@mzzsfy/dsh-shell-select 0.4.0 → 0.4.3

package/test/official-contract.test.mjs

@@ -0,0 +1,208 @@
+// 官方 ctx.shell 契约钉死 pwsh + 工具层六场景矩阵(前台/后台 × pwsh/git-bash):
+// BDD:官方 dsh-pwsh-local 契约即 PowerShell 专用,execute/run/start 落默认
+// 客户端会随配置漂移炸方言(官方 pwsh 工具调用在 git-bash 里执行 PowerShell)。
+// 后台分支 owner 必须是 agent id(resolveOwner 以 id 查 registry,传对象报
+// "[object Object] has no live agent");deny 探测不得真实 spawn(命令双跑)。
+
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import ShellSelectExecutor from '../src/executor.mjs'
+import { registerShellTool } from '../src/tool.mjs'
+
+function stubReader(text) {
+  return { readFrom: () => ({ text, lossy: false, nextOffset: text.length }) }
+}
+
+function stubSpawn(stdoutText = '', stderrText = '', exitCode = 0) {
+  const calls = []
+  const spawn = (spec) => {
+    calls.push(spec)
+    return {
+      collected: { stdout: stubReader(stdoutText), stderr: stubReader(stderrText) },
+      done: Promise.resolve({ exitCode, signal: null }),
+      terminate: () => true,
+    }
+  }
+  return { spawn, calls }
+}
+
+const SHELLS = [
+  { id: 'pwsh', name: 'PowerShell', kind: 'pwsh', path: process.execPath },
+  { id: 'git-bash', name: 'Git Bash', kind: 'bash', path: process.execPath },
+]
+
+function buildExecutor({ defaultId = 'git-bash', deny = [] } = {}) {
+  const stub = stubSpawn('out', '', 0)
+  const registered = { tools: [] }
+  const jobs = { starts: [] }
+  const ctx = {
+    reflect: { provide: () => {} },
+    on: () => () => {},
+    logger: { warn: () => {} },
+    get(service) {
+      if (service === 'webServer') return { register: () => {} }
+      if (service === 'jobs') return jobsApi()
+      return undefined
+    },
+    inject(services, fn) {
+      fn({ settings: undefined, effect: (effectFn) => effectFn() })
+    },
+    subprocess: stub,
+    sandbox: { confine: (argv) => ({ argv: ['WRAPPED', ...argv], enforcement: 'full', denialSignatures: [], runnerFailureRules: [] }) },
+    sandboxPolicy: { defaultMode: 'danger-full-access', resolve: () => ({ mode: 'danger-full-access', roots: [] }) },
+    tools: { register: (definition) => { registered.tools.push(definition); return () => registered.tools.pop() } },
+    systemPrompt: { section: () => {}, getSectionOrder: (key) => key },
+    shellEnv: { collect: () => ({}) },
+    effect: (fn) => fn(),
+  }
+  function jobsApi() {
+    return {
+      start(spec) {
+        jobs.starts.push(spec)
+        const outcome = spec.run()
+        return { id: `job-${jobs.starts.length}`, done: outcome.done, read: () => outcome.readOutput() }
+      },
+    }
+  }
+  const executor = new ShellSelectExecutor(ctx, { shells: SHELLS, default: defaultId, deny })
+  return { executor, ctx, stub, registered, jobs }
+}
+
+const execFor = (id) => ({ signal: new AbortController().signal, agent: { id, session: { header: { cwd: process.cwd() } } } })
+const EXEC = execFor('agent-0')
+
+test('execute 契约钉死 pwsh:default=git-bash 时仍走 pwsh argv', async () => {
+  const { executor, stub } = buildExecutor({ defaultId: 'git-bash' })
+  const handle = await executor.execute(executor.resolve({ command: 'Get-Date', workdir: process.cwd() }))
+  await handle.result()
+  assert.match(stub.calls[0].argv.at(-1), /Get-Date$/)
+  assert.deepEqual(stub.calls[0].argv.slice(1, 5), ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command'])
+})
+
+test('start 契约钉死 pwsh:default=git-bash 时仍走 pwsh argv', () => {
+  const { executor, stub } = buildExecutor({ defaultId: 'git-bash' })
+  const proc = executor.start(executor.resolve({ command: 'Get-Date', workdir: process.cwd(), onExpiry: 'none' }))
+  return proc.done.then(() => {
+    assert.deepEqual(stub.calls[0].argv.slice(1, 5), ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command'])
+  })
+})
+
+test('配置删除 pwsh 条目:契约现场探测仍走 pwsh,不落默认客户端', async () => {
+  const { executor, stub } = buildExecutor({ defaultId: 'git-bash' })
+  executor.refresh({ shells: SHELLS.filter((entry) => entry.id !== 'pwsh'), default: 'git-bash' })
+  assert.throws(() => executor.entryFor('pwsh'), /pwsh/)
+  const entry = executor.contractEntry()
+  assert.equal(entry.kind, 'pwsh')
+  const handle = await executor.execute(executor.resolve({ command: 'Get-Date', workdir: process.cwd() }))
+  await handle.result()
+  assert.deepEqual(stub.calls[0].argv.slice(1, 5), ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command'])
+})
+
+// --- 工具层六场景矩阵 ---
+
+test('矩阵:shell 前台 pwsh(git-bash 默认)', async () => {
+  const { executor, ctx, stub, registered } = buildExecutor({ defaultId: 'git-bash' })
+  registerShellTool(ctx, { executor })
+  const shellTool = registered.tools.find((tool) => tool.name === 'shell')
+  const value = await shellTool.execute({ command: 'Write-Output hi', description: 'probe', shell: 'pwsh', workdir: process.cwd() }, EXEC)
+  assert.equal(value.kind, 'foreground')
+  assert.equal(value.shell, 'pwsh')
+  assert.deepEqual(stub.calls[0].argv.slice(1, 5), ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command'])
+})
+
+test('矩阵:shell 前台 git-bash(默认)', async () => {
+  const { executor, ctx, stub, registered } = buildExecutor({ defaultId: 'git-bash' })
+  registerShellTool(ctx, { executor })
+  const shellTool = registered.tools.find((tool) => tool.name === 'shell')
+  const value = await shellTool.execute({ command: 'echo hi', description: 'probe', workdir: process.cwd() }, EXEC)
+  assert.equal(value.kind, 'foreground')
+  assert.equal(value.shell, 'git-bash')
+  assert.deepEqual(stub.calls[0].argv.slice(1, 3), ['-c', 'echo hi'])
+})
+
+test('矩阵:pwsh 工具前台(钉死 pwsh)', async () => {
+  const { executor, ctx, stub, registered } = buildExecutor({ defaultId: 'git-bash' })
+  registerShellTool(ctx, { executor })
+  const pwshTool = registered.tools.find((tool) => tool.name === 'pwsh')
+  const value = await pwshTool.execute({ command: 'Get-Date', description: 'probe', workdir: process.cwd() }, EXEC)
+  assert.equal(value.shell, 'pwsh')
+  assert.deepEqual(stub.calls[0].argv.slice(1, 5), ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command'])
+})
+
+async function backgroundCase({ shellArg, defaultId }) {
+  const { executor, ctx, stub, registered, jobs } = buildExecutor({ defaultId })
+  registerShellTool(ctx, { executor })
+  const shellTool = registered.tools.find((tool) => tool.name === 'shell')
+  const args = { command: 'echo hi', description: 'probe', run_in_background: true, workdir: process.cwd() }
+  if (shellArg !== undefined) args.shell = shellArg
+  const value = await shellTool.execute(args, { signal: new AbortController().signal, agent: execFor('agent-1').agent })
+  assert.equal(value.kind, 'background')
+  assert.equal(jobs.starts.length, 1)
+  assert.equal(jobs.starts[0].owner, 'agent-1', 'owner 必须是 agent id 而非对象')
+  const expectedKind = shellArg === 'pwsh' || (shellArg === undefined && defaultId === 'pwsh') ? 'pwsh' : 'bash'
+  assert.equal(executor.entryFor(shellArg).kind, expectedKind)
+  return { stub, jobs }
+}
+
+test('矩阵:后台 default(git-bash)', async () => {
+  const { stub, jobs } = await backgroundCase({ defaultId: 'git-bash' })
+  await jobs.starts[0].run // run() 已在 start 内同步执行
+  await Promise.resolve()
+  assert.equal(stub.calls.length, 1, 'deny 探测不得真实 spawn,整个后台任务只 spawn 一次')
+  assert.deepEqual(stub.calls[0].argv.slice(1, 3), ['-c', 'echo hi'])
+})
+
+test('矩阵:后台 shell=pwsh', async () => {
+  const { stub } = await backgroundCase({ shellArg: 'pwsh', defaultId: 'git-bash' })
+  await Promise.resolve()
+  assert.equal(stub.calls.length, 1)
+  assert.deepEqual(stub.calls[0].argv.slice(1, 5), ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command'])
+})
+
+test('矩阵:后台 default=pwsh(默认即 pwsh)', async () => {
+  const { stub } = await backgroundCase({ defaultId: 'pwsh' })
+  await Promise.resolve()
+  assert.equal(stub.calls.length, 1)
+  assert.deepEqual(stub.calls[0].argv.slice(1, 5), ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command'])
+})
+
+test('矩阵:后台 pwsh 工具(钉死 pwsh)', async () => {
+  const { executor, ctx, stub, registered, jobs } = buildExecutor({ defaultId: 'git-bash' })
+  registerShellTool(ctx, { executor })
+  const pwshTool = registered.tools.find((tool) => tool.name === 'pwsh')
+  const value = await pwshTool.execute(
+    { command: 'Get-Date', description: 'probe', run_in_background: true, workdir: process.cwd() },
+    { signal: new AbortController().signal, agent: execFor('agent-2').agent },
+  )
+  assert.equal(value.kind, 'background')
+  assert.equal(jobs.starts[0].owner, 'agent-2')
+  await Promise.resolve()
+  assert.equal(stub.calls.length, 1)
+  assert.deepEqual(stub.calls[0].argv.slice(1, 5), ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command'])
+})
+
+test('本包同名 pwsh 工具结果携带接管事实，而 shell=pwsh 只携带客户端事实', async () => {
+  // Given本包两种PowerShell入口；When执行并渲染；Then仅直接pwsh产生独立接管事实。
+  const { ctx, registered } = buildExecutor()
+  for (const name of ['pwsh', 'shell']) {
+    const tool = registered.tools.find(tool => tool.name === name)
+    const args = { command: 'Get-Date', description: 'probe', ...(name === 'shell' ? { shell: 'pwsh' } : {}) }
+    const value = await tool.execute(args, EXEC)
+    const content = tool.output.render(args, value)
+    if (name === 'pwsh') assert.deepEqual(content.at(-1), { type: 'shell-select-takeover', tool: 'pwsh' })
+    else assert.equal(content.some(part => part.type === 'shell-select-takeover'), false)
+  }
+})
+
+test('矩阵:后台 deny 命中,启动前拒绝且零 spawn', async () => {
+  const { executor, ctx, stub, registered, jobs } = buildExecutor({ defaultId: 'git-bash', deny: ['forbidden'] })
+  registerShellTool(ctx, { executor })
+  const shellTool = registered.tools.find((tool) => tool.name === 'shell')
+  const value = await shellTool.execute(
+    { command: 'echo forbidden thing', description: 'probe', run_in_background: true, workdir: process.cwd() },
+    { signal: new AbortController().signal, agent: execFor('agent-3').agent },
+  )
+  assert.equal(value.kind, 'foreground', 'deny 命中回退前台拒绝形态')
+  assert.equal(jobs.starts.length, 0)
+  assert.equal(stub.calls.length, 0)
+})

package/test/path-guidance.test.mjs

@@ -0,0 +1,28 @@
+// bash 路径措辞测试:shellDescription 在 bash 形可用客户端在场时追加路径引导。
+// BDD 场景见 docs/feat-shell-select-pathrescue/plan.md A 节。
+
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import { shellDescription } from '../src/tool.mjs'
+
+const FACES = { backgroundEnabled: true, escalationModes: [] }
+const entry = (id, kind, available) => ({ id, kind, available })
+
+test('A1 含可用 bash 条目:描述含 Windows-style 路径措辞', () => {
+  const executor = { listShells: () => ({ default: 'pwsh', shells: [entry('pwsh', 'pwsh', true), entry('git-bash', 'bash', true)] }) }
+  const text = shellDescription({ executor, ...FACES })
+  assert.match(text, /Windows-style paths/)
+  assert.match(text, /`workdir`/)
+})
+
+test('A2 仅 pwsh/cmd:不含措辞', () => {
+  const executor = { listShells: () => ({ default: 'pwsh', shells: [entry('pwsh', 'pwsh', true), entry('cmd', 'cmd', true)] }) }
+  const text = shellDescription({ executor, ...FACES })
+  assert.doesNotMatch(text, /Windows-style paths/)
+})
+
+test('A3 bash 条目不可执行:不含措辞(可执行性事实优先)', () => {
+  const executor = { listShells: () => ({ default: 'pwsh', shells: [entry('pwsh', 'pwsh', true), entry('git-bash', 'bash', false)] }) }
+  const text = shellDescription({ executor, ...FACES })
+  assert.doesNotMatch(text, /Windows-style paths/)
+})

package/test/path-rescue.test.mjs

@@ -0,0 +1,173 @@
+// 侧栏路径救援测试:函数映射、地址语法与实际注入生命周期。
+// BDD 场景见 docs/feat-shell-select-pathrescue/plan.md B 节。
+
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import { readFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+import { dirname, join } from 'node:path'
+
+const here = dirname(fileURLToPath(import.meta.url))
+const source = readFileSync(join(here, '..', 'src', 'client.js'), 'utf8')
+
+function extractLogic(name, deps = {}) {
+  const pattern = new RegExp('// LOGIC-BEGIN ' + name + '\\n([\\s\\S]*?)\\n\\s*// LOGIC-END ' + name)
+  const match = source.match(pattern)
+  if (!match) throw new Error('client.js 缺少 LOGIC 段: ' + name)
+  const keys = Object.keys(deps)
+  return new Function(...keys, 'return (' + match[1].trim() + ')')(...keys.map((key) => deps[key]))
+}
+
+const FACTS = { platform: 'win32', home: 'C:/Users/me', tmpDir: 'C:/Users/me/AppData/Local/Temp' }
+
+function mountClient({ facts, hasEffect = true, laterWrapper = false }) {
+  let definition
+  let activeFacts = facts
+  const registrations = []
+  const disposers = []
+  const controller = {
+    calls: [],
+    openResource(address, options) { this.calls.push({ method: 'openResource', address, options }); return 'opened' },
+    openResourceIn(sessionId, address, options) { this.calls.push({ method: 'openResourceIn', sessionId, address, options }); return 'opened' },
+  }
+  const original = { openResource: controller.openResource, openResourceIn: controller.openResourceIn }
+  const fetcher = () => activeFacts === null
+    ? Promise.reject(new Error('route not ready'))
+    : Promise.resolve({ ok: true, json: () => Promise.resolve(activeFacts) })
+  new Function('window', 'document', 'navigator', 'fetch', source)(
+    { __ModuleLoader__: { load: (value) => { definition = value } } },
+    { createElement: () => ({ setAttribute() {}, remove() {} }), head: { appendChild() {} } },
+    {}, fetcher,
+  )
+  const client = definition.factory((name) => name === 'react'
+    ? { createElement: () => null, useState: () => [false, () => {}], useEffect() {} }
+    : {})
+  const ctx = {
+    effect: (body) => body(),
+    slots: { inject: (_hole, callback) => callback(), register: (meta) => registrations.push(meta) },
+    inject: (names, callback) => {
+      if (!names.includes('sidebarRight')) return
+      callback({
+        sidebarRight: controller,
+        ...(hasEffect ? { effect: (body) => disposers.push(body()) } : {}),
+      })
+    },
+  }
+  client.apply(ctx)
+  if (laterWrapper) {
+    const wrapped = controller.openResource
+    controller.openResource = function later(address, options) { return wrapped.call(this, address, options) }
+  }
+  return { controller, original, disposers, setFacts: (value) => { activeFacts = value } }
+}
+
+test('B5 盘根翻译:/c/x → C:/x,/c → C:/', () => {
+  const translate = extractLogic('msysToHostPath')
+  assert.equal(translate('/c/Users/x', FACTS), 'C:/Users/x')
+  assert.equal(translate('/c', FACTS), 'C:/')
+  assert.equal(translate('/C/Users/x', FACTS), 'C:/Users/x')
+})
+
+test('B5 home 翻译:~ 与 ~/x', () => {
+  const translate = extractLogic('msysToHostPath')
+  assert.equal(translate('~', FACTS), 'C:/Users/me')
+  assert.equal(translate('~/a/b.txt', FACTS), 'C:/Users/me/a/b.txt')
+})
+
+test('B5 tmp 翻译:/tmp 与 /tmp/x', () => {
+  const translate = extractLogic('msysToHostPath')
+  assert.equal(translate('/tmp', FACTS), 'C:/Users/me/AppData/Local/Temp')
+  assert.equal(translate('/tmp/x.log', FACTS), 'C:/Users/me/AppData/Local/Temp/x.log')
+})
+
+test('B5 非翻译形态原样:Windows 路径/相对路径/未知 POSIX 段', () => {
+  const translate = extractLogic('msysToHostPath')
+  assert.equal(translate('C:/repo/a.txt', FACTS), 'C:/repo/a.txt')
+  assert.equal(translate('src/index.js', FACTS), 'src/index.js')
+  assert.equal(translate('/usr/bin/bash', FACTS), '/usr/bin/bash')
+  assert.equal(translate(42, FACTS), 42)
+})
+
+test('B6 file 地址翻译:session/absolute、空格与后缀', () => {
+  const translate = extractLogic('msysToHostPath')
+  const rescue = extractLogic('rescueFileAddress')
+  assert.equal(rescue('dsh-resource://file/session/s1//c/Users/x.txt', translate, FACTS), 'dsh-resource://file/session/s1/C:/Users/x.txt')
+  assert.equal(rescue('dsh-resource://file/absolute/c/Users/y%20x.md', translate, FACTS), 'dsh-resource://file/absolute/C:/Users/y%20x.md')
+  assert.ok(rescue('dsh-resource://file/absolute/c/Users/y.md?line=3', translate, FACTS).endsWith('?line=3'))
+  const unchanged = 'dsh-resource://file/absolute/C%3A/Users/z.txt'
+  assert.equal(rescue(unchanged, translate, FACTS), unchanged)
+})
+
+test('B6 非 file、UNC、坏转义地址原样', () => {
+  const translate = extractLogic('msysToHostPath')
+  const rescue = extractLogic('rescueFileAddress')
+  for (const address of [
+    'dsh-resource://other/abc', 'not an address',
+    'dsh-resource://file/absolute//server/share/x',
+    'dsh-resource://file/absolute/%zz/x',
+  ]) assert.equal(rescue(address, translate, FACTS), address)
+})
+
+test('B6 编码 sessionId 翻译后只编码一次', () => {
+  const translate = extractLogic('msysToHostPath')
+  const rescue = extractLogic('rescueFileAddress')
+  const address = 'dsh-resource://file/session/s%201//c/Users/x.txt'
+  assert.equal(rescue(address, translate, FACTS), 'dsh-resource://file/session/s%201/C:/Users/x.txt')
+})
+
+test('B6 地址翻译函数是纯函数,平台门由运行时安装包装负责', () => {
+  const translate = extractLogic('msysToHostPath')
+  assert.equal(translate('/c/x', null), 'C:/x')
+  const rescue = extractLogic('rescueFileAddress')
+  assert.equal(rescue('dsh-resource://file/absolute/c/x', translate, FACTS), 'dsh-resource://file/absolute/C:/x')
+})
+
+test('B7 可观察的 sidebar 包装透传两个入口并在 fiber dispose 后恢复', async () => {
+  const mounted = mountClient({ facts: FACTS })
+  await new Promise((resolve) => setImmediate(resolve))
+  const { controller, original, disposers } = mounted
+  assert.equal(controller.openResource('dsh-resource://file/absolute/c/x', { tab: true }), 'opened')
+  assert.deepEqual(controller.calls.at(-1), { method: 'openResource', address: 'dsh-resource://file/absolute/C:/x', options: { tab: true } })
+  assert.equal(controller.openResourceIn('s2', 'dsh-resource://file/session/s1//c/x', { line: 2 }), 'opened')
+  assert.equal(controller.calls.at(-1).address, 'dsh-resource://file/session/s1/C:/x')
+  assert.equal(controller.calls.at(-1).sessionId, 's2')
+  disposers[0]()
+  assert.equal(controller.openResource, original.openResource)
+  assert.equal(controller.openResourceIn, original.openResourceIn)
+  controller.openResource('dsh-resource://file/absolute/c/x')
+  assert.equal(controller.calls.at(-1).address, 'dsh-resource://file/absolute/c/x')
+})
+
+test('B7 缺少 effect 清理能力时不改写侧栏方法', () => {
+  const mounted = mountClient({ facts: FACTS, hasEffect: false })
+  assert.equal(mounted.controller.openResource, mounted.original.openResource)
+  assert.equal(mounted.controller.openResourceIn, mounted.original.openResourceIn)
+})
+
+test('B7 后续插件包装仍保留,卸载只移除本插件包装', async () => {
+  const mounted = mountClient({ facts: FACTS, laterWrapper: true })
+  await new Promise((resolve) => setImmediate(resolve))
+  const laterWrapper = mounted.controller.openResource
+  mounted.disposers[0]()
+  assert.equal(mounted.controller.openResource, laterWrapper)
+  mounted.controller.openResource('dsh-resource://file/absolute/c/x')
+  assert.equal(mounted.controller.calls.at(-1).address, 'dsh-resource://file/absolute/c/x')
+})
+
+test('B7 pathmap 请求失败可在后续调用重试', async () => {
+  const mounted = mountClient({ facts: null })
+  await new Promise((resolve) => setImmediate(resolve))
+  mounted.setFacts(FACTS)
+  mounted.controller.openResource('dsh-resource://file/absolute/c/x')
+  await new Promise((resolve) => setImmediate(resolve))
+  mounted.controller.calls.length = 0
+  mounted.controller.openResource('dsh-resource://file/absolute/c/x')
+  assert.equal(mounted.controller.calls[0].address, 'dsh-resource://file/absolute/C:/x')
+})
+
+test('B7 非 Windows pathmap 不改写原地址', async () => {
+  const mounted = mountClient({ facts: { ...FACTS, platform: 'linux' } })
+  await new Promise((resolve) => setImmediate(resolve))
+  mounted.controller.openResource('/c/x')
+  assert.equal(mounted.controller.calls[0].address, '/c/x')
+})

package/test/preset-drift.test.mjs

@@ -1,154 +1,45 @@
-// preset 接管守卫(0.1.7 预设架构):本包 patch insert 自带预设声明
-// (preset-shell-select,standard 内联 roster − tool-pwsh 行)并覆写
-// agent-preset-registry 的 default。漂移守卫对照已安装 dsh 的
-// dsh-web-app/presets/standard.patch.yml——上游增删行/改表达式即红,升级后
-// 按官方实文对表镜像;宿主缺失(无 dsh 本体的最小环境)时 skip,不制造假红。
-
 import { test } from 'node:test'
 import assert from 'node:assert/strict'
-import { readFileSync, existsSync, readdirSync } from 'node:fs'
-import { fileURLToPath, pathToFileURL } from 'node:url'
-import { dirname, join, resolve } from 'node:path'
-import { createRequire } from 'node:module'
-import { execPath } from 'node:process'
-
-const here = dirname(fileURLToPath(import.meta.url))
-const pkgRoot = join(here, '..')
-const patchText = readFileSync(join(pkgRoot, 'cordis.patch.yml'), 'utf8')
-
-// ── 宿主侧 yaml 能力探测:js-yaml 与官方 entryListSchema 经 dsh 安装位解析 ──
-
-function locateHarnessDir() {
-  // 候选锚:运行中 node 的全局安装位(nvm/全局布局:execPath 目录/node_modules)→
-  // 仓库 compat 隔离宿主(.dsh-versions/<v>/package)。缺失即返回 null(skip)。
-  const candidates = [
-    resolve(dirname(execPath), 'node_modules', '@deepseek-ai', 'dsh'),
-  ]
-  const versionsDir = resolve(pkgRoot, '..', '..', '.dsh-versions')
-  try {
-    for (const version of readdirSync(versionsDir)) {
-      candidates.push(join(versionsDir, version, 'package'))
-    }
-  } catch { /* 无 .dsh-versions,忽略 */ }
-  for (const candidate of candidates) {
-    if (existsSync(join(candidate, 'package.json'))) return candidate
-  }
-  return null
-}
+import { readFileSync } from 'node:fs'
+import yaml from 'js-yaml'
 
-// yaml 能力与宿主解耦:js-yaml 为 devDep(CI 无宿主也可解析本包文件)。
-// !!js 标签本地同形 Type:tag 必须写完整 URI(tag:yaml.org,2002:js)——文档简写
-// !!js 展开后按完整 URI 匹配,字面 '!!js' 永不命中(unknown tag,CI 假绿教训)。
-import yamlStatic from 'js-yaml'
-
-const LOCAL_SCHEMA = yamlStatic.JSON_SCHEMA.extend(new yamlStatic.Type('tag:yaml.org,2002:js', {
+const schema = yaml.JSON_SCHEMA.extend(new yaml.Type('tag:yaml.org,2002:js', {
   kind: 'scalar',
   resolve: (data) => typeof data === 'string',
   construct: (data) => ({ __jsExpr: data }),
-  represent: (data) => data['__jsExpr'],
 }))
-
-let harness = null
-let entryListSchema = LOCAL_SCHEMA
-try {
-  harness = locateHarnessDir()
-  if (harness !== null) {
-    const req = createRequire(join(harness, 'package.json'))
-    const toUrl = (specifier) => pathToFileURL(req.resolve(specifier)).href
-    entryListSchema = (await import(toUrl('@deepseek-ai/cordis-plugin-include'))).entryListSchema
-  }
-} catch { /* 官方 schema 缺失按本地同形标签处理 */ }
-
-const loadYaml = (text) => yamlStatic.load(text, { schema: entryListSchema })
-
-// 镜像 loader 的表达式求值形态(new Function + with(ctx),全局可用)
-const evalExpr = (expr, ctx) => new Function('ctx', `with (ctx) { return (${expr}) }`)(ctx)
-
-// ── 结构对比:展平行树为 id → {name, disabled, isolate, config 全值} ──
-// config 比全值而非键集:键集守不住文本漂移(plan-mode section 曾落后官方一句
-// 而守卫全绿),镜像声明即「standard 全量 − tool-pwsh 逐项同构」,值必须对表
-
-function flattenRows(rows, out = new Map()) {
-  for (const row of rows ?? []) {
-    if (row.id !== undefined) {
-      out.set(row.id, {
-        name: row.name,
-        disabled: row.disabled === undefined ? undefined : row.disabled.__jsExpr ?? row.disabled,
-        isolate: row.isolate === undefined ? undefined : JSON.parse(JSON.stringify(row.isolate)),
-        config: row.config === undefined ? undefined : JSON.parse(JSON.stringify(row.config)),
-      })
-    }
-    if (row.group && Array.isArray(row.config)) flattenRows(row.config, out)
-  }
-  return out
-}
-
-// 本包 patch 解析:insert 的预设声明行 + 各覆写行
-const patchRows = yamlStatic.load(patchText, { schema: LOCAL_SCHEMA })
-const insertRows = patchRows.filter((entry) => entry.insert !== undefined).flatMap((entry) => entry.insert)
-const ourPresetRow = insertRows.find((row) => row.id === 'preset-shell-select')
-const ourPlugins = ourPresetRow?.config?.plugins ?? []
-
-test('patch 形态:自带预设声明行(preset-shell-select,0.1.7 内联架构)', () => {
-  assert.ok(ourPresetRow, 'patch 缺 preset-shell-select 声明(insert 段)')
-  assert.equal(ourPresetRow.name, '@deepseek-ai/dsh-agent-preset')
-  assert.equal(ourPresetRow.config.id, 'shell-select')
-  const ids = new Set()
-  const walk = (list) => {
-    for (const row of list) {
-      if (row.id !== undefined) ids.add(row.id)
-      if (row.group && Array.isArray(row.config)) walk(row.config)
-    }
-  }
-  walk(ourPlugins)
-  assert.ok(ids.has('tool-bash'), 'POSIX bash 工具行必须保留')
-  assert.ok(!ids.has('tool-pwsh'), 'tool-pwsh 行必须移除(win32 shell 面由本包接管)')
-  assert.ok(!ids.has('persistent-pwsh'), 'persistent-pwsh 行不得进入本包预设')
-})
-
-test('patch 形态:agent-preset-registry 覆写含平台 default(patch 语义为整体替换 config)', () => {
-  const row = patchRows.find((entry) => entry.id === 'agent-preset-registry')
-  assert.ok(row, 'patch 缺 agent-preset-registry 覆写行')
-  assert.equal(row.name, undefined, 'registry 行是本包上层已 insert 的行,覆写按 id 匹配即无须 name')
-  assert.match(row.config.default.__jsExpr, /'shell-select'/)
-  assert.match(row.config.default.__jsExpr, /'standard'/)
+const patch = yaml.load(readFileSync(new URL('../cordis.patch.yml', import.meta.url), 'utf8'), { schema })
+const manifest = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'))
+const inserted = patch.flatMap((entry) => entry.insert ?? [])
+
+// Given 插件补丁，When 应用插入行，Then 只增加宿主执行面，不声明会话预设。
+test('补丁仅插入主行、guard 与 web，不增加会话预设', () => {
+  assert.deepEqual(inserted.map(({ id, name }) => ({ id, name })), [
+    { id: 'shell-select', name: '@mzzsfy/dsh-shell-select' },
+    { id: 'shell-select/guard', name: '@mzzsfy/dsh-shell-select/guard' },
+    { id: 'shell-select/web', name: '@mzzsfy/dsh-shell-select/web' },
+  ])
 })
 
-test('patch 表达式求值:default 按平台切换', () => {
-  const row = patchRows.find((entry) => entry.id === 'agent-preset-registry')
-  const expected = process.platform === 'win32' ? 'shell-select' : 'standard'
-  assert.equal(evalExpr(row.config.default.__jsExpr, {}), expected)
+// Given 任意宿主默认预设，When 应用插件补丁，Then 不覆写既有组合行。
+test('补丁不覆写宿主行或默认预设', () => {
+  assert.equal(patch.length, 1)
+  assert.deepEqual(Object.keys(patch[0]), ['insert'])
 })
 
-test('漂移守卫:与已安装 standard 预设逐行对表(缺失宿主则 skip)', (t) => {
-  if (harness === null) return t.skip('未找到 dsh 本体安装,无对照源')
-  const standardPath = join(harness, 'node_modules', '@deepseek-ai', 'dsh-web-app', 'presets', 'standard.patch.yml')
-  if (!existsSync(standardPath)) return t.skip('dsh 安装位无 standard 预设声明,无对照源')
-  const standardPatch = yamlStatic.load(readFileSync(standardPath, 'utf8'), { schema: LOCAL_SCHEMA })
-  const declared = standardPatch.filter((entry) => entry.insert !== undefined).flatMap((entry) => entry.insert).find((row) => row.id === 'preset-standard')
-  assert.ok(declared, 'standard.patch.yml 缺 preset-standard 声明')
-  const standard = flattenRows(declared.config.plugins)
-  const ours = flattenRows(ourPlugins)
-  for (const [id, row] of standard) {
-    if (id === 'tool-pwsh') {
-      assert.ok(!ours.has(id), 'standard 有 tool-pwsh 而本包预设也出现了:镜像被污染')
-      continue
-    }
-    assert.ok(ours.has(id), `standard 行 ${id} 在本包预设缺失,须对表镜像`)
-    assert.deepEqual(ours.get(id), row, `行 ${id} 与 standard 漂移,升级后按官方实文对表`)
-  }
-  for (const id of ours.keys()) {
-    assert.ok(standard.has(id), `本包预设多出 standard 没有的行 ${id}:镜像越界`)
+// Given 不同宿主平台，When 求值禁用表达式，Then Windows 启用、POSIX 停用。
+test('宿主行保持 Windows 平台门控', () => {
+  assert.equal(inserted.length, 3)
+  for (const row of inserted) {
+    const evaluate = new Function('process', `return (${row.disabled.__jsExpr})`)
+    assert.equal(evaluate({ platform: 'win32' }), false)
+    assert.equal(evaluate({ platform: 'linux' }), true)
+    assert.equal(evaluate({ platform: 'darwin' }), true)
   }
 })
 
-test('schema 同构:本地 !!js Type 与官方 entryListSchema 产物 deepEqual(缺失宿主则 skip)', (t) => {
-  if (harness === null) return t.skip('未找到 dsh 本体安装,无官方 schema 对照')
-  // harness 命中时 entryListSchema 已是官方版:loadYaml=官方路径,与 LOCAL_SCHEMA 逐文本对照。
-  // 本地同形标签的语义漂移曾以 unknown tag 形态炸穿 CI,此处固化为机器断言
-  assert.deepEqual(
-    yamlStatic.load(patchText, { schema: LOCAL_SCHEMA }),
-    loadYaml(patchText),
-    'bundle patch 双 schema 产物漂移,本地 !!js Type 须与官方 JsExpr 同构',
-  )
+// Given 插件清单，When 对账宿主依赖，Then 删除预设依赖但保留最低宿主版本。
+test('清单不再依赖预设模块，宿主门槛不变化', () => {
+  assert.equal(manifest.peerDependencies['@deepseek-ai/dsh-agent-preset'], undefined)
+  assert.equal(manifest.dsh.hostMin, '0.1.7-rc.1')
 })