@xmoon76/dsh-pi-tui 0.1.5 → 0.1.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmoon76/dsh-pi-tui",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "The dsh-pi-tui bundle: a TUI surface for DeepSeek Harness profiles (dsh --profile pi-tui)",
   "license": "MIT",
   "author": "XMoon <xmoonox@gmail.com>",
@@ -76,7 +76,6 @@
     "@deepseek-ai/dsh-sandbox-policy": "^0.1.0-rc.6",
     "@deepseek-ai/dsh-session": "^0.1.0-rc.6",
     "@deepseek-ai/dsh-session-persistence": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-session-query": "^0.1.0-rc.6",
     "@deepseek-ai/dsh-session-title": "^0.1.0-rc.6",
     "@deepseek-ai/dsh-settings": "^0.1.0-rc.6",
     "@deepseek-ai/dsh-shell": "^0.1.0-rc.6",

package/scripts/naming-gate.mjs

@@ -9,7 +9,7 @@
  * @module naming-gate
  */
 
-import { existsSync, readFileSync } from 'node:fs'
+import { existsSync, readFileSync, readdirSync } from 'node:fs'
 import { spawnSync } from 'node:child_process'
 import { join, dirname } from 'node:path'
 import { fileURLToPath } from 'node:url'
@@ -93,6 +93,48 @@ for (const workflow of ['ci.yml', 'release.yml']) {
     !text.includes('@xmoon76-dsh-pi-tui-*.tgz') && text.includes('xmoon76-dsh-pi-tui-*.tgz'))
 }
 
+// 8. The bundle's dsh dependency contract is declared in ONE place and the
+//    gate enforces it against the actual source (AGENTS.md rule 7): every
+//    `@deepseek-ai/*` package imported by `src/` (value OR type) must be a
+//    peerDependency, and every peerDependency must be imported by `src/`.
+//    A peer that only appears in a comment or a test is not a runtime
+//    contract; an import with no peer breaks the in-box resolution rule and
+//    can duplicate `@deepseek-ai` copies in the profile (first tool call
+//    crashes). `dsh-session-query` was removed by this rule: the picker
+//    types it structurally (src/sessions.ts) and reads the service off the
+//    live context, so it never needed the package.
+const bundleSrc = join(ROOT, 'packages', 'dsh-pi-tui', 'src')
+const srcFiles = (() => {
+  const out = []
+  const walk = (dir) => {
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+      const path = join(dir, entry.name)
+      if (entry.isDirectory()) walk(path)
+      else if (entry.name.endsWith('.ts') && !entry.name.endsWith('.d.ts')) out.push(path)
+    }
+  }
+  walk(bundleSrc)
+  return out
+})()
+const srcImports = new Set()
+for (const file of srcFiles) {
+  const text = readFileSync(file, 'utf8')
+  for (const match of text.matchAll(/from\s+['"]@deepseek-ai\/([^'"\/]+)/g)) {
+    srcImports.add(`@deepseek-ai/${match[1]}`)
+  }
+  // Runtime service access via ctx.get('name') must stay structural: a
+  // package that is ONLY read this way (never imported) has no place in
+  // the peer list — same rule as dsh-session-query.
+}
+const peers = new Set(Object.keys(bundlePkg.peerDependencies ?? {}))
+for (const imported of [...srcImports].sort()) {
+  check(`peer declared for src import ${imported}`, peers.has(imported), peers.has(imported) ? '' : 'missing from peerDependencies')
+}
+for (const peer of [...peers].sort()) {
+  if (!peer.startsWith('@deepseek-ai/')) continue // chalk etc. are regular deps
+  check(`peer ${peer} is imported by src/`, srcImports.has(peer), srcImports.has(peer) ? '' : 'no import in src/ (dead peer)')
+}
+
 for (const line of checks) console.log(line)
 if (failures.length > 0) {
   console.error(`\nnaming-gate FAILED (${failures.length}):`)

package/scripts/repair-core.mjs

@@ -33,7 +33,7 @@
  * @module repair-core
  */
 
-import { constants } from 'node:zlib'
+import { constants, zstdDecompressSync } from 'node:zlib'
 
 /** Zstandard frame magic, little-endian (`\x28\xB5\x2F\xFD`). */
 export const ZSTD_MAGIC = 0xfd2fb528
@@ -247,6 +247,40 @@ export function compressLog(text, zstdCompressSync) {
     if (chunkBytes >= 16 * 1024) flushChunk()
   }
   flushChunk()
+  // Node's zstdCompressSync can emit a trailing EMPTY frame after the content
+  // frame (observed when the compressed output lands on a 16 KiB boundary,
+  // e.g. exactly 16384 bytes): the returned buffer is then two concatenated
+  // frames, the second a valid zero-content frame. The dsh reader tolerates
+  // it, but every non-first frame must end on a JSONL record boundary, so
+  // the layout gate flags it. The harness writer uses the async compressor,
+  // which never emits it. Strip such empty frames from each compressed
+  // output so a repaired artifact always matches the harness layout exactly.
+  if (frames.length > 0) {
+    const stripped = []
+    for (const frame of frames) {
+      const { frames: inner } = scanZstdFrames(frame)
+      if (inner.length === 1) {
+        stripped.push(frame)
+        continue
+      }
+      for (let i = 0; i < inner.length; i += 1) {
+        const segment = frame.subarray(inner[i].start, inner[i].end)
+        try {
+          if (zstdDecompressSync(segment).length === 0) continue // empty frame
+        } catch {
+          // A frame that fails to decompress is content — keep it so the
+          // post-write verify can report it instead of silently dropping it.
+        }
+        stripped.push(segment)
+      }
+    }
+    // Always use the stripped result: stripping is identity for single-frame
+    // chunks, and a chunk that expands to N segments with an empty frame
+    // dropped can end up with the same element count as before (e.g. one
+    // two-frame chunk -> one kept segment), so a length comparison would
+    // wrongly fall through to the unstripped concat below.
+    return Buffer.concat(stripped)
+  }
   return frames.length > 0 ? Buffer.concat(frames) : zstdCompressSync(Buffer.alloc(0), CHECKSUMMED_OPTIONS)
 }