fix(ci): 修好两处只在 CI 才会红的门禁（都不是功能 bug，但都该本地可复现）

generated-drift：两个生成器用 `git rev-parse --short HEAD` 写 sourceCommit，
而短哈希长度取决于**该 clone 的对象数量**——CI 的全新检出给 7 位、开发者的 clone 给 8 位，
于是同一份 mcpp 生成出两个不同文件，门禁在 API 毫无变化时变红（本次就是如此，内容完全一致）。
改成写完整 40 位哈希，并让 check-generators 只比较**数据**：sourceVersion/sourceCommit
以及由 commit 拼出的文档链接属于"出处"，每次上游提交都会动，把它们当漂移等于门禁永远红。

package：`! grep -rqs "vscode-languageclient" dist/src` 会被"解释为什么不用语言客户端"的
**编译后注释**命中。改成匹配真正的模块说明符（require/from）。

两处都补了本地门禁，免得下次只能等 CI：
- 快照的 sourceCommit 必须是 40 位十六进制（正是今天这个 bug 的类别）；
- src 里不得 import/require vscode-languageclient（CI 那条 grep 的本意）。

662 测试通过；四道门禁全过。

Author: Sunrisepeak

.github/workflows/ci.yml

@@ -117,7 +117,10 @@ jobs:
       - name: No second language client in the build output
         run: |
           test ! -e dist/src/languageClient.js
-          ! grep -rqs "vscode-languageclient" dist/src package.json
+          # A *dependency*, not a mention. `dist` carries the compiled comments
+          # that explain why this extension does not drive a language client, and
+          # grepping for the bare name failed the build on those comments alone.
+          ! grep -rqsE "require\(['\"]vscode-languageclient['\"]\)|from ['\"]vscode-languageclient['\"]" dist/src package.json
       - uses: actions/upload-artifact@v4
         with:
           name: vsix

data/buildscript-api.json

@@ -1,6 +1,6 @@
 {
   "sourceVersion": "2026.10.3.1",
-  "sourceCommit": "74bcb859",
+  "sourceCommit": "74bcb859e60afc71ad759540d2de5344dda400e9",
   "protocolVersion": 15,
   "cacheEpoch": 3,
   "roles": [
@@ -131,7 +131,7 @@
       "mustExist": false,
       "since": 4,
       "rules": [],
-      "docsUrl": "https://github.com/mcpp-community/mcpp/blob/74bcb859/docs/30-build-mcpp.md#runner-how-the-artifact-is-executed-20268192"
+      "docsUrl": "https://github.com/mcpp-community/mcpp/blob/74bcb859e60afc71ad759540d2de5344dda400e9/docs/30-build-mcpp.md#runner-how-the-artifact-is-executed-20268192"
     },
     {
       "wire": "runner-named",
@@ -262,7 +262,7 @@
         "R2.1",
         "R9.4"
       ],
-      "docsUrl": "https://github.com/mcpp-community/mcpp/blob/74bcb859/docs/30-build-mcpp.md#warning-succeeding-and-still-being-heard-20268212"
+      "docsUrl": "https://github.com/mcpp-community/mcpp/blob/74bcb859e60afc71ad759540d2de5344dda400e9/docs/30-build-mcpp.md#warning-succeeding-and-still-being-heard-20268212"
     },
     {
       "wire": "diagnostic",
@@ -312,7 +312,7 @@
       "rules": [
         "R2.1"
       ],
-      "docsUrl": "https://github.com/mcpp-community/mcpp/blob/74bcb859/docs/30-build-mcpp.md#the-probe-channel-fact-floor-2026952"
+      "docsUrl": "https://github.com/mcpp-community/mcpp/blob/74bcb859e60afc71ad759540d2de5344dda400e9/docs/30-build-mcpp.md#the-probe-channel-fact-floor-2026952"
     },
     {
       "wire": "floor",
@@ -325,7 +325,7 @@
       "rules": [
         "R2.1"
       ],
-      "docsUrl": "https://github.com/mcpp-community/mcpp/blob/74bcb859/docs/30-build-mcpp.md#the-probe-channel-fact-floor-2026952"
+      "docsUrl": "https://github.com/mcpp-community/mcpp/blob/74bcb859e60afc71ad759540d2de5344dda400e9/docs/30-build-mcpp.md#the-probe-channel-fact-floor-2026952"
     },
     {
       "wire": "pack-format",
@@ -374,7 +374,7 @@
         "R9.2",
         "R9.5"
       ],
-      "docsUrl": "https://github.com/mcpp-community/mcpp/blob/74bcb859/docs/30-build-mcpp.md#deploying-what-the-program-generated-deploy-20269123-protocol-11"
+      "docsUrl": "https://github.com/mcpp-community/mcpp/blob/74bcb859e60afc71ad759540d2de5344dda400e9/docs/30-build-mcpp.md#deploying-what-the-program-generated-deploy-20269123-protocol-11"
     },
     {
       "wire": "runtime-search-dir",

data/toml-schema.json

@@ -1,6 +1,6 @@
 {
   "sourceVersion": "2026.10.3.1",
-  "sourceCommit": "74bcb859",
+  "sourceCommit": "74bcb859e60afc71ad759540d2de5344dda400e9",
   "sections": [
     {
       "header": "[build]",

test/artifacts.test.ts

@@ -222,6 +222,38 @@ test("the library view cannot reload itself in a loop", () => {
   assert.match(view, /this\.document = undefined;/);
 });
 
+test("no module drives a second language client", () => {
+  // The same rule the `package` job enforces, but runnable here: the CI grep used
+  // to match the bare name, and the compiled comments that explain why this
+  // extension does *not* use a language client made it fail on a clean build.
+  const offenders: string[] = [];
+  for (const [file, text] of sourceFiles()) {
+    const code = text.replace(/\/\*[\s\S]*?\*\//g, "").replace(/^\s*\/\/.*$/gm, "");
+    if (/from\s+["']vscode-languageclient["']|require\(["']vscode-languageclient["']\)/.test(code)) {
+      offenders.push(file);
+    }
+  }
+  assert.deepEqual(offenders, [], "a language client is imported again");
+});
+
+test("the committed snapshots record a clone-independent commit", () => {
+  // `git rev-parse --short` shortens to the shortest unique prefix *for that
+  // clone*, so the same mcpp produced a 7-character hash in a fresh CI checkout
+  // and 8 in a developer's — and the drift gate went red on an unchanged API.
+  for (const file of ["data/buildscript-api.json", "data/toml-schema.json"]) {
+    const snapshot = JSON.parse(readFileSync(path.join(root, file), "utf8")) as {
+      sourceVersion?: string;
+      sourceCommit?: string;
+    };
+    assert.match(snapshot.sourceVersion ?? "", /^\d{4}\.\d+\.\d+/, `${file}: no mcpp version`);
+    assert.match(
+      snapshot.sourceCommit ?? "",
+      /^[0-9a-f]{40}$/,
+      `${file}: the provenance hash must be full length, not an abbreviation`,
+    );
+  }
+});
+
 test("opening a link always produces an answer", () => {
   // The comment above `openExternal` quotes the old call, so comments are
   // stripped before the check — the point is the code, not the prose.

tools/check-generators.mjs

@@ -7,6 +7,13 @@
  * checkout present. That only stays honest if something notices when the source
  * moves, so CI regenerates them here and fails on any difference.
  *
+ * **What "difference" means: the data, not the provenance.** The two files record
+ * which mcpp they came from (`sourceVersion`, `sourceCommit`, and doc links built
+ * from the commit). Every mcpp commit moves those, so comparing them literally
+ * made this gate red for reasons no one in this repository caused — and a gate
+ * that is always red is not a gate. `canonical()` below blanks that provenance and
+ * compares the rest, so a red run means the API or the schema really moved.
+ *
  * Without a checkout (`MCPP_REPO`, else `../mcpp`) this **skips with a notice**
  * rather than passing silently: a green run that checked nothing is worse than a
  * yellow one.
@@ -29,6 +36,35 @@ const targets = [
   { name: "mcpp.toml schema", script: "tools/generate-toml-schema.mjs", file: "data/toml-schema.json" },
 ];
 
+/**
+ * One JSON document with its **provenance** replaced by placeholders.
+ *
+ * `sourceVersion` and `sourceCommit` are facts about the checkout the snapshot was
+ * generated from, and any string containing the commit (the documentation links)
+ * is derived from it. Two clones of the same mcpp agree on everything else.
+ */
+function canonical(text) {
+  const value = JSON.parse(text);
+  const commit = typeof value.sourceCommit === "string" ? value.sourceCommit : "";
+  const scrub = (node) => {
+    if (typeof node === "string") {
+      return commit.length === 0 ? node : node.split(commit).join("<commit>");
+    }
+    if (Array.isArray(node)) {
+      return node.map(scrub);
+    }
+    if (node !== null && typeof node === "object") {
+      const out = {};
+      for (const [key, child] of Object.entries(node)) {
+        out[key] = key === "sourceVersion" || key === "sourceCommit" ? "<provenance>" : scrub(child);
+      }
+      return out;
+    }
+    return node;
+  };
+  return JSON.stringify(scrub(value));
+}
+
 let drifted = 0;
 for (const target of targets) {
   const before = fs.readFileSync(path.join(root, target.file), "utf8");
@@ -41,8 +77,11 @@ for (const target of targets) {
     continue;
   }
   const after = fs.readFileSync(path.join(root, target.file), "utf8");
-  if (before !== after) {
-    console.error(`error: ${target.file} is out of date — run \`npm run gen:…\` and commit the result`);
+  if (canonical(before) !== canonical(after)) {
+    console.error(
+      `error: ${target.file} is out of date — the mcpp it was generated from now answers differently; ` +
+        `run \`npm run gen:…\` and commit the result`,
+    );
     drifted += 1;
   } else {
     console.log(`check-generators: ${target.name} is current`);

tools/generate-buildscript-api.mjs

@@ -107,7 +107,11 @@ function parseSourceVersion(text) {
 
 function sourceCommit() {
   try {
-    return execFileSync("git", ["rev-parse", "--short", "HEAD"], {
+    // The **full** hash, never `--short`: git shortens to the shortest unique
+    // prefix *for this clone*, so a fresh CI checkout (7 characters) and a
+    // developer's clone with more objects (8) produced two different files for
+    // the same mcpp — the drift gate went red on an unchanged API.
+    return execFileSync("git", ["rev-parse", "HEAD"], {
       cwd: mcppRepo,
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],

tools/generate-toml-schema.mjs

@@ -96,7 +96,11 @@ function readPackageVersion(tomlText) {
 
 function readSourceCommit() {
   try {
-    return execFileSync("git", ["rev-parse", "--short", "HEAD"], {
+    // The **full** hash, never `--short`: git shortens to the shortest unique
+    // prefix *for this clone*, so a fresh CI checkout (7 characters) and a
+    // developer's clone with more objects (8) produced two different files for
+    // the same mcpp — the drift gate went red on an unchanged API.
+    return execFileSync("git", ["rev-parse", "HEAD"], {
       cwd: MCPP_REPO,
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
@@ -541,7 +545,7 @@ function main() {
   const keys = sections.reduce((total, section) => total + (section.keys?.length ?? 0), 0);
   process.stdout.write(
     `generate-toml-schema: wrote ${OUT_FILE}\n` +
-      `  mcpp ${version} (${schema.sourceCommit}), ${sections.length} sections, ${keys} keys, ` +
+      `  mcpp ${version} (${schema.sourceCommit.slice(0, 8)}), ${sections.length} sections, ${keys} keys, ` +
       `${sections.filter((section) => section.plane === UNCLASSIFIED_PLANE).length} unclassified\n`,
   );
 }