v0.8.3: TUI stabilization — box calls, package fixes, sandbox, configure

Bug fixes:
- Fix box() calls: set color-pair before box, pass ACS default chtype integers
- Fix markdown functions: move to passepartout.channel-tui package where
  Croatoan is imported; use add-attributes/remove-attributes instead of
  :bold/:underline kwargs to add-string; call theme-color in gate-trace-lines
  to convert theme keys to Croatoan colors
- Fix sandbox: remove dex:get/dex:post from restricted symbols
  (blocked neuro-provider from loading)
- Export *log-lock* from passepartout (was unbound in jailed skill packages)
- Fix configure: always deploy to XDG, skip cp when source==dest
- Fix bash crash handler format string (~~ escaping)
- Revert test reorder in 28 files (caused package leakage in skill loader)

Design cleanup:
- Extract tui-run-screen from tui-main for clean separation
- Remove inject-stimulus alias
- Merge *backend-registry* into *probabilistic-backends*
- Fix read-framed-message whitespace DoS (4096-iteration max)
- Add *read-eval* nil to dispatcher-approvals-process read-from-string

org/neuro-provider.org

@@ -44,65 +44,6 @@ Providers register themselves at boot. No API key? That provider doesn't registe
    for ~data: <content>~ lines, ~:done~ for ~data: [DONE]~, and ~nil~
    for comment lines (starting with ~:~), empty lines, or non-data lines.
 
-* Test Suite
-#+begin_src lisp
-(eval-when (:compile-toplevel :load-toplevel :execute)
-  (ql:quickload :fiveam :silent t))
-
-(defpackage :passepartout-llm-gateway-tests
-  (:use :cl :passepartout)
-  (:export #:llm-gateway-suite))
-
-(in-package :passepartout-llm-gateway-tests)
-
-(fiveam:def-suite llm-gateway-suite :description "Tests for the LLM provider backend")
-(fiveam:in-suite llm-gateway-suite)
-
-(fiveam:test test-provider-rejects-bad-keyword
-  "Contract 3: provider-config returns nil for unregistered provider."
-  (let ((config (provider-config :not-a-real-provider)))
-    (fiveam:is (null config))))
-
-(fiveam:test test-provider-config-registered
-  "Contract 1: provider-config returns configuration plist for registered provider."
-  (let ((config (provider-config :openrouter)))
-    (fiveam:is (listp config))
-    (fiveam:is (getf config :base-url))))
-
-(fiveam:test test-provider-accepts-tools-parameter
-  "Contract 4: provider-openai-request accepts :tools parameter without error."
-  (let ((result (provider-openai-request "test" "system" :tools (list))))
-    (fiveam:is (member (getf result :status) '(:success :error)))))
-
-;; ── v0.7.1 Streaming ──
-
-(fiveam:test test-parse-sse-line-data
-  "Contract 6: parse-sse-line extracts content from data: lines."
-  (fiveam:is (string= "hello world" (passepartout::parse-sse-line "data: hello world")))
-  (fiveam:is (string= "{\"a\":1}" (passepartout::parse-sse-line "data: {\"a\":1}"))))
-
-(fiveam:test test-parse-sse-line-done
-  "Contract 6: parse-sse-line returns :done for [DONE]."
-  (fiveam:is (eq :done (passepartout::parse-sse-line "data: [DONE]"))))
-
-(fiveam:test test-parse-sse-line-nil
-  "Contract 6: parse-sse-line returns nil for comment, empty, non-data lines."
-  (fiveam:is (null (passepartout::parse-sse-line "")))
-  (fiveam:is (null (passepartout::parse-sse-line ":ok")))
-  (fiveam:is (null (passepartout::parse-sse-line "event: ping"))))
-
-(fiveam:test test-provider-openai-stream-calls-callback
-  "Contract 5: provider-openai-stream calls callback with deltas and final empty string."
-  (let ((collected '()))
-    (flet ((collector (text) (push text collected)))
-      (passepartout::provider-openai-stream "hi" "sys" #'collector :provider :openrouter))
-    (let* ((reversed (nreverse collected))
-           (last (car (last reversed))))
-      (fiveam:is (stringp last))
-      (fiveam:is (string= "" last))
-      (fiveam:is (>= (length reversed) 2)))))
-#+end_src
-
 * Implementation
 
 ** Provider registry
@@ -273,7 +214,64 @@ If API-KEY is nil, reads from environment."
   :trigger (lambda (ctx) (declare (ignore ctx)) nil))
 #+end_src
 
-* v0.7.1 — Streaming Backend
+* Test Suite
+#+begin_src lisp
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-llm-gateway-tests
+  (:use :cl :passepartout)
+  (:export #:llm-gateway-suite))
+
+(in-package :passepartout-llm-gateway-tests)
+
+(fiveam:def-suite llm-gateway-suite :description "Tests for the LLM provider backend")
+(fiveam:in-suite llm-gateway-suite)
+
+(fiveam:test test-provider-rejects-bad-keyword
+  "Contract 3: provider-config returns nil for unregistered provider."
+  (let ((config (provider-config :not-a-real-provider)))
+    (fiveam:is (null config))))
+
+(fiveam:test test-provider-config-registered
+  "Contract 1: provider-config returns configuration plist for registered provider."
+  (let ((config (provider-config :openrouter)))
+    (fiveam:is (listp config))
+    (fiveam:is (getf config :base-url))))
+
+(fiveam:test test-provider-accepts-tools-parameter
+  "Contract 4: provider-openai-request accepts :tools parameter without error."
+  (let ((result (provider-openai-request "test" "system" :tools (list))))
+    (fiveam:is (member (getf result :status) '(:success :error)))))
+
+;; ── v0.7.1 Streaming ──
+
+(fiveam:test test-parse-sse-line-data
+  "Contract 6: parse-sse-line extracts content from data: lines."
+  (fiveam:is (string= "hello world" (passepartout::parse-sse-line "data: hello world")))
+  (fiveam:is (string= "{\"a\":1}" (passepartout::parse-sse-line "data: {\"a\":1}"))))
+
+(fiveam:test test-parse-sse-line-done
+  "Contract 6: parse-sse-line returns :done for [DONE]."
+  (fiveam:is (eq :done (passepartout::parse-sse-line "data: [DONE]"))))
+
+(fiveam:test test-parse-sse-line-nil
+  "Contract 6: parse-sse-line returns nil for comment, empty, non-data lines."
+  (fiveam:is (null (passepartout::parse-sse-line "")))
+  (fiveam:is (null (passepartout::parse-sse-line ":ok")))
+  (fiveam:is (null (passepartout::parse-sse-line "event: ping"))))
+
+(fiveam:test test-provider-openai-stream-calls-callback
+  "Contract 5: provider-openai-stream calls callback with deltas and final empty string."
+  (let ((collected '()))
+    (flet ((collector (text) (push text collected)))
+      (passepartout::provider-openai-stream "hi" "sys" #'collector :provider :openrouter))
+    (let* ((reversed (nreverse collected))
+           (last (car (last reversed))))
+      (fiveam:is (stringp last))
+      (fiveam:is (string= "" last))
+      (fiveam:is (>= (length reversed) 2)))))
+#+end_src* v0.7.1 — Streaming Backend
 :PROPERTIES:
 :ID:       id-v071-streaming
 :CREATED:  [2026-05-08 Fri]
@@ -407,5 +405,4 @@ Calls CALLBACK with each delta string, then with '' to signal end-of-stream."
             (list :status :success))
         (error (c)
           (list :status :error :message (format nil "~a Stream Failure: ~a" provider c)))))))
-#+end_src
-
+#+end_src