blun-king-cli 9.1.536 → 9.1.550

package/scripts/check-deepseek-native-max-regression.js

@@ -1,49 +0,0 @@
-const fs = require('node:fs');
-const path = require('node:path');
-
-const packageRoot = path.resolve(__dirname, '..');
-const bundlePath = path.join(packageRoot, 'blun.mjs');
-
-function checkBundle(bundle) {
-  const required = [
-    'max: "Max"',
-    'if (effort !== void 0) this.opts.onSessionOnlySelect(effort);',
-    'if (this.isBlunSwarmSelected) this.opts.onBlunSwarmSelect?.();',
-    'if (effort !== void 0) this.opts.onSelect(effort);',
-    'state.swarmMode && state.swarmModeEntry === "effort"',
-  ];
-  for (const marker of required) {
-    if (!bundle.includes(marker)) throw new Error(`missing native-max marker: ${marker}`);
-  }
-
-  const forbidden = [
-    'max: "Swarm"',
-    'usesLegacyServerStageScale',
-  ];
-  for (const marker of forbidden) {
-    if (bundle.includes(marker)) throw new Error(`legacy max-to-swarm path remains: ${marker}`);
-  }
-}
-
-const bundle = fs.readFileSync(bundlePath, 'utf8');
-checkBundle(bundle);
-
-const mutations = [
-  bundle.replace('max: "Max"', 'max: "Swarm"'),
-  bundle.replace(
-    'if (effort !== void 0) this.opts.onSelect(effort);',
-    'if (effort === "max" && this.usesLegacyServerStageScale) this.opts.onBlunSwarmSelect();',
-  ),
-];
-
-for (const [index, mutation] of mutations.entries()) {
-  let rejected = false;
-  try {
-    checkBundle(mutation);
-  } catch {
-    rejected = true;
-  }
-  if (!rejected) throw new Error(`mutation ${index + 1} escaped native-max gate`);
-}
-
-console.log('DeepSeek native max regression gate passed (2 mutations rejected).');

package/scripts/check-empty-response-effort-downgrade-regression.js

@@ -1,48 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const assert = require('node:assert/strict');
-const fs = require('node:fs');
-const path = require('node:path');
-
-const packageRoot = process.env.BLUN_PACKAGE_UNDER_TEST
-  ? path.resolve(process.env.BLUN_PACKAGE_UNDER_TEST)
-  : path.resolve(__dirname, '..');
-const policy = require(path.join(packageRoot, 'bin', 'empty-response-retry-policy.cjs'));
-const bundle = fs.readFileSync(path.join(packageRoot, 'blun.mjs'), 'utf8');
-
-const exhausted = (thinkingEffort) => policy.nextThinkingEffortForExhaustedEmpty({
-  emptyResponseKind: 'length',
-  maxCompletionTokens: 32_768,
-  completionTokens: 32_768,
-  thinkingEffort,
-});
-
-assert.equal(exhausted('max'), 'high');
-assert.equal(exhausted('xhigh'), 'high');
-assert.equal(exhausted('high'), 'low');
-assert.equal(exhausted('low'), 'off');
-assert.equal(policy.nextThinkingEffortForExhaustedEmpty({
-  emptyResponseKind: 'length',
-  maxCompletionTokens: 32_768,
-  completionTokens: 2_000,
-  thinkingEffort: 'max',
-}), undefined, 'a non-exhausted response must not downgrade thinking');
-assert.equal(policy.nextThinkingEffortForExhaustedEmpty({
-  emptyResponseKind: 'stop',
-  maxCompletionTokens: 32_768,
-  completionTokens: 32_768,
-  thinkingEffort: 'max',
-}), undefined, 'a stop response must not be treated as budget exhaustion');
-
-for (const needle of [
-  'thinkingEffortRetry = nextThinkingEffortForExhaustedEmpty({',
-  'thinkingEffort: input.llm.thinkingEffort',
-  'const requestProvider = params.thinkingEffortRetry === void 0 ? this.provider : this.provider.withThinking(params.thinkingEffortRetry);',
-  'provider: requestProvider,',
-  'retryThinkingEffort',
-]) {
-  assert.ok(bundle.includes(needle), `empty-response retry wiring missing: ${needle}`);
-}
-
-process.stdout.write('empty-response-effort-downgrade-regression PASS\n');

package/scripts/check-fredrik-glm-mutation-regression.js

@@ -1,18 +0,0 @@
-'use strict';
-
-const assert = require('node:assert/strict');
-const fs = require('node:fs');
-const path = require('node:path');
-const { REQUIRED_BUNDLE_MARKERS, validateBundleText } = require('./check-fredrik-glm-regression.js');
-
-const bundlePath = path.resolve(__dirname, '..', 'blun.mjs');
-const source = fs.readFileSync(bundlePath, 'utf8');
-assert.deepEqual(validateBundleText(source), []);
-
-for (const marker of REQUIRED_BUNDLE_MARKERS) {
-  const mutated = source.replaceAll(marker, `MUTATED_${marker.length}`);
-  assert.notEqual(mutated, source, `mutation marker missing from source: ${marker}`);
-  assert.notDeepEqual(validateBundleText(mutated), [], `gate accepted mutation: ${marker}`);
-}
-
-process.stdout.write(`fredrik-glm-mutation-regression: ok (${REQUIRED_BUNDLE_MARKERS.length} mutations)\n`);

package/scripts/check-fredrik-glm-regression.js

@@ -1,169 +0,0 @@
-'use strict';
-
-const assert = require('node:assert/strict');
-const fs = require('node:fs');
-const os = require('node:os');
-const path = require('node:path');
-const { spawnSync } = require('node:child_process');
-const policy = require('../bin/fredrik-glm-provider.cjs');
-
-const PACKAGE_ROOT = path.resolve(__dirname, '..');
-const BUNDLE_PATH = path.join(PACKAGE_ROOT, 'blun.mjs');
-const TEMPLATE_PATH = path.join(PACKAGE_ROOT, 'fredrik-glm-profile.toml.example');
-
-const REQUIRED_BUNDLE_MARKERS = Object.freeze([
-  'literal("openai_compatible")',
-  'apiKeyFile: string().optional()',
-  'providerName !== FREDRIK_GLM_PROVIDER_ID || !isConfiguredFredrikGlmAlias(model, alias)',
-  'type: providerConfig.type',
-  'apiKey: readFredrikGlmApiKeyFile(provider)',
-  'openAICompatible: true',
-  'const controls = fredrikGlmRequestControls(effectiveThinkingEffort ?? "max")',
-  'requestExtraBody["thinking"] = controls.thinking',
-  'requestExtraBody["reasoning_effort"] = controls.reasoning_effort',
-  'name: "model"',
-  'await handleModelCommand(host, args)',
-  'performModelSwitch(host, selection.alias, selection.thinking, false)',
-  '...configuredFredrikGlmModels(models)',
-  '[FREDRIK_GLM_PROVIDER_ID]: fredrikGlm',
-  'model: status.model ?? BLUN_KING_MODEL_ALIAS',
-  '!isAllowedFredrikRuntimeAlias(resumedStatus.model ?? BLUN_KING_MODEL_ALIAS, this.state.appState.availableModels)',
-]);
-
-const FORBIDDEN_BUNDLE_MARKERS = Object.freeze([
-  '..."model" in patch && patch.model?.trim().length ? { model: BLUN_KING_MODEL_ALIAS }',
-  '..."activeResponderModel" in patch && patch.activeResponderModel != null ? { activeResponderModel: BLUN_KING_MODEL_ALIAS }',
-]);
-
-function validateBundleText(source) {
-  const failures = [];
-  for (const marker of REQUIRED_BUNDLE_MARKERS) {
-    if (!source.includes(marker)) failures.push(`missing:${marker}`);
-  }
-  for (const marker of FORBIDDEN_BUNDLE_MARKERS) {
-    if (source.includes(marker)) failures.push(`forbidden:${marker}`);
-  }
-  const setSessionBlock = source.slice(source.indexOf('\n\tasync setSession(session, options = {}) {'), source.indexOf('\n\tasync syncRuntimeState(', source.indexOf('\n\tasync setSession(session, options = {}) {')));
-  if (!setSessionBlock.includes('!isAllowedFredrikRuntimeAlias(resumedStatus.model ?? BLUN_KING_MODEL_ALIAS')) failures.push('resume-missing-profile-guard');
-  const reloadBlock = source.slice(source.indexOf('\n\tasync reloadCurrentSessionView('), source.indexOf('\n\tasync restoreSession(', source.indexOf('\n\tasync reloadCurrentSessionView(')));
-  if (reloadBlock.includes('session.setModel(BLUN_KING_MODEL_ALIAS')) failures.push('reload-forces-king');
-  return failures;
-}
-
-function exactModels() {
-  return {
-    'fredrik/glm-5.3-flash': {
-      provider: policy.PROVIDER_ID,
-      model: 'glm-5.3-flash',
-      displayName: 'GLM 5.3 Flash',
-      maxContextSize: 1000000,
-      maxOutputSize: 128000,
-      capabilities: ['tool_use', 'always_thinking'],
-      supportEfforts: ['low', 'high', 'max'],
-      defaultEffort: 'max',
-    },
-    'fredrik/glm-5.3': {
-      provider: policy.PROVIDER_ID,
-      model: 'glm-5.3',
-      displayName: 'GLM 5.3',
-      maxContextSize: 1000000,
-      maxOutputSize: 128000,
-      capabilities: ['tool_use', 'always_thinking'],
-      supportEfforts: ['low', 'high', 'max'],
-      defaultEffort: 'max',
-    },
-  };
-}
-
-function run() {
-  const source = fs.readFileSync(BUNDLE_PATH, 'utf8');
-  assert.deepEqual(validateBundleText(source), []);
-
-  assert.equal(policy.BASE_URL, 'https://api.z.ai/api/coding/paas/v4');
-  assert.deepEqual([...policy.MODEL_EFFORTS], ['low', 'high', 'max']);
-  assert.deepEqual(policy.requestControls('low'), { thinking: { type: 'enabled' }, reasoning_effort: 'low' });
-  assert.deepEqual(policy.requestControls('max'), { thinking: { type: 'enabled' }, reasoning_effort: 'max' });
-  assert.throws(() => policy.requestControls('off'), /only low, high, or max/u);
-  assert.equal(policy.normalizeBaseUrl(`${policy.BASE_URL}/`), policy.BASE_URL);
-  for (const bad of ['http://api.z.ai/api/coding/paas/v4', 'https://api.z.ai/api/paas/v4', 'https://api.z.ai/api/coding/paas/v4?key=x', 'https://example.com/api/coding/paas/v4']) {
-    assert.throws(() => policy.normalizeBaseUrl(bad), /approved api\.z\.ai Coding endpoint/u);
-  }
-
-  const models = exactModels();
-  assert.deepEqual(Object.keys(policy.configuredModels(models)), ['fredrik/glm-5.3-flash', 'fredrik/glm-5.3']);
-  assert.equal(policy.isAllowedRuntimeAlias('blun/king', models), true);
-  assert.equal(policy.isAllowedRuntimeAlias('fredrik/glm-5.3', models), true);
-  assert.equal(policy.isAllowedRuntimeAlias('werner/glm-5.3', models), false);
-  const mutated = structuredClone(models);
-  mutated['fredrik/glm-5.3'].supportEfforts = ['low', 'max'];
-  assert.equal(policy.isConfiguredAlias('fredrik/glm-5.3', mutated['fredrik/glm-5.3']), false);
-
-  const providers = {
-    [policy.PROVIDER_ID]: {
-      type: policy.PROVIDER_TYPE,
-      baseUrl: policy.BASE_URL,
-      apiKeyFile: 'secrets/zai-api-key.txt',
-    },
-  };
-  assert.equal(policy.configuredProvider(providers), providers[policy.PROVIDER_ID]);
-  const diagnostic = policy.safeDiagnostic('fredrik/glm-5.3', models, providers, true);
-  assert.deepEqual(diagnostic, {
-    alias: 'fredrik/glm-5.3',
-    alias_source: 'profile-config',
-    provider: 'fredrik:zai',
-    provider_type: 'openai_compatible',
-    model: 'glm-5.3',
-    base_host: 'api.z.ai',
-    credential_source: 'profile-file',
-    credential_present: true,
-    credential_fingerprint: null,
-    wire_format: 'openai-chat-completions',
-    health: 'untested',
-  });
-  assert.equal(JSON.stringify(diagnostic).includes('zai-api-key.txt'), false);
-
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'blun-fredrik-glm-'));
-  try {
-    const secretDir = path.join(root, 'secrets');
-    fs.mkdirSync(secretDir);
-    const secretPath = path.join(secretDir, 'zai-api-key.txt');
-    const canary = 'secret-canary-never-print';
-    fs.writeFileSync(secretPath, `${canary}\n`, { encoding: 'utf8', mode: 0o600 });
-    const read = policy.readApiKeyFile(providers[policy.PROVIDER_ID], { BLUN_HOME: root });
-    assert.equal(read, canary);
-    assert.throws(() => policy.readApiKeyFile({ ...providers[policy.PROVIDER_ID], apiKey: canary }, { BLUN_HOME: root }), /only api_key_file/u);
-    assert.throws(() => policy.readApiKeyFile({ ...providers[policy.PROVIDER_ID], apiKeyFile: '..\\outside.txt' }, { BLUN_HOME: root }), /escapes the profile/u);
-    fs.writeFileSync(secretPath, `${canary}\nsecond\n`, 'utf8');
-    assert.throws(() => policy.readApiKeyFile(providers[policy.PROVIDER_ID], { BLUN_HOME: root }), /exactly one non-empty line/u);
-    fs.writeFileSync(secretPath, `${canary}\n`, 'utf8');
-    if (process.platform === 'win32') {
-      const aclMutation = spawnSync('icacls.exe', [secretPath, '/grant', '*S-1-1-0:(M)'], { encoding: 'utf8', windowsHide: true });
-      assert.equal(aclMutation.status, 0, 'ACL mutation setup failed');
-      assert.throws(() => policy.readApiKeyFile(providers[policy.PROVIDER_ID], { BLUN_HOME: root }), /ACL is too permissive/u);
-    }
-    const missingProvider = { ...providers[policy.PROVIDER_ID], apiKeyFile: 'secrets/zai-api-key.txt' };
-    fs.rmSync(secretPath, { force: true });
-    assert.throws(() => policy.readApiKeyFile(missingProvider, { BLUN_HOME: root }), (error) => {
-      assert.equal(error.message.includes(root), false);
-      return /could not be resolved safely/u.test(error.message);
-    });
-  } finally {
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-
-  const template = fs.readFileSync(TEMPLATE_PATH, 'utf8');
-  assert.match(template, /\[providers\."fredrik:zai"\]/u);
-  assert.match(template, /api_key_file = "secrets\/zai-api-key\.txt"/u);
-  assert.equal(template.includes('api_key ='), false);
-  assert.equal(template.includes('default_model'), false);
-  assert.equal(template.includes('werner'), false);
-  assert.equal(template.includes('manfred'), false);
-
-  const pkg = JSON.parse(fs.readFileSync(path.join(PACKAGE_ROOT, 'package.json'), 'utf8'));
-  assert.equal(pkg.version, '9.1.536');
-  process.stdout.write('fredrik-glm-regression: ok\n');
-}
-
-module.exports = { REQUIRED_BUNDLE_MARKERS, validateBundleText };
-
-if (require.main === module) run();

package/scripts/check-historical-tool-result-preview-regression.js

@@ -1,77 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const fs = require('node:fs');
-const path = require('node:path');
-
-const bundlePath = process.env.BLUN_BUNDLE_UNDER_TEST
-  ? path.resolve(process.env.BLUN_BUNDLE_UNDER_TEST)
-  : path.resolve(__dirname, '..', 'blun.mjs');
-const bundle = fs.readFileSync(bundlePath, 'utf8');
-
-function assert(condition, message) {
-  if (!condition) throw new Error(message);
-}
-
-const rendererMatch = bundle.match(
-  /function renderHistoricalToolResultReference\(toolName, toolCallId, text, outputPath, storageMode\) \{[\s\S]*?\n\}/,
-);
-assert(rendererMatch, 'HISTORICAL_TOOL_RESULT_PREVIEW_REGRESSION: renderer is missing');
-const policy = require('../bin/tool-result-offload-policy.cjs');
-
-const renderHistoricalToolResultReference = Function(
-  'Buffer',
-  'TOOL_RESULT_OFFLOAD_MARKER',
-  'TOOL_RESULT_RECOVERY_PAGE_LINES',
-  'TOOL_RESULT_HISTORICAL_PREVIEW_CHARS',
-  'readContinuationLineOffset',
-  'createToolResultPreview',
-  `return (${rendererMatch[0]});`,
-)(
-  Buffer,
-  '[Tool result offloaded]',
-  20,
-  policy.TOOL_RESULT_HISTORICAL_PREVIEW_CHARS,
-  () => undefined,
-  (text, maxChars) => `${text.slice(0, maxChars / 2)}\n[preview omitted]\n${text.slice(-maxChars / 2)}`,
-);
-
-const text = `HEAD-${'a'.repeat(900)}-TAIL`;
-const rendered = renderHistoricalToolResultReference(
-  'Bash',
-  'call-preview',
-  text,
-  'C:/archive/call-preview.txt',
-  'private_archive',
-);
-
-assert(
-  rendered.includes('[preview: head and tail]'),
-  'HISTORICAL_TOOL_RESULT_PREVIEW_REGRESSION: historical offload has no preview marker',
-);
-assert(
-  rendered.includes('HEAD-') && rendered.includes('-TAIL'),
-  'HISTORICAL_TOOL_RESULT_PREVIEW_REGRESSION: historical offload does not preserve both ends',
-);
-assert(
-  rendered.includes('output_path: C:/archive/call-preview.txt'),
-  'HISTORICAL_TOOL_RESULT_PREVIEW_REGRESSION: recovery path was lost',
-);
-const compacted = policy.compactPersistedToolResultReference([
-  { type: 'text', text: rendered },
-]);
-const compactedText = compacted[0].text;
-assert(
-  compactedText.includes('[preview: head and tail]'),
-  'HISTORICAL_TOOL_RESULT_PREVIEW_REGRESSION: context compaction removed the preview',
-);
-assert(
-  compactedText.includes('HEAD-') && compactedText.includes('-TAIL'),
-  'HISTORICAL_TOOL_RESULT_PREVIEW_REGRESSION: compact preview lost an endpoint',
-);
-assert(
-  compactedText.length < rendered.length,
-  'HISTORICAL_TOOL_RESULT_PREVIEW_REGRESSION: compact preview is not bounded',
-);
-
-process.stdout.write('historical-tool-result-preview-regression PASS\n');

package/scripts/check-history-pressure-offload-regression.js

@@ -1,77 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const assert = require('node:assert/strict');
-const path = require('node:path');
-
-const packageRoot = process.env.BLUN_PACKAGE_UNDER_TEST
-  ? path.resolve(process.env.BLUN_PACKAGE_UNDER_TEST)
-  : path.resolve(__dirname, '..');
-const userPolicy = require(path.join(packageRoot, 'bin', 'user-message-offload-policy.cjs'));
-const assistantPolicy = require(path.join(packageRoot, 'bin', 'assistant-message-offload-policy.cjs'));
-const skillPolicy = require(path.join(packageRoot, 'bin', 'skill-activation-performance-policy.cjs'));
-
-function textMessage(role, text, origin) {
-  return { role, content: [{ type: 'text', text }], toolCalls: [], ...(origin ? { origin } : {}) };
-}
-
-const smallHistory = Array.from({ length: 25 }, (_, index) => textMessage(
-  index === 0 ? 'user' : 'assistant',
-  'x'.repeat(5_000),
-  index === 0
-    ? { kind: 'skill_activation', skillName: 'test-skill', skillPath: 'C:/test/SKILL.md' }
-    : undefined,
-));
-const smallChars = userPolicy.historyTextChars(smallHistory);
-assert.equal(userPolicy.shouldOffloadHistoricalUserMessage({
-  historyIndex: 0,
-  historyLength: smallHistory.length,
-  historyChars: smallChars,
-  textChars: 5_000,
-}), false, 'message 21 alone must not trigger user-message offload');
-assert.equal(assistantPolicy.shouldOffloadHistoricalAssistantMessage({
-  historyIndex: 1,
-  historyLength: smallHistory.length,
-  historyChars: smallChars,
-  textChars: 5_000,
-}), false, 'message 21 alone must not trigger assistant-message offload');
-assert.equal(assistantPolicy.shouldCompactHistoricalAssistantToolNarration({
-  historyIndex: 1,
-  historyLength: smallHistory.length,
-  historyChars: smallChars,
-  textChars: 500,
-  toolCallCount: 1,
-  completedToolCallCount: 1,
-}), false, 'message 21 alone must not compact completed tool narration');
-assert.strictEqual(
-  skillPolicy.compactHistoricalSkillActivations(smallHistory),
-  smallHistory,
-  'message 21 alone must not compact active skill instructions',
-);
-
-const largeHistory = Array.from({ length: 70 }, (_, index) => textMessage(
-  index === 0 ? 'user' : 'assistant',
-  'y'.repeat(20_000),
-  index === 0
-    ? { kind: 'skill_activation', skillName: 'test-skill', skillPath: 'C:/test/SKILL.md' }
-    : undefined,
-));
-const largeChars = userPolicy.historyTextChars(largeHistory);
-assert.ok(largeChars >= 1_000_000);
-assert.equal(userPolicy.shouldOffloadHistoricalUserMessage({
-  historyIndex: 0,
-  historyLength: largeHistory.length,
-  historyChars: largeChars,
-  textChars: 20_000,
-}), true, 'real history pressure must retain archival offload');
-assert.equal(assistantPolicy.shouldOffloadHistoricalAssistantMessage({
-  historyIndex: 1,
-  historyLength: largeHistory.length,
-  historyChars: largeChars,
-  textChars: 20_000,
-}), true, 'real history pressure must retain assistant archival offload');
-const compactedSkills = skillPolicy.compactHistoricalSkillActivations(largeHistory);
-assert.notStrictEqual(compactedSkills, largeHistory);
-assert.match(compactedSkills[0].content[0].text, /Earlier skill activation compacted/u);
-
-process.stdout.write('history-pressure-offload-regression PASS\n');

package/scripts/check-mcp-startup-wait-budget.js

@@ -1,48 +0,0 @@
-'use strict';
-
-const assert = require('node:assert/strict');
-const fs = require('node:fs');
-const path = require('node:path');
-const vm = require('node:vm');
-
-const bundlePath = path.resolve(__dirname, '..', 'blun.mjs');
-const source = fs.readFileSync(bundlePath, 'utf8');
-const match = source.match(
-  /async function blunWaitForInitialMcpBudget\(mcp, signal\) \{[\s\S]*?\n\}/u,
-);
-assert.ok(match, 'the bundle must contain the bounded initial MCP wait helper');
-assert.match(
-  source,
-  /await blunWaitForInitialMcpBudget\(this\.agent\.mcp, signal\)/u,
-  'tool-capable turns must use the bounded initial MCP wait helper',
-);
-
-const context = vm.createContext({ setTimeout });
-vm.runInContext(`${match[0]}; globalThis.waitForInitialMcp = blunWaitForInitialMcpBudget;`, context);
-
-let initialLoadFinished = false;
-const mcp = {
-  waitForInitialLoad() {
-    return new Promise((resolve) => {
-      const timer = setTimeout(() => {
-        initialLoadFinished = true;
-        resolve();
-      }, 20_000);
-      timer.unref();
-    });
-  },
-};
-
-(async () => {
-  const startedAt = performance.now();
-  await context.waitForInitialMcp(mcp, undefined);
-  const elapsedMs = performance.now() - startedAt;
-
-  assert.ok(elapsedMs >= 2_300, `wait budget returned too early: ${elapsedMs} ms`);
-  assert.ok(elapsedMs < 3_200, `slow optional MCP blocked the turn: ${elapsedMs} ms`);
-  assert.equal(initialLoadFinished, false, 'the slow MCP must continue loading in the background');
-  process.stdout.write(`MCP startup wait regression: PASS (${Math.round(elapsedMs)} ms)\n`);
-})().catch((error) => {
-  process.stderr.write(`${error.stack || error}\n`);
-  process.exitCode = 1;
-});

package/scripts/check-package-regression.js

@@ -1,38 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const fs = require('node:fs');
-const crypto = require('node:crypto');
-const path = require('node:path');
-const {
-  comparePackagePaths,
-  listTarGzPaths,
-} = require('../bin/package-regression-policy.cjs');
-
-const [, , previousTarball, currentTarball, allowlistPath = path.join(__dirname, '..', 'release-planned-removals.json')] = process.argv;
-if (!previousTarball || !currentTarball) {
-  console.error('Usage: node scripts/check-package-regression.js <previous.tgz> <current.tgz> [planned-removals.json]');
-  process.exit(2);
-}
-
-const planned = JSON.parse(fs.readFileSync(allowlistPath, 'utf8'));
-const comparison = comparePackagePaths(
-  listTarGzPaths(previousTarball),
-  listTarGzPaths(currentTarball),
-  planned,
-);
-const sha256 = (filePath) => crypto.createHash('sha256').update(fs.readFileSync(filePath)).digest('hex');
-const result = {
-  ok: comparison.unexpectedRemovals.length === 0,
-  previous: { path: path.resolve(previousTarball), sha256: sha256(previousTarball) },
-  current: { path: path.resolve(currentTarball), sha256: sha256(currentTarball) },
-  checkedStablePaths: comparison.checkedStablePaths,
-  currentStablePaths: comparison.currentStablePaths,
-  removedCount: comparison.unexpectedRemovals.length,
-  unexpectedRemovals: comparison.unexpectedRemovals,
-};
-if (!result.ok) {
-  console.error(JSON.stringify(result, null, 2));
-  process.exit(1);
-}
-console.log(JSON.stringify(result, null, 2));

package/scripts/check-plugin-startup-regression.js

@@ -1,53 +0,0 @@
-'use strict';
-
-const assert = require('node:assert/strict');
-const fs = require('node:fs');
-const os = require('node:os');
-const path = require('node:path');
-
-const { installManagedAgentSpinePlugin } = require('../bin/plugin-bootstrap');
-
-const root = fs.mkdtempSync(path.join(os.tmpdir(), 'blun-plugin-startup-'));
-const packageRoot = path.join(root, 'package');
-const sourceRoot = path.join(packageRoot, 'agent-spine-plugin');
-const profileA = path.join(root, 'profiles', 'a');
-const profileB = path.join(root, 'profiles', 'b');
-
-fs.mkdirSync(path.join(sourceRoot, 'src'), { recursive: true });
-fs.writeFileSync(path.join(sourceRoot, 'package.json'), '{"name":"agent-spine"}\n');
-fs.writeFileSync(path.join(sourceRoot, 'src', 'mcp.js'), 'export const ready = true;\n');
-
-const originalReadFileSync = fs.readFileSync;
-let sourceReads = 0;
-fs.readFileSync = function countedReadFileSync(filePath, ...args) {
-  const absolutePath = path.resolve(String(filePath));
-  if (absolutePath === sourceRoot || absolutePath.startsWith(`${sourceRoot}${path.sep}`)) {
-    sourceReads += 1;
-  }
-  return originalReadFileSync.call(this, filePath, ...args);
-};
-
-try {
-  const first = installManagedAgentSpinePlugin({ packageRoot, blunDir: profileA });
-  installManagedAgentSpinePlugin({ packageRoot, blunDir: profileA });
-  installManagedAgentSpinePlugin({ packageRoot, blunDir: profileB });
-  installManagedAgentSpinePlugin({ packageRoot, blunDir: profileB });
-
-  assert.equal(
-    sourceReads,
-    2,
-    'one launcher process must read each managed source file only once',
-  );
-
-  fs.writeFileSync(path.join(first.pluginRoot, 'src', 'mcp.js'), 'tampered\n');
-  assert.throws(
-    () => installManagedAgentSpinePlugin({ packageRoot, blunDir: profileA }),
-    /digest mismatch/,
-    'source caching must not weaken installed-tree verification',
-  );
-
-  process.stdout.write('Plugin startup regression gate: PASS\n');
-} finally {
-  fs.readFileSync = originalReadFileSync;
-  fs.rmSync(root, { recursive: true, force: true });
-}