Fix preset publication, volatile settings and client form binding

scripts/typecheck.mjs

@@ -0,0 +1,54 @@
+/** Check both plugin faces against the locally installed Harness declarations. */
+import { createRequire } from 'node:module'
+import { existsSync, mkdtempSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs'
+import { homedir, tmpdir } from 'node:os'
+import { dirname, isAbsolute, join, relative, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { spawnSync } from 'node:child_process'
+
+const root = dirname(dirname(fileURLToPath(import.meta.url)))
+const home = process.env.DSH_HOME?.trim() || join(homedir(), '.dsh')
+const anchors = [join(root, 'package.json'), ...['desktop', 'web', ''].map(profile =>
+  join(home, 'profiles', profile, 'node_modules', '@deepseek-ai', 'dsh-client-ui-renderer', 'package.json'))]
+const requires = anchors.filter(existsSync).flatMap(path => [createRequire(path), createRequire(realpathSync(path))])
+function findPackage(name) {
+  for (const req of requires) {
+    try { return req.resolve(`${name}/package.json`) } catch { /* Try another installed profile. */ }
+  }
+  throw new Error(`Missing typecheck peer ${name}; install the Harness and run link:peers.`)
+}
+const paths = {}
+for (const spec of [
+  '@deepseek-ai/dsh-client-ui-slots', '@deepseek-ai/dsh-client-locale/client',
+  '@deepseek-ai/dsh-client-ui-renderer/client', '@deepseek-ai/dsh-api-remotes/client',
+  '@deepseek-ai/dsh-client-ui-settings/client',
+  '@deepseek-ai/dsh-client-ui-settings-plugins/client',
+]) {
+  const parts = spec.split('/'), pkgName = parts.slice(0, 2).join('/'), subpath = parts.slice(2).join('/')
+  const pkgPath = findPackage(pkgName), pkg = JSON.parse(readFileSync(pkgPath, 'utf8'))
+  const entry = pkg.exports?.[subpath ? `./${subpath}` : '.']
+  const types = typeof entry === 'object' ? entry.types : pkg.types
+  if (!types) throw new Error(`No declarations for ${spec}`)
+  paths[spec] = [join(dirname(pkgPath), types)]
+}
+const nodeTypes = dirname(findPackage('@types/node'))
+const folder = mkdtempSync(join(tmpdir(), 'netxops-typecheck-'))
+try {
+  const configPath = join(folder, 'tsconfig.json')
+  writeFileSync(configPath, JSON.stringify({ compilerOptions: {
+    target: 'ES2022', module: 'ESNext', moduleResolution: 'Bundler', jsx: 'react-jsx',
+    noEmit: true, strict: true, skipLibCheck: true, allowImportingTsExtensions: true,
+    types: ['node', 'react'], typeRoots: [dirname(nodeTypes), join(root, 'node_modules', '@types')], paths,
+  }, include: [join(root, 'src', '**', '*.ts'), join(root, 'src', '**', '*.tsx')].map(path => path.replaceAll('\\', '/')) }))
+  const result = spawnSync(process.execPath, [join(root, 'node_modules', 'typescript', 'bin', 'tsc'), '-p', configPath],
+    { cwd: root, stdio: 'inherit' })
+  process.exitCode = result.status ?? 1
+} finally {
+  // The only cleanup target is the exact unique temporary directory returned above.
+  const target = realpathSync(folder)
+  const within = relative(realpathSync(tmpdir()), target)
+  if (!within || within.startsWith('..') || isAbsolute(within) || !target.startsWith(resolve(folder))) {
+    throw new Error(`Refusing cleanup outside the temporary workspace: ${target}`)
+  }
+  rmSync(target, { recursive: true, force: true })
+}