DSH lock 版本漂移:${dependency.name}@${dependency.version ?? 'missing'}(expected ${dshVersion})`);
+        }
+    }
+    const lockNames = [
+        ...new Set(dshNodes.map((dependency)=>dependency.name))
+    ].sort();
+    const manifestNames = Object.keys(input.dependencies).filter((name)=>name === '@deepseek-ai/dsh' || name.startsWith('@deepseek-ai/dsh-')).sort();
+    const missing = lockNames.filter((name)=>!manifestNames.includes(name));
+    const extra = manifestNames.filter((name)=>!lockNames.includes(name));
+    if (missing.length > 0) {
+        throw new Error(`DSH closure 未精确声明:${missing[0]}@${dshVersion}`);
+    }
+    if (extra.length > 0) {
+        throw new Error(`DSH manifest 与 lock 集合不一致:missing=${missing.join(',') || '-'};extra=${extra.join(',') || '-'}`);
+    }
+    for (const name of manifestNames){
+        if (input.dependencies[name] !== dshVersion) {
+            throw new Error(`DSH closure 未精确声明:${name}@${dshVersion}`);
+        }
+    }
+    if (input.expectedPackageCount !== undefined && lockNames.length !== input.expectedPackageCount) {
+        throw new Error(`DSH closure 包数量不符:${lockNames.length}(expected ${input.expectedPackageCount})`);
+    }
+    return {
+        names: lockNames,
+        version: dshVersion
+    };
+}
+
+
+//# sourceURL=ts/scripts/dsh-runtime-closure.ts

package/dist/scripts/effect-tests.js

@@ -471,4 +471,4 @@ console.log('10c. mock 解译器夹具回放(预订链 CI 形态)OK');
 console.log('EFFECT INTERPRETER TESTS: 10/10 OK(effect_interpreter.v1:注册表封闭/退避链/断路三态/Sentinel 不重试/mock 夹具/SESSION 红线/真实降级/M0 预订链读效应,纯离线)');
 
 
-//# sourceURL=/Users/bytedance/work/gotry-publish/ts/scripts/effect-tests.ts
+//# sourceURL=ts/scripts/effect-tests.ts

package/dist/scripts/engine-run.js

@@ -11,4 +11,4 @@ console.log(`(TS 引擎总耗时含 WASM init: ${Date.now() - t0}ms, recommended
 console.log(result['answer_md']);
 
 
-//# sourceURL=/Users/bytedance/work/gotry-publish/ts/scripts/engine-run.ts
+//# sourceURL=ts/scripts/engine-run.ts

package/dist/scripts/engine-tests.js

@@ -42,4 +42,4 @@ assert.ok(v.suggestions.some((s)=>s.text.includes('预算提高到')));
 console.log('TS ENGINE TESTS: 8/8 OK');
 
 
-//# sourceURL=/Users/bytedance/work/gotry-publish/ts/scripts/engine-tests.ts
+//# sourceURL=ts/scripts/engine-tests.ts