v0.8.3: TUI stabilization — box calls, package fixes, sandbox, configure

Bug fixes:
- Fix box() calls: set color-pair before box, pass ACS default chtype integers
- Fix markdown functions: move to passepartout.channel-tui package where
  Croatoan is imported; use add-attributes/remove-attributes instead of
  :bold/:underline kwargs to add-string; call theme-color in gate-trace-lines
  to convert theme keys to Croatoan colors
- Fix sandbox: remove dex:get/dex:post from restricted symbols
  (blocked neuro-provider from loading)
- Export *log-lock* from passepartout (was unbound in jailed skill packages)
- Fix configure: always deploy to XDG, skip cp when source==dest
- Fix bash crash handler format string (~~ escaping)
- Revert test reorder in 28 files (caused package leakage in skill loader)

Design cleanup:
- Extract tui-run-screen from tui-main for clean separation
- Remove inject-stimulus alias
- Merge *backend-registry* into *probabilistic-backends*
- Fix read-framed-message whitespace DoS (4096-iteration max)
- Add *read-eval* nil to dispatcher-approvals-process read-from-string

lisp/cost-tracker.lisp

@@ -1,76 +1,3 @@
-(eval-when (:compile-toplevel :load-toplevel :execute)
-  (ql:quickload :fiveam :silent t))
-
-(defpackage :passepartout-cost-tests
-  (:use :cl :fiveam :passepartout)
-  (:export #:cost-suite))
-
-(in-package :passepartout-cost-tests)
-
-(def-suite cost-suite :description "Cost tracking and budget management")
-(in-suite cost-suite)
-
-(test test-cost-track-call
-  "Contract 1: cost-track-call returns a positive number."
-  (cost-session-reset)
-  (let ((cost (cost-track-call :deepseek "hello world")))
-    (is (numberp cost))
-    (is (> cost 0.0))))
-
-(test test-cost-session-total-accumulates
-  "Contract 2: session total grows with multiple calls."
-  (cost-session-reset)
-  (cost-track-call :deepseek "hello")
-  (cost-track-call :deepseek "world")
-  (let ((total (cost-session-total)))
-    (is (> total 0.0))
-    (is (= 2 (cost-session-calls)))))
-
-(test test-cost-session-reset
-  "Contract 3: cost-session-reset zeroes the accumulator."
-  (cost-session-reset)
-  (cost-track-call :deepseek "hello")
-  (is (> (cost-session-total) 0.0))
-  (cost-session-reset)
-  (is (= 0.0 (cost-session-total)))
-  (is (= 0 (cost-session-calls))))
-
-(test test-cost-format-budget-status
-  "Contract 4: format-budget-status returns a string."
-  (cost-session-reset)
-  (cost-track-call :deepseek "hello world")
-  (let ((status (cost-format-budget-status 100)))
-    (is (stringp status))
-    (is (search "$" status))))
-
-(test test-cost-by-provider
-  "Contract: cost-by-provider returns per-provider breakdown."
-  (cost-session-reset)
-  (cost-track-call :deepseek "a")
-  (cost-track-call :groq "b")
-  (let ((by (cost-by-provider)))
-    (is (listp by))
-    (is (assoc :deepseek by))
-    (is (assoc :groq by))))
-
-(test test-cost-track-no-response
-  "Contract 1: cost-track-call works without response-text."
-  (cost-session-reset)
-  (let ((cost (cost-track-call :deepseek "test")))
-    (is (> cost 0.0))))
-
-(test test-cost-session-summary
-  "Contract 5: cost-session-summary returns plist with total, calls, by-provider."
-  (cost-session-reset)
-  (cost-track-call :deepseek "hello")
-  (cost-track-call :groq "world")
-  (let ((s (cost-session-summary)))
-    (is (> (getf s :total) 0.0))
-    (is (= 2 (getf s :calls)))
-    (let ((by (getf s :by-provider)))
-      (is (assoc :deepseek by))
-      (is (assoc :groq by)))))
-
 (in-package :passepartout)
 
 (defvar *session-cost* (list :total 0.0 :calls 0 :by-provider nil)
@@ -188,3 +115,76 @@ Returns 0.0 if the tokenizer is not loaded (allows call through)."
                          :TEXT (format nil "Session budget exhausted: $~,4f of $~,2f spent. Raise SESSION_BUDGET_USD or reset with /cost-reset to continue."
                                        total cap)
                          :EXPLANATION "Budget cap reached. No LLM calls will be made until the limit is raised."))))
+
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-cost-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:cost-suite))
+
+(in-package :passepartout-cost-tests)
+
+(def-suite cost-suite :description "Cost tracking and budget management")
+(in-suite cost-suite)
+
+(test test-cost-track-call
+  "Contract 1: cost-track-call returns a positive number."
+  (cost-session-reset)
+  (let ((cost (cost-track-call :deepseek "hello world")))
+    (is (numberp cost))
+    (is (> cost 0.0))))
+
+(test test-cost-session-total-accumulates
+  "Contract 2: session total grows with multiple calls."
+  (cost-session-reset)
+  (cost-track-call :deepseek "hello")
+  (cost-track-call :deepseek "world")
+  (let ((total (cost-session-total)))
+    (is (> total 0.0))
+    (is (= 2 (cost-session-calls)))))
+
+(test test-cost-session-reset
+  "Contract 3: cost-session-reset zeroes the accumulator."
+  (cost-session-reset)
+  (cost-track-call :deepseek "hello")
+  (is (> (cost-session-total) 0.0))
+  (cost-session-reset)
+  (is (= 0.0 (cost-session-total)))
+  (is (= 0 (cost-session-calls))))
+
+(test test-cost-format-budget-status
+  "Contract 4: format-budget-status returns a string."
+  (cost-session-reset)
+  (cost-track-call :deepseek "hello world")
+  (let ((status (cost-format-budget-status 100)))
+    (is (stringp status))
+    (is (search "$" status))))
+
+(test test-cost-by-provider
+  "Contract: cost-by-provider returns per-provider breakdown."
+  (cost-session-reset)
+  (cost-track-call :deepseek "a")
+  (cost-track-call :groq "b")
+  (let ((by (cost-by-provider)))
+    (is (listp by))
+    (is (assoc :deepseek by))
+    (is (assoc :groq by))))
+
+(test test-cost-track-no-response
+  "Contract 1: cost-track-call works without response-text."
+  (cost-session-reset)
+  (let ((cost (cost-track-call :deepseek "test")))
+    (is (> cost 0.0))))
+
+(test test-cost-session-summary
+  "Contract 5: cost-session-summary returns plist with total, calls, by-provider."
+  (cost-session-reset)
+  (cost-track-call :deepseek "hello")
+  (cost-track-call :groq "world")
+  (let ((s (cost-session-summary)))
+    (is (> (getf s :total) 0.0))
+    (is (= 2 (getf s :calls)))
+    (let ((by (getf s :by-provider)))
+      (is (assoc :deepseek by))
+      (is (assoc :groq by)))))