@minonl/dia 0.0.7 → 0.0.8

package/dist/cli.js

@@ -2098,6 +2098,9 @@ function install(from, opts = {}) {
   const kitRoot = resolve5(target, kitRootRel);
   if (!kitRoot.startsWith(target + sep4) && kitRoot !== target)
     throw new Error("E_MANIFEST: root escapes kit");
+  const hasContent = ["files", "skills", "bin", "dirs", "knowledge", "commands", "config"].some((k) => (m[k]?.length ?? 0) > 0);
+  if (!hasContent)
+    throw new Error("E_MANIFEST: kit 未声明任何内容（files/skills/bin/dirs/knowledge/commands/config）");
   const planned = renderContent(src.dir, target, m, { dryRun: true }) ?? [];
   if (opts.dryRun)
     return { id: m.id, version: m.version, dir: target, root: kitRoot, rendered: planned, hash: null, changed: false };
@@ -2110,6 +2113,10 @@ function install(from, opts = {}) {
   const rendered = renderContent(src.dir, target, m) ?? planned;
   const appliedConfig = apply(m.config ?? []);
   const hash = hashTree(target);
+  if (hash === "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855") {
+    rmSync3(target, { recursive: true, force: true });
+    throw new Error(`E_KIT_EMPTY: kit ${m.id}@${m.version} 内容为空（检查 source 与清单路径）`);
+  }
   writeFileSync5(join10(target, "kit.lock"), JSON.stringify({
     id: m.id,
     version: m.version,
@@ -5137,7 +5144,7 @@ function scopeEnv(s, extra = {}) {
 }
 
 // src/doctor.ts
-import { existsSync as existsSync22 } from "node:fs";
+import { existsSync as existsSync22, readFileSync as readFileSync19 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { join as join25, resolve as resolve13 } from "node:path";
 
@@ -5579,17 +5586,20 @@ async function personaChecks(id, prefix, shared) {
   } catch (e) {
     checks.push({ name: `${prefix}persona.render`, status: "ok", detail: `跳过（${e?.message || String(e)}）` });
   }
-  const installed = list();
-  if (!installed.length)
+  let refs = [];
+  try {
+    refs = JSON.parse(readFileSync19(join25(sc.dir, "dia.lock"), "utf8")).kits ?? [];
+  } catch {
+    refs = [];
+  }
+  if (!refs.length)
     checks.push({ name: `${prefix}kits`, status: "ok", detail: "无独立 kit（内容由 persona 自带）" });
-  for (const k of installed) {
-    for (const v of k.versions) {
-      try {
-        const r = verify2(k.id, v);
-        checks.push({ name: `${prefix}kit:${k.id}@${v}`, status: r.ok ? "ok" : "fail", detail: r.ok ? "一致" : r.drift.join("; ") });
-      } catch (e) {
-        checks.push({ name: `${prefix}kit:${k.id}@${v}`, status: "fail", detail: e?.message });
-      }
+  for (const k of refs) {
+    try {
+      const r = verify2(k.id, k.version);
+      checks.push({ name: `${prefix}kit:${k.id}@${k.version}`, status: r.ok ? "ok" : "fail", detail: r.ok ? "一致" : r.drift.join("; ") });
+    } catch (e) {
+      checks.push({ name: `${prefix}kit:${k.id}@${k.version}`, status: "fail", detail: e?.message });
     }
   }
   if (sc.knowledgeRoot) {
@@ -5672,7 +5682,7 @@ async function run(opts = {}) {
 }
 
 // src/env.ts
-import { existsSync as existsSync23, readFileSync as readFileSync19 } from "node:fs";
+import { existsSync as existsSync23, readFileSync as readFileSync20 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
 import { join as join26 } from "node:path";
 import { spawnSync as spawnSync3 } from "node:child_process";
@@ -5687,7 +5697,7 @@ function parseFile(path) {
   const out = {};
   let text = "";
   try {
-    text = readFileSync19(path, "utf8");
+    text = readFileSync20(path, "utf8");
   } catch {
     return out;
   }
@@ -5757,7 +5767,7 @@ function run2(cfg, cmd, opts = {}) {
 }
 
 // src/bw.ts
-import { chmodSync as chmodSync4, existsSync as existsSync24, mkdirSync as mkdirSync17, readFileSync as readFileSync20, rmSync as rmSync7, writeFileSync as writeFileSync14 } from "node:fs";
+import { chmodSync as chmodSync4, existsSync as existsSync24, mkdirSync as mkdirSync17, readFileSync as readFileSync21, rmSync as rmSync7, writeFileSync as writeFileSync14 } from "node:fs";
 init_paths();
 import { join as join27 } from "node:path";
 import { execFileSync as execFileSync10 } from "node:child_process";
@@ -5770,7 +5780,7 @@ function sessionFile2() {
 }
 function readSession2() {
   try {
-    const s = readFileSync20(sessionFile2(), "utf8").trim();
+    const s = readFileSync21(sessionFile2(), "utf8").trim();
     return s || null;
   } catch {
     return null;
@@ -6013,17 +6023,17 @@ function askBroker(req, timeoutMs = 5000) {
 import { execFileSync as execFileSync12, spawn as spawn2, spawnSync as spawnSync5 } from "node:child_process";
 import { mkdirSync as mkdirSync20, openSync as openSync3 } from "node:fs";
 import { basename as basename10, join as join32 } from "node:path";
-import { existsSync as existsSync29, readFileSync as readFileSync25 } from "node:fs";
+import { existsSync as existsSync29, readFileSync as readFileSync26 } from "node:fs";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 import { resolve as resolvePath, sep as pathSep } from "node:path";
 
 // src/team.ts
-import { appendFileSync as appendFileSync8, cpSync as cpSync3, existsSync as existsSync26, mkdirSync as mkdirSync18, readFileSync as readFileSync22, readdirSync as readdirSync11, rmSync as rmSync8, writeFileSync as writeFileSync15 } from "node:fs";
+import { appendFileSync as appendFileSync8, cpSync as cpSync3, existsSync as existsSync26, mkdirSync as mkdirSync18, readFileSync as readFileSync23, readdirSync as readdirSync11, rmSync as rmSync8, writeFileSync as writeFileSync15 } from "node:fs";
 import { homedir as homedir15, tmpdir as tmpdir3 } from "node:os";
 import { join as join29, resolve as resolve14 } from "node:path";
 
 // src/pricing.ts
-import { existsSync as existsSync25, readFileSync as readFileSync21 } from "node:fs";
+import { existsSync as existsSync25, readFileSync as readFileSync22 } from "node:fs";
 import { homedir as homedir14 } from "node:os";
 import { join as join28 } from "node:path";
 var DEFAULT = {
@@ -6038,7 +6048,7 @@ function loadPrices() {
   if (!existsSync25(pricesFile()))
     return { ...DEFAULT };
   try {
-    const user = JSON.parse(readFileSync21(pricesFile(), "utf8"));
+    const user = JSON.parse(readFileSync22(pricesFile(), "utf8"));
     return { ...DEFAULT, ...user };
   } catch {
     return { ...DEFAULT };
@@ -6111,7 +6121,7 @@ function writeUsage(dir, id, acc) {
 }
 function judgeWorkspace(dir, fallback) {
   try {
-    const run = JSON.parse(readFileSync22(join29(dir, "run.json"), "utf8"));
+    const run = JSON.parse(readFileSync23(join29(dir, "run.json"), "utf8"));
     const ws = String(run?.workspace || "");
     if (ws)
       return ws;
@@ -6126,17 +6136,17 @@ function gate(id) {
     return { ok: false, reason: "missing: " + missing.join(",") };
   let verify, redteam, run;
   try {
-    verify = JSON.parse(readFileSync22(join29(dir, "verify.json"), "utf8"));
+    verify = JSON.parse(readFileSync23(join29(dir, "verify.json"), "utf8"));
   } catch {
     return { ok: false, reason: "bad verify.json" };
   }
   try {
-    redteam = JSON.parse(readFileSync22(join29(dir, "redteam.json"), "utf8"));
+    redteam = JSON.parse(readFileSync23(join29(dir, "redteam.json"), "utf8"));
   } catch {
     return { ok: false, reason: "bad redteam.json" };
   }
   try {
-    run = JSON.parse(readFileSync22(join29(dir, "run.json"), "utf8"));
+    run = JSON.parse(readFileSync23(join29(dir, "run.json"), "utf8"));
   } catch {
     return { ok: false, reason: "bad run.json" };
   }
@@ -6282,7 +6292,7 @@ function snapPath(id, dir, tag) {
   const f = join29(dir, "snapshots.json");
   let list = [];
   try {
-    list = JSON.parse(readFileSync22(f, "utf8"));
+    list = JSON.parse(readFileSync23(f, "utf8"));
   } catch {
     list = [];
   }
@@ -6305,7 +6315,7 @@ function cleanupSnapshots(runDir) {
   if (process.env.DIA_KEEP_SNAPSHOTS === "1")
     return;
   try {
-    for (const p of JSON.parse(readFileSync22(join29(runDir, "snapshots.json"), "utf8"))) {
+    for (const p of JSON.parse(readFileSync23(join29(runDir, "snapshots.json"), "utf8"))) {
       if (resolve14(p).startsWith(resolve14(tmpdir3()) + "/"))
         rmSync8(p, { recursive: true, force: true });
     }
@@ -6392,7 +6402,7 @@ function gitDiff(ws) {
     const untracked = execFileSync11("git", ["-C", ws, "ls-files", "--others", "--exclude-standard"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).split(`
 `).filter(Boolean);
     for (const f of untracked) {
-      const body = readFileSync22(join29(ws, f), "utf8");
+      const body = readFileSync23(join29(ws, f), "utf8");
       out += `
 --- /dev/null
 +++ b/${f}
@@ -6585,7 +6595,7 @@ function dshSessionFile(sessionId) {
   return null;
 }
 function dshUsages(file) {
-  const raw = zstdDecompressSync2(readFileSync22(file)).toString("utf8");
+  const raw = zstdDecompressSync2(readFileSync23(file)).toString("utf8");
   const out = [];
   for (const line of raw.split(`
 `)) {
@@ -6869,7 +6879,7 @@ function reject(id, reason) {
 var DEFAULT_ACP_TIMEOUT = 600000;
 
 // src/proposal.ts
-import { existsSync as existsSync27, readFileSync as readFileSync23, readdirSync as readdirSync12 } from "node:fs";
+import { existsSync as existsSync27, readFileSync as readFileSync24, readdirSync as readdirSync12 } from "node:fs";
 import { join as join30 } from "node:path";
 import { createHash as createHash10 } from "node:crypto";
 init_paths();
@@ -6885,7 +6895,7 @@ function push(out, p) {
 }
 function readJson3(path) {
   try {
-    return JSON.parse(readFileSync23(path, "utf8"));
+    return JSON.parse(readFileSync24(path, "utf8"));
   } catch {
     return null;
   }
@@ -6971,7 +6981,7 @@ function expandIds(cell) {
 function collectHypotheses(out, path) {
   if (!existsSync27(path))
     return;
-  const lines = readFileSync23(path, "utf8").split(`
+  const lines = readFileSync24(path, "utf8").split(`
 `);
   const titles = new Map;
   for (const line of lines) {
@@ -7014,7 +7024,7 @@ import {
   existsSync as existsSync28,
   lstatSync as lstatSync3,
   mkdirSync as mkdirSync19,
-  readFileSync as readFileSync24,
+  readFileSync as readFileSync25,
   readdirSync as readdirSync13,
   readlinkSync as readlinkSync2,
   rmSync as rmSync9,
@@ -7153,7 +7163,7 @@ function readServiceManifest(dir) {
     throw new Error(`E_NO_MANIFEST: dia.json not found in ${dir}（adopted 服务需先补 dia.json）`);
   let raw;
   try {
-    raw = JSON.parse(readFileSync24(p, "utf8"));
+    raw = JSON.parse(readFileSync25(p, "utf8"));
   } catch {
     throw new Error("E_MANIFEST: invalid json");
   }
@@ -7194,7 +7204,7 @@ function isSymlink2(p) {
     return false;
   }
 }
-var shaFile3 = (p) => createHash11("sha256").update(readFileSync24(p)).digest("hex");
+var shaFile3 = (p) => createHash11("sha256").update(readFileSync25(p)).digest("hex");
 var UNKNOWN = "unknown";
 var SIGNALS = { 6: "SIGABRT", 9: "SIGKILL", 11: "SIGSEGV", 13: "SIGPIPE", 15: "SIGTERM" };
 function judgeHealth(exit, opts = {}) {
@@ -7425,7 +7435,7 @@ function readLockFile(id) {
   if (!existsSync28(p))
     throw new Error(`E_NOT_INSTALLED: service ${id}（缺 lock）`);
   try {
-    return JSON.parse(readFileSync24(p, "utf8"));
+    return JSON.parse(readFileSync25(p, "utf8"));
   } catch {
     throw new Error(`E_DRIFT: service.lock.json 不可解析（${p}）`);
   }
@@ -7446,7 +7456,7 @@ function readHealthLines(file) {
   if (!existsSync28(file))
     return [];
   const rows = [];
-  for (const line of readFileSync24(file, "utf8").split(`
+  for (const line of readFileSync25(file, "utf8").split(`
 `)) {
     if (!line.trim())
       continue;
@@ -7643,7 +7653,7 @@ function readRegistryTasks(file = registryPath2()) {
   if (!existsSync28(file))
     return null;
   try {
-    const d = JSON.parse(readFileSync24(file, "utf8"));
+    const d = JSON.parse(readFileSync25(file, "utf8"));
     return new Set(Object.keys(d?.tasks ?? {}));
   } catch {
     return null;
@@ -8009,7 +8019,7 @@ function cliVersion() {
   ];
   for (const u of candidates) {
     try {
-      return String(JSON.parse(readFileSync25(u, "utf8")).version || "0.0.0");
+      return String(JSON.parse(readFileSync26(u, "utf8")).version || "0.0.0");
     } catch {}
   }
   return "0.0.0";
@@ -9049,7 +9059,7 @@ async function collabCli(argv) {
     }
     if (sub === "reply") {
       const id = positional(args)[0];
-      const body = flag(args, "--body") ?? (flag(args, "--body-file") ? readFileSync25(flag(args, "--body-file"), "utf8") : undefined);
+      const body = flag(args, "--body") ?? (flag(args, "--body-file") ? readFileSync26(flag(args, "--body-file"), "utf8") : undefined);
       if (!id || body === undefined) {
         err("usage: dia reply <id> --body B|--body-file F [--session S]");
         return 2;
@@ -9766,7 +9776,7 @@ async function main(rawArgv) {
     if (!npmManaged) {
       let source = "";
       try {
-        source = String(JSON.parse(readFileSync25(join32(install, "install.json"), "utf8")).source || "");
+        source = String(JSON.parse(readFileSync26(join32(install, "install.json"), "utf8")).source || "");
       } catch {}
       out(`这是脚本安装，不走 npm 升级。升级方式：`);
       out(`  cd ${source || "<dia 仓库>"} && git pull && bun run build && bash install.sh`);

package/docs/cli.md

@@ -95,11 +95,11 @@ dia persona remove dabo
 | `persona update <id>` | **已实现** | 从 lock 记录的 source+ref 重装，并把 active 指向新版本；本地源亦可；`--force` 覆盖宿主/内联内容冲突（先备份） |
 | `persona default <id>` | **已实现** | 改宿主 `default_agent`：备份原文件 + 记原值，`--unset` 精确还原；非严格 JSON 直接拒绝 |
 | `persona create / render` | **已实现** | `create` 出骨架；`render --check` 只比对不写盘（跳过宿主自写文件，如 dsh `cordis.yml` / `package.json` / 锁文件）；`render` 只覆盖 persona 产物，不整树重建宿主 profile |
-| `kit add / list / verify / remove` | **已实现** | 复制/软链/记账；冲突写盘前全量检查（`E_CONFLICT`）；`src/kit.ts` + `tests/kit.test.ts` |
+| `kit add / list / verify / remove` | **已实现** | 复制/软链/记账；冲突写盘前全量检查（`E_CONFLICT`）；**空清单/空内容拒绝**（`E_MANIFEST`/`E_KIT_EMPTY`）；`src/kit.ts` + `tests/kit.test.ts` |
 | `env list / check / run` | **已实现** | 白名单注入、不回显值、`--redact`、密钥不进 argv；清单由 persona 声明（`src/env.ts` + `tests/env.test.ts`） |
 | `update [--check]` | **已实现** | 查 npm `dist-tags`；`--check` 有新版 exit 1、领先/最新 exit 0；**按安装方式分流**：npm 全局包 → `npm i -g`；脚本安装 → 提示 `git pull && bun run build && bash install.sh`（避免装到不在 PATH 的 npm prefix） |
 | `deps list / record` | **已实现** | `list` = 登记 + 实测派生视图（required 缺失 exit 2）；`record` = 只追加一行（`--id/--kind/--version` 必填）；`src/deps.ts` + `tests/deps*.test.ts` |
-| `doctor` | **已实现** | 组合自检：persona verify / **persona.render（宿主产物只读漂移，warn + 修复命令）** / default_agent / kit / knowledge（**索引新鲜度三态**，过期给重建命令）/ dsh preset / **deps 登记校验** / **platform 版本（读 `docs/platforms/registry.json`）** / wt；exit 0/1/2。不指定 persona 且装了多个 → **逐个自检**（条目加 `<id>.` 前缀），不再整体 `E_SCOPE` |
+| `doctor` | **已实现** | 组合自检：persona verify / **persona.render（宿主产物只读漂移，warn + 修复命令）** / default_agent / kit（**只查该 persona 引用的**，孤儿 kit 不拖红）/ knowledge（**索引新鲜度三态**，过期给重建命令）/ dsh preset / **deps 登记校验** / **platform 版本（读 `docs/platforms/registry.json`）** / wt；exit 0/1/2。不指定 persona 且装了多个 → **逐个自检**（条目加 `<id>.` 前缀），不再整体 `E_SCOPE` |
 | `wt …` | **已实现（需安装包）** | 转发 `packages/wt/bin/dia-wt`（create/adopt/doctor/gate/list/status/check/clean/prune-merged；详见 [worktree.md](worktree.md)）；未装时 `E_WT`（exit 33），`install.sh` 会分发 |
 | `kb index/search/query/get/lint/path/review` | **已实现** | persona 作用域下索引过期自动重建；显式 `--root` 保持「缺索引即报错」 |
 | `kb <域命令>` | **已实现（委派）** | 未命中内置 → persona `commands` → 委派；argv 透传、exit code 原样 |

package/docs/status.md

@@ -90,6 +90,7 @@
 | D0.21 | worktree 抽取 `packages/wt` | **完成** | 7 处 python→node；`dia wt`；4 套测试原样迁移全绿 |
 | D0.23 | doctor 平台版本自检 | **完成** | `platform:opencode` / `platform:dsh` 报版本（缺宿主 = warn，不判红）；`tests/active-doctor.test.ts` |
 | D0.44 | 配置迁移走 LLM 任务 | **完成** | `docs/migrations/llm-migration.md`：升级只改声明；迁移=任务+判据+回滚；禁止代码里堆版本分支（安全敏感/原子场景例外） |
+| D0.61 | kit 空内容拒绝 + doctor 只查引用 kit | **完成** | `kit add` 拒绝空清单/空树（E_MANIFEST/E_KIT_EMPTY）；doctor 按 persona lock 的 kits 校验，孤儿不再拖红 |
 | D0.60 | persona --force 覆盖内联内容 / update --force | **完成** | `kit.renderContent` 支持 force（写盘前备份到 `backups/force-*`）；`persona update --force`；版本冲突错误给可执行提示；`tests/kit.test.ts` |
 | D0.59 | 包内容守卫 | **完成** | 单测覆盖 docs 回退；publish workflow 发布前断言 tarball 含 docs/deps.jsonl + docs/platforms/registry.json（防「发完才发现缺文件」） |
 | D0.58 | 推送前敏感扫描 | **完成** | `dia wt adopt` 的 pre-push 扫描新增行：真实家目录/私钥/token 形态；`DIA_WT_GUARD_SCAN=0` 逃生；`adopt.test.sh` 34 pass |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minonl/dia",
-  "version": "0.0.7",
+  "version": "0.0.8",
   "type": "module",
   "description": "dia (嗲) — lightweight agent framework: knowledge index, audit, session ingest",
   "bin": {