v0.8.3: TUI stabilization — box calls, package fixes, sandbox, configure

Bug fixes:
- Fix box() calls: set color-pair before box, pass ACS default chtype integers
- Fix markdown functions: move to passepartout.channel-tui package where
  Croatoan is imported; use add-attributes/remove-attributes instead of
  :bold/:underline kwargs to add-string; call theme-color in gate-trace-lines
  to convert theme keys to Croatoan colors
- Fix sandbox: remove dex:get/dex:post from restricted symbols
  (blocked neuro-provider from loading)
- Export *log-lock* from passepartout (was unbound in jailed skill packages)
- Fix configure: always deploy to XDG, skip cp when source==dest
- Fix bash crash handler format string (~~ escaping)
- Revert test reorder in 28 files (caused package leakage in skill loader)

Design cleanup:
- Extract tui-run-screen from tui-main for clean separation
- Remove inject-stimulus alias
- Merge *backend-registry* into *probabilistic-backends*
- Fix read-framed-message whitespace DoS (4096-iteration max)
- Add *read-eval* nil to dispatcher-approvals-process read-from-string

org/core-skills.org

@@ -33,45 +33,6 @@ This is how the "thin org, fat skills" principle works in practice: the org prov
    ~#+DEPENDS_ON:~ declarations, returns files sorted such that
    dependencies come before dependents.
 
-* Test Suite
-Verifies that the topological sorter correctly orders skills by their ~#+DEPENDS_ON:~ declarations.
-#+begin_src lisp
-(eval-when (:compile-toplevel :load-toplevel :execute)
-  (ql:quickload :fiveam :silent t))
-
-(defpackage :passepartout-boot-tests
-  (:use :cl :fiveam :passepartout)
-  (:export #:boot-suite))
-
-(in-package :passepartout-boot-tests)
-
-(def-suite boot-suite :description "Verification of the Skill Engine loader")
-(in-suite boot-suite)
-
-(test test-topological-sort-basic
-  "Contract 2: dependency ordering puts dependencies before dependents."
-  (let ((tmp-dir "/tmp/passepartout-boot-test/"))
-    (uiop:ensure-all-directories-exist (list tmp-dir))
-    (with-open-file (out (merge-pathnames "org-skill-a.org" tmp-dir) :direction :output :if-exists :supersede)
-      (format out "#+DEPENDS_ON: skill-b-id~%"))
-    (with-open-file (out (merge-pathnames "org-skill-b.org" tmp-dir) :direction :output :if-exists :supersede)
-      (format out ":PROPERTIES:~%:ID: skill-b-id~%:END:~%"))
-    (unwind-protect
-         (let ((sorted (passepartout::skill-topological-sort tmp-dir)))
-           (let ((pos-a (position "org-skill-a" sorted :key #'pathname-name :test #'string-equal))
-                 (pos-b (position "org-skill-b" sorted :key #'pathname-name :test #'string-equal)))
-             (is (< pos-b pos-a))))
-       (uiop:delete-directory-tree (uiop:ensure-directory-pathname tmp-dir) :validate t))))
-
-(test test-lisp-syntax-validate-valid
-  "Contract 1: valid Lisp code passes syntax validation."
-  (is (eq t (lisp-syntax-validate "(+ 1 2)"))))
-
-(test test-lisp-syntax-validate-invalid
-  "Contract 1: unbalanced Lisp code fails syntax validation."
-  (is (null (lisp-syntax-validate "(+ 1 2"))))
-#+end_src
-
 * Implementation
 
 ** Package Context
@@ -404,7 +365,7 @@ Scans Lisp source text for references to restricted symbols before any
 code is evaluated. This prevents malicious skills from executing even a
 single form. The restricted symbols cover process spawning
 (~uiop:run-program~, ~uiop:shell~, ~uiop:run-shell-command~), thread
-creation (~bt:make-thread~), HTTP calls (~dex:get~, ~dex:post~), and
+creation (~bt:make-thread~), and
 socket operations (~usocket:socket-connect~, ~hunchentoot:start~).
 
 Returns two values: T/NIL (blocked-p) and a list of matched symbol names.
@@ -416,7 +377,6 @@ not obfuscated ones. The post-eval ~symbol-function~ comparison in
 (defvar *skill-restricted-symbols*
   '("uiop:run-program" "uiop:shell" "uiop:run-shell-command"
     "bt:make-thread" "bordeaux-threads:make-thread"
-    "dex:get" "dex:post" "dexador:get" "dexador:post"
     "usocket:socket-connect" "usocket:socket-listen"
     "hunchentoot:start" "hunchentoot:accept-connections")
   "Symbol patterns blocked from skill source code at load time.")
@@ -438,7 +398,7 @@ Loads a pre-tangled ~.lisp~ file directly, without parsing the Org source. This
 
 The same jailed package and symbol export process applies.
 
-The sandbox check runs *before* evaluation: the source text is scanned for references to restricted symbols (~uiop:run-program~, ~uiop:shell~, ~uiop:run-shell-command~, ~bt:make-thread~, ~dex:get~, ~dex:post~, ~usocket:socket-connect~, ~hunchentoot:start~). If the source references any restricted symbol, the skill is blocked immediately without executing any code. A post-eval secondary check catches indirect references (via ~symbol-function~ comparison).
+The sandbox check runs *before* evaluation: the source text is scanned for references to restricted symbols (~uiop:run-program~, ~uiop:shell~, ~uiop:run-shell-command~, ~bt:make-thread~, ~usocket:socket-connect~, ~hunchentoot:start~). If the source references any restricted symbol, the skill is blocked immediately without executing any code. A post-eval secondary check catches indirect references (via ~symbol-function~ comparison).
 
 #+begin_src lisp
 (defun load-skill-from-lisp (filepath)
@@ -527,3 +487,41 @@ files live after tangling. The org source files live in ~org/~.
       (log-message "LOADER: Boot Complete."))))
 #+end_src
 
+* Test Suite
+Verifies that the topological sorter correctly orders skills by their ~#+DEPENDS_ON:~ declarations.
+#+begin_src lisp
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-boot-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:boot-suite))
+
+(in-package :passepartout-boot-tests)
+
+(def-suite boot-suite :description "Verification of the Skill Engine loader")
+(in-suite boot-suite)
+
+(test test-topological-sort-basic
+  "Contract 2: dependency ordering puts dependencies before dependents."
+  (let ((tmp-dir "/tmp/passepartout-boot-test/"))
+    (uiop:ensure-all-directories-exist (list tmp-dir))
+    (with-open-file (out (merge-pathnames "org-skill-a.org" tmp-dir) :direction :output :if-exists :supersede)
+      (format out "#+DEPENDS_ON: skill-b-id~%"))
+    (with-open-file (out (merge-pathnames "org-skill-b.org" tmp-dir) :direction :output :if-exists :supersede)
+      (format out ":PROPERTIES:~%:ID: skill-b-id~%:END:~%"))
+    (unwind-protect
+         (let ((sorted (passepartout::skill-topological-sort tmp-dir)))
+           (let ((pos-a (position "org-skill-a" sorted :key #'pathname-name :test #'string-equal))
+                 (pos-b (position "org-skill-b" sorted :key #'pathname-name :test #'string-equal)))
+             (is (< pos-b pos-a))))
+       (uiop:delete-directory-tree (uiop:ensure-directory-pathname tmp-dir) :validate t))))
+
+(test test-lisp-syntax-validate-valid
+  "Contract 1: valid Lisp code passes syntax validation."
+  (is (eq t (lisp-syntax-validate "(+ 1 2)"))))
+
+(test test-lisp-syntax-validate-invalid
+  "Contract 1: unbalanced Lisp code fails syntax validation."
+  (is (null (lisp-syntax-validate "(+ 1 2"))))
+#+end_src