@luchenglong/cli-bridge 0.0.0-stage → 0.2.2

package/providers/registry.mjs

@@ -0,0 +1,34 @@
+// providers/registry.mjs — provider 注册表（keystone，Lead 单作者）。
+//
+// 静态导入三个 provider 描述符工厂；指示灯 host 半、统一 MCP 服务器、verify 都从这里
+// 取数。描述符契约见 PROVIDER-CONTRACT.md §1。新增 provider = 加一行 import + 一项 defs。
+import defineAgy from './agy.mjs'
+import defineCodebuddy from './codebuddy.mjs'
+import defineMimo from './mimo.mjs'
+
+/** 稳定顺序（家级灯渲染顺序 = 此顺序）。 */
+export const PROVIDER_IDS = ['agy', 'codebuddy', 'mimo']
+
+const defs = {
+  agy: defineAgy,
+  codebuddy: defineCodebuddy,
+  mimo: defineMimo
+}
+
+/**
+ * 构造某 provider 的描述符实例。
+ * @param {string} id PROVIDER_IDS 之一。
+ * @param {object} [deps] 宿主形态注入（{ env, process, nodeFs, nodeChild, nodePath, log }）。
+ * @returns descriptor（见 PROVIDER-CONTRACT.md §1）
+ */
+export function createProvider(id, deps) {
+  const factory = defs[id]
+  if (!factory) throw new Error('cli-bridge: unknown provider ' + JSON.stringify(id))
+  return factory(deps || {})
+}
+
+/** 轻量元信息（不构造描述符也能拿到，用于路由/展示层预建骨架）。 */
+export function providerMeta(id) {
+  const d = createProvider(id, { env: {} })
+  return { id: d.id, label: d.label, presetId: d.presetId, defaultBackend: d.defaultBackend || null }
+}

package/scripts/build.mjs

@@ -0,0 +1,235 @@
+// scripts/build.mjs — 派生产物生成器（keystone）。
+//
+// 生成物（勿手改；`--check` 模式漂移即失败，npm test 里的 build-sync 测试调用它）：
+//   1. dynamic/<id>.host.js            ← dynamic/<id>.host.template.mjs
+//      把 core/bridge-kit.mjs 内联进 /*__KIT__*/、providers/<id>.mjs 内联进
+//      /*__PROVIDER__*/、core/scheduling.mjs（+SCHED_ALL_IDS 常量）内联进
+//      /*__SCHED__*/（动态沙箱禁止 import，只能文本注入；单标记替换防递归错乱）。
+//      注入时剥离各段的 `import ... from '...mjs'` 行并把 `export ` 关键字去掉。
+//   2. preset/<id>/agent.cordis.yml    ← preset/<id>/plugin-list.mjs（唯一权威源）
+//      纯 JS 插件清单落地为 legacy 目录形态 YAML（{__jsExpr} → !!js 块）。
+//      两者同源生成，结构性消除「yml 与声明制漂移」这一历史风险。
+//   3. home-plugin/cli-bridge-indicator/lib/preset-definitions/<id>.mjs
+//      ← 同上（声明制形态：插件数组直接给 agentPresets.register 消费）。
+//      ⚠️ 这一份由 preset-declarations.mjs 直接 import plugin-list，本脚本不再复制；
+//      保留目录仅作兼容占位（旧版生成物清理）。
+//
+// 用法：node scripts/build.mjs [--check]
+
+import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { pathToFileURL } from 'node:url'
+import { PROVIDER_IDS } from '../providers/registry.mjs'
+
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+// 单一 id 轴：新 provider 只改 registry（PROVIDER-CONTRACT.md §3.1），build 派生
+// 物（dynamic 宿主 / SCHED_ALL_IDS 内联 / legacy YAML / plugin-list）自动跟上。
+const ids = PROVIDER_IDS
+const PKG = '@luchenglong/cli-bridge'
+
+const MODE = process.argv.includes('--check') ? 'check' : 'write'
+// --only=<id> 让单个 provider 的作者只生成/校验自己的派生物，避免并发写他人产物。
+const onlyArg = process.argv.find((a) => a.startsWith('--only='))
+const ONLY = onlyArg ? onlyArg.slice('--only='.length) : null
+const drift = []
+
+function read(rel) { return readFileSync(join(ROOT, rel), 'utf8') }
+
+function emit(rel, content) {
+  const abs = join(ROOT, rel)
+  if (MODE === 'check') {
+    const cur = existsSync(abs) ? readFileSync(abs, 'utf8') : null
+    if (cur !== content) drift.push(rel)
+    return
+  }
+  mkdirSync(dirname(abs), { recursive: true })
+  writeFileSync(abs, content, 'utf8')
+  console.log('generated ' + rel)
+}
+
+// ── 1. dynamic host（文本内联，沙箱禁 import）──────────────────────────────────
+function stripModuleSyntax(src, label) {
+  const out = src
+    .split('\n')
+    .filter((l) => !/^\s*import\s[^(]*from\s*['"][^'"]+['"];?\s*$/.test(l) && !/^\s*import\s*['"]/.test(l))
+    .join('\n')
+    .replace(/^export\s+(const|let|var|function|async function|class)\s/gm, '$1 ')
+    .replace(/^export\s+default\s+(async\s+)?function\s+([A-Za-z0-9_$]+)\s*/gm, '$1function $2 ')
+    .replace(/^export\s+default\s+(async\s+)?function\s*\(/gm, '$1function __default__(')
+    .replace(/^export\s*\{[^}]*\};?\s*$/gm, '')
+  // 内联目标是「脚本体」：残留的 export default/import 说明源用了本转换器不支持
+  // 的形态。静默产出坏代码会让 dynamic host 在沙箱里炸得莫名其妙，必须大声失败。
+  if (/^\s*(export\s+default|import\s|import\()/m.test(out)) {
+    throw new Error('build: ' + (label || 'source') + ' 用了沙箱内联不支持的模块形态（provider 需具名 `export default function defineProvider(...)`；bridge-kit 不得 import）')
+  }
+  return out
+}
+
+function buildDynamicHost(id) {
+  const tplRel = 'dynamic/' + id + '.host.template.mjs'
+  if (!existsSync(join(ROOT, tplRel))) return null
+  const tpl = read(tplRel)
+  const kit = stripModuleSyntax(read('core/bridge-kit.mjs'), 'core/bridge-kit.mjs')
+  const prov = stripModuleSyntax(read('providers/' + id + '.mjs'), 'providers/' + id + '.mjs')
+  // 调度单源（0.2.0）：core/scheduling.mjs 无 import，可安全内联进沙箱作用域。
+  // SCHED_ALL_IDS 由构建注入（全量 provider 清单）—— 沙箱禁 import，拿不到 registry。
+  // 模板没有 /*__SCHED__*/ 占位（旧模板）→ 不注入，保持向后兼容。
+  const sched = stripModuleSyntax(read('core/scheduling.mjs'), 'core/scheduling.mjs')
+    + '\nconst SCHED_ALL_IDS = ' + JSON.stringify(ids) + '\n'
+  if (!tpl.includes('/*__KIT__*/') || !tpl.includes('/*__PROVIDER__*/')) {
+    throw new Error(tplRel + ' missing /*__KIT__*/ or /*__PROVIDER__*/ placeholder')
+  }
+  let out = tpl.replace('/*__KIT__*/', () => kit).replace('/*__PROVIDER__*/', () => prov)
+  if (out.includes('/*__SCHED__*/')) out = out.replace('/*__SCHED__*/', () => sched)
+  else if (tpl.includes('/*__SCHED__*/')) throw new Error(tplRel + ': __SCHED__ placeholder vanished after other replacements')
+  return out
+}
+
+for (const id of ids) {
+  if (ONLY && id !== ONLY) continue
+  const out = buildDynamicHost(id)
+  if (out) emit('dynamic/' + id + '.host.js', out)
+}
+
+// ── 2. agent.cordis.yml ← plugin-list.mjs ─────────────────────────────────────
+function yamlString(v) {
+  const s = String(v)
+  if (s === '' || /[:#\n'"\[\]{}&*!|>%@`]/.test(s) || /^\s|\s$/.test(s)) {
+    return "'" + s.replace(/'/g, "''") + "'"
+  }
+  return s
+}
+
+function yamlEntry(entry, indent) {
+  // 递归序列化一个插件条目。字段序与官方 patch.yml 习惯一致：
+  // id → name → entry → group → isolate → disabled/if → config。
+  const pad = ' '.repeat(indent)
+  const lines = [pad + '- id: ' + yamlString(entry.id)]
+  if (entry.name !== undefined) lines.push(pad + '  name: ' + yamlString(entry.name))
+  if (entry.entry !== undefined) lines.push(pad + '  entry: ' + yamlString(entry.entry))
+  if (entry.group === true) lines.push(pad + '  group: true')
+  if (entry.isolate && typeof entry.isolate === 'object') {
+    lines.push(pad + '  isolate:')
+    for (const k of Object.keys(entry.isolate)) lines.push(pad + '    ' + k + ': ' + String(entry.isolate[k]))
+  }
+  for (const k of ['disabled', 'if']) {
+    if (entry[k] === undefined) continue
+    const v = entry[k]
+    if (v && typeof v === 'object' && typeof v.__jsExpr === 'string') lines.push(pad + '  ' + k + ": !!js '" + String(v.__jsExpr).replace(/'/g, "''") + "'")
+    else lines.push(pad + '  ' + k + ': ' + String(v))
+  }
+  if (entry.config !== undefined) {
+    if (Array.isArray(entry.config)) {
+      lines.push(pad + '  config:')
+      if (!entry.config.length) lines[lines.length - 1] = pad + '  config: []'
+      for (const child of entry.config) lines.push(yamlEntry(child, indent + 4))
+    } else if (entry.config && typeof entry.config === 'object') {
+      lines.push(yamlConfig(entry.config, indent + 2))
+    } else {
+      lines.push(pad + '  config: ' + yamlString(entry.config))
+    }
+  }
+  return lines.join('\n')
+}
+
+function yamlValue(v) {
+  // '' 返回值 = 「值是嵌套结构/多行文本，需换行展开」；否则返回 ' 标量' 后缀。
+  if (v && typeof v === 'object' && typeof v.__jsExpr === 'string') return " !!js '" + String(v.__jsExpr).replace(/'/g, "''") + "'"
+  if (Array.isArray(v)) return v.length ? '' : ' []'
+  if (v && typeof v === 'object') return ''
+  if (typeof v === 'string') { if (v.indexOf('\n') >= 0) return ''; return ' ' + yamlString(v) }
+  return ' ' + String(v)
+}
+
+// 多行字符串 → YAML 块标量（'|' 保留结尾单换行；'|-' 裁掉）。行内引号折叠会改变
+// 文本语义（plan-mode 段含逐字换行），必须用块标量原样落地。
+function yamlBlockKey(key, v, keyPad, valPad) {
+  const clip = v.endsWith('\n') ? '|' : '|-'
+  const body = (clip === '|' ? v.replace(/\n$/, '') : v).split('\n')
+  const lines = [keyPad + key + ': ' + clip]
+  for (const l of body) lines.push(l === '' ? '' : valPad + l)
+  return lines
+}
+
+function yamlConfig(config, indent) {
+  // indent：'config:' 键本身的列；子键 +2。
+  const pad = ' '.repeat(indent)
+  const lines = [pad + 'config:']
+  for (const k of Object.keys(config)) {
+    const v = config[k]
+    const inline = yamlValue(v)
+    if (inline !== '') { lines.push(pad + '  ' + k + ':' + inline); continue }
+    if (typeof v === 'string') { lines.push(...yamlBlockKey(k, v, pad + '  ', pad + '    ')); continue }
+    if (Array.isArray(v)) {
+      lines.push(pad + '  ' + k + ':')
+      for (const item of v) {
+        if (item && typeof item === 'object' && !item.__jsExpr) {
+          const keys = Object.keys(item)
+          lines.push(pad + '    - ' + keys[0] + ': ' + yamlString(item[keys[0]]))
+          for (let i = 1; i < keys.length; i++) lines.push(pad + '      ' + keys[i] + ': ' + yamlString(item[keys[i]]))
+        } else lines.push(pad + '    - ' + yamlString(item))
+      }
+    } else {
+      lines.push(pad + '  ' + k + ':')
+      lines.push(yamlInlineObject(v, indent + 4))
+    }
+  }
+  return lines.join('\n')
+}
+
+function yamlInlineObject(obj, indent) {
+  const pad = ' '.repeat(indent)
+  const lines = []
+  for (const k of Object.keys(obj)) {
+    const v = obj[k]
+    const inline = yamlValue(v)
+    if (inline !== '') lines.push(pad + k + ':' + inline)
+    else if (typeof v === 'string') lines.push(...yamlBlockKey(k, v, pad, pad + '  '))
+    else {
+      lines.push(pad + k + ':')
+      if (Array.isArray(v)) { for (const item of v) lines.push(pad + '  - ' + yamlString(item)) }
+      else lines.push(yamlInlineObject(v, indent + 2))
+    }
+  }
+  return lines.join('\n')
+}
+
+const PRESET_DIRS = { agy: 'agy-first', codebuddy: 'codebuddy-first', mimo: 'mimo-first' }
+
+async function loadPluginList(id) {
+  const rel = 'preset/' + PRESET_DIRS[id] + '/plugin-list.mjs'
+  const abs = join(ROOT, rel)
+  if (!existsSync(abs)) return null
+  const mod = await import(pathToFileURL(abs).href)
+  return mod
+}
+
+for (const id of ids) {
+  if (ONLY && id !== ONLY) continue
+  const mod = await loadPluginList(id)
+  if (!mod || typeof mod.buildPlugins !== 'function') continue
+  const dir = PRESET_DIRS[id]
+  const meta = mod.meta || {}
+  const plugins = mod.buildPlugins({ bridgeName: PKG + '/preset-' + id })
+  const head = [
+    '# 生成物 — 由 node scripts/build.mjs 从 preset/' + dir + '/plugin-list.mjs 生成，勿手改。',
+    '# legacy 目录形态（$DSH_HOME/.agent-presets/' + meta.id + '/）；新 DSH 走声明制',
+    '# （home-plugin/cli-bridge-indicator/lib/preset-declarations.mjs 直接 import 同一源）。',
+    ''
+  ].join('\n')
+  const body = plugins.map((e) => yamlEntry(e, 0)).join('\n')
+  emit('preset/' + dir + '/agent.cordis.yml', head + body + '\n')
+  emit('preset/' + dir + '/preset.yml', [
+    'name: ' + yamlString(meta.name || meta.id),
+    'description: ' + yamlString(meta.description || ''),
+    'order: ' + String(meta.order != null ? meta.order : 10),
+    ''
+  ].join('\n'))
+}
+
+if (drift.length) {
+  console.error('[build] drift detected: ' + drift.join(', ') + ' — run `node scripts/build.mjs`')
+  process.exit(1)
+}
+if (MODE === 'check') console.log('[build] up to date')

package/scripts/deploy.mjs

@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+// scripts/deploy.mjs — 本地部署暂存（安全版）。
+//
+// 先跑 build（生成物就位），再把工作树打包到目标目录（排除 .git/node_modules/tests/探针），
+// 默认 {DSH_HOME}/staging/cli-bridge/，供停服后手工接线。
+//
+// ⚠️ 本脚本【不】改 profile 的 package.json / bundles 列表（红线 2：切换运行时接线
+// 必须先停 DSH 后端；本次整合的交付决定是「不切」）。挂载步骤见输出提示与 README。
+//
+// 用法：node scripts/deploy.mjs [--target=<dir>] [--clean]
+
+import { existsSync, mkdirSync, rmSync, cpSync, readFileSync, statSync } from 'node:fs'
+import { spawnSync } from 'node:child_process'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+
+function detectDshHome() {
+  const e = process.env
+  if (e.DSH_HOME) return e.DSH_HOME
+  if (process.platform === 'win32' && e.APPDATA) return join(e.APPDATA, 'DSH Desktop', 'dsh-home')
+  if (e.HOME) return join(e.HOME, '.dsh')
+  return join(ROOT, '.dsh')
+}
+
+const arg = process.argv.find((a) => a.startsWith('--target='))
+const target = resolve(arg ? arg.slice('--target='.length) : join(detectDshHome(), 'staging', 'cli-bridge'))
+if (target === ROOT) { console.error('deploy: refusing to deploy onto the repo root'); process.exit(1) }
+// 目标在仓库内部（含 .tmp）会让 cpSync「复制进自身子目录」直接 EINVAL；提前拦截并给出人话。
+const sep = process.platform === 'win32' ? '\\' : '/'
+if (target.startsWith(ROOT + sep) || ROOT.startsWith(target + sep)) {
+  console.error('deploy: target must be OUTSIDE the repo (got ' + target + '); default is {DSH_HOME}/staging/cli-bridge')
+  process.exit(1)
+}
+
+const b = spawnSync(process.execPath, [join(ROOT, 'scripts', 'build.mjs')], { stdio: 'inherit' })
+if (b.status !== 0) { console.error('deploy: build failed'); process.exit(1) }
+
+if (process.argv.includes('--clean') && existsSync(target)) rmSync(target, { recursive: true, force: true })
+mkdirSync(target, { recursive: true })
+
+const skip = new Set(['.git', 'node_modules', 'tests', '.probe', '.tmp', 'runtime-data'])
+cpSync(ROOT, target, {
+  recursive: true,
+  filter: (src) => {
+    if (src === ROOT) return true
+    const rel = src.slice(ROOT.length + 1).split(/[\\/]/)[0]
+    return !skip.has(rel)
+  }
+})
+
+const pkg = JSON.parse(readFileSync(join(target, 'package.json'), 'utf8'))
+const clientSize = statSync(join(target, 'home-plugin', 'cli-bridge-indicator', 'lib', 'client.js')).size
+if (clientSize < 1000) { console.error('deploy: staged client.js looks truncated (' + clientSize + 'B)'); process.exit(1) }
+
+console.log('deploy: staged ' + pkg.name + '@' + pkg.version + ' -> ' + target)
+console.log('下一步（手工接线；执行前先停止 DSH 后端）：')
+console.log('  1. profile package.json 加依赖 "file:' + target.replace(/\\/g, '/') + '"，删除三个旧桥接包条目')
+console.log('  2. bundles 列表加入 ' + pkg.name)
+console.log('  3. 重启 DSH，验证 GET /cli-bridge/status 与标题栏三盏 pill')

package/scripts/verify.mjs

@@ -0,0 +1,148 @@
+#!/usr/bin/env node
+// scripts/verify.mjs — 发布前静态红线检查（keystone）。
+//
+// 背景（历史事故 agy v1.6.1 / codebuddy v1.1.8）：client.js 的注册 id 一旦与包名不
+// 一致，整个 client combo 加载失败 → DSH 启动致命屏 → 强制安全模式。npm publish
+// 之后才发现 = 必须发新版本撤销，成本极高。本脚本在 prepack/check 里把这些不变量
+// 变成机器闸门：
+//   1. client.js 的 load({ id }) === package.json name（红线 4）
+//   2. bundle patch 行的 name === package.json name
+//   3. package.json exports 指向的文件全部存在
+//   4. presets 的桥接说明符 === name + '/preset-<id>' 且在 exports 里
+//   5. provider 描述符可加载、必备字段齐全（含 tools/settings）
+//   6. dsh 字段齐全（client.platform=web、bundle.patch 路径存在）
+// 任一失败 → exit 1 并逐条列出。
+
+import { readFileSync, existsSync, readdirSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const errors = []
+const ok = []
+
+function read(rel) { try { return readFileSync(join(ROOT, rel), 'utf8') } catch (e) { return null } }
+
+const pkg = JSON.parse(read('package.json') || '{}')
+if (!pkg.name) { console.error('verify: package.json unreadable'); process.exit(1) }
+ok.push('package ' + pkg.name + '@' + pkg.version)
+
+// 1. client id 红线
+const client = read('home-plugin/cli-bridge-indicator/lib/client.js')
+if (client === null) errors.push('client.js missing')
+else {
+  const m = client.match(/__ModuleLoader__\.load\(\{\s*id:\s*"([^"]+)"/)
+  if (!m) errors.push('client.js: no __ModuleLoader__.load({ id }) found')
+  else if (m[1] !== pkg.name) errors.push('REDLINE client id mismatch: client.js registers "' + m[1] + '" but package name is "' + pkg.name + '" (client combo will fail to load → bricked page)')
+  else ok.push('client id === package name (' + m[1] + ')')
+}
+
+// 2. bundle patch 行 name
+const patch = read('home-plugin/cli-bridge-indicator/cordis.patch.yml')
+if (patch === null) errors.push('cordis.patch.yml missing')
+else {
+  const names = [...patch.matchAll(/^\s*name:\s*'([^']+)'/gm)].map((x) => x[1])
+  if (!names.includes(pkg.name)) errors.push('cordis.patch.yml: no row with name ' + pkg.name + ' (rows: ' + names.join(', ') + ')')
+  else ok.push('bundle patch row name ok')
+}
+
+// 3. exports 文件存在
+for (const [spec, rel] of Object.entries(pkg.exports || {})) {
+  const p = String(rel).replace(/^\.\//, '')
+  if (!existsSync(join(ROOT, p))) errors.push('exports[' + JSON.stringify(spec) + '] -> ' + rel + ' missing')
+}
+ok.push('exports targets exist (' + Object.keys(pkg.exports || {}).length + ')')
+
+// 4. preset 桥接说明符
+const { PROVIDER_IDS, createProvider } = await import(pathToFileURL(join(ROOT, 'providers', 'registry.mjs')).href)
+for (const id of PROVIDER_IDS) {
+  const exportKey = './preset-' + id
+  if (!pkg.exports || !pkg.exports[exportKey]) errors.push('package.json exports[' + exportKey + '] missing (preset bridge row needs it)')
+}
+
+// 5. 描述符完整性
+for (const id of PROVIDER_IDS) {
+  let d
+  try { d = createProvider(id, { env: {} }) } catch (e) { errors.push('provider ' + id + ': load failed ' + String(e && e.message || e)); continue }
+  const need = ['id', 'label', 'presetId', 'backends', 'normalizeBackend', 'resolveBackend', 'buildArgv', 'parseJson', 'buildResult', 'unavailableStatus', 'tools', 'settings', 'runToolLogic', 'attach']
+  for (const k of need) if (d[k] === undefined) errors.push('provider ' + id + ': descriptor missing "' + k + '"')
+  for (const t of ['run', 'continue', 'status']) {
+    const tool = d.tools && d.tools[t]
+    if (!tool || !tool.name || !tool.description || !tool.inputSchema) errors.push('provider ' + id + ': tools.' + t + ' invalid')
+  }
+  if (d.id !== id) errors.push('provider ' + id + ': descriptor.id = ' + JSON.stringify(d.id))
+  if (!d.tools || !d.tools.run || !d.tools.run.name.startsWith(id + '_')) errors.push('provider ' + id + ': tool names must keep <id>_ prefix (prompt continuity)')
+  ok.push('provider ' + id + ' descriptor ok (' + [d.tools.run.name, d.tools.continue.name, d.tools.status.name].join(',') + ')')
+}
+
+// 6. dsh 字段
+if (!pkg.dsh || !pkg.dsh.client || pkg.dsh.client.platform !== 'web') errors.push('package.json dsh.client.platform must be "web"')
+const patchRel = pkg.dsh && pkg.dsh.bundle && pkg.dsh.bundle.patch
+if (!patchRel || !existsSync(join(ROOT, String(patchRel).replace(/^\.\//, '')))) errors.push('package.json dsh.bundle.patch target missing')
+
+// 7. 生成物存在（dynamic host / agent yml 至少 plugin-list 在；fresh clone 需先 build）
+for (const id of PROVIDER_IDS) {
+  if (!read('preset/' + ({ agy: 'agy-first', codebuddy: 'codebuddy-first', mimo: 'mimo-first' })[id] + '/plugin-list.mjs')) errors.push('preset/' + id + ' plugin-list.mjs missing')
+}
+
+// 8. 版本双锁：mcp server const + CHANGELOG 顶部条目 === package.json version
+//    （旧仓教训：codebuddy v1.1.8「npm 先发、git 欠账」；这里把两处拉齐成机器约束）
+const mcpSrc = read('mcp/cli-bridge-mcp.mjs') || ''
+const mv = mcpSrc.match(/const SERVER_VERSION\s*=\s*'([^']+)'/)
+if (mv && mv[1] !== pkg.version) errors.push('version drift: mcp SERVER_VERSION ' + mv[1] + ' !== package.json ' + pkg.version)
+if (!mv) errors.push('mcp/cli-bridge-mcp.mjs: SERVER_VERSION const not found')
+const cl = read('CHANGELOG.md') || ''
+const cv = cl.match(/^## \[(\d+\.\d+\.\d+[^\]]*)\]/m)
+if (cv && cv[1] !== pkg.version) errors.push('version drift: CHANGELOG top [' + cv[1] + '] !== package.json ' + pkg.version)
+if (!cv) errors.push('CHANGELOG.md: no keep-a-changelog style version heading found')
+
+// 9. 凭据泄漏扫描（发布安全红线）：tests/fixtures 与全部源码里绝不能出现真实凭据
+//    形态的长随机串。旧仓 test/fixtures/credentials/.credentials.yaml 是真实设备授权
+//    文件（36 字节 base64 形态）—— 移植测试时照抄 fixtures 目录就会把它带进 tarball。
+//    规则：文件名含 credential/token/auth/secret（.yaml/.yml/.json/.info）→ 拒绝；
+//    任何被打包文本文件里 key:value 的 value 是 ≥24 位纯随机 [A-Za-z0-9+/=] 且键名
+//    疑似凭据（token|secret|password|credential|apikey|api_key|auth）→ 拒绝。
+//    白名单：掩码示例、假 fixture（fake-*）、env 变量名引用。
+const CRED_FILE_RE = /\.(ya?ml|json|info|txt|local|env)$/i
+const CRED_NAME_RE = /(credential|token|secret|password|cookie|auth)/i
+const CRED_LINE_RE = /(^|[^A-Za-z0-9_])([A-Za-z0-9_]*(token|secret|password|credential|api_?key|auth)[A-Za-z0-9_]*)\s*[:=]\s*['"]?([A-Za-z0-9+/=._-]{24,})['"]?/gi
+const CRED_ALLOW_RE = /(fake|example|redacted|placeholder|\*\*\*|<.*>|\{\{|process\.env|CODEBUDDY_|AGY_|MIMO_|CLI_BRIDGE_)/i
+function walkFiles(dir, out) {
+  for (const e of readdirSync(dir, { withFileTypes: true })) {
+    if (e.name === 'node_modules' || e.name === '.git') continue
+    const p = join(dir, e.name)
+    if (e.isDirectory()) {
+      walkFiles(p, out)
+    } else out.push(p)
+  }
+  return out
+}
+const allFiles = walkFiles(ROOT, [])
+for (const f of allFiles) {
+  const relc = f.slice(ROOT.length + 1)
+  if (!/\.(mjs|js|cjs|json|ya?ml|md|yml|txt|svg|css|html|info|local)$/i.test(relc)) continue
+  const base = relc.split(/[\\/]/).pop()
+  if (CRED_NAME_RE.test(base) && !/^fake/i.test(base) && CRED_FILE_RE.test(base)) {
+    const txt = readFileSync(f, 'utf8')
+    if (txt.trim().length) { errors.push('credential-shaped fixture committed: ' + relc + ' (make it fake-* or env-driven)') }
+    continue
+  }
+}
+for (const f of allFiles) {
+  const relc = f.slice(ROOT.length + 1)
+  if (!/\.(mjs|js|cjs|json|ya?ml|md)$/i.test(relc)) continue
+  const txt = readFileSync(f, 'utf8')
+  for (const m of txt.matchAll(CRED_LINE_RE)) {
+    if (CRED_ALLOW_RE.test(m[0])) continue
+    const val = m[4]
+    if (!/[A-Za-z]/.test(val) || !/[0-9]/.test(val) || !/[+/=._-]/.test(val)) continue
+    errors.push('possible credential literal in ' + relc + ': ' + m[2].slice(0, 40) + '=…(random24+)')
+  }
+}
+ok.push('credential scan clean (' + allFiles.length + ' files)')
+
+if (errors.length) {
+  console.error('verify: FAILED\n' + errors.map((e) => '  ✗ ' + e).join('\n'))
+  process.exit(1)
+}
+console.log('verify: OK\n' + ok.map((e) => '  ✓ ' + e).join('\n'))