dsh-plugin-wsl-env 0.14.0 → 0.16.0

package/lib/index.js

@@ -40,6 +40,7 @@
  * @module dsh-plugin-wsl
  */
 import z from "@deepseek-ai/schemastery";
+import { randomUUID } from "node:crypto";
 import { LocalBashExecutor } from "@deepseek-ai/dsh-bash-local";
 import { LocalFileSystem } from "@deepseek-ai/dsh-fs-local";
 import { FsError } from "@deepseek-ai/dsh-fs";
@@ -159,6 +160,29 @@ function wslWritableRoots(policy, distro) {
     }
     return [...roots];
 }
+/**
+ * The WSL shell executor's validated config — the keys of
+ * {@link WslShellExecutor.Config}, which the upstream `LocalBashExecutor`
+ * config type does not know. The seven volatile fields arrive as live
+ * wrappers, so they are spelled as their `.get()` shape (the reading
+ * {@link configuredCwd} and `hostCwd` perform).
+ */
+/**
+ * The effective `/mnt` mask for a config: `interopVisibility` is the stance
+ * key (WSL-314) and takes precedence whenever it names a stance; the legacy
+ * `maskWindowsDrive` boolean answers only when the stance key is left at its
+ * `visible` default. `disabled` masks in-session — the belt — while the
+ * distro-level closure (`[interop] enabled=false` + `wsl --shutdown`)
+ * remains a documented, user-applied step a config key must not perform.
+ *
+ * @param config - anything carrying the two keys.
+ * @returns whether confined profiles shadow `/mnt`.
+ */
+export function effectiveMaskWindowsDrive(config) {
+    if (config.interopVisibility !== undefined)
+        return config.interopVisibility !== "visible";
+    return config.maskWindowsDrive === true;
+}
 const inheritedSpawnSpec = LocalBashExecutor.prototype.spawnSpec;
 /**
  * How long an `auto` distro that could not host a session runtime stays
@@ -257,6 +281,26 @@ export class WslShellExecutor extends LocalBashExecutor {
          * complete closure is distro-level: `[interop] enabled=false` in
          * `wsl.conf`.
          */
+        /**
+         * The interop stance in one key (WSL-314), expanding to the per-key
+         * values the measured matrix documents:
+         *
+         * - `visible` (default) — nothing masked; a confined command can read
+         *   `/mnt` and launch Windows executables through interop, which escapes
+         *   the Linux sandbox entirely.
+         * - `masked` — `maskWindowsDrive: true`: `/mnt` is shadowed with an empty
+         *   tmpfs; the drive's files and executables are unreachable (binfmt can
+         *   still run a workspace-written .exe, so enforcement stays `partial`).
+         * - `disabled` — `masked`, plus the distro-level closure: `[interop]
+         *   enabled=false` in `/etc/wsl.conf` + `wsl --shutdown`, which the
+         *   doctor's remedy prints as copy-paste (a config key does not write
+         *   distro config; enforcement is the kernel's, not the schema's).
+         *
+         * When set at all it takes precedence over the legacy
+         * `maskWindowsDrive` boolean below (unset — the default — lets that
+         * boolean answer); the boolean remains for existing profiles.
+         */
+        interopVisibility: z.union(["visible", "masked", "disabled"]),
         maskWindowsDrive: z.boolean().default(false),
         /**
          * Default workdir for a request that names none; accepts `/home/andy/proj`,
@@ -307,11 +351,12 @@ export class WslShellExecutor extends LocalBashExecutor {
         this.resolvedHomes = new Map();
         this.mode = config.sandbox ? ctx.sandboxPolicy.defaultMode : undefined;
         this.sandbox = config.sandbox
-            ? new WslSandbox({ wslPath: config.wslPath, maskWindowsDrive: config.maskWindowsDrive })
+            ? new WslSandbox({ wslPath: config.wslPath, maskWindowsDrive: effectiveMaskWindowsDrive(config) })
             : undefined;
         this.processFacts = new Map();
         this.sessionRuntimes = sessionRuntimes;
         this.sessionRuntimeEntries = new Map();
+        this.sessionRuntimeOwner = randomUUID();
         this.sessionScopeProbe = (argv) => runCapture(argv);
         this.sessionRuntimePreflight = new Set();
         this.autoSessionScope = new Map();
@@ -442,7 +487,7 @@ export class WslShellExecutor extends LocalBashExecutor {
     }
     /**
      * The persistent session runtime for one policy, when `sessionSandbox` is
-     * on. The executor holds one reference per `(distro, workspace, policy)` and
+     * on. The executor holds one reference per `(session, distro, workspace, policy)` and
      * releases them when the session's scope disposes.
      *
      * @param policy - the resolved file-effect policy, when the executor has one.
@@ -456,16 +501,18 @@ export class WslShellExecutor extends LocalBashExecutor {
             return undefined;
         const mode = policy?.mode ?? "danger-full-access";
         const workspaceRoot = policy?.workspaceRoot ?? (configuredCwd(this.config) || resolved.workdir);
-        const key = SessionRuntimes.key({ distro, workspaceRoot, mode, maskWindowsDrive: config.maskWindowsDrive });
+        const sessionId = policy?.sessionId || resolved.dshEnv?.DSH_SESSION_ID || this.sessionRuntimeOwner;
+        const key = SessionRuntimes.key({ sessionId, distro, workspaceRoot, mode, maskWindowsDrive: effectiveMaskWindowsDrive(config) });
         const held = this.sessionRuntimeEntries.get(key);
         if (held !== undefined)
             return held;
         const entry = this.sessionRuntimes.acquire({
+            sessionId,
             distro,
             wslPath: config.wslPath,
             workspaceRoot,
             mode,
-            maskWindowsDrive: config.maskWindowsDrive,
+            maskWindowsDrive: effectiveMaskWindowsDrive(config),
         });
         this.sessionRuntimeEntries.set(key, entry);
         return entry;
@@ -833,7 +880,7 @@ export class WslShellExecutor extends LocalBashExecutor {
             : confined !== undefined ? confined.argv : this.distroArgv(resolved, shell);
         // The managed `DSH_*` snapshot merges last, exactly as the one-shot path's
         // spawn env does (`ShellExecSpec`: `dshEnv` wins over `env`). The agent
-        // applies these as SETENV frames immediately before the command's EXEC, so
+        // applies these to the individual command, so
         // the resident path now carries `DSH_HOME`, `DSH_SESSION_ID` and the
         // `DSH_WSL_*` facts too — without this the whole registry was invisible on
         // the default path while the one-shot fallback forwarded it.
@@ -1031,11 +1078,11 @@ export class WslFileSystem extends LocalFileSystem {
         sandbox: z.boolean().default(true),
         /**
          * Run confined mutations in the session's systemd user scope — the same
-         * runtime the shell executor acquires for the same (distro, workspace,
-         * policy) — instead of a per-policy confined resident. The kernel
-         * enforcement is the runtime's mount profile, so commands and writes see
-         * the same `/tmp` and workspace; the scope stops when the session's
-         * providers release it. Requires systemd + `Linger`, like `wsl-shell`'s
+         * runtime the shell executor acquires for the same session, distro,
+         * workspace and policy — instead of a per-policy confined resident. A
+         * missing session ID keeps the providers separate. The kernel enforcement
+         * is the runtime's mount profile; the scope stops when its providers
+         * release it. Requires systemd + `Linger`, like `wsl-shell`'s
          * `sessionSandbox`; the preflight refuses with the remedy. Off for direct
          * constructions; on in the shipped preset.
          */
@@ -1104,6 +1151,7 @@ export class WslFileSystem extends LocalFileSystem {
         this.agentInstances = new Map();
         this.sessionRuntimes = sessionRuntimes;
         this.sessionRuntimeEntries = new Map();
+        this.sessionRuntimeOwner = randomUUID();
         this.sessionScopeProbe = (argv) => runCapture(argv);
         this.sessionRuntimePreflight = new Set();
         this.autoSessionScope = new Map();
@@ -1220,11 +1268,13 @@ export class WslFileSystem extends LocalFileSystem {
         if (!config.sessionSandbox)
             return undefined;
         const workspaceRoot = policy.workspaceRoot || config.cwd;
-        const key = SessionRuntimes.key({ distro, workspaceRoot, mode: policy.mode, maskWindowsDrive: config.maskWindowsDrive });
+        const sessionId = policy.sessionId || this.sessionRuntimeOwner;
+        const key = SessionRuntimes.key({ sessionId, distro, workspaceRoot, mode: policy.mode, maskWindowsDrive: config.maskWindowsDrive });
         const held = this.sessionRuntimeEntries.get(key);
         if (held !== undefined)
             return held;
         const entry = this.sessionRuntimes.acquire({
+            sessionId,
             distro,
             wslPath: config.wslPath,
             workspaceRoot,
@@ -1708,8 +1758,8 @@ export class WslFileSystem extends LocalFileSystem {
      * Fence the write by the per-call policy, then publish through the
      * substrate. The fence's fresh target is the one checked and written, so a
      * refusal costs no I/O and cannot be raced by a swapped symlink; the guard
-     * rides the write op, where the agent re-verifies it one syscall before the
-     * rename and the confined resident enforces it in the kernel.
+     * rides the write op, where the agent re-verifies it before the rename;
+     * the confined resident enforces the mount boundary in the kernel.
      *
      * @param target - the resolved target.
      * @param content - the full new file content.

package/lib/listing.d.ts

@@ -83,32 +83,39 @@ export declare function boundedInsert<T extends {
 /**
  * The distro-side argv one picker level is listed with.
  *
- * `-1` is one entry per line, `-A` keeps dot-entries but drops `.` and `..`,
  * `-L` follows symlinks so a link to a directory reports as a directory and a
  * broken link drops out (exactly what the per-entry `stat` the host path used
- * to pay one 9p round trip for), and `-p` marks directories with the trailing
- * `/` the parser keys on.
+ * to pay one 9p round trip for); `-maxdepth 1` keeps the listing to one level;
+ * `-mindepth 1` drops the start point the way `ls -A` dropped `.` and `..`;
+ * `-type d` keeps only enterable rows; `-print0` separates entries with NUL —
+ * a filename containing a newline arrives whole instead of splitting into two
+ * rows, which is the bug that retired the `ls -1ALp` line parse (WSL-306).
+ * `find` is unsorted; the parser sorts.
+ *
+ * Busybox find (Alpine) supports every flag here — verified on alpine:3,
+ * debian:stable-slim and fedora:latest with a newline-named fixture.
  *
  * @param linuxDir - the absolute Linux directory to list.
  * @returns the argv for the agent or a `wsl.exe --exec` launch.
  */
-export declare function lsListingArgv(linuxDir: string): string[];
+export declare function dirListingArgv(linuxDir: string): string[];
 /**
- * Parse one `ls -1ALp` listing into the picker's rows.
+ * Parse one `find -print0` listing into the picker's rows.
  *
- * A line is a row when it ends with `/` — a directory, or a symlink `-L`
- * resolved to one; files and dangling links are skipped, matching the host
- * path's behaviour. The parse reads the listing as UTF-8 lines, so a filename
- * containing a newline would split into two rows — the same limitation class
- * the one-shot transport has always had, accepted here with the 9p walk it
- * replaces.
+ * Entries arrive NUL-separated as `<linuxDir>/<name>`; the linuxDir prefix is
+ * stripped to recover the bare name (the root listing's `/name` form
+ * included). `find` is unsorted, so the names are sorted host-side — a
+ * deterministic code-point order, which is what the picker shows. The first
+ * `maxEntries` names become rows; a level with more is flagged truncated.
  *
  * @param stdout - the listing's raw stdout.
+ * @param linuxDir - the absolute Linux directory that was listed (the argv's
+ * own spelling — the prefix stripped from every entry).
  * @param parent - the listed directory, in the UNC form the rows carry.
  * @param maxEntries - the row bound; a level with more is flagged truncated.
  * @returns the first `maxEntries` rows and whether the level had more.
  */
-export declare function parseLsListing(stdout: string | Buffer, parent: string, maxEntries: number): {
+export declare function parseDirListing(stdout: string | Buffer, linuxDir: string, parent: string, maxEntries: number): {
     rows: ListingRow[];
     truncated: boolean;
 };

package/lib/listing.js

@@ -126,42 +126,57 @@ export function boundedInsert(window, candidate, keep) {
 /**
  * The distro-side argv one picker level is listed with.
  *
- * `-1` is one entry per line, `-A` keeps dot-entries but drops `.` and `..`,
  * `-L` follows symlinks so a link to a directory reports as a directory and a
  * broken link drops out (exactly what the per-entry `stat` the host path used
- * to pay one 9p round trip for), and `-p` marks directories with the trailing
- * `/` the parser keys on.
+ * to pay one 9p round trip for); `-maxdepth 1` keeps the listing to one level;
+ * `-mindepth 1` drops the start point the way `ls -A` dropped `.` and `..`;
+ * `-type d` keeps only enterable rows; `-print0` separates entries with NUL —
+ * a filename containing a newline arrives whole instead of splitting into two
+ * rows, which is the bug that retired the `ls -1ALp` line parse (WSL-306).
+ * `find` is unsorted; the parser sorts.
+ *
+ * Busybox find (Alpine) supports every flag here — verified on alpine:3,
+ * debian:stable-slim and fedora:latest with a newline-named fixture.
  *
  * @param linuxDir - the absolute Linux directory to list.
  * @returns the argv for the agent or a `wsl.exe --exec` launch.
  */
-export function lsListingArgv(linuxDir) {
-    return ["ls", "-1ALp", "--", linuxDir];
+export function dirListingArgv(linuxDir) {
+    return ["find", "-L", linuxDir, "-maxdepth", "1", "-mindepth", "1", "-type", "d", "-print0"];
 }
 /**
- * Parse one `ls -1ALp` listing into the picker's rows.
+ * Parse one `find -print0` listing into the picker's rows.
  *
- * A line is a row when it ends with `/` — a directory, or a symlink `-L`
- * resolved to one; files and dangling links are skipped, matching the host
- * path's behaviour. The parse reads the listing as UTF-8 lines, so a filename
- * containing a newline would split into two rows — the same limitation class
- * the one-shot transport has always had, accepted here with the 9p walk it
- * replaces.
+ * Entries arrive NUL-separated as `<linuxDir>/<name>`; the linuxDir prefix is
+ * stripped to recover the bare name (the root listing's `/name` form
+ * included). `find` is unsorted, so the names are sorted host-side — a
+ * deterministic code-point order, which is what the picker shows. The first
+ * `maxEntries` names become rows; a level with more is flagged truncated.
  *
  * @param stdout - the listing's raw stdout.
+ * @param linuxDir - the absolute Linux directory that was listed (the argv's
+ * own spelling — the prefix stripped from every entry).
  * @param parent - the listed directory, in the UNC form the rows carry.
  * @param maxEntries - the row bound; a level with more is flagged truncated.
  * @returns the first `maxEntries` rows and whether the level had more.
  */
-export function parseLsListing(stdout, parent, maxEntries) {
-    const rows = [];
-    let truncated = false;
-    for (const line of String(stdout).split("\n")) {
-        if (!line.endsWith("/"))
+export function parseDirListing(stdout, linuxDir, parent, maxEntries) {
+    const prefix = linuxDir === "/" ? "/" : `${linuxDir}/`;
+    const names = [];
+    for (const entry of String(stdout).split("\0")) {
+        if (entry.length === 0)
             continue;
-        const name = line.slice(0, -1);
-        if (name.length === 0)
+        const name = entry.startsWith(prefix) ? entry.slice(prefix.length) : entry;
+        // A defensive guard, not an expected shape: `-maxdepth 1` output is
+        // always `<dir>/<name>`, so a stray separator means a broken listing.
+        if (name.length === 0 || name.includes("/"))
             continue;
+        names.push(name);
+    }
+    names.sort();
+    const rows = [];
+    let truncated = false;
+    for (const name of names) {
         if (rows.length === maxEntries) {
             truncated = true;
             break;

package/lib/picker.js

@@ -53,7 +53,7 @@ import { join, resolve } from "node:path";
 import z from "@deepseek-ai/schemastery";
 import { DirectoryPicker, DirectoryPickerError } from "@deepseek-ai/dsh-host-directory-picker";
 import { UNC_PROVIDER_ROOT, distroRoot, isProviderRoot, isWslUnc, uncToPosix } from "./paths.js";
-import { breadcrumbs, boundedInsert, fullyQualified, lsListingArgv, parseLsListing } from "./listing.js";
+import { breadcrumbs, boundedInsert, dirListingArgv, fullyQualified, parseDirListing } from "./listing.js";
 import { listDistros, linuxHome, runCapture } from "./wsl.js";
 import { sharedAgent } from "./agent-shared.js";
 import { AgentUnavailableError } from "./agent-errors.js";
@@ -321,7 +321,7 @@ export class WslDirectoryPicker extends DirectoryPicker {
         try {
             const result = await sharedAgent(parsed.distro).exec({
                 cwd: linuxDir,
-                argv: lsListingArgv(linuxDir),
+                argv: dirListingArgv(linuxDir),
                 timeoutMs: 15_000,
                 signal,
             });
@@ -335,13 +335,13 @@ export class WslDirectoryPicker extends DirectoryPicker {
             if (!(error instanceof AgentUnavailableError))
                 throw error;
             try {
-                stdout = await runCapture([this.config.wslPath, "-d", parsed.distro, "--cd", linuxDir, "--exec", ...lsListingArgv(linuxDir)], signal);
+                stdout = await runCapture([this.config.wslPath, "-d", parsed.distro, "--cd", linuxDir, "--exec", ...dirListingArgv(linuxDir)], signal);
             }
             catch (fallbackError) {
                 throw new DirectoryPickerError("directory-unreadable", target, `cannot list ${target}: ${messageOf(fallbackError)}`);
             }
         }
-        return parseLsListing(stdout, target, this.config.maxEntries);
+        return parseDirListing(stdout, linuxDir, target, this.config.maxEntries);
     }
     /**
      * List one Windows level with the host's own walk — native I/O on a native

package/lib/session-runtime.d.ts

@@ -1,7 +1,7 @@
 /**
  * The session-scoped runtime registry (ADR 0001).
  *
- * One long-lived agent per `(distro, workspaceRoot, policy)`, shared by the
+ * One long-lived agent per `(sessionId, distro, workspaceRoot, policy)`, shared by the
  * providers that need it and refcounted: the first `acquire` spawns the agent
  * inside a systemd user scope, the last `release` closes the agent and stops
  * the scope (the cgroup then reaps any background dev server a command left
@@ -43,6 +43,8 @@ export declare function probeSessionRuntime({ wslPath, distro, run }: {
 }): Promise<string | null>;
 /** One request for a session runtime. */
 export interface SessionRuntimeRequest {
+    /** The session identity; absent requests each get a separate runtime. */
+    sessionId?: string;
     /** The distro the runtime lives in. */
     distro: string;
     /** The `wsl.exe` path; defaults to `wsl.exe`. */
@@ -125,14 +127,14 @@ export declare class SessionRuntimes {
      */
     constructor(options?: SessionRuntimeOptions);
     /**
-     * The key a request addresses: distro, workspace, mode and mask. A policy
+     * The key a request addresses: session, distro, workspace, mode and mask. A policy
      * change is a different runtime, because the mount profile is fixed for the
      * agent's lifetime.
      *
      * @param request - the runtime request.
      * @returns the registry key.
      */
-    static key(request: Pick<SessionRuntimeRequest, "distro" | "workspaceRoot" | "mode" | "maskWindowsDrive">): string;
+    static key(request: Pick<SessionRuntimeRequest, "distro" | "workspaceRoot" | "mode" | "maskWindowsDrive" | "sessionId">): string;
     /**
      * Acquire the runtime for one key, creating it on first use.
      *

package/lib/session-runtime.js

@@ -1,7 +1,7 @@
 /**
  * The session-scoped runtime registry (ADR 0001).
  *
- * One long-lived agent per `(distro, workspaceRoot, policy)`, shared by the
+ * One long-lived agent per `(sessionId, distro, workspaceRoot, policy)`, shared by the
  * providers that need it and refcounted: the first `acquire` spawns the agent
  * inside a systemd user scope, the last `release` closes the agent and stops
  * the scope (the cgroup then reaps any background dev server a command left
@@ -83,6 +83,7 @@ const spawnSessionAgent = (options) => {
             idleMs: options.idleMs,
             leaseMs: options.leaseMs,
             signalable: false,
+            serialRequests: false,
             spawnTransport: ({ wslPath, distro, argvPrefix }) => spawn(wslPath, ["-d", distro, "--exec", ...argvPrefix, native.path], {
                 stdio: ["pipe", "pipe", "pipe"],
                 windowsHide: true,
@@ -137,7 +138,7 @@ export class SessionRuntimes {
         this.token = options.token ?? defaultToken;
     }
     /**
-     * The key a request addresses: distro, workspace, mode and mask. A policy
+     * The key a request addresses: session, distro, workspace, mode and mask. A policy
      * change is a different runtime, because the mount profile is fixed for the
      * agent's lifetime.
      *
@@ -145,7 +146,7 @@ export class SessionRuntimes {
      * @returns the registry key.
      */
     static key(request) {
-        return [request.distro, request.workspaceRoot, request.mode, request.maskWindowsDrive === true ? "masked" : "visible"].join("\u0000");
+        return [request.sessionId ?? "", request.distro, request.workspaceRoot, request.mode, request.maskWindowsDrive === true ? "masked" : "visible"].join("\u0000");
     }
     /**
      * Acquire the runtime for one key, creating it on first use.
@@ -154,7 +155,7 @@ export class SessionRuntimes {
      * @returns the live entry; the caller holds one reference.
      */
     acquire(request) {
-        const key = SessionRuntimes.key(request);
+        const key = SessionRuntimes.key({ ...request, sessionId: request.sessionId || defaultToken() });
         const existing = this.runtimes.get(key);
         if (existing !== undefined) {
             existing.refs += 1;

package/locale/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "WSL execution environment",
-    "description": "Runs a DeepSeek Harness session against a WSL distro: shell, file reads/writes and command execution happen inside the distro, the directory picker and the GUI terminal target distro paths, and commands are confined by in-distro bubblewrap."
+    "description": "Opens the project workspace inside a WSL Linux instance: command execution, shell scripts and file access all run in the Linux environment for the full Linux shell toolchain, with commands confined by bubblewrap."
   }
 }

package/locale/zh.json

@@ -1,6 +1,6 @@
 {
   "meta": {
     "title": "WSL 执行环境",
-    "description": "让 DeepSeek Harness 以 WSL 子系统作为会话的执行环境：shell、文件读写与命令执行均在子系统内完成，目录选择器与 GUI 终端同样定位到子系统路径，并通过子系统内的 bubblewrap 对命令进行沙箱隔离"
+    "description": "在 WSL 的 Linux 实例中打开项目工作区，在对应 Linux 空间中进行命令执行、运行 shell 脚本和文件访问，以获得全套 Linux Shell 工具链收益，并通过 bubblewrap 对命令进行沙箱隔离"
   }
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-plugin-wsl-env",
-  "version": "0.14.0",
-  "description": "让 DeepSeek Harness 以 WSL 子系统作为会话的执行环境：shell、文件读写与命令执行均在子系统内完成，目录选择器与 GUI 终端同样定位到子系统路径，并通过子系统内的 bubblewrap 对命令进行沙箱隔离",
+  "version": "0.16.0",
+  "description": "在 WSL 的 Linux 实例中打开项目工作区，在对应 Linux 空间中进行命令执行、运行 shell 脚本和文件访问，以获得全套 Linux Shell 工具链收益，并通过 bubblewrap 对命令进行沙箱隔离",
   "keywords": [
     "deepseek-harness",
     "dsh",
@@ -96,9 +96,17 @@
     "README.md",
     "docs/README.zh.md",
     "docs/QUICKSTART.md",
+    "docs/screenshots/*.png",
     "docs/PERFORMANCE.md",
+    "docs/COMPATIBILITY.md",
     "docs/CONFIGURATION.md",
     "docs/LIMITATIONS.md",
+    "docs/RELEASING.md",
+    "docs/REQUIREMENTS.zh.md",
+    "docs/root-fs-routing.md",
+    "docs/VALUE.zh.md",
+    "docs/UPSTREAM-OPEN-IN-APP.md",
+    "docs/adr/0002-native-agent.md",
     "docs/PARITY.md",
     "docs/PEER-PARITY.md",
     "docs/UPSTREAM-FSIO-EXPORT.md",
@@ -125,9 +133,9 @@
     "lint:types": "tsc --noEmit",
     "build": "node scripts/build.mjs",
     "lint:build": "node test/build-freshness.mjs",
-    "test:coverage": "node --test --experimental-test-coverage --test-coverage-lines=85 --test-coverage-branches=84 --test-coverage-functions=70 --test-coverage-exclude='scripts/**' test/agent-exec.test.mjs test/agent-fs-script.test.mjs test/agent-protocol.test.mjs test/agent.test.mjs test/fs-substrate.test.mjs test/fs.boot.test.mjs test/composition.test.mjs test/provider.test.mjs test/file-reference-wsl.test.mjs test/fsio-agent.test.mjs test/fsio-text.test.mjs test/git-route.test.mjs test/listing.test.mjs test/paths.test.mjs test/ports.test.mjs test/preset-choice.test.mjs test/probe-cache.test.mjs test/preflight.test.mjs test/sandbox.test.mjs test/search-exec.test.mjs test/search-route.test.mjs test/shell.test.mjs test/shell-env.test.mjs test/terminal-activity.test.mjs test/terminal.test.mjs test/watcher.test.mjs test/wsl.test.mjs test/fs-decisions.test.mjs test/session-scope.test.mjs test/session-runtime.test.mjs test/native-agent.test.mjs test/peers.test.mjs test/agent-shared.test.mjs test/distro-route.test.mjs test/fs-routing.test.mjs test/doctor.test.mjs test/profile-preset.test.mjs test/packaging.test.mjs test/peer-canary.test.mjs",
+    "test:coverage": "node --test --experimental-test-coverage --test-coverage-lines=85 --test-coverage-branches=84 --test-coverage-functions=70 --test-coverage-exclude='scripts/**' --test-coverage-exclude='test/**' test/agent-exec.test.mjs test/agent-fs-script.test.mjs test/agent-protocol.test.mjs test/agent.test.mjs test/fs-substrate.test.mjs test/fs.boot.test.mjs test/composition.test.mjs test/provider.test.mjs test/file-reference-wsl.test.mjs test/fsio-agent.test.mjs test/fsio-text.test.mjs test/git-route.test.mjs test/listing.test.mjs test/paths.test.mjs test/ports.test.mjs test/preset-choice.test.mjs test/probe-cache.test.mjs test/preflight.test.mjs test/sandbox.test.mjs test/search-exec.test.mjs test/search-route.test.mjs test/shell.test.mjs test/shell-env.test.mjs test/terminal-activity.test.mjs test/terminal.test.mjs test/watcher.test.mjs test/wsl.test.mjs test/fs-decisions.test.mjs test/session-scope.test.mjs test/session-runtime.test.mjs test/native-agent.test.mjs test/peers.test.mjs test/agent-shared.test.mjs test/distro-route.test.mjs test/fs-routing.test.mjs test/doctor.test.mjs test/profile-preset.test.mjs test/packaging.test.mjs test/peer-canary.test.mjs test/probe-runner.test.mjs",
     "test:syntax": "node test/syntax.mjs",
-    "test:unit": "node --test test/fs.boot.test.mjs test/fsio-text.test.mjs test/composition.test.mjs test/provider.test.mjs test/file-reference-wsl.test.mjs test/paths.test.mjs test/listing.test.mjs test/shell.test.mjs test/shell-env.test.mjs test/terminal.test.mjs test/probe-cache.test.mjs test/preflight.test.mjs test/preset-choice.test.mjs test/sandbox.test.mjs test/agent-protocol.test.mjs test/agent.test.mjs test/agent-fs-script.test.mjs test/fsio-agent.test.mjs test/fs-substrate.test.mjs test/agent-exec.test.mjs test/ports.test.mjs test/watcher.test.mjs test/wsl.test.mjs test/fs-decisions.test.mjs test/git-route.test.mjs test/search-route.test.mjs test/search-exec.test.mjs test/terminal-activity.test.mjs test/session-scope.test.mjs test/session-runtime.test.mjs test/native-agent.test.mjs test/peers.test.mjs test/agent-shared.test.mjs test/distro-route.test.mjs test/fs-routing.test.mjs test/doctor.test.mjs test/profile-preset.test.mjs test/packaging.test.mjs test/peer-canary.test.mjs",
+    "test:unit": "node --test test/fs.boot.test.mjs test/fsio-text.test.mjs test/composition.test.mjs test/provider.test.mjs test/file-reference-wsl.test.mjs test/paths.test.mjs test/listing.test.mjs test/shell.test.mjs test/shell-env.test.mjs test/terminal.test.mjs test/probe-cache.test.mjs test/preflight.test.mjs test/preset-choice.test.mjs test/sandbox.test.mjs test/agent-protocol.test.mjs test/agent.test.mjs test/agent-fs-script.test.mjs test/fsio-agent.test.mjs test/fs-substrate.test.mjs test/agent-exec.test.mjs test/ports.test.mjs test/watcher.test.mjs test/wsl.test.mjs test/fs-decisions.test.mjs test/git-route.test.mjs test/search-route.test.mjs test/search-exec.test.mjs test/terminal-activity.test.mjs test/session-scope.test.mjs test/session-runtime.test.mjs test/native-agent.test.mjs test/peers.test.mjs test/agent-shared.test.mjs test/distro-route.test.mjs test/fs-routing.test.mjs test/doctor.test.mjs test/profile-preset.test.mjs test/packaging.test.mjs test/peer-canary.test.mjs test/probe-runner.test.mjs",
     "lint:style": "node test/style.mjs",
     "lint:links": "node scripts/check-links.mjs",
     "prepublishOnly": "pnpm test",
@@ -139,6 +147,7 @@
     "probe:terminal": "bash test/probe/terminal.sh",
     "probe:sandbox": "bash test/probe/sandbox.sh",
     "probe:sandbox-shell": "bash test/probe/sandbox-shell.sh",
+    "probe:interop-shell": "bash test/probe/interop-shell.sh",
     "sync:windows": "bash test/probe/sync-to-windows.sh",
     "probe:watch": "bash test/probe/watch.sh",
     "probe:agent": "bash test/probe/agent.sh",

package/scripts/diagnose.sh

@@ -3,7 +3,7 @@
 # to change the machine. `--fix`/`--install` are refused here on purpose —
 # diagnostics collected for a bug report must not repair anything.
 #
-#   pnpm run diagnose -- [distro] [--json]
+#   pnpm run diagnose [distro] [--json]
 #
 # Doctor is `scripts/doctor.mjs`; see its header for what it covers. Exit status
 # follows doctor: 0 when no check failed, 1 when one did.