@jjh32456/dsh-longlive 1.6.7 → 1.8.0

package/test/orchestrator.test.mjs

@@ -1,266 +0,0 @@
-// @local/dsh-longlive — orchestrator (scripts/auto-truncate-run.ps1) contract
-//
-// The orchestrator closes the app, cuts the log through truncate-cli.mjs,
-// verifies the rewrite and restarts the app. These cases pin the parts that
-// used to be unguarded:
-//   * the request's sessionPath must resolve to a file under the sessions root
-//     (case-insensitive prefix compare after Resolve-Path normalisation);
-//   * a refusal writes structured JSON with SESSION_PATH_OUTSIDE_ROOT and
-//     exits 2 without touching the file;
-//   * a close failure writes structured JSON with CLOSE_FAILED and exits 3
-//     (exercised with -SimulateCloseFailure, which never looks at a process);
-//   * a valid in-root request still passes -DryRun with exit 0.
-//
-// Nothing here closes an app or reads ~/.dsh/sessions: the sessions root, the
-// memory root and the "app" are all temp fixtures.
-
-import fs from 'node:fs';
-import path from 'node:path';
-import crypto from 'node:crypto';
-import { spawnSync } from 'node:child_process';
-import { fileURLToPath } from 'node:url';
-
-const HERE = path.dirname(fileURLToPath(import.meta.url));
-const ROOT = path.resolve(HERE, '..');
-const PS1 = path.join(ROOT, 'scripts', 'auto-truncate-run.ps1');
-
-function sha256(file) {
-  return crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex');
-}
-
-function writeRequest(file, values) {
-  fs.mkdirSync(path.dirname(file), { recursive: true });
-  fs.writeFileSync(file, `${JSON.stringify(values, null, 2)}\n`, 'utf8');
-}
-
-function baseRequest({ sessionPath, appExe, keepTurns = 5 }) {
-  return {
-    version: 1,
-    requestId: 'req-orchestrator-test',
-    at: new Date().toISOString(),
-    sessionPath,
-    sessionId: 'session-orchestrator-test',
-    reason: 'unit test',
-    estimate: { events: 10, bytes: 100 },
-    plan: { keepTurns, keepTokens: 1000 },
-    app: { exe: appExe },
-    pluginDir: ROOT,
-  };
-}
-
-function runOrchestrator({ memoryRoot, requestFile, sessionsRoot, extra = [] }) {
-  const args = [
-    '-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', PS1,
-    '-MemoryRoot', memoryRoot,
-    '-RequestFile', requestFile,
-    '-SessionsRoot', sessionsRoot,
-    ...extra,
-  ];
-  const run = spawnSync('powershell.exe', args, {
-    cwd: ROOT,
-    encoding: 'utf8',
-    timeout: 120_000,
-  });
-  return {
-    status: run.status,
-    stdout: String(run.stdout ?? ''),
-    stderr: String(run.stderr ?? ''),
-  };
-}
-
-function readResultLog(memoryRoot) {
-  const file = path.join(memoryRoot, '.longlive', 'logs', 'auto-truncate.log');
-  if (!fs.existsSync(file)) return [];
-  const text = fs.readFileSync(file, 'utf8').replace(/^\uFEFF/, '');
-  const out = [];
-  for (const line of text.split(/\r?\n/)) {
-    const trimmed = line.replace(/^\uFEFF/, '').trim();
-    if (!trimmed.startsWith('{')) continue;
-    try { out.push(JSON.parse(trimmed)); } catch { /* keep scanning */ }
-  }
-  return out;
-}
-
-function readRunLog(memoryRoot) {
-  const file = path.join(memoryRoot, '.longlive', 'logs', 'auto-truncate-run.log');
-  if (!fs.existsSync(file)) return '';
-  return fs.readFileSync(file, 'utf8').replace(/^\uFEFF/, '');
-}
-
-// The dry-run plan is a pretty-printed ConvertTo-Json object on stdout, mixed
-// with the "[timestamp] ..." run lines. Pull the first balanced object out.
-function parsePlanBlock(stdout) {
-  const text = String(stdout);
-  const start = text.indexOf('{');
-  if (start < 0) return null;
-  let depth = 0;
-  let inString = false;
-  let escaped = false;
-  for (let i = start; i < text.length; i += 1) {
-    const ch = text[i];
-    if (inString) {
-      if (escaped) escaped = false;
-      else if (ch === '\\') escaped = true;
-      else if (ch === '"') inString = false;
-      continue;
-    }
-    if (ch === '"') { inString = true; continue; }
-    if (ch === '{') depth += 1;
-    else if (ch === '}') {
-      depth -= 1;
-      if (depth === 0) {
-        try { return JSON.parse(text.slice(start, i + 1)); } catch { return null; }
-      }
-    }
-  }
-  return null;
-}
-
-export function runOrchestratorSuite({ runCase, assert, TMP }) {
-  const base = path.join(TMP, 'orchestrator');
-  const sessionsRoot = path.join(base, 'sessions');
-  fs.mkdirSync(sessionsRoot, { recursive: true });
-
-  runCase('O1', 'auto-truncate-run.ps1：ASCII 主体 + 硬杀关闭策略 + sessionPath 约束 + 结构化结果', () => {
-    const bytes = fs.readFileSync(PS1);
-    for (let i = 0; i < bytes.length; i += 1) {
-      assert(bytes[i] < 0x80, `script byte ${i} is non-ASCII (0x${bytes[i].toString(16)})`);
-    }
-    const text = bytes.toString('ascii');
-    for (const needle of [
-      'SessionsRoot', 'Resolve-Path', 'OrdinalIgnoreCase', 'StartsWith',
-      'SESSION_PATH_OUTSIDE_ROOT', 'CLOSE_FAILED', 'close-failed', 'SimulateCloseFailure',
-      'exit 3', '--memory-root',
-      // hard-kill close, not a one-minute standoff
-      'CloseMainWindow', 'Stop-Process -Id', 'AddSeconds(3)', 'settleMs', 'gracefulMs',
-      // the watchdog reports how far the cut drifted from the request plan
-      'snapshotEvents', 'eventsDelta', 'drifted', 'drift = $drift',
-    ]) {
-      assert(text.includes(needle), `orchestrator script is missing ${needle}`);
-    }
-    // The old flow waited 60 seconds for taskkill without /F, then swept by image
-    // name. Neither may come back: the close has to be a one-shot polite signal
-    // plus a PID-scoped force kill.
-    assert(!/taskkill\s+\/[IMF]/i.test(text), 'the script still invokes taskkill by image name');
-    assert(!/AddSeconds\((?!3\))/.test(text), 'the script still has a non-3-second grace window');
-    assert(!text.includes('AddSeconds(60)') && !text.includes('AddSeconds(30)'),
-      'the script still waits 30/60 seconds for the app to close');
-    assert(text.includes('Stop-Process -Id $proc.Id -Force'),
-      'the force kill is not scoped to a PID');
-    // The drift numbers must ride on the success result, not only in the run log.
-    const doneResult = text.slice(text.indexOf("status = 'done'"), text.indexOf('Remove-Item -LiteralPath $RequestFile'));
-    assert(doneResult.includes('drift = $drift'), 'the done result does not carry the drift report');
-    assert(!text.includes('RESULT close-failed') || text.includes('Write-Result'),
-      'close-failed path has no structured result');
-    return 'script contract holds';
-  });
-
-  runCase('O2', 'sessionPath 在 sessions 根外：exit 2 + SESSION_PATH_OUTSIDE_ROOT，字节不变', () => {
-    const caseDir = path.join(base, 'outside');
-    const memoryRoot = path.join(caseDir, 'memory');
-    const outsideDir = path.join(caseDir, 'elsewhere');
-    fs.mkdirSync(memoryRoot, { recursive: true });
-    fs.mkdirSync(outsideDir, { recursive: true });
-    const fakeApp = path.join(caseDir, 'fake.exe');
-    fs.writeFileSync(fakeApp, Buffer.from('not a real executable'));
-    const sessionPath = path.join(outsideDir, 'session.v4.jsonl.zstd');
-    fs.writeFileSync(sessionPath, Buffer.from('synthetic-log-bytes'));
-    const requestFile = path.join(caseDir, 'request.json');
-    writeRequest(requestFile, baseRequest({ sessionPath, appExe: fakeApp }));
-
-    const before = sha256(sessionPath);
-    const result = runOrchestrator({ memoryRoot, requestFile, sessionsRoot });
-    assert(result.status === 2, `exit ${result.status} (stderr ${result.stderr.slice(0, 300)})`);
-    const results = readResultLog(memoryRoot);
-    assert(results.length === 1, `expected one structured result, got ${results.length}`);
-    const entry = results[0];
-    assert(entry.ok === false && entry.status === 'bad-request',
-      `structured result ${entry.ok}/${entry.status}`);
-    assert(entry.code === 'SESSION_PATH_OUTSIDE_ROOT', `structured code ${entry.code}`);
-    assert(sha256(sessionPath) === before, 'refused run changed the session bytes');
-    assert(readRunLog(memoryRoot).includes('SESSION_PATH_OUTSIDE_ROOT'),
-      'run log does not name the refusal');
-    assert(fs.existsSync(requestFile), 'refused run removed the request');
-    return 'outside-root path refused with structured JSON';
-  });
-
-  runCase('O3', 'sessionPath 在 sessions 根内 + -DryRun：exit 0，干跑声明硬杀策略，不关应用不写结果', () => {
-    const caseDir = path.join(base, 'inside');
-    const memoryRoot = path.join(caseDir, 'memory');
-    fs.mkdirSync(memoryRoot, { recursive: true });
-    const fakeApp = path.join(caseDir, 'fake.exe');
-    fs.writeFileSync(fakeApp, Buffer.from('not a real executable'));
-    const sessionDir = path.join(sessionsRoot, 'scope-fixtures', 'inside-session');
-    fs.mkdirSync(sessionDir, { recursive: true });
-    const sessionPath = path.join(sessionDir, 'session.v4.jsonl.zstd');
-    fs.writeFileSync(sessionPath, Buffer.from('synthetic-log-bytes'));
-    const requestFile = path.join(caseDir, 'request.json');
-    writeRequest(requestFile, baseRequest({ sessionPath, appExe: fakeApp }));
-
-    const before = sha256(sessionPath);
-    const result = runOrchestrator({
-      memoryRoot, requestFile, sessionsRoot, extra: ['-DryRun'],
-    });
-    assert(result.status === 0, `exit ${result.status} (stdout ${result.stdout.slice(0, 400)})`);
-    assert(result.stdout.includes('"dryRun"'), 'dry-run printed no plan JSON');
-    const plan = parsePlanBlock(result.stdout);
-    assert(plan && plan.ok === true && plan.dryRun === true, 'dry-run JSON is not parseable');
-    // A dry run has to say out loud which close policy the real run would use,
-    // so an operator can see the hard kill before it happens.
-    assert(plan.close && plan.close.policy === 'hard-kill',
-      `dry-run close policy ${JSON.stringify(plan.close)}`);
-    assert(plan.close.gracefulMs === 3000, `gracefulMs ${plan.close.gracefulMs}`);
-    assert(plan.close.settleMs === 2000, `settleMs ${plan.close.settleMs}`);
-    assert(String(plan.close.kill).includes('Stop-Process'),
-      `close.kill ${plan.close.kill}`);
-    assert(readResultLog(memoryRoot).length === 0, 'dry-run wrote a result line');
-    assert(sha256(sessionPath) === before, 'dry-run changed the session bytes');
-    assert(fs.existsSync(requestFile), 'dry-run removed the request');
-    return 'in-root dry-run passes';
-  });
-
-  runCase('O4', '关闭失败：exit 3 + CLOSE_FAILED 结构化结果，会话与请求都保留', () => {
-    const caseDir = path.join(base, 'close-failed');
-    const memoryRoot = path.join(caseDir, 'memory');
-    fs.mkdirSync(memoryRoot, { recursive: true });
-    const fakeApp = path.join(caseDir, 'fake.exe');
-    fs.writeFileSync(fakeApp, Buffer.from('not a real executable'));
-    const sessionDir = path.join(sessionsRoot, 'scope-fixtures', 'close-session');
-    fs.mkdirSync(sessionDir, { recursive: true });
-    const sessionPath = path.join(sessionDir, 'session.v4.jsonl.zstd');
-    fs.writeFileSync(sessionPath, Buffer.from('synthetic-log-bytes'));
-    const requestFile = path.join(caseDir, 'request.json');
-    writeRequest(requestFile, baseRequest({ sessionPath, appExe: fakeApp }));
-
-    const beforeSha = sha256(sessionPath);
-    const beforeFiles = fs.readdirSync(sessionDir).sort();
-    const result = runOrchestrator({
-      memoryRoot, requestFile, sessionsRoot, extra: ['-SimulateCloseFailure'],
-    });
-    assert(result.status === 3, `exit ${result.status} (stderr ${result.stderr.slice(0, 300)})`);
-    const results = readResultLog(memoryRoot);
-    assert(results.length === 1, `expected one structured result, got ${results.length}`);
-    const entry = results[0];
-    assert(entry.ok === false && entry.status === 'close-failed',
-      `structured result ${entry.ok}/${entry.status}`);
-    assert(entry.code === 'CLOSE_FAILED', `structured code ${entry.code}`);
-    assert(entry.restored === false && entry.restart === false,
-      'close-failed result claims a restore or restart');
-    assert(sha256(sessionPath) === beforeSha, 'close-failed run changed the session bytes');
-    assert(fs.readdirSync(sessionDir).sort().join('|') === beforeFiles.join('|'),
-      'close-failed run created files beside the session');
-    assert(fs.existsSync(requestFile), 'close-failed run removed the request');
-    assert(readRunLog(memoryRoot).includes('simulated failure'),
-      'run log does not record the simulated close');
-    // A failed close must never reach the force-kill or the cut: the session is
-    // still open, so the only correct outcome is "nothing happened".
-    const runLog = readRunLog(memoryRoot);
-    assert(!runLog.includes('force-killing'), 'close-failed run still tried to force-kill');
-    assert(!runLog.includes('Stop-Process'), 'close-failed run reached Stop-Process');
-    assert(!runLog.includes('cut: cli exit='), 'close-failed run ran truncate-cli');
-    assert(entry.drift === undefined, 'close-failed result carries a drift report');
-    return 'close failure reported structurally without touching the app';
-  });
-}
-
-export const ORCHESTRATOR_CASES = ['O1', 'O2', 'O3', 'O4'];

package/test/p1_probe.mjs

@@ -1,97 +0,0 @@
-// P1 runtime witness. Runs the plugin's own tools inside a throwaway home and
-// records EVERY file the fs layer is asked to open, so "this code never reads
-// the credential file" is observed rather than asserted from source text.
-//
-// The parent (run.mjs) plants a decoy credential file in the fake home, sets
-// HOME/USERPROFILE/DSH_HOME at it, then requires: (a) the canary read below is
-// in the witness list — proof the witness is live, not silently unpatched —
-// and (b) nothing the tools touched is the credential file or the real home.
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-const reads = [];
-const calls = [];
-
-// The fs layer accepts a path string, a Buffer, a file-descriptor number, or a
-// WHATWG URL — and Node's own ESM loader passes a URL when it reads a module
-// through our patched readFileSync. `path.resolve(String(url))` turns
-// `file:///C:/x/y.js` into `<cwd>\file:\C:\x\y.js`: a path that does not
-// exist, and that shares the real home's prefix whenever the package is
-// installed under ~/.dsh. Normalise URLs to real file paths first, or the
-// witness reports a phantom "the tools touched the real ~/.dsh".
-const toPath = (file) => {
-  if (typeof file === 'number') return `<fd ${file}>`;
-  if (file instanceof URL) {
-    try { return fileURLToPath(file); } catch { return String(file); }
-  }
-  if (Buffer.isBuffer(file)) return file.toString();
-  const text = String(file);
-  if (text.startsWith('file:')) {
-    try { return fileURLToPath(new URL(text)); } catch { return text; }
-  }
-  try { return path.resolve(text); } catch { return text; }
-};
-
-const original = {
-  readFileSync: fs.readFileSync,
-  openSync: fs.openSync,
-  readFile: fs.readFile,
-  createReadStream: fs.createReadStream,
-};
-
-// Keep every wrapper bound to the ORIGINAL implementation: no wrapper may call
-// another wrapper, or the same read would be recorded twice.
-fs.readFileSync = function witnessReadFileSync(file, ...rest) {
-  reads.push(toPath(file));
-  return original.readFileSync.call(fs, file, ...rest);
-};
-fs.openSync = function witnessOpenSync(file, ...rest) {
-  reads.push(toPath(file));
-  return original.openSync.call(fs, file, ...rest);
-};
-fs.readFile = function witnessReadFile(file, ...rest) {
-  reads.push(toPath(file));
-  return original.readFile.call(fs, file, ...rest);
-};
-fs.createReadStream = function witnessCreateReadStream(file, ...rest) {
-  reads.push(toPath(file));
-  return original.createReadStream.call(fs, file, ...rest);
-};
-
-const home = process.env.P1_PROBE_HOME;
-if (!home) {
-  console.error('P1_PROBE_HOME is required');
-  process.exit(2);
-}
-const memRoot = path.join(home, 'memory');
-const sessionFile = path.join(home, 'sessions', '--p1--', 'session-p1', 'session.v4.jsonl.zstd');
-
-// Canary: a read the witness MUST see. If this path is missing from `reads`,
-// the instrumentation failed and the credential check below would be vacuous.
-fs.readFileSync(path.join(home, 'canary.txt'), 'utf8');
-
-const tools = await import('../src/tools.js');
-const plugin = await import('../src/index.js');
-
-const run = (name, fn) => {
-  try {
-    const value = fn();
-    calls.push({ name, ok: true, status: value?.status ?? null, code: value?.code ?? null });
-    return value;
-  } catch (error) {
-    calls.push({ name, ok: false, thrown: String(error?.message ?? error) });
-    return null;
-  }
-};
-
-run('sessionHealth(list)', () => tools.sessionHealth({}, { home }));
-run('sessionHealth(latest)', () => tools.sessionHealth({ session: 'latest' }, { home }));
-run('sessionHealth(sessionPath)', () => tools.sessionHealth({ sessionPath: sessionFile }, { home }));
-run('sessionBackupPlan(dry)', () => tools.sessionBackupPlan({ sessionPath: sessionFile, dryRun: true }, { home }));
-run('sessionWake', () => tools.sessionWake({}, { memRoot }));
-run('leaseAcquire', () => tools.leaseAcquire({ holder: 'p1-probe', ttlSec: 30 }, { memRoot }));
-
-const payload = { reads, calls, inject: plugin.inject };
-// One JSON line on the last line of stdout: the parent parses this, nothing else.
-console.log('P1_WITNESS ' + JSON.stringify(payload));

package/test/packaging.test.mjs

@@ -1,182 +0,0 @@
-/**
- * 打包红线（0.9.0-rc.1 合并包版）：安装时只带走 package.json 的 files 白名单。
- * 这里按 pack.mjs 的同一套 glob 语义把白名单复制到临时目录，再按安装后的真实
- * 路径逐个 import。跨目录 re-export、漏掉新模块的 files 条目都会在这里变成
- * ERR_MODULE_NOT_FOUND 或白名单覆盖失败。
- */
-
-import test from 'node:test';
-import assert from 'node:assert/strict';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { fileURLToPath, pathToFileURL } from 'node:url';
-
-const HERE = path.dirname(fileURLToPath(import.meta.url));
-const ROOT = path.resolve(HERE, '..');
-const PKG = JSON.parse(fs.readFileSync(path.join(ROOT, 'package.json'), 'utf8'));
-const SKIP_DIRS = new Set(['node_modules', '.git', '.longlive', 'dist', '.cache']);
-
-/** Same minimal glob as scripts/pack.mjs: ** crosses directories, * does not. */
-function globToRegExp(pattern) {
-  let source = '';
-  for (let i = 0; i < pattern.length; i += 1) {
-    const char = pattern[i];
-    if (char === '*') {
-      if (pattern[i + 1] === '*') {
-        i += 1;
-        if (pattern[i + 1] === '/') {
-          i += 1;
-          source += '(?:.*/)?';
-        } else {
-          source += '.*';
-        }
-      } else {
-        source += '[^/]*';
-      }
-    } else if (char === '?') {
-      source += '[^/]';
-    } else {
-      source += char.replace(/[.+^${}()|[\]\\]/g, '\\$&');
-    }
-  }
-  return new RegExp(`^${source}$`);
-}
-
-function walk(dir, out = [], base = ROOT) {
-  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-    if (entry.isSymbolicLink()) continue;
-    const abs = path.join(dir, entry.name);
-    if (entry.isDirectory()) {
-      if (SKIP_DIRS.has(entry.name)) continue;
-      walk(abs, out, base);
-    } else if (entry.isFile()) {
-      out.push(path.relative(base, abs).split(path.sep).join('/'));
-    }
-  }
-  return out;
-}
-
-function selectPublished() {
-  const positives = PKG.files.filter((entry) => !entry.startsWith('!')).map((entry) => globToRegExp(entry));
-  const negatives = PKG.files.filter((entry) => entry.startsWith('!')).map((entry) => globToRegExp(entry.slice(1)));
-  const selected = [];
-  for (const rel of walk(ROOT)) {
-    if (positives.some((re) => re.test(rel)) && !negatives.some((re) => re.test(rel))) selected.push(rel);
-  }
-  // npm always includes package.json plus root README*/LICENSE*/CHANGELOG*.
-  selected.push('package.json');
-  for (const rel of walk(ROOT)) {
-    if (!rel.includes('/') && /^(README|LICENSE|CHANGELOG)/.test(rel) && !negatives.some((re) => re.test(rel))) {
-      selected.push(rel);
-    }
-  }
-  return [...new Set(selected)].sort();
-}
-
-function installShallow(t) {
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'longlive-pkg-'));
-  t.after(() => fs.rmSync(root, { recursive: true, force: true }));
-  for (const rel of selectPublished()) {
-    const target = path.join(root, rel);
-    fs.mkdirSync(path.dirname(target), { recursive: true });
-    fs.copyFileSync(path.join(ROOT, rel), target);
-  }
-  return root;
-}
-
-test('files 白名单覆盖每一个 src 文件与四件新能力的入口', () => {
-  const published = new Set(selectPublished());
-  for (const rel of walk(path.join(ROOT, 'src'))) {
-    assert.ok(published.has(rel), `src 文件不在 files 白名单内：${rel}`);
-  }
-  for (const rel of [
-    'src/identity/index.js',
-    'src/identity/handover.js',
-    'src/recall/index.js',
-    'src/bus/bus.mjs',
-    'src/router/background/index.mjs',
-    'src/features.js',
-    'test/auto-recall.test.mjs',
-    'test/metrics.test.mjs',
-    'test/bus.test.mjs',
-    'test/feature-flags.test.mjs',
-    'test/identity-card-marker.test.mjs',
-    'test/run-rc.mjs',
-    'test/rc5-regressions.test.mjs',
-    'test/identity-router/run.mjs',
-    'test/fixtures/pre-step-container.mjs',
-    'test/fixtures/baseline-0.8.0-registration.json',
-    'test/router-background/router.test.mjs',
-    'scripts/resident-watcher.ps1',
-    'scripts/install-resident-watcher.ps1',
-    'scripts/lib/auto-truncate-run.ps1',
-  ]) {
-    assert.ok(published.has(rel), `files 白名单缺 ${rel}`);
-  }
-  assert.ok(published.has('test/p1_probe.mjs'), 'files 白名单缺 test/p1_probe.mjs');
-  assert.ok(published.has('package.json'), 'files 白名单缺 package.json');
-});
-
-test('只带白名单安装后：没有 prototype，所有 src 相对 import 都留在包内', (t) => {
-  const root = installShallow(t);
-  assert.equal(fs.existsSync(path.join(root, 'prototype')), false, '安装包不该依赖白名单外的 prototype/');
-
-  const offenders = [];
-  for (const rel of walk(path.join(root, 'src'), [], root)) {
-    if (!/\.(mjs|js)$/.test(rel)) continue;
-    const file = path.join(root, rel);
-    const text = fs.readFileSync(file, 'utf8');
-    for (const match of text.matchAll(/\bfrom\s+['"]([^'"]+)['"]|import\s*\(\s*['"]([^'"]+)['"]\s*\)/g)) {
-      const spec = match[1] ?? match[2];
-      if (!spec.startsWith('.')) continue;
-      const resolved = path.resolve(path.dirname(file), spec);
-      if (resolved !== root && !resolved.startsWith(root + path.sep)) {
-        offenders.push(`${rel} -> ${spec}`);
-      }
-      if (!fs.existsSync(resolved)) offenders.push(`${rel} -> ${spec}（不存在）`);
-    }
-  }
-  assert.deepEqual(offenders, [], `存在跨出包目录/缺失的 import：\n${offenders.join('\n')}`);
-});
-
-test('R2-07 发布版本面：包版本 1.6.5，文档同步 D2/D6 能力集', () => {
-  assert.equal(PKG.version, '1.6.5');
-  const read = (rel) => fs.readFileSync(path.join(ROOT, rel), 'utf8');
-  const en = read('docs/README.en.md');
-  assert.ok(en.includes('@jjh32456/dsh-longlive-panel@0.2.5'), '面板版本未统一到 0.2.5（scoped 包名）');
-  assert.ok(en.includes('jjh32456-dsh-longlive-1.6.5.tgz'), '英文文档示例 tgz 不是 scoped 的 1.6.5');
-  assert.ok(en.includes('@jjh32456/dsh-longlive'), '英文文档缺少 scoped 包名');
-  assert.equal(en.includes('dsh-longlive-panel@0.1.3'), false, '英文文档仍残留 0.1.3');
-  assert.equal(en.includes('0.9.0-rc.1'), false, '英文文档仍残留 rc.1');
-  const features = read('docs/FEATURES.md');
-  assert.ok(features.startsWith('# 1.6.5'), 'FEATURES.md 标题不是 1.6.5');
-  assert.equal(features.includes('0.9.0-rc.1'), false, 'FEATURES.md 仍残留 rc.1');
-});
-
-test('R2-08 自动截断默认关闭（代码 enabled=false / mode=dryrun，patch 显式同值）', () => {
-  // 1.6.0 的硬验收（滥用面评估 §4.1）：代码默认与包内 patch 对齐，都是
-  // enabled:false / mode:dryrun。1.5.0 及以前代码兜底是 enabled:true /
-  // mode:'log'，老配置漏写 autoTruncate 时会自动开始 log；这里钉住两者一致。
-  const yml = fs.readFileSync(path.join(ROOT, 'cordis.patch.yml'), 'utf8');
-  const block = yml.match(/autoTruncate:\s*\r?\n\s+enabled:\s*false\s*\r?\n\s+mode:\s*['"]?dryrun['"]?/);
-  assert.ok(block, 'cordis.patch.yml 的 session-longlive 配置必须显式写 autoTruncate enabled:false / mode:dryrun');
-});
-
-test('只带白名单安装后每个新入口都能 import()', async (t) => {
-  const root = installShallow(t);
-  for (const rel of [
-    'src/index.js',
-    'src/features.js',
-    'src/metrics/index.mjs',
-    'src/identity/index.js',
-    'src/recall/index.js',
-    'src/bus/bus.mjs',
-    'src/router/background/index.mjs',
-  ]) {
-    const file = path.join(root, rel);
-    assert.equal(fs.existsSync(file), true, `入口不在白名单复制结果里：${rel}`);
-    const mod = await import(`${pathToFileURL(file).href}?packaging=${Date.now()}-${Math.random()}`);
-    assert.ok(mod && typeof mod === 'object', `${rel} 没有导出对象`);
-  }
-});