@xmoon76/dsh-pi-tui 0.1.8 → 0.2.0

package/dist/theme-registry-CjbtRmhd.d.mts

@@ -0,0 +1 @@
+import { EventEmitter } from "events";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmoon76/dsh-pi-tui",
-  "version": "0.1.8",
+  "version": "0.2.0",
   "description": "The dsh-pi-tui bundle: a TUI surface for DeepSeek Harness profiles (dsh --profile pi-tui)",
   "license": "MIT",
   "author": "XMoon <xmoonox@gmail.com>",
@@ -33,6 +33,22 @@
       "types": "./dist/startup.d.mts",
       "default": "./dist/startup.mjs"
     },
+    "./extensions": {
+      "types": "./dist/extensions.d.mts",
+      "default": "./dist/extensions.mjs"
+    },
+    "./extensions/advanced": {
+      "types": "./dist/extension/advanced.d.mts",
+      "default": "./dist/extension/advanced.mjs"
+    },
+    "./extensions/unstable": {
+      "types": "./dist/extension/unstable.d.mts",
+      "default": "./dist/extension/unstable.mjs"
+    },
+    "./builtins": {
+      "types": "./dist/builtins.d.mts",
+      "default": "./dist/builtins.mjs"
+    },
     "./cordis.patch.yml": "./cordis.patch.yml",
     "./package.json": "./package.json"
   },
@@ -61,67 +77,71 @@
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@deepseek-ai/dsh-agent": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-agent-default-model": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-cmdline": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-credentials": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-goal": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-jobs": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm-retry": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-permission-presets": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-plan-mode": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-session-persistence": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-session-title": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-shell": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-skill": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-subagent": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-token-meter": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-tool-workflow": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-tools": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-user-approval": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-user-questions": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-agent": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-agent-default-model": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-agent-presets": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-cmdline": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-commands": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-credentials": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-goal": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-jobs": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-llm": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-llm-retry": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-permission-presets": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-plan-mode": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-sandbox-policy": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-session": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-session-persistence": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-session-title": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-settings": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-shell": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-skill": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-subagent": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-token-meter": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-tool-workflow": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-tools": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-user-approval": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-user-questions": "^0.1.0-rc.8",
     "@deepseek-ai/schemastery": "^3.18.1"
   },
   "devDependencies": {
     "@xmoon76/pi-tui": "^0.84.3",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@deepseek-ai/dsh-agent": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-agent-default-model": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-user-approval": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-agent": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-agent-default-model": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-llm": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-session": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-user-approval": "^0.1.0-rc.8",
     "@deepseek-ai/schemastery": "^3.18.1",
     "@xterm/headless": "5.5.0",
     "@types/node": "^22.0.0",
     "typescript": "^5.9.0",
     "tsdown": "0.22.0",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-token-meter": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-skill": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-plan-mode": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-session-persistence": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-user-questions": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-subagent": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-goal": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-tools": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-tool-workflow": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm-retry": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-permission-presets": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-session-title": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-jobs": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-shell": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-credentials": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-agent-loop": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-scope": "^0.1.0-rc.6"
+    "@deepseek-ai/dsh-commands": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-token-meter": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-skill": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-settings": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-plan-mode": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-session-persistence": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-user-questions": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-subagent": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-goal": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-tools": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-tool-workflow": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-llm-retry": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-permission-presets": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-session-title": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-jobs": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-shell": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-credentials": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-agent-presets": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-agent-loop": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-scope": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-attachment": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-brand": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-timeout": "^0.1.0-rc.8"
   },
   "engines": {
     "node": ">=22.19.0"
@@ -129,9 +149,15 @@
   "scripts": {
     "build": "tsdown",
     "build:package": "pnpm --dir ../pi-tui build && pnpm build",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "node --test test/*.test.ts test/*.test.mjs",
+    "typecheck": "pnpm build:package && tsc -p tsconfig.json --noEmit",
+    "test": "pnpm build:package && node --test test/*.test.ts test/*.test.mjs",
     "clean": "rm -rf dist",
-    "smoke": "node scripts/tarball-smoke.mjs"
+    "smoke": "node scripts/tarball-smoke.mjs",
+    "smoke:fixture": "node scripts/extension-fixture-smoke.mjs",
+    "smoke:advanced": "node scripts/advanced-plugin-smoke.mjs",
+    "smoke:phase4": "node scripts/phase4-plugin-smoke.mjs",
+    "smoke:unstable": "node scripts/unstable-plugin-smoke.mjs",
+    "smoke:examples": "node scripts/examples-plugin-smoke.mjs",
+    "smoke:vim": "node scripts/vim-plugin-smoke.mjs"
   }
 }

package/scripts/advanced-plugin-smoke.mjs

@@ -0,0 +1,314 @@
+#!/usr/bin/env node
+/**
+ * advanced-plugin-smoke — verify the PACKED ADVANCED extension surface end
+ * to end with a real third-party-shaped plugin (Phase 2, plan §15):
+ *
+ *   1. the fixture imports ONLY the public `@xmoon76/dsh-pi-tui/
+ *      extensions/advanced` (and the stable `extensions` entry for the
+ *      service type) subpaths — importing `@xmoon76/pi-tui`, `src/tui-app`
+ *      or any repository-relative internal path FAILS the gate (static
+ *      imports, dynamic import() AND require() are all scanned);
+ *   2. the fixture typechecks against the packed `.d.mts`;
+ *   3. the fixture COMPILES to JS and RUNTIME-LOADS against the packed
+ *      bytes (apply() registers through a mock service without throwing);
+ *   4. the fixture exercises the ADVANCED surface: ADVANCED_API_LEVEL === 1,
+ *      normalized input capture (observe + capture), the interactive
+ *      overlay lease, and the advanced editor controls;
+ *   5. the fixture's module shape (name/inject/apply) matches the Loader;
+ *   6. no duplicate dsh runtime in the fixture tree.
+ *
+ * The probe mirrors the host install with SYMLINKS (no npm install — the
+ * gate is offline-safe; the packed package's runtime deps resolve from
+ * the repo's node_modules exactly like a real profile).
+ *
+ * Usage: node scripts/advanced-plugin-smoke.mjs [path-to-tgz]
+ * @module advanced-plugin-smoke
+ */
+
+import { spawnSync } from 'node:child_process'
+import {
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readdirSync,
+  readFileSync,
+  realpathSync,
+  rmSync,
+  statSync,
+  lstatSync,
+  symlinkSync,
+  writeFileSync,
+} from 'node:fs'
+import { tmpdir } from 'node:os'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const SCRIPT_DIR = dirname(fileURLToPath(import.meta.url))
+const PACKAGE_ROOT = join(SCRIPT_DIR, '..')
+const FIXTURE_ROOT = join(PACKAGE_ROOT, 'test', 'fixtures', 'advanced-plugin')
+
+const failures = []
+const checks = []
+
+function check(name, ok, detail = '') {
+  checks.push(`${ok ? 'ok  ' : 'FAIL'} ${name}${detail === '' ? '' : ` — ${detail}`}`)
+  if (!ok) failures.push(`${name}${detail === '' ? '' : `: ${detail}`}`)
+}
+
+function run(command, args, options = {}) {
+  return spawnSync(command, args, { encoding: 'utf8', ...options })
+}
+
+function resolveTarball(explicit) {
+  if (explicit !== undefined) {
+    const absolute = resolve(explicit)
+    if (!existsSync(absolute)) throw new Error(`tarball not found: ${explicit}`)
+    return absolute
+  }
+  const dir = PACKAGE_ROOT
+  const candidates = readdirSync(dir)
+    .filter(name => /xmoon76-dsh-pi-tui-.*\.tgz$/.test(name))
+    .map(name => join(dir, name))
+    .sort((a, b) => statSync(b).mtimeMs - statSync(a).mtimeMs)
+  if (candidates.length === 0) {
+    throw new Error(`no xmoon76-dsh-pi-tui-*.tgz in ${dir}; run pnpm pack:release first`)
+  }
+  return candidates[0]
+}
+
+function main() {
+  const tarball = resolveTarball(process.argv[2])
+  const workDir = mkdtempSync(join(tmpdir(), 'advanced-plugin-'))
+  try {
+    // 1. Extract the packed package.
+    const extractedDir = join(workDir, 'pkg')
+    mkdirSync(extractedDir)
+    const extract = run('tar', ['-xzf', tarball, '-C', extractedDir])
+    check('tarball extracts', extract.status === 0, extract.stderr)
+    const pkgDir = join(extractedDir, 'package')
+    check('packed package has dist/extension/advanced.mjs', existsSync(join(pkgDir, 'dist', 'extension', 'advanced.mjs')))
+    check('packed package has dist/extension/advanced.d.mts', existsSync(join(pkgDir, 'dist', 'extension', 'advanced.d.mts')))
+
+    // 2. IMPORT BAN (plan §15 CI gate): the fixture's IMPORT STATEMENTS
+    //    (multi-line blocks), dynamic import() and require() specifiers
+    //    must never reference private internals.
+    const fixtureSrc = readFileSync(join(FIXTURE_ROOT, 'src', 'index.ts'), 'utf8')
+    const lines = fixtureSrc.split('\n')
+    const importStatements = []
+    for (let index = 0; index < lines.length; index++) {
+      if (/^\s*import\b/.test(lines[index] ?? '')) {
+        let statement = lines[index] ?? ''
+        while (!statement.includes(';') && index + 1 < lines.length) {
+          index += 1
+          statement += lines[index]
+        }
+        importStatements.push(statement)
+      }
+    }
+    const importLines = importStatements.join('\n')
+    const dynamicSpecifiers = [...fixtureSrc.matchAll(/import\s*\(\s*['"]([^'"]+)['"]\s*\)/g)]
+      .map(match => match[1])
+      .concat([...fixtureSrc.matchAll(/require\s*\(\s*['"]([^'"]+)['"]\s*\)/g)]
+        .map(match => match[1]))
+    const banned = [
+      // Word-boundary: `@xmoon76/pi-tui` must NOT match
+      // `@xmoon76/dsh-pi-tui` (a substring of the public package name).
+      ['@xmoon76/pi-tui (the private fork, word-bounded)', /@xmoon76\/pi-tui(?![-a-z])/g],
+      ['@moonshot-ai/pi-tui', /@moonshot-ai\/pi-tui/g],
+      ['src/tui-app', /src\/tui-app/g],
+      ['TuiApp', /\bTuiApp\b/g],
+      ['TuiMainScreen', /\bTuiMainScreen\b/g],
+      ['TuiAltScreen', /\bTuiAltScreen\b/g],
+      ['repository-relative internal path', /\.\.\/\.\.\/src/g],
+    ]
+    for (const [name, pattern] of banned) {
+      const staticMatches = importLines.match(pattern) ?? []
+      const dynamicMatches = dynamicSpecifiers.filter(specifier => pattern.test(specifier))
+      check(`fixture does not import ${name}`, staticMatches.length === 0 && dynamicMatches.length === 0,
+        [...staticMatches, ...dynamicMatches].join(', '))
+    }
+    // The ONLY @xmoon76/dsh-pi-tui imports are the public subpaths
+    // (extensions/advanced + extensions for the service type; cordis is a
+    // legitimate peer for the plugin's apply signature).
+    const dshImports = importLines.match(/@xmoon76\/dsh-pi-tui[^'"]*/g) ?? []
+    check('fixture imports ONLY the public extensions subpaths',
+      dshImports.length === 2
+        && dshImports.includes('@xmoon76/dsh-pi-tui/extensions/advanced')
+        && dshImports.includes('@xmoon76/dsh-pi-tui/extensions'),
+      dshImports.join(', '))
+
+    // 3. ADVANCED-SURFACE EXERCISE (plan §15 acceptance): the fixture
+    //    exercises the Phase-2 advanced surface through the public entry.
+    const surface = [
+      ['ADVANCED_API_LEVEL', 'tier level constant'],
+      ['advanced(', 'facade builder'],
+      ['ui.input.capture', 'normalized input capture'],
+      ["mode: 'observe'", 'observe mode'],
+      ["mode: 'capture'", 'capture mode'],
+      ['showInteractiveOverlay', 'interactive overlay'],
+      ['AdvancedInteractiveComponent', 'interactive component type'],
+      ['ui.editor', 'advanced editor controls'],
+    ]
+    for (const [api, label] of surface) {
+      check(`fixture exercises ${label} (${api})`, fixtureSrc.includes(api))
+    }
+    check('fixture never parses raw terminal bytes (no CSI-u / escape matching in the plugin)',
+      !/\\x1b\[/.test(fixtureSrc) && !/escape\s*\(/.test(fixtureSrc.replace(/handleInput/g, '')))
+
+    // 4. The fixture tree: symlink the packed package + the host's
+    //    node_modules (the offline-safe mirror of a real profile install).
+    const fixtureDir = join(workDir, 'fixture')
+    mkdirSync(join(fixtureDir, 'node_modules', '@xmoon76'), { recursive: true })
+    symlinkSync(pkgDir, join(fixtureDir, 'node_modules', '@xmoon76', 'dsh-pi-tui'), 'dir')
+    const hostModules = join(PACKAGE_ROOT, 'node_modules')
+    mkdirSync(join(pkgDir, 'node_modules'), { recursive: true })
+    for (const entry of readdirSync(hostModules)) {
+      const target = join(pkgDir, 'node_modules', entry)
+      if (existsSync(target)) continue
+      symlinkSync(join(hostModules, entry), target, 'dir')
+    }
+    mkdirSync(join(fixtureDir, 'node_modules'), { recursive: true })
+    for (const entry of readdirSync(hostModules)) {
+      const target = join(fixtureDir, 'node_modules', entry)
+      if (existsSync(target)) continue
+      symlinkSync(join(hostModules, entry), target, 'dir')
+    }
+    mkdirSync(join(fixtureDir, 'src'), { recursive: true })
+    writeFileSync(join(fixtureDir, 'src', 'index.ts'), fixtureSrc)
+    writeFileSync(join(fixtureDir, 'tsconfig.json'), JSON.stringify({
+      compilerOptions: {
+        target: 'ES2022',
+        module: 'NodeNext',
+        moduleResolution: 'NodeNext',
+        strict: true,
+        noEmit: true,
+        skipLibCheck: true,
+        types: [],
+      },
+      include: ['src'],
+    }, null, 2))
+    writeFileSync(join(fixtureDir, 'package.json'), JSON.stringify({
+      name: 'dsh-pi-advanced-fixture',
+      private: true,
+      type: 'module',
+    }, null, 2))
+
+    // 5. Typecheck against the packed .d.mts (the repo's tsc — no
+    //    registry fetch).
+    const tsc = run('node', [join(PACKAGE_ROOT, 'node_modules', 'typescript', 'bin', 'tsc'), '-p', join(fixtureDir, 'tsconfig.json')], { cwd: fixtureDir })
+    check('fixture typechecks against the packed .d.mts', tsc.status === 0,
+      tsc.status === 0 ? '' : (tsc.stdout + tsc.stderr).split('\n').slice(-6).join(' '))
+
+    // 6. Module shape.
+    const moduleShape = /export const name = ['"][^'"]+['"]/s.test(fixtureSrc)
+      && /export const inject = \[/s.test(fixtureSrc)
+      && /export function apply\(ctx: Context\)/s.test(fixtureSrc)
+    check('fixture module shape (name/inject/apply) matches the Loader', moduleShape)
+
+    // 7. RUNTIME LOAD: compile the fixture to JS and apply() it with a
+    //    mock service — the registrations must not throw and must resolve
+    //    the PACKED advanced module.
+    const emitDir = join(fixtureDir, 'dist-out')
+    const emit = run('node', [join(PACKAGE_ROOT, 'node_modules', 'typescript', 'bin', 'tsc'),
+      '-p', join(fixtureDir, 'tsconfig.json'), '--noEmit', 'false', '--outDir', emitDir], { cwd: fixtureDir })
+    check('fixture compiles to JS for the runtime probe', emit.status === 0,
+      emit.status === 0 ? '' : (emit.stdout + emit.stderr).split('\n').slice(-4).join(' '))
+    if (emit.status === 0) {
+      writeFileSync(join(fixtureDir, 'runtime-probe.mjs'), `
+        const context = {
+          get: (name) => name === 'piTuiExtensions' ? mockService() : undefined,
+          on: () => {},
+        }
+        function mockService() {
+          const inertLease = {
+            id: 'inert', active: false, focused: false,
+            focus: () => {}, blur: () => {}, invalidate: () => {},
+            close: () => {}, hide: () => {}, show: () => {},
+          }
+          const inertControls = {
+            getEditorState: () => ({ text: '', cursor: 0, focused: false, composing: false }),
+            setEditorText: () => {}, setEditorCursor: () => {},
+            insertEditorText: () => {}, pasteToEditor: () => {}, requestEditorFocus: () => {},
+          }
+          return {
+            api: () => ({
+              apiVersion: 1,
+              hostVersion: 'test',
+              capabilities: new Set(['advanced.input.capture', 'advanced.ui.interactive', 'advanced.editor.control']),
+              deprecations: new Map(),
+            }),
+            _advancedCaptureInput: (spec) => ({ id: spec.id, dispose: () => {} }),
+            _advancedShowInteractiveOverlay: () => inertLease,
+            _advancedEditorControls: () => inertControls,
+            _advancedUiSelect: () => Promise.resolve(undefined),
+            _advancedUiConfirm: () => Promise.resolve(false),
+            _advancedUiInput: () => Promise.resolve(undefined),
+            _advancedUiNotify: () => {},
+            _advancedUiCustom: () => Promise.resolve(undefined),
+            _advancedHostState: () => ({
+              getTheme: () => 'dark',
+              setTheme: () => {},
+              setTitle: () => {},
+              setWorkingMessage: () => {},
+              setToolsExpanded: () => {},
+            }),
+          }
+        }
+        const plugin = await import(${JSON.stringify(join(emitDir, 'index.js').replaceAll('\\', '/'))})
+        plugin.apply(context)
+        if (plugin.name !== 'dsh-pi-advanced-fixture') throw new Error('bad name: ' + plugin.name)
+        console.log('fixture-runtime-ok')
+      `)
+      const runtime = run(process.execPath, [join(fixtureDir, 'runtime-probe.mjs')], { cwd: fixtureDir })
+      check('fixture runtime-loads and apply() registers without throwing',
+        runtime.status === 0 && runtime.stdout.includes('fixture-runtime-ok'),
+        runtime.status === 0 ? '' : (runtime.stderr || runtime.stdout).split('\n').slice(-8).join(' '))
+    }
+
+    // 8. No duplicate dsh runtime: every @deepseek-ai entry in BOTH the
+    //    packed package tree AND the fixture tree must be a SYMLINK whose
+    //    realpath resolves into the host module tree (the packed tarball
+    //    itself carries no node_modules — the scaffolding symlinks them,
+    //    exactly like a real profile resolves in-box packages from the
+    //    dsh installation). A REAL directory is a duplicate runtime copy.
+    const probeReal = resolve(workDir)
+    const auditTrees = [
+      ['packed package', join(pkgDir, 'node_modules', '@deepseek-ai')],
+      ['fixture tree', join(fixtureDir, 'node_modules', '@deepseek-ai')],
+    ]
+    const realDirs = []
+    for (const [label, nm] of auditTrees) {
+      const entries = existsSync(nm) ? readdirSync(nm) : []
+      for (const name of entries) {
+        const entry = join(nm, name)
+        let isSymlink = false
+        try { isSymlink = lstatSync(entry).isSymbolicLink() } catch { /* missing */ }
+        if (!isSymlink) {
+          realDirs.push(`${label}:${name} (real dir)`)
+          continue
+        }
+        try {
+          const target = resolve(realpathSync(entry))
+          if (target.startsWith(probeReal)) realDirs.push(`${label}:${name}->${target}`)
+        } catch {
+          realDirs.push(`${label}:${name} (dangling)`)
+        }
+      }
+    }
+    check('no duplicate @deepseek-ai dsh-runtime copy (symlinks only, both trees)',
+      realDirs.length === 0,
+      realDirs.join(', '))
+  } finally {
+    if (process.env.ADVANCED_SMOKE_KEEP !== '1') rmSync(workDir, { recursive: true, force: true })
+  }
+
+  for (const line of checks) console.log(line)
+  if (failures.length > 0) {
+    console.error(`\nadvanced-plugin smoke FAILED (${failures.length}):`)
+    for (const failure of failures) console.error(`  - ${failure}`)
+    process.exit(1)
+  }
+  console.log('\nadvanced-plugin smoke passed')
+}
+
+main()

package/scripts/bench.mts

@@ -167,7 +167,7 @@ const HEAP_REBUILDS = FAST ? 300 : 2000
 
 // --- the benchmark ----------------------------------------------------------
 
-function main(): void {
+async function main(): Promise<void> {
   const rows: string[] = []
   const row = (label: string, value: string): void => { rows.push(`${label.padEnd(58)} ${value}`) }
 
@@ -250,12 +250,47 @@ function main(): void {
     row('heap (rerun with --expose-gc)', 'skipped')
   }
 
+  // 5. extension plugin overhead (M11, plan §23): the frame cost with N
+  //    widget/list contributions — no-plugin baseline vs 10 vs 50 — and a
+  //    streaming-invalidation case (the batcher must coalesce bursts).
+  const { ExtensionLedger } = await import('../src/extension/internal/ledger.ts')
+  const { SurfaceHost } = await import('../src/extension/internal/surface-host.ts')
+  const { WidgetOutlet } = await import('../src/extension/internal/widget-outlet.ts')
+  for (const count of [0, 10, 50]) {
+    const ledger = new ExtensionLedger()
+    const host = new SurfaceHost(ledger, () => {})
+    let renders = 0
+    const outlet = new WidgetOutlet(ledger, { requestRender: () => { renders += 1 } }, 'input.widget.below')
+    for (let index = 0; index < count; index++) {
+      ledger.register('input.widget.below', { id: `w${index}`, order: index }, {
+        view: { kind: 'text', spans: [{ text: `widget ${index}` }] },
+        importance: index,
+        maxHeight: 1,
+      }, `owner-${index}`)
+    }
+    const t0 = process.hrtime.bigint()
+    for (let frame = 0; frame < 200; frame += 1) outlet.refresh(0, 120, 4)
+    const elapsed = Number(process.hrtime.bigint() - t0) / 200
+    row(`widget outlet refresh ×${count} contributions (200 frames)`, `${elapsed.toFixed(0)} ns/frame`)
+    void host
+  }
+  // Invalidation coalescing: 100 replaces in one tick → ONE flush.
+  const { InvalidateBatcher } = await import('../src/extension/internal/batcher.ts')
+  let flushCount = 0
+  const batcher = new InvalidateBatcher({ requestRender: () => { flushCount += 1 } })
+  for (let index = 0; index < 100; index += 1) batcher.invalidate()
+  await Promise.resolve()
+  row('invalidation burst coalescing (100 in one tick)', `${flushCount} flush(es)`)
+
   console.log(rows.join('\n'))
 }
 
-try {
-  main()
-} catch (error) {
+// Round-1 finding 2 (fixed in round 2 — the previous attempt silently
+// failed to write): main() is async — dynamic imports and awaited stages
+// reject ASYNCHRONOUSLY. A try/catch cannot observe a rejection; catch
+// the PROMISE explicitly so any async failure exits non-zero (never an
+// unhandled rejection with a zero exit code).
+main().catch((error) => {
   console.error(`bench: ${error instanceof Error ? error.message : String(error)}`)
   process.exit(1)
-}
+})