@hyzyn/dsh-tty 0.18.3 → 0.19.1

package/scripts/preview.mjs

@@ -0,0 +1,502 @@
+#!/usr/bin/env node
+/**
+ * @hyzyn/dsh-tty — 视觉预览 / 截图回归工具。
+ *
+ * 把 packages/tty/client.js 装进一个纯静态夹具页（scripts/preview/harness.html，
+ * 内含伪造的 DSH 宿主：module loader / fetch / WebSocket），用 headless Chrome
+ * 逐个场景渲染并截图到 .preview/shots/，用于改样式时的视觉走查。
+ *
+ * 用法：
+ *   node scripts/preview.mjs                    # 全场景截图
+ *   node scripts/preview.mjs local multi        # 指定场景
+ *   node scripts/preview.mjs --list             # 列出场景
+ *   node scripts/preview.mjs --build            # 顺带重建 client.js（默认不重建，产物落后直接报错）
+ *   node scripts/preview.mjs --theme=light      # 浅色主题
+ *
+ * 需要本机有 Chrome/Chromium（默认找 playwright 缓存的 Chrome for Testing，
+ * 也可用 CHROME_PATH 指定）。
+ */
+import { spawn } from 'node:child_process'
+import { createRequire } from 'node:module'
+import { existsSync, mkdirSync, readFileSync, writeFileSync, rmSync, readdirSync, statSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { homedir, tmpdir } from 'node:os'
+
+const require = createRequire(import.meta.url)
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const previewDir = join(root, '.preview')
+
+const argv = process.argv.slice(2)
+const flags = new Set(argv.filter((a) => a.startsWith('--')))
+const positional = argv.filter((a) => !a.startsWith('--'))
+const theme = (argv.find((a) => a.startsWith('--theme=')) || '--theme=dark').split('=')[1]
+// 默认不再重建（0.19.0）：此前隐式跑 build 会悄悄改掉必须入库的 client.js。
+// 需要重建时显式 `--build`；产物落后于源码时直接报错，绝不「对着旧产物截图」。
+const wantBuild = flags.has('--build')
+/** 输出子目录：--out=shots-light 之类，便于并排比较明暗主题。 */
+const outName = (argv.find((a) => a.startsWith('--out=')) || '--out=shots').split('=')[1]
+const shotsDir = join(previewDir, outName)
+
+/* ------------------------------- 场景清单 ------------------------------- */
+
+const SCENARIOS = [
+  ['local', '单标签本地终端'],
+  ['stats-off', '服务器状态条关闭（整条收起）'],
+  ['stats-broken', '服务器状态条坏数据兜底（不崩、不变形）'],
+  ['multi', '多标签 + SSH 连接栏'],
+  ['menu', '「+」新建菜单'],
+  ['ssh', 'SSH 连接对话框'],
+  ['ssh-probe', 'SSH 连接对话框（试连结果）'],
+  ['ssh-edit', 'SSH 连接对话框（编辑）'],
+  ['settings', '设置卡片'],
+  ['settings-docker', '设置卡片（docker 与 tty 并排对照）'],
+  ['sftp', 'SFTP 单窗体（挂右侧挂载位）'],
+  ['sftp-dual', 'SFTP 双栏（挂右侧挂载位）'],
+  ['sftp-fallback', 'SFTP 落点回退（抽屉被容器面板占用 → 对话框）'],
+  ['dock-pane-tab', '挂载位跟着标签切（切走收起 / 切回恢复 / 不堵死另一个标签的入口）'],
+  ['minimized', '最小化（侧边栏徽标）'],
+  ['exited', '会话退出遮罩'],
+  ['error', '连接错误遮罩'],
+  ['tunnel', '隧道状态弹层'],
+  ['search', '搜索框展开'],
+  ['toast', 'toast 提醒'],
+  ['embed', '嵌入式终端（ttyTerminal.mount）'],
+  ['embed-panel', '嵌入终端与面板共存（关面板不掉线）'],
+  ['docker-panel', 'docker 面板（只读：变更组整组置灰）'],
+  ['docker-panel-rw', 'docker 面板（允许变更：动作条全可用）'],
+  ['docker-exec', 'docker 面板 → 终端抽屉（端到端）'],
+  ['docker-exec-logs', 'docker 面板 → 终端抽屉 + 日志页（折叠保留会话）'],
+  ['dock-pane', '终端面板右侧挂载位（ttyPanel 骨架）'],
+  ['dock-pane-bottom', '底部挂载位 + 终端重排（视口钉底）'],
+  ['docker-dock', '连接栏「容器」→ docker 面板挂进右侧 dock（终端不被盖住）'],
+]
+
+if (flags.has('--list')) {
+  for (const [name, label] of SCENARIOS) console.log(name.padEnd(12), label)
+  process.exit(0)
+}
+
+const wanted = positional.length > 0 ? positional : SCENARIOS.map(([n]) => n)
+for (const name of wanted) {
+  if (!SCENARIOS.some(([n]) => n === name)) {
+    console.error('未知场景：' + name + '（--list 查看可用场景）')
+    process.exit(1)
+  }
+}
+
+/* ------------------------------ 夹具准备 ------------------------------ */
+
+function log(msg) {
+  process.stdout.write('[preview] ' + msg + '\n')
+}
+
+async function buildClient() {
+  await new Promise((res, rej) => {
+    const child = spawn(process.execPath, [join(root, 'scripts/build-client.mjs')], { cwd: root, stdio: 'inherit' })
+    child.on('exit', (code) => (code === 0 ? res() : rej(new Error('build-client 退出码 ' + code))))
+  })
+}
+
+/** 下载 React 18 UMD（只做一次，缓存在 .preview/vendor）。 */
+async function ensureVendor() {
+  const dir = join(previewDir, 'vendor')
+  mkdirSync(dir, { recursive: true })
+  const targets = [
+    ['react.js', 'https://unpkg.com/react@18.3.1/umd/react.production.min.js'],
+    ['react-dom.js', 'https://unpkg.com/react-dom@18.3.1/umd/react-dom.production.min.js'],
+  ]
+  for (const [file, url] of targets) {
+    const dest = join(dir, file)
+    if (existsSync(dest)) continue
+    log('下载 ' + file)
+    const res = await fetch(url)
+    if (!res.ok) throw new Error('下载 ' + url + ' 失败：HTTP ' + res.status)
+    writeFileSync(dest, Buffer.from(await res.arrayBuffer()))
+  }
+}
+
+/** 皮肤变量：优先用本机 skin-center 的真实 token 表，找不到则用内置兜底。 */
+function skinCss() {
+  const candidates = []
+  const skinsRoot = join(homedir(), '.dsh/profiles/web/node_modules/@linxin666/dsh-client-ui-skin-center/skins')
+  if (existsSync(skinsRoot)) {
+    for (const name of readdirSync(skinsRoot)) {
+      const file = join(skinsRoot, name, 'skin.css')
+      if (existsSync(file)) candidates.push(file)
+    }
+  }
+  if (candidates.length > 0) return readFileSync(candidates[0], 'utf8')
+  log('未找到本机 skin token 表，使用内置兜底变量')
+  return FALLBACK_SKIN_CSS
+}
+
+const FALLBACK_SKIN_CSS = `
+:root {
+  --dsw-alias-bg-base: #ffffff;
+  --dsw-alias-bg-layer-1: #f6f7f9;
+  --dsw-alias-bg-layer-2: #eef0f4;
+  --dsw-alias-bg-layer-3: #e5e8ee;
+  --dsw-alias-bg-mask-1: #00000059;
+  --dsw-alias-bg-overlay: #fffffff0;
+  --dsw-alias-border-l1: #00000014;
+  --dsw-alias-border-l2: #00000024;
+  --dsw-alias-border-l3: #00000038;
+  --dsw-alias-border-l4: #0000004d;
+  --dsw-alias-interactive-bg-hover: #0000000f;
+  --dsw-alias-interactive-bg-active: #0000001f;
+  --dsw-alias-interactive-bg-hover-danger: #c000000f;
+  --dsw-alias-label-primary: #0f1115;
+  --dsw-alias-label-secondary: #4b5158;
+  --dsw-alias-label-tertiary: #767c85;
+  --dsw-alias-label-dimmed: #9aa0a8;
+  --dsw-alias-label-primary-inverted: #ffffff;
+  --dsw-alias-brand-primary: #4d6bfe;
+  --dsw-alias-state-business-primary: #4d6bfe;
+  --dsw-alias-state-error-primary: #d1242f;
+  --dsw-alias-state-success-primary: #1a7f37;
+  --dsw-alias-state-warn-primary: #bf8700;
+  --dsw-specific-input-major: #ffffff;
+  --dsw-specific-menu: #ffffff;
+  --dsw-specific-tip: #f6f7f9;
+  --dsw-specific-sidebar-fill: #f2f3f5;
+  --dsw-specific-sidebar-nav-item-hover: #0000000f;
+  --dsw-specific-sidebar-nav-item-active: #0000001a;
+  --dsw-alias-scrollbar-bg-l1: #d0d3d8;
+  --dsw-alias-scrollbar-hover-l1: #b0b4ba;
+  --dsw-shadow-lv3: 0 12px 32px -8px #0000002e;
+}
+body[data-ds-dark-theme] {
+  --dsw-alias-bg-base: #1b1b1f;
+  --dsw-alias-bg-layer-1: #202024;
+  --dsw-alias-bg-layer-2: #26262b;
+  --dsw-alias-bg-layer-3: #2d2d33;
+  --dsw-alias-bg-mask-1: #0000008c;
+  --dsw-alias-bg-overlay: #202024eb;
+  --dsw-alias-border-l1: #ffffff14;
+  --dsw-alias-border-l2: #ffffff26;
+  --dsw-alias-border-l3: #ffffff3d;
+  --dsw-alias-border-l4: #ffffff52;
+  --dsw-alias-interactive-bg-hover: #ffffff14;
+  --dsw-alias-interactive-bg-active: #ffffff24;
+  --dsw-alias-interactive-bg-hover-danger: #ff6b6b1f;
+  --dsw-alias-label-primary: #ececf1;
+  --dsw-alias-label-secondary: #b4b4bd;
+  --dsw-alias-label-tertiary: #8e8e99;
+  --dsw-alias-label-dimmed: #6b6b75;
+  --dsw-alias-label-primary-inverted: #101014;
+  --dsw-alias-brand-primary: #7c9cff;
+  --dsw-alias-state-business-primary: #7c9cff;
+  --dsw-alias-state-error-primary: #ff6b6b;
+  --dsw-alias-state-success-primary: #4cc38a;
+  --dsw-alias-state-warn-primary: #e0a94a;
+  --dsw-specific-input-major: #17171a;
+  --dsw-specific-menu: #24242af0;
+  --dsw-specific-tip: #24242a;
+  --dsw-specific-sidebar-fill: #17171a;
+  --dsw-specific-sidebar-nav-item-hover: #ffffff12;
+  --dsw-specific-sidebar-nav-item-active: #ffffff1f;
+  --dsw-alias-scrollbar-bg-l1: #3a3a42;
+  --dsw-alias-scrollbar-hover-l1: #4d4d57;
+  --dsw-shadow-lv3: 0 12px 32px -8px #000000a6;
+}
+`
+
+function prepare() {
+  mkdirSync(shotsDir, { recursive: true })
+  for (const file of ['harness.html', 'harness.js', 'mock-host.js']) {
+    writeFileSync(join(previewDir, file), readFileSync(join(root, 'scripts/preview', file)))
+  }
+  writeFileSync(join(previewDir, 'skin.css'), skinCss())
+  writeFileSync(join(previewDir, 'client.js'), readFileSync(join(root, 'client.js')))
+  // dsh-docker 的浏览器半体（可选）：在同一页面里跑「tty 提供服务 + docker 消费」的联调场景
+  const dockerClient = join(root, '..', 'docker', 'client.js')
+  if (existsSync(dockerClient)) writeFileSync(join(previewDir, 'docker-client.js'), readFileSync(dockerClient))
+}
+
+/* ------------------------------ Chrome/CDP ------------------------------ */
+
+function findChrome() {
+  if (process.env.CHROME_PATH) return process.env.CHROME_PATH
+  const roots = [join(homedir(), 'Library/Caches/ms-playwright'), join(homedir(), '.cache/ms-playwright')]
+  const candidates = []
+  for (const base of roots) {
+    if (!existsSync(base)) continue
+    for (const dir of readdirSync(base)) {
+      if (!dir.startsWith('chromium')) continue
+      candidates.push(join(base, dir, 'chrome-mac-arm64/Google Chrome for Testing.app/Contents/MacOS/Google Chrome for Testing'))
+      candidates.push(join(base, dir, 'chrome-mac/Google Chrome for Testing.app/Contents/MacOS/Google Chrome for Testing'))
+      candidates.push(join(base, dir, 'chrome-linux/chrome'))
+    }
+  }
+  candidates.push('/Applications/Google Chrome.app/Contents/MacOS/Google Chrome')
+  candidates.push('/Applications/Chromium.app/Contents/MacOS/Chromium')
+  for (const c of candidates) if (existsSync(c)) return c
+  throw new Error('找不到 Chrome/Chromium，请设置 CHROME_PATH')
+}
+
+const WebSocketImpl = (() => {
+  try {
+    return require('ws')
+  } catch {
+    return null // 回退到 Node 内置 WebSocket
+  }
+})()
+
+class Cdp {
+  constructor(socket, kind) {
+    this.socket = socket
+    this.kind = kind
+    this.id = 0
+    this.pending = new Map()
+    this.listeners = new Set()
+    const handle = (raw) => {
+      let msg
+      try {
+        msg = JSON.parse(typeof raw === 'string' ? raw : String(raw))
+      } catch {
+        return
+      }
+      if (msg.id !== undefined && this.pending.has(msg.id)) {
+        const { resolve, reject } = this.pending.get(msg.id)
+        this.pending.delete(msg.id)
+        if (msg.error) reject(new Error((msg.error && msg.error.message) || JSON.stringify(msg.error)))
+        else resolve(msg.result)
+        return
+      }
+      for (const fn of this.listeners) fn(msg)
+    }
+    if (kind === 'ws') socket.on('message', handle)
+    else socket.addEventListener('message', (event) => handle(event.data))
+  }
+
+  static async connect(url) {
+    if (WebSocketImpl !== null) {
+      const socket = new WebSocketImpl(url, { perMessageDeflate: false })
+      await new Promise((res, rej) => {
+        socket.once('open', res)
+        socket.once('error', rej)
+      })
+      return new Cdp(socket, 'ws')
+    }
+    const socket = new WebSocket(url)
+    await new Promise((res, rej) => {
+      socket.addEventListener('open', res, { once: true })
+      socket.addEventListener('error', () => rej(new Error('CDP 连接失败')), { once: true })
+    })
+    return new Cdp(socket, 'node')
+  }
+
+  send(method, params = {}) {
+    const id = ++this.id
+    this.socket.send(JSON.stringify({ id, method, params }))
+    return new Promise((resolve, reject) => {
+      this.pending.set(id, { resolve, reject })
+      setTimeout(() => {
+        if (this.pending.has(id)) {
+          this.pending.delete(id)
+          reject(new Error('CDP 超时：' + method))
+        }
+      }, 30000)
+    })
+  }
+
+  on(fn) {
+    this.listeners.add(fn)
+    return () => this.listeners.delete(fn)
+  }
+}
+
+async function launchChrome() {
+  const chrome = findChrome()
+  const userDataDir = join(previewDir, 'chrome-profile')
+  rmSync(userDataDir, { recursive: true, force: true })
+  const child = spawn(chrome, [
+    '--headless=new',
+    '--remote-debugging-port=0',
+    '--user-data-dir=' + userDataDir,
+    '--no-first-run',
+    '--no-default-browser-check',
+    '--disable-extensions',
+    '--disable-background-networking',
+    '--disable-sync',
+    '--disable-features=Translate,OptimizationGuideModelDownloading,MediaRouter',
+    // 关掉 WebGL：xterm 的 WebglAddon 在无 GPU 的 headless 里会拿到一个画不出
+    // 东西的上下文（不抛错 → 不会回退 DOM 渲染器），截图里终端永远空白
+    '--disable-3d-apis',
+    '--disable-webgl',
+    '--force-color-profile=srgb',
+    '--font-render-hinting=none',
+    'about:blank',
+  ], { stdio: ['ignore', 'ignore', 'pipe'] })
+
+  const wsUrl = await new Promise((resolvePromise, reject) => {
+    let buffer = ''
+    const timer = setTimeout(() => reject(new Error('等待 Chrome DevTools 端口超时')), 25000)
+    child.stderr.on('data', (chunk) => {
+      buffer += String(chunk)
+      const match = buffer.match(/DevTools listening on (ws:\/\/\S+)/)
+      if (match) {
+        clearTimeout(timer)
+        resolvePromise(match[1])
+      }
+    })
+    child.on('exit', (code) => {
+      clearTimeout(timer)
+      reject(new Error('Chrome 退出，code=' + code))
+    })
+  })
+
+  // 直接连页面 target：省掉 Target.attachToTarget 的 session 路由，命令最简单
+  const port = new URL(wsUrl).port
+  const targets = await (await fetch('http://127.0.0.1:' + port + '/json/list')).json()
+  const page = targets.find((t) => t.type === 'page')
+  if (!page) throw new Error('Chrome 没有可用的页面 target')
+  const cdp = await Cdp.connect(page.webSocketDebuggerUrl)
+  await cdp.send('Page.enable')
+  await cdp.send('Runtime.enable')
+  return { child, cdp, userDataDir }
+}
+
+/* ------------------------------- 截图流程 ------------------------------- */
+
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms))
+
+async function shoot(cdp, name, label) {
+  const problems = []
+  const off = cdp.on((msg) => {
+    if (msg.method === 'Runtime.exceptionThrown') {
+      problems.push('异常：' + (msg.params.exceptionDetails.exception?.description || msg.params.exceptionDetails.text))
+    } else if (msg.method === 'Runtime.consoleAPICalled' && msg.params.type === 'error') {
+      problems.push('console.error：' + msg.params.args.map((a) => a.description || a.value).join(' '))
+    }
+  })
+  try {
+    const url = 'file://' + join(previewDir, 'harness.html') + '?scenario=' + encodeURIComponent(name) + '&theme=' + theme
+      // 样例路径随机器变化：运行时注入，避免把开发者目录写进夹具源码
+      + '&cwd=' + encodeURIComponent(root) + '&home=' + encodeURIComponent(homedir())
+    await cdp.send('Page.navigate', { url })
+    // 导航提交是异步的：必须等到新文档真的挂上了本次场景，否则会拿到上一个
+    // 场景的 __previewReady（截图就会停在半成品状态）
+    let ready = false
+    for (let i = 0; i < 120; i += 1) {
+      const probe = await cdp.send('Runtime.evaluate', {
+        expression: 'window.__previewState ? window.__previewState.name : null',
+        returnByValue: true,
+      }).catch(() => null)
+      if (probe?.result?.value === name) {
+        ready = true
+        break
+      }
+      await sleep(50)
+    }
+    if (!ready) problems.push('场景未挂载（导航超时）')
+    const outcome = await cdp.send('Runtime.evaluate', {
+      expression: 'window.__previewReady.then(() => ({ ok: true })).catch((e) => ({ ok: false, error: String((e && e.message) || e) }))',
+      awaitPromise: true,
+      returnByValue: true,
+    })
+    const value = outcome?.result?.value
+    if (value && value.ok === false) problems.push('场景失败：' + value.error)
+    /*
+     * 场景可以挂一份**函数形态**的断言到 `window.__previewAssert`：返回 null 表示通过，
+     * 返回字符串/数组表示失败（与各场景既有写法一致）。截图工具顺手把它跑掉——否则
+     * 那些断言只有手工 CDP 取 diag 时才有人看，回归就白钉了。
+     *
+     * 单独发一条 evaluate：`window.__previewDiag()` 的返回值里带着函数
+     * （`assert: window.__previewAssert`），和断言结果混在一个 `returnByValue` 里会
+     * 让整条求值失败——那正是「断言看着跑了、其实一条都没生效」的由来。
+     * 对象形态的 `__previewAssert`（纯数据快照，供人工比对）不在此列。
+     */
+    const check = await cdp.send('Runtime.evaluate', {
+      expression: '(async () => {'
+        + ' const a = window.__previewAssert;'
+        + ' if (typeof a !== "function") return null;'
+        + ' const r = await a();'
+        + ' return Array.isArray(r) ? r.join("；") : (r == null ? null : String(r));'
+        + '})()',
+      awaitPromise: true,
+      returnByValue: true,
+    })
+    if (check?.exceptionDetails !== undefined) {
+      // 断言自己抛错（拼错选择器之类）也要算失败，不能悄悄变成「通过」
+      problems.push('断言执行出错：' + String(check.exceptionDetails.exception?.description ?? JSON.stringify(check.exceptionDetails)))
+    } else if (typeof check?.result?.value === 'string' && check.result.value !== '') {
+      problems.push('断言未通过：' + check.result.value)
+    }
+    if (process.env.PREVIEW_DIAG) {
+      const diag = await cdp.send('Runtime.evaluate', {
+        expression: 'JSON.stringify({ ...window.__previewDiag(), assert: undefined })',
+        returnByValue: true,
+      })
+      if (typeof diag?.result?.value === 'string') log('   · diag ' + diag.result.value)
+    }
+    await sleep(500)
+    const shot = await cdp.send('Page.captureScreenshot', { format: 'png', captureBeyondViewport: false })
+    const file = join(shotsDir, name + '.png')
+    writeFileSync(file, Buffer.from(shot.data, 'base64'))
+    return { file, problems }
+  } finally {
+    off()
+  }
+}
+
+/* --------------------------------- main --------------------------------- */
+
+/** client-src/ 下最新源码的 mtime（递归一层足够）。 */
+function newestSourceMtime() {
+  let newest = 0
+  const srcDir = join(root, 'client-src')
+  for (const entry of readdirSync(srcDir)) {
+    const st = statSync(join(srcDir, entry))
+    if (st.isFile()) newest = Math.max(newest, st.mtimeMs)
+  }
+  return newest
+}
+
+async function main() {
+  const artifact = join(root, 'client.js')
+  if (wantBuild) {
+    log('重新打包 client.js')
+    await buildClient()
+  } else {
+    if (!existsSync(artifact)) {
+      throw new Error('client.js 不存在：先跑 pnpm -r build，或用 --build 让 preview 重建')
+    }
+    if (newestSourceMtime() > statSync(artifact).mtimeMs) {
+      throw new Error('client.js 落后于 client-src/：先跑 pnpm -r build，或用 --build 让 preview 重建（不再默认隐式重建）')
+    }
+  }
+  prepare()
+  await ensureVendor()
+  log('启动 headless Chrome（' + theme + ' 主题）')
+  const { child, cdp, userDataDir } = await launchChrome()
+  await cdp.send('Emulation.setDeviceMetricsOverride', { width: 1680, height: 1050, deviceScaleFactor: 2, mobile: false })
+  let failed = 0
+  try {
+    for (const name of wanted) {
+      const label = SCENARIOS.find(([n]) => n === name)[1]
+      const { file, problems } = await shoot(cdp, name, label)
+      const mark = problems.length > 0 ? '✗' : '✓'
+      log(mark + ' ' + name.padEnd(12) + label + '  →  ' + file.replace(process.cwd() + '/', ''))
+      for (const p of problems) log('   ⚠ ' + p)
+      if (problems.length > 0) failed += 1
+    }
+  } finally {
+    child.kill('SIGTERM')
+    // Chrome 收尾可能还在写 profile：清理失败不该让整轮截图算失败
+    try {
+      rmSync(userDataDir, { recursive: true, force: true })
+    } catch {
+      /* 下次运行会覆盖 */
+    }
+  }
+  log('完成：' + (wanted.length - failed) + '/' + wanted.length + ' 场景正常，截图在 ' + shotsDir.replace(process.cwd() + '/', ''))
+  if (failed > 0) process.exitCode = 1
+}
+
+main().catch((error) => {
+  console.error('[preview] ' + (error && error.stack ? error.stack : error))
+  process.exit(1)
+})
+

package/scripts/probe-route-smoke.mjs

@@ -0,0 +1,111 @@
+#!/usr/bin/env node
+/**
+ * @hyzyn/dsh-tty — probe 路由定向冒烟：只验证 /api/dsh-tty/probe（不依赖
+ * spawn/PTY，独立于 integration.mjs 的 B1 环境要求）。
+ *
+ * 用法：node scripts/probe-route-smoke.mjs
+ * 退出码：0 = 全部 PASS，1 = 任一 FAIL。
+ */
+import { Context } from '@deepseek-ai/cordis'
+import WebServerRuntime from '@deepseek-ai/dsh-host-webserver'
+import { LocalSubprocessRuntime } from '@deepseek-ai/dsh-subprocess-local'
+import net from 'node:net'
+import { name, inject, apply } from '../lib/index.js'
+import { startSftpSshd, TEST_USER, TEST_PASSWORD } from './lib/test-sshd.mjs'
+
+const RESULTS = []
+function pass(name) { RESULTS.push(['PASS', name]); console.log('  ✔ PASS  ' + name) }
+function fail(name, detail) { RESULTS.push(['FAIL', name, detail]); console.error('  ✘ FAIL  ' + name + (detail ? ' — ' + detail : '')) }
+
+async function run() {
+  const app = new Context()
+  const wsFiber = app.plugin(WebServerRuntime, { host: '127.0.0.1', port: 0 })
+  // settings / tools stub（probe 路由本身不需要，但插件启动时会注入）
+  const stubFiber = app.plugin({
+    name: 'settings-stub',
+    apply: (ctx) => {
+      ctx.provide('settings', { register: () => ({ get: () => ({}), update: async () => {} }) })
+      ctx.provide('tools', { register: () => () => {} })
+      // 与真实契约同形（section/context 返回注销器）：插件热应用时会调用重建
+      ctx.provide('systemPrompt', {
+        section: () => () => {},
+        context: () => () => {},
+      })
+    },
+  })
+  await stubFiber.await()
+  const pluginFiber = app.plugin({ name, inject, apply }, { maxSessions: 4, term: 'xterm-256color' })
+  await wsFiber.await()
+  await pluginFiber.await()
+  const port = app.webServer.port
+  await new Promise((resolve) => setTimeout(resolve, 300)) // 等路由注册
+  const probe = async (body) => {
+    const res = await fetch(`http://127.0.0.1:${port}/api/dsh-tty/probe`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify(body),
+    })
+    return res.json()
+  }
+  const getConfig = async () => (await (await fetch(`http://127.0.0.1:${port}/api/dsh-tty/config`)).json()).config
+
+  const sftpd = await startSftpSshd({ rootDir: process.cwd() })
+  const spec = { host: '127.0.0.1', port: sftpd.port, username: TEST_USER, auth: 'password', password: TEST_PASSWORD }
+  const hostsBefore = (Array.isArray((await getConfig()).hostKeys) ? (await getConfig()).hostKeys : []).length
+
+  // R1 试连成功（bookRecord=false）：auth.ok，不落盘
+  const r1 = await probe({ ...spec, bookRecord: false })
+  if (r1.ok === true && r1.result?.auth?.ok === true && r1.result?.tcp?.ok === true) pass('R1 试连成功（hostkey=' + String(r1.result?.hostkey?.state) + '）')
+  else fail('R1 试连成功', JSON.stringify(r1))
+  const hostsMid = (Array.isArray((await getConfig()).hostKeys) ? (await getConfig()).hostKeys : []).length
+  if (hostsMid === hostsBefore) pass('R2 试连不落盘 hostKeys')
+  else fail('R2 试连不落盘 hostKeys', `before=${hostsBefore} after=${hostsMid}`)
+
+  // R3 连接簿测试（bookRecord=true）：新指纹 TOFU 记录
+  const r3 = await probe({ ...spec, bookRecord: true })
+  if (r3.ok === true && r3.result?.auth?.ok === true && r3.result?.hostkey?.state === 'recorded') pass('R3 连接簿测试：新指纹 TOFU 记录')
+  else fail('R3 连接簿测试：新指纹 TOFU 记录', JSON.stringify(r3))
+  const hostsAfter = (Array.isArray((await getConfig()).hostKeys) ? (await getConfig()).hostKeys : [])
+  // 0.19.0 起记录形态为 {host, port, fingerprints[]}（旧单 fingerprint 字段兼容读取）
+  const recordedKey = hostsAfter.some((hk) => hk.host === '127.0.0.1' && Number(hk.port) === sftpd.port && ((Array.isArray(hk.fingerprints) && hk.fingerprints.length > 0) || typeof hk.fingerprint === 'string'))
+  if (recordedKey) pass('R4 指纹已持久化到 hostKeys')
+  else fail('R4 指纹已持久化到 hostKeys', JSON.stringify(hostsAfter))
+  const r5 = await probe({ ...spec, bookRecord: true })
+  if (r5.ok === true && r5.result?.auth?.ok === true && r5.result?.hostkey?.state === 'matched') pass('R5 二次测试：指纹匹配放行')
+  else fail('R5 二次测试：指纹匹配放行', JSON.stringify(r5))
+
+  // R6 坏密码 → 认证被拒
+  const r6 = await probe({ ...spec, password: 'wrong', bookRecord: true })
+  if (r6.ok === false && r6.result?.auth?.ok === false && /认证被拒绝/.test(r6.result?.auth?.error || '')) pass('R6 坏密码 → 认证被拒绝')
+  else fail('R6 坏密码 → 认证被拒绝', JSON.stringify(r6))
+
+  // R7 端口不通 → TCP 拒绝
+  const dead = net.createServer()
+  await new Promise((resolve) => dead.listen(0, '127.0.0.1', resolve))
+  const deadPort = dead.address().port
+  await new Promise((resolve) => dead.close(resolve))
+  const r7 = await probe({ ...spec, port: deadPort, bookRecord: false })
+  if (r7.ok === false && r7.result?.tcp?.ok === false && r7.result?.auth?.ok === false) pass('R7 端口不通 → tcp 拒绝')
+  else fail('R7 端口不通 → tcp 拒绝', JSON.stringify(r7))
+
+  // R8/R9 字段校验
+  const r8 = await probe({ host: '127.0.0.1', port: 22, username: '', auth: 'password', password: 'x' })
+  if (r8.ok === false && /主机|用户名/.test(r8.error || '')) pass('R8 缺字段 → 友好错误')
+  else fail('R8 缺字段 → 友好错误', JSON.stringify(r8))
+  const r9 = await probe({ host: '127.0.0.1', port: 70000, username: 'u', auth: 'password', password: 'x' })
+  if (r9.ok === false && /端口/.test(r9.error || '')) pass('R9 非法端口 → 友好错误')
+  else fail('R9 非法端口 → 友好错误', JSON.stringify(r9))
+
+  // loopback 围栏与既有路由同源（isLoopbackHttp：非 loopback 拒绝）；host
+  // 头伪造在带同源 Origin 的浏览器 fetch 里不适用，此处不重复断言。
+
+  await sftpd.close()
+  const failedCount = RESULTS.filter(([kind]) => kind === 'FAIL').length
+  console.log(failedCount === 0 ? '\nprobe route smoke: 全部 PASS' : `\nprobe route smoke: ${failedCount} 个 FAIL`)
+  process.exit(failedCount === 0 ? 0 : 1)
+}
+
+run().catch((error) => {
+  console.error('[probe-route-smoke] 崩溃: ' + (error && error.stack ? error.stack : error))
+  process.exit(2)
+})