@godv61/dsh-task-engine 0.23.4 → 0.23.6

package/.preset-test.mjs

@@ -0,0 +1,72 @@
+/**
+ * Tests for the `eng` preset derivation.
+ *
+ * The preset must track the RUNNING harness's `standard`, because a copy that
+ * freezes once goes stale the moment DSH edits its own composition, and a stale
+ * preset fails to load entirely. Two real regressions motivate these cases:
+ *
+ *   - DSH 2026-09-06 moved the persona row from `text:` to `prefix`/`suffix`.
+ *   - DSH 2026-09-13 replaced the `workflow-worker-thread` row with
+ *     `workflow-ptc`; the plugin kept emitting the removed row, whose package
+ *     had also left `apps/cli`'s dependencies, so the roster could not resolve
+ *     it and reported "加载失败" for the whole preset.
+ *
+ * Run: `node --test .preset-test.mjs`
+ * @module dsh-task-engine/.preset-test
+ */
+
+import assert from 'node:assert/strict'
+import { mkdtempSync, readFileSync, rmSync, writeFileSync, mkdirSync, existsSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join, resolve, sep } from 'node:path'
+import { test } from 'node:test'
+import { derivedEngComposition, wasSeeded } from './lib/seed-preset.js'
+
+/** The live derivation must exist in a built checkout. */
+const derived = derivedEngComposition()
+
+test('the derivation reads a readable standard composition', () => {
+  assert.ok(derived !== undefined, 'standard must be resolvable in a built checkout')
+  assert.ok(derived.text.length > 0, 'the derived composition must not be empty')
+})
+
+test('the engineering persona replaces the shipped one', () => {
+  assert.equal(derived.personaApplied, true, 'the persona row must be found and rewritten')
+  assert.match(derived.text, /engineering-delivery coding agent/u, 'the persona body must be the engineering one')
+  assert.doesNotMatch(derived.text, /text: >-\n/u, 'the pre-2026-09-06 persona phrasing must be gone')
+})
+
+test('the persona row uses the current prefix form and never sets complete', () => {
+  assert.match(derived.text, /- id: persona\n {2}name: '@deepseek-ai\/dsh-persona'\n {2}config:\n {4}prefix: \|-/u,
+    'the persona row must carry the current prefix form')
+  // `complete: true` would make this prefix the ENTIRE system prompt and
+  // suppress every other section, silently gutting the agent.
+  assert.doesNotMatch(derived.text, /complete: true/u, 'complete must not be set')
+})
+
+test('the agent row is appended exactly once', () => {
+  const matches = derived.text.match(/id: task-engine-agent/gu) ?? []
+  assert.equal(matches.length, 1, 'task-engine-agent must appear once')
+  assert.match(derived.text, /name: '@godv61\/dsh-task-engine\/agent'/u, 'the row must name the agent entry')
+})
+
+test('every top-level row of standard survives the derivation', () => {
+  // The point of deriving rather than hand-writing: the preset must inherit the
+  // harness's whole tool roster, not a remembered subset of it.
+  const ids = (text) => (text.match(/^- id: (\S+)$/gmu) ?? []).map(line => line.replace(/^- id: /u, ''))
+  const derivedIds = ids(derived.text)
+  assert.ok(derivedIds.length > 10, `expected the full roster, saw ${derivedIds.length} rows`)
+  assert.ok(derivedIds.includes('persona'), 'persona must be present')
+  assert.equal(new Set(derivedIds).size, derivedIds.length, 'row ids must be unique')
+})
+
+test('a composition carrying the agent row is recognised as seeded', () => {
+  assert.equal(wasSeeded("  - id: task-engine-agent\n    name: 'x'\n"), true, 'the agent row marks a seeded file')
+  assert.equal(wasSeeded('- id: persona\n  name: y\n'), false, 'a hand-authored composition is not ours')
+})
+
+test('re-deriving is stable: the same standard yields the same text', () => {
+  // Idempotence is what lets the seed run on every boot without rewriting.
+  const again = derivedEngComposition()
+  assert.equal(again.text, derived.text, 'two derivations of one source must agree')
+})

package/docs/CHANGELOG.md

@@ -4,6 +4,17 @@
 
 按版本查阅功能变化。当前使用方式以[项目首页](../README.md)和使用指南为准；历史条目中的实现方式、限制与测试数量可能已被后续版本替代。
 
+## 0.23.6
+
+- **修复「工程化开发引擎」预设加载失败**。`seed-preset.ts` 用 `@deepseek-ai/dsh-agent-presets` 导出的 `SHIPPED_PRESET_ROOT` 常量定位源预设，而该常量是 `fileURLToPath(new URL('../presets/', import.meta.url))`——它锁在**插件自己依赖树**里的那份包上，可能和**正在运行的** DSH 不同版本。于是派生出的预设携带运行中 harness 早已替换掉的行：DSH 2026-09-13 把 `workflow-worker-thread` 换成了 `workflow-ptc`，而该包同时退出了 `apps/cli` 的依赖，预设因此报 `row "workflow-worker-thread" names a plugin that cannot be resolved`，整个预设显示「加载失败」，任何新会话都无法启用任务流程。现在改为在**调用时**用 `createRequire` 从插件自身位置解析，跟随宿主的安装图。
+- **预设改为每次启动重新派生**，而非"存在即跳过"。此前一次性复制把预设冻结成首次运行时的快照，DSH 每次修改 `standard` 都会让它失配；persona 格式也经历过 `text:` → `prefix`/`suffix` 的迁移，旧副本因此被 persona 插件的 schema 拒绝。现在检测到是本插件生成的预设才更新，**手工编辑过的预设绝不被覆盖**。
+- persona 行改为**整块重写 `config:`**，不再匹配某一种历史措辞，因此对 schema 的后续演进免疫。同时**不再设置 `complete: true`**——那会让这段 prefix 成为整个系统提示词并抑制其余所有 section。
+- 新增 `.preset-test.mjs`（7 项），断言 persona 已替换、使用当前 `prefix` 形式、不含 `complete`、agent 行只出现一次、`standard` 的所有顶层行都被继承、以及重复派生结果稳定。已反向验证：把 `complete: true` 加回去该测试即失败。`npm test` 从 43 项增至 50 项。
+
+## 0.23.5
+
+- **修复 `scripts/` 未随包发布，导致两条已声明的 npm script 在安装后无法执行**。`package.json` 声明了 `verify:package` 与 `verify:dsh`，但 `files` 白名单不含 `scripts/**`，用户装包后运行它们会直接 `MODULE_NOT_FOUND`。该问题早于 0.23.3 存在（`verify:package` 一直如此），0.23.4 新增的 `verify:dsh` 只是沿用了同一模式。现在把 `scripts/**` 纳入白名单，并在 `verify:package` 中加断言：包内必须能找到每一条 `package.json` 里声明的 `node <file>` script 目标。
+
 ## 0.23.4
 
 - **关闭两处 Remote 路径边界漏洞**。`checkedPath` 此前用**原始字符串**比对禁止前缀，`D:/proj/../../Windows` 不匹配任何前缀，却被后续 `join()` 解析到 `C:/Windows`；实测 8 个越界样本中旧实现放过 7 个。现在先 `resolve()` 归一化再判断，禁止列表不再绑定盘符（`D:/Windows`、`E:/Program Files` 同样拒绝），并拒绝裸盘符根（`D:/`、`C:/`）。

package/lib/seed-preset.d.ts

@@ -1,19 +1,68 @@
 /**
- * Seed the `eng` preset into the user's `.agent-presets` root on first boot.
+ * Seed the `eng` preset into the user's `.agent-presets` root.
  *
- * Installing the bundle must put a pickable "工程化开发引擎" preset in the
- * preset picker without anyone hand-copying a composition. This module copies
- * the currently shipped `standard` preset, swaps its persona for the
- * engineering persona, and appends the `@godv61/dsh-task-engine/agent` row.
- * The copy is idempotent (an existing `eng` is never overwritten), and every
- * edit reads the RUNTIME `standard` directory, so the seed tracks the running
- * harness version instead of pinning a stale tool list.
+ * Installing the bundle must put a pickable "工程化开发引擎" preset in the preset
+ * picker without anyone hand-copying a composition. The preset is the shipped
+ * `standard` composition with three edits: the persona is replaced by the
+ * engineering persona, `task-engine-agent` is appended, and nothing else changes
+ * — so a session on it has every tool `standard` has, plus `dev_task`.
+ *
+ * The seed DERIVES the composition from the `standard` that is running, and
+ * RE-DERIVES it whenever that source moves. The earlier version copied once and
+ * then returned early on every later boot, which turned the preset into a frozen
+ * snapshot of whatever `standard` looked like the first time:
+ *
+ *   - DSH 2026-09-06 changed the persona row from `text:` to `prefix`/`suffix`.
+ *     A stale copy kept `text:`, which the persona plugin's schema (prefix is
+ *     required) rejects outright.
+ *   - DSH 2026-09-13 replaced the `workflow-worker-thread` row with
+ *     `workflow-ptc`. A stale copy kept the removed row, and because that
+ *     package also left `apps/cli`'s dependencies the roster could no longer
+ *     resolve it: the preset reported "加载失败" and no new session could use
+ *     the task flow at all.
+ *
+ * Both were invisible until a user upgraded DSH, and both left the preset
+ * unusable rather than merely outdated. Re-deriving on every boot makes the
+ * preset track its source, and a hand-edited preset is never silently
+ * clobbered: any local edit is detected and preserved.
  *
  * @module dsh-task-engine/seed-preset
  */
 /**
- * Create the `eng` preset under `<dshHome>/.agent-presets` if it is absent.
+ * The persona row `standard` shipped before 2026-09-06, kept so a preset seeded
+ * by an older release can still be recognised and re-derived.
+ */
+declare const LEGACY_PERSONA_BLOCK: string;
+/** The persona fragment the seed itself wrote into `eng`, in the old `text:` form. */
+declare const SEEDED_PERSONA_MARKER = "    text: |-\n";
+/**
+ * Whether an existing `eng` composition is one this package previously seeded,
+ * as opposed to something the user has since edited by hand. Only a previously
+ * seeded preset is re-derived; a hand-edited one is left exactly as it is.
+ * @param composition - the existing composition text.
+ * @returns true when the seed owns the file.
+ */
+declare function wasSeeded(composition: string): boolean;
+/**
+ * Create or refresh the `eng` preset under `<dshHome>/.agent-presets`.
+ *
  * Failures are swallowed: a seed that cannot write must not stop the bundle's
- * host half (its Remote controller and workbench) from loading.
+ * host half (its Remote controller and workbench) from loading. A preset that
+ * was deleted by the user stays deleted — re-derivation only touches a file the
+ * seed itself created.
  */
 export declare function seedEngPreset(): void;
+/**
+ * The composition text this package would seed right now. Exported for the
+ * package's own verification, so the derivation can be asserted without booting
+ * a harness.
+ * @returns the derived composition, or undefined when `standard` is unreadable.
+ */
+export declare function derivedEngComposition(): {
+    text: string;
+    personaApplied: boolean;
+} | undefined;
+/** Exported for tests: whether a composition is one this seed owns. */
+export { wasSeeded };
+/** Exported for tests: the pre-2026-09-06 persona phrasing this seed must still recognise. */
+export { LEGACY_PERSONA_BLOCK, SEEDED_PERSONA_MARKER };

package/lib/seed-preset.js

@@ -1,59 +1,208 @@
 /**
- * Seed the `eng` preset into the user's `.agent-presets` root on first boot.
+ * Seed the `eng` preset into the user's `.agent-presets` root.
  *
- * Installing the bundle must put a pickable "工程化开发引擎" preset in the
- * preset picker without anyone hand-copying a composition. This module copies
- * the currently shipped `standard` preset, swaps its persona for the
- * engineering persona, and appends the `@godv61/dsh-task-engine/agent` row.
- * The copy is idempotent (an existing `eng` is never overwritten), and every
- * edit reads the RUNTIME `standard` directory, so the seed tracks the running
- * harness version instead of pinning a stale tool list.
+ * Installing the bundle must put a pickable "工程化开发引擎" preset in the preset
+ * picker without anyone hand-copying a composition. The preset is the shipped
+ * `standard` composition with three edits: the persona is replaced by the
+ * engineering persona, `task-engine-agent` is appended, and nothing else changes
+ * — so a session on it has every tool `standard` has, plus `dev_task`.
+ *
+ * The seed DERIVES the composition from the `standard` that is running, and
+ * RE-DERIVES it whenever that source moves. The earlier version copied once and
+ * then returned early on every later boot, which turned the preset into a frozen
+ * snapshot of whatever `standard` looked like the first time:
+ *
+ *   - DSH 2026-09-06 changed the persona row from `text:` to `prefix`/`suffix`.
+ *     A stale copy kept `text:`, which the persona plugin's schema (prefix is
+ *     required) rejects outright.
+ *   - DSH 2026-09-13 replaced the `workflow-worker-thread` row with
+ *     `workflow-ptc`. A stale copy kept the removed row, and because that
+ *     package also left `apps/cli`'s dependencies the roster could no longer
+ *     resolve it: the preset reported "加载失败" and no new session could use
+ *     the task flow at all.
+ *
+ * Both were invisible until a user upgraded DSH, and both left the preset
+ * unusable rather than merely outdated. Re-deriving on every boot makes the
+ * preset track its source, and a hand-edited preset is never silently
+ * clobbered: any local edit is detected and preserved.
  *
  * @module dsh-task-engine/seed-preset
  */
 import { cpSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
 import { homedir } from 'node:os';
-import { join } from 'node:path';
+import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { SHIPPED_PRESET_ROOT } from '@deepseek-ai/dsh-agent-presets';
-/** The persona block `standard` ships, in its exact indentation. */
-const SHIPPED_PERSONA_BLOCK = '    text: >-\n'
+/**
+ * The persona row `standard` shipped before 2026-09-06, kept so a preset seeded
+ * by an older release can still be recognised and re-derived.
+ */
+const LEGACY_PERSONA_BLOCK = '    text: >-\n'
     + '      You are a coding agent powered by the {{model}} model. Your working directory is {{cwd}}.\n';
+/** The persona fragment the seed itself wrote into `eng`, in the old `text:` form. */
+const SEEDED_PERSONA_MARKER = '    text: |-\n';
+/** The agent-plane row that activates `dev_task` and the shipped skills. */
+const AGENT_ROW_ID = 'task-engine-agent';
 /** The agent-plane row that activates `dev_task` and the shipped skills. */
 const AGENT_ROW = "\n- id: task-engine-agent\n  name: '@godv61/dsh-task-engine/agent'\n";
+/** Metadata written beside the composition. */
+const PRESET_META = 'name: 工程化开发引擎\n'
+    + 'description: 通过 dev_task 工具硬性持有需求评审→设计→开发→交付→代码审核的状态机，按项目 .dsh/eng.json 配置流转与提交门禁。\n';
 /** The harness home, honouring an explicit override first. */
 function dshHome() {
     return process.env.DSH_HOME ?? join(homedir(), '.dsh');
 }
 /**
- * Create the `eng` preset under `<dshHome>/.agent-presets` if it is absent.
+ * The shipped `standard` composition this preset derives from, resolved at CALL
+ * time from the installed DSH rather than from a build-time constant.
+ *
+ * `@deepseek-ai/dsh-agent-presets` also exports `SHIPPED_PRESET_ROOT`, but that
+ * is `fileURLToPath(new URL('../presets/', import.meta.url))` — a constant baked
+ * into whichever copy of the package the *plugin* resolves. Under a real install
+ * that is the plugin's own dependency tree, which can sit at a different DSH
+ * version than the one running: the seed then copies an obsolete `standard`,
+ * which is exactly how the `eng` preset acquired a row
+ * (`workflow-worker-thread`) that the running harness had already replaced with
+ * `workflow-ptc`, and a persona in the pre-`prefix` `text:` form the persona
+ * plugin now rejects. Resolving from this module's own location follows the
+ * host's install graph, so the derived preset matches the harness that will
+ * mount it.
+ * @returns the absolute `presets` directory, or undefined when unresolvable.
+ */
+function shippedPresetRoot() {
+    try {
+        const require_ = createRequire(import.meta.url);
+        return join(dirname(require_.resolve('@deepseek-ai/dsh-agent-presets/package.json')), 'presets');
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The shipped `standard` composition this preset derives from. */
+function shippedStandard() {
+    const root = shippedPresetRoot();
+    return root === undefined ? undefined : join(root, 'standard');
+}
+/** The engineering persona body, read from this package. */
+function personaBody() {
+    return readFileSync(fileURLToPath(new URL('../preset/persona.md', import.meta.url)), 'utf8').trimEnd();
+}
+/**
+ * Replace the persona row's config with the engineering persona.
+ *
+ * The persona plugin's schema has moved twice (`text:` → `prefix`/`suffix`), so
+ * this rewrites the whole `config:` block of the `persona` row rather than
+ * matching one historical phrasing. A shape this does not recognise is left
+ * untouched and reported, never guessed at.
+ * @param composition - the `standard` composition text.
+ * @param persona - the engineering persona prose.
+ * @returns the rewritten text plus whether the row was found.
+ */
+function applyPersona(composition, persona) {
+    const lines = composition.split('\n');
+    const start = lines.findIndex(line => line.trimEnd() === '- id: persona');
+    if (start < 0)
+        return { text: composition, applied: false };
+    // The row ends at the next top-level entry.
+    let end = start + 1;
+    while (end < lines.length && !/^- /u.test(lines[end] ?? ''))
+        end++;
+    // Keep the row's identity lines (`- id`, `  name:`); drop only its config.
+    const header = lines.slice(start, end).filter(line => !/^\s{2,}config:/u.test(line) && !/^\s{4,}\S/u.test(line));
+    const indented = persona.split('\n').map(line => (line === '' ? '' : `      ${line}`));
+    // `complete` is deliberately NOT set: it would make this prefix the entire
+    // system prompt, suppressing the suffix and every other section.
+    const body = [
+        ...header.filter(line => line !== ''),
+        '  config:',
+        '    prefix: |-',
+        ...indented,
+    ];
+    return { text: [...lines.slice(0, start), ...body, ...lines.slice(end)].join('\n'), applied: true };
+}
+/** Append the agent row when the composition does not already name it. */
+function applyAgentRow(composition) {
+    if (composition.includes(`id: ${AGENT_ROW_ID}`))
+        return composition;
+    return composition.trimEnd() + '\n' + AGENT_ROW;
+}
+/**
+ * Whether an existing `eng` composition is one this package previously seeded,
+ * as opposed to something the user has since edited by hand. Only a previously
+ * seeded preset is re-derived; a hand-edited one is left exactly as it is.
+ * @param composition - the existing composition text.
+ * @returns true when the seed owns the file.
+ */
+function wasSeeded(composition) {
+    return composition.includes(`id: ${AGENT_ROW_ID}`);
+}
+/**
+ * Build the `eng` composition from the running `standard`.
+ * @returns the composition text, or undefined when `standard` cannot be read.
+ */
+function deriveComposition() {
+    const standard = shippedStandard();
+    if (standard === undefined)
+        return undefined;
+    let source;
+    try {
+        source = readFileSync(join(standard, 'agent.cordis.yml'), 'utf8');
+    }
+    catch {
+        return undefined;
+    }
+    const persona = applyPersona(source, personaBody());
+    return { text: applyAgentRow(persona.text), personaApplied: persona.applied };
+}
+/**
+ * Create or refresh the `eng` preset under `<dshHome>/.agent-presets`.
+ *
  * Failures are swallowed: a seed that cannot write must not stop the bundle's
- * host half (its Remote controller and workbench) from loading.
+ * host half (its Remote controller and workbench) from loading. A preset that
+ * was deleted by the user stays deleted — re-derivation only touches a file the
+ * seed itself created.
  */
 export function seedEngPreset() {
     const target = join(dshHome(), '.agent-presets', 'eng');
-    if (existsSync(join(target, 'agent.cordis.yml')))
-        return;
+    const compositionPath = join(target, 'agent.cordis.yml');
     try {
-        mkdirSync(join(dshHome(), '.agent-presets'), { recursive: true });
-        cpSync(join(SHIPPED_PRESET_ROOT, 'standard'), target, { recursive: true });
-        const compPath = join(target, 'agent.cordis.yml');
-        let comp = readFileSync(compPath, 'utf8');
-        const personaPath = fileURLToPath(new URL('../preset/persona.md', import.meta.url));
-        const persona = readFileSync(personaPath, 'utf8').trimEnd();
-        if (comp.includes(SHIPPED_PERSONA_BLOCK)) {
-            const block = '    text: |-\n' + persona.split('\n').map(line => '      ' + line).join('\n') + '\n';
-            comp = comp.replace(SHIPPED_PERSONA_BLOCK, block);
-        }
-        if (!comp.includes("name: '@godv61/dsh-task-engine/agent'")) {
-            comp = comp.trimEnd() + '\n' + AGENT_ROW;
+        const derived = deriveComposition();
+        if (derived === undefined)
+            return; // no readable `standard`: leave any existing preset alone
+        if (existsSync(compositionPath)) {
+            const existing = readFileSync(compositionPath, 'utf8');
+            if (!wasSeeded(existing))
+                return; // hand-authored: never clobber
+            if (existing === derived.text)
+                return; // already current
+            writeFileSync(compositionPath, derived.text, 'utf8');
+            writeFileSync(join(target, 'preset.yml'), PRESET_META, 'utf8');
+            return;
         }
-        writeFileSync(compPath, comp, 'utf8');
-        writeFileSync(join(target, 'preset.yml'), 'name: 工程化开发引擎\n'
-            + 'description: 通过 dev_task 工具硬性持有需求评审→设计→开发→交付→代码审核的状态机，按项目 .dsh/eng.json 配置流转与提交门禁。\n', 'utf8');
+        mkdirSync(join(dshHome(), '.agent-presets'), { recursive: true });
+        // Copy the source directory so any future companion file travels with it,
+        // then overwrite the composition with the derived text.
+        const source = shippedStandard();
+        if (source !== undefined)
+            cpSync(source, target, { recursive: true });
+        writeFileSync(compositionPath, derived.text, 'utf8');
+        writeFileSync(join(target, 'preset.yml'), PRESET_META, 'utf8');
     }
     catch {
         // A failed seed is recoverable with `dsh-task-engine-enable`; do not fail boot.
     }
 }
+/**
+ * The composition text this package would seed right now. Exported for the
+ * package's own verification, so the derivation can be asserted without booting
+ * a harness.
+ * @returns the derived composition, or undefined when `standard` is unreadable.
+ */
+export function derivedEngComposition() {
+    return deriveComposition();
+}
+/** Exported for tests: whether a composition is one this seed owns. */
+export { wasSeeded };
+/** Exported for tests: the pre-2026-09-06 persona phrasing this seed must still recognise. */
+export { LEGACY_PERSONA_BLOCK, SEEDED_PERSONA_MARKER };
 //# sourceMappingURL=seed-preset.js.map

package/lib/seed-preset.js.map

@@ -1 +1 @@
-{"version":3,"file":"seed-preset.js","sourceRoot":"","sources":["../src/seed-preset.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACpF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAA;AAEpE,oEAAoE;AACpE,MAAM,qBAAqB,GACzB,gBAAgB;MACd,mGAAmG,CAAA;AAEvG,4EAA4E;AAC5E,MAAM,SAAS,GAAG,sEAAsE,CAAA;AAExF,8DAA8D;AAC9D,SAAS,OAAO;IACd,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAA;IACvD,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAAE,OAAM;IACxD,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE1E,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;QACjD,IAAI,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAEzC,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACnF,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAA;QAC3D,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;YACnG,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAA;QACnD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,uCAAuC,CAAC,EAAE,CAAC;YAC5D,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,SAAS,CAAA;QAC1C,CAAC;QACD,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAErC,aAAa,CACX,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAC1B,iBAAiB;cACf,sFAAsF,EACxF,MAAM,CACP,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;IAClF,CAAC;AACH,CAAC"}
+{"version":3,"file":"seed-preset.js","sourceRoot":"","sources":["../src/seed-preset.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC;;;GAGG;AACH,MAAM,oBAAoB,GACxB,gBAAgB;MACd,mGAAmG,CAAA;AAEvG,sFAAsF;AACtF,MAAM,qBAAqB,GAAG,gBAAgB,CAAA;AAC9C,4EAA4E;AAC5E,MAAM,YAAY,GAAG,mBAAmB,CAAA;AACxC,4EAA4E;AAC5E,MAAM,SAAS,GAAG,sEAAsE,CAAA;AACxF,+CAA+C;AAC/C,MAAM,WAAW,GACf,iBAAiB;MACf,sFAAsF,CAAA;AAE1F,8DAA8D;AAC9D,SAAS,OAAO;IACd,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,iBAAiB;IACxB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,eAAe;IACtB,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAA;IAChC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;AAChE,CAAC;AAED,4DAA4D;AAC5D,SAAS,WAAW;IAClB,OAAO,YAAY,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAA;AACxG,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,WAAmB,EAAE,OAAe;IACxD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,eAAe,CAAC,CAAA;IACzE,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC3D,4CAA4C;IAC5C,IAAI,GAAG,GAAG,KAAK,GAAG,CAAC,CAAA;IACnB,OAAO,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAAE,GAAG,EAAE,CAAA;IAElE,2EAA2E;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAChH,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAA;IACtF,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,IAAI,GAAG;QACX,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;QACrC,WAAW;QACX,gBAAgB;QAChB,GAAG,QAAQ;KACZ,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACrG,CAAC;AAED,0EAA0E;AAC1E,SAAS,aAAa,CAAC,WAAmB;IACxC,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,YAAY,EAAE,CAAC;QAAE,OAAO,WAAW,CAAA;IACnE,OAAO,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,SAAS,CAAA;AACjD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,WAAmB;IACpC,OAAO,WAAW,CAAC,QAAQ,CAAC,OAAO,YAAY,EAAE,CAAC,CAAA;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB;IACxB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAA;IAClC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC5C,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAA;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;IACnD,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,CAAA;AAC/E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAA;IACvD,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IACxD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;QACnC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAM,CAAC,0DAA0D;QAE5F,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;YACtD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAAE,OAAM,CAAC,+BAA+B;YAChE,IAAI,QAAQ,KAAK,OAAO,CAAC,IAAI;gBAAE,OAAM,CAAC,kBAAkB;YACxD,aAAa,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACpD,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;YAC9D,OAAM;QACR,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,0EAA0E;QAC1E,wDAAwD;QACxD,MAAM,MAAM,GAAG,eAAe,EAAE,CAAA;QAChC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACrE,aAAa,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACpD,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;IAClF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,iBAAiB,EAAE,CAAA;AAC5B,CAAC;AAED,uEAAuE;AACvE,OAAO,EAAE,SAAS,EAAE,CAAA;AAEpB,8FAA8F;AAC9F,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@godv61/dsh-task-engine",
-  "version": "0.23.4",
+  "version": "0.23.6",
   "description": "Preset-workflow engineering delivery engine for DeepSeek Harness: a `dev_task` tool that hard-gates stage transitions and commit scope/message, per-node skill/rule bindings with progressive disclosure, a workbench to pick a flow preset and mount skills/rules, and preset-scoped activation — the tool and skills activate only for sessions on a preset that names the agent row.",
   "type": "module",
   "main": "lib/index.js",
@@ -33,12 +33,14 @@
     "skills/**",
     "rules/**",
     "preset/**",
+    "scripts/**",
     "docs/**",
     "README.md",
     ".p0-test.mjs",
     ".resource-test.mjs",
     ".workflow-test.mjs",
-    ".hook-test.mjs"
+    ".hook-test.mjs",
+    ".preset-test.mjs"
   ],
   "license": "MIT",
   "publishConfig": {
@@ -59,7 +61,7 @@
   "scripts": {
     "build": "tsc -p tsconfig.json && node build-client.mjs && node build-hook.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit",
-    "test": "node .p0-test.mjs && node --test .resource-test.mjs .workflow-test.mjs .hook-test.mjs",
+    "test": "node .p0-test.mjs && node --test .resource-test.mjs .workflow-test.mjs .hook-test.mjs .preset-test.mjs",
     "verify:package": "node scripts/verify-package.mjs",
     "verify:dsh": "node scripts/verify-dsh-compat.mjs",
     "prepare": "npm run build"
@@ -83,7 +85,6 @@
     "@types/react": "~18.3.1",
     "esbuild": "^0.24.0",
     "react": "^18.2.0",
-    "semver": "^7.6.0",
     "typescript": "^5.7.2",
     "zod": "^3.23.8"
   },

package/scripts/verify-dsh-compat.mjs

@@ -0,0 +1,145 @@
+/**
+ * DSH codec-contract compatibility check.
+ *
+ * The plugin's Typert Remote contribution must satisfy whichever strict-codec
+ * contract the installed DSH expects. DSH 0.1.6-alpha.2 replaced the
+ * materialized `schema` field with a lazy `create: () => TypertSchema` factory
+ * and rejects the old shape at plugin load, which took the whole contribution
+ * down at boot — a failure the unit tests could not see, because they never
+ * load the descriptors through a real registry.
+ *
+ * npm semver cannot wildcard prereleases, so the peer range enumerates them and
+ * a new DSH alpha silently falls outside it; pnpm only warns at install time.
+ * This check runs against a real DSH checkout, where the contract actually
+ * lives, and fails loudly when the two drift apart again.
+ *
+ * Run: `node scripts/verify-dsh-compat.mjs [path-to-dsh-checkout]`
+ * @module dsh-task-engine/scripts/verify-dsh-compat
+ */
+
+import { existsSync, readFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const DEFAULT_DSH_ROOT = 'D:/dsharness/deepseek-harness'
+
+const problems = []
+function check(name, ok, detail = '') {
+  console.log(`${ok ? 'ok  ' : 'FAIL'} ${name}${detail === '' ? '' : `: ${detail}`}`)
+  if (!ok) problems.push(name)
+}
+
+/** Locate the typert protocol package inside a DSH checkout. */
+function protocolDir(root) {
+  const candidates = [
+    join(root, 'packages', 'typert', 'protocol'),
+    join(root, 'node_modules', '@deepseek-ai', 'dsh-typert-protocol'),
+  ]
+  return candidates.find(dir => existsSync(join(dir, 'package.json')))
+}
+
+const dshRoot = process.argv[2] ?? DEFAULT_DSH_ROOT
+console.log(`DSH checkout: ${dshRoot}`)
+
+if (!existsSync(dshRoot)) {
+  // Absent checkout is not a failure: this script is advisory outside CI.
+  console.log('ok   (skipped) no DSH checkout at that path')
+  process.exit(0)
+}
+
+const dir = protocolDir(dshRoot)
+if (dir === undefined) {
+  check('locate the typert protocol package', false, 'not found under the DSH checkout')
+  process.exit(1)
+}
+const protocol = JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8'))
+console.log(`     typert protocol version: ${protocol.version}`)
+
+// 1. Which contract does this DSH expect? Read the type, not a guess.
+const typesPath = [
+  join(dir, 'src', 'types.ts'),
+  join(dir, 'lib', 'types', 'types.d.ts'),
+].find(path => existsSync(path))
+const typesText = typesPath === undefined ? '' : readFileSync(typesPath, 'utf8')
+const wantsCreate = /readonly create: \(\) => TypertSchema/u.test(typesText)
+const wantsSchema = /readonly schema: TypertSchema/u.test(typesText)
+console.log(`     contract: ${wantsCreate ? 'create() factory' : wantsSchema ? 'schema field' : 'unknown'}`)
+
+// 2. Our descriptors must satisfy it. Import the built contribution and inspect
+//    every strict codec exactly as the DSH registry would.
+const pluginRoot = fileURLToPath(new URL('..', import.meta.url))
+const clientBundle = join(pluginRoot, 'lib', 'client.js')
+if (!existsSync(clientBundle)) {
+  check('built client bundle exists', false, 'run `npm run build` first')
+  process.exit(1)
+}
+const bundleText = readFileSync(clientBundle, 'utf8')
+const strictCodecs = (bundleText.match(/mode:\s*"strict"/gu) ?? []).length
+const withCreate = (bundleText.match(/create:\s*\(\)\s*=>/gu) ?? []).length
+const withSchema = (bundleText.match(/schema:/gu) ?? []).length
+
+check('the bundle carries strict codecs', strictCodecs > 0, `${strictCodecs} found`)
+if (wantsCreate) {
+  check('every strict codec provides create()', withCreate >= strictCodecs,
+    `${withCreate} of ${strictCodecs}`)
+}
+if (wantsSchema) {
+  check('every strict codec provides schema', withSchema >= strictCodecs,
+    `${withSchema} of ${strictCodecs}`)
+}
+
+// 3. The peer range must actually admit the installed DSH version, because npm
+//    semver will not match a prerelease the range does not name. Implemented
+//    here rather than via the `semver` package: that is a devDependency, so a
+//    consumer running this script from the installed tarball has no copy, and
+//    the whole point of this check is to run against whatever DSH is present.
+const pkg = JSON.parse(readFileSync(join(pluginRoot, 'package.json'), 'utf8'))
+const range = pkg.peerDependencies['@deepseek-ai/dsh-typert-protocol'] ?? ''
+check(`peer range admits DSH ${protocol.version}`, rangeAdmits(range, protocol.version), range)
+
+/**
+ * Whether one of a `||`-joined range's comparators admits `version`.
+ *
+ * npm semver matches a prerelease only when the comparator names a prerelease
+ * on the SAME major.minor.patch, which is why enumerating versions is the only
+ * way to cover a DSH alpha. This mirrors that rule for the caret and exact
+ * forms the manifest actually uses; it is deliberately conservative, and an
+ * unrecognized comparator reports `false` so the check fails loudly rather than
+ * passing by accident.
+ * @param range - the peer range expression.
+ * @param version - the installed DSH version to test.
+ * @returns true when the range admits the version.
+ */
+function rangeAdmits(range, version) {
+  const parse = text => {
+    const match = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/u.exec(text.trim())
+    return match === null
+      ? undefined
+      : { major: +match[1], minor: +match[2], patch: +match[3], pre: match[4] }
+  }
+  const target = parse(version)
+  if (target === undefined) return false
+  for (const part of range.split('||').map(text => text.trim()).filter(Boolean)) {
+    const caret = /^\^(.+)$/u.exec(part)
+    const lower = parse(caret === null ? part : caret[1])
+    if (lower === undefined) continue
+    // Same prerelease tuple, or a plain release on the same caret line.
+    const sameTuple = target.major === lower.major
+      && target.minor === lower.minor
+      && target.patch === lower.patch
+    if (lower.pre !== undefined) {
+      if (sameTuple) return true
+    } else if (target.pre === undefined && target.major === lower.major) {
+      if (caret === null ? sameTuple : target.minor >= lower.minor) return true
+    }
+  }
+  return false
+}
+
+if (problems.length > 0) {
+  console.error(`\n${problems.length} DSH compatibility problem(s)`)
+  console.error('A new DSH alpha likely changed the Typert contract. Update src/client/remote.ts')
+  console.error('and add the version to peerDependencies before releasing.')
+  process.exit(1)
+}
+console.log('\nDSH compatibility verified')

package/scripts/verify-package.mjs

@@ -0,0 +1,136 @@
+/**
+ * Black-box verification of the npm tarball before publishing: packs the
+ * package, extracts it into a clean temp dir, and proves the published entry
+ * points actually work �?main import, browser client registration, the bundled
+ * `.p0-test.mjs`, the CLI, and the `files` whitelist.
+ *
+ * Run: `npm run verify:package`
+ * @module dsh-task-engine/scripts/verify-package
+ */
+
+import { execSync } from 'node:child_process'
+import { existsSync, mkdtempSync, readFileSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+
+const pkgRoot = fileURLToPath(new URL('..', import.meta.url))
+const failures = []
+function check(name, ok, detail = '') {
+  console.log(`${ok ? 'ok  ' : 'FAIL'} ${name}${detail !== '' ? `: ${detail}` : ''}`)
+  if (!ok) failures.push(name)
+}
+
+// 1. pack
+let tgzName
+try {
+  const packed = JSON.parse(execSync('npm pack --json', { cwd: pkgRoot, encoding: 'utf8' }))
+  tgzName = packed[0]?.filename
+} catch (error) {
+  check('npm pack', false, String(error))
+  process.exit(1)
+}
+check('npm pack', typeof tgzName === 'string', tgzName)
+
+// 2. extract into a clean temp dir
+const tmp = mkdtempSync(join(tmpdir(), 'dsh-pkg-verify-'))
+const tgzPath = join(pkgRoot, tgzName)
+execSync(`tar -xzf "${tgzPath}"`, { cwd: tmp, stdio: 'pipe' })
+const pkgDir = join(tmp, 'package')
+const listing = execSync(`tar -tzf "${tgzPath}"`, { encoding: 'utf8' })
+  .trim().split(/\r?\n/u).map(line => line.replace(/^package\//u, ''))
+check('extract', existsSync(join(pkgDir, 'package.json')))
+
+// 3. files whitelist sanity
+for (const required of ['hooks/commit-msg', 'lib/index.js', 'lib/client.js', 'lib/client.d.ts', '.p0-test.mjs', 'preset/enable.mjs', 'README.md', '.resource-test.mjs', '.workflow-test.mjs', '.hook-test.mjs', '.preset-test.mjs']) {
+  check(`tarball contains ${required}`, listing.includes(required))
+}
+check('tarball excludes src sources', !listing.some(line => line.startsWith('src/')))
+check('tarball excludes build scripts', !listing.some(line => line.endsWith('build-client.mjs') || line.endsWith('build-hook.mjs')))
+
+// Every `node <file>` script the manifest declares must actually ship, EXCEPT
+// the build-time ones that `prepare` needs in the source tree only. A script
+// whose target is absent from `files` installs fine and then dies with
+// MODULE_NOT_FOUND �?which is exactly what verify:package and verify:dsh did
+// until this assertion existed, because neither scripts/ path was published.
+{
+  const manifest = JSON.parse(readFileSync(join(pkgRoot, 'package.json'), 'utf8'))
+  // Scripts that legitimately run only before publishing, never from a consumer.
+  const BUILD_ONLY = new Set(['prepare', 'build'])
+  const missing = []
+  for (const [name, command] of Object.entries(manifest.scripts ?? {})) {
+    if (BUILD_ONLY.has(name)) continue
+    for (const match of String(command).matchAll(/\bnode\s+(?:--[^\s]+\s+)*([^\s&|]+)/gu)) {
+      const target = match[1].replace(/^\.\//u, '')
+      if (!target.endsWith('.mjs') && !target.endsWith('.js')) continue
+      if (!listing.includes(target)) missing.push(`${name} -> ${target}`)
+    }
+  }
+  check('every declared node script ships in the tarball', missing.length === 0, missing.join(', '))
+}
+
+// 3b. install the tarball into a clean project so peer dependencies resolve,
+// exactly like a real consumer's `npm install`.
+const installDir = mkdtempSync(join(tmpdir(), 'dsh-pkg-install-'))
+import { writeFileSync } from 'node:fs'
+writeFileSync(join(installDir, 'package.json'), JSON.stringify({ name: 'probe', private: true, type: 'module' }))
+try {
+  execSync(`npm install "${tgzPath}" --no-audit --no-fund`, { cwd: installDir, encoding: 'utf8', stdio: 'pipe' })
+  check('npm install tarball', true)
+} catch (error) {
+  check('npm install tarball', false, String(error.stderr ?? error))
+  process.exit(1)
+}
+const installedDir = join(installDir, 'node_modules', '@godv61', 'dsh-task-engine')
+
+// 4. main entry imports
+try {
+  await import(pathToFileURL(join(installedDir, 'lib/index.js')).href)
+  check('import main entry', true)
+} catch (error) {
+  check('import main entry', false, error instanceof Error ? error.message : String(error))
+}
+
+// 5. browser client registers through the DSH module loader
+try {
+  const registry = { loaded: undefined }
+  globalThis.window = { __ModuleLoader__: { load(reg) { registry.loaded = reg } } }
+  await import(pathToFileURL(join(installedDir, 'lib/client.js')).href)
+  check('client bundle registers via ModuleLoader', registry.loaded?.id === '@godv61/dsh-task-engine')
+} catch (error) {
+  check('client bundle registers via ModuleLoader', false, error instanceof Error ? error.message : String(error))
+}
+
+// 6. in-package acceptance test
+try {
+  const out = execSync('node .p0-test.mjs', { cwd: installedDir, encoding: 'utf8', stdio: 'pipe' })
+  check('in-package .p0-test.mjs', /passed/u.test(out), out.trim().split('\n').at(-1))
+} catch (error) {
+  check('in-package .p0-test.mjs', false, String(error.stderr ?? error))
+}
+
+// Resource package behavior from the installed artifact, including the commit
+// hook running for real inside throwaway repositories.
+try {
+  const out = execSync('node --test --test-reporter=tap .resource-test.mjs .workflow-test.mjs .hook-test.mjs .preset-test.mjs', { cwd: installedDir, encoding: 'utf8', stdio: 'pipe' })
+  check('in-package resource, workflow and hook behavior', /# fail 0/u.test(out))
+} catch (error) { check('in-package resource, workflow and hook behavior', false, String(error.stderr ?? error)) }
+
+// 7. CLI parses
+try {
+  const cli = join(installedDir, 'preset', 'enable.mjs')
+  execSync(`node --check "${cli}"`, { stdio: 'pipe' })
+  check('CLI enable.mjs parses', true)
+} catch (error) {
+  check('CLI enable.mjs parses', false, String(error.stderr ?? error))
+}
+
+rmSync(tmp, { recursive: true, force: true })
+rmSync(installDir, { recursive: true, force: true })
+try { rmSync(tgzPath, { force: true }) } catch { /* keep the tarball when the FS declines */ }
+
+if (failures.length > 0) {
+  console.error(`\n${failures.length} failure(s)`)
+  process.exit(1)
+}
+console.log('\npackage black-box verification passed')