dsh-wisp 1.42.0 → 1.44.0

package/verify-wisp.mjs

@@ -504,9 +504,13 @@ function createHarness(options = {}) {
       // 默认不给 —— 这样"没有 host 时降级"才测得到；要测检查更新就传 hostCall。
       const hostSeat = typeof options.hostCall === 'function' ? { call: options.hostCall } : undefined
       // eslint-disable-next-line no-new-func
-      /* 追加 sourceURL：new Function 里的代码否则在堆栈里是 anonymous，定位不到行。 */
-      new Function('window', 'document', 'host', ...TRAPPED, src + '\n//# sourceURL=wisp-client-half.js')(
-        win, documentShim, hostSeat, ...TRAPPED.map((name) => traps[name]),
+      /* 追加 sourceURL：new Function 里的代码否则在堆栈里是 anonymous，定位不到行。
+         navigator 必须显式注入：浏览器里裸 navigator === window.navigator，而 **Node 21+
+         也有全局 navigator**（navigator.language = 系统语言）。不注入的话，客户端读到的是
+         Node 的 —— 中文机器上绿、英文 runner 上红（真踩过：Node 22 上 24 项台词池检查全红，
+         Node 20 上因为那个全局还不存在而"恰好"绿）。 */
+      new Function('window', 'document', 'host', 'navigator', ...TRAPPED, src + '\n//# sourceURL=wisp-client-half.js')(
+        win, documentShim, hostSeat, win.navigator ?? {}, ...TRAPPED.map((name) => traps[name]),
       )
     },
     module() {
@@ -551,7 +555,7 @@ head('1b. the host half answers checkUpdate through the platform web service')
 {
   const mod = await import(pathToFileURL(hostPath).href + '?probe=update')
   const { readPublishedVersion, compareVersions, registerHandlers, inject } = mod
-  const { readBalance, accountClientMetadata, normalizeWallets, resolveWebService } = mod
+  const { readBalance, accountClientMetadata, normalizeWallets, resolveWebService, readManagedVersion } = mod
 
   /* web 服务必须声明为**可选**：硬依赖一个没加载的服务会让 fiber 永远 waiting，
      她会直接从界面上消失。这条是安全属性，不是风格偏好。 */
@@ -584,6 +588,22 @@ head('1b. the host half answers checkUpdate through the platform web service')
   const U = { npm: 'https://npm/x', github: 'https://gh/y' }
   const only = (key, outcome) => webWith({ [U[key]]: outcome })
 
+  /* 源可以换：国内镜像 / 私有 registry 只需要把 config.urls 指过去。
+     这一条钉住"换源真的会去问新地址"—— 否则"支持镜像"只是文档里的一句话。 */
+  const asked = []
+  const recorder = {
+    fetch: async (request) => {
+      asked.push(request.url)
+      return { url: request.url, statusCode: 200, body: { kind: 'text', content: '{"version":"1.2.3"}' }, truncated: false }
+    },
+  }
+  const mirrorUrls = { npm: 'https://registry.npmmirror.com/dsh-wisp/latest' }
+  const mirror = await readPublishedVersion(recorder, mirrorUrls, undefined, 50)
+  check(mirror.ok === true && mirror.latest === '1.2.3' && mirror.from === 'npm'
+    && asked.length === 1 && asked[0] === mirrorUrls.npm,
+  'the npm source can be pointed at a mirror through config (only the configured URL is asked)',
+  JSON.stringify({ asked, verdict: mirror }))
+
   const good = await readPublishedVersion(only('npm', { body: '{"name":"dsh-wisp","version":"9.9.9"}' }), U)
   check(good.ok === true && good.latest === '9.9.9' && good.from === 'npm',
     'a 200 with a version field is read correctly', JSON.stringify(good))
@@ -647,18 +667,71 @@ head('1b. the host half answers checkUpdate through the platform web service')
   /* ---- 服务在**调用时**解析，而不是吃启动那一刻的快照 ----
      宿主半包由 bundle patch 插进来，可能比 web 服务先就位；而 optional 依赖在启动时缺席
      并不会事后补上 —— `ctx.web` 会永远是 undefined，检查更新从此永久失效。
-     `ctx.get('web')` 是调用时查表，所以这条竞态修得掉。 */
-  const lateService = { fetch: async () => ({ statusCode: 200, body: { kind: 'text', content: '{"version":"9.9.9"}' } }) }
+     `ctx.get('web')` 是调用时查表，所以这条竞态修得掉。 */  const lateService = { fetch: async () => ({ statusCode: 200, body: { kind: 'text', content: '{"version":"9.9.9"}' } }) }
   const declaredService = { fetch: async () => ({ statusCode: 200, body: { kind: 'text', content: '{"version":"1.0.0"}' } }) }
-  check(resolveWebService({ get: () => lateService, web: declaredService }) === lateService,
+  check(resolveWebService({ get: () => lateService, web: declaredService }).service === lateService,
     'the web service is resolved at CALL time, not from the startup-time property')
-  check(resolveWebService({ get: () => undefined, web: declaredService }) === declaredService,
+  check(resolveWebService({ get: () => undefined, web: declaredService }).service === declaredService,
     'with ctx.get answering nothing, the declared property is still the fallback')
-  check(resolveWebService({ get: () => { throw new Error('restricted ctx') }, web: declaredService }) === declaredService,
+  check(resolveWebService({ get: () => { throw new Error('restricted ctx') }, web: declaredService }).service === declaredService,
     'a throwing ctx.get falls back instead of breaking the check')
-  check(resolveWebService({ web: { notAFetchService: true } }) === undefined
-    && resolveWebService(undefined) === undefined,
-  'a shell with no usable web service reports undefined rather than crashing')
+  /* "有个对象但不是 web 服务"也算 partial：把形状说出来，让 readVersion 去报
+     "有服务但没有 fetch" —— 那比一句"没有通道"更能指认问题在哪一层。 */
+  check(resolveWebService({ web: { notAFetchService: true } }).how === 'partial'
+    && resolveWebService({ web: { notAFetchService: true } }).service !== undefined
+    && resolveWebService(undefined).service === undefined,
+  'a non-service object is passed through as partial so the failure can name its shape')
+
+  /* ---- 拿不到服务时，必须能说清"看见了什么" ------------------------------------
+     真机上出现过"两条路都拿不到、界面只说没有联网通道"，而那句话没法追问。
+     诊断至少要回答：ctx.get 是不是函数、拿到的东西有没有 fetch。 */
+  const blind = resolveWebService({ get: () => ({ search: () => {} }) })
+  check(blind.service !== undefined && blind.how === 'partial' && blind.why.includes('-fetch'),
+    'a service without a callable fetch is reported as partial, with its shape spelled out',
+    JSON.stringify({ how: blind.how, why: blind.why }))
+  const nothing = resolveWebService({})
+  check(nothing.service === undefined && nothing.how === 'none'
+    && nothing.why.includes('ctx.get("web")→undefined') && nothing.why.includes('ctx.web→undefined'),
+  'and a genuinely missing service says which lookups came back undefined', nothing.why)
+  const noGet = resolveWebService(undefined)
+  check(noGet.service === undefined && noGet.how === 'none', 'no ctx at all is reported, not thrown', noGet.why)
+
+  /* ---- 兜底通道：web 拿不到时问插件管理器"这个包是什么版本" ---------------------
+     它走的是应用自己的网络出口（安装前 inspect 本来就要去 registry 问），
+     所以这条路不依赖插件能否拿到 web 服务。 */
+  const managedCtx = {
+    get: (name) => (name === 'pluginManager'
+      ? { inspect: async (spec) => ({ status: 'accepted', name: spec, version: '7.7.7', registry: 'https://mirror.example' }) }
+      : undefined),
+  }
+  const managed = await readManagedVersion(managedCtx, 'dsh-wisp', 500)
+  check(managed.ok === true && managed.version === '7.7.7' && managed.registry === 'https://mirror.example',
+    'the plugin manager can be asked for the published version as a fallback channel',
+    JSON.stringify(managed))
+  const noManager = await readManagedVersion({ get: () => undefined }, 'dsh-wisp', 500)
+  check(noManager.ok === false && noManager.reason === 'no-plugin-manager',
+    'and its absence is a named reason, not an exception', JSON.stringify(noManager))
+  const refused = await readManagedVersion({ get: () => ({ inspect: async () => ({ status: 'refused', reason: 'no such package' }) }) }, 'dsh-wisp', 500)
+  check(refused.ok === false && refused.reason === 'inspect-refused' && refused.detail === 'no such package',
+    'a refusal keeps the manager\'s own words', JSON.stringify(refused))
+
+  /* 端到端：没有 web 服务、但有插件管理器 → 检查更新照样能给出答案，并说明走的哪条通道 */
+  {
+    const handlers = new Map()
+    const originalHarness = globalThis.harness
+    globalThis.harness = { handle: (name, fn) => { handlers.set(name, fn); return () => handlers.delete(name) } }
+    try {
+      registerHandlers(managedCtx, { urls: U })
+      const viaManager = await handlers.get('checkUpdate')({ current: '1.0.0' })
+      check(viaManager.ok === true && viaManager.latest === '7.7.7' && viaManager.from === 'npm'
+        && viaManager.diag && viaManager.diag.via === 'pluginManager',
+      'with no web service but a plugin manager, the check still answers — through the fallback',
+      JSON.stringify(viaManager))
+    } finally {
+      if (originalHarness === undefined) delete globalThis.harness
+      else globalThis.harness = originalHarness
+    }
+  }
 
   /* ---- 每个源一个自己的截止时间 ----
      共用一个信号时，一个卡住的源到点会把另一个**已经拿到结果**的源一起作废，
@@ -2021,13 +2094,13 @@ if (clientSrc !== null) {
     const size0 = ixApi.config.size
     wheel(-100, { ctrlKey: true })
     const sizeUp = ixApi.config.size
-    check(Math.abs(sizeUp - (size0 + 0.25)) < 1e-9, 'ctrl+wheel up makes her a step bigger',
+    check(Math.abs(sizeUp - (size0 + 0.1)) < 1e-9, 'ctrl+wheel up makes her a step bigger',
       String(size0) + ' -> ' + String(sizeUp))
     wheel(100, { ctrlKey: true })
     check(Math.abs(ixApi.config.size - size0) < 1e-9, 'and ctrl+wheel down takes it back',
       String(ixApi.config.size))
     wheel(-100, { metaKey: true })
-    check(Math.abs(ixApi.config.size - (size0 + 0.25)) < 1e-9, '⌘+wheel does the same on macOS',
+    check(Math.abs(ixApi.config.size - (size0 + 0.1)) < 1e-9, '⌘+wheel does the same on macOS',
       String(ixApi.config.size))
     wheel(100, { metaKey: true })
 
@@ -2203,6 +2276,8 @@ if (clientSrc !== null) {
     const diagHarness = mkChecker(async () => ({
       ok: false,
       reason: 'no-web-service',
+      /* 宿主现在会一起带回"它看见了什么" —— 失败台词背后的细节靠这一段。 */
+      diag: { via: 'none', how: 'none', why: 'ctx.get("web")→undefined; ctx.web→undefined', manager: 'no-plugin-manager' },
       sources: {
         npm: { ok: false, reason: 'no-web-service' },
         github: { ok: false, reason: 'fetch-failed', detail: 'getaddrinfo ENOTFOUND' },
@@ -2220,6 +2295,19 @@ if (clientSrc !== null) {
       && diagLast.sources.github.detail === 'getaddrinfo ENOTFOUND',
     'a failed check keeps every source reason, so doctor() can say WHY it failed',
     JSON.stringify(diagLast))
+
+    /* 台词是给人读的一句话，技术细节不进嘴；但细节必须看得见 —— 失败时排进弹窗。
+       （真机上出现过台词后面挂一串 ctx.get(...)→undefined 的英文碎片。） */
+    diagHarness.win.__wisp.showUpdate()
+    await new Promise((resolve) => setImmediate(resolve))
+    diagHarness.advance(200, 50)
+    const failSaid = String(diagHarness.all('wisp-say').at(-1)?.textContent ?? '')
+    check(!/[A-Za-z]{3,}/.test(failSaid),
+      'the failure line stays human — no technical fragments in the spoken sentence', failSaid)
+    const diagDialog = diagHarness.all('wisp-dialog-p').map((el) => el.textContent).join('\n')
+    check(diagDialog.includes('看到的东西') && diagDialog.includes('取服务的方式'),
+      'and the dialog spells out what the host actually saw',
+      diagDialog.replace(/\n/g, ' | ').slice(0, 120))
     diagHarness.win.__wisp.destroy()
     active = keepDiag
 
@@ -2258,6 +2346,27 @@ if (clientSrc !== null) {
     check(new Set([noChannelSaid, noHostSaid, networkSaid]).size === 3,
       'the three failure kinds really are three different sentences')
 
+    /* "没接上宿主"和"宿主拿不到服务"是链路上**不同的一环**断了 —— 必须分开说，
+       否则那句话永远说不清断在哪（1.43.3 之前两者共用同一句，真机上就卡在这）。 */
+    const noSeat = createHarness({ timer: true, composerText: '' })   // 默认替身没有 host 座位
+    const keepNoSeat = active
+    active = noSeat
+    noSeat.evaluate(clientSrc)
+    noSeat.module().default.apply(noSeat.ctx, { reactions: false, wander: false, celebrate: false })
+    noSeat.advance(1000, 100)
+    const noSeatRes = await noSeat.win.__wisp.checkForUpdate()
+    noSeat.win.__wisp.showUpdate()
+    await new Promise((resolve) => setImmediate(resolve))
+    noSeat.advance(200, 50)
+    const noSeatSaid = String(noSeat.all('wisp-say').at(-1)?.textContent ?? '')
+    check(noSeatRes.state === 'failed' && noSeatRes.reason === 'fetch-failed',
+      'no host seat at all gets its OWN sentence — the first link in the chain',
+      `${noSeatRes.state} ｜ ${noSeatSaid}`)
+    check(noSeatSaid !== noChannelSaid,
+      'and it is distinguishable from "the host ran but has no web service"', `${noSeatSaid} ≠ ${noChannelSaid}`)
+    noSeat.win.__wisp.destroy()
+    active = keepNoSeat
+
     /* 宿主调用抛错：不能变成未处理的 rejection */
     const thrower = mkChecker('boom')
     const keepThrower = active
@@ -2279,8 +2388,9 @@ if (clientSrc !== null) {
     noHost.module().default.apply(noHost.ctx, { reactions: true, wander: false, celebrate: false })
     noHost.advance(1300, 100)
     const unsupported = await noHost.win.__wisp.checkForUpdate()
-    check(unsupported.state === 'unsupported',
-      'with no host seat she reports that checking is not available', JSON.stringify(unsupported))
+    check(noSeatRes.state === 'failed' && noSeatRes.reason === 'fetch-failed',
+      'with no host seat the CLIENT half falls back to its own fetch (no more unsupported)',
+      JSON.stringify(noSeatRes))
     const stillWorks = noHost.win.__wisp.showUpdate()
     check(stillWorks.version === pkgVersion && stillWorks.checking === true,
       'and the update entry still works without it', JSON.stringify(stillWorks))
@@ -3108,8 +3218,8 @@ if (clientSrc !== null) {
     check(focusSlider(), 'the slider is reachable with the arrow keys',
       h.document.activeElement ? String(h.document.activeElement.className) : '(没有焦点)')
     pressKey('ArrowRight')
-    check(Math.abs(fifth.config.size - (sizeBefore + 0.25)) < 1e-9,
-      'ArrowRight grows her by a quarter step', `${sizeBefore} -> ${fifth.config.size}`)
+    check(Math.abs(fifth.config.size - (sizeBefore + 0.1)) < 1e-9,
+      'ArrowRight grows her by exactly one step', `${sizeBefore} -> ${fifth.config.size}`)
     check(menuOf() !== null && focusedIsSlider(),
       'and it neither closes the menu nor steals focus from the slider',
       menuOf() === null ? '菜单关了' : String(h.document.activeElement && h.document.activeElement.className))
@@ -3307,7 +3417,7 @@ if (clientSrc !== null) {
     }
     h.win.dispatch('keydown', { key: 'ArrowRight', preventDefault() {}, stopPropagation() {} })
     h.win.dispatch('keydown', { key: 'ArrowRight', preventDefault() {}, stopPropagation() {} })
-    check(fifth.element.style.width === '630px' && fifth.element.style.height === '945px',
+    check(fifth.element.style.width === '588px' && fifth.element.style.height === '882px',
       'the slider really resized her (two steps up)', `${fifth.element.style.width}x${fifth.element.style.height}`)
     check(menuOf() !== null, 'and the slider keeps the menu open, unlike an action row')
     h.win.dispatch('keydown', { key: 'Escape', preventDefault() {}, stopPropagation() {} })
@@ -4187,6 +4297,33 @@ head('3y-3. the focus timer, and going quiet while the page is hidden')
   check(typeof quietApi.today.runs === 'number' && quietApi.today.runs >= 1,
     'the day book is also readable from the api', JSON.stringify(quietApi.today))
 
+  /* ---- 语言判定不能取决于 Node 版本 -------------------------------------------
+     Node 21+ 自带全局 navigator（navigator.language = 系统语言）。harness 若不把它注入到
+     被求值的作用域里，客户端读到的就是 Node 的 —— 于是同一份代码在中文开发机上绿、
+     在英文 runner 上红。这条把 Node 的 navigator 特意伪装成 en-US，再断言她仍然按
+     harness 自己的（没有 language 的）navigator 说中文。 */
+  const nodeNav = Object.getOwnPropertyDescriptor(globalThis, 'navigator')
+  try {
+    Object.defineProperty(globalThis, 'navigator', {
+      value: { language: 'en-US', languages: ['en-US'] }, configurable: true, writable: true,
+    })
+    const nodeNavHarness = createHarness({ timer: true, composerText: '' })
+    const keepNodeNav = active
+    active = nodeNavHarness
+    nodeNavHarness.evaluate(clientSrc)
+    nodeNavHarness.module().default.apply(nodeNavHarness.ctx, { reactions: false, wander: false, celebrate: false })
+    nodeNavHarness.advance(1000, 200)
+    const nodeNavSaid = String(nodeNavHarness.all('wisp-say').at(-1)?.textContent ?? '')
+    check(/[\u4e00-\u9fa5]/.test(nodeNavSaid),
+      'the harness hands the client its OWN navigator — Node 21+ has a global one and would leak its locale',
+      `${nodeNavSaid.slice(0, 40)} ｜ Node navigator=${globalThis.navigator.language}`)
+    nodeNavHarness.win.__wisp.destroy()
+    active = keepNodeNav
+  } finally {
+    if (nodeNav) Object.defineProperty(globalThis, 'navigator', nodeNav)
+    else delete globalThis.navigator
+  }
+
   /* ---- 英文台词：英文环境下她说英文，而且**一个汉字都不该出现** -------------------
      语言是加载时判定的（读 navigator.language），所以这个 harness 要在 evaluate 之前
      把 navigator 摆好。中文是兜底：没翻的条目仍然会说中文，这一条只验"翻译层真的生效"。 */
@@ -4319,6 +4456,143 @@ if (existsSync(join(here, 'README.md'))) {
     undeclared.length ? undeclared.join(' | ') : `${mentioned.length} tool(s) referenced, all in files[]`)
 }
 
+/* ---------------------------------------------------------------------------
+   1.43.0：一批修复各自的不变式。
+
+   每条修复背后都有一句"如果再犯就会露出来"的断言 —— 没有它，这些修复会在下一次
+   重构里悄悄退回原样（这批里有三条正是这么来的）。 */
+{
+  const h = createHarness({ timer: true, composerText: '', wanderMs: 150, wanderRange: 200 })
+  const keep = active
+  active = h
+  h.evaluate(clientSrc)
+  h.module().default.apply(h.ctx, { reactions: false, wander: true, celebrate: false })
+  h.advance(1200, 100)
+  const api = h.win.__wisp
+  const root = h.document.querySelector('.wisp-root')
+  const tiltDeg = () => {
+    const n = Number(String(root.style.getPropertyValue('--wisp-tilt') || '0deg').replace('deg', ''))
+    return Number.isFinite(n) ? n : 0
+  }
+
+  /* 脚底光晕在 motion 层、不在 lean 层：歪的是她，不该是地板 */
+  const shineEl = h.document.querySelector('.wisp-shine')
+  const motionEl = h.document.querySelector('.wisp-motion')
+  check(shineEl !== null && motionEl !== null && shineEl.parentNode === motionEl,
+    'the ground glow lives outside the tilt layer',
+    shineEl && shineEl.parentNode ? String(shineEl.parentNode.className) : '(missing)')
+
+  /* 静止档的 z：静止 ≠ 冻成满不透明 */
+  check(clientSrc.includes('.wisp-root[data-motion="off"] .wisp-zzz{opacity:.5}'),
+    'the still level shows a subdued z instead of a frozen opaque one')
+  const rmAt = clientSrc.indexOf('@media (prefers-reduced-motion:reduce)')
+  check(rmAt >= 0 && clientSrc.slice(rmAt, rmAt + 800).includes('.wisp-zzz{animation:none!important;opacity:.5}'),
+    'and reduced motion does the same for it')
+
+  /* 滑块的默认值必须落在步长格点上（否则用户动了就回不到出厂大小） */
+  const wheelStep = Number((/const WHEEL_STEP = ([0-9.]+)/.exec(clientSrc) ?? [])[1])
+  const keyStep = Number((/ev\.shiftKey \? 1 : ([0-9.]+)/.exec(clientSrc) ?? [])[1])
+  const sizeLo = Number((/size: \{ kind: 'num', lo: ([0-9.]+)/.exec(clientSrc) ?? [])[1])
+  const defaultsBlock = clientSrc.match(/const DEFAULTS = \{([\s\S]*?)\n {4}\}/)
+  const defSize = Number((/size:\s*([0-9.]+)/.exec(defaultsBlock ? defaultsBlock[1] : '') ?? [])[1])
+  check(wheelStep > 0 && wheelStep === keyStep, 'the wheel and the slider share exactly one step',
+    `wheel=${wheelStep} key=${keyStep}`)
+  const steps = (defSize - sizeLo) / wheelStep
+  check(Number.isFinite(steps) && Math.abs(steps - Math.round(steps)) < 1e-9,
+    'the DEFAULT size is reachable from lo in whole steps — otherwise a user can never get back to it',
+    `lo=${sizeLo} default=${defSize} step=${wheelStep} → ${steps} steps`)
+
+  /* 鼠标路过会侧身；手指路过不会（而且会把姿势归零）。
+     y 必须取她的**中线**：侧身有"从正上方路过不倾"这一层（level 因子），
+     在脚下 700px 处派发事件本来就该是 0 度 —— 那样测的是另一条规则。 */
+  const nearX = api.position.x + 280
+  const nearY = api.position.y + 420
+  h.win.dispatch('pointermove', { clientX: nearX + 24, clientY: nearY, pointerType: 'mouse' })
+  check(tiltDeg() !== 0, 'a mouse passing by still leans her', `${tiltDeg()}deg`)
+  h.win.dispatch('pointermove', { clientX: nearX + 24, clientY: nearY, pointerType: 'touch' })
+  check(tiltDeg() === 0, 'a finger passing by does not — and clears the pose', `${tiltDeg()}deg`)
+
+  /* 指针离开文档：姿势归零（blur 只覆盖"切走应用"） */
+  h.win.dispatch('pointermove', { clientX: nearX + 24, clientY: nearY, pointerType: 'mouse' })
+  check(tiltDeg() !== 0, 'leaning again before the pointer leaves', `${tiltDeg()}deg`)
+  h.document.dispatch('mouseleave', {})
+  check(tiltDeg() === 0, 'the pose resets when the pointer leaves the document', `${tiltDeg()}deg`)
+
+  /* 撞到边界不再"原地歪"：位置没变就不该有侧倾 */
+  api.move(1360, 300)
+  h.win.dispatch('pointerdown', {
+    clientX: 1360 + 280, clientY: 300 + 700, button: 0, pointerType: 'mouse',
+    preventDefault() {}, stopPropagation() {},
+  })
+  h.win.dispatch('pointermove', { clientX: 1360 + 280 + 60, clientY: 300 + 700, pointerType: 'mouse' })
+  check(api.position.x === 1360, 'a drag into the right edge stays clamped', String(api.position.x))
+  check(tiltDeg() === 0, 'and a clamped drag does not tilt her in place', `${tiltDeg()}deg`)
+  h.win.dispatch('pointerup', {})
+
+  /* 静止档也要停住 JS 溜达 —— CSS 关不掉坐标写入 */
+  api.configure({ motion: 'off', wander: true, wanderMs: 150, wanderRange: 200 })
+  const still = { x: api.position.x, y: api.position.y }
+  h.advance(4000, 100)
+  check(api.position.x === still.x && api.position.y === still.y,
+    'motion: off stops the walk too, not only the animation', `${api.position.x},${api.position.y}`)
+  api.configure({ motion: 'full' })
+  h.advance(6000, 100)
+  check(api.position.x !== still.x || api.position.y !== still.y,
+    'and with motion back on she strolls again', `${api.position.x},${api.position.y}`)
+
+  /* 拨开关之后子面板要留在原地（点开的就该一直开着）。
+     contextmenu 要派给**她的本体**（监听挂在 body 上），派给 window 不会走到那一层。 */
+  h.document.querySelector('.wisp-body').dispatch('contextmenu', {
+    clientX: api.position.x + 280, clientY: api.position.y + 420,
+    preventDefault() {}, stopPropagation() {},
+  })
+  const groupRow = h.all('wisp-menu-item').find((el) => el.dataset && el.dataset.group === '行为')
+  check(groupRow !== undefined, 'the behaviour group row is there to click', String(h.all('wisp-menu-item').length) + ' rows')
+  if (groupRow) {
+    groupRow.dispatch('click', { preventDefault() {}, stopPropagation() {} })
+    h.advance(60, 20)
+    const flyoutBefore = h.all('wisp-submenu').length
+    const aSwitch = h.all('wisp-switch')[0]
+    check(flyoutBefore > 0 && aSwitch !== undefined, 'its flyout is open with switches in it', String(flyoutBefore))
+    if (aSwitch) {
+      aSwitch.dispatch('click', { preventDefault() {}, stopPropagation() {} })
+      h.advance(60, 20)
+      check(h.all('wisp-submenu').length > 0,
+        'toggling a switch keeps the flyout open — the panel vanishing is the most annoying version of this',
+        `${h.all('wisp-submenu').length} panel(s)`)
+    }
+  }
+  api.destroy()
+  active = keep
+}
+
+/* GitHub 上更新、npm 上还是旧版时：提示要改口，并且复制的是仓库地址而不是包名 */
+{
+  const gh = createHarness({
+    timer: true, composerText: '', clipboard: true,
+    hostCall: async () => ({
+      ok: true, latest: '9.9.9', from: 'github',
+      sources: { npm: { ok: true, version: '1.0.0' }, github: { ok: true, version: '9.9.9' } },
+    }),
+  })
+  const keepGh = active
+  active = gh
+  gh.evaluate(clientSrc)
+  gh.module().default.apply(gh.ctx, { reactions: false, wander: false, celebrate: false })
+  gh.advance(1200, 100)
+  gh.win.__wisp.showUpdate()
+  await new Promise((resolve) => setImmediate(resolve))
+  gh.advance(200, 50)
+  check(gh.clipboardWrites[gh.clipboardWrites.length - 1] === 'https://github.com/969246694/dsh-wisp',
+    'when only GitHub has the new version she copies the repo URL, not the package name that installs the old one',
+    JSON.stringify(gh.clipboardWrites))
+  check(String(gh.win.__wisp.doctor().update.hint).includes('npm 上还是旧版'),
+    'and doctor() records which hint she actually used',
+    String(gh.win.__wisp.doctor().update.hint))
+  gh.win.__wisp.destroy()
+  active = keepGh
+}
+
 if (clientSrc !== null) {
   /* ---------------------------------------------------------------------------
      配置键是这套"多端"里最容易漂的一处：它在**三个地方**各出现一次 ——
@@ -4440,6 +4714,26 @@ if (existsSync(join(here, 'README.md'))) {
   check(readmeVersion === pkg.version, 'the README header quotes the packaged version',
     `README ${readmeVersion ?? '(没写)'} vs package ${pkg.version}`)
 
+  /* 客户端自己抓的那条路必须真的能成：给它一个可用的 window.fetch，她要报出版本。
+     这就是 1.44.0 的全部要点 —— bundle 客户端半包是普通页面脚本，fetch 可用。 */
+  {
+    const fetched = createHarness({ timer: true, composerText: '' })
+    const keepFetched = active
+    active = fetched
+    fetched.win.fetch = (url) => Promise.resolve({
+      ok: true,
+      json: () => Promise.resolve(String(url).indexOf('raw.githubusercontent') >= 0 ? { version: '1.0.0' } : { version: '9.9.9' }),
+    })
+    fetched.evaluate(clientSrc)
+    fetched.module().default.apply(fetched.ctx, { reactions: false, wander: false, celebrate: false })
+    fetched.advance(1000, 100)
+    const clientRes = await fetched.win.__wisp.checkForUpdate()
+    check(clientRes.state === 'available' && clientRes.latest === '9.9.9' && clientRes.from === 'npm',
+      'with a usable window.fetch the CLIENT half does the whole check itself — no host RPC involved',
+      JSON.stringify(clientRes))
+    fetched.win.__wisp.destroy()
+    active = keepFetched
+  }
   const quoted = Number((/当前 \*\*(\d+) 项全 PASS/.exec(readmeText) ?? [])[1])
   const total = checks + 1
   if (quoted === total) {