@pixelbyte-software/pixcode 1.51.8 → 1.52.0

package/scripts/smoke/update-issue-progress.mjs

@@ -1,69 +1,69 @@
-#!/usr/bin/env node
-
-import assert from 'node:assert/strict';
-import { existsSync, readFileSync } from 'node:fs';
-
-const parserPath = 'src/components/version-upgrade/utils/releaseIssueProgress.ts';
-const componentPath = 'src/components/version-upgrade/view/ReleaseIssueProgress.tsx';
-const modalPath = 'src/components/version-upgrade/view/VersionUpgradeModal.tsx';
-const trackingPath = 'RELEASE_TRACKING_v1.37.md';
-
-assert.ok(existsSync(parserPath), 'Release issue progress parser should exist.');
-assert.ok(existsSync(componentPath), 'Release issue progress component should exist.');
-assert.ok(existsSync(trackingPath), 'v1.37 release tracking document should exist.');
-
-const parserSource = readFileSync(parserPath, 'utf8');
-assert.ok(
-  parserSource.includes('RELEASE_ISSUE_PROGRESS_MARKER'),
-  'Parser should expose a stable release-note marker for issue progress blocks.',
-);
-assert.ok(
-  parserSource.includes('extractIssueProgress'),
-  'Parser should export extractIssueProgress for release body parsing.',
-);
-assert.ok(
-  parserSource.includes('DEFAULT_V137_ISSUE_PROGRESS'),
-  'Parser should provide a v1.37 fallback issue map until the release body is published.',
-);
-assert.ok(
-  parserSource.includes('\\[([xX ~-])\\]') || parserSource.includes('[x]'),
-  'Parser should understand checked issue/task rows.',
-);
-
-const componentSource = readFileSync(componentPath, 'utf8');
-assert.ok(
-  componentSource.includes('extractIssueProgress'),
-  'Component should render parsed issue progress from release notes.',
-);
-assert.ok(
-  componentSource.includes('completedCount'),
-  'Component should summarize completed issue progress.',
-);
-assert.ok(
-  componentSource.includes("version?.startsWith('1.37')") || componentSource.includes('version.startsWith'),
-  'Component should only use the v1.37 fallback for v1.37 release notes.',
-);
-
-const modalSource = readFileSync(modalPath, 'utf8');
-assert.ok(
-  modalSource.includes('ReleaseIssueProgress'),
-  'Version modal should include release issue progress.',
-);
-assert.ok(
-  modalSource.includes('releaseInfo.body'),
-  'Version modal should pass release body text to the issue progress view.',
-);
-
-const trackingSource = readFileSync(trackingPath, 'utf8');
-for (const issueNumber of [6, 7, 8, 9, 10, 11, 12, 13, 14]) {
-  assert.ok(
-    trackingSource.includes(`#${issueNumber}`),
-    `Release tracking should mention issue #${issueNumber}.`,
-  );
-}
-assert.ok(
-  trackingSource.includes('<!-- pixcode:issue-progress -->'),
-  'Release tracking should include the issue-progress marker block used in release notes.',
-);
-
-console.log('update issue progress smoke passed');
+#!/usr/bin/env node
+
+import assert from 'node:assert/strict';
+import { existsSync, readFileSync } from 'node:fs';
+
+const parserPath = 'src/components/version-upgrade/utils/releaseIssueProgress.ts';
+const componentPath = 'src/components/version-upgrade/view/ReleaseIssueProgress.tsx';
+const modalPath = 'src/components/version-upgrade/view/VersionUpgradeModal.tsx';
+const trackingPath = 'RELEASE_TRACKING_v1.37.md';
+
+assert.ok(existsSync(parserPath), 'Release issue progress parser should exist.');
+assert.ok(existsSync(componentPath), 'Release issue progress component should exist.');
+assert.ok(existsSync(trackingPath), 'v1.37 release tracking document should exist.');
+
+const parserSource = readFileSync(parserPath, 'utf8');
+assert.ok(
+  parserSource.includes('RELEASE_ISSUE_PROGRESS_MARKER'),
+  'Parser should expose a stable release-note marker for issue progress blocks.',
+);
+assert.ok(
+  parserSource.includes('extractIssueProgress'),
+  'Parser should export extractIssueProgress for release body parsing.',
+);
+assert.ok(
+  parserSource.includes('DEFAULT_V137_ISSUE_PROGRESS'),
+  'Parser should provide a v1.37 fallback issue map until the release body is published.',
+);
+assert.ok(
+  parserSource.includes('\\[([xX ~-])\\]') || parserSource.includes('[x]'),
+  'Parser should understand checked issue/task rows.',
+);
+
+const componentSource = readFileSync(componentPath, 'utf8');
+assert.ok(
+  componentSource.includes('extractIssueProgress'),
+  'Component should render parsed issue progress from release notes.',
+);
+assert.ok(
+  componentSource.includes('completedCount'),
+  'Component should summarize completed issue progress.',
+);
+assert.ok(
+  componentSource.includes("version?.startsWith('1.37')") || componentSource.includes('version.startsWith'),
+  'Component should only use the v1.37 fallback for v1.37 release notes.',
+);
+
+const modalSource = readFileSync(modalPath, 'utf8');
+assert.ok(
+  modalSource.includes('ReleaseIssueProgress'),
+  'Version modal should include release issue progress.',
+);
+assert.ok(
+  modalSource.includes('releaseInfo.body'),
+  'Version modal should pass release body text to the issue progress view.',
+);
+
+const trackingSource = readFileSync(trackingPath, 'utf8');
+for (const issueNumber of [6, 7, 8, 9, 10, 11, 12, 13, 14]) {
+  assert.ok(
+    trackingSource.includes(`#${issueNumber}`),
+    `Release tracking should mention issue #${issueNumber}.`,
+  );
+}
+assert.ok(
+  trackingSource.includes('<!-- pixcode:issue-progress -->'),
+  'Release tracking should include the issue-progress marker block used in release notes.',
+);
+
+console.log('update issue progress smoke passed');

package/scripts/smoke/update-ux.mjs

@@ -1,55 +1,55 @@
-#!/usr/bin/env node
-
-import { readFileSync } from 'node:fs';
-
-const checks = [
-  {
-    name: 'update frequency defaults to 30 minutes',
-    file: 'src/utils/updateCheckPreferences.ts',
-    test: (source) => (
-      source.includes("export type UpdateCheckFrequency = 'off' | '30m' |")
-      && source.includes("{ value: '30m'")
-      && /DEFAULT_UPDATE_CHECK_PREFERENCES[\s\S]*frequency:\s*'30m'/.test(source)
-    ),
-  },
-  {
-    name: 'sidebar opens the version modal when an update is detected',
-    file: 'src/components/sidebar/view/Sidebar.tsx',
-    test: (source) => (
-      source.includes('PIXCODE_UPDATE_AVAILABLE_EVENT')
-      && source.includes('setShowVersionModal(true)')
-      && source.includes('updateAvailable')
-    ),
-  },
-  {
-    name: 'version modal supports release-notes-only opens',
-    file: 'src/components/version-upgrade/view/VersionUpgradeModal.tsx',
-    test: (source) => (
-      source.includes('isUpdateAvailable')
-      && source.includes('versionUpdate.releaseNotesTitle')
-      && source.includes('showUpdateActions')
-    ),
-  },
-  {
-    name: 'desktop splash makes startup update work visible',
-    file: 'desktop/electron/main.cjs',
-    test: (source) => (
-      source.includes('Checking for updates before launch')
-      && source.includes('Applying Pixcode update')
-    ),
-  },
-];
-
-const failures = [];
-
-for (const check of checks) {
-  const source = readFileSync(check.file, 'utf8');
-  if (!check.test(source)) failures.push(check.name);
-}
-
-if (failures.length > 0) {
-  console.error(`Update UX smoke failed:\n- ${failures.join('\n- ')}`);
-  process.exit(1);
-}
-
-console.log('update UX smoke passed');
+#!/usr/bin/env node
+
+import { readFileSync } from 'node:fs';
+
+const checks = [
+  {
+    name: 'update frequency defaults to 30 minutes',
+    file: 'src/utils/updateCheckPreferences.ts',
+    test: (source) => (
+      source.includes("export type UpdateCheckFrequency = 'off' | '30m' |")
+      && source.includes("{ value: '30m'")
+      && /DEFAULT_UPDATE_CHECK_PREFERENCES[\s\S]*frequency:\s*'30m'/.test(source)
+    ),
+  },
+  {
+    name: 'sidebar opens the version modal when an update is detected',
+    file: 'src/components/sidebar/view/Sidebar.tsx',
+    test: (source) => (
+      source.includes('PIXCODE_UPDATE_AVAILABLE_EVENT')
+      && source.includes('setShowVersionModal(true)')
+      && source.includes('updateAvailable')
+    ),
+  },
+  {
+    name: 'version modal supports release-notes-only opens',
+    file: 'src/components/version-upgrade/view/VersionUpgradeModal.tsx',
+    test: (source) => (
+      source.includes('isUpdateAvailable')
+      && source.includes('versionUpdate.releaseNotesTitle')
+      && source.includes('showUpdateActions')
+    ),
+  },
+  {
+    name: 'desktop splash makes startup update work visible',
+    file: 'desktop/electron/main.cjs',
+    test: (source) => (
+      source.includes('Checking for updates before launch')
+      && source.includes('Applying Pixcode update')
+    ),
+  },
+];
+
+const failures = [];
+
+for (const check of checks) {
+  const source = readFileSync(check.file, 'utf8');
+  if (!check.test(source)) failures.push(check.name);
+}
+
+if (failures.length > 0) {
+  console.error(`Update UX smoke failed:\n- ${failures.join('\n- ')}`);
+  process.exit(1);
+}
+
+console.log('update UX smoke passed');

package/scripts/smoke/v138-completion.mjs

@@ -1,132 +1,132 @@
-#!/usr/bin/env node
-
-import assert from 'node:assert/strict';
-import { mkdirSync, readFileSync, rmSync } from 'node:fs';
-import path from 'node:path';
-
-const runtimeDir = path.resolve('.pixcode-dev', 'smoke-v138-completion');
-mkdirSync(runtimeDir, { recursive: true });
-process.env.DATABASE_PATH = path.join(runtimeDir, 'auth.db');
-
-const requiredGroups = [
-  'auth',
-  'projects',
-  'sessions',
-  'providers',
-  'orchestration',
-  'taskmaster',
-  'notifications',
-  'files',
-  'git',
-  'settings',
-  'updates',
-  'diagnostics',
-  'remote',
-  'telegram',
-  'plugins',
-];
-
-try {
-  const {
-    getPublicRemoteConnectionConfig,
-    normalizeRemoteConnectionConfig,
-    saveRemoteConnectionConfig,
-  } = await import('../../server/services/remote-connection.js');
-  const { buildPublicApiManifest } = await import('../../server/services/public-api-manifest.js');
-  const { collectDiagnostics } = await import('../../server/services/diagnostics.js');
-
-  const normalizedLocal = normalizeRemoteConnectionConfig({ mode: 'local' });
-  assert.equal(normalizedLocal.mode, 'local');
-  assert.equal(normalizedLocal.remoteUrl, null);
-
-  const normalizedRemote = normalizeRemoteConnectionConfig({
-    mode: 'remote',
-    remoteUrl: 'https://pixcode.example.com/api/',
-    apiKey: 'px_remote_secret_value',
-  });
-  assert.equal(normalizedRemote.mode, 'remote');
-  assert.equal(normalizedRemote.remoteUrl, 'https://pixcode.example.com/api');
-  assert.equal(normalizedRemote.apiKey, 'px_remote_secret_value');
-
-  saveRemoteConnectionConfig(normalizedRemote);
-  const publicRemote = getPublicRemoteConnectionConfig();
-  assert.equal(publicRemote.mode, 'remote');
-  assert.equal(publicRemote.remoteUrl, 'https://pixcode.example.com/api');
-  assert.equal(publicRemote.apiKeyPresent, true);
-  assert.equal(Object.hasOwn(publicRemote, 'apiKey'), false);
-
-  const manifest = buildPublicApiManifest({ baseUrl: 'http://127.0.0.1:3001' });
-  assert.deepEqual(
-    requiredGroups.filter((group) => !manifest.groups.some((item) => item.id === group)),
-    [],
-    'public API manifest should expose every stable automation group',
-  );
-  assert.ok(manifest.apiKey.prefix === 'px_');
-  assert.ok(manifest.apiKey.scopes.includes('taskmaster:write'));
-  assert.ok(manifest.examples.some((example) => example.curl.includes('X-API-Key: px_')));
-
-  const diagnostics = collectDiagnostics({
-    now: new Date('2026-05-10T00:00:00.000Z'),
-    env: {
-      NODE_ENV: 'test',
-      GITHUB_TOKEN: 'ghp_super_secret_value',
-      NPM_TOKEN: 'npm_super_secret_value',
-      TELEGRAM_BOT_TOKEN: 'telegram_super_secret_value',
-    },
-    activeRuns: [{ id: 'run-1', status: 'running', token: 'never-print-me' }],
-    recentErrors: [{ source: 'provider', message: 'bad token ghp_super_secret_value' }],
-    providerHealth: {
-      claude: { status: 'available', auth: 'configured', checkedAt: '2026-05-10T00:00:00.000Z' },
-      opencode: { status: 'missing', auth: 'unknown', checkedAt: '2026-05-10T00:00:00.000Z' },
-    },
-    cache: { providerHealthUpdatedAt: '2026-05-10T00:00:00.000Z' },
-    wsClientCount: 2,
-  });
-  const diagnosticsRaw = JSON.stringify(diagnostics);
-  assert.ok(!diagnosticsRaw.includes('ghp_super_secret_value'));
-  assert.ok(!diagnosticsRaw.includes('never-print-me'));
-  assert.ok(diagnostics.providerHealth.claude.status === 'available');
-  assert.ok(diagnostics.activeRuns[0].token === '[redacted]');
-  assert.ok(diagnostics.manualRefresh.available);
-  assert.ok(diagnostics.bundle.copyable);
-
-  const providerRoutes = readFileSync('server/modules/providers/provider.routes.ts', 'utf8');
-  assert.ok(providerRoutes.includes("'/plugin-state'"), 'provider routes should expose aggregate plugin state');
-  assert.ok(providerRoutes.includes("'/plugin-state/:provider'"), 'provider routes should expose per-provider plugin state');
-  assert.ok(providerRoutes.includes("config-files/:fileId/backup'"), 'provider config route should support safe backups');
-  assert.ok(providerRoutes.includes("config-files/:fileId/validate'"), 'provider config route should validate before writes');
-  assert.ok(providerRoutes.includes('redactProviderConfigPreview'), 'provider config previews should redact secrets');
-
-  const taskmasterRoutes = readFileSync('server/routes/taskmaster.js', 'utf8');
-  assert.ok(taskmasterRoutes.includes("router.get('/queue/:projectName'"), 'Taskmaster should expose queue summary');
-  assert.ok(taskmasterRoutes.includes("router.get('/task/:projectName/:taskId'"), 'Taskmaster should expose task detail');
-  for (const field of ['fallbackProvider', 'permissionMode', 'workerSlot']) {
-    assert.ok(taskmasterRoutes.includes(field), `Taskmaster dispatch should preserve ${field}`);
-  }
-
-  const telegramControl = readFileSync('server/services/telegram/control-center.js', 'utf8');
-  assert.ok(telegramControl.includes("'/sessions'"), 'Telegram should expose active sessions command');
-  assert.ok(telegramControl.includes("'/newchat'"), 'Telegram should expose new chat command');
-  assert.ok(telegramControl.includes("progressMode: 'errors'") || telegramControl.includes("progressMode === 'errors'"), 'Telegram should support errors-only progress');
-
-  const setupForm = readFileSync('src/components/auth/view/SetupForm.tsx', 'utf8');
-  assert.ok(setupForm.includes('Use this computer directly'));
-  assert.ok(setupForm.includes('Connect to a remote Pixcode server'));
-  assert.ok(setupForm.includes('/api/auth/connection-mode'));
-
-  const settingsSidebar = readFileSync('src/components/settings/view/SettingsSidebar.tsx', 'utf8');
-  const settingsTypes = readFileSync('src/components/settings/types/types.ts', 'utf8');
-  const settings = readFileSync('src/components/settings/view/Settings.tsx', 'utf8');
-  assert.ok(settingsSidebar.includes('mainTabs.diagnostics'));
-  assert.ok(settingsTypes.includes("'diagnostics'"));
-  assert.ok(settings.includes('DiagnosticsSettingsTab'));
-
-  const releaseTracking = readFileSync('RELEASE_TRACKING_v1.38.md', 'utf8');
-  for (const issue of ['#15', '#16', '#17', '#18', '#19', '#21']) {
-    assert.ok(releaseTracking.includes(`- [x] ${issue}`), `${issue} should be marked complete`);
-  }
-} finally {
-  rmSync(runtimeDir, { recursive: true, force: true });
-}
-
-console.log('v1.38 completion smoke passed');
+#!/usr/bin/env node
+
+import assert from 'node:assert/strict';
+import { mkdirSync, readFileSync, rmSync } from 'node:fs';
+import path from 'node:path';
+
+const runtimeDir = path.resolve('.pixcode-dev', 'smoke-v138-completion');
+mkdirSync(runtimeDir, { recursive: true });
+process.env.DATABASE_PATH = path.join(runtimeDir, 'auth.db');
+
+const requiredGroups = [
+  'auth',
+  'projects',
+  'sessions',
+  'providers',
+  'orchestration',
+  'taskmaster',
+  'notifications',
+  'files',
+  'git',
+  'settings',
+  'updates',
+  'diagnostics',
+  'remote',
+  'telegram',
+  'plugins',
+];
+
+try {
+  const {
+    getPublicRemoteConnectionConfig,
+    normalizeRemoteConnectionConfig,
+    saveRemoteConnectionConfig,
+  } = await import('../../server/services/remote-connection.js');
+  const { buildPublicApiManifest } = await import('../../server/services/public-api-manifest.js');
+  const { collectDiagnostics } = await import('../../server/services/diagnostics.js');
+
+  const normalizedLocal = normalizeRemoteConnectionConfig({ mode: 'local' });
+  assert.equal(normalizedLocal.mode, 'local');
+  assert.equal(normalizedLocal.remoteUrl, null);
+
+  const normalizedRemote = normalizeRemoteConnectionConfig({
+    mode: 'remote',
+    remoteUrl: 'https://pixcode.example.com/api/',
+    apiKey: 'px_remote_secret_value',
+  });
+  assert.equal(normalizedRemote.mode, 'remote');
+  assert.equal(normalizedRemote.remoteUrl, 'https://pixcode.example.com/api');
+  assert.equal(normalizedRemote.apiKey, 'px_remote_secret_value');
+
+  saveRemoteConnectionConfig(normalizedRemote);
+  const publicRemote = getPublicRemoteConnectionConfig();
+  assert.equal(publicRemote.mode, 'remote');
+  assert.equal(publicRemote.remoteUrl, 'https://pixcode.example.com/api');
+  assert.equal(publicRemote.apiKeyPresent, true);
+  assert.equal(Object.hasOwn(publicRemote, 'apiKey'), false);
+
+  const manifest = buildPublicApiManifest({ baseUrl: 'http://127.0.0.1:3001' });
+  assert.deepEqual(
+    requiredGroups.filter((group) => !manifest.groups.some((item) => item.id === group)),
+    [],
+    'public API manifest should expose every stable automation group',
+  );
+  assert.ok(manifest.apiKey.prefix === 'px_');
+  assert.ok(manifest.apiKey.scopes.includes('taskmaster:write'));
+  assert.ok(manifest.examples.some((example) => example.curl.includes('X-API-Key: px_')));
+
+  const diagnostics = collectDiagnostics({
+    now: new Date('2026-05-10T00:00:00.000Z'),
+    env: {
+      NODE_ENV: 'test',
+      GITHUB_TOKEN: 'ghp_super_secret_value',
+      NPM_TOKEN: 'npm_super_secret_value',
+      TELEGRAM_BOT_TOKEN: 'telegram_super_secret_value',
+    },
+    activeRuns: [{ id: 'run-1', status: 'running', token: 'never-print-me' }],
+    recentErrors: [{ source: 'provider', message: 'bad token ghp_super_secret_value' }],
+    providerHealth: {
+      claude: { status: 'available', auth: 'configured', checkedAt: '2026-05-10T00:00:00.000Z' },
+      opencode: { status: 'missing', auth: 'unknown', checkedAt: '2026-05-10T00:00:00.000Z' },
+    },
+    cache: { providerHealthUpdatedAt: '2026-05-10T00:00:00.000Z' },
+    wsClientCount: 2,
+  });
+  const diagnosticsRaw = JSON.stringify(diagnostics);
+  assert.ok(!diagnosticsRaw.includes('ghp_super_secret_value'));
+  assert.ok(!diagnosticsRaw.includes('never-print-me'));
+  assert.ok(diagnostics.providerHealth.claude.status === 'available');
+  assert.ok(diagnostics.activeRuns[0].token === '[redacted]');
+  assert.ok(diagnostics.manualRefresh.available);
+  assert.ok(diagnostics.bundle.copyable);
+
+  const providerRoutes = readFileSync('server/modules/providers/provider.routes.ts', 'utf8');
+  assert.ok(providerRoutes.includes("'/plugin-state'"), 'provider routes should expose aggregate plugin state');
+  assert.ok(providerRoutes.includes("'/plugin-state/:provider'"), 'provider routes should expose per-provider plugin state');
+  assert.ok(providerRoutes.includes("config-files/:fileId/backup'"), 'provider config route should support safe backups');
+  assert.ok(providerRoutes.includes("config-files/:fileId/validate'"), 'provider config route should validate before writes');
+  assert.ok(providerRoutes.includes('redactProviderConfigPreview'), 'provider config previews should redact secrets');
+
+  const taskmasterRoutes = readFileSync('server/routes/taskmaster.js', 'utf8');
+  assert.ok(taskmasterRoutes.includes("router.get('/queue/:projectName'"), 'Taskmaster should expose queue summary');
+  assert.ok(taskmasterRoutes.includes("router.get('/task/:projectName/:taskId'"), 'Taskmaster should expose task detail');
+  for (const field of ['fallbackProvider', 'permissionMode', 'workerSlot']) {
+    assert.ok(taskmasterRoutes.includes(field), `Taskmaster dispatch should preserve ${field}`);
+  }
+
+  const telegramControl = readFileSync('server/services/telegram/control-center.js', 'utf8');
+  assert.ok(telegramControl.includes("'/sessions'"), 'Telegram should expose active sessions command');
+  assert.ok(telegramControl.includes("'/newchat'"), 'Telegram should expose new chat command');
+  assert.ok(telegramControl.includes("progressMode: 'errors'") || telegramControl.includes("progressMode === 'errors'"), 'Telegram should support errors-only progress');
+
+  const setupForm = readFileSync('src/components/auth/view/SetupForm.tsx', 'utf8');
+  assert.ok(setupForm.includes('Use this computer directly'));
+  assert.ok(setupForm.includes('Connect to a remote Pixcode server'));
+  assert.ok(setupForm.includes('/api/auth/connection-mode'));
+
+  const settingsSidebar = readFileSync('src/components/settings/view/SettingsSidebar.tsx', 'utf8');
+  const settingsTypes = readFileSync('src/components/settings/types/types.ts', 'utf8');
+  const settings = readFileSync('src/components/settings/view/Settings.tsx', 'utf8');
+  assert.ok(settingsSidebar.includes('mainTabs.diagnostics'));
+  assert.ok(settingsTypes.includes("'diagnostics'"));
+  assert.ok(settings.includes('DiagnosticsSettingsTab'));
+
+  const releaseTracking = readFileSync('RELEASE_TRACKING_v1.38.md', 'utf8');
+  for (const issue of ['#15', '#16', '#17', '#18', '#19', '#21']) {
+    assert.ok(releaseTracking.includes(`- [x] ${issue}`), `${issue} should be marked complete`);
+  }
+} finally {
+  rmSync(runtimeDir, { recursive: true, force: true });
+}
+
+console.log('v1.38 completion smoke passed');

package/scripts/smoke/v138-desktop-release-hardening.mjs

@@ -1,69 +1,69 @@
-#!/usr/bin/env node
-import fs from 'node:fs';
-
-function readText(path) {
-  return fs.readFileSync(path, 'utf8');
-}
-
-function readJson(path) {
-  return JSON.parse(readText(path));
-}
-
-function assertIncludes(path, patterns) {
-  const content = readText(path);
-  for (const pattern of patterns) {
-    if (!content.includes(pattern)) {
-      throw new Error(`${path} is missing required release-hardening text: ${pattern}`);
-    }
-  }
-}
-
-const rootPackage = readJson('package.json');
-const desktopPackage = readJson('desktop/package.json');
-const bundledPixcodeVersion = desktopPackage.dependencies?.['@pixelbyte-software/pixcode'];
-
-if (desktopPackage.version !== rootPackage.version) {
-  throw new Error(`desktop package version ${desktopPackage.version} does not match root ${rootPackage.version}`);
-}
-
-if (bundledPixcodeVersion !== rootPackage.version) {
-  throw new Error(`desktop bundled pixcode version ${bundledPixcodeVersion} does not match root ${rootPackage.version}`);
-}
-
-assertIncludes('README.md', [
-  'macOS Gatekeeper: "Pixcode is damaged"',
-  'Fix Gatekeeper.command',
-  'xattr -dr com.apple.quarantine',
-  'unsigned',
-]);
-
-assertIncludes('README.tr.md', [
-  'macOS Gatekeeper: "Pixcode hasar görmüş"',
-  'Fix Gatekeeper.command',
-  'xattr -dr com.apple.quarantine',
-  'imzalı/notarize değil',
-]);
-
-assertIncludes('desktop/README.md', [
-  'macOS Gatekeeper fix',
-  'Fix Gatekeeper.command',
-  'xattr -dr com.apple.quarantine',
-  'unsigned',
-]);
-
-assertIncludes('desktop/electron-builder.yml', [
-  'Pixcode-Setup-${version}.${ext}',
-  'Pixcode-${version}-${arch}.${ext}',
-  'target: AppImage',
-  'build-resources/Fix Gatekeeper.command',
-  'identity: null',
-]);
-
-assertIncludes('desktop/build-resources/Fix Gatekeeper.command', [
-  'Pixcode Gatekeeper Fix',
-  'xattr -cr "$APP_PATH"',
-  'com.apple.quarantine',
-  'open "$APP_PATH"',
-]);
-
-console.log('v1.38 desktop release hardening smoke passed');
+#!/usr/bin/env node
+import fs from 'node:fs';
+
+function readText(path) {
+  return fs.readFileSync(path, 'utf8');
+}
+
+function readJson(path) {
+  return JSON.parse(readText(path));
+}
+
+function assertIncludes(path, patterns) {
+  const content = readText(path);
+  for (const pattern of patterns) {
+    if (!content.includes(pattern)) {
+      throw new Error(`${path} is missing required release-hardening text: ${pattern}`);
+    }
+  }
+}
+
+const rootPackage = readJson('package.json');
+const desktopPackage = readJson('desktop/package.json');
+const bundledPixcodeVersion = desktopPackage.dependencies?.['@pixelbyte-software/pixcode'];
+
+if (desktopPackage.version !== rootPackage.version) {
+  throw new Error(`desktop package version ${desktopPackage.version} does not match root ${rootPackage.version}`);
+}
+
+if (bundledPixcodeVersion !== rootPackage.version) {
+  throw new Error(`desktop bundled pixcode version ${bundledPixcodeVersion} does not match root ${rootPackage.version}`);
+}
+
+assertIncludes('README.md', [
+  'macOS Gatekeeper: "Pixcode is damaged"',
+  'Fix Gatekeeper.command',
+  'xattr -dr com.apple.quarantine',
+  'unsigned',
+]);
+
+assertIncludes('README.tr.md', [
+  'macOS Gatekeeper: "Pixcode hasar görmüş"',
+  'Fix Gatekeeper.command',
+  'xattr -dr com.apple.quarantine',
+  'imzalı/notarize değil',
+]);
+
+assertIncludes('desktop/README.md', [
+  'macOS Gatekeeper fix',
+  'Fix Gatekeeper.command',
+  'xattr -dr com.apple.quarantine',
+  'unsigned',
+]);
+
+assertIncludes('desktop/electron-builder.yml', [
+  'Pixcode-Setup-${version}.${ext}',
+  'Pixcode-${version}-${arch}.${ext}',
+  'target: AppImage',
+  'build-resources/Fix Gatekeeper.command',
+  'identity: null',
+]);
+
+assertIncludes('desktop/build-resources/Fix Gatekeeper.command', [
+  'Pixcode Gatekeeper Fix',
+  'xattr -cr "$APP_PATH"',
+  'com.apple.quarantine',
+  'open "$APP_PATH"',
+]);
+
+console.log('v1.38 desktop release hardening smoke passed');