@wenaixi/cfbridge 0.1.0

package/scripts/check.js

@@ -0,0 +1,255 @@
+// 仓库配置与安全检查（零副作用）。
+//
+// v0.3.0 调整：
+// 1. 主入口从 agent.cordis.yml 切到 cordis.patch.yml。
+// 2. 新增 bundle manifest 断言（dsh.bundle.patch、files[]）。
+// 3. 反转 web profile 污染断言：现在允许 disabled 覆写与全局 `mcp-cloudflare`
+//    行（来自 cfbridge bundle），但禁止用户手写重复启用；旧时代的 mcp-cloudflare
+//    残留仍应被清掉。
+// 4. 增加 deprecated/ 旧 preset 文件归档检查。
+//
+// 使用：npm run check
+
+const fs = require('fs')
+const path = require('path')
+const { execSync } = require('child_process')
+
+const ROOT = path.resolve(__dirname, '..')
+
+const checks = []
+function check(name, ok, detail = '') { checks.push({ name, ok, detail }) }
+
+function readJson(p) { try { return JSON.parse(fs.readFileSync(p, 'utf8')) } catch { return null } }
+function readText(p) { try { return fs.readFileSync(p, 'utf8') } catch { return '' } }
+function fileExists(p) { return fs.existsSync(p) }
+
+function hasTokenLeak(text) {
+  const patterns = [
+    /cfat_[A-Za-z0-9]{16,}/,
+    /cfut_[A-Za-z0-9]{16,}/,
+    /cfoat_[A-Za-z0-9]{16,}/,
+    /sk-[A-Za-z0-9-]{16,}/,
+    /Bearer\s+[A-Za-z0-9_-]{40,}/,
+    /gh[pousr]_[A-Za-z0-9]{30,}/,
+    /AKIA[0-9A-Z]{16}/,
+    /-----BEGIN [A-Z ]*PRIVATE KEY-----/,
+    /AIza[0-9A-Za-z_-]{35}/,
+  ]
+  return patterns.some((re) => re.test(text))
+}
+
+// === 1. package.json 元数据 + dsh.bundle ===
+const pkg = readJson(path.join(ROOT, 'package.json'))
+if (pkg) {
+  check('package name is @wenaixi/cfbridge', pkg.name === '@wenaixi/cfbridge', `got: ${pkg.name}`)
+  check('package version is 0.1.0', pkg.version === '0.1.0', `got: ${pkg.version}`)
+  check('package is not private', pkg.private !== true, pkg.private ? 'package.json must not be private for npm publish' : '')
+  check('package publishConfig.access is public', pkg.publishConfig?.access === 'public', `got: ${pkg.publishConfig?.access}`)
+  check('package repository points to Wenaixi/dsh-cfbridge', /github\.com\/Wenaixi\/dsh-cfbridge(\.git)?$/i.test(pkg.repository?.url || ''), `got: ${pkg.repository?.url}`)
+  check('package author is Wenaixi', /Wenaixi/.test(pkg.author || ''), `got: ${pkg.author}`)
+  check('package license is MIT', pkg.license === 'MIT', `got: ${pkg.license}`)
+  check('package declares dsh.bundle.patch', !!pkg.dsh?.bundle?.patch)
+  if (pkg.dsh?.bundle?.patch) {
+    const abs = path.resolve(ROOT, pkg.dsh.bundle.patch)
+    check('dsh.bundle.patch target file exists', fileExists(abs), abs)
+  }
+  const files = Array.isArray(pkg.files) ? pkg.files : []
+  for (const entry of ['cordis.patch.yml', 'skills/', 'scripts/', 'README.md', 'LICENSE']) {
+    check(`package.files[] includes ${entry}`, files.includes(entry))
+  }
+  for (const s of ['install:bundle', 'uninstall:bundle', 'validate:bundle', 'migrate:from-preset', 'check', 'test']) {
+    check(`package has ${s} script`, !!pkg.scripts?.[s])
+  }
+} else {
+  check('package.json readable', false)
+}
+
+// === 2. Wrangler 安装 ===
+const wranglerPkg = readJson(path.join(ROOT, 'node_modules', 'wrangler', 'package.json'))
+if (wranglerPkg) {
+  const major = parseInt(String(wranglerPkg.version).split('.')[0], 10)
+  check('Wrangler is pinned to major version 4', major === 4, `got: ${wranglerPkg.version}`)
+} else {
+  check('local Wrangler is installed', false, 'run npm ci first')
+}
+
+// === 3. cordis.patch.yml（v0.3.0 主入口） ===
+const patchText = readText(path.join(ROOT, 'cordis.patch.yml'))
+check('cordis.patch.yml exists', fileExists(path.join(ROOT, 'cordis.patch.yml')))
+if (patchText) {
+  check('cordis.patch.yml uses DSH MCP client', patchText.includes('@deepseek-ai/dsh-mcp-client'))
+  check('cordis.patch.yml targets Cloudflare MCP', patchText.includes('mcp.cloudflare.com/mcp'))
+  check('cordis.patch.yml reads token from environment', patchText.includes('process.env.CLOUDFLARE_API_TOKEN'))
+  check('cordis.patch.yml has no literal Cloudflare token', !hasTokenLeak(patchText))
+  check('cordis.patch.yml has mcp-cloudflare id', /^\s*-\s+id:\s*mcp-cloudflare\b/m.test(patchText))
+  check('cordis.patch.yml uses !!js Authorization template',
+    /Authorization:\s*!!js\s+'`Bearer \$\{process\.env\.CLOUDFLARE_API_TOKEN\}`'/.test(patchText))
+  check('cordis.patch.yml keeps failOnStartupError: false',
+    /failOnStartupError:\s*false\b/.test(patchText))
+  check('cordis.patch.yml has cfbridge-skill id', /^\s*-\s+id:\s*cfbridge-skill\b/m.test(patchText))
+  check('cordis.patch.yml cfbridge-skill references src/cfbridge-skill.js',
+    /cfbridge-skill\.js/.test(patchText))
+
+  // 不应再注入 agent 栈行（plan §4.1）；重复注入会与 host 冲突。
+  const banned = ['persona', 'agent-instructions', 'tool-bash', 'tool-pwsh', 'tool-fs', 'skill-filesystem', 'tool-skill', 'planning', 'tool-goal', 'tool-web']
+  for (const k of banned) {
+    const re = new RegExp(`^\\s*-\\s+id:\\s*${k}\\b`, 'm')
+    if (re.test(patchText)) check(`cordis.patch.yml does NOT redeclare ${k}`, false, 'host composition already provides this row')
+  }
+  check('cordis.patch.yml does not redeclare agent-stack rows', true, 'banned keys absent or already failed individually')
+}
+// 运行时 Skill 插件
+const runtimeSkillJs = readText(path.join(ROOT, 'src', 'cfbridge-skill.js'))
+check('src/cfbridge-skill.js exists', fileExists(path.join(ROOT, 'src', 'cfbridge-skill.js')))
+if (runtimeSkillJs) {
+  check('src/cfbridge-skill.js injects skills', /inject\s*=\s*\['skills'\]/.test(runtimeSkillJs))
+  check('src/cfbridge-skill.js registers via ctx.skills.register', /ctx\.skills\.register/.test(runtimeSkillJs))
+}
+
+// === 4. Skill 文件 ===
+const skillMd = readText(path.join(ROOT, 'skills', 'cfbridge', 'SKILL.md'))
+check('SKILL.md exists', fileExists(path.join(ROOT, 'skills', 'cfbridge', 'SKILL.md')))
+if (skillMd) {
+  check('SKILL.md has title', /^#\s+cfbridge\b/m.test(skillMd))
+  check('SKILL.md has no token-like content', !hasTokenLeak(skillMd))
+  check('SKILL.md mentions global bundle trigger', /全局|安装 cfbridge bundle|install:bundle/.test(skillMd))
+}
+
+// === 5. 关键脚本 ===
+const SCRIPTS = [
+  'install-bundle.js',
+  'uninstall-bundle.js',
+  'validate-bundle.js',
+  'migrate-from-preset.js',
+  'dump-config.js',
+  'check.js',
+  'test.js',
+  'wrangler.js',
+  'test-wrangler.js',
+  // 旧 preset 脚本保留为 shim
+  'install-preset.js',
+  'uninstall-preset.js',
+  'validate-preset.js',
+]
+for (const s of SCRIPTS) {
+  check(`scripts/${s} exists`, fileExists(path.join(ROOT, 'scripts', s)))
+}
+
+// 旧 preset shim 必须打印 deprecation
+for (const s of ['install-preset.js', 'uninstall-preset.js', 'validate-preset.js']) {
+  const t = readText(path.join(ROOT, 'scripts', s))
+  check(`scripts/${s} is marked deprecated`, /DEPRECATED|deprecated/i.test(t))
+}
+
+// === 6. gitignore ===
+const gitignore = readText(path.join(ROOT, '.gitignore'))
+check('.env is ignored', /^\.env$/m.test(gitignore) || /^\.env\b/m.test(gitignore))
+check('.env.example IS tracked', /^\!\.env\.example$/m.test(gitignore))
+check('PEM files are ignored', /\.pem$/m.test(gitignore))
+check('secrets/credentials directories are ignored', /secrets\/|credentials\//.test(gitignore))
+check('node_modules is ignored', /^node_modules\/?$/m.test(gitignore) || /^node_modules\b/m.test(gitignore))
+check('package-lock.json IS tracked', !/^package-lock\.json$/m.test(gitignore))
+check('.wrangler directory is ignored', /\.wrangler/.test(gitignore))
+check('.dsh/ is ignored', /\.dsh\//.test(gitignore))
+check('deprecated dynamic plugin residue ignored',
+  /cfbridge-host-/.test(gitignore))
+check('IDE/temp files ignored', /\.vscode|\.idea|\.swp|\.DS_Store/.test(gitignore))
+
+// === 7. 所有跟踪文件 token 扫描 ===
+function listTracked() {
+  try {
+    return execSync('git ls-files', { cwd: ROOT, encoding: 'utf8' }).trim().split('\n').filter(Boolean)
+  } catch { return [] }
+}
+const tracked = listTracked()
+let tokenLeak = null
+for (const f of tracked) {
+  const p = path.join(ROOT, f)
+  if (!fs.existsSync(p)) continue
+  if (hasTokenLeak(readText(p))) { tokenLeak = f; break }
+}
+check('no tracked file contains token-like content', !tokenLeak, tokenLeak ? `found in ${tokenLeak}` : '')
+
+// === 8. web profile 状态（v0.3.0 翻转断言） ===
+const dshHome = process.env.DSH_HOME || path.join(process.env.USERPROFILE || process.env.HOME || '', '.dsh')
+const webProfile = path.join(dshHome, 'profiles', 'web')
+const webPatch = path.join(webProfile, 'cordis.patch.yml')
+const webManifest = readJson(path.join(webProfile, 'package.json'))
+const bundleInstalledInProfile = !!(
+  webManifest?.dependencies?.['@wenaixi/cfbridge']
+  && (webManifest?.dsh?.profile?.bundles || []).includes('@wenaixi/cfbridge')
+)
+
+if (fs.existsSync(webPatch)) {
+  const text = readText(webPatch)
+  if (bundleInstalledInProfile) {
+    // bundle 已装 → web patch 中不应再出现 mcp-cloudflare（防止工具重复注册）
+    const dupes = text.split('\n').filter((l) => /^\s*-\s+id:\s*mcp-cloudflare\b/.test(l))
+    check('web patch does not redeclare mcp-cloudflare when bundle is installed', dupes.length === 0,
+      dupes.length ? `${dupes.length} duplicate mcp-cloudflare row(s) in web patch` : '')
+    // 允许 disabled 覆写行
+    const disabledOverride = /^\s*-\s+id:\s*mcp-cloudflare\b[\s\S]*?disabled:\s*true\b/m.test(text)
+    check('web patch may optionally carry disabled: true mcp-cloudflare override (informational)', true,
+      disabledOverride ? 'disabled override present' : 'no override (tools active)')
+  } else {
+    // bundle 未装 → web patch 中不应有 cloudflare 残留（v0.2.0 时代的污染）
+    const cloudflareResidue = /cloudflare|mcp-cloudflare|CLOUDFLARE_API_TOKEN|cfbridge/i.test(text)
+    check('web patch has no cloudflare residue (bundle not installed)', !cloudflareResidue,
+      cloudflareResidue ? 'found cloudflare/cfbridge related lines' : '')
+  }
+} else {
+  check('web profile cordis.patch.yml does not exist (or web profile not initialized)', bundleInstalledInProfile ? false : true,
+    bundleInstalledInProfile ? 'expected patch file when bundle is installed' : 'no web patch to inspect')
+}
+
+// === 9. 系统预设目录未被污染 ===
+const SYSTEM_DSH = 'C:\\Users\\Administrator\\AppData\\Roaming\\npm\\node_modules\\@deepseek-ai\\dsh'
+const systemSkills = path.join(SYSTEM_DSH, 'config', 'agent-presets')
+let systemPolluted = null
+if (fs.existsSync(systemSkills)) {
+  for (const sub of ['standard', 'code', 'cordis', 'minimal']) {
+    const skillsDir = path.join(systemSkills, sub, 'skills')
+    if (!fs.existsSync(skillsDir)) continue
+    const stack = [skillsDir]
+    while (stack.length) {
+      const dir = stack.pop()
+      for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+        if (entry.isDirectory()) stack.push(path.join(dir, entry.name))
+        else if (entry.name.toLowerCase().includes('cfbridge')) { systemPolluted = `${sub}: ${path.join(dir, entry.name)}`; break }
+      }
+      if (systemPolluted) break
+    }
+    if (systemPolluted) break
+  }
+}
+check('DSH system presets have no cfbridge', !systemPolluted, systemPolluted || '')
+
+// === 10. legacy v0.2.0 preset 状态 ===
+const legacyPreset = path.join(dshHome, '.agent-presets', 'cfbridge')
+if (fs.existsSync(legacyPreset)) {
+  check('legacy v0.2.0 preset directory noted', true, `still present at ${legacyPreset}; run \`npm run migrate:from-preset -- --yes\` to clean`)
+} else {
+  check('legacy v0.2.0 preset absent', true, 'no agent-presets/cfbridge/ residue')
+}
+
+// === 11. Git remote ===
+let hasRemote = false
+let remoteText = ''
+try { remoteText = String(execSync('git remote -v', { cwd: ROOT, encoding: 'utf8' })).trim(); hasRemote = remoteText.length > 0 } catch {}
+const remoteOk = !hasRemote || /github\.com[:/]Wenaixi\/dsh-cfbridge(\.git)?/i.test(remoteText)
+check('git remote points to Wenaixi/dsh-cfbridge (or not yet configured)', remoteOk,
+  hasRemote ? remoteText.split('\n')[0] : 'no remote yet (ok before publish)')
+
+// === 12. deprecated/ 归档 ===
+check('deprecated/preset/preset.yml archived', fileExists(path.join(ROOT, 'deprecated', 'preset', 'preset.yml')))
+check('deprecated/preset/agent.cordis.yml archived', fileExists(path.join(ROOT, 'deprecated', 'preset', 'agent.cordis.yml')))
+check('deprecated/preset/README.md exists', fileExists(path.join(ROOT, 'deprecated', 'preset', 'README.md')))
+
+// === 输出 ===
+let pass = 0
+for (const c of checks) {
+  if (c.ok) { console.log(`PASS  ${c.name}${c.detail ? ` — ${c.detail}` : ''}`); pass++ }
+  else console.log(`FAIL  ${c.name}${c.detail ? ` — ${c.detail}` : ''}`)
+}
+console.log(`\n${pass === checks.length ? 'PASS' : 'FAIL'}: ${pass}/${checks.length} checks`)
+process.exit(pass === checks.length ? 0 : 1)

package/scripts/dump-config.js

@@ -0,0 +1,71 @@
+// 封装 `dsh --profile <name> --dump-config` 并过滤出 cfbridge 相关层。
+//
+// 用于本机快速验证 cfbridge bundle 是否被 DSH 加载，以及是否包含 mcp-cloudflare 行。
+//
+// 使用：
+//   npm run dump:config
+//   npm run dump:config -- --profile tui
+//   npm run dump:config -- --raw          # 不过滤，原样输出
+
+const { spawnSync } = require('child_process')
+
+function parseArgs(argv) {
+  const opts = { profile: 'web', raw: false }
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i]
+    if (a === '--profile' || a === '-p') opts.profile = argv[++i]
+    else if (a.startsWith('--profile=')) opts.profile = a.slice('--profile='.length)
+    else if (a === '--raw') opts.raw = true
+    else if (a === '--help' || a === '-h') { printHelp(); process.exit(0) }
+  }
+  return opts
+}
+
+function printHelp() {
+  console.log(`Usage: dump-config.js [--profile <name>] [--raw]
+
+Options:
+  --profile <name>   Profile to dump (default: web).
+  --raw              Print the full --dump-config output without filtering.
+  --help, -h         Show this message.`)
+}
+
+function main() {
+  const opts = parseArgs(process.argv.slice(2))
+  const r = spawnSync('dsh', ['--profile', opts.profile, '--dump-config'], {
+    stdio: 'pipe',
+    shell: process.platform === 'win32',
+  })
+  const out = String(r.stdout || '')
+  const err = String(r.stderr || '')
+  if (r.status !== 0) {
+    if (err) process.stderr.write(err + '\n')
+    process.exit(r.status ?? 1)
+  }
+
+  if (opts.raw) {
+    process.stdout.write(out)
+    return
+  }
+
+  const lines = out.split('\n')
+  const cfbridgeStart = lines.findIndex((l) => /==\s*@wenaixi\/cfbridge\b/.test(l))
+  if (cfbridgeStart < 0) {
+    console.error('cfbridge layer not found. Run `npm run install:bundle` first.')
+    process.exit(1)
+  }
+  // 找到下一个 "# ==" 标记或 EOF
+  let end = lines.length
+  for (let i = cfbridgeStart + 1; i < lines.length; i++) {
+    if (/^# ==\s/.test(lines[i])) { end = i; break }
+  }
+  const slice = lines.slice(cfbridgeStart, end).join('\n')
+  process.stdout.write(slice + '\n')
+}
+
+try {
+  main()
+} catch (e) {
+  console.error(e.stack || e.message)
+  process.exit(1)
+}

package/scripts/install-bundle.js

@@ -0,0 +1,160 @@
+// 一键安装 cfbridge v0.3.0 Bundle 到指定 DSH profile。
+//
+// 流程：
+// 1. 解析参数（默认 profile=web，可通过 --profile <name> 覆盖）。
+// 2. 校验本机有 dsh 与 pnpm。
+// 3. 调用 `dsh plugin --profile <name> add <绝对路径>`：DSH plugin 转发器
+//    自动 reconcile dsh.profile.bundles，把本 bundle append 到末尾。
+// 4. 跑 `dsh --profile <name> --dump-config` 验证层出现
+//    `# == @wenaixi/cfbridge` 且含 mcp-cloudflare / cfbridge-skill 两行。
+// 5. 若发现旧软链 $DSH_HOME/skills/cfbridge 指向本 bundle 的 skills 目录，
+//    清理之（v0.3.0 之前版本残留；当前版本已改用运行时 Skill 注册）。
+//
+// 使用：
+//   npm run install:bundle                # 默认 web profile
+//   npm run install:bundle -- --profile tui
+
+const fs = require('fs')
+const path = require('path')
+const { spawnSync } = require('child_process')
+
+const ROOT = path.resolve(__dirname, '..')
+const PKG = JSON.parse(fs.readFileSync(path.join(ROOT, 'package.json'), 'utf8'))
+const DSH_HOME = process.env.DSH_HOME || path.join(process.env.USERPROFILE || process.env.HOME || '', '.dsh')
+
+function log(level, msg) {
+  const prefix = { info: 'INFO', ok: 'OK  ', warn: 'WARN', err: 'ERR ' }[level] || 'INFO'
+  console.log(`[${prefix}] ${msg}`)
+}
+
+function parseArgs(argv) {
+  const opts = { profile: 'web' }
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i]
+    if (a === '--profile' || a === '-p') {
+      opts.profile = argv[++i]
+    } else if (a.startsWith('--profile=')) {
+      opts.profile = a.slice('--profile='.length)
+    } else if (a === '--help' || a === '-h') {
+      printHelp()
+      process.exit(0)
+    } else {
+      log('warn', `Unknown argument ignored: ${a}`)
+    }
+  }
+  return opts
+}
+
+function printHelp() {
+  console.log(`Usage: install-bundle.js [--profile <name>]
+
+Options:
+  --profile <name>   Target DSH profile (default: web).
+  --help, -h         Show this message.`)
+}
+
+function run(cmd, args, opts = {}) {
+  return spawnSync(cmd, args, { stdio: 'inherit', shell: process.platform === 'win32', ...opts })
+}
+
+function runCapture(cmd, args, opts = {}) {
+  return spawnSync(cmd, args, { stdio: 'pipe', shell: process.platform === 'win32', ...opts })
+}
+
+function checkPrereqs() {
+  const dsh = runCapture('dsh', ['--version'])
+  if (dsh.status !== 0) {
+    log('err', 'dsh CLI not found on PATH. Install DeepSeek Harness first.')
+    process.exit(1)
+  }
+  const version = String(dsh.stdout || '').trim().split('\n').pop()
+  log('ok', `dsh detected: ${version || 'unknown version'}`)
+
+  const pnpm = runCapture('pnpm', ['--version'])
+  if (pnpm.status !== 0) {
+    log('err', 'pnpm not found on PATH. dsh plugin forwards to pnpm; install pnpm first.')
+    process.exit(1)
+  }
+  log('ok', `pnpm detected: ${String(pnpm.stdout || '').trim()}`)
+}
+
+function profileDir(name) {
+  return path.join(DSH_HOME, 'profiles', name)
+}
+
+function cleanupLegacySymlink() {
+  const link = path.join(DSH_HOME, 'skills', 'cfbridge')
+  try {
+    const stat = fs.lstatSync(link)
+    if (!stat.isSymbolicLink() && !stat.isDirectory()) return
+    const raw = stat.isSymbolicLink() ? fs.readlinkSync(link) : ''
+    const pointsToBundle =
+      stat.isDirectory() ||
+      (raw && String(raw).includes('cfbridge') && String(raw).includes('skills'))
+    if (!pointsToBundle) return
+    fs.rmSync(link, { recursive: true, force: true })
+    log('ok', `Cleaned legacy skill link: ${link}`)
+  } catch (e) {
+    if (e.code !== 'ENOENT') log('warn', `Could not inspect legacy skill link at ${link}: ${e.message}`)
+  }
+}
+
+function dumpConfig(profile) {
+  log('info', `Verifying composed config for profile "${profile}"…`)
+  const r = runCapture('dsh', ['--profile', profile, '--dump-config'])
+  const out = String(r.stdout || '')
+  const err = String(r.stderr || '')
+  if (r.status !== 0) {
+    log('err', `dsh --dump-config failed (exit ${r.status}).`)
+    if (err) process.stderr.write(err + '\n')
+    process.exit(r.status ?? 1)
+  }
+  if (!/==\s*@wenaixi\/cfbridge\b/.test(out)) {
+    log('err', 'cfbridge layer not found in --dump-config output.')
+    log('info', '--- dump-config ---')
+    process.stdout.write(out)
+    log('info', '--- end ---')
+    process.exit(1)
+  }
+  log('ok', 'cfbridge layer present in composed profile tree.')
+  const mcpLine = out.split('\n').find((l) => /id:\s*mcp-cloudflare\b/.test(l))
+  if (mcpLine) log('ok', `Found bundle row: ${mcpLine.trim()}`)
+  const skillLine = out.split('\n').find((l) => /id:\s*cfbridge-skill\b/.test(l))
+  if (skillLine) log('ok', `Found bundle row: ${skillLine.trim()}`)
+  else log('warn', 'cfbridge-skill row not found in dump-config; bundle may be outdated. Run `npm install` or verify cordis.patch.yml.')
+}
+
+function main() {
+  const opts = parseArgs(process.argv.slice(2))
+  log('info', `Source bundle: ${ROOT} (${PKG.name}@${PKG.version})`)
+  log('info', `DSH home: ${DSH_HOME}`)
+  log('info', `Target profile: ${opts.profile}`)
+
+  checkPrereqs()
+
+  const profDir = profileDir(opts.profile)
+  fs.mkdirSync(profDir, { recursive: true })
+
+  log('info', `Running: dsh plugin --profile ${opts.profile} add ${ROOT}`)
+  const r = run('dsh', ['plugin', '--profile', opts.profile, 'add', ROOT])
+  if (r.status !== 0) {
+    log('err', `dsh plugin add failed (exit ${r.status}).`)
+    process.exit(r.status ?? 1)
+  }
+
+  cleanupLegacySymlink()
+  dumpConfig(opts.profile)
+
+  log('ok', 'Install complete.')
+  log('info', 'Next:')
+  log('info', `  1. Restart DSH if it was running: dsh --profile ${opts.profile}`)
+  log('info', '  2. Open any new session; the model should see mcp__cloudflare__* and the cfbridge skill.')
+  log('info', `  3. To uninstall later: npm run uninstall:bundle -- --profile ${opts.profile}`)
+}
+
+try {
+  main()
+} catch (e) {
+  log('err', e.stack || e.message)
+  process.exit(1)
+}

package/scripts/install-preset.js

@@ -0,0 +1,19 @@
+// cfbridge v0.3.0 起 bundle 形态取代 agent preset。
+// 本脚本保留为 deprecated shim，仅打印警告并退出非零以引导用户走新路径。
+//
+// 旧形态：
+//   复制 preset.yml / agent.cordis.yml / skills/ 到 ~/.dsh/.agent-presets/cfbridge/
+//   之后在 DSH 新会话选择器中选「Cloudflare 模式」才能挂载。
+//
+// 新形态（v0.3.0，推荐）：
+//   npm run install:bundle
+//   装完所有会话全局可见；不需要选模式。
+//
+// 仍想暂时使用旧 preset 形态？请直接从 git history 拉取 v0.2.0 标签并按其 README 操作。
+
+const log = (msg) => console.log(`[WARN] ${msg}`)
+log('install:preset is deprecated since v0.3.0 (cfbridge is now a DSH bundle).')
+log('Use `npm run install:bundle` to install globally for the web profile.')
+log('For other profiles: `npm run install:bundle -- --profile <name>`.')
+log('This shim does not modify your DSH profile.')
+process.exit(1)

package/scripts/migrate-from-preset.js

@@ -0,0 +1,110 @@
+// 检测并清理 v0.2.0 时代的 Agent Preset 残留（~/.dsh/.agent-presets/cfbridge/）。
+//
+// 使用：
+//   npm run migrate:from-preset            # 仅检测，打印提示
+//   npm run migrate:from-preset -- --yes   # 直接删除
+//
+// 删除是单向不可逆；脚本默认要求显式 --yes 才执行。
+
+const fs = require('fs')
+const path = require('path')
+
+const DSH_HOME = process.env.DSH_HOME || path.join(process.env.USERPROFILE || process.env.HOME || '', '.dsh')
+const LEGACY = path.join(DSH_HOME, '.agent-presets', 'cfbridge')
+
+function log(level, msg) {
+  const prefix = { info: 'INFO', ok: 'OK  ', warn: 'WARN', err: 'ERR ' }[level] || 'INFO'
+  console.log(`[${prefix}] ${msg}`)
+}
+
+function parseArgs(argv) {
+  const opts = { yes: false, profile: 'web' }
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i]
+    if (a === '--yes' || a === '-y') opts.yes = true
+    else if (a === '--profile' || a === '-p') opts.profile = argv[++i]
+    else if (a === '--help' || a === '-h') { printHelp(); process.exit(0) }
+    else log('warn', `Unknown argument ignored: ${a}`)
+  }
+  return opts
+}
+
+function printHelp() {
+  console.log(`Usage: migrate-from-preset.js [--yes] [--profile <name>]
+
+Options:
+  --yes, -y          Delete the legacy preset directory without prompting.
+  --profile <name>   Profile to verify post-cleanup (default: web).
+  --help, -h         Show this message.`)
+}
+
+function listFiles(dir) {
+  const out = []
+  if (!fs.existsSync(dir)) return out
+  const stack = [dir]
+  while (stack.length) {
+    const cur = stack.pop()
+    for (const entry of fs.readdirSync(cur, { withFileTypes: true })) {
+      const p = path.join(cur, entry.name)
+      if (entry.isDirectory()) stack.push(p)
+      else if (entry.isFile()) out.push(p)
+    }
+  }
+  return out
+}
+
+function main() {
+  const opts = parseArgs(process.argv.slice(2))
+  log('info', `DSH home: ${DSH_HOME}`)
+  log('info', `Legacy v0.2.0 preset directory: ${LEGACY}`)
+
+  if (!fs.existsSync(LEGACY)) {
+    log('ok', 'No legacy preset directory found. Nothing to migrate.')
+    return
+  }
+
+  const files = listFiles(LEGACY)
+  log('warn', `Found ${files.length} file(s) inside legacy preset directory.`)
+  for (const f of files.slice(0, 20)) console.log(`       ${f}`)
+  if (files.length > 20) console.log(`       …and ${files.length - 20} more`)
+
+  // 与 web patch 层共存可能造成 mcp 工具重复注册；建议清理。
+  log('info', 'Why clean it? In v0.3.0 the Cloudflare tools are registered globally via the bundle layer;')
+  log('info', 'leaving the v0.2.0 preset can cause duplicate `mcp__cloudflare__*` tool names. The new')
+  log('info', 'behavioral model (plan §5.2) recommends NOT coexisting. Cleaning also avoids the old')
+  log('info', 'agent-plane rows from showing up in the preset picker.')
+
+  if (!opts.yes) {
+    if (process.env.CI === 'true' || process.env.NONINTERACTIVE === 'true') {
+      log('info', 'Non-interactive environment detected; will not delete without --yes.')
+      return
+    }
+    const rl = require('readline').createInterface({ input: process.stdin, output: process.stdout })
+    rl.question(`Delete ${LEGACY}? [y/N] `, (answer) => {
+      rl.close()
+      if (/^y(es)?$/i.test(String(answer).trim())) doDelete()
+      else log('info', 'Aborted by user. Re-run with --yes to delete without prompt.')
+    })
+    return
+  }
+
+  doDelete()
+}
+
+function doDelete() {
+  try {
+    fs.rmSync(LEGACY, { recursive: true, force: true })
+    log('ok', `Removed legacy preset: ${LEGACY}`)
+    log('info', 'Next: restart DSH and pick a non-Cloudflare preset (or stay in default mode).')
+  } catch (e) {
+    log('err', `Failed to remove ${LEGACY}: ${e.message}`)
+    process.exit(1)
+  }
+}
+
+try {
+  main()
+} catch (e) {
+  log('err', e.stack || e.message)
+  process.exit(1)
+}

package/scripts/test-wrangler.js

@@ -0,0 +1,58 @@
+// Wrangler CLI 只读验证套件。
+// 仅调用只读命令，不修改任何 Cloudflare 资源。
+// 每个测试独立执行，失败不阻断其它测试。
+
+const { spawnSync } = require('child_process')
+const path = require('path')
+
+const ROOT = path.resolve(__dirname, '..')
+const WRANGLER = path.join(__dirname, 'wrangler.js')
+
+const TESTS = [
+  { name: 'wrangler --version', args: ['--version'], expectInStdout: /\d+\.\d+\.\d+/ },
+  { name: 'wrangler whoami', args: ['whoami'], expectInStdout: /Account/ },
+  { name: 'wrangler d1 list --json', args: ['d1', 'list', '--json'], expectValidJson: true },
+  { name: 'wrangler pages project list --json', args: ['pages', 'project', 'list', '--json'], expectValidJson: true },
+]
+
+function runTest(test) {
+  const result = spawnSync(process.execPath, [WRANGLER, ...test.args], {
+    cwd: ROOT,
+    encoding: 'utf8',
+    env: process.env,
+  })
+  const stdout = result.stdout || ''
+  const stderr = result.stderr || ''
+  const ok = result.status === 0
+
+  let detail = ok ? 'PASS' : `FAIL (exit ${result.status})`
+  if (test.expectInStdout && !test.expectInStdout.test(stdout)) {
+    return { ok: false, name: test.name, detail: 'stdout did not match expected pattern' }
+  }
+  if (test.expectValidJson) {
+    try {
+      JSON.parse(stdout)
+    } catch (e) {
+      return { ok: false, name: test.name, detail: `invalid JSON: ${e.message}` }
+    }
+  }
+
+  return { ok, name: test.name, detail }
+}
+
+function main() {
+  console.log('Wrangler CLI 只读验证')
+  console.log('─'.repeat(50))
+
+  let passed = 0
+  for (const test of TESTS) {
+    const r = runTest(test)
+    console.log(`${r.ok ? 'PASS' : 'FAIL'}  ${r.name}  ${r.ok ? '' : `— ${r.detail}`}`)
+    if (r.ok) passed++
+  }
+  console.log('─'.repeat(50))
+  console.log(`${passed}/${TESTS.length} passed`)
+  process.exit(passed === TESTS.length ? 0 : 1)
+}
+
+main()