@ran-sh/dsh-crew 2.1.8 → 2.2.1

package/src/workspace-lock.mjs

@@ -0,0 +1,134 @@
+// One job at a time per Crew workspace.
+//
+// A stable workspace is shared by every job that uses it, which is the point —
+// the sessions group under one directory instead of multiplying. The cost is
+// that two jobs running in it at once would corrupt each other's evidence: the
+// client only captures a candidate for `worktree` isolation, the Hub diffs the
+// whole tree before and after and would attribute a concurrent job's edits to
+// this one, and the reviewer's before/after fingerprint would see the other
+// job's writes as a mutated candidate and force `request_changes`. Nothing in
+// the runtime serialised by directory before, so this does.
+//
+// The lock lives beside the workspace, never inside it: a file in the tree would
+// show up in the very diffs it is there to keep clean.
+//
+// It fails closed. A holder that died leaves a lock behind, so an obviously
+// abandoned one (its process is gone, or it has held the lock past any plausible
+// job) is reclaimed; but a lock whose owner still looks alive is waited for and
+// then refused with `WORKSPACE_BUSY`, never taken by force. Waiting is bounded,
+// and the bound is part of the caller's attempt budget.
+
+import { mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { randomBytes } from 'node:crypto';
+
+export const WORKSPACE_BUSY = 'WORKSPACE_BUSY';
+const WORKSPACE_LOCK_SCHEMA = 1;
+
+export const DEFAULT_LOCK_WAIT_MS = 120_000;
+const DEFAULT_LOCK_POLL_MS = 500;
+// The two reasons a lock outlives its job are not the same, and they are covered
+// by different things. A holder whose process died is caught immediately by the
+// pid check below. This bound covers the other case — the process is alive but
+// the job is gone, which is what a job that ended without releasing looks like —
+// and it is only a backstop, so it wants to be as short as it can safely be.
+//
+// It must still exceed the longest a job may legitimately run, or a live job
+// would lose its own workspace: `timeout_seconds` is capped at 2h, so this is
+// that plus half an hour of margin. Six hours, the first value here, would have
+// stalled a workspace for four hours longer than any job can last.
+export const DEFAULT_LOCK_MAX_HOLD_MS = (2 * 60 + 30) * 60 * 1000;
+
+const defaultSleep = (ms) => new Promise((resolve) => { setTimeout(resolve, ms); });
+
+/** Is a process with this pid running? Unknown pids read as dead. */
+function defaultIsAlive(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    // EPERM means it exists and belongs to someone else; ESRCH means it is gone.
+    return error?.code === 'EPERM';
+  }
+}
+
+function readRecord(path) {
+  try {
+    const parsed = JSON.parse(readFileSync(path, 'utf8'));
+    return parsed && typeof parsed === 'object' ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Acquire the workspace lock, waiting up to `waitMs` for a live holder.
+ *
+ * Returns `{ ok: true, release }` or `{ ok: false, reason, error, holder }`.
+ * `release` only removes the lock this call created: after a reclaim, a stale
+ * holder waking up must not delete its successor's lock.
+ */
+export async function acquireWorkspaceLock({
+  lockPath,
+  purpose = null,
+  waitMs = DEFAULT_LOCK_WAIT_MS,
+  pollMs = DEFAULT_LOCK_POLL_MS,
+  maxHoldMs = DEFAULT_LOCK_MAX_HOLD_MS,
+  pid = process.pid,
+  now = Date.now,
+  sleep = defaultSleep,
+  isAlive = defaultIsAlive,
+} = {}) {
+  if (typeof lockPath !== 'string' || lockPath === '') {
+    return { ok: false, reason: WORKSPACE_BUSY, error: 'workspace lock requires a path' };
+  }
+  const deadline = now() + Math.max(0, waitMs);
+  const nonce = randomBytes(16).toString('hex');
+
+  for (;;) {
+    try {
+      mkdirSync(dirname(lockPath), { recursive: true });
+      writeFileSync(lockPath, `${JSON.stringify({
+        schemaVersion: WORKSPACE_LOCK_SCHEMA,
+        pid,
+        purpose,
+        nonce,
+        startedAt: now(),
+      })}\n`, { flag: 'wx' });
+      return {
+        ok: true,
+        release: () => {
+          const held = readRecord(lockPath);
+          if (held?.nonce !== nonce) return false;
+          try { rmSync(lockPath, { force: true }); return true; } catch { return false; }
+        },
+      };
+    } catch (error) {
+      if (error?.code !== 'EEXIST') {
+        return { ok: false, reason: WORKSPACE_BUSY, error: `cannot take workspace lock: ${error?.message ?? error}` };
+      }
+    }
+
+    const holder = readRecord(lockPath);
+    const startedAt = Number.isFinite(holder?.startedAt) ? holder.startedAt : null;
+    const abandoned = holder === null
+      || !isAlive(holder.pid)
+      || (startedAt !== null && now() - startedAt > maxHoldMs);
+    if (abandoned) {
+      // Reclaim and loop: the exclusive create on the next pass decides the
+      // race, so two waiters cannot both take it.
+      try { rmSync(lockPath, { force: true }); } catch { /* the retry decides */ }
+      continue;
+    }
+    if (now() >= deadline) {
+      return {
+        ok: false,
+        reason: WORKSPACE_BUSY,
+        error: `workspace is held by another job (pid ${holder.pid}${holder.purpose ? `, ${holder.purpose}` : ''})`,
+        holder,
+      };
+    }
+    await sleep(Math.min(pollMs, Math.max(1, deadline - now())));
+  }
+}

package/scripts/policy-probe.mjs

@@ -1,101 +0,0 @@
-// Functional probe of the real MCP stdio server (src/server.mjs), no DSH
-// instance and no DeepSeek credentials needed: policy rejections must happen
-// before any worker runtime is touched.
-// Run: node scripts/policy-probe.mjs
-
-import { spawn } from 'node:child_process';
-
-const child = spawn(process.execPath, ['src/server.mjs'], { stdio: ['pipe', 'pipe', 'pipe'] });
-let buffer = '';
-const pending = new Map();
-let nextId = 1;
-
-child.stdout.on('data', (d) => {
-  buffer += d.toString();
-  let idx;
-  while ((idx = buffer.indexOf('\n')) >= 0) {
-    const line = buffer.slice(0, idx);
-    buffer = buffer.slice(idx + 1);
-    if (!line.trim()) continue;
-    let msg;
-    try { msg = JSON.parse(line); } catch { continue; }
-    if (msg.id !== undefined && pending.has(msg.id)) {
-      pending.get(msg.id)(msg);
-      pending.delete(msg.id);
-    }
-  }
-});
-
-function call(method, params) {
-  return new Promise((resolve) => {
-    const id = nextId++;
-    pending.set(id, resolve);
-    child.stdin.write(JSON.stringify({ jsonrpc: '2.0', id, method, params }) + '\n');
-  });
-}
-
-const results = [];
-function check(name, cond, detail) {
-  results.push({ name, ok: !!cond, detail });
-  console.log(`${cond ? 'PASS' : 'FAIL'} ${name}${detail ? ` — ${detail}` : ''}`);
-}
-
-await call('initialize', { protocolVersion: '2025-03-26', capabilities: {}, clientInfo: { name: 'probe', version: '1' } });
-await new Promise((r) => setTimeout(r, 200));
-
-// 1. Read config: must expose the new effective policy fields.
-const cfg = await call('tools/call', { name: 'dsh_worker_config', arguments: {} });
-const cfgText = cfg.result?.content?.[0]?.text;
-let cfgJson = null;
-try { cfgJson = JSON.parse(cfgText); } catch {}
-check('config returns effective policy', !!cfgJson && typeof cfgJson.flash_state === 'string' && typeof cfgJson.pro_state === 'string' && typeof cfgJson.routing_guidance === 'string',
-  cfgJson ? `flash=${cfgJson.flash_state} pro=${cfgJson.pro_state} mode=${cfgJson.collaboration_mode}` : cfgText?.slice(0, 120));
-check('config hides API keys', cfgText !== undefined && !/api_key|sk-/.test(cfgText));
-check('config reports effective_policy + roles + legacy_source', !!cfgJson
-  && typeof cfgJson.effective_policy === 'string' && cfgJson.effective_policy.includes('mode=')
-  && Array.isArray(cfgJson.flash_roles) && cfgJson.flash_roles.length > 0
-  && Array.isArray(cfgJson.pro_roles) && cfgJson.pro_roles.length > 0
-  && typeof cfgJson.legacy_source === 'string',
-  cfgJson ? cfgJson.effective_policy : undefined);
-check('config reflects main_agent_mode', !!cfgJson && ['direct-allowed', 'coordinator-first', 'dispatcher-only'].includes(cfgJson.main_agent_mode), cfgJson?.main_agent_mode);
-
-// 2. Session clamp: flash-only + explicit pro must be refused with TIER_DISABLED.
-const clamp = await call('tools/call', { name: 'dsh_worker_config', arguments: { tier_policy: 'flash-only' } });
-check('session tier_policy clamp set', clamp.result !== undefined && !clamp.result.isError);
-
-const refusePro = await call('tools/call', { name: 'dsh_run_worker', arguments: { task: 'probe', tier: 'pro' } });
-const refuseText = refusePro.result?.content?.[0]?.text ?? '';
-check('pro refused under flash-only', /TIER_DISABLED/.test(refuseText), refuseText.slice(0, 120));
-
-// 3. subagents master switch via session enabled=false.
-const off = await call('tools/call', { name: 'dsh_worker_config', arguments: { reset: true, enabled: false } });
-check('session enabled=false set', off.result !== undefined && !off.result.isError);
-const refuseAll = await call('tools/call', { name: 'dsh_run_worker', arguments: { task: 'probe' } });
-const refuseAllText = refuseAll.result?.content?.[0]?.text ?? '';
-check('dispatch refused when disabled', /SUBAGENTS_DISABLED/.test(refuseAllText), refuseAllText.slice(0, 120));
-
-// 4. dsh_spawn_worker shares the same policy.
-const refuseSpawn = await call('tools/call', { name: 'dsh_spawn_worker', arguments: { task: 'probe' } });
-const refuseSpawnText = refuseSpawn.result?.content?.[0]?.text ?? '';
-check('spawn refused when disabled', /SUBAGENTS_DISABLED/.test(refuseSpawnText));
-
-// 5. Manual semantics: flash manual + pro auto, no explicit tier → pro is chosen, never flash.
-const manual = await call('tools/call', { name: 'dsh_worker_config', arguments: { reset: true, tier_policy: 'auto' } });
-// global config is balanced here; exercise manual via session state override:
-const manualSet = await call('tools/call', { name: 'dsh_worker_config', arguments: { collaboration_mode: 'custom', flash_state: 'manual', pro_state: 'auto', default_tier: 'flash' } });
-check('manual/custom session set', manualSet.result !== undefined && !manualSet.result.isError);
-const manualCfg = await call('tools/call', { name: 'dsh_worker_config', arguments: {} });
-const manualCfgJson = JSON.parse(manualCfg.result.content[0].text);
-check('manual tier never auto-default (effective_default_tier=pro)',
-  manualCfgJson.effective_default_tier === 'pro', `got ${manualCfgJson.effective_default_tier}`);
-check('effective states reported', manualCfgJson.flash_state === 'manual' && manualCfgJson.pro_state === 'auto');
-
-// 6. Reset back to global defaults.
-const reset = await call('tools/call', { name: 'dsh_worker_config', arguments: { reset: true } });
-check('reset restores defaults', reset.result !== undefined && !reset.result.isError);
-
-child.kill();
-await new Promise((r) => setTimeout(r, 100));
-const failed = results.filter((r) => !r.ok);
-console.log(`\n${results.length - failed.length}/${results.length} checks passed`);
-process.exit(failed.length > 0 ? 1 : 0);

package/scripts/verify-crew-ui-polish.mjs

@@ -1,145 +0,0 @@
-// Isolated browser acceptance of the shipped modules. All HTTP requests are
-// intercepted: no real Crew configuration or host browser profile is accessed.
-import assert from 'node:assert/strict';
-import { createRequire } from 'node:module';
-import { readFileSync, mkdtempSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join, dirname } from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-const require = createRequire(import.meta.url);
-const { chromium } = require(process.env.CREW_PLAYWRIGHT_MODULE || 'playwright');
-const root = dirname(dirname(fileURLToPath(import.meta.url)));
-const output = mkdtempSync(join(tmpdir(), 'crew-ui-polish-'));
-const browser = await chromium.launch({ headless: true,
-  ...(process.env.CREW_BROWSER_EXE ? { executablePath: process.env.CREW_BROWSER_EXE } : {}),
-});
-const errors = [];
-const results = [];
-const baseConfig = {
-  subagents_enabled: true, collaboration_mode: 'balanced', main_agent_mode: 'direct-allowed',
-  flash_state: 'auto', pro_state: 'auto', isolation: 'worktree', max_parallel: 16,
-  default_timeout_seconds: 1800,
-  default_tier: 'flash', default_effort: 'max', mode: 'auto',
-  vision_enabled: true, imagegen_enabled: false, vision_provider: 'example', imagegen_provider: 'example',
-  flash_model_priority: [
-    { provider: 'example-provider', model: 'long-model-name-for-responsive-layout-check' },
-    { provider: 'example-provider', model: 'second-model' },
-  ], pro_model_priority: [],
-};
-
-async function mount(surface, locale = 'zh') {
-  const page = await browser.newPage({ viewport: { width: 1000, height: 1000 } });
-  page.on('pageerror', error => errors.push(error.message));
-  let config = structuredClone(baseConfig);
-  const patches = [];
-  await page.route('**/*', async route => {
-    const request = route.request();
-    const url = new URL(request.url());
-    if (url.origin !== 'http://127.0.0.1:41790') return route.abort();
-    if (url.pathname === '/') return route.fulfill({ contentType: 'text/html', body:
-      '<!doctype html><html><head><meta charset="utf-8"><style>body{margin:0;background:#f6f7f9;color:#20252b;font-family:Arial,sans-serif}main{max-width:760px;margin:24px auto;padding:20px;background:white;border-radius:16px}@media(prefers-color-scheme:dark){body{background:#16191d;color:#e5e7eb}main{background:#20242a}}</style></head><body><main id="root"></main></body></html>' });
-    const suffix = url.pathname.replace('/_dsh/dsh-crew', '');
-    let body = { ok: true };
-    if (suffix === '/bridge-status') body = surface === 'quick' ? { ok: true, surface: 'official-bridge' } : { ok: false };
-    else if (suffix === '/runtime') body = { ok: true, service: 'dsh-crew-hub', profile: 'dsh-crew', listen_port: 3210, execution_plane: 'hub-3210', runtime_version: 'test', protocol_version: 1 };
-    else if (suffix === '/quick-config' && request.method() === 'POST') {
-      const patch = request.postDataJSON(); patches.push(patch); config = { ...config, ...patch }; body = { ok: true, config };
-    } else if (suffix === '/quick-status' || suffix === '/config') body = { ok: true, config };
-    else if (suffix === '/jobs') body = { ok: true, jobs: [] };
-    else if (suffix === '/install/status') body = { ok: true, status: { codex: { ready: true, installed: true }, claude: { ready: true, installed: true }, zcode: { ready: true, installed: true } } };
-    else if (suffix === '/model-catalog' || suffix === '/providers') body = { ok: true, providers: [], records: [] };
-    return route.fulfill({ contentType: 'application/json', body: JSON.stringify(body) });
-  });
-  await page.goto('http://127.0.0.1:41790/');
-  await page.waitForLoadState('networkidle');
-  await page.addScriptTag({ content: readFileSync(join(root, 'node_modules/react/umd/react.development.js'), 'utf8') });
-  await page.addScriptTag({ content: readFileSync(join(root, 'node_modules/react-dom/umd/react-dom.development.js'), 'utf8') });
-  await page.evaluate(locale => {
-    const ctx = {
-      on: () => () => {}, locale: { getLocale: () => ({ active: locale }) },
-      slots: { inject: (_name, callback) => callback(), register: (_meta, render) => { window.crewRoot.render(render()); return () => {}; } },
-    };
-    window.crewRoot = window.ReactDOM.createRoot(document.getElementById('root'));
-    window.__ModuleLoader__ = { load({ factory }) {
-      const jsx = (tag, props, key) => window.React.createElement(tag, { ...props, ...(key === undefined ? {} : { key }) });
-      factory(id => {
-        if (id === 'react') return window.React;
-        if (id === 'react-dom' || id === 'react-dom/client') return window.ReactDOM;
-        if (id === 'react/jsx-runtime') return { jsx, jsxs: jsx, Fragment: window.React.Fragment };
-        throw Error('Unexpected fixture dependency: ' + id);
-      }).apply(ctx);
-    } };
-  }, locale);
-  await page.addScriptTag({ content: readFileSync(join(root, surface === 'quick' ? 'official-web-bridge/lib/client.js' : 'lib/client.js'), 'utf8') });
-  try { await page.locator('.crew-panel-header').waitFor({ timeout: 10000 }); }
-  catch (error) {
-    console.error(JSON.stringify({ surface, errors, body: (await page.locator('body').innerText()).slice(0, 1600) }));
-    throw error;
-  }
-  return { page, patches };
-}
-
-try {
-  const { page, patches } = await mount('quick');
-  await page.getByRole('link', { name: '打开 3210 后台 →' }).waitFor();
-  assert.equal(await page.getByRole('link', { name: '打开 3210 后台 →' }).getAttribute('href'), 'http://127.0.0.1:3210/');
-  await page.screenshot({ path: join(output, '3080-quick.png'), fullPage: true });
-  const worker = page.locator('details.crew-quick-group').filter({ has: page.locator('summary strong', { hasText: 'Worker / Flash' }) });
-  await worker.getByRole('button', { name: '下移 long-model-name-for-responsive-layout-check' }).click();
-  await page.waitForFunction(() => document.querySelector('.crew-quick-list li .crew-quick-model-name')?.textContent === 'second-model');
-  assert.equal(patches.at(-1).flash_model_priority[0].model, 'second-model');
-  await worker.getByRole('button', { name: '从优先级移除 second-model' }).click();
-  await worker.locator('li').first().waitFor();
-  await worker.locator('.crew-quick-add > summary').click();
-  await worker.getByRole('textbox', { name: 'Worker / Flash Provider', exact: true }).fill('added-provider');
-  await worker.getByRole('textbox', { name: 'Worker / Flash 模型', exact: true }).fill('added-model');
-  await worker.getByRole('button', { name: '+ 添加模型', exact: true }).click();
-  await worker.getByText('added-model', { exact: true }).waitFor();
-  assert.equal(patches.at(-1).flash_model_priority.at(-1).model, 'added-model');
-  const reviewer = page.locator('details.crew-quick-group').filter({ has: page.locator('summary strong', { hasText: 'Reviewer / Pro' }) });
-  await reviewer.locator(':scope > summary').click();
-  await reviewer.locator('.crew-quick-add > summary').click();
-  await reviewer.getByRole('textbox', { name: 'Reviewer / Pro Provider', exact: true }).fill('review-provider');
-  await reviewer.getByRole('textbox', { name: 'Reviewer / Pro 模型', exact: true }).fill('review-model');
-  await reviewer.getByRole('button', { name: '+ 添加模型', exact: true }).click();
-  await reviewer.getByText('review-model', { exact: true }).waitFor();
-  await page.waitForFunction(() => !document.querySelector('input[type=checkbox]').disabled);
-  assert.notEqual(await reviewer.getAttribute('open'), null, 'Pro stays expanded after save rerenders');
-  const multimodal = page.locator('details.crew-quick-group').filter({ has: page.locator('summary strong', { hasText: '多模态' }) });
-  await multimodal.locator(':scope > summary').click();
-  await page.getByRole('checkbox', { name: '启用子 Agent' }).uncheck();
-  await page.waitForFunction(() => !document.querySelector('input[type=checkbox]').disabled);
-  assert.equal(patches.at(-1).subagents_enabled, false);
-  assert.notEqual(await reviewer.getAttribute('open'), null, 'Pro stays expanded after other settings change');
-  assert.notEqual(await multimodal.getAttribute('open'), null, 'Multimodal stays expanded after other settings change');
-  await worker.locator(':scope > summary').click();
-  assert.equal(await worker.getAttribute('open'), null);
-  await page.setViewportSize({ width: 420, height: 900 });
-  await worker.locator(':scope > summary').click();
-  assert.equal(await page.evaluate(() => document.documentElement.scrollWidth <= innerWidth), true);
-  await page.screenshot({ path: join(output, '3080-narrow.png'), fullPage: true });
-  await page.emulateMedia({ colorScheme: 'dark' });
-  await page.screenshot({ path: join(output, '3080-dark.png'), fullPage: true });
-  results.push('quick: reorder/remove/add/toggle/collapse; Pro and multimodal stay open across save rerenders; narrow/dark');
-  await page.close();
-
-  const { page: backend } = await mount('full');
-  const backLink = backend.getByRole('link', { name: '打开 3080 官方界面 →' });
-  assert.equal(await backLink.getAttribute('href'), 'http://127.0.0.1:3080/');
-  await backend.getByRole('button', { name: '全部折叠', exact: true }).click();
-  await backend.screenshot({ path: join(output, '3210-backend.png'), fullPage: true });
-  await backend.getByRole('button', { name: '全部展开', exact: true }).click();
-  assert.equal(await backend.locator('.crew-section-trigger[aria-expanded=false]').count(), 0);
-  await backend.getByRole('button', { name: '全部折叠', exact: true }).click();
-  await backend.setViewportSize({ width: 420, height: 900 });
-  assert.equal(await backend.evaluate(() => document.documentElement.scrollWidth <= innerWidth), true);
-  await backend.screenshot({ path: join(output, '3210-narrow.png'), fullPage: true });
-  results.push('backend: reciprocal link/expand all/collapse all/narrow');
-  await backend.close();
-  const { page: english } = await mount('quick', 'en');
-  await english.getByRole('button', { name: 'Move down long-model-name-for-responsive-layout-check' }).waitFor();
-  await english.close();
-  assert.deepEqual(errors, []);
-  console.log(JSON.stringify({ ok: true, results, consoleErrors: errors, screenshots: output }));
-} finally { await browser.close(); }

package/scripts/verify-history-ui.mjs

@@ -1,98 +0,0 @@
-// Full browser -> HTTP handler -> controller -> executor -> real TEMP files.
-// Supervisor process control is simulated; never addresses real 3080/3210.
-import assert from 'node:assert/strict';
-import { createRequire } from 'node:module';
-import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, existsSync, rmSync } from 'node:fs';
-import { join, dirname } from 'node:path';
-import { tmpdir } from 'node:os';
-import { fileURLToPath } from 'node:url';
-import { Readable } from 'node:stream';
-import { createHistoryService } from '../src/history/service.mjs';
-import { registerHistoryHttp } from '../src/history/http.mjs';
-import { runHistoryOperation } from '../src/history/operation.mjs';
-import { CREW_SESSIONS_REL } from '../src/install/crew-paths.mjs';
-
-const require = createRequire(import.meta.url);
-const { chromium } = require(process.env.CREW_PLAYWRIGHT_MODULE || 'playwright');
-const repo = dirname(dirname(fileURLToPath(import.meta.url)));
-const root = mkdtempSync(join(tmpdir(), 'crew-history-e2e-'));
-const output = mkdtempSync(join(tmpdir(), 'crew-history-ui-shots-'));
-mkdirSync(join(root, 'harness/storages'), { recursive: true });
-mkdirSync(join(root, CREW_SESSIONS_REL, 'example/session-test'), { recursive: true });
-const file = join(root, CREW_SESSIONS_REL, 'example/session-test/session.jsonl');
-writeFileSync(file, 'DISPOSABLE TEST CONVERSATION');
-writeFileSync(join(root, 'harness/storages/workspace.json'), JSON.stringify({ unit: { name: 'workspace', version: 2 }, global: { initialized: true, workspaceIds: ['test-workspace'], archivedSessionIds: [] }, tables: { workspaces: { 'test-workspace': { path: '/example/project', title: 'Disposable workspace', createdAt: '2026-01-01T00:00:00Z', updatedAt: '2026-01-01T00:00:00Z', sessionIds: ['session-test'] } } } }));
-const errors = []; let stopped = false; let operationPromise;
-const pause = ms => new Promise(resolve => setTimeout(resolve, ms));
-const service = createHistoryService({ crewRoot: root, runtimeId: 'test', agents: { list: () => [], create: async () => ({}) },
-  persistence: { supportsRawArtifacts: true, listSnapshots: async () => existsSync(file) ? [{ header: { id: 'session-test', createdAt: 1767225600000 }, revision: 'r1' }] : [], locate: () => ({ kind: 'jsonl', path: file }) },
-  launch: async id => { operationPromise = pause(200).then(() => runHistoryOperation({ crewRoot: root, id,
-    acquire: () => ({ ok: true }), release: () => ({ ok: true }), checkFence: () => service.fencedCheck(), assertStopped: () => stopped,
-    supervisor: { stopOwnedBackend: async () => { stopped = true; await pause(150); return { ok: true }; }, startOwnedBackend: async () => { await pause(150); stopped = false; return { ok: true }; } }, verifyRunning: async () => !stopped,
-  })); operationPromise.catch(error => errors.push(error.message)); },
-});
-let historyHandler;
-registerHistoryHttp({ register: route => { historyHandler = route.handler; return () => {}; } }, service);
-const browser = await chromium.launch({ headless: true, ...(process.env.CREW_BROWSER_EXE ? { executablePath: process.env.CREW_BROWSER_EXE } : {}) });
-try {
-  const page = await browser.newPage({ viewport: { width: 1100, height: 1100 } });
-  page.on('pageerror', error => errors.push(error.message));
-  page.on('dialog', dialog => dialog.accept());
-  await page.route('**/*', async route => {
-    const request = route.request(); const url = new URL(request.url());
-    if (url.origin !== 'http://127.0.0.1:41791') return route.abort();
-    if (url.pathname === '/') return route.fulfill({ contentType: 'text/html', body: '<html><head><meta charset="utf-8"></head><body style="font:14px Arial;background:#f5f6f8"><main id="root" style="padding:24px;max-width:800px;margin:auto;background:white"></main></body></html>' });
-    if (url.pathname.includes('/history/')) {
-      if (stopped) return route.abort();
-      const req = Readable.from([Buffer.from(request.postData() ?? '{}')]);
-      Object.assign(req, { url: url.pathname, method: request.method(), headers: { host: url.host, origin: url.origin }, socket: { remoteAddress: '127.0.0.1' } });
-      let status, body;
-      await historyHandler(req, { writeHead: n => { status = n; }, end: s => { body = s; } });
-      return route.fulfill({ status, contentType: 'application/json', body });
-    }
-    const suffix = url.pathname.split('/').pop(); let body = { ok: true };
-    if (suffix === 'runtime') body = { ok: true, service: 'dsh-crew-hub', profile: 'dsh-crew', listen_port: 3210 };
-    if (suffix === 'bridge-status') body = { ok: false };
-    if (suffix === 'config') body = { ok: true, config: { flash_model_priority: [], pro_model_priority: [], default_timeout_seconds: 1800 } };
-    if (suffix === 'status') body = { ok: true, status: {} };
-    return route.fulfill({ contentType: 'application/json', body: JSON.stringify(body) });
-  });
-  await page.goto('http://127.0.0.1:41791/'); await page.waitForLoadState('networkidle');
-  await page.addScriptTag({ content: readFileSync(join(repo, 'node_modules/react/umd/react.development.js'), 'utf8') });
-  await page.addScriptTag({ content: readFileSync(join(repo, 'node_modules/react-dom/umd/react-dom.development.js'), 'utf8') });
-  await page.evaluate(() => {
-    const root = window.ReactDOM.createRoot(document.getElementById('root'));
-    const ctx = { on: () => () => {}, locale: { getLocale: () => ({ active: 'zh' }) }, slots: { inject: (_n, callback) => callback(), register: (_meta, render) => { root.render(render()); return () => {}; } } };
-    window.__ModuleLoader__ = { load({ factory }) { const jsx = (tag, props, key) => window.React.createElement(tag, { ...props, ...(key === undefined ? {} : { key }) }); factory(id => {
-      if (id === 'react') return window.React;
-      if (id === 'react-dom' || id === 'react-dom/client') return window.ReactDOM;
-      if (id === 'react/jsx-runtime') return { jsx, jsxs: jsx, Fragment: window.React.Fragment };
-      throw Error('Unexpected dependency');
-    }).apply(ctx); } };
-  });
-  await page.addScriptTag({ content: readFileSync(join(repo, 'lib/client.js'), 'utf8') });
-  await page.getByText('工作区与会话清理', { exact: true }).click();
-  const preview = page.getByRole('button', { name: '预览清理范围', exact: true });
-  await preview.click();
-  await page.getByText('1 个工作区 · 1 个会话', { exact: true }).first().waitFor();
-  const confirm = page.getByRole('button', { name: '确认执行', exact: true });
-  assert.equal(await confirm.isEnabled(), false);
-  await page.getByRole('checkbox', { name: '我已确认范围，并同意短暂重启 3210' }).check();
-  await page.screenshot({ path: join(output, 'preview.png'), fullPage: true });
-  await confirm.click(); await page.getByRole('button', { name: '恢复', exact: true }).waitFor({ timeout: 15000 }); await operationPromise;
-  assert.equal(existsSync(file), false);
-  await page.getByRole('button', { name: '恢复', exact: true }).click();
-  await page.waitForFunction(() => [...document.querySelectorAll('[role=status]')].some(el => el.textContent === '已完成'));
-  await operationPromise; assert.equal(readFileSync(file, 'utf8'), 'DISPOSABLE TEST CONVERSATION');
-  await page.getByRole('combobox', { name: '操作', exact: true }).selectOption('delete');
-  await page.getByRole('combobox', { name: '时间范围', exact: true }).selectOption('before');
-  await page.getByLabel('创建时间早于', { exact: true }).fill('2027-01-01T00:00');
-  await preview.click(); await page.getByRole('checkbox', { name: '我已确认范围，并同意短暂重启 3210' }).check();
-  assert.equal(await confirm.isEnabled(), false);
-  await page.getByLabel('删除确认：请输入 DELETE', { exact: true }).fill('DELETE'); await confirm.click();
-  await page.waitForFunction(() => [...document.querySelectorAll('[role=status]')].some(el => el.textContent === '已完成'));
-  await operationPromise; assert.equal(existsSync(file), false); assert.deepEqual(service.archives(), []);
-  await page.screenshot({ path: join(output, 'completed.png'), fullPage: true });
-  assert.deepEqual(errors, []);
-  console.log(JSON.stringify({ ok: true, flows: ['archive all', 'restore', 'delete before date', 'confirmation guards', 'reconnect'], screenshots: output }));
-} finally { await browser.close(); service.dispose(); rmSync(root, { recursive: true, force: true }); }

package/scripts/verify-installer-fix.mjs

@@ -1,26 +0,0 @@
-// Live-verify the fixed installer against a fake home: the settings must
-// point at the repository itself as the marketplace root (no parent-dir
-// assumption), permission rules intact, CLI step skipped in test mode.
-import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
-import { join } from 'node:path';
-import { tmpdir } from 'node:os';
-import { installClaudeCode, uninstallClaudeCode } from '../src/install/install.mjs';
-
-const home = mkdtempSync(join(tmpdir(), 'dsh-crew-fix-test-'));
-try {
-  const r = await installClaudeCode({ home });
-  console.log('actions:', r.actions.slice(0, 3).join(' | '));
-  const s = JSON.parse(readFileSync(join(home, '.claude', 'settings.json'), 'utf8'));
-  const mp = s.extraKnownMarketplaces['dsh-crew'];
-  const cwd = process.cwd().replaceAll('\\', '/');
-  const mpPath = String(mp?.source?.path ?? '').replaceAll('\\', '/');
-  console.log('marketplace path is repo root:', mpPath === cwd, '->', mpPath);
-  console.log('permission rules:', (s.permissions?.allow ?? []).filter((x) => String(x).includes('dsh-crew')).length);
-  console.log('cli step skipped in test mode:', r.actions.some((a) => a.includes('test mode')));
-  if (mpPath !== cwd) throw new Error('marketplace not pointing at repo root');
-  const u = await uninstallClaudeCode({ home });
-  console.log('uninstall ok:', u.ok);
-} finally {
-  rmSync(home, { recursive: true, force: true });
-}
-console.log('INSTALLER FIX VERIFIED');