@xmoon76/dsh-pi-tui 0.3.4 → 0.3.6

package/scripts/naming-gate.mjs

@@ -1,158 +0,0 @@
-#!/usr/bin/env node
-/**
- * @xmoon76/dsh-pi-tui/scripts/naming-gate — CI guard for the naming and
- * packaging decisions (AGENTS.md "Naming (hard rules)"): nothing here may
- * use the `dsh-tui` / `@deepseek-ai/dsh-tui` family, the profile stays
- * `pi-tui`, the fork stays private and bundled, and the bundle is the only
- * published package with its fork in `deps.onlyBundle`. Fails with a clear
- * list when any decision regresses.
- * @module naming-gate
- */
-
-import { existsSync, readFileSync, readdirSync } from 'node:fs'
-import { spawnSync } from 'node:child_process'
-import { join, dirname } from 'node:path'
-import { fileURLToPath } from 'node:url'
-
-// The repository root IS the @xmoon76/dsh-pi-tui package root (root-package
-// migration): scripts/ sits directly under it.
-const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..')
-const failures = []
-const checks = []
-
-function check(name, ok, detail = '') {
-  checks.push(`${ok ? 'ok  ' : 'FAIL'} ${name}${detail === '' ? '' : ` — ${detail}`}`)
-  if (!ok) failures.push(`${name}${detail === '' ? '' : `: ${detail}`}`)
-}
-
-function readJson(path) {
-  return JSON.parse(readFileSync(path, 'utf8'))
-}
-
-const rootPkg = readJson(join(ROOT, 'package.json'))
-const forkPkg = readJson(join(ROOT, 'packages', 'pi-tui', 'package.json'))
-
-// 1. Repository + profile naming: never the reserved `tui` / `dsh-tui` family.
-check('root package name is @xmoon76/dsh-pi-tui', rootPkg.name === '@xmoon76/dsh-pi-tui', rootPkg.name)
-check('no @deepseek-ai/dsh-tui anywhere', !['@deepseek-ai/dsh-tui', 'dsh-tui'].some(name =>
-  [rootPkg, forkPkg].some(pkg => pkg.name === name)))
-for (const pkg of [rootPkg, forkPkg]) {
-  const manifest = JSON.stringify(pkg)
-  if (manifest.includes('@deepseek-ai/dsh-tui') || manifest.includes('"dsh-tui"')) {
-    check(`no dsh-tui references in ${pkg.name}`, false)
-  }
-}
-// The startup service keeps its stable id (internal Loader ids, fine as-is).
-const patch = readFileSync(join(ROOT, 'cordis.patch.yml'), 'utf8')
-check('patch rows keep tui-startup/tui-app ids', patch.includes('id: tui-startup') && patch.includes('id: tui-app'))
-check('startup service keeps TUI_STARTUP_SERVICE',
-  readFileSync(join(ROOT, 'src', 'startup.ts'), 'utf8').includes("export const TUI_STARTUP_SERVICE = 'tuiStartup'"))
-
-// 2. Package roles: the fork is private + bundled; the root bundle is public.
-check('fork package is private (@xmoon76/pi-tui)', forkPkg.private === true, `private=${String(forkPkg.private)}`)
-check('root bundle package is public (@xmoon76/dsh-pi-tui)', rootPkg.private !== true, `private=${String(rootPkg.private)}`)
-check('root bundle declares dsh.bundle.patch', rootPkg.dsh?.bundle?.patch !== undefined, rootPkg.dsh?.bundle?.patch)
-
-// 3. The fork is bundled, never a runtime dependency of the published package.
-const tsdown = readFileSync(join(ROOT, 'tsdown.config.ts'), 'utf8')
-check('tsdown deps.onlyBundle includes @xmoon76/pi-tui',
-  tsdown.includes("onlyBundle") && tsdown.includes("'@xmoon76/pi-tui'"))
-const runtimeDeps = rootPkg.dependencies ?? {}
-check('@xmoon76/pi-tui is NOT a runtime dependency of the bundle',
-  !(runtimeDeps['@xmoon76/pi-tui'] !== undefined), runtimeDeps['@xmoon76/pi-tui'] ?? 'absent')
-const forkDeps = forkPkg.dependencies ?? {}
-check('the fork does not depend on the bundle', !(forkDeps['@xmoon76/dsh-pi-tui'] !== undefined))
-
-// 4. The vendored-version single source of truth stays in the fork manifest.
-check('fork repository.note records the vendored commit (single source of truth)',
-  typeof forkPkg.repository?.note === 'string' && forkPkg.repository.note.length > 20,
-  forkPkg.repository?.note ?? 'missing')
-
-// 5. The tarball smoke + pack gate stay wired (stage G).
-check('bundle prepack gate exists', (rootPkg.scripts?.prepack ?? '').includes('pnpm build'))
-check('bundle postpack smoke exists', (rootPkg.scripts?.postpack ?? '').includes('tarball-smoke'))
-check('postpack keeps the pluginization smokes',
-  ['extension-fixture-smoke', 'vim-plugin-smoke', 'examples-plugin-smoke'].every(name =>
-    (rootPkg.scripts?.postpack ?? '').includes(name)))
-
-// 6. The workspace has no stray dist/ or tarballs COMMITTED (dist is
-//    gitignored by design; the gate checks git tracking, not the tree).
-for (const [label, path] of [['root dist', 'dist'], ['packages/pi-tui/dist', 'packages/pi-tui/dist']]) {
-  const tracked = spawnSync('git', ['ls-files', path], { cwd: ROOT, encoding: 'utf8' }).stdout.trim()
-  check(`${label} is not committed`, tracked === '', tracked.split('\n').filter(Boolean).slice(0, 3).join(', '))
-}
-const tgz = spawnSync('git', ['ls-files', '*.tgz'], { cwd: ROOT, encoding: 'utf8' }).stdout.trim()
-check('no tarballs committed', tgz === '', tgz.split('\n').filter(Boolean).slice(0, 3).join(', '))
-
-// 7. Release workflows reference the UN-scoped tarball filename: npm/pnpm
-//    strip the `@` scope from tgz names (xmoon76-dsh-pi-tui-<v>.tgz), so an
-//    `@xmoon76-dsh-pi-tui-*.tgz` glob in a workflow matches nothing and the
-//    gate/upload/publish step fails at runtime. Guard the exact mistake the
-//    2026-08-15 pack-gate review found.
-for (const workflow of ['ci.yml', 'release.yml']) {
-  const path = join(ROOT, '.github', 'workflows', workflow)
-  if (!existsSync(path)) continue // publishing lives inside ci.yml today
-  const text = readFileSync(path, 'utf8')
-  check(`workflow ${workflow} uses unscoped tarball globs`,
-    !text.includes('@xmoon76-dsh-pi-tui-*.tgz') && text.includes('xmoon76-dsh-pi-tui-*.tgz'))
-}
-
-// 8. The bundle's dsh dependency contract is declared in ONE place and the
-//    gate enforces it against the actual source (AGENTS.md rule 7): every
-//    `@deepseek-ai/*` package imported by `src/` (value OR type) must be a
-//    peerDependency, and every peerDependency must be imported by `src/`.
-//    A peer that only appears in a comment or a test is not a runtime
-//    contract; an import with no peer breaks the in-box resolution rule and
-//    can duplicate `@deepseek-ai` copies in the profile (first tool call
-//    crashes). `dsh-session-query` was removed by this rule: the picker
-//    types it structurally (src/sessions.ts) and reads the service off the
-//    live context, so it never needed the package.
-const bundleSrc = join(ROOT, 'src')
-const srcFiles = (() => {
-  const out = []
-  const walk = (dir) => {
-    for (const entry of readdirSync(dir, { withFileTypes: true })) {
-      const path = join(dir, entry.name)
-      if (entry.isDirectory()) walk(path)
-      else if (entry.name.endsWith('.ts') && !entry.name.endsWith('.d.ts')) out.push(path)
-    }
-  }
-  walk(bundleSrc)
-  return out
-})()
-const srcImports = new Set()
-for (const file of srcFiles) {
-  const text = readFileSync(file, 'utf8')
-  for (const match of text.matchAll(/from\s+['"]@deepseek-ai\/([^'"\/]+)/g)) {
-    srcImports.add(`@deepseek-ai/${match[1]}`)
-  }
-  // Runtime service access via ctx.get('name') must stay structural: a
-  // package that is ONLY read this way (never imported) has no place in
-  // the peer list — same rule as dsh-session-query.
-}
-const peers = new Set(Object.keys(rootPkg.peerDependencies ?? {}))
-for (const imported of [...srcImports].sort()) {
-  check(`peer declared for src import ${imported}`, peers.has(imported), peers.has(imported) ? '' : 'missing from peerDependencies')
-}
-for (const peer of [...peers].sort()) {
-  if (!peer.startsWith('@deepseek-ai/')) continue // chalk etc. are regular deps
-  check(`peer ${peer} is imported by src/`, srcImports.has(peer), srcImports.has(peer) ? '' : 'no import in src/ (dead peer)')
-}
-
-// 9. The M0–M11 pluginization contract survives the root-package migration:
-//    the public SDK subpaths and their tsdown entries must all stay present.
-const exportsMap = rootPkg.exports ?? {}
-for (const subpath of ['./extensions', './extensions/advanced', './extensions/unstable', './builtins']) {
-  check(`exports keep ${subpath}`, exportsMap[subpath] !== undefined)
-}
-for (const entry of ['src/extensions.ts', 'src/builtins.ts', 'src/extension/advanced.ts', 'src/extension/unstable.ts']) {
-  check(`tsdown entry keeps ${entry}`, tsdown.includes(entry))
-}
-
-for (const line of checks) console.log(line)
-if (failures.length > 0) {
-  console.error(`\nnaming-gate FAILED (${failures.length}):`)
-  for (const failure of failures) console.error(`  - ${failure}`)
-  process.exit(1)
-}
-console.log('\nnaming-gate passed')

package/scripts/phase4-plugin-smoke.mjs

@@ -1,318 +0,0 @@
-#!/usr/bin/env node
-/**
- * phase4-plugin-smoke — verify the PACKED Phase-4 advanced surface end
- * to end with a real third-party-shaped plugin (Phase 4, plan §17):
- *
- *   1. the fixture imports ONLY the public `@xmoon76/dsh-pi-tui/
- *      extensions/advanced` (and the stable `extensions` entry for the
- *      service type) subpaths — importing `@xmoon76/pi-tui`, `src/tui-app`
- *      or any repository-relative internal path FAILS the gate (static
- *      imports, dynamic import() AND require() are all scanned);
- *   2. the fixture typechecks against the packed `.d.mts`;
- *   3. the fixture COMPILES to JS and RUNTIME-LOADS against the packed
- *      bytes (apply() registers through a mock service without throwing);
- *   4. the fixture exercises the Phase-4 surface: the imperative UI
- *      broker (select/confirm/input/notify), custom interactive UI
- *      (ui.custom), and the host-state facade (theme/title/working/
- *      tools-expanded);
- *   5. the fixture's module shape (name/inject/apply) matches the Loader;
- *   6. no duplicate dsh runtime in the fixture tree.
- *
- * The probe mirrors the host install with SYMLINKS (no npm install — the
- * gate is offline-safe; the packed package's runtime deps resolve from
- * the repo's node_modules exactly like a real profile).
- *
- * Usage: node scripts/phase4-plugin-smoke.mjs [path-to-tgz]
- * @module phase4-plugin-smoke
- */
-
-import { spawnSync } from 'node:child_process'
-import {
-  existsSync,
-  mkdirSync,
-  mkdtempSync,
-  readdirSync,
-  readFileSync,
-  realpathSync,
-  rmSync,
-  statSync,
-  lstatSync,
-  symlinkSync,
-  writeFileSync,
-} from 'node:fs'
-import { tmpdir } from 'node:os'
-import { dirname, join, resolve } from 'node:path'
-import { fileURLToPath } from 'node:url'
-
-const SCRIPT_DIR = dirname(fileURLToPath(import.meta.url))
-const PACKAGE_ROOT = join(SCRIPT_DIR, '..')
-const FIXTURE_ROOT = join(PACKAGE_ROOT, 'test', 'fixtures', 'phase4-plugin')
-
-const failures = []
-const checks = []
-
-function check(name, ok, detail = '') {
-  checks.push(`${ok ? 'ok  ' : 'FAIL'} ${name}${detail === '' ? '' : ` — ${detail}`}`)
-  if (!ok) failures.push(`${name}${detail === '' ? '' : `: ${detail}`}`)
-}
-
-function run(command, args, options = {}) {
-  return spawnSync(command, args, { encoding: 'utf8', ...options })
-}
-
-function resolveTarball(explicit) {
-  if (explicit !== undefined) {
-    const absolute = resolve(explicit)
-    if (!existsSync(absolute)) throw new Error(`tarball not found: ${explicit}`)
-    return absolute
-  }
-  const dir = PACKAGE_ROOT
-  const candidates = readdirSync(dir)
-    .filter(name => /xmoon76-dsh-pi-tui-.*\.tgz$/.test(name))
-    .map(name => join(dir, name))
-    .sort((a, b) => statSync(b).mtimeMs - statSync(a).mtimeMs)
-  if (candidates.length === 0) {
-    throw new Error(`no xmoon76-dsh-pi-tui-*.tgz in ${dir}; run pnpm pack:release first`)
-  }
-  return candidates[0]
-}
-
-function main() {
-  const tarball = resolveTarball(process.argv[2])
-  const workDir = mkdtempSync(join(tmpdir(), 'phase4-plugin-'))
-  try {
-    // 1. Extract the packed package.
-    const extractedDir = join(workDir, 'pkg')
-    mkdirSync(extractedDir)
-    const extract = run('tar', ['-xzf', tarball, '-C', extractedDir])
-    check('tarball extracts', extract.status === 0, extract.stderr)
-    const pkgDir = join(extractedDir, 'package')
-    check('packed package has dist/extension/advanced.mjs', existsSync(join(pkgDir, 'dist', 'extension', 'advanced.mjs')))
-    check('packed package has dist/extension/advanced.d.mts', existsSync(join(pkgDir, 'dist', 'extension', 'advanced.d.mts')))
-
-    // 2. IMPORT BAN (plan §15 CI gate): the fixture's IMPORT STATEMENTS
-    //    (multi-line blocks), dynamic import() and require() specifiers
-    //    must never reference private internals.
-    const fixtureSrc = readFileSync(join(FIXTURE_ROOT, 'src', 'index.ts'), 'utf8')
-    const lines = fixtureSrc.split('\n')
-    const importStatements = []
-    for (let index = 0; index < lines.length; index++) {
-      if (/^\s*import\b/.test(lines[index] ?? '')) {
-        let statement = lines[index] ?? ''
-        while (!statement.includes(';') && index + 1 < lines.length) {
-          index += 1
-          statement += lines[index]
-        }
-        importStatements.push(statement)
-      }
-    }
-    const importLines = importStatements.join('\n')
-    const dynamicSpecifiers = [...fixtureSrc.matchAll(/import\s*\(\s*['"]([^'"]+)['"]\s*\)/g)]
-      .map(match => match[1])
-      .concat([...fixtureSrc.matchAll(/require\s*\(\s*['"]([^'"]+)['"]\s*\)/g)]
-        .map(match => match[1]))
-    const banned = [
-      // Word-boundary: `@xmoon76/pi-tui` must NOT match
-      // `@xmoon76/dsh-pi-tui` (a substring of the public package name).
-      ['@xmoon76/pi-tui (the private fork, word-bounded)', /@xmoon76\/pi-tui(?![-a-z])/g],
-      ['@moonshot-ai/pi-tui', /@moonshot-ai\/pi-tui/g],
-      ['src/tui-app', /src\/tui-app/g],
-      ['TuiApp', /\bTuiApp\b/g],
-      ['TuiMainScreen', /\bTuiMainScreen\b/g],
-      ['TuiAltScreen', /\bTuiAltScreen\b/g],
-      ['repository-relative internal path', /\.\.\/\.\.\/src/g],
-    ]
-    for (const [name, pattern] of banned) {
-      const staticMatches = importLines.match(pattern) ?? []
-      const dynamicMatches = dynamicSpecifiers.filter(specifier => pattern.test(specifier))
-      check(`fixture does not import ${name}`, staticMatches.length === 0 && dynamicMatches.length === 0,
-        [...staticMatches, ...dynamicMatches].join(', '))
-    }
-    // The ONLY @xmoon76/dsh-pi-tui imports are the public subpaths
-    // (extensions/advanced + extensions for the service type; cordis is a
-    // legitimate peer for the plugin's apply signature).
-    const dshImports = importLines.match(/@xmoon76\/dsh-pi-tui[^'"]*/g) ?? []
-    check('fixture imports ONLY the public extensions subpaths',
-      dshImports.length === 2
-        && dshImports.includes('@xmoon76/dsh-pi-tui/extensions/advanced')
-        && dshImports.includes('@xmoon76/dsh-pi-tui/extensions'),
-      dshImports.join(', '))
-
-    // 3. PHASE-4 SURFACE EXERCISE (plan §17 acceptance): the fixture
-    //    exercises the Phase-4 advanced surface through the public entry.
-    const surface = [
-      ['ui.ui.select', 'imperative select broker'],
-      ['ui.ui.confirm', 'imperative confirm broker'],
-      ['ui.ui.input', 'imperative input broker'],
-      ['ui.ui.notify', 'imperative notify broker'],
-      ['ui.ui.custom', 'custom interactive UI'],
-      ['AdvancedCustomHost', 'custom host facade type'],
-      ['ui.host.getTheme', 'host-state theme query'],
-      ['ui.host.setTheme', 'host-state theme select'],
-      ['ui.host.setTitle', 'host-state title override'],
-      ['ui.host.setWorkingMessage', 'host-state working override'],
-      ['ui.host.setToolsExpanded', 'host-state tool expansion'],
-    ]
-    for (const [api, label] of surface) {
-      check(`fixture exercises ${label} (${api})`, fixtureSrc.includes(api))
-    }
-    check('fixture never parses raw terminal bytes (no CSI-u / escape matching in the plugin)',
-      !/\\x1b\[/.test(fixtureSrc) && !/escape\s*\(/.test(fixtureSrc.replace(/handleInput/g, '')))
-
-    // 4. The fixture tree: symlink the packed package + the host's
-    //    node_modules (the offline-safe mirror of a real profile install).
-    const fixtureDir = join(workDir, 'fixture')
-    mkdirSync(join(fixtureDir, 'node_modules', '@xmoon76'), { recursive: true })
-    symlinkSync(pkgDir, join(fixtureDir, 'node_modules', '@xmoon76', 'dsh-pi-tui'), 'dir')
-    const hostModules = join(PACKAGE_ROOT, 'node_modules')
-    mkdirSync(join(pkgDir, 'node_modules'), { recursive: true })
-    for (const entry of readdirSync(hostModules)) {
-      const target = join(pkgDir, 'node_modules', entry)
-      if (existsSync(target)) continue
-      symlinkSync(join(hostModules, entry), target, 'dir')
-    }
-    mkdirSync(join(fixtureDir, 'node_modules'), { recursive: true })
-    for (const entry of readdirSync(hostModules)) {
-      const target = join(fixtureDir, 'node_modules', entry)
-      if (existsSync(target)) continue
-      symlinkSync(join(hostModules, entry), target, 'dir')
-    }
-    mkdirSync(join(fixtureDir, 'src'), { recursive: true })
-    writeFileSync(join(fixtureDir, 'src', 'index.ts'), fixtureSrc)
-    writeFileSync(join(fixtureDir, 'tsconfig.json'), JSON.stringify({
-      compilerOptions: {
-        target: 'ES2022',
-        module: 'NodeNext',
-        moduleResolution: 'NodeNext',
-        strict: true,
-        noEmit: true,
-        skipLibCheck: true,
-        types: [],
-      },
-      include: ['src'],
-    }, null, 2))
-    writeFileSync(join(fixtureDir, 'package.json'), JSON.stringify({
-      name: 'dsh-pi-phase4-fixture',
-      private: true,
-      type: 'module',
-    }, null, 2))
-
-    // 5. Typecheck against the packed .d.mts (the repo's tsc — no
-    //    registry fetch).
-    const tsc = run('node', [join(PACKAGE_ROOT, 'node_modules', 'typescript', 'bin', 'tsc'), '-p', join(fixtureDir, 'tsconfig.json')], { cwd: fixtureDir })
-    check('fixture typechecks against the packed .d.mts', tsc.status === 0,
-      tsc.status === 0 ? '' : (tsc.stdout + tsc.stderr).split('\n').slice(-6).join(' '))
-
-    // 6. Module shape.
-    const moduleShape = /export const name = ['"][^'"]+['"]/s.test(fixtureSrc)
-      && /export const inject = \[/s.test(fixtureSrc)
-      && /export function apply\(ctx: Context\)/s.test(fixtureSrc)
-    check('fixture module shape (name/inject/apply) matches the Loader', moduleShape)
-
-    // 7. RUNTIME LOAD: compile the fixture to JS and apply() it with a
-    //    mock service — the registrations must not throw and must resolve
-    //    the PACKED advanced module.
-    const emitDir = join(fixtureDir, 'dist-out')
-    const emit = run('node', [join(PACKAGE_ROOT, 'node_modules', 'typescript', 'bin', 'tsc'),
-      '-p', join(fixtureDir, 'tsconfig.json'), '--noEmit', 'false', '--outDir', emitDir], { cwd: fixtureDir })
-    check('fixture compiles to JS for the runtime probe', emit.status === 0,
-      emit.status === 0 ? '' : (emit.stdout + emit.stderr).split('\n').slice(-4).join(' '))
-    if (emit.status === 0) {
-      writeFileSync(join(fixtureDir, 'runtime-probe.mjs'), `
-        const context = {
-          get: (name) => name === 'piTuiExtensions' ? mockService() : undefined,
-          on: () => {},
-        }
-        function mockService() {
-          const inertLease = {
-            id: 'inert', active: false, focused: false,
-            focus: () => {}, blur: () => {}, invalidate: () => {},
-            close: () => {}, hide: () => {}, show: () => {},
-          }
-          const inertControls = {
-            getEditorState: () => ({ text: '', cursor: 0, focused: false, composing: false }),
-            setEditorText: () => {}, setEditorCursor: () => {},
-            insertEditorText: () => {}, pasteToEditor: () => {}, requestEditorFocus: () => {},
-          }
-          return {
-            api: () => ({
-              apiVersion: 1,
-              hostVersion: 'test',
-              capabilities: new Set(['advanced.input.capture', 'advanced.ui.interactive', 'advanced.editor.control']),
-              deprecations: new Map(),
-            }),
-            _advancedCaptureInput: (spec) => ({ id: spec.id, dispose: () => {} }),
-            _advancedShowInteractiveOverlay: () => inertLease,
-            _advancedEditorControls: () => inertControls,
-            _advancedUiSelect: () => Promise.resolve(undefined),
-            _advancedUiConfirm: () => Promise.resolve(false),
-            _advancedUiInput: () => Promise.resolve(undefined),
-            _advancedUiNotify: () => {},
-            _advancedUiCustom: () => Promise.resolve(undefined),
-            _advancedHostState: () => ({
-              getTheme: () => 'dark',
-              setTheme: () => {},
-              setTitle: () => {},
-              setWorkingMessage: () => {},
-              setToolsExpanded: () => {},
-            }),
-          }
-        }
-        const plugin = await import(${JSON.stringify(join(emitDir, 'index.js').replaceAll('\\', '/'))})
-        plugin.apply(context)
-        if (plugin.name !== 'dsh-pi-phase4-fixture') throw new Error('bad name: ' + plugin.name)
-        console.log('fixture-runtime-ok')
-      `)
-      const runtime = run(process.execPath, [join(fixtureDir, 'runtime-probe.mjs')], { cwd: fixtureDir })
-      check('fixture runtime-loads and apply() registers without throwing',
-        runtime.status === 0 && runtime.stdout.includes('fixture-runtime-ok'),
-        runtime.status === 0 ? '' : (runtime.stderr || runtime.stdout).split('\n').slice(-8).join(' '))
-    }
-
-    // 8. No duplicate dsh runtime: every @deepseek-ai entry in BOTH the
-    //    packed package tree AND the fixture tree must be a SYMLINK whose
-    //    realpath resolves into the host module tree (the packed tarball
-    //    itself carries no node_modules — the scaffolding symlinks them,
-    //    exactly like a real profile resolves in-box packages from the
-    //    dsh installation). A REAL directory is a duplicate runtime copy.
-    const probeReal = resolve(workDir)
-    const auditTrees = [
-      ['packed package', join(pkgDir, 'node_modules', '@deepseek-ai')],
-      ['fixture tree', join(fixtureDir, 'node_modules', '@deepseek-ai')],
-    ]
-    const realDirs = []
-    for (const [label, nm] of auditTrees) {
-      const entries = existsSync(nm) ? readdirSync(nm) : []
-      for (const name of entries) {
-        const entry = join(nm, name)
-        let isSymlink = false
-        try { isSymlink = lstatSync(entry).isSymbolicLink() } catch { /* missing */ }
-        if (!isSymlink) {
-          realDirs.push(`${label}:${name} (real dir)`)
-          continue
-        }
-        try {
-          const target = resolve(realpathSync(entry))
-          if (target.startsWith(probeReal)) realDirs.push(`${label}:${name}->${target}`)
-        } catch {
-          realDirs.push(`${label}:${name} (dangling)`)
-        }
-      }
-    }
-    check('no duplicate @deepseek-ai dsh-runtime copy (symlinks only, both trees)',
-      realDirs.length === 0,
-      realDirs.join(', '))
-  } finally {
-    if (process.env.ADVANCED_SMOKE_KEEP !== '1') rmSync(workDir, { recursive: true, force: true })
-  }
-
-  for (const line of checks) console.log(line)
-  if (failures.length > 0) {
-    console.error(`\nphase4-plugin smoke FAILED (${failures.length}):`)
-    for (const failure of failures) console.error(`  - ${failure}`)
-    process.exit(1)
-  }
-  console.log('\nphase4-plugin smoke passed')
-}
-
-main()

package/scripts/pre-push-stages.mjs

@@ -1,116 +0,0 @@
-#!/usr/bin/env node
-/**
- * Pre-push gate stage derivation — the single source of truth for what the
- * husky pre-push hook runs stays in package.json's `verify:*` scripts; this
- * module turns one of them into the ordered per-command stage list the hook
- * executes with progress reporting.
- *
- * A script like `a && b && c` yields `['a', 'b', 'c']`. Only top-level `&&`
- * separators are split (a `&&` inside quotes, e.g. inside a node -e snippet,
- * is not a separator). A trailing `&&` (or a `&&` followed by nothing but
- * whitespace) is rejected — `sh -e` treats such a line as a syntax error, so
- * a split would silently drop the intended tail.
- *
- * Supported shell grammar (the parsed script must stay within this subset):
- *   - commands chained with `&&` (the split points), each otherwise passed
- *     verbatim to `sh -c` for execution — the splitter does NOT interpret
- *     the commands themselves;
- *   - single- and double-quoted strings anywhere in the script (quotes are
- *     tracked so `&&` inside them is not a separator);
- *   - backslash escapes inside and outside quotes: an escaped `&&` is NOT
- *     treated as a separator (it stays inside the current stage, whose
- *     shell semantics are then preserved unchanged by `sh -c`);
- *   - anything the command segment may contain (redirects, env assignments,
- *     pipes, subshells, `node -e "..."`, ...) is preserved verbatim and
- *     executed by `sh -c` unchanged.
- * NOT supported (the splitter rejects them loudly): unterminated quotes,
- * dangling `&&`, empty commands (consecutive `&&`), empty scripts.
- *
- * Usage:
- *   node scripts/pre-push-stages.mjs <verify-script-name>
- *   # e.g. node scripts/pre-push-stages.mjs verify:prepush
- *
- * @module pre-push-stages
- */
-
-import { readFileSync } from 'node:fs'
-import { join, dirname } from 'node:path'
-import { fileURLToPath } from 'node:url'
-
-const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..')
-
-function fail(message) {
-  console.error(`pre-push-stages: ${message}`)
-  process.exit(1)
-}
-
-const [name] = process.argv.slice(2)
-if (!name || !name.startsWith('verify:')) {
-  fail(`usage: node scripts/pre-push-stages.mjs <verify-script-name> (got: ${name ?? 'none'})`)
-}
-
-const pkg = JSON.parse(readFileSync(join(ROOT, 'package.json'), 'utf8'))
-const script = pkg.scripts?.[name]
-if (typeof script !== 'string' || script === '') {
-  fail(`package.json has no non-empty script "${name}" (update .husky/pre-push)`)
-}
-
-// Split on top-level `&&` only: walk the string tracking single-quote,
-// double-quote and backslash escapes; a `&&` seen at depth 0 (no open
-// quote) is a command separator. Escapes are honoured OUTSIDE quotes too
-// (`\&&` is an escaped literal `&`, not a separator), and a script with
-// an unterminated quote is rejected — sh would reject it as well.
-const stages = []
-let current = ''
-let quote = null
-for (let i = 0; i < script.length; i++) {
-  const ch = script[i]
-  if (quote === '"') {
-    if (ch === '\\') { current += ch + (script[i + 1] ?? ''); i++; continue }
-    if (ch === '"') quote = null
-    current += ch
-    continue
-  }
-  if (quote === "'") {
-    if (ch === "'") quote = null
-    current += ch
-    continue
-  }
-  if (ch === '\\') {
-    // Outside quotes: escape the next character (incl. `&`, so `\&&`
-    // stays literal). Keep the backslash in the fragment — it is
-    // meaningful to the shell that later runs the stage.
-    current += ch + (script[i + 1] ?? '')
-    i++
-    continue
-  }
-  if (ch === '"' || ch === "'") {
-    quote = ch
-    current += ch
-    continue
-  }
-  if (ch === '&' && script[i + 1] === '&') {
-    stages.push(current)
-    current = ''
-    i++
-    continue
-  }
-  current += ch
-}
-stages.push(current)
-
-if (quote !== null) {
-  fail(`script "${name}" has an unterminated ${quote === '"' ? 'double' : 'single'} quote — sh would reject it; fix package.json`)
-}
-
-const trimmed = stages.map((s) => s.trim())
-if (trimmed[trimmed.length - 1] === '') {
-  fail(`script "${name}" ends with a dangling "&&" — sh -e would reject it; fix package.json`)
-}
-for (const [i, stage] of trimmed.entries()) {
-  if (stage === '') {
-    fail(`script "${name}" has an empty command at position ${i + 1} (consecutive "&&")`)
-  }
-}
-
-process.stdout.write(trimmed.join('\n') + '\n')

package/scripts/preview-prompt.mts

@@ -1,62 +0,0 @@
-/**
- * Visual preview of the editor `❯` prompt + the transcript user-role
- * styling — run inside a real TTY (tmux):
- *
- *   env -u NO_COLOR node --import tsx/esm scripts/preview-prompt.mts
- *
- * Shows a transcript mixing user / assistant / thinking / system rows and
- * alternates the editor between an EMPTY draft (the `❯ ` prompt with the
- * cursor block) and a multi-line draft (the prompt leads the first line,
- * continuation lines indent under it, exactly like the transcript rows).
- * `PREVIEW_HOLD_MS` controls how long it stays up (default 30s); Ctrl+C
- * also exits.
- * @module @xmoon76/dsh-pi-tui/preview-prompt
- */
-
-import { ProcessTerminal } from '@xmoon76/pi-tui'
-import { TuiApp } from '../src/tui-app.ts'
-
-const holdMs = Number(process.env.PREVIEW_HOLD_MS ?? 30000)
-
-const terminal = new ProcessTerminal()
-const app = new TuiApp(terminal, {
-  onSubmit: () => {},
-  onExit: () => {
-    app.stop()
-    process.exit(0)
-  },
-})
-app.start()
-
-// Transcript contrast: the user row is a brand-blue bubble (whole-row
-// background + blue ❯), everything else (assistant / thinking / system)
-// keeps its own distinct style.
-app.setTranscript([
-  {
-    kind: 'user',
-    turn: 0,
-    // Long enough to wrap: the continuation must indent under the ❯.
-    text: 'The startup fails with ENOTFOUND near line 42 of src/app.ts — I suspect an environment variable is missing, so please check the config load order and compare it against the .env.example keys and the docs.',
-  },
-  {
-    kind: 'assistant',
-    turn: 0,
-    text: 'Let me check. **Config load order**:\n\n1. `.env` file\n2. Environment overrides\n3. Default fallbacks\n\n`ENOTFOUND` usually means DNS resolution failed — confirm whether you reach an internal registry or the public one.',
-  },
-  { kind: 'thinking', turn: 0, text: 'ENOTFOUND is a DNS issue; verify the config source before concluding.', running: false },
-  { kind: 'system', turn: 0, label: 'AGENTS.md', text: 'Repo config conventions live in docs/config.md; env keys come from the preset.', summary: 'context rules' },
-])
-
-// Alternate the draft so both the empty prompt and the multi-line prompt
-// (continuation indent) are visible without touching the keyboard.
-let draftVisible = false
-const flip = setInterval(() => {
-  draftVisible = !draftVisible
-  app.setDraft(draftVisible ? 'git status\npnpm test -- --filter @xmoon76/pi-tui' : '')
-}, 6000)
-
-setTimeout(() => {
-  clearInterval(flip)
-  app.stop()
-  process.exit(0)
-}, holdMs)