@kafca/agentdock 0.1.31 → 0.1.34

package/dist-electron/services/local-ai-core/src/scheduler/scheduled-conversation-executor.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ScheduledConversationExecutor = void 0;
+const scheduled_job_route_js_1 = require("./scheduled-job-route.js");
 const TERMINAL_RUN_STATES = new Set(['completed', 'failed', 'interrupted']);
 const SCHEDULED_RUN_PERMISSION_MODE = 'bypassPermissions';
 class ScheduledConversationExecutor {
@@ -14,6 +15,7 @@ class ScheduledConversationExecutor {
         try {
             const sendResult = await this.options.workspaceRouter.sendThreadMessage(target.threadId, prompt, {
                 permissionMode: SCHEDULED_RUN_PERMISSION_MODE,
+                runtimeEnv: this.buildScheduledRuntimeEnv(target),
             });
             await this.waitForRun(sendResult.runId, timeoutMs);
             const thread = await this.options.workspaceRouter.getThread(target.threadId);
@@ -31,6 +33,26 @@ class ScheduledConversationExecutor {
             await policy.afterExecute?.(target, job);
         }
     }
+    buildScheduledRuntimeEnv(target) {
+        const route = target.route;
+        const basePlatform = (0, scheduled_job_route_js_1.getChannelPlatformBase)(target.platform);
+        const env = {};
+        if (basePlatform && basePlatform !== 'local') {
+            env.LOCAL_AI_PLATFORM = basePlatform;
+            env.LOCAL_AI_ROUTE_TYPE = (0, scheduled_job_route_js_1.routeTypeForPlatform)(target.platform);
+        }
+        const instanceId = route.instanceId || (0, scheduled_job_route_js_1.getChannelPlatformInstanceId)(target.platform);
+        if (instanceId) {
+            env.LOCAL_AI_PLATFORM_INSTANCE_ID = instanceId;
+        }
+        if (route.channelId) {
+            env.LOCAL_AI_CHAT_ID = route.channelId;
+        }
+        if (route.participantId) {
+            env.LOCAL_AI_PLATFORM_USER_ID = route.participantId;
+        }
+        return env;
+    }
     async waitForRun(runId, timeoutMs) {
         const startedAt = Date.now();
         while (Date.now() - startedAt < timeoutMs) {

package/dist-electron/services/local-ai-core/src/scheduler/scheduled-job-application-service.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScheduledJobApplicationService = void 0;
+const scheduled_job_route_js_1 = require("./scheduled-job-route.js");
+class ScheduledJobApplicationService {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    listJobs(workspaceId) {
+        return this.options.scheduler.listJobs(workspaceId);
+    }
+    getJob(jobId) {
+        return this.options.scheduler.getJob(jobId);
+    }
+    createJob(input) {
+        return this.options.scheduler.createJob(this.resolveCreateInput(input));
+    }
+    createCronJob(input) {
+        return this.options.scheduler.createJob({
+            workspaceId: input.workspaceId,
+            platform: input.platform,
+            route: this.resolveExplicitRoute(input.platform, input.route),
+            triggerType: 'cron',
+            cronExpr: input.schedule,
+            promptTemplate: input.message,
+            description: `${input.name} · ${input.scheduleDescription}`,
+            enabled: true,
+        });
+    }
+    updateJob(jobId, input) {
+        return this.options.scheduler.updateJob(jobId, {
+            ...input,
+            ...(input.route ? { route: (0, scheduled_job_route_js_1.withoutThreadRoute)(input.route) } : {}),
+        });
+    }
+    deleteJob(jobId) {
+        return this.options.scheduler.deleteJob(jobId);
+    }
+    runJobNow(jobId) {
+        return this.options.scheduler.runJobNow(jobId);
+    }
+    listJobRuns(jobId) {
+        return this.options.scheduler.listJobRuns(jobId);
+    }
+    listJobsForThread(threadId) {
+        const binding = this.options.store.getPlatformThreadBindingByThreadId(threadId);
+        return this.options.scheduler
+            .listJobs()
+            .filter((job) => job.route.threadId === threadId ||
+            (binding ? (0, scheduled_job_route_js_1.scheduledJobMatchesPlatformBinding)(job, binding) : false));
+    }
+    resolveCreateInput(input) {
+        if (input.platform && input.route) {
+            return {
+                ...input,
+                route: this.resolveExplicitRoute(input.platform, input.route),
+            };
+        }
+        const threadId = String(input.threadId || input.route?.threadId || '').trim();
+        if (threadId) {
+            const binding = this.options.store.getPlatformThreadBindingByThreadId(threadId);
+            if (binding && binding.workspace_id === input.workspaceId) {
+                return {
+                    ...input,
+                    platform: binding.platform,
+                    route: (0, scheduled_job_route_js_1.routeFromPlatformThreadBinding)(binding),
+                };
+            }
+        }
+        return {
+            ...input,
+            platform: 'local',
+            route: {
+                type: 'local.thread',
+                channelId: input.workspaceId,
+            },
+        };
+    }
+    resolveExplicitRoute(platform, route) {
+        return (0, scheduled_job_route_js_1.routeWithPlatformInstance)((0, scheduled_job_route_js_1.withoutThreadRoute)(route), platform);
+    }
+}
+exports.ScheduledJobApplicationService = ScheduledJobApplicationService;

package/dist-electron/services/local-ai-core/src/scheduler/scheduled-job-route.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withoutThreadRoute = withoutThreadRoute;
+exports.getChannelPlatformBase = getChannelPlatformBase;
+exports.getChannelPlatformInstanceId = getChannelPlatformInstanceId;
+exports.platformMatches = platformMatches;
+exports.routeWithPlatformInstance = routeWithPlatformInstance;
+exports.routeTypeForPlatform = routeTypeForPlatform;
+exports.routeFromPlatformThreadBinding = routeFromPlatformThreadBinding;
+exports.scheduledJobMatchesPlatformBinding = scheduledJobMatchesPlatformBinding;
+exports.scheduledJobMatchesCliContext = scheduledJobMatchesCliContext;
+function withoutThreadRoute(route) {
+    const { threadId: _threadId, ...deliveryRoute } = route;
+    return deliveryRoute;
+}
+function getChannelPlatformBase(platform) {
+    return String(platform || '').trim().toLowerCase().split(':', 1)[0] || '';
+}
+function getChannelPlatformInstanceId(platform) {
+    const normalized = String(platform || '').trim().toLowerCase();
+    const separator = normalized.indexOf(':');
+    return separator >= 0 ? normalized.slice(separator + 1) : '';
+}
+function platformMatches(candidate, expectedBase) {
+    return getChannelPlatformBase(candidate) === expectedBase;
+}
+function routeWithPlatformInstance(route, platform) {
+    const instanceId = route.instanceId || getChannelPlatformInstanceId(platform);
+    return instanceId ? { ...route, instanceId } : route;
+}
+function routeTypeForPlatform(platform) {
+    const base = getChannelPlatformBase(platform);
+    return base === 'lark' || base === 'weixin' ? 'channel.chat' : base;
+}
+function routeFromPlatformThreadBinding(binding) {
+    return {
+        type: routeTypeForPlatform(binding.platform),
+        channelId: binding.chat_id,
+        instanceId: getChannelPlatformInstanceId(binding.platform) || undefined,
+        participantId: binding.platform_user_id,
+    };
+}
+function scheduledJobMatchesPlatformBinding(job, binding) {
+    return (job.workspaceId === binding.workspace_id &&
+        getChannelPlatformBase(job.platform) === getChannelPlatformBase(binding.platform) &&
+        job.route.channelId === binding.chat_id &&
+        String(job.route.participantId || '') === String(binding.platform_user_id || ''));
+}
+function scheduledJobMatchesCliContext(job, context) {
+    if (!context.workspaceId || !context.platform || !context.chatId) {
+        return false;
+    }
+    return (job.workspaceId === context.workspaceId &&
+        getChannelPlatformBase(job.platform) === getChannelPlatformBase(context.platform) &&
+        job.route.channelId === context.chatId &&
+        String(job.route.participantId || '') === String(context.platformUserId || ''));
+}

package/dist-electron/services/local-ai-core/src/scheduler/weixin-schedule-adapter.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.WeixinScheduleAdapter = void 0;
 const scheduled_conversation_executor_js_1 = require("./scheduled-conversation-executor.js");
 const weixin_execution_policies_js_1 = require("./weixin-execution-policies.js");
+const scheduled_job_route_js_1 = require("./scheduled-job-route.js");
 class WeixinScheduleAdapter {
     options;
     executor;
@@ -15,7 +16,7 @@ class WeixinScheduleAdapter {
         });
     }
     supports(job) {
-        return job.platform === 'weixin' && (job.route.type === 'channel.chat' || job.route.type === 'weixin_chat');
+        return (0, scheduled_job_route_js_1.platformMatches)(job.platform, 'weixin') && (job.route.type === 'channel.chat' || job.route.type === 'weixin_chat');
     }
     async execute(context) {
         const { job } = context;
@@ -31,7 +32,7 @@ class WeixinScheduleAdapter {
             if (!channelRuntime.sendScheduledMessage) {
                 throw new Error('WeChat channel runtime does not support scheduled delivery.');
             }
-            platformMessageId = await channelRuntime.sendScheduledMessage(job.workspaceId, job.route, execution.replyText);
+            platformMessageId = await channelRuntime.sendScheduledMessage(job.workspaceId, (0, scheduled_job_route_js_1.routeWithPlatformInstance)((0, scheduled_job_route_js_1.withoutThreadRoute)(job.route), job.platform), execution.replyText);
             if (!platformMessageId) {
                 throw new Error('WeChat gateway did not return a message id for scheduled delivery.');
             }
@@ -46,16 +47,15 @@ class WeixinScheduleAdapter {
     async resolveThread(job) {
         const workspaceRouter = this.options.getWorkspaceRouter();
         const route = job.route;
-        if (route.threadId) {
-            await workspaceRouter.getThread(route.threadId);
-            return route.threadId;
-        }
         const channelId = route.channelId;
         const participantId = route.participantId || '';
-        const binding = this.options.store.getPlatformThreadBinding(job.workspaceId, channelId, participantId, 'weixin');
-        if (binding?.thread_id) {
+        const binding = this.options.store.getPlatformThreadBinding(job.workspaceId, channelId, participantId, job.platform);
+        if (binding?.thread_id && await this.threadExists(binding.thread_id)) {
             return binding.thread_id;
         }
+        if (route.threadId && await this.threadExists(route.threadId)) {
+            return route.threadId;
+        }
         const thread = await workspaceRouter.createThread(job.workspaceId, job.description || `Scheduled ${job.platform} task`);
         const now = new Date().toISOString();
         this.options.store.upsertPlatformThreadBinding({
@@ -68,11 +68,20 @@ class WeixinScheduleAdapter {
             created_at: now,
             updated_at: now,
         });
-        const authorized = this.options.store.getAuthorizedUser(job.workspaceId, participantId, 'weixin');
+        const authorized = this.options.store.getAuthorizedUser(job.workspaceId, participantId, job.platform);
         if (authorized) {
-            this.options.store.updateAuthorizedUserThread(job.workspaceId, participantId, thread.id, 'weixin');
+            this.options.store.updateAuthorizedUserThread(job.workspaceId, participantId, thread.id, job.platform);
         }
         return thread.id;
     }
+    async threadExists(threadId) {
+        try {
+            await this.options.getWorkspaceRouter().getThread(threadId);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
 }
 exports.WeixinScheduleAdapter = WeixinScheduleAdapter;

package/dist-electron/{electron → tests/contracts}/local-core-contracts.test.js

@@ -5,7 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 const node_test_1 = __importDefault(require("node:test"));
 const strict_1 = __importDefault(require("node:assert/strict"));
-const index_js_1 = require("../packages/contracts/src/index.js");
+const index_js_1 = require("../../packages/contracts/src/index.js");
 (0, node_test_1.default)('scheduled job execution mode normalization accepts canonical aliases', () => {
     strict_1.default.equal((0, index_js_1.normalizeScheduledJobExecutionMode)(undefined), 'same-thread');
     strict_1.default.equal((0, index_js_1.normalizeScheduledJobExecutionMode)('same_thread'), 'same-thread');

package/dist-electron/{electron → tests/electron}/agent-runtime-detector.test.js

@@ -8,8 +8,8 @@ const strict_1 = __importDefault(require("node:assert/strict"));
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const node_os_1 = require("node:os");
-const agent_runtime_detector_js_1 = require("../services/local-ai-core/src/runtime/agent-runtime-detector.js");
-const index_js_1 = require("../services/local-ai-core/src/agents/index.js");
+const agent_runtime_detector_js_1 = require("../../services/local-ai-core/src/runtime/agent-runtime-detector.js");
+const index_js_1 = require("../../services/local-ai-core/src/agents/index.js");
 (0, node_test_1.default)('agent runtime definitions own runtime detection metadata', () => {
     strict_1.default.deepEqual((0, index_js_1.resolveAgentRuntimeDefinition)('hermes')?.detection?.commandCandidates, ['hermes']);
     strict_1.default.deepEqual((0, index_js_1.resolveAgentRuntimeDefinition)('codex')?.detection?.bundledRuntimes?.[0], {

package/dist-electron/{electron → tests/electron}/lac-cli.test.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const node_test_1 = __importDefault(require("node:test"));
 const strict_1 = __importDefault(require("node:assert/strict"));
 const node_http_1 = require("node:http");
-const lac_js_1 = require("../services/local-ai-core/src/cli/lac.js");
+const lac_js_1 = require("../../services/local-ai-core/src/cli/lac.js");
 function createIo() {
     let stdout = '';
     let stderr = '';
@@ -214,6 +214,56 @@ function createIo() {
     });
     strict_1.default.match(read().stdout, /Sent file out\.pdf to chat-1: msg-file-1/);
 });
+(0, node_test_1.default)('lac channel send-file normalizes instance-qualified platform env into route instance', async () => {
+    let capturedUrl = '';
+    let capturedBody = null;
+    const server = (0, node_http_1.createServer)(async (req, res) => {
+        if (req.method === 'POST') {
+            capturedUrl = req.url || '';
+            const chunks = [];
+            for await (const chunk of req) {
+                chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+            }
+            capturedBody = Buffer.concat(chunks).toString('utf8');
+            res.setHeader('content-type', 'application/json');
+            res.end(JSON.stringify({
+                ok: true,
+                data: {
+                    platform: 'lark',
+                    workspaceId: '知识库',
+                    channelId: 'chat-1',
+                    messageIds: ['msg-file-1'],
+                    attachments: [{ kind: 'file', fileName: 'out.pdf', fileSize: 123 }],
+                },
+            }));
+            return;
+        }
+        res.statusCode = 404;
+        res.end(JSON.stringify({ ok: false, error: 'not found' }));
+    });
+    await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+    const address = server.address();
+    (0, strict_1.default)(address && typeof address === 'object');
+    const { io } = createIo();
+    const exitCode = await (0, lac_js_1.runCli)(['channel', 'send-file', '--path', 'reports/out.pdf'], {
+        LOCAL_AI_CORE_BASE: `http://127.0.0.1:${address.port}/api/local/v1`,
+        LOCAL_AI_WORKSPACE_ID: '知识库',
+        LOCAL_AI_WORKSPACE_PATH: '/workspace/project',
+        LOCAL_AI_PLATFORM: 'lark:lark-1',
+        LOCAL_AI_CHAT_ID: 'chat-1',
+        LOCAL_AI_PLATFORM_USER_ID: 'user-1',
+    }, io);
+    server.close();
+    strict_1.default.equal(exitCode, 0);
+    strict_1.default.equal(capturedUrl, '/api/local/v1/platforms/lark/%E7%9F%A5%E8%AF%86%E5%BA%93/messages');
+    (0, strict_1.default)(capturedBody);
+    strict_1.default.deepEqual(JSON.parse(capturedBody).route, {
+        type: 'channel.chat',
+        channelId: 'chat-1',
+        instanceId: 'lark-1',
+        participantId: 'user-1',
+    });
+});
 (0, node_test_1.default)('lac channel send-file posts allowed absolute paths through the same outbound message path', async () => {
     let capturedBody = null;
     const server = (0, node_http_1.createServer)(async (req, res) => {
@@ -516,7 +566,7 @@ function createIo() {
                             id: 'job-1',
                             workspaceId: '知识库',
                             platform: 'lark',
-                            route: { type: 'channel.chat', channelId: 'chat-1', participantId: 'user-1', threadId: 'thread-1' },
+                            route: { type: 'channel.chat', channelId: 'chat-1', participantId: 'user-1' },
                             executionMode: 'same-thread',
                             triggerType: 'cron',
                             cronExpr: '*/2 * * * *',
@@ -531,7 +581,7 @@ function createIo() {
                             id: 'job-2',
                             workspaceId: '知识库',
                             platform: 'lark',
-                            route: { type: 'channel.chat', channelId: 'chat-2', participantId: 'user-2', threadId: 'thread-2' },
+                            route: { type: 'channel.chat', channelId: 'chat-2', participantId: 'user-2' },
                             executionMode: 'side-thread',
                             triggerType: 'cron',
                             cronExpr: '0 9 * * *',
@@ -558,6 +608,9 @@ function createIo() {
         LOCAL_AI_CORE_BASE: `http://127.0.0.1:${address.port}/api/local/v1`,
         LOCAL_AI_WORKSPACE_ID: '知识库',
         LOCAL_AI_THREAD_ID: 'thread-1',
+        LOCAL_AI_PLATFORM: 'lark',
+        LOCAL_AI_CHAT_ID: 'chat-1',
+        LOCAL_AI_PLATFORM_USER_ID: 'user-1',
     }, io);
     server.close();
     strict_1.default.equal(exitCode, 0);

package/dist-electron/{electron → tests/electron}/plugin-kernel.test.js

@@ -9,15 +9,15 @@ const node_events_1 = require("node:events");
 const node_fs_1 = require("node:fs");
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
-const bootstrap_js_1 = require("../services/local-ai-core/src/kernel/bootstrap.js");
-const bootstrap_js_2 = require("../services/local-ai-core/src/kernel/bootstrap.js");
-const capability_registry_js_1 = require("../services/local-ai-core/src/kernel/capability-registry.js");
-const event_bus_js_1 = require("../services/local-ai-core/src/kernel/event-bus.js");
-const lifecycle_manager_js_1 = require("../services/local-ai-core/src/kernel/lifecycle-manager.js");
-const plugin_registry_js_1 = require("../services/local-ai-core/src/kernel/plugin-registry.js");
-const local_core_controller_js_1 = require("../services/local-ai-core/src/runtime/local-core-controller.js");
-const local_core_runtime_state_js_1 = require("../services/local-ai-core/src/runtime/local-core-runtime-state.js");
-const server_js_1 = require("../services/local-ai-core/src/runtime/server.js");
+const bootstrap_js_1 = require("../../services/local-ai-core/src/kernel/bootstrap.js");
+const bootstrap_js_2 = require("../../services/local-ai-core/src/kernel/bootstrap.js");
+const capability_registry_js_1 = require("../../services/local-ai-core/src/kernel/capability-registry.js");
+const event_bus_js_1 = require("../../services/local-ai-core/src/kernel/event-bus.js");
+const lifecycle_manager_js_1 = require("../../services/local-ai-core/src/kernel/lifecycle-manager.js");
+const plugin_registry_js_1 = require("../../services/local-ai-core/src/kernel/plugin-registry.js");
+const local_core_controller_js_1 = require("../../services/local-ai-core/src/runtime/local-core-controller.js");
+const local_core_runtime_state_js_1 = require("../../services/local-ai-core/src/runtime/local-core-runtime-state.js");
+const server_js_1 = require("../../services/local-ai-core/src/runtime/server.js");
 function plugin(id, dependsOn = []) {
     return {
         manifest: {
@@ -46,10 +46,10 @@ function plugin(id, dependsOn = []) {
         },
         snapshot: {
             agents: [
-                { id: 'agent.cursor', agentType: 'cursor', displayName: 'cursor' },
-                { id: 'agent.gemini', agentType: 'gemini', displayName: 'gemini' },
-                { id: 'agent.qoder', agentType: 'qoder', displayName: 'qoder' },
-                { id: 'agent.iflow', agentType: 'iflow', displayName: 'iflow' },
+                { id: 'agent.cursor', agentType: 'cursor', displayName: 'Cursor' },
+                { id: 'agent.gemini', agentType: 'gemini', displayName: 'Gemini' },
+                { id: 'agent.qoder', agentType: 'qoder', displayName: 'Qoder' },
+                { id: 'agent.iflow', agentType: 'iflow', displayName: 'iFlow' },
                 { id: 'agent.localcore-acp', agentType: 'localcore-acp', displayName: 'LocalCore ACP' },
             ],
             channels: [
@@ -562,6 +562,7 @@ model = "deepseek-v4-flash"
         knowledgeAttachments: {},
         workspaceRouter: {},
         scheduler: {},
+        scheduledJobs: {},
         start: async () => {
             started = true;
         },

package/dist-electron/{electron → tests/electron}/renderer-packaging.test.js

@@ -21,7 +21,9 @@ const rootDir = node_process_1.default.cwd();
     strict_1.default.match(testScript, /\bpnpm build:renderer\b/, 'pnpm test must build renderer assets');
     strict_1.default.match(testScript, /\bpnpm build:electron\b/, 'pnpm test must compile Electron and Local AI Core tests');
     strict_1.default.match(testScript, /\bnode --test\b/, 'pnpm test must run the Node test suite');
-    strict_1.default.match(testScript, /dist-electron\/electron\/\*\.test\.js/, 'pnpm test must include Electron tests');
+    strict_1.default.match(testScript, /dist-electron\/tests\/electron\/\*\.test\.js/, 'pnpm test must include Electron tests');
+    strict_1.default.match(testScript, /dist-electron\/tests\/contracts\/\*\.test\.js/, 'pnpm test must include contract tests');
+    strict_1.default.match(testScript, /dist-electron\/tests\/integration\/\*\.test\.js/, 'pnpm test must include integration tests');
     strict_1.default.match(testScript, /dist-electron\/packages\/knowledge-api\/test\/\*\.test\.js/, 'pnpm test must include package tests');
     strict_1.default.match(testScript, /dist-electron\/src\/pages\/Threads\/thread-chat-permission\.test\.js/, 'pnpm test must include renderer state tests');
     const buildIndex = smokeScript.indexOf('pnpm build');
@@ -44,20 +46,23 @@ const rootDir = node_process_1.default.cwd();
 });
 (0, node_test_1.default)('release workflow keeps validation artifacts separate from formal releases', () => {
     const ciWorkflow = (0, node_fs_1.readFileSync)((0, node_path_1.join)(rootDir, '.github', 'workflows', 'ci.yml'), 'utf8');
+    const packageMacosWorkflow = (0, node_fs_1.readFileSync)((0, node_path_1.join)(rootDir, '.github', 'workflows', 'package-macos.yml'), 'utf8');
     const releaseWorkflow = (0, node_fs_1.readFileSync)((0, node_path_1.join)(rootDir, '.github', 'workflows', 'release.yml'), 'utf8');
     const releaseDocs = (0, node_fs_1.readFileSync)((0, node_path_1.join)(rootDir, 'docs', 'operations', 'release-workflow.md'), 'utf8');
     strict_1.default.match(ciWorkflow, /pull_request:/, 'CI must run before merge');
     strict_1.default.match(ciWorkflow, /branches:\s*\n\s*- main/, 'CI must run on main pushes');
-    strict_1.default.match(ciWorkflow, /needs: test/, 'main branch packaging must wait for tests');
-    strict_1.default.match(ciWorkflow, /--publish never/, 'main branch artifacts must not publish formal releases');
-    strict_1.default.match(ciWorkflow, /retention-days: 14/, 'main branch validation artifacts must have bounded retention');
+    strict_1.default.doesNotMatch(ciWorkflow, /macos-latest/, 'main branch CI must not run macOS packaging');
+    strict_1.default.match(packageMacosWorkflow, /workflow_dispatch:/, 'macOS validation packaging must be manual');
+    strict_1.default.match(packageMacosWorkflow, /Run tests[\s\S]*?run: pnpm test/, 'manual macOS packaging must run tests first');
+    strict_1.default.match(packageMacosWorkflow, /--publish never/, 'manual macOS artifacts must not publish formal releases');
+    strict_1.default.match(packageMacosWorkflow, /retention-days: 14/, 'manual macOS validation artifacts must have bounded retention');
     strict_1.default.match(releaseWorkflow, /tags:\s*\n\s*- 'v\*'/, 'formal releases must be tied to version tags');
     strict_1.default.match(releaseWorkflow, /Run tests[\s\S]*?run: pnpm test/, 'release packaging must run the fast gate');
     strict_1.default.match(releaseWorkflow, /Build app[\s\S]*?run: pnpm build/, 'release packaging must run a production build');
     strict_1.default.match(releaseWorkflow, /--publish always/, 'release artifacts must publish only from the release workflow');
     strict_1.default.match(releaseWorkflow, /tag_version.*package_version/s, 'tag releases must verify the package version');
-    strict_1.default.match(releaseDocs, /validation only/i, 'release docs must describe main artifacts as validation only');
-    strict_1.default.match(releaseDocs, /not formal releases/i, 'release docs must separate main artifacts from formal releases');
+    strict_1.default.match(releaseDocs, /manual package artifacts are intended for validation only/i, 'release docs must describe manual artifacts as validation only');
+    strict_1.default.match(releaseDocs, /not formal releases/i, 'release docs must separate manual artifacts from formal releases');
 });
 (0, node_test_1.default)('production smoke gate launches the built app and checks runtime capabilities', () => {
     const smokeScript = (0, node_fs_1.readFileSync)((0, node_path_1.join)(rootDir, 'scripts', 'e2e-smoke.mjs'), 'utf8');

package/dist-electron/{electron → tests/electron}/runtime-detection-service.test.js

@@ -8,7 +8,7 @@ const strict_1 = __importDefault(require("node:assert/strict"));
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const node_os_1 = require("node:os");
-const runtime_detection_service_js_1 = require("../services/local-ai-core/src/runtime/runtime-detection-service.js");
+const runtime_detection_service_js_1 = require("../../services/local-ai-core/src/runtime/runtime-detection-service.js");
 (0, node_test_1.default)('runtime detection service returns unknown results before first detection', () => {
     const userDataPath = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'runtime-detection-service-'));
     try {

package/dist-electron/{electron → tests/electron}/security-approval-store.test.js

@@ -8,8 +8,8 @@ const strict_1 = __importDefault(require("node:assert/strict"));
 const node_fs_1 = require("node:fs");
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
-const local_core_acp_store_js_1 = require("../services/local-ai-core/src/acp/local-core-acp-store.js");
-const command_risk_js_1 = require("../services/local-ai-core/src/security/command-risk.js");
+const local_core_acp_store_js_1 = require("../../services/local-ai-core/src/acp/local-core-acp-store.js");
+const command_risk_js_1 = require("../../services/local-ai-core/src/security/command-risk.js");
 (0, node_test_1.default)('workspace security settings persist and create audit events', () => {
     const userDataPath = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'security-settings-'));
     const store = new local_core_acp_store_js_1.LocalCoreAcpStore(userDataPath);