solopup-memory 0.21.0-beta.3 → 0.22.0-beta.3

package/scripts/dream.mjs

@@ -0,0 +1,205 @@
+#!/usr/bin/env node
+/**
+ * 做梦 P0：只读的 op 计划生成器（影子报告）。
+ *
+ * 它读 L0 检测 findings 与 L3 遥测，把“该整理什么”写成可审计的 op 列表，
+ * **不写任何文件、不调用模型、不 apply**。真正的应用在 P1 之后，必须人工确认。
+ *
+ *   node scripts/dream.mjs                # 人类可读
+ *   node scripts/dream.mjs --json         # 机器可读
+ *   node scripts/dream.mjs --check        # 有 high 风险 op 时退出码 1
+ */
+
+import { createHash } from 'node:crypto'
+import { homedir } from 'node:os'
+import { copyFileSync, existsSync, mkdirSync, readdirSync, statSync } from 'node:fs'
+import { join, resolve } from 'node:path'
+
+import { detectRoot, detectStore } from '../detect.mjs'
+import { pruneStore } from '../index.mjs'
+import { collect as collectTelemetry } from './telemetry.mjs'
+
+const KIND_BY_FINDING = {
+  'I3-record-missing-from-index': { kind: 'align-projection', risk: 'auto', why: '账本有效记录没有投影到索引' },
+  'I3-detail-topic-missing': { kind: 'align-projection', risk: 'auto', why: '记录正文文件缺失' },
+  'I3-detail-mismatch': { kind: 'align-projection', risk: 'auto', why: '正文与账本不一致' },
+  'I2-missing-topic-file': { kind: 'repair-reference', risk: 'auto', why: '索引指向不存在的主题文件' },
+  'I2-missing-anchor': { kind: 'repair-reference', risk: 'auto', why: '索引锚点在主题文件里找不到' },
+  'I5-withdrawal-residue': { kind: 'republish-withdrawal', risk: 'auto', why: '撤回没有传播到索引' },
+  'I6-duplicate-line': { kind: 'merge-duplicate', risk: 'human', why: '完全重复的索引行' },
+  'I6-near-duplicate': { kind: 'merge-duplicate', risk: 'human', why: '相似度 ≥0.9 的近重复' },
+  'I7-conflict': { kind: 'arbitrate-conflict', risk: 'human', why: '同一属性并存多个取值' },
+  'I8-budget-lines': { kind: 'compact-index', risk: 'auto', why: '索引行数超限' },
+  'I8-budget-bytes': { kind: 'compact-index', risk: 'auto', why: '索引字节超限' },
+  'I8-budget-store': { kind: 'compact-index', risk: 'auto', why: '库占用超限' },
+  'I10-version-mention': { kind: 'review-stale', risk: 'human', why: '记忆提到与当前版本不同的版本号' },
+  'I14-truncated-paragraph': { kind: 'repair-topic-truncation', risk: 'human', why: '主题段落像被截断' },
+  'I15-heading-without-index': { kind: 'link-heading', risk: 'auto', why: '标题没有索引指向' },
+}
+
+function opId(store, kind, evidence) {
+  return createHash('sha256').update(`${store}|${kind}|${evidence.join(',')}`).digest('hex').slice(0, 12)
+}
+
+export function planDream(root) {
+  const detection = detectRoot(root)
+  const telemetry = collectTelemetry(root)
+  const ops = []
+  for (const store of detection.stores) {
+    const storeName = store.dir === root ? 'global' : store.dir
+    for (const finding of store.findings) {
+      const mapping = KIND_BY_FINDING[finding.id]
+      if (mapping === undefined) continue
+      const evidence = [`${store.scope}:${finding.id}`, ...(finding.refs ?? []).map((ref) => `${ref.file}${ref.line === undefined ? '' : ':' + ref.line}`)]
+      ops.push({
+        opId: opId(storeName, mapping.kind, evidence),
+        kind: mapping.kind,
+        risk: mapping.risk,
+        store: storeName,
+        why: mapping.why,
+        evidence,
+      })
+    }
+  }
+  for (const finding of detection.crossFindings) {
+    if (finding.id !== 'X2-duplicate-store') continue
+    ops.push({
+      opId: opId('root', 'dedupe-store', [finding.message]),
+      kind: 'dedupe-store',
+      risk: 'human',
+      store: 'root',
+      why: '内容完全相同的库（遗留副本）',
+      evidence: [finding.id, finding.message],
+    })
+  }
+  for (const warning of telemetry.warnings) {
+    if (!['T1-low-capture-success', 'T2-zero-output', 'T3-short-sessions'].includes(warning.id)) continue
+    ops.push({
+      opId: opId('root', 'inspect-capture', [warning.id]),
+      kind: 'inspect-capture',
+      risk: 'human',
+      store: 'root',
+      why: warning.message,
+      evidence: [warning.id],
+    })
+  }
+  const summary = {
+    total: ops.length,
+    auto: ops.filter((op) => op.risk === 'auto').length,
+    human: ops.filter((op) => op.risk === 'human').length,
+    byKind: Object.fromEntries([...new Set(ops.map((op) => op.kind))].sort().map((kind) => [kind, ops.filter((op) => op.kind === kind).length])),
+  }
+  return {
+    kind: 'dream-plan',
+    phase: 'P0-shadow',
+    readOnly: true,
+    applySupported: false,
+    modelCalls: 0,
+    generatedAt: new Date().toISOString(),
+    root,
+    summary,
+    ops,
+    detectionSummary: detection.summary,
+    telemetrySummary: { capture: telemetry.capture, output: telemetry.output, warnings: telemetry.warnings.length },
+  }
+}
+
+/** P1 只自动执行确定性与可回滚的整理；其余 op 明确留给人工。 */
+const AUTO_KINDS = new Set(['compact-index'])
+
+export function planHash(plan) {
+  return createHash('sha256')
+    .update(JSON.stringify({ root: plan.root, ops: plan.ops.map((op) => ({ opId: op.opId, kind: op.kind, store: op.store, evidence: op.evidence })) }))
+    .digest('hex')
+}
+
+function storeDir(root, store) {
+  return store === 'global' ? root : store
+}
+
+function backupStore(root, dir, stamp) {
+  const target = join(root, '.dream', 'backups', stamp, dir === root ? 'global' : dir.slice(dir.lastIndexOf('/') + 1))
+  mkdirSync(target, { recursive: true })
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    if (!entry.isFile() || entry.name.startsWith('.')) continue
+    copyFileSync(join(dir, entry.name), join(target, entry.name))
+  }
+  return target
+}
+
+export function applyDream(plan, reviewed) {
+  if (reviewed !== planHash(plan)) throw new Error('dream-review-hash-mismatch')
+  const applyOps = plan.ops.filter((op) => AUTO_KINDS.has(op.kind))
+  const skipped = plan.ops.filter((op) => !AUTO_KINDS.has(op.kind)).map((op) => ({ opId: op.opId, kind: op.kind, reason: 'needs-human' }))
+  if (applyOps.length === 0) return { applied: 0, skipped, results: [], backup: null }
+  const stamp = new Date().toISOString().replace(/[:.]/g, '-')
+  const dirs = [...new Set(applyOps.map((op) => storeDir(plan.root, op.store)))]
+  const before = dirs.map((dir) => detectStore(dir, { scope: dir === plan.root ? 'global' : 'project' }))
+  const backup = {}
+  for (const dir of dirs) backup[dir] = backupStore(plan.root, dir, stamp)
+  const results = []
+  for (const dir of dirs) {
+    const result = pruneStore(dir, { apply: true })
+    results.push({ dir, before: result.before, after: result.after, removed: result.removed, archived: result.archived })
+  }
+  const verification = dirs.map((dir, index) => {
+    const after = detectStore(dir, { scope: dir === plan.root ? 'global' : 'project' })
+    return { dir, errorsBefore: before[index].summary.errors, errorsAfter: after.summary.errors, ok: after.summary.errors <= before[index].summary.errors }
+  })
+  const applied = results.reduce((sum, row) => sum + (row.removed.expired + row.removed.duplicate + row.removed.overCap > 0 ? 1 : 0), 0)
+  return { applied: results.length, skipped, results, backup, verification }
+}
+
+if (process.argv[1] !== undefined && import.meta.url === `file://${process.argv[1]}`) {
+  const argv = process.argv.slice(2)
+  const option = (name) => {
+    const at = argv.indexOf(name)
+    return at >= 0 ? argv[at + 1] : undefined
+  }
+  const root = resolve(option('--root') ?? join(process.env.DSH_HOME ?? join(homedir(), '.dsh'), 'memory'))
+  if (!existsSync(root)) {
+    console.error(`[dream] 记忆根不存在：${root}`)
+    process.exit(2)
+  }
+  const plan = planDream(root)
+  if (argv.includes('--apply')) {
+    const reviewed = option('--reviewed')
+    if (reviewed === undefined) {
+      console.error('[dream] --apply 需要 --reviewed <planHash>；先看 `--json` 输出的完整计划')
+      process.exit(2)
+    }
+    let result
+    try {
+      result = applyDream(plan, reviewed)
+    } catch (error) {
+      console.error(`[dream] 应用失败：${error.message}`)
+      process.exit(2)
+    }
+    if (argv.includes('--json')) process.stdout.write(JSON.stringify({ planHash: planHash(plan), ...result }, null, 2) + '\n')
+    else {
+      const lines = [
+        `做梦 P1 应用 · ${new Date().toISOString()}`,
+        `planHash：${planHash(plan)}`,
+        `执行 ${result.applied} 个自动 op；跳过 ${result.skipped.length} 个（需人工）。`,
+      ]
+      for (const row of result.results) lines.push(`  ${row.dir}：${row.before.lines} → ${row.after.lines} 行，remove expired ${row.removed.expired} / duplicate ${row.removed.duplicate} / overCap ${row.removed.overCap}`)
+      for (const row of result.verification ?? []) lines.push(`  验证 ${row.dir}：error ${row.errorsBefore} → ${row.errorsAfter} ${row.ok ? 'OK' : '恶化，请用备份回滚'}`)
+      if (result.backup !== null) lines.push(`  备份：${Object.values(result.backup).join('、')}`)
+      process.stdout.write(lines.join('\n') + '\n')
+    }
+    process.exit((result.verification ?? []).every((row) => row.ok) ? 0 : 1)
+  }
+  if (argv.includes('--json')) process.stdout.write(JSON.stringify(plan, null, 2) + '\n')
+  else {
+    const lines = [
+      `做梦 P0（影子报告，只读）· ${plan.generatedAt}`,
+      `根目录：${plan.root}`,
+      `op 总数 ${plan.summary.total}（自动可执行候选 ${plan.summary.auto}、需人工确认 ${plan.summary.human}）`,
+      `分类：${Object.entries(plan.summary.byKind).map(([kind, count]) => `${kind} ${count}`).join('、') || '无'}`,
+      '边界：不写文件、不调用模型；apply 未实现。',
+    ]
+    for (const op of plan.ops) lines.push(`  [${op.risk}] ${op.kind} · ${op.why}${op.evidence.length ? `（${op.evidence.slice(0, 3).join('；')}）` : ''}`)
+    process.stdout.write(lines.join('\n') + '\n')
+  }
+  if (argv.includes('--check') && plan.summary.human > 0) process.exit(1)
+}

package/scripts/probe-history.mjs

@@ -0,0 +1,92 @@
+#!/usr/bin/env node
+/** Real DSH CLI/Loader, Session and Projection API check. Synthetic input, no model calls. */
+import { spawn } from 'node:child_process'
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync, realpathSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { tmpdir } from 'node:os'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+import { probeEnvironment } from './probe-env.mjs'
+
+const CLI = process.env.DSH_CLI ?? '/Applications/DeepSeek Harness.app/Contents/Resources/runtime/cli/bin/dsh'
+if (!existsSync(CLI)) { console.error('[FAIL] DSH_CLI must identify an installed official host'); process.exit(2) }
+const source = dirname(dirname(fileURLToPath(import.meta.url)))
+const root = realpathSync(mkdtempSync(join(tmpdir(), 'dsh-history-probe-')))
+const env = probeEnvironment(root), profile = join(env.HOME, 'profiles', 'probe')
+mkdirSync(profile, { recursive: true }); mkdirSync(env.TMPDIR)
+const reportFile = join(root, 'result.json'), driver = join(root, 'driver.mjs')
+writeFileSync(driver, `
+import assert from 'node:assert/strict'
+import { readFileSync, writeFileSync } from 'node:fs'
+import * as memory from ${JSON.stringify(pathToFileURL(join(source, 'index.mjs')).href)}
+import { memoryContextProjection, reconcileMemoryContext } from ${JSON.stringify(pathToFileURL(join(source, 'context-history.mjs')).href)}
+export const name = 'solopup-history-probe'
+export const inject = ['sessions', 'sessionProjections', 'systemPrompt', 'workingDirectory', 'tools']
+export async function apply(ctx) {
+  try {
+    const owner = await ctx.plugin(memory, { autoCapture: { enabled: false } })
+    if (typeof owner?.await === 'function') await owner.await()
+    const stamp = JSON.parse(readFileSync(${JSON.stringify(join(env.HOME, 'memory', '.loaded.json'))}, 'utf8'))
+    assert.equal(stamp.memoryHistory.available, true)
+    assert.equal(stamp.tools.length, 6)
+    const key = 'solopup:synthetic-projection-probe'
+    const definition = { ...memoryContextProjection(), key }
+    const register = async () => {
+      const value = await ctx.sessionProjections.register(definition)
+      return typeof value?.stateOf === 'function' ? { ...value, retained: true } : { stateOf: session => ctx.sessionProjections.stateOf(session, key), dispose: value, retained: false }
+    }
+    const handle = await register()
+    const session = ctx.sessions.create('solopup-synthetic-history')
+    const ordinary = { id: 'ordinary', role: 'user', source: { kind: 'user' }, content: [{ type: 'text', text: 'ordinary synthetic quotation remains' }] }
+    session.append('user/message', ordinary, { surfaceOp: 'append' })
+    const sections = [{ name: 'memory:index', text: 'obsolete synthetic memory' }, { name: 'other:context', text: 'keep other provider' }]
+    const old = { id: 'old-context', role: 'user', source: { kind: 'runtime-context', form: 'snapshot', sections }, content: [{ type: 'text', text: 'Current runtime context. This snapshot supersedes earlier runtime-context snapshots.\\n\\n' + sections.map(s => s.text).join('\\n\\n') }] }
+    const event = session.append('user/message', old, { surfaceOp: 'append' })
+    assert.deepEqual(handle.stateOf(session).nodes, [{ id: 'old-context', seq: event.seq }])
+    assert.equal(reconcileMemoryContext(session, handle.stateOf(session), 'current synthetic memory').replaced, 1)
+    assert.deepEqual(session.deriveMessages()[0], ordinary)
+    assert.doesNotMatch(JSON.stringify(session.deriveMessages()), /obsolete synthetic memory/)
+    assert.match(JSON.stringify(session.deriveMessages()), /keep other provider/)
+    assert.deepEqual(handle.stateOf(session).nodes, [])
+    await handle.dispose()
+    // A registration acquired after events exist must reconstruct from the real Session.
+    const replay = await register()
+    assert.deepEqual(replay.stateOf(session).nodes, [])
+    const replayed = ctx.sessions.create('solopup-synthetic-replay', { seed: [{ ...event, seq: 0 }] })
+    assert.equal(replay.stateOf(replayed).nodes.length, 1)
+    await replay.dispose()
+    if (replay.retained) assert.equal(replay.stateOf(replayed).nodes.length, 1, 'retained readers remain usable after owner disposal')
+    await assert.rejects(async () => await ctx.sessionProjections.register({ ...definition, stateVersion: -1 }), /non-negative/)
+    await owner.dispose()
+    writeFileSync(${JSON.stringify(reportFile)}, JSON.stringify({ passed: true, realDshHost: true, realModel: false, cleanHome: true, syntheticInput: true, tools: stamp.tools.length, projectionApi: handle.retained ? 'retained-handle' : 'legacy-registry', historyAvailable: stamp.memoryHistory.available, liveState: true, rewritePreservesOrdinaryAndOtherProvider: true, coldReplay: true, registrationRejected: true, ownerDisposed: true }) + '\\n')
+  } catch (error) {
+    writeFileSync(${JSON.stringify(reportFile)}, JSON.stringify({ passed: false, error: error.stack }) + '\\n')
+  }
+}
+`)
+writeFileSync(join(profile, 'package.json'), JSON.stringify({ name: 'solopup-history-probe', private: true, dependencies: {}, dsh: { profile: { bundles: ['@deepseek-ai/dsh-base', '@deepseek-ai/dsh-web-app'] } } }))
+writeFileSync(join(profile, 'cordis.yml'), '[]\n')
+writeFileSync(join(profile, 'cordis.patch.yml'), `- insert:\n    - id: history-probe\n      name: ${JSON.stringify(pathToFileURL(driver).href)}\n`)
+let output = '', child
+const sleep = ms => new Promise(resolve => setTimeout(resolve, ms))
+try {
+  child = spawn(CLI, ['--profile', 'probe', '--port', '0', '--no-open'], { env, stdio: ['ignore', 'pipe', 'pipe'] })
+  child.stdout.on('data', chunk => { output += chunk }); child.stderr.on('data', chunk => { output += chunk })
+  let childError
+  child.once('error', error => { childError = error.code })
+  const deadline = Date.now() + 40000
+  while (!existsSync(reportFile) && !childError && child.exitCode === null && Date.now() < deadline) await sleep(100)
+  if (!existsSync(reportFile)) throw Error(`history-probe-host-failed:${childError ?? child.exitCode ?? 'timeout'}\n${output.slice(-6000)}`)
+  const report = JSON.parse(readFileSync(reportFile, 'utf8'))
+  if (!report.passed) throw Error(report.error + '\n' + output.slice(-6000))
+  console.log('[PASS] Real DSH history registration, live state, rewrite, cold replay, rejection and disposal')
+  console.log(JSON.stringify(report))
+} catch (error) {
+  console.error('[FAIL] ' + error.message); process.exitCode = 1
+} finally {
+  if (child && child.exitCode === null && child.signalCode === null) {
+    const stopped = new Promise(resolve => child.once('exit', resolve))
+    child.kill('SIGTERM'); await Promise.race([stopped, sleep(1500)])
+    if (child.exitCode === null && child.signalCode === null) { child.kill('SIGKILL'); await Promise.race([stopped, sleep(1500)]) }
+  }
+  rmSync(root, { recursive: true, force: true })
+}

package/scripts/probe-load.mjs

@@ -84,5 +84,5 @@ if (missing.length > 0) {
   console.error(`[FAIL] 少注册了工具：${missing.join('、')}`)
   process.exit(1)
 }
-if (stamp.sourceControl?.state !== 'managed' || stamp.degraded?.length) { console.error('[FAIL] 工具存在但来源控制未就绪'); process.exit(1) }
+if (stamp.sourceControl?.state !== 'managed' || stamp.degraded?.length || stamp.memoryHistory?.available !== true) { console.error('[FAIL] 工具存在但来源控制未就绪'); process.exit(1) }
 console.log(`[PASS] 隔离实例加载成功：v${stamp.version}，${stamp.tools.length} 个工具，pid ${stamp.pid}`)

package/scripts/probe-package.mjs

@@ -49,6 +49,10 @@ try {
   report.lockContention = testOutput.split('\n').filter((line) => /accepted=40; lock-busy retries=/.test(line))
   if (!Number.isInteger(report.packagedTests) || report.packagedTests < 1) throw new Error('package-probe-test-count-missing')
 
+  const historyOutput = run(process.execPath, ['scripts/probe-history.mjs'], unpacked, { env: { ...cleanEnv, DSH_CLI: CLI } })
+  report.historyContract = JSON.parse(historyOutput.trim().split('\n').at(-1))
+  if (!report.historyContract.passed) throw new Error('package-probe-history-contract-failed')
+
   // Entire profile is authored here; no copy of the user's desktop configuration.
   const home = join(root, 'home'); const profile = join(home, 'profiles', 'clean')
   mkdirSync(profile, { recursive: true })
@@ -71,8 +75,8 @@ try {
   }
   if (!stamp) throw new Error(`package-probe-host-load-failed:${hostError ?? host.exitCode ?? 'timeout'}`)
   const expected = ['memory_write', 'memory_forget', 'memory_links', 'memory_search', 'memory_prune', 'memory_status']
-  if (stamp.version !== pkg.version || expected.some((tool) => !stamp.tools.includes(tool)) || stamp.degraded.length || stamp.sourceControl?.state !== 'managed') throw new Error('package-probe-host-registration-failed')
-  report.hostLoad = { version: stamp.version, node: stamp.node, tools: stamp.tools, cleanHome: true, profileCopied: false, sourceControl: stamp.sourceControl,
+  if (stamp.version !== pkg.version || expected.some((tool) => !stamp.tools.includes(tool)) || stamp.degraded.length || stamp.sourceControl?.state !== 'managed' || stamp.memoryHistory?.available !== true) throw new Error('package-probe-host-registration-failed')
+  report.hostLoad = { version: stamp.version, node: stamp.node, tools: stamp.tools, cleanHome: true, profileCopied: false, sourceControl: stamp.sourceControl, memoryHistory: stamp.memoryHistory,
     environmentAllowlist: Object.keys(cleanEnv).sort(), parentEnvironmentInherited: false }
   const retained = join(home, 'memory', 'MEMORY.md')
   const syntheticMemory = '- [user] 合成验收偏好只用于打包检查 — user.md\n'

package/scripts/security-check.mjs

@@ -0,0 +1,173 @@
+#!/usr/bin/env node
+/**
+ * 发版前安全自查（只读）。检查依赖面、运行时执行/网络面、密钥与绝对路径、
+ * CI 工作流权限与 pin、打包内容、许可与引擎声明。
+ *
+ *   node scripts/security-check.mjs
+ *   node scripts/security-check.mjs --json
+ *
+ * 这不是渗透测试，也不能替代独立审计；它检查的是“不该进发行包/不该在运行时出现”的机械项。
+ */
+
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs'
+import { dirname, join, relative } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+const ROOT = join(HERE, '..')
+const pkg = JSON.parse(readFileSync(join(ROOT, 'package.json'), 'utf8'))
+const checks = []
+const check = (id, run) => {
+  try {
+    const detail = run()
+    checks.push({ id, passed: true, detail: detail ?? null })
+  } catch (error) {
+    checks.push({ id, passed: false, error: error.message })
+  }
+}
+const assert = (condition, message) => {
+  if (!condition) throw new Error(message)
+}
+
+function walk(dir, out = []) {
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    if (['node_modules', 'research', '.git', '.github', 'ci'].includes(entry.name)) continue
+    const full = join(dir, entry.name)
+    if (entry.isDirectory()) walk(full, out)
+    else if (entry.isFile()) out.push(full)
+  }
+  return out
+}
+
+const files = walk(ROOT)
+const runtimeFiles = files.filter((file) => file.endsWith('.mjs') && !/\/test-[^/]+\.mjs$/.test(file) && !file.includes('/scripts/') && !file.includes('/eval/'))
+const text = (file) => readFileSync(file, 'utf8')
+
+/** 发行包实际包含的文件（目录条目展开）。绝对路径与密钥检查只看这些。 */
+function shippedFiles() {
+  const out = new Set()
+  for (const entry of pkg.files ?? []) {
+    if (entry.endsWith('/')) {
+      const prefix = join(ROOT, entry)
+      if (existsSync(prefix)) for (const file of walk(prefix)) out.add(file)
+      continue
+    }
+    const full = join(ROOT, entry)
+    if (existsSync(full) && statSync(full).isFile()) out.add(full)
+  }
+  return [...out]
+}
+/** 注入测试语料与安全测试里故意放的反例，不是真实凭据。 */
+const fixtureAllowlist = (file) => /\/corpus\/|\/test-[^/]+\.mjs$|\/scripts\/security-check\.mjs$/.test(file)
+
+check('dependencies', () => {
+  const deps = { ...(pkg.dependencies ?? {}), ...(pkg.optionalDependencies ?? {}), ...(pkg.peerDependencies ?? {}) }
+  assert(Object.keys(deps).length === 0, `存在运行时依赖：${Object.keys(deps).join(',')}`)
+  return 'zero runtime dependencies'
+})
+
+check('install-hooks', () => {
+  const hooks = ['preinstall', 'install', 'postinstall', 'prepare', 'prepublishOnly'].filter((name) => pkg.scripts?.[name] !== undefined)
+  assert(hooks.length === 0, `存在安装/发布钩子：${hooks.join(',')}`)
+  return 'no install hooks'
+})
+
+check('runtime-network', () => {
+  const hits = []
+  for (const file of runtimeFiles) {
+    const body = text(file)
+    if (/\bfetch\s*\(/.test(body) || /node:(http|https|net|tls)/.test(body) || /\.listen\s*\(/.test(body) || /new\s+WebSocket/.test(body)) hits.push(relative(ROOT, file))
+  }
+  assert(hits.length === 0, `运行时出现网络/监听面：${hits.join(',')}`)
+  return `${runtimeFiles.length} 个运行时文件无网络调用`
+})
+
+check('runtime-exec', () => {
+  const allowed = new Set(['restore.mjs'])
+  const hits = []
+  for (const file of runtimeFiles) {
+    if (!/child_process|\bexecSync\b|\bspawnSync\b/.test(text(file))) continue
+    if (!allowed.has(relative(ROOT, file))) hits.push(relative(ROOT, file))
+  }
+  assert(hits.length === 0, `未登记的运行时子进程：${hits.join(',')}`)
+  const restore = text(join(ROOT, 'restore.mjs'))
+  assert(/spawnSync\('tar',\s*\[/.test(restore), 'restore.mjs 的子进程不是固定的 tar 参数调用')
+  assert(!/shell:\s*true/.test(restore), 'restore.mjs 启用了 shell')
+  return 'restore.mjs 仅以固定参数调用 tar（无 shell）'
+})
+
+check('secrets-shipped', () => {
+  const patterns = [/gho_[A-Za-z0-9]{20,}/, /npm_[A-Za-z0-9]{20,}/, /sk-[A-Za-z0-9]{20,}/, /-----BEGIN [A-Z ]*PRIVATE KEY-----/]
+  const hits = []
+  const shipped = shippedFiles().filter((file) => !fixtureAllowlist(file))
+  for (const file of [...shipped, join(ROOT, '.github', 'workflows', 'publish.yml')]) {
+    if (!existsSync(file) || !/\.(mjs|json|md|yml|yaml|js|txt)$/.test(file)) continue
+    const body = text(file)
+    for (const pattern of patterns) if (pattern.test(body)) hits.push(`${relative(ROOT, file)}:${pattern}`)
+  }
+  assert(hits.length === 0, `发行文件里发现密钥：${hits.slice(0, 5).join('；')}`)
+  return `${shipped.length} 个发行文件无密钥（测试语料已列允许项）`
+})
+
+check('absolute-paths-shipped', () => {
+  const pattern = /\/Users\/[a-z][^/\s"']+/
+  const hits = shippedFiles().filter((file) => /\.(mjs|json|md|yml|yaml|js|txt)$/.test(file) && pattern.test(text(file)))
+  assert(hits.length === 0, `发行文件含机器绝对路径：${hits.map((file) => relative(ROOT, file)).slice(0, 5).join(',')}`)
+  return `${shippedFiles().length} 个发行文件无 /Users 绝对路径`
+})
+
+check('workflow-pins', () => {
+  const file = join(ROOT, '.github', 'workflows', 'publish.yml')
+  if (!existsSync(file)) return '未包含发布工作流'
+  const body = text(file)
+  const uses = [...body.matchAll(/^\s*(?:-\s*)?uses:\s*(\S+)/gm)].map((match) => match[1])
+  const unpinned = uses.filter((value) => !value.startsWith('./.github/workflows/') && !/@[0-9a-f]{40}$/.test(value))
+  assert(unpinned.length === 0, `未按 commit pin 的 action：${unpinned.join(',')}`)
+  assert(/permissions:\s*\n\s*contents:\s*read/.test(body), '工作流权限不是 contents: read')
+  assert(!/secrets\.[A-Za-z0-9_]+/.test(body), '工作流引用了 secrets（优先 OIDC/可信发布）')
+  assert(!/pull_request_target/.test(body), '工作流使用了 pull_request_target')
+  return `${uses.length} 个 action 全部 pin 到 commit；contents: read；无 secrets`
+})
+
+check('package-contents', () => {
+  const bad = (pkg.files ?? []).filter((entry) => /research|last-run|\.tgz|node_modules|\.env/.test(entry))
+  assert(bad.length === 0, `发行包包含不该发布的条目：${bad.join(',')}`)
+  assert(pkg.files.includes('LICENSE') || pkg.license === 'MIT', '发行包未声明 LICENSE')
+  return `${pkg.files.length} 个发布条目，无研究目录/日志/tgz`
+})
+
+check('license', () => {
+  assert(pkg.license === 'MIT', `license=${pkg.license}`)
+  const body = text(join(ROOT, 'LICENSE'))
+  assert(/MIT License/.test(body), 'LICENSE 不是 MIT 正文')
+  return 'MIT'
+})
+
+check('engines', () => {
+  assert(pkg.engines?.node, '缺少 node engines 声明')
+  assert(pkg.engines?.dsh, '缺少 dsh engines 声明')
+  return `node ${pkg.engines.node}；dsh ${pkg.engines.dsh}`
+})
+
+check('gitignore', () => {
+  const body = existsSync(join(ROOT, '.gitignore')) ? text(join(ROOT, '.gitignore')) : ''
+  const need = ['node_modules/', '*.tgz']
+  const missing = need.filter((line) => !body.includes(line))
+  assert(missing.length === 0, `.gitignore 缺：${missing.join(',')}`)
+  return '.gitignore 覆盖 node_modules 与 tgz'
+})
+
+check('store-permissions-code', () => {
+  const security = text(join(ROOT, 'security.mjs'))
+  assert(/0o700/.test(security) && /0o600/.test(security), 'security.mjs 未显式设置 0700/0600')
+  return 'store 目录 0700、文件 0600（由 soak 实测再次验证）'
+})
+
+const passed = checks.every((row) => row.passed)
+const report = { passed, scope: 'mechanical pre-release checks; not an independent audit', version: pkg.version, checks }
+if (process.argv.includes('--json')) process.stdout.write(JSON.stringify(report, null, 2) + '\n')
+else {
+  for (const row of checks) console.log(`[${row.passed ? 'PASS' : 'FAIL'}] ${row.id}${row.passed ? ` · ${row.detail}` : ` · ${row.error}`}`)
+  console.log(passed ? `安全自查通过（${checks.length} 项；机械项，不是独立审计）` : '安全自查未通过')
+}
+if (!passed) process.exitCode = 1