dsh-rule-engine 0.6.3 → 0.6.5

package/scripts/audit-mount-consistency.mjs

@@ -1,198 +0,0 @@
-// FULL mount-consistency audit: bundles vs user patch inserts vs bundle-internal patches vs dependencies
-// Goal: detect ANY loader entry id that would be mounted more than once (duplicate loader entry crash)
-import { readFileSync, existsSync, readdirSync } from 'node:fs'
-import { createRequire } from 'node:module'
-import { join, dirname } from 'node:path'
-
-const DSH_HOME = process.env.DSH_HOME || 'D:/example workspace/.dsh'
-const DEFAULT_PROFILE = 'web'
-function profileNameFromArgs() {
-  const argv = process.argv
-  let idx = argv.indexOf('--profile')
-  if (idx >= 0 && argv[idx + 1]) return argv[idx + 1]
-  const eq = argv.find((a) => a.startsWith('--profile='))
-  if (eq) return eq.slice('--profile='.length)
-  return DEFAULT_PROFILE
-}
-const PROFILE_NAME = profileNameFromArgs()
-const PROFILE = join(DSH_HOME, 'profiles', PROFILE_NAME)
-console.log(`Profile: ${PROFILE_NAME} -> ${PROFILE}`)
-if (!existsSync(join(PROFILE, 'package.json'))) {
-  console.error(`[ERROR] profile package.json not found: ${join(PROFILE, 'package.json')}`)
-  process.exit(2)
-}
-const profilePkg = JSON.parse(readFileSync(join(PROFILE, 'package.json'), 'utf8'))
-const requireFromProfile = createRequire(join(PROFILE, 'package.json'))
-
-/** 从 patch 文本提取 insert 块中的 loader entry id（支持块状和行内两种写法） */
-function extractInsertIds(text) {
-  const ids = []
-  const lines = String(text || '').split('\n')
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i]
-    if (!/^-\s*insert:/i.test(line)) continue
-    const rest = line.replace(/^-\s*insert:\s*/i, '')
-    if (rest.trim()) {
-      // 行内形式：- insert: { id: xxx } / - insert: - id: xxx
-      for (const m of rest.matchAll(/id:\s*["']?([^\s#"']+)/gi)) ids.push(m[1])
-      continue
-    }
-    // 块状形式：- insert: 后跟缩进的 - id: xxx
-    for (let j = i + 1; j < lines.length; j++) {
-      const l = lines[j]
-      if (/^\S/.test(l) && !/^\s/.test(l)) break // 回到顶层条目
-      const m = l.match(/^\s+- id:\s*["']?([^\s#"']+)/i)
-      if (m) ids.push(m[1])
-    }
-  }
-  return [...new Set(ids)]
-}
-
-/** 解析 bundle 包路径：优先 profile/node_modules，再 profiles/node_modules，最后用 Node 解析 */
-function resolveBundlePkg(b) {
-  const candidates = [
-    join(PROFILE, 'node_modules', b, 'package.json'),
-    join(DSH_HOME, 'profiles', 'node_modules', b, 'package.json')
-  ]
-  if (b.startsWith('@')) {
-    const [scope, name] = b.split('/')
-    candidates.push(join(DSH_HOME, 'profiles', 'node_modules', scope, name, 'package.json'))
-  }
-  for (const c of candidates) if (existsSync(c)) return c
-  try {
-    return requireFromProfile.resolve(`${b}/package.json`)
-  } catch {
-    return null
-  }
-}
-
-/** 读取一个 patch 文件并把其中的 insert id 记入 sources */
-function collectPatchInserts(patchPath, viaLabel) {
-  if (!existsSync(patchPath)) return []
-  const ids = extractInsertIds(readFileSync(patchPath, 'utf8'))
-  for (const id of ids) sources.push({ id, via: viaLabel, file: patchPath })
-  return ids
-}
-
-// ---- collect all sources of loader entry ids ----
-const sources = [] // {id, via, file}
-
-// 1. profile bundles array (each bundle's internal cordis.patch.yml inserts + the bundle row itself)
-const bundles = profilePkg.dsh?.profile?.bundles || []
-console.log('=== 1. profile bundles array (' + bundles.length + ') ===')
-for (const b of bundles) {
-  console.log('  bundle:', b)
-  const pkgPath = resolveBundlePkg(b)
-  if (!pkgPath) { console.log('    [WARN] package.json not found for ' + b); continue }
-  const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'))
-  const patchRel = pkg.dsh?.bundle?.patch
-  if (patchRel) {
-    const patchPath = join(dirname(pkgPath), patchRel)
-    const inserts = collectPatchInserts(patchPath, `bundle-internal patch of ${b}`)
-    if (existsSync(patchPath)) {
-      console.log(`    internal patch ${patchRel}: inserts = ${inserts.length ? inserts.join(',') : '(none)'}`)
-    } else {
-      console.log('    [WARN] bundle patch missing: ' + patchPath)
-    }
-  }
-  // the bundle package itself may be a plugin row too (via loader) — record its name as entry candidate
-  // (bundle packages themselves are not loader entries; only their patch rows are)
-}
-
-// 2. user cordis.patch.yml inserts (profile layer)
-const userPatchPath = join(PROFILE, 'cordis.patch.yml')
-const userPatch = readFileSync(userPatchPath, 'utf8')
-console.log('\n=== 2. user cordis.patch.yml (profile layer) ===')
-const userInserts = collectPatchInserts(userPatchPath, 'user patch insert')
-// also non-insert top-level entries (override/disable by id) — these do NOT create entries but list them
-const topLevelIds = [...userPatch.matchAll(/^-\s+id:\s+([^\s#]+)/gm)].map((m) => m[1])
-console.log('  user patch top-level ids:', topLevelIds.join(',') || '(none)')
-console.log('  user patch inserts:', userInserts.join(',') || '(none)')
-
-// 2.5 root user cordis.patch.yml inserts (if present)
-const rootPatchPath = join(DSH_HOME, 'cordis.patch.yml')
-const rootInserts = []
-if (existsSync(rootPatchPath)) {
-  console.log('\n=== 2.5 root user cordis.patch.yml ===')
-  rootInserts.push(...collectPatchInserts(rootPatchPath, 'root user patch insert'))
-  console.log('  root user patch inserts:', rootInserts.join(',') || '(none)')
-} else {
-  console.log('\n=== 2.5 root user cordis.patch.yml ===')
-  console.log('  (no root cordis.patch.yml)')
-}
-
-// 3. dependencies with link/github/http (local dev packages) — check their type
-console.log('\n=== 3. dependencies type check ===')
-const deps = profilePkg.dependencies || {}
-for (const [name, spec] of Object.entries(deps)) {
-  const isLocal = typeof spec === 'string' && (spec.startsWith('link:') || spec.startsWith('github:') || spec.startsWith('http') || spec.startsWith('file:'))
-  console.log(`  ${name}: ${spec} ${isLocal ? '(LOCAL/dev)' : ''}`)
-  if (isLocal) {
-    // resolve local dir and check dsh type
-    let dir = null
-    if (spec.startsWith('link:')) dir = spec.slice(5)
-    else if (spec.startsWith('file:')) dir = spec.slice(5)
-    else if (spec.startsWith('github:') || spec.startsWith('http')) dir = join(PROFILE, 'node_modules', name)
-    if (dir) {
-      const lp = join(dir.replace(/\\/g, '/'), 'package.json')
-      if (existsSync(lp)) {
-        const lpj = JSON.parse(readFileSync(lp, 'utf8'))
-        const dshType = lpj.dsh?.bundle ? 'dsh.bundle' : (lpj.dsh?.plugin ? 'dsh.plugin' : (lpj.dsh ? JSON.stringify(lpj.dsh) : 'no dsh field'))
-        const inBundles = bundles.includes(name)
-        const inUserPatch = userInserts.includes(name) || rootInserts.includes(name) || topLevelIds.includes(name)
-        console.log(`    -> type: ${dshType} | inBundles: ${inBundles} | inUserPatch: ${inUserPatch}`)
-        // rule 24: dsh.plugin must NOT be in bundles; dsh.bundle SHOULD be in bundles not in user patch insert
-        if (dshType === 'dsh.plugin' && inBundles) {
-          console.log('    [VIOLATION rule24] dsh.plugin in bundles!')
-        }
-        if (dshType === 'dsh.bundle' && inUserPatch) {
-          console.log('    [WARN] dsh.bundle also present in user patch — check duplicate')
-        }
-      }
-    }
-  }
-}
-
-// 3.5 runtime injection registry (example-injector) — also produces loader entries
-console.log('\n=== 3.5 runtime injection registry ===')
-const superInjectorRegistry = join(DSH_HOME, 'example-injector', 'registry.json')
-try {
-  if (existsSync(superInjectorRegistry)) {
-    const reg = JSON.parse(readFileSync(superInjectorRegistry, 'utf8'))
-    if (!Array.isArray(reg)) throw new Error('registry.json is not an array')
-    const names = reg.map((e) => e && e.name).filter(Boolean)
-    for (const name of names) {
-      sources.push({ id: name, via: 'runtime injection (example-injector registry)', file: superInjectorRegistry })
-    }
-    console.log('  runtime injected:', names.join(', ') || '(none)')
-  } else {
-    console.log('  (no example-injector registry found; if dev_inject_plugin has been used, run dev_injected_list to confirm)')
-  }
-} catch (e) {
-  console.log('  [WARN] failed to read example-injector registry:', e instanceof Error ? e.message : String(e))
-}
-
-// 4. duplicate detection across ALL sources
-console.log('\n=== 4. DUPLICATE LOADER ENTRY DETECTION ===')
-const byId = new Map()
-for (const s of sources) {
-  if (!byId.has(s.id)) byId.set(s.id, [])
-  byId.get(s.id).push(s)
-}
-let dupFound = false
-for (const [id, list] of byId) {
-  if (list.length > 1) {
-    dupFound = true
-    console.log(`  [DUPLICATE] id "${id}" mounted ${list.length} times:`)
-    for (const s of list) console.log(`    - via ${s.via} (${s.file})`)
-  }
-}
-if (!dupFound) console.log('  NO duplicate loader entry ids found — clean')
-
-// 5. also check bundle rows vs their internal patch first insert (self-reference is fine)
-console.log('\n=== 5. summary ===')
-console.log('  bundles:', bundles.join(', '))
-console.log('  user inserts:', userInserts.join(',') || '(none)')
-console.log('  root user inserts:', rootInserts.join(',') || '(none)')
-console.log(dupFound ? '  RESULT: DUPLICATES FOUND — MUST FIX BEFORE RESTART' : '  RESULT: MOUNT CONSISTENT — SAFE TO RESTART')
-process.exit(dupFound ? 1 : 0)

package/scripts/build.sh

@@ -1,13 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-cd "$(dirname "$0")/.."
-node --check lib/index.js
-node --check lib/core/parser.js
-node --check lib/core/understander.js
-node --check lib/core/patterns.js
-node --check lib/core/state.js
-node --check lib/core/audit.js
-node --check lib/core/guard-core.js
-node --check lib/core/text-detect.js
-node --check lib/core/matcher.js
-echo "build check ok"

package/scripts/check-real.mjs

@@ -1,24 +0,0 @@
-// check-real.mjs - 只读校验：用真实 ~/.dsh/AGENTS.md 跑解析+理解，不写任何文件。
-import { loadRules } from "../lib/core/parser.js";
-import { understandAll } from "../lib/core/understander.js";
-
-const parsed = loadRules();
-if (!parsed.ok) {
-  console.error(JSON.stringify({ ok: false, error: parsed.error }, null, 2));
-  process.exit(1);
-}
-const configs = understandAll(parsed.rules);
-const summary = {
-  ok: true,
-  ruleCount: parsed.rules.length,
-  sections: [...new Set(parsed.rules.map((r) => r.section))],
-  confidence: configs.reduce((acc, c) => {
-    acc[c.confidence] = (acc[c.confidence] || 0) + 1;
-    return acc;
-  }, {}),
-  actions: configs.reduce((acc, c) => {
-    for (const a of c.actions) acc[a] = (acc[a] || 0) + 1;
-    return acc;
-  }, {})
-};
-console.log(JSON.stringify(summary, null, 2));

package/scripts/check-tool-coverage.mjs

@@ -1,65 +0,0 @@
-// check-tool-coverage.mjs — 0.5.9 工具覆盖门禁（K-01/K-06 依据，仿官方 verify-tool-catalog）：
-// 官方 tool-catalog（生成器产物=权威全集）中的每个工具名都必须在分类表/前缀规则内被识别，
-// 任何一个 unknown = 该工具调用会被未知工具首调处置（ask/deny）→ 工程失败。
-// 0.6.0（02 B2′ 裁决 v1.4，2026-09-04 第三方裁示+用户确认）：
-//   - 素材来源优先级：--catalog <path> → CHECK_TOOL_CATALOG 环境变量 → 均缺 = FAIL（诊断含获取方式，禁 ENOENT 死路径）；
-//   - --skip-catalog 显式出口：输出 WARNING 并计入汇总（发布流水线永远不传该参数）；
-//   - 素材版本须与本机 DSH 版本对齐（不一致 WARNING 不 FAIL）；
-//   - 校验逻辑与判据不变（官方全集 ⊆ 分类表，任一 unknown 即红）。
-// 用法：node scripts/check-tool-coverage.mjs [--catalog <path>] [--skip-catalog]
-import { readFileSync } from "node:fs";
-import { toolClass } from "../lib/core/tool-catalog.js";
-
-function argVal(name) {
-  const i = process.argv.indexOf(name);
-  return i !== -1 && process.argv[i + 1] ? process.argv[i + 1] : null;
-}
-const SKIP_CATALOG = process.argv.includes("--skip-catalog");
-const CATALOG = argVal("--catalog") || process.env.CHECK_TOOL_CATALOG || null;
-
-if (!CATALOG) {
-  if (SKIP_CATALOG) {
-    console.warn("WARNING：--skip-catalog 已传——工具箱覆盖层跳过（素材缺失；发布流水线禁止此参数）");
-    process.exit(0);
-  }
-  console.error("TOOL-CATALOG-MISSING：未指定官方 tool-catalog.txt——请用 --catalog <path> 或环境变量 CHECK_TOOL_CATALOG 指定（官方文档产物可从 DSH 官方文档仓库 docs-site-text 获取）；FAIL，禁止静默跳过");
-  if (process.env.LOCAL_CATALOG_HINT) {
-    console.error(`（本机提示：${process.env.LOCAL_CATALOG_HINT}）`);
-  }
-  process.exit(1);
-}
-
-function parseNames() {
-  const names = new Set();
-  for (const line of readFileSync(CATALOG, "utf8").split("\n")) {
-    if (!line.includes("@deepseek-ai/dsh-")) continue;
-    const cols = line.split("|").map((c) => c.trim());
-    // 表列格式：| | <package> | <model-visible names> | <requires> | <writes> | <shipped aliases> | <note> |
-    if (!cols[2] || !cols[2].startsWith("@deepseek-ai")) continue;
-    const add = (s) => {
-      if (!s || s === "-") return;
-      // 分隔符：英文文档用逗号「,」，中文文档用顿号「、」（0.6.3 修复：曾只按逗号分割，
-      // 致中文素材的多工具名整串被丢弃——59 个工具名只剩 11 个，且仍打印 COVERAGE-OK 的静默弱化）
-      for (const x of s.split(/[,、，]/)) {
-        const n = x.trim();
-        if (/^[A-Za-z_][A-Za-z0-9_:.-]*$/.test(n)) names.add(n);
-      }
-    };
-    add(cols[3]);
-    add(cols[6]);
-  }
-  return names;
-}
-
-const official = parseNames();
-const missing = [];
-for (const n of official) {
-  if (toolClass(n, {}) === "unknown") missing.push(n);
-}
-
-if (missing.length) {
-  console.error(`COVERAGE-FAIL：官方 tool-catalog 有 ${missing.length} 个工具未分类（会被未知工具首调处置）：`);
-  for (const n of missing) console.error("  - " + n);
-  process.exit(1);
-}
-console.log(`COVERAGE-OK：官方 tool-catalog 工具全覆盖（${official.size} 个工具名均被分类表/前缀规则识别）`);

package/scripts/dualtrack-check.mjs

@@ -1,335 +0,0 @@
-// dualtrack-check.mjs - 分层残留扫描闸（dualtrack-check）
-//
-// 依据：本机使用手册 SKILL.md:113「修改双轨制（2026-08-31 用户定稿）——
-//   铁律=代码层零本机内容（发布门禁扫描红）；机器校验（dualtrack-check）为验收兜底」。
-// 本脚本是那句承诺的落地实现。
-//
-// 扫描范围（lib/**/*.js）——判据 A（2026-09-09 用户拍板，与方案 §一 一致）：
-//   闸只扫「**会随发布者/规则集/环境变化**」的内容，不扫通用中文文案。
-//   ① 本机标识：发布者私有词表（rule-engine.json 的 dualtrack.markers）命中的字符串
-//   ② 映射表键：对象字面量键名匹配 ^\d+[A-Z]?$ 或含 CJK（规则号索引=某人的规则体系）
-//   —— 通用中文文案（字符串字面量内的 CJK）**不计入**：第三方判据明示「中文≠个人化，
-//      通用功能词/提示语是产品能力」。runtime 计数仍在 --report 里显示，供参考。
-//
-// 棘轮（ratchet）：基线记录各文件计数，只许降不许升。
-//   node scripts/dualtrack-check.mjs            # 比对基线（CI/发布门禁用）
-//   node scripts/dualtrack-check.mjs --init     # 首次生成基线
-//   node scripts/dualtrack-check.mjs --update   # 手动更新基线（须在提交说明里写清改了什么）
-//   node scripts/dualtrack-check.mjs --report   # 只打印各文件计数
-//
-// 白名单（scripts/dualtrack-whitelist.json）：
-//   files   —— 整文件豁免（如 lib/lang/**，第 3 批语言包）
-//   strings —— 通用功能词精确豁免（第三方 §一：中文≠个人化，许可词/时间词是产品能力）
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { loadMarkers } from "../lib/core/dualtrack-markers.js";
-
-const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const LIB = path.join(ROOT, "lib");
-const BASELINE_FILE = path.join(ROOT, "scripts", "dualtrack-baseline.json");
-const WHITELIST_FILE = path.join(ROOT, "scripts", "dualtrack-whitelist.json");
-const RESIDUE_FILE = path.join(ROOT, "scripts", "local-residue-markers.txt");
-
-const CJK = /[\u4e00-\u9fff]/;
-const MAP_KEY_RE = /^\d+[A-Z]?$/;
-
-// ── 白名单 ──
-/** 白名单两层（2026-09-09）：包内通用白名单 + 本机 rule-engine.json 的 dualtrack.whitelist 合并。
- *  包内那份随包发布（如 lib/lang/**）；本机那份记录「我豁免我自己的某条」，不进包。 */
-function loadWhitelist() {
-  const files = [];
-  const strings = new Set();
-  // ① 包内通用白名单
-  if (fs.existsSync(WHITELIST_FILE)) {
-    try {
-      const w = JSON.parse(fs.readFileSync(WHITELIST_FILE, "utf8"));
-      for (const f of w.files || []) files.push(f);
-      for (const s of w.strings || []) strings.add(s);
-    } catch (e) {
-      throw new Error(`白名单解析失败：${WHITELIST_FILE} — ${e.message}`);
-    }
-  }
-  // ② 本机白名单（rule-engine.json 的 dualtrack.whitelist）
-  try {
-    const p = path.join(process.env.DSH_HOME || path.join(os.homedir(), ".dsh"), "rule-engine.json");
-    if (fs.existsSync(p)) {
-      const cfg = JSON.parse(fs.readFileSync(p, "utf8"));
-      const w = cfg?.dualtrack?.whitelist;
-      if (w && typeof w === "object") {
-        for (const f of w.files || []) files.push(f);
-        for (const s of w.strings || []) strings.add(s);
-      }
-    }
-  } catch {
-    // 本机配置不可读 → 只用包内白名单（不阻断）
-  }
-  return { files, strings };
-}
-
-/** 整文件豁免匹配（支持 ** 与 * 通配，路径用 / 分隔，相对仓库根） */
-function fileExempt(relPath, patterns) {
-  for (const p of patterns) {
-    const re = new RegExp("^" + p.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "\u0000").replace(/\*/g, "[^/]*").replace(/\u0000/g, ".*") + "$");
-    if (re.test(relPath)) return true;
-  }
-  return false;
-}
-
-// ── 词法扫描：剔除注释，收集字符串字面量与对象键 ──
-/**
- * @returns {{strings: string[], mapKeys: string[]}}
- *    strings = 字符串字面量的**内容**（模板串按整段处理）
- *    mapKeys = 形如 "14": / '12E': / 14: 的对象键
- */
-function tokenize(src) {
-  const strings = [];
-  const mapKeys = [];
-  let i = 0;
-  const n = src.length;
-  // 上一个有意义的 token 类型：用于判断 `/` 是正则还是除号（简化：只看是否可能在正则位置）
-  let prevSig = "";
-  while (i < n) {
-    const c = src[i];
-    // 行注释
-    if (c === "/" && src[i + 1] === "/") {
-      while (i < n && src[i] !== "\n") i++;
-      continue;
-    }
-    // 块注释（含 JSDoc）
-    if (c === "/" && src[i + 1] === "*") {
-      i += 2;
-      while (i < n && !(src[i] === "*" && src[i + 1] === "/")) i++;
-      i += 2;
-      continue;
-    }
-    // 字符串 / 模板串
-    if (c === '"' || c === "'" || c === "`") {
-      const q = c;
-      const start = i;
-      i++;
-      let buf = "";
-      if (q === "`") {
-        // 模板串：整段作为一个字符串，但 `${...}` 内的表达式跳过（不计入内容，也不当键）
-        while (i < n) {
-          const ch = src[i];
-          if (ch === "\\") { buf += ch + (src[i + 1] || ""); i += 2; continue; }
-          if (ch === "$" && src[i + 1] === "{") {
-            let depth = 1;
-            i += 2;
-            while (i < n && depth > 0) {
-              const d = src[i];
-              if (d === "\\") { i += 2; continue; }
-              if (d === "{") depth++;
-              else if (d === "}") depth--;
-              else if (d === '"' || d === "'" || d === "`") {
-                const qq = d; i++;
-                while (i < n && src[i] !== qq) { if (src[i] === "\\") i++; i++; }
-              }
-              i++;
-            }
-            buf += "\u0000"; // 表达式占位（不含 CJK）
-            continue;
-          }
-          if (ch === "`") break;
-          buf += ch;
-          i++;
-        }
-      } else {
-        while (i < n && src[i] !== q) {
-          if (src[i] === "\\") { buf += src[i] + (src[i + 1] || ""); i += 2; continue; }
-          buf += src[i];
-          i++;
-        }
-      }
-      i++; // 收尾引号
-      strings.push(buf);
-      // 对象键判定（2026-09-09 修正）：必须「前面是 { 或 ,」且「后面（跳空白）是 :」
-      // —— 否则模板串分段与三元表达式会被误判成键（20 处误报的根因）。
-      let j = i;
-      while (j < n && /\s/.test(src[j])) j++;
-      if (src[j] === ":") {
-        let p = start - 1;
-        while (p >= 0 && /\s/.test(src[p])) p--;
-        if (src[p] === "{" || src[p] === ",") {
-          const plain = buf.replace(/\\(.)/g, "$1");
-          if (MAP_KEY_RE.test(plain) || CJK.test(plain)) mapKeys.push(plain);
-        }
-      }
-      prevSig = "str";
-      continue;
-    }
-    // 正则字面量（跳过，不计入）
-    if (c === "/" && prevSig !== "ident" && prevSig !== ")" && prevSig !== "]") {
-      let j = i + 1;
-      let inClass = false;
-      let closed = false;
-      while (j < n) {
-        const ch = src[j];
-        if (ch === "\\") { j += 2; continue; }
-        if (ch === "\n") break;
-        if (ch === "[") inClass = true;
-        else if (ch === "]") inClass = false;
-        else if (ch === "/" && !inClass) { closed = true; break; }
-        j++;
-      }
-      if (closed) {
-        i = j + 1;
-        while (i < n && /[a-z]/i.test(src[i])) i++;
-        prevSig = "regex";
-        continue;
-      }
-      i++;
-      prevSig = "op";
-      continue;
-    }
-    if (/[A-Za-z_$]/.test(c)) {
-      let j = i;
-      while (j < n && /[A-Za-z0-9_$]/.test(src[j])) j++;
-      i = j;
-      prevSig = "ident";
-      continue;
-    }
-    if (c === ")") { prevSig = ")"; i++; continue; }
-    if (c === "]") { prevSig = "]"; i++; continue; }
-    if (!/\s/.test(c)) prevSig = "op";
-    i++;
-  }
-  return { strings, mapKeys };
-}
-
-// ── 单文件扫描 ──
-function scanFile(absPath, relPath, whitelist, residueMarks) {
-  const src = fs.readFileSync(absPath, "utf8");
-  const { strings, mapKeys } = tokenize(src);
-  let runtime = 0;
-  const runtimeHits = [];
-  for (const s of strings) {
-    if (!CJK.test(s)) continue;
-    const plain = s.replace(/\\(.)/g, "$1").trim();
-    if (whitelist.strings.has(plain)) continue; // 通用功能词豁免
-    runtime++;
-    if (runtimeHits.length < 3) runtimeHits.push(plain.slice(0, 40));
-  }
-  const mapHits = mapKeys.filter((k) => MAP_KEY_RE.test(k) || CJK.test(k));
-  let local = 0;
-  const localHits = [];
-  for (const s of strings) {
-    for (const mark of residueMarks) {
-      if (mark && s.includes(mark)) {
-        local++;
-        if (localHits.length < 3) localHits.push(`${mark} ← ${s.slice(0, 40)}`);
-      }
-    }
-  }
-  return {
-    relPath,
-    runtime,
-    mapKeys: mapHits.length,
-    local,
-    // 判据 A：total 只计「本机性」两类；通用中文文案（runtime）不计入闸
-    total: mapHits.length + local,
-    runtimeHits,
-    mapHits: mapHits.slice(0, 5),
-    localHits
-  };
-}
-
-function walk(dir, base = dir, out = []) {
-  for (const e of fs.readdirSync(dir)) {
-    const p = path.join(dir, e);
-    const st = fs.statSync(p);
-    if (st.isDirectory()) walk(p, base, out);
-    else if (/\.js$/.test(e)) out.push(path.relative(base, p).replace(/\\/g, "/"));
-  }
-  return out;
-}
-
-// ── 主流程 ──
-const args = new Set(process.argv.slice(2));
-const whitelist = loadWhitelist();
-// 本机标识词表：与 B2 扫描器共用唯一加载器（本机配置优先 → 环境变量 → 包内示例）
-const { markers: residueMarks, source: markersSource } = loadMarkers({ root: ROOT });
-if (residueMarks.length === 0) {
-  console.error("REFUSED: 本机标识词表为空——请在 rule-engine.json 配置 dualtrack.markers，或设置 DUALTRACK_MARKERS 环境变量");
-  process.exit(1);
-}
-
-const files = walk(LIB).filter((rel) => !fileExempt(rel, whitelist.files));
-const results = files.map((rel) => scanFile(path.join(LIB, rel), rel, whitelist, residueMarks));
-const counts = {};
-for (const r of results) counts[`lib/${r.relPath}`] = r.total;
-const grandTotal = results.reduce((a, r) => a + r.total, 0);
-
-if (args.has("--report")) {
-  for (const r of results.sort((a, b) => b.total - a.total)) {
-    if (r.total === 0) continue;
-    console.log(`  ${String(r.total).padStart(4)}  lib/${r.relPath}  [映射键 ${r.mapKeys} / 本机标识 ${r.local} / 通用中文文案 ${r.runtime}（不计入闸）]`);
-    if (r.mapHits.length) console.log(`        命中键：${r.mapHits.join(" / ")}`);
-  }
-  console.log(`\nDUALTRACK REPORT：${results.length} 文件，合计 ${grandTotal}`);
-  process.exit(0);
-}
-
-if (args.has("--init") || args.has("--update")) {
-  const isUpdate = args.has("--update");
-  if (isUpdate && !fs.existsSync(BASELINE_FILE)) {
-    console.error("REFUSED: --update 需要已存在的基线；首次请用 --init");
-    process.exit(1);
-  }
-  if (!isUpdate && fs.existsSync(BASELINE_FILE)) {
-    console.error(
-      `REFUSED: 基线已存在（${BASELINE_FILE}）——--init 仅用于首次生成。\n` +
-      "      --init 会把当前计数覆盖为基线（棘轮失效）；确需更新请用 --update（须在提交说明里写清改了什么）"
-    );
-    process.exit(1);
-  }
-  const payload = {
-    generatedAt: new Date().toISOString(),
-    note: "dualtrack 棘轮基线：各文件「分层残留」计数，只许降不许升。--init 首次生成，--update 手动更新（须在提交说明里写清改了什么）。",
-    total: grandTotal,
-    files: counts
-  };
-  fs.writeFileSync(BASELINE_FILE, JSON.stringify(payload, null, 2) + "\n", "utf8");
-  console.log(`${isUpdate ? "UPDATED" : "INITIALIZED"} ${BASELINE_FILE}`);
-  console.log(`基线合计：${grandTotal}（${Object.keys(counts).length} 个文件）`);
-  process.exit(0);
-}
-
-// 默认：比对基线
-if (!fs.existsSync(BASELINE_FILE)) {
-  console.error(`FAIL  基线不存在：${BASELINE_FILE}\n      首次请运行：node scripts/dualtrack-check.mjs --init`);
-  process.exit(1);
-}
-const baseline = JSON.parse(fs.readFileSync(BASELINE_FILE, "utf8"));
-const base = baseline.files || {};
-const regressions = [];
-const improvements = [];
-for (const [file, count] of Object.entries(counts)) {
-  const b = base[file];
-  if (b === undefined) {
-    if (count > 0) regressions.push(`${file}: 新增文件含残留 ${count} 处（基线无此文件）`);
-    continue;
-  }
-  if (count > b) {
-    const r = results.find((x) => `lib/${x.relPath}` === file);
-    const detail = r ? [...r.runtimeHits, ...r.localHits].slice(0, 2).join("；") : "";
-    regressions.push(`${file}: ${count} > 基线 ${b}${detail ? `（如：${detail}）` : ""}`);
-  } else if (count < b) {
-    improvements.push(`${file}: ${count} < 基线 ${b}`);
-  }
-}
-for (const [file, b] of Object.entries(base)) {
-  if (counts[file] === undefined && b > 0) improvements.push(`${file}: 文件已删除（基线 ${b}）`);
-}
-
-if (regressions.length > 0) {
-  console.error(`DUALTRACK FAIL：${regressions.length} 项超出基线（只许降不许升）`);
-  for (const r of regressions) console.error(`  ✗ ${r}`);
-  console.error("\n  处置：把新增内容迁个人层/配置层，或（确属通用功能词）登记 scripts/dualtrack-whitelist.json");
-  process.exit(1);
-}
-console.log(`DUALTRACK OK：合计 ${grandTotal}（基线 ${baseline.total ?? "?"}）${improvements.length ? `，${improvements.length} 个文件下降可 --update` : ""}`);
-for (const im of improvements.slice(0, 5)) console.log(`  ↓ ${im}`);
-process.exit(0);

package/scripts/dualtrack-whitelist.json

@@ -1,7 +0,0 @@
-{
-  "note": "dualtrack-check 白名单。登记即豁免——但登记是一次「分类决策」，请写清理由。",
-  "files": [
-    "lib/lang/**"
-  ],
-  "strings": []
-}