npm - jishushell - Versions diffs - 0.4.30 → 0.5.15 - Mend

jishushell 0.4.30 → 0.5.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (182) hide show

package/apps/anythingllm-container.yaml +287 -0
package/apps/browserless-chromium-container.yaml +18 -6
package/apps/filebrowser-container.yaml +163 -0
package/apps/openclaw-binary.yaml +8 -0
package/apps/openclaw-container.yaml +9 -1
package/apps/openclaw-with-searxng-container.yaml +4 -0
package/apps/searxng-container.yaml +5 -4
package/apps/weknora-container.yaml +471 -0
package/dist/cli/panel.js.map +1 -1
package/dist/config.d.ts +19 -0
package/dist/config.js +99 -1
package/dist/config.js.map +1 -1
package/dist/install.js +3 -3
package/dist/install.js.map +1 -1
package/dist/routes/auth.js +2 -2
package/dist/routes/auth.js.map +1 -1
package/dist/routes/backup.js +64 -11
package/dist/routes/backup.js.map +1 -1
package/dist/routes/external-mounts.d.ts +17 -0
package/dist/routes/external-mounts.js +73 -0
package/dist/routes/external-mounts.js.map +1 -0
package/dist/routes/file-mounts.d.ts +13 -0
package/dist/routes/file-mounts.js +90 -0
package/dist/routes/file-mounts.js.map +1 -0
package/dist/routes/files-organize.d.ts +28 -0
package/dist/routes/files-organize.js +167 -0
package/dist/routes/files-organize.js.map +1 -0
package/dist/routes/files.d.ts +31 -0
package/dist/routes/files.js +321 -0
package/dist/routes/files.js.map +1 -0
package/dist/routes/instances.js +45 -7
package/dist/routes/instances.js.map +1 -1
package/dist/routes/internal.d.ts +2 -0
package/dist/routes/internal.js +59 -0
package/dist/routes/internal.js.map +1 -0
package/dist/routes/setup.js +9 -9
package/dist/routes/setup.js.map +1 -1
package/dist/routes/system.js +1 -1
package/dist/routes/system.js.map +1 -1
package/dist/routes/webdav.d.ts +17 -0
package/dist/routes/webdav.js +114 -0
package/dist/routes/webdav.js.map +1 -0
package/dist/server.js +341 -3
package/dist/server.js.map +1 -1
package/dist/services/app/app-compiler.d.ts +1 -1
package/dist/services/app/app-compiler.js +5 -5
package/dist/services/app/app-compiler.js.map +1 -1
package/dist/services/app/app-manager.d.ts +1 -0
package/dist/services/app/app-manager.js +172 -41
package/dist/services/app/app-manager.js.map +1 -1
package/dist/services/app/custom-manager.js.map +1 -1
package/dist/services/app/hermes-agent-manager.js +1 -0
package/dist/services/app/hermes-agent-manager.js.map +1 -1
package/dist/services/app/ollama-manager.js +1 -1
package/dist/services/app/ollama-manager.js.map +1 -1
package/dist/services/app/openclaw-manager.js +20 -3
package/dist/services/app/openclaw-manager.js.map +1 -1
package/dist/services/app/platform-transform.d.ts +32 -0
package/dist/services/app/platform-transform.js +65 -0
package/dist/services/app/platform-transform.js.map +1 -0
package/dist/services/app-passwords.d.ts +61 -0
package/dist/services/app-passwords.js +173 -0
package/dist/services/app-passwords.js.map +1 -0
package/dist/services/backup-manager.d.ts +11 -0
package/dist/services/backup-manager.js +177 -4
package/dist/services/backup-manager.js.map +1 -1
package/dist/services/connection-apply.d.ts +2 -0
package/dist/services/connection-apply.js +55 -1
package/dist/services/connection-apply.js.map +1 -1
package/dist/services/connection-resolver.js +1 -1
package/dist/services/connection-resolver.js.map +1 -1
package/dist/services/connection-transactor.d.ts +2 -0
package/dist/services/connection-transactor.js +12 -2
package/dist/services/connection-transactor.js.map +1 -1
package/dist/services/external-mounts.d.ts +40 -0
package/dist/services/external-mounts.js +187 -0
package/dist/services/external-mounts.js.map +1 -0
package/dist/services/files-manager.d.ts +252 -0
package/dist/services/files-manager.js +1075 -0
package/dist/services/files-manager.js.map +1 -0
package/dist/services/files-mounts.d.ts +42 -0
package/dist/services/files-mounts.js +207 -0
package/dist/services/files-mounts.js.map +1 -0
package/dist/services/instance-manager.js +1 -23
package/dist/services/instance-manager.js.map +1 -1
package/dist/services/llm-proxy/index.js.map +1 -1
package/dist/services/llm-proxy/ssrf.js +6 -2
package/dist/services/llm-proxy/ssrf.js.map +1 -1
package/dist/services/nomad-manager.d.ts +4 -0
package/dist/services/nomad-manager.js +53 -19
package/dist/services/nomad-manager.js.map +1 -1
package/dist/services/organize/applier.d.ts +46 -0
package/dist/services/organize/applier.js +218 -0
package/dist/services/organize/applier.js.map +1 -0
package/dist/services/organize/rules.d.ts +57 -0
package/dist/services/organize/rules.js +286 -0
package/dist/services/organize/rules.js.map +1 -0
package/dist/services/organize/scanner.d.ts +50 -0
package/dist/services/organize/scanner.js +366 -0
package/dist/services/organize/scanner.js.map +1 -0
package/dist/services/organize/store.d.ts +14 -0
package/dist/services/organize/store.js +82 -0
package/dist/services/organize/store.js.map +1 -0
package/dist/services/panel-manager.js +20 -1
package/dist/services/panel-manager.js.map +1 -1
package/dist/services/process-manager.js +3 -2
package/dist/services/process-manager.js.map +1 -1
package/dist/services/runtime/adapters/hermes.js +1 -1
package/dist/services/runtime/adapters/hermes.js.map +1 -1
package/dist/services/runtime/adapters/openclaw-routes.d.ts +8 -2
package/dist/services/runtime/adapters/openclaw-routes.js +68 -0
package/dist/services/runtime/adapters/openclaw-routes.js.map +1 -1
package/dist/services/runtime/adapters/openclaw.d.ts +90 -0
package/dist/services/runtime/adapters/openclaw.js +957 -45
package/dist/services/runtime/adapters/openclaw.js.map +1 -1
package/dist/services/runtime/instance.d.ts +1 -1
package/dist/services/runtime/instance.js +1 -1
package/dist/services/runtime/instance.js.map +1 -1
package/dist/services/runtime/mcp-shims/anythingllm-shim.d.ts +46 -0
package/dist/services/runtime/mcp-shims/anythingllm-shim.js +281 -0
package/dist/services/runtime/mcp-shims/anythingllm-shim.js.map +1 -0
package/dist/services/runtime/mcp-shims/drive-shim.d.ts +54 -0
package/dist/services/runtime/mcp-shims/drive-shim.js +489 -0
package/dist/services/runtime/mcp-shims/drive-shim.js.map +1 -0
package/dist/services/runtime/types.d.ts +31 -0
package/dist/services/setup-manager.js +93 -18
package/dist/services/setup-manager.js.map +1 -1
package/dist/services/suggestions.js.map +1 -1
package/dist/services/webdav/server.d.ts +24 -0
package/dist/services/webdav/server.js +420 -0
package/dist/services/webdav/server.js.map +1 -0
package/dist/services/webdav/xml-builder.d.ts +73 -0
package/dist/services/webdav/xml-builder.js +156 -0
package/dist/services/webdav/xml-builder.js.map +1 -0
package/dist/services/workspace-builder.d.ts +29 -0
package/dist/services/workspace-builder.js +188 -0
package/dist/services/workspace-builder.js.map +1 -0
package/dist/types.d.ts +60 -0
package/dist/utils/path-locks.d.ts +30 -0
package/dist/utils/path-locks.js +63 -0
package/dist/utils/path-locks.js.map +1 -0
package/dist/utils/path-safety.d.ts +41 -0
package/dist/utils/path-safety.js +119 -0
package/dist/utils/path-safety.js.map +1 -0
package/dist/utils/safe-write.d.ts +24 -0
package/dist/utils/safe-write.js +82 -0
package/dist/utils/safe-write.js.map +1 -0
package/package.json +16 -1
package/public/assets/Dashboard-BdWPtroF.js +1 -0
package/public/assets/{HermesChatPanel-_GHoklgo.js → HermesChatPanel-B_2HlVBQ.js} +1 -1
package/public/assets/{HermesConfigForm-anDnwUp_.js → HermesConfigForm-DVlhg3WV.js} +2 -2
package/public/assets/{InitPassword-ZU9_-hDr.js → InitPassword-D7glTExX.js} +1 -1
package/public/assets/InstanceDetail-CxSy2cpe.js +92 -0
package/public/assets/{Login-BItXqYAJ.js → Login-Cfr5c2sv.js} +1 -1
package/public/assets/NewInstance-BIYDmJis.js +1 -0
package/public/assets/{ProviderRecommendations-DFYj7Fb6.js → ProviderRecommendations-BuRnvRcI.js} +1 -1
package/public/assets/{Settings-Bttc6QmM.js → Settings-Cc-tYBil.js} +1 -1
package/public/assets/{Setup-Bsxx1zgj.js → Setup-lGZEk5jq.js} +1 -1
package/public/assets/{WeixinLoginPanel-DPZpAKgO.js → WeixinLoginPanel-CoGqzxeV.js} +2 -2
package/public/assets/index-87IJXG-w.css +1 -0
package/public/assets/index-BZc5zH7u.js +19 -0
package/public/assets/{registry-5s2UB6is.js → registry-BWnkJgZ1.js} +2 -2
package/public/assets/{usePolling-Do5Erqm_.js → usePolling-CwwT9KrC.js} +1 -1
package/public/assets/{vendor-i18n-ucpM0OR0.js → vendor-i18n-y9V7Sfuu.js} +1 -1
package/public/assets/{vendor-react-Bk1hRGiY.js → vendor-react-BWrEVJVb.js} +6 -6
package/public/index.html +4 -4
package/scripts/check-app-spec.mjs +18 -4
package/scripts/check-new-file-tests.mjs +230 -0
package/scripts/check-quarantine-expiry.mjs +105 -0
package/scripts/perf/README.md +49 -0
package/scripts/perf/auth.js +99 -0
package/scripts/perf/config.js +63 -0
package/scripts/perf/instances.js +143 -0
package/scripts/perf/proxy.js +96 -0
package/scripts/smoke/files-w1.sh +142 -0
package/scripts/smoke-backend.mjs +122 -0
package/scripts/smoke-post-publish.mjs +346 -0
package/public/assets/Dashboard-rkWp-CXd.js +0 -1
package/public/assets/InstanceDetail-CN0FH1aw.js +0 -92
package/public/assets/NewInstance-BousE6kY.js +0 -1
package/public/assets/index-8xZy1z5k.css +0 -1
package/public/assets/index-Dw3HhUYE.js +0 -19

package/public/index.html CHANGED Viewed

@@ -9,10 +9,10 @@
          from the instance cards, making the panel look like Hermes. -->
     <link rel="icon" type="image/png" href="/favicon.png" />
     <title>JishuShell</title>
-    <script type="module" crossorigin src="/assets/index-Dw3HhUYE.js"></script>
-    <link rel="modulepreload" crossorigin href="/assets/vendor-react-Bk1hRGiY.js">
-    <link rel="modulepreload" crossorigin href="/assets/vendor-i18n-ucpM0OR0.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-8xZy1z5k.css">
+    <script type="module" crossorigin src="/assets/index-BZc5zH7u.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/vendor-react-BWrEVJVb.js">
+    <link rel="modulepreload" crossorigin href="/assets/vendor-i18n-y9V7Sfuu.js">
+    <link rel="stylesheet" crossorigin href="/assets/index-87IJXG-w.css">
   </head>
   <body class="bg-white min-h-screen">
     <div id="root"></div>

package/scripts/check-app-spec.mjs CHANGED Viewed

@@ -21,7 +21,7 @@
  * provide (severity gated by `required` — error for required:true, warning
  * otherwise).
  */
-import { readFileSync, readdirSync, statSync } from "fs";
+import { readFileSync, readdirSync, } from "fs";
 import { join, dirname } from "path";
 import { fileURLToPath } from "url";
 import { parse as parseYaml } from "yaml";
@@ -31,10 +31,16 @@ const APPS_DIR = process.env.APPS_DIR_OVERRIDE ?? join(__dirname, "..", "apps");
 // ── Allowlists (kept here so check-app-spec stays mechanically driven) ──
-const CAPABILITY_CATEGORIES = new Set(["llm", "search", "browser", "mcp"]);
+// Keep in sync with CAPABILITY_CATEGORIES in
+// src/services/connection-resolver.ts. `files` (W1-W2) and `knowledge`
+// (W2, AnythingLLM) are full categories with adapter hooks and slot UX.
+const CAPABILITY_CATEGORIES = new Set([
+  "llm", "search", "browser", "mcp", "files", "knowledge",
+]);
 const LEGACY_BINDABLE_EXACT_ALLOWLIST = new Set([
   "ollama-api",
+  "browserless-api",
 ]);
 const UI_LEGACY_ALLOWLIST = new Set([
@@ -47,6 +53,8 @@ const UI_LEGACY_ALLOWLIST = new Set([
   "web-searxng",
   "web-openwebui",
   "web-hermes",
+  "browserless-debugger",
+  "browserless-docs",
 ]);
 const PROTOCOL_WHITELIST = {
@@ -54,6 +62,12 @@ const PROTOCOL_WHITELIST = {
   search: new Set(["http", "https"]),
   browser: new Set(["ws", "wss", "http", "https"]),
   mcp: new Set(["http", "https", "ws", "sse"]),
+  // Filebrowser exposes an HTTP Web UI under /apps/filebrowser; webdav adds
+  // PROPFIND/PUT over the same HTTP origin. Both fit `http(s)`.
+  files: new Set(["http", "https"]),
+  // AnythingLLM exposes an OpenAI-compatible HTTP API for kb_search; baseUrl
+  // is always http(s) regardless of LAN vs container host topology.
+  knowledge: new Set(["http", "https"]),
   default: new Set(["http", "https", "ws", "wss", "tcp"]),
 };
@@ -230,7 +244,7 @@ function hasProviderForRequire(req) {
 // Second pass: validate each spec.
 for (const { file, spec } of specs) {
-  const id = typeof spec.id === "string" ? spec.id : "<no id>";
+  const _id = typeof spec.id === "string" ? spec.id : "<no id>";
   // ── provides[*] ──────────────────────────────────────────────────────
   for (const provide of spec.provides ?? []) {
@@ -319,7 +333,7 @@ for (const { file, spec } of specs) {
       // Unrecognized — author must explicitly opt into one of A/B/C.
       err(
         file,
-        `provide '${cap}' is not recognized as A/B/C; rename with category prefix (llm-/search-/browser-/mcp-), add to LEGACY_BINDABLE_EXACT_ALLOWLIST, or add to UI_LEGACY_ALLOWLIST`,
+        `provide '${cap}' is not recognized as A/B/C; rename with category prefix (${[...CAPABILITY_CATEGORIES].map((c) => c + "-").join("/")}), add to LEGACY_BINDABLE_EXACT_ALLOWLIST, or add to UI_LEGACY_ALLOWLIST`,
       );
     }

package/scripts/check-new-file-tests.mjs ADDED Viewed

@@ -0,0 +1,230 @@
+#!/usr/bin/env node
+/**
+ * CI check: warn when newly added source files have no corresponding test.
+ *
+ * Usage:
+ *   node scripts/check-new-file-tests.mjs [--base <ref>]
+ *
+ * Defaults:
+ *   --base: CI_MERGE_REQUEST_TARGET_BRANCH_NAME (MR) or origin/main (fallback)
+ *
+ * Exit codes:
+ *   0 — all new files have tests (or no new files)
+ *   1 — some new files are missing tests (warning)
+ */
+import { execSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { basename, dirname, join } from "node:path";
+// ── Configuration ──────────────────────────────────────────────────────
+/** File basenames exempt from the test requirement. */
+const EXEMPT_BASENAMES = new Set([
+  "index.ts",
+  "index.tsx",
+  "types.ts",
+  "types.tsx",
+  "constants.ts",
+  "constants.tsx",
+  "main.tsx",
+  "App.tsx",
+  "vite-env.d.ts",
+]);
+/** Glob-style suffix patterns to exempt. */
+const EXEMPT_SUFFIXES = [
+  ".d.ts",
+  ".test.ts",
+  ".test.tsx",
+  ".spec.ts",
+  ".spec.tsx",
+  ".visual.spec.ts",
+  ".browser.test.ts",
+  ".browser.test.tsx",
+];
+/** Path prefixes to exempt entirely. */
+const EXEMPT_PATH_PREFIXES = [
+  "src/test-setup",
+  "frontend/src/test-setup",
+  "frontend/src/visual-tests/",
+];
+/** Directories where backend tests live (searched for basename match). */
+const BACKEND_TEST_DIRS = ["tests/unit", "tests/integration"];
+// ── Helpers ────────────────────────────────────────────────────────────
+function git(cmd) {
+  return execSync(`git ${cmd}`, { encoding: "utf-8" }).trim();
+}
+function resolveBase() {
+  // CLI --base override
+  const baseIdx = process.argv.indexOf("--base");
+  if (baseIdx !== -1 && process.argv[baseIdx + 1]) {
+    return process.argv[baseIdx + 1];
+  }
+  // GitLab MR pipeline
+  const mrTarget = process.env.CI_MERGE_REQUEST_TARGET_BRANCH_NAME;
+  if (mrTarget) {
+    try {
+      git(`fetch origin ${mrTarget} --depth=1 2>/dev/null`);
+    } catch {
+      // already fetched or shallow — proceed
+    }
+    return `origin/${mrTarget}`;
+  }
+  // GitLab push pipeline
+  const beforeSha = process.env.CI_COMMIT_BEFORE_SHA;
+  if (beforeSha && beforeSha !== "0000000000000000000000000000000000000000") {
+    return beforeSha;
+  }
+  // Local fallback
+  return "origin/main";
+}
+function isExempt(filePath) {
+  const base = basename(filePath);
+  if (EXEMPT_BASENAMES.has(base)) return true;
+  if (EXEMPT_SUFFIXES.some((s) => filePath.endsWith(s))) return true;
+  if (EXEMPT_PATH_PREFIXES.some((p) => filePath.startsWith(p))) return true;
+  return false;
+}
+/**
+ * Search for a test file matching the given source file basename.
+ * Accepts exact basename match or partial token match
+ * (e.g., `app.ts` matches `app-cli.test.ts`).
+ */
+function findBackendTest(sourceFile) {
+  const base = basename(sourceFile, ".ts");
+  for (const dir of BACKEND_TEST_DIRS) {
+    try {
+      const files = execSync(
+        `find ${dir} -name "*.test.ts" -type f 2>/dev/null`,
+        { encoding: "utf-8" },
+      ).trim();
+      if (!files) continue;
+      for (const testFile of files.split("\n")) {
+        const testBase = basename(testFile, ".test.ts");
+        // Exact match or token-contains match
+        if (testBase === base || testBase.includes(base) || base.includes(testBase)) {
+          return testFile;
+        }
+      }
+    } catch {
+      continue;
+    }
+  }
+  return null;
+}
+/**
+ * Check if a co-located frontend test file exists.
+ */
+function findFrontendTest(sourceFile) {
+  const dir = dirname(sourceFile);
+  const base = basename(sourceFile).replace(/\.(tsx?)$/, "");
+  const candidates = [
+    join(dir, `${base}.test.ts`),
+    join(dir, `${base}.test.tsx`),
+  ];
+  for (const candidate of candidates) {
+    if (existsSync(candidate)) return candidate;
+  }
+  return null;
+}
+// ── Main ───────────────────────────────────────────────────────────────
+const base = resolveBase();
+let mergeBase;
+try {
+  mergeBase = git(`merge-base HEAD ${base}`);
+} catch {
+  // merge-base may fail on shallow clones — fall back to direct base
+  mergeBase = base;
+}
+let newFiles;
+try {
+  const output = git(`diff --name-only --diff-filter=A ${mergeBase}...HEAD`);
+  newFiles = output ? output.split("\n") : [];
+} catch {
+  console.log("⚠ Could not compute diff — skipping new-file test check.");
+  process.exit(0);
+}
+// Filter to source files only
+const backendSources = newFiles.filter(
+  (f) => f.startsWith("src/") && f.endsWith(".ts") && !isExempt(f),
+);
+const frontendSources = newFiles.filter(
+  (f) =>
+    f.startsWith("frontend/src/") &&
+    (f.endsWith(".ts") || f.endsWith(".tsx")) &&
+    !isExempt(f),
+);
+const uncovered = [];
+for (const file of backendSources) {
+  const testFile = findBackendTest(file);
+  if (!testFile) {
+    uncovered.push({ source: file, kind: "backend" });
+  }
+}
+for (const file of frontendSources) {
+  const testFile = findFrontendTest(file);
+  if (!testFile) {
+    uncovered.push({ source: file, kind: "frontend" });
+  }
+}
+// ── Report ─────────────────────────────────────────────────────────────
+const totalChecked = backendSources.length + frontendSources.length;
+if (totalChecked === 0) {
+  console.log("✔ No new source files to check.");
+  process.exit(0);
+}
+console.log(`Checked ${totalChecked} new source file(s) against ${mergeBase.slice(0, 8)}...\n`);
+if (uncovered.length === 0) {
+  console.log("✔ All new source files have matching test files.");
+  process.exit(0);
+}
+console.log("⚠ The following new source files have no obvious matching test:\n");
+for (const { source, kind } of uncovered) {
+  const hint =
+    kind === "backend"
+      ? "→ Expected: tests/unit/**/<name>.test.ts or tests/integration/**/<name>.test.ts"
+      : "→ Expected: co-located <name>.test.{ts,tsx}";
+  console.log(`  ${source}`);
+  console.log(`    ${hint}\n`);
+}
+console.log(
+  "If these files are covered by existing integration/e2e tests, " +
+  "note the covering test in the MR description.\n" +
+  "See docs/testing.md for testing conventions.\n",
+);
+process.exit(1);

package/scripts/check-quarantine-expiry.mjs ADDED Viewed

@@ -0,0 +1,105 @@
+#!/usr/bin/env node
+/**
+ * Check quarantine expiry — fails CI if any quarantined test has expired.
+ *
+ * Usage: node scripts/check-quarantine-expiry.mjs
+ * Exit codes:
+ *   0 — all quarantined tests are within their expiry window (or none exist)
+ *   1 — one or more quarantined tests have expired
+ */
+import { readFileSync } from "fs";
+import { resolve, dirname } from "path";
+import { fileURLToPath } from "url";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const quarantinePath = resolve(__dirname, "../tests/quarantine.json");
+const MAX_QUARANTINE_DAYS = 14;
+try {
+  const raw = readFileSync(quarantinePath, "utf-8");
+  const data = JSON.parse(raw);
+  const tests = data.tests || [];
+  if (tests.length === 0) {
+    console.log("✅ No quarantined tests.");
+    process.exit(0);
+  }
+  const today = new Date();
+  today.setHours(0, 0, 0, 0);
+  const expired = [];
+  const active = [];
+  const tooLong = [];
+  for (const entry of tests) {
+    const expiryDate = new Date(entry.expiry);
+    expiryDate.setHours(0, 0, 0, 0);
+    const createdDate = new Date(entry.created);
+    createdDate.setHours(0, 0, 0, 0);
+    const durationDays = Math.ceil(
+      (expiryDate.getTime() - createdDate.getTime()) / (1000 * 60 * 60 * 24),
+    );
+    if (durationDays > MAX_QUARANTINE_DAYS) {
+      tooLong.push({
+        ...entry,
+        durationDays,
+      });
+    }
+    if (expiryDate < today) {
+      expired.push(entry);
+    } else {
+      active.push(entry);
+    }
+  }
+  if (active.length > 0) {
+    console.log(`⏳ ${active.length} quarantined test(s) (active):`);
+    for (const t of active) {
+      console.log(`   - ${t.file} > "${t.testName}" (expires: ${t.expiry}, owner: ${t.owner})`);
+    }
+  }
+  if (tooLong.length > 0) {
+    console.error(`\n❌ ${tooLong.length} quarantine(s) exceed ${MAX_QUARANTINE_DAYS}-day limit:`);
+    for (const t of tooLong) {
+      console.error(
+        `   - ${t.file} > "${t.testName}" (${t.durationDays} days, max ${MAX_QUARANTINE_DAYS})`,
+      );
+    }
+    console.error("\nShorten expiry to at most 14 days from creation date.");
+  }
+  if (expired.length > 0) {
+    console.error(`\n❌ ${expired.length} quarantined test(s) have EXPIRED:`);
+    for (const t of expired) {
+      console.error(
+        `   - ${t.file} > "${t.testName}" (expired: ${t.expiry}, owner: ${t.owner})`,
+      );
+      console.error(`     Reason: ${t.reason}`);
+      if (t.issueLink) {
+        console.error(`     Issue: ${t.issueLink}`);
+      }
+    }
+    console.error("\nFix or remove expired quarantine entries before merging.");
+  }
+  if (tooLong.length > 0 || expired.length > 0) {
+    process.exit(1);
+  }
+  console.log("\n✅ All quarantine entries are within their expiry window.");
+  process.exit(0);
+} catch (err) {
+  if (err.code === "ENOENT") {
+    console.log("✅ No quarantine file found (tests/quarantine.json).");
+    process.exit(0);
+  }
+  console.error("Failed to check quarantine:", err.message);
+  process.exit(1);
+}

package/scripts/perf/README.md ADDED Viewed

@@ -0,0 +1,49 @@
+# Performance Baseline Tests (k6)
+Latency baseline scripts for core API endpoints. Run nightly in CI to detect
+performance regressions.
+## Prerequisites
+- [k6](https://grafana.com/docs/k6/latest/set-up/install-k6/) installed on the runner
+- JishuShell server running (the CI job starts one automatically)
+## Scripts
+| Script | Endpoints covered |
+|--------|-------------------|
+| `auth.js` | `/api/auth/status`, `/api/auth/login`, `/api/auth/logout` |
+| `proxy.js` | `/proxy/v1/models`, `/api/llm/providers` |
+| `instances.js` | `/api/instances` CRUD lifecycle |
+## Environment Variables
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `BASE_URL` | `http://127.0.0.1:8090` | Server base URL |
+| `PASSWORD` | `perf-test-password-2026` | Admin password |
+| `SMOKE` | `false` | Set to `true` for quick 10s validation |
+## Usage
+```bash
+# Smoke test (quick validation)
+k6 run -e SMOKE=true scripts/perf/auth.js
+# Full baseline run
+k6 run scripts/perf/auth.js
+# All scripts with custom base URL
+for script in scripts/perf/auth.js scripts/perf/proxy.js scripts/perf/instances.js; do
+  k6 run -e BASE_URL=http://localhost:9090 "$script"
+done
+```
+## Thresholds
+Default thresholds (see `config.js`):
+- **p(95) < 500ms** for general endpoints
+- **p(99) < 1000ms** tail latency
+- **Error rate < 1%**
+Per-endpoint overrides are defined in each script's `options.thresholds`.

package/scripts/perf/auth.js ADDED Viewed

@@ -0,0 +1,99 @@
+import http from "k6/http";
+import { check, group, sleep } from "k6";
+import {
+  BASE_URL,
+  PASSWORD,
+  DEFAULT_THRESHOLDS,
+  DEFAULT_STAGES,
+  SMOKE_STAGES,
+  authHeaders,
+} from "./config.js";
+const isSmoke = __ENV.SMOKE === "true";
+export const options = {
+  stages: isSmoke ? SMOKE_STAGES : DEFAULT_STAGES,
+  thresholds: {
+    ...DEFAULT_THRESHOLDS,
+    "http_req_duration{name:login}": ["p(95)<300"],
+    "http_req_duration{name:auth_status}": ["p(95)<100"],
+  },
+  tags: { suite: "auth" },
+};
+/**
+ * Setup: initialize password and obtain a baseline token.
+ * Runs once before VUs start.
+ */
+export function setup() {
+  // Check if already initialized
+  const statusRes = http.get(`${BASE_URL}/api/auth/status`);
+  const initialized = statusRes.json("initialized");
+  let token;
+  if (!initialized) {
+    const initRes = http.post(
+      `${BASE_URL}/api/auth/init`,
+      JSON.stringify({ password: PASSWORD }),
+      { headers: { "Content-Type": "application/json" } },
+    );
+    check(initRes, { "init 200": (r) => r.status === 200 });
+    token = initRes.json("token");
+  } else {
+    const loginRes = http.post(
+      `${BASE_URL}/api/auth/login`,
+      JSON.stringify({ password: PASSWORD }),
+      { headers: { "Content-Type": "application/json" } },
+    );
+    check(loginRes, { "login 200": (r) => r.status === 200 });
+    token = loginRes.json("token");
+  }
+  if (!token) {
+    throw new Error("Failed to obtain auth token during setup");
+  }
+  return { token };
+}
+export default function (data) {
+  group("auth-status", () => {
+    const res = http.get(`${BASE_URL}/api/auth/status`, {
+      tags: { name: "auth_status" },
+    });
+    check(res, {
+      "status 200": (r) => r.status === 200,
+      "has initialized field": (r) => r.json("initialized") !== undefined,
+    });
+  });
+  sleep(0.5);
+  group("login", () => {
+    const res = http.post(
+      `${BASE_URL}/api/auth/login`,
+      JSON.stringify({ password: PASSWORD }),
+      {
+        headers: { "Content-Type": "application/json" },
+        tags: { name: "login" },
+      },
+    );
+    check(res, {
+      "login 200": (r) => r.status === 200,
+      "returns token": (r) => r.json("token") !== undefined,
+    });
+  });
+  sleep(0.5);
+  group("logout", () => {
+    const res = http.post(`${BASE_URL}/api/auth/logout`, null, {
+      headers: authHeaders(data.token),
+      tags: { name: "logout" },
+    });
+    check(res, {
+      "logout 200": (r) => r.status === 200,
+    });
+  });
+  sleep(1);
+}

package/scripts/perf/config.js ADDED Viewed

@@ -0,0 +1,63 @@
+/**
+ * Shared configuration and helpers for k6 performance tests.
+ *
+ * Environment variables:
+ *   BASE_URL  — server base URL (default: http://127.0.0.1:8090)
+ *   PASSWORD  — admin password for auth (default: perf-test-password-2026)
+ */
+export const BASE_URL = __ENV.BASE_URL || "http://127.0.0.1:8090";
+export const PASSWORD = __ENV.PASSWORD || "perf-test-password-2026";
+/**
+ * Standard k6 thresholds for API endpoints.
+ * - p(95) < 500ms: acceptable for most CRUD ops
+ * - p(99) < 1000ms: tail latency budget
+ * - error rate < 1%
+ */
+export const DEFAULT_THRESHOLDS = {
+  http_req_duration: ["p(95)<500", "p(99)<1000"],
+  http_req_failed: ["rate<0.01"],
+};
+/**
+ * Standard load profile for baseline tests.
+ * Ramp up to 10 VUs over 30s, hold for 2m, ramp down.
+ */
+export const DEFAULT_STAGES = [
+  { duration: "30s", target: 10 },
+  { duration: "2m", target: 10 },
+  { duration: "10s", target: 0 },
+];
+/**
+ * Smoke profile for quick validation (CI gate).
+ * 1 VU for 10s — just verify the script works.
+ */
+export const SMOKE_STAGES = [
+  { duration: "10s", target: 1 },
+];
+/**
+ * Build standard headers with auth cookie.
+ * @param {string} token - JWT token from login/init
+ * @returns {object} headers object for k6 http calls
+ */
+export function authHeaders(token) {
+  return {
+    "Content-Type": "application/json",
+    Cookie: `jishushell_session=${token}`,
+  };
+}
+/**
+ * Build standard headers with Bearer token (for proxy routes).
+ * @param {string} token - JWT token
+ * @returns {object} headers object for k6 http calls
+ */
+export function bearerHeaders(token) {
+  return {
+    "Content-Type": "application/json",
+    Authorization: `Bearer ${token}`,
+  };
+}