@jayyuen66/dsh-quality-gate 0.1.0

package/client.js

@@ -0,0 +1,479 @@
+// GENERATED by buildClient() in build-client.mjs — edit src/client-entry.ts, then run `node build-client.mjs`.
+window.__ModuleLoader__.load({
+  id: '@jayyuen66/dsh-quality-gate',
+  factory: (require) => {
+    var module = { exports: {} };
+    var exports = module.exports;
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let react = require("react");
+//#region src/ui-messages.ts
+const UI_MESSAGES = {
+	zh: {
+		cardTitle: "quality-gate 回合收口质量门禁",
+		cardDescription: "回合收口质量门禁（ECC stop-format-typecheck 移植）：本回合编辑过代码文件时，收口前自动跑项目门禁（根 package.json 声明了 check 才用 pnpm check，否则 cargo check / ruff / tsc），失败自动开新回合注入修复指令；失败事实同步 lesson-loop 总线，记忆网关沉淀默认关闭",
+		statusReadOnly: "当前作用域只读",
+		statusDirty: "有未保存的修改，点「保存」生效",
+		statusClean: "无未保存的修改",
+		save: "保存",
+		saving: "保存中…",
+		revert: "撤销",
+		saveFailed: "保存失败：{message}",
+		saveRejected: "保存被宿主拒绝（配置校验未通过或写入被跳过），修改未生效",
+		outOfRange: "超出允许范围，未保存",
+		enabledLabel: "启用质量门禁",
+		enabledHint: "关闭后回合收口不再跑门禁（模型可带病收口）",
+		injectsLabel: "每回合注入配额",
+		injectsHint: "门禁失败每回合最多注入几次修复指令（1-5，默认 2，防跑飞）",
+		budgetLabel: "门禁预算（毫秒）",
+		budgetHint: "单次门禁最大耗时（10s-600s，默认 300s；超时按失败注入不静默放行）",
+		memoryLabel: "门禁失败沉淀记忆",
+		memoryHint: "默认关闭。开启后：代码型门禁失败的证据（命令/根/全文报错，不截断）写入记忆网关的 L0 会话层供后续会话召回（需同时填下面两项，任一留空即不启用）；总线 lesson-loop 的同步上报不受此开关影响。关闭后只注入不沉淀",
+		gatewayUrlLabel: "记忆网关地址",
+		gatewayUrlHint: "留空 = 不启用记忆反馈。插件不带任何默认地址：本机用户请填自己的网关地址（例如 http://127.0.0.1:8420），没有网关就让它空着",
+		keyRefLabel: "网关密钥引用",
+		keyRefHint: "网关鉴权令牌的凭据引用名（环境变量名形态，默认 TDAI_GATEWAY_KEY）。这里存的只是引用名，密钥值由 dsh 凭据服务管理（Web 凭据页或 ~/.dsh/.credentials.yaml 的 refs），不会写进 settings.yaml；清空即恢复默认引用名"
+	},
+	en: {
+		cardTitle: "quality-gate turn-end quality gate",
+		cardDescription: "Turn-end quality gate (ported from ECC stop-format-typecheck): when this turn edited code files, the project gate runs automatically before the turn closes (pnpm check only if the root package.json declares a check script, otherwise cargo check / ruff / tsc); a failure opens a new turn with repair instructions. Failure facts are also reported to the lesson-loop bus; memory-gateway persistence is off by default",
+		statusReadOnly: "This scope is read-only",
+		statusDirty: "Unsaved changes — press Save to apply",
+		statusClean: "No unsaved changes",
+		save: "Save",
+		saving: "Saving…",
+		revert: "Revert",
+		saveFailed: "Save failed: {message}",
+		saveRejected: "Save rejected by the host (validation failed or write skipped) — changes not applied",
+		outOfRange: "Out of the allowed range — not saved",
+		enabledLabel: "Enable the quality gate",
+		enabledHint: "When off: no gate runs at turn end (the model may close a turn with broken code)",
+		injectsLabel: "Repair injections per turn",
+		injectsHint: "How many repair instructions a failing gate may inject per turn (1-5, default 2 — runaway protection)",
+		budgetLabel: "Gate budget (milliseconds)",
+		budgetHint: "Max duration of one gate run (10s-600s, default 300s; a timeout injects a failure instead of passing silently)",
+		memoryLabel: "Persist gate failures to memory",
+		memoryHint: "Off by default. When on: the evidence of code-level gate failures (command, root, full error text, untruncated) is written into the memory gateway's L0 session layer so later sessions can recall it (both fields below must be filled — leaving either empty disables it); synchronous reporting to the lesson-loop bus is unaffected by this switch. When off, repairs are injected but nothing is persisted",
+		gatewayUrlLabel: "Memory gateway URL",
+		gatewayUrlHint: "Empty = memory feedback disabled. The plugin ships no default address: fill in your own gateway URL (e.g. http://127.0.0.1:8420), or leave it empty if you have no gateway",
+		keyRefLabel: "Gateway credential ref",
+		keyRefHint: "Name of the credential holding the gateway token (POSIX env-var form, default TDAI_GATEWAY_KEY). Only the ref name is stored here — the secret itself is managed by the dsh credentials service (the web credentials page or the refs in ~/.dsh/.credentials.yaml) and never lands in settings.yaml; clearing it restores the default ref name"
+	}
+};
+//#endregion
+//#region src/client-entry.ts
+const NS = "quality-gate";
+const BUNDLE_PKG = "@jayyuen66/dsh-quality-gate";
+const CARD_CSS = [
+	".qgc-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;list-style:none;transition:border-color .16s,background .16s}",
+	".qgc-card:hover{border-color:var(--dsw-alias-label-dimmed)}",
+	".qgc-card-open{background:var(--dsw-alias-bg-layer-2);border-color:var(--dsw-alias-label-dimmed)}",
+	".qgc-header{appearance:none;width:100%;font:inherit;color:inherit;text-align:left;cursor:pointer;background:transparent;border:0;border-radius:12px;align-items:center;gap:12px;padding:14px 16px;display:flex}",
+	".qgc-head{flex-direction:column;flex:1;gap:4px;min-width:0;display:flex}",
+	".qgc-name{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4}",
+	".qgc-desc{color:var(--dsw-alias-label-tertiary);font-size:13px;line-height:1.5}",
+	".qgc-chevron{color:var(--dsw-alias-label-tertiary);flex:none;transition:transform .16s}",
+	".qgc-chevron-open{transform:rotate(180deg)}",
+	".qgc-body{border-top:1px solid var(--dsw-alias-border-l2);margin:0 16px;padding:8px 0 12px}",
+	".qgc-row{display:flex;flex-direction:row;justify-content:space-between;align-items:center;gap:12px;padding:9px 0}",
+	".qgc-label{font-size:13px;color:var(--dsw-alias-label-primary,inherit)}",
+	".qgc-hint{font-size:12px;color:var(--dsw-alias-label-tertiary,#8a8f99);line-height:1.5;margin-top:2px}",
+	".qgc-switch{appearance:none;position:relative;width:34px;height:20px;border-radius:10px;background:var(--dsw-alias-fill-primary,#d8dbe2);transition:background .16s;cursor:pointer;border:0;flex:none}",
+	".qgc-switch::after{content:\"\";position:absolute;top:2px;left:2px;width:16px;height:16px;border-radius:50%;background:var(--dsw-alias-bg-layer-1,#fff);transition:left .16s}",
+	".qgc-switch-on{background:var(--dsw-alias-brand-primary,#e07856)}",
+	".qgc-switch-on::after{left:16px}",
+	".qgc-switch:disabled{cursor:not-allowed;opacity:.6}",
+	".qgc-input{width:100%;box-sizing:border-box;font:inherit;font-size:12px;color:var(--dsw-alias-label-primary,inherit);background:var(--dsw-alias-bg-layer-1,transparent);border:1px solid var(--dsw-alias-border-l2,transparent);border-radius:8px;padding:6px 8px;margin-top:4px}",
+	".qgc-savebar{display:flex;gap:8px;align-items:center;padding:10px 0 2px;border-top:1px dashed var(--dsw-alias-border-l2);margin-top:6px;flex-wrap:wrap}",
+	".qgc-btn{appearance:none;font:inherit;font-size:12px;cursor:pointer;border-radius:6px;padding:4px 12px;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1,transparent);color:var(--dsw-alias-label-primary,inherit)}",
+	".qgc-btn:hover:not(:disabled){border-color:var(--dsw-alias-label-dimmed)}",
+	".qgc-btn-primary{background:var(--dsw-alias-brand-primary,#e07856);border-color:var(--dsw-alias-brand-primary,#e07856);color:var(--dsw-alias-label-primary-foreground,#fff)}",
+	".qgc-btn:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#e07856);outline-offset:1px}",
+	".qgc-btn:disabled{opacity:.5;cursor:not-allowed}",
+	".qgc-dirty{font-size:12px;color:var(--dsw-alias-label-tertiary,#8a8f99)}",
+	".qgc-saveerr{font-size:12px;color:#c4483f}"
+].join("\n");
+function ToggleRow(props) {
+	return (0, react.createElement)("div", { className: "qgc-row" }, (0, react.createElement)("div", null, (0, react.createElement)("div", { className: "qgc-label" }, props.label), (0, react.createElement)("div", { className: "qgc-hint" }, props.hint)), (0, react.createElement)("button", {
+		type: "button",
+		className: `qgc-switch${props.checked ? " qgc-switch-on" : ""}`,
+		role: "switch",
+		"aria-checked": props.checked,
+		"data-field": props.field,
+		disabled: props.disabled === true,
+		onClick: props.onToggle
+	}));
+}
+/** 数字输入行：settings 数字字段 ↔ UI 字符串（v7 配置面补齐）。 */
+function NumberInputRow(props) {
+	const num = typeof props.value === "number" && Number.isFinite(props.value) ? String(props.value) : "";
+	const [text, setText] = (0, react.useState)(num);
+	const [invalid, setInvalid] = (0, react.useState)(false);
+	(0, react.useEffect)(() => {
+		setText(num);
+		setInvalid(false);
+	}, [num]);
+	const invalidHint = props.t("outOfRange");
+	return (0, react.createElement)("div", { className: "qgc-row" }, (0, react.createElement)("div", null, (0, react.createElement)("div", { className: "qgc-label" }, props.label), (0, react.createElement)("div", { className: "qgc-hint" }, props.hint), (0, react.createElement)("input", {
+		type: "number",
+		className: "qgc-input",
+		value: text,
+		disabled: props.disabled === true,
+		"aria-invalid": invalid || void 0,
+		onChange: (event) => {
+			const next = event.target.value;
+			setText(next);
+			if (next === "") {
+				setInvalid(false);
+				props.onClear(props.field);
+				return;
+			}
+			const numeric = Number(next);
+			if (!Number.isFinite(numeric)) {
+				setInvalid(true);
+				return;
+			}
+			const min = props.min ?? -Infinity;
+			const max = props.max ?? Infinity;
+			if (numeric >= min && numeric <= max) {
+				setInvalid(false);
+				props.onChange(props.field, numeric);
+			} else setInvalid(true);
+		}
+	}), invalid ? (0, react.createElement)("div", {
+		className: "qgc-hint",
+		style: { color: "var(--dsw-alias-danger, #e5484d)" }
+	}, invalidHint) : null));
+}
+/**
+* 文本输入行：settings 字符串字段 ↔ UI 字符串。
+* 清空 = unset（回到 schema 默认值）——对本卡的两个网关字段，默认值就是"留空 = 不启用"。
+*/
+function TextInputRow(props) {
+	const text = typeof props.value === "string" ? props.value : "";
+	const [draft, setDraft] = (0, react.useState)(text);
+	(0, react.useEffect)(() => {
+		setDraft(text);
+	}, [text]);
+	return (0, react.createElement)("div", { className: "qgc-row" }, (0, react.createElement)("div", null, (0, react.createElement)("div", { className: "qgc-label" }, props.label), (0, react.createElement)("div", { className: "qgc-hint" }, props.hint), (0, react.createElement)("input", {
+		type: "text",
+		className: "qgc-input",
+		value: draft,
+		placeholder: props.placeholder ?? "",
+		disabled: props.disabled === true,
+		onChange: (event) => {
+			const next = event.target.value;
+			setDraft(next);
+			if (next.trim() === "") {
+				props.onClear(props.field);
+				return;
+			}
+			props.onChange(props.field, next.trim());
+		}
+	})));
+}
+/** touched 层与快照的差异字段（值语义比较；undefined 与缺失等价）。 */
+function diffTouched(touched, value) {
+	const out = [];
+	for (const key of Object.keys(touched)) if (JSON.stringify(touched[key] ?? null) !== JSON.stringify(value[key] ?? null)) out.push(key);
+	return out;
+}
+function SaveBar(props) {
+	const { t } = props;
+	const dis = !props.writable || props.busy;
+	let dirtyText;
+	if (props.writable) dirtyText = props.dirty ? t("statusDirty") : t("statusClean");
+	else dirtyText = t("statusReadOnly");
+	return (0, react.createElement)("div", { className: "qgc-savebar" }, (0, react.createElement)("button", {
+		type: "button",
+		className: "qgc-btn qgc-btn-primary",
+		"data-field": "save",
+		disabled: dis || !props.dirty,
+		onClick: props.onSave
+	}, props.busy ? t("saving") : t("save")), (0, react.createElement)("button", {
+		type: "button",
+		className: "qgc-btn",
+		"data-field": "discard",
+		disabled: dis || !props.dirty,
+		onClick: props.onDiscard
+	}, t("revert")), props.error === null ? (0, react.createElement)("span", { className: "qgc-dirty" }, dirtyText) : (0, react.createElement)("span", { className: "qgc-saveerr" }, props.error));
+}
+/**
+* 逐键 await 写入并**消费受理位**（0.1.7 的 set/unset 回 Promise<boolean>：
+* true=宿主受理；false=拒绝或写入被跳过，settings.md:13 "refuses stale revisions"；
+* 传输失败才 reject）。false 或 rejection 都**不清 touched**——否则宿主拒写时
+* 卡片仍显示"已保存"，用户修改被静默丢弃（旧版 setTimeout 盲清正是这个缺陷）。
+*/
+async function writeTouched(channels) {
+	const { t, set, unset, keys, touched, setBusy, setSaveError, setTouched } = channels;
+	try {
+		for (const key of keys) {
+			const val = touched[key];
+			if (!await (val === void 0 ? unset(key) : set(key, val))) {
+				setBusy(false);
+				setSaveError(t("saveRejected"));
+				return;
+			}
+		}
+		setBusy(false);
+		setTouched({});
+	} catch (error) {
+		console.error("[quality-gate] save write failed:", error);
+		setBusy(false);
+		setSaveError(t("saveFailed", { message: String(error instanceof Error ? error.message : error) }));
+	}
+}
+/** 头部：渲染子树扁平化（规避 max-nested-calls）——DOM 各层拆成独立 createElement 元素
+*  const，逐层用变量组合，避免 createElement 回调逐层内嵌。 */
+function buildCardHeader(props) {
+	const { t, open, onToggle } = props;
+	const nameEl = (0, react.createElement)("div", { className: "qgc-name" }, t("cardTitle"));
+	const descEl = (0, react.createElement)("div", { className: "qgc-desc" }, t("cardDescription"));
+	const headDiv = (0, react.createElement)("div", { className: "qgc-head" }, nameEl, descEl);
+	const chevronPathData = "M3 5l4 4 4-4";
+	const chevronPath = (0, react.createElement)("path", {
+		["d"]: chevronPathData,
+		fill: "none",
+		stroke: "currentColor",
+		strokeWidth: 1.5,
+		strokeLinecap: "round",
+		strokeLinejoin: "round"
+	});
+	const chevron = (0, react.createElement)("svg", {
+		width: 14,
+		height: 14,
+		viewBox: "0 0 14 14",
+		"aria-hidden": true,
+		className: `qgc-chevron${open ? " qgc-chevron-open" : ""}`
+	}, chevronPath);
+	return (0, react.createElement)("button", {
+		type: "button",
+		className: "qgc-header",
+		"aria-expanded": open,
+		onClick: onToggle
+	}, headDiv, chevron);
+}
+/** 展开态的 `ul` 本体：行元素仍按从前的顺序逐个传给同一个 createElement（不折成数组
+*  子节点，保持宿主侧 children 形状一致）。 */
+function buildCardBody(props) {
+	const { t, writable, eff, setField, clearField, dirty, busy, saveError, onSave, onDiscard } = props;
+	const rowEnabled = (0, react.createElement)(ToggleRow, {
+		label: t("enabledLabel"),
+		hint: t("enabledHint"),
+		field: "enabled",
+		checked: eff("enabled") !== false,
+		disabled: !writable,
+		onToggle: () => {
+			setField("enabled", eff("enabled") === false);
+		}
+	});
+	const rowInjects = (0, react.createElement)(NumberInputRow, {
+		t,
+		label: t("injectsLabel"),
+		hint: t("injectsHint"),
+		field: "maxInjectsPerTurn",
+		value: eff("maxInjectsPerTurn"),
+		disabled: !writable,
+		onChange: (field, val) => {
+			setField(field, val);
+		},
+		onClear: (field) => {
+			clearField(field);
+		},
+		min: 1,
+		max: 5
+	});
+	const rowBudget = (0, react.createElement)(NumberInputRow, {
+		t,
+		label: t("budgetLabel"),
+		hint: t("budgetHint"),
+		field: "gateBudgetMs",
+		value: eff("gateBudgetMs"),
+		disabled: !writable,
+		onChange: (field, val) => {
+			setField(field, val);
+		},
+		onClear: (field) => {
+			clearField(field);
+		},
+		min: 1e4,
+		max: 6e5
+	});
+	const rowMemory = (0, react.createElement)(ToggleRow, {
+		label: t("memoryLabel"),
+		hint: t("memoryHint"),
+		field: "memoryFeedback",
+		checked: eff("memoryFeedback") === true,
+		disabled: !writable,
+		onToggle: () => {
+			setField("memoryFeedback", eff("memoryFeedback") !== true);
+		}
+	});
+	const rowGatewayUrl = (0, react.createElement)(TextInputRow, {
+		label: t("gatewayUrlLabel"),
+		hint: t("gatewayUrlHint"),
+		field: "memoryGatewayUrl",
+		value: eff("memoryGatewayUrl"),
+		placeholder: "http://127.0.0.1:8420",
+		disabled: !writable,
+		onChange: (field, val) => {
+			setField(field, val);
+		},
+		onClear: (field) => {
+			clearField(field);
+		}
+	});
+	const rowGatewayKeyRef = (0, react.createElement)(TextInputRow, {
+		label: t("keyRefLabel"),
+		hint: t("keyRefHint"),
+		field: "memoryGatewayKeyRef",
+		value: eff("memoryGatewayKeyRef"),
+		placeholder: "TDAI_GATEWAY_KEY",
+		disabled: !writable,
+		onChange: (field, val) => {
+			setField(field, val);
+		},
+		onClear: (field) => {
+			clearField(field);
+		}
+	});
+	const rowSave = (0, react.createElement)(SaveBar, {
+		t,
+		dirty,
+		writable,
+		busy,
+		error: saveError,
+		onSave,
+		onDiscard
+	});
+	return (0, react.createElement)("ul", { className: "qgc-body" }, rowEnabled, rowInjects, rowBudget, rowMemory, rowGatewayUrl, rowGatewayKeyRef, rowSave);
+}
+function DgCard(props) {
+	const { t } = props;
+	const [open, setOpen] = (0, react.useState)(false);
+	const snap = props.useCard((cardSnap) => cardSnap);
+	const { value } = snap;
+	const writable = snap.status === "ready" && snap.writable;
+	const [touched, setTouched] = (0, react.useState)({});
+	const [busy, setBusy] = (0, react.useState)(false);
+	const [saveError, setSaveError] = (0, react.useState)(null);
+	/** 渲染取值：touched 优先，快照兜底（未触碰字段实时跟随外部快照）。 */
+	const eff = (field) => field in touched ? touched[field] : value[field];
+	const dirty = diffTouched(touched, value).length > 0;
+	const setField = (field, val) => {
+		setTouched((prev) => ({
+			...prev,
+			[field]: val
+		}));
+	};
+	const clearField = (field) => {
+		setTouched((prev) => ({
+			...prev,
+			[field]: void 0
+		}));
+	};
+	const save = () => {
+		const keys = diffTouched(touched, value);
+		if (keys.length === 0) return;
+		setBusy(true);
+		setSaveError(null);
+		writeTouched({
+			t,
+			set: props.set,
+			unset: props.unset,
+			keys,
+			touched,
+			setBusy,
+			setSaveError,
+			setTouched
+		});
+	};
+	const discard = () => {
+		setTouched({});
+		setSaveError(null);
+	};
+	const header = buildCardHeader({
+		t,
+		open,
+		onToggle: () => {
+			setOpen(!open);
+		}
+	});
+	const body = open ? buildCardBody({
+		t,
+		writable,
+		eff,
+		setField,
+		clearField,
+		dirty,
+		busy,
+		saveError,
+		onSave: save,
+		onDiscard: discard
+	}) : null;
+	return (0, react.createElement)("li", { className: `qgc-card${open ? " qgc-card-open" : ""}` }, header, body);
+}
+function cardStore(scope) {
+	let cachedSnap = null;
+	let cachedView = null;
+	const EMPTY_SNAPSHOT = {
+		status: "loading",
+		writable: false,
+		value: {}
+	};
+	return {
+		getSnapshot() {
+			const snap = scope.getSnapshot();
+			if (snap !== cachedSnap) {
+				cachedSnap = snap;
+				cachedView = {
+					status: snap.status,
+					writable: snap.writable,
+					value: snap.value ?? {}
+				};
+			}
+			return cachedView ?? EMPTY_SNAPSHOT;
+		},
+		subscribe(listener) {
+			return scope.subscribe(listener);
+		}
+	};
+}
+const inject = [
+	"slots",
+	"configForms",
+	"locale"
+];
+function apply(ctx) {
+	ctx.effect(() => {
+		const tag = document.createElement("style");
+		tag.id = "quality-gate-card-css";
+		tag.textContent = CARD_CSS;
+		document.head.append(tag);
+		return () => {
+			tag.remove();
+		};
+	}, "quality-gate-card: styles");
+	const scope = ctx.configForms.get(NS);
+	const store = cardStore(scope);
+	ctx.effect(() => ctx.locale.register(NS, UI_MESSAGES), "quality-gate-card: locale dictionaries");
+	const t = ctx.locale.bind(NS);
+	ctx.slots.inject("plugins.bundle.config", () => {
+		return ctx.slots.register({
+			name: "plugins.bundle.config",
+			key: BUNDLE_PKG,
+			inject: () => ({
+				t,
+				hooks: { card: store },
+				set: (field, value) => scope.set(field, value),
+				unset: (field) => scope.unset(field)
+			})
+		}, DgCard);
+	});
+}
+//#endregion
+exports.apply = apply;
+exports.diffTouched = diffTouched;
+exports.inject = inject;
+    return module.exports;
+  },
+});

package/cordis.patch.yml

@@ -0,0 +1,20 @@
+# quality-gate（2026-09-03）：回合收口质量门禁。
+# ECC（MIT, github.com/affaan-m/ECC）stop-format-typecheck 移植：
+#   - 编辑记账：本回合编辑过的代码/配置文件（O(1)，md 等非代码面豁免）；
+#   - agent/turn-stopping 批处理：从编辑路径向上探测最近清单根
+#     （pnpm-workspace 且根 package.json 声明了 check→pnpm check /
+#      Cargo.toml→cargo check / pyproject→ruff / package.json+tsconfig→tsc），
+#     门禁失败经 followup 注入修复指令 → 回合物理不结束（agent.ts:304-308 inbox 二次检查）；
+#     探测只提项目自己声明过的命令，拿不到脚本清单时宁可不给门禁（防假失败注入）；
+#   - 防跑飞：每回合每根至多 2 次注入、总预算封顶、超时按「未执行」注入不静默通过；
+#     inbox 有待处理时不抢话。
+# 设置卡：enabled / 注入配额 / 门禁预算 / 记忆反馈（开关 + 网关地址 + 密钥凭据引用，
+# 记忆反馈默认关闭且地址默认为空 = 不启用；密钥走 dsh 凭据通道，不落设置）。
+#
+# 组合包层（2026-09-05 bundle 化）：本文件由 package.json 的 dsh.bundle.patch
+# 指向，随 `dsh plugin --profile web add/remove ./plugins/quality-gate` 维护。
+# 行按裸包名引用本包（client-modules 只扫描裸包名条目的 dsh.client 声明）。
+# 注意 pnpm ≥12.3.0：12.0.0 的 add 本地目录有 #14437 bug。
+- insert:
+    - id: quality-gate
+      name: "@jayyuen66/dsh-quality-gate"