@jayyuen66/dsh-quality-gate 0.1.1 → 0.1.2

package/README.md

@@ -12,7 +12,7 @@
 
 - Trigger: the host event `agent/turn-stopping`. Flow: read the incremental event window → take this session's **successful** edits → walk each file up to the nearest manifest root → detect the gate → run it.
   - Edits counted: `edit` / `write` / `str_replace_editor` writes; `view` is read-only and does not count.
-  - Manifest root: searched up from each file, max 10 levels; a monorepo package is upgraded to the workspace root holding `pnpm-workspace.yaml`.
+  - Manifest root: searched up from each file, max 10 levels; a monorepo package is upgraded to the workspace root holding `pnpm-workspace.yaml` only when that root yields a gate — otherwise the package keeps its own root (an outer workspace without a `check` script must not swallow the package's `tsc`/`ruff` gate).
 - Skipped when:
   - `enabled: false`; the turn has no checkable edit (only md/txt/images/`.sh`, or edits that were denied or failed).
   - Subagent sessions (`origin === "subagent"` or `delegationDepth > 0`); the inbox already has pending items (the gate does not talk over the user).
@@ -26,7 +26,7 @@ dsh plugin --profile web add @jayyuen66/dsh-quality-gate
 ```
 
 - The packages live on the public npm registry, so installs need no credentials.
-- Requires a host at `@deepseek-ai/dsh` 0.2.1-alpha.2 or newer (`engines.dsh`); the plugin is compiled against that host's type surface.
+- Requires a host at `@deepseek-ai/dsh` 0.2.1-rc.2 or newer (`engines.dsh`); the plugin is compiled against that host's type surface.
 - The runtime dependency `@jayyuen66/dsh-plugin-shared` must already be on the same registry, otherwise the whole set 404s.
 - `@deepseek-ai/schemastery` is resolved from the host, not installed by this package: the host's own fork is the only one whose `resolve` wraps `.volatile()` fields into live references, so a public `schemastery` would turn "edit a setting" into "restart to apply".
 - Installing a local directory needs pnpm ≥ 12.3.0 (12.0.0 has a known bug in that path).

package/README.zh-CN.md

@@ -12,7 +12,7 @@
 
 - 触发点：宿主事件 `agent/turn-stopping`。流程是读增量事件窗 → 取本会话**成功**的编辑 → 每个文件向上找最近清单根 → 探测门禁 → 执行。
   - 编辑口径：`edit` / `write` / `str_replace_editor` 的写入；`view` 只读不算。
-  - 清单根：最多向上找 10 层；monorepo 子包升到 `pnpm-workspace.yaml` 所在的工作区根。
+  - 清单根：最多向上找 10 层；monorepo 子包升到 `pnpm-workspace.yaml` 所在的工作区根——但只在该根**产得出门禁**时升级，否则保留子包自己的根（外层没有 `check` 脚本的 workspace 不得吃掉子包的 `tsc` / `ruff` 门禁）。
 - 不触发：
   - `enabled: false`；本回合没有可检编辑（只改 md/txt/图片/`.sh`，或被拒、执行失败的编辑）。
   - 子代理会话（`origin === "subagent"` 或 `delegationDepth > 0`）；inbox 已有待处理消息（不抢话）。
@@ -26,7 +26,7 @@ dsh plugin --profile web add @jayyuen66/dsh-quality-gate
 ```
 
 - 包在公共 npm（`registry.npmjs.org`）上，安装侧不需要凭据。
-- 宿主需 `@deepseek-ai/dsh` 0.2.1-alpha.2 起（`engines.dsh`）：本包按这一版宿主的类型面编译。
+- 宿主需 `@deepseek-ai/dsh` 0.2.1-rc.2 起（`engines.dsh`）：本包按这一版宿主的类型面编译。
 - 运行时依赖 `@jayyuen66/dsh-plugin-shared` 必须已在同一 registry 上，否则整组 404。
 - `@deepseek-ai/schemastery` 由宿主解析、不由本包安装：只有宿主 fork 的那一枚能把 `.volatile()` 字段解析成活引用，换成公共 `schemastery` 就变成改设置要重启才生效。
 - 本地目录形态安装需 pnpm ≥ 12.3.0（12.0.0 的本地目录 `add` 有已知缺陷）。

package/client.js

@@ -6,6 +6,13 @@ window.__ModuleLoader__.load({
     var exports = module.exports;
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let react = require("react");
+//#region node_modules/@jayyuen66/dsh-plugin-shared/dist/card-diff.js
+function e(e, t) {
+	let n = [];
+	for (let r of Object.keys(e)) JSON.stringify(e[r] ?? null) !== JSON.stringify(t[r] ?? null) && n.push(r);
+	return n;
+}
+//#endregion
 //#region src/ui-messages.ts
 const UI_MESSAGES = {
 	zh: {
@@ -171,12 +178,6 @@ function TextInputRow(props) {
 		}
 	})));
 }
-/** touched 层与快照的差异字段（值语义比较；undefined 与缺失等价）。 */
-function diffTouched(touched, value) {
-	const out = [];
-	for (const key of Object.keys(touched)) if (JSON.stringify(touched[key] ?? null) !== JSON.stringify(value[key] ?? null)) out.push(key);
-	return out;
-}
 function SaveBar(props) {
 	const { t } = props;
 	const dis = !props.writable || props.busy;
@@ -358,7 +359,7 @@ function DgCard(props) {
 	const [saveError, setSaveError] = (0, react.useState)(null);
 	/** 渲染取值：touched 优先，快照兜底（未触碰字段实时跟随外部快照）。 */
 	const eff = (field) => field in touched ? touched[field] : value[field];
-	const dirty = diffTouched(touched, value).length > 0;
+	const dirty = e(touched, value).length > 0;
 	const setField = (field, val) => {
 		setTouched((prev) => ({
 			...prev,
@@ -372,7 +373,7 @@ function DgCard(props) {
 		}));
 	};
 	const save = () => {
-		const keys = diffTouched(touched, value);
+		const keys = e(touched, value);
 		if (keys.length === 0) return;
 		setBusy(true);
 		setSaveError(null);
@@ -472,7 +473,6 @@ function apply(ctx) {
 }
 //#endregion
 exports.apply = apply;
-exports.diffTouched = diffTouched;
 exports.inject = inject;
     return module.exports;
   },

package/host.js

@@ -1,4 +1,5 @@
 // GENERATED by build-host.mjs — edit host.ts / lib/*.ts, then run `node build-host.mjs`.
+import { createRequire } from "node:module";
 import { closeSync, existsSync, openSync, readFileSync, readSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 import path from "node:path";
@@ -30,7 +31,7 @@ const DEFAULT_MAX_FILES = 500;
 var EditAccumulator = class {
 	files = /* @__PURE__ */ new Set();
 	maxFiles;
-	/** 容量淘汰累计丢弃数：drain 时清零（500-cap 静默淘汰要可观测）。 */
+	/** 容量淘汰累计丢弃数：drain 时清零（静默淘汰要可观测）。 */
 	dropped = 0;
 	constructor(options = {}) {
 		this.maxFiles = options.maxFiles ?? DEFAULT_MAX_FILES;
@@ -44,11 +45,10 @@ var EditAccumulator = class {
 		this.files.add(filePath);
 	}
 	/**
-	* 淘汰插入序最旧的一项并计数。调用点已保证集合非空（`size >= maxFiles >= 1`，本包
-	* maxFiles 只取默认 500 或测试里的 2），所以原意是**取首项这一次动作**，不是迭代——
-	* 旧写法拿 `for…of` + 无条件 `break` 伪装单次取值，那正是 eslint(no-unreachable-loop)
-	* 判的「循环体只允许一次迭代」：循环结构在这里没有承载任何语义。改成直接取首个元素，
-	* 单次淘汰的行为（删最旧 + 计数）与原样一致。
+	* 淘汰插入序最旧的一项并计数。`maxFiles` 配成 0 时调用点对空集也成立，所以取到的首项
+	* 可以不存在——那一支什么都不做，由该退化配置的用例钉住。
+	* 这里只需要**取首项这一次动作**，不需要迭代：`for…of` + 无条件 `break` 正是
+	* eslint(no-unreachable-loop) 判的「循环体只允许一次迭代」——循环结构在这里不承载任何语义。
 	*/
 	evictOldest() {
 		const [oldest] = this.files;
@@ -106,11 +106,7 @@ function gateForRoot(entry) {
 	};
 	else if (has("package.json") && has("tsconfig.json")) gate = {
 		root,
-		command: [
-			"npx",
-			"tsc",
-			"--noEmit"
-		]
+		command: ["tsc", "--noEmit"]
 	};
 	return gate;
 }
@@ -144,7 +140,6 @@ const MESSAGES = {
 		toolMissing: "命令不存在（工具未安装）",
 		toolNotExecutable: "命令不可执行",
 		toolNotRun: "{cause}，门禁没有运行。",
-		toolStub: "门禁工具本身不可用（npx 抓到的是 stub 包，不是真工具）。",
 		policyUnresolvable: "沙箱策略无法解析（{message}），门禁拒绝在未确认的沙箱边界下执行。",
 		sandboxUnavailable: "沙箱在本机不可用（{message}）：命令被拒绝执行，未做任何检查。",
 		gateStartFailed: "门禁未能启动（{message}）。",
@@ -168,7 +163,6 @@ const MESSAGES = {
 		toolMissing: "command not found (tool not installed)",
 		toolNotExecutable: "command not executable",
 		toolNotRun: "{cause} — the gate did not run.",
-		toolStub: "The gate tool itself is unavailable (npx fetched a stub package, not the real tool).",
 		policyUnresolvable: "The sandbox policy could not be resolved ({message}); the gate refuses to run under an unconfirmed sandbox boundary.",
 		sandboxUnavailable: "The sandbox is unavailable on this machine ({message}): the command was denied and no check was performed.",
 		gateStartFailed: "The gate failed to start ({message}).",
@@ -221,6 +215,23 @@ function resolveGatewayUrl(settingUrl) {
 	const configured = settingUrl.trim();
 	return (configured === "" ? envOr("TDAI_GATEWAY_URL", "") : configured).replace(/\/+$/u, "");
 }
+/**
+* 凭据只允许发往 https 或回环地址：明文 http 到远端会把 Bearer 令牌暴露给同网段
+* （设置卡默认值就是本机 http，属有意用法）。返回 false 时调用方按"未配置"处理，
+* 不解析、不发送凭据。
+*/
+function isCredentialSafeUrl(url) {
+	let parsed;
+	try {
+		parsed = new URL(url);
+	} catch {
+		return false;
+	}
+	if (parsed.protocol === "https:") return true;
+	if (parsed.protocol !== "http:") return false;
+	const host = parsed.hostname.replaceAll(/^\[|\]$/gu, "");
+	return host === "localhost" || host === "127.0.0.1" || host === "::1";
+}
 /** x-tdai-service-id：env 可覆盖，默认是网关协议的匿名服务名（不含任何机器信息）。 */
 function resolveServiceId() {
 	return envOr("TDAI_SERVICE_ID", "default");
@@ -269,8 +280,9 @@ async function pushGateFeedback(input, target, messages) {
 * 工程若不在此登记，gate-detect 的 has("ruff.toml") 就是死码——那类工程根本得不到根，
 * 也就永远没有门禁。
 */
+const PKG_MANIFEST = "package.json";
 const MANIFESTS = [
-	"package.json",
+	PKG_MANIFEST,
 	"Cargo.toml",
 	"pyproject.toml",
 	"pnpm-workspace.yaml",
@@ -330,8 +342,8 @@ function messageOf(error) {
 	return message;
 }
 /**
-* 会话级 Map 淘汰：把 keep 先删后插移到队尾（JS Map 迭代按插入序），再淘汰队首
-* (size - 50) 项 → keep 永不被淘汰，且总大小收敛。泛型复用：注入配额 Map（InjectState）、
+* 会话级 Map 淘汰：把 keep 先删后插移到队尾（JS Map 迭代按插入序），再淘汰队首超出
+* `SESSION_BUDGET` 的项 → keep 永不被淘汰，且总大小收敛。泛型复用：注入配额 Map（InjectState）、
 * 事件游标 Map（number）与编辑累加器 Map（EditAccumulator）共用同一策略。
 * keep 不在表内 → 直接返回（inbox-busy 分支的 injectState 就会命中：该会话从未失败过）。
 */
@@ -391,17 +403,34 @@ function preInjectCheck(agent, signal) {
 	};
 }
 /**
-* 判定门禁失败是否为"工具本身不可用"（而非代码问题）。
-*
-* `npx tsc` 在项目未装 typescript 时会**自动安装**已弃用的 stub 包 `tsc@2.0.4`，
-* 它打印横幅并以 exit 1 退出——不是 126/127，所以只按退出码判定会误报为代码失败。
-* 实测：`npx --no-install` 在本机拦不住 stub（已从 npx 缓存解析），
-* 所以必须在输出侧识别，不能只靠加 flag。
+* 本次门禁要跑的 tsc 入口：优先工程自己装的 typescript（与工程惯用的编译器版本一致），
+* 装不到时用本包依赖的那份（随包安装，运行期无网络动作）。两处都解析不到时回落到 PATH 上的
+* `tsc`，由 126/127 那条「工具不可用」出口报成未执行——绝不走 `npx` 的自动下载。
 */
-function gateToolUnavailable(stdout, stderr) {
-	const out = `${stdout}\n${stderr}`.toLowerCase();
-	if (out.includes("not the tsc command you are looking for")) return true;
-	return out.includes("npm warn deprecated tsc@");
+function tscEntry(root) {
+	let entry;
+	for (const from of [path.join(root, PKG_MANIFEST), import.meta.url]) try {
+		const manifest = createRequire(from).resolve("typescript/package.json");
+		entry = path.join(path.dirname(manifest), "bin", "tsc");
+		break;
+	} catch {}
+	return entry;
+}
+/** 门禁命令的实际 argv：tsc 的门禁只带逻辑名，入口在运行时按工程根解析。 */
+function gateCommandArgs(gate) {
+	if (gate.command[0] !== "tsc") return gate.command;
+	/* v8 ignore next 1 —— 本包自己的 typescript 解析不到（安装面坏了）时才走 PATH 回落；
+	正常安装不可达，而那一路由 126/127 报成未执行。 */
+	return [tscEntry(gate.root) ?? "tsc", "--noEmit"];
+}
+/** 拼 shell 串：路径可能带空格，含空白或元字符的参数加单引号。
+*  导出只为直接测这段引号处理：tsc 入口是绝对路径，它所在目录未必没有空格。 */
+function shellArg(part) {
+	return /^[\w./:=@+-]+$/u.test(part) ? part : `'${part.replaceAll("'", `'\\''`)}'`;
+}
+/** 门禁命令的展示/执行串（与 gateCommandArgs 同源）。 */
+function gateCommandText(gate) {
+	return gateCommandArgs(gate).map((part) => shellArg(part)).join(" ");
 }
 /** harness run() 抛出的 SandboxUnavailableError（code 或 name 命中即可）。 */
 function isSandboxUnavailable(error) {
@@ -454,7 +483,7 @@ function evidenceText(messages, stream, label) {
 	return out;
 }
 const gateText = (messages, gate, out) => renderTemplate(messages.gateFailed, {
-	command: gate.command.join(" "),
+	command: gateCommandText(gate),
 	root: gate.root,
 	output: out
 });
@@ -463,19 +492,19 @@ const gateText = (messages, gate, out) => renderTemplate(messages.gateFailed, {
 * 让模型去修一个装不上的工具/越不过去的沙箱，只会配着配额环烧 token。
 */
 const notRunText = (messages, gate, reason) => renderTemplate(messages.gateNotRun, {
-	command: gate.command.join(" "),
+	command: gateCommandText(gate),
 	root: gate.root,
 	reason
 });
 /** 配额耗尽后的"放行说明"（用户可见，不再静默 return）。 */
 const giveUpText = (messages, gate, attempts) => renderTemplate(messages.gaveUp, {
 	attempts,
-	command: gate.command.join(" "),
+	command: gateCommandText(gate),
 	root: gate.root
 });
 /** 未执行清单的一行（模块级：不让 renderTemplate 套进 map 再套进 renderTemplate）。 */
 const skippedGateLine = (messages, gate) => renderTemplate(messages.skippedGateItem, {
-	command: gate.command.join(" "),
+	command: gateCommandText(gate),
 	root: gate.root
 });
 /** 预算耗尽后剩余门禁的"未执行"清单：只 warn 等于静默通过，所以要注入给模型与用户。 */
@@ -539,7 +568,7 @@ function interruptedRunOutcome(messages, budgetMs, res) {
 function unavailableToolOutcome(messages, gate, res, log) {
 	let outcome;
 	if (res.exitCode === 126 || res.exitCode === 127) {
-		log.warn(`[quality-gate] gate tool unavailable (exit ${res.exitCode}): ${gate.command.join(" ")} — reported as not-run, not as pass`);
+		log.warn(`[quality-gate] gate tool unavailable (exit ${res.exitCode}): ${gateCommandText(gate)} — reported as not-run, not as pass`);
 		const cause = res.exitCode === 127 ? messages.toolMissing : messages.toolNotExecutable;
 		outcome = {
 			kind: "not-run",
@@ -558,7 +587,7 @@ function unavailableToolOutcome(messages, gate, res, log) {
 * 策略拒绝当成代码失败注入"修这些错"。
 *
 * 判定序（三支各自成函数，顺序与 warn 次数都不变）：沙箱面拦截 → 进程没跑完 →
-* 工具装不上（126/127）→ exit 0（部分生效沙箱只 warn）→ npx stub 横幅 → 代码失败。
+* 工具装不上（126/127）→ exit 0（部分生效沙箱只 warn）→ 代码失败。
 */
 function classifyRun(messages, gate, budgetMs, res, log) {
 	const facts = res.sandbox;
@@ -571,16 +600,9 @@ function classifyRun(messages, gate, budgetMs, res, log) {
 	const unusable = unavailableToolOutcome(messages, gate, res, log);
 	if (unusable !== void 0) return unusable;
 	if (res.exitCode === 0) {
-		if (facts?.enforcement === "partial") log.warn(`[quality-gate] gate passed under PARTIAL sandbox enforcement (${sandboxNote(messages, facts)}): ${gate.command.join(" ")} @ ${gate.root}`);
+		if (facts?.enforcement === "partial") log.warn(`[quality-gate] gate passed under PARTIAL sandbox enforcement (${sandboxNote(messages, facts)}): ${gateCommandText(gate)} @ ${gate.root}`);
 		return { kind: "pass" };
 	}
-	if (gateToolUnavailable(res.stdout.text, res.stderr.text)) {
-		log.warn(`[quality-gate] gate tool unavailable (npx fetched a stub instead of the real tool): ${gate.command.join(" ")} in ${gate.root} — reported as not-run`);
-		return {
-			kind: "not-run",
-			text: `${messages.toolStub}\n${evidenceText(messages, res.stderr, "stderr")}`
-		};
-	}
 	return {
 		kind: GATE_KIND_CODE_FAILURE,
 		text: `exit=${res.exitCode}\n${evidenceText(messages, res.stdout, "stdout")}${evidenceText(messages, res.stderr, "stderr")}`
@@ -614,21 +636,21 @@ function isArrayDelivery(value) {
 /**
 * 解析事件游标窗口：fork 切点下限 vs 上次已读 seq 取大，返回起始 seq 与本批事件。
 * 事件流取自官方 `ctx.sessionQuery.observeSession(sessionId)`（见上面 SessionQueryFace：
-* 一次交回 `events` 与 `inheritedEventCount`）。三条降级路径一律 `undefined`（调用方直接
-* 返回，**游标不推进**、不误报）：① `sessionQuery` 未装配（`Context["get"]` 的官方语义即
-* "or `undefined` when not (yet) provided"，installed cordis/lib/types/reflect.d.ts:12）；
-* ② `observeSession` 抛错/拒绝（会话已卸载、存储读不出）；③ 交回的 events 不是数组
-* （契约外交付，由 `isArrayDelivery` 那道**布尔**判据挡——不用 `Array.isArray` 作守卫收窄，
-* 它会把官方 `readonly SessionEvent[]` 塌成 `any[]`，类型面当场作废并把 any 传进下游记账）。
+* 一次交回 `events` 与 `inheritedEventCount`）。两条降级路径一律 `undefined`（调用方直接
+* 返回，**游标不推进**、不误报）：① `observeSession` 抛错/拒绝（会话已卸载、存储读不出）；
+* ② 交回的 events 不是数组（契约外交付，由 `isArrayDelivery` 那道**布尔**判据挡——不用
+* `Array.isArray` 作守卫收窄，它会把官方 `readonly SessionEvent[]` 塌成 `any[]`，类型面
+* 当场作废并把 any 传进下游记账）。`sessionQuery` 服务本身缺席是第三条降级，判定在
+* `readEditedFiles`（那里才能发 warn-once）。
 * 窗口仍由**本地按 from 切片**：观察面给的是自日志开头的连续切片（`seq = log.length`
-* 连续性契约，installed dsh-session/lib/index.js:1285 的注记），而 `from` 是本包游标算出的
+* 连续性契约，installed dsh-session/lib/index.js:1476 的注记），而 `from` 是本包游标算出的
 * 裸 number——这样连 `SessionLogOffset` 的品牌都不必造（官方只要 `SessionId`，那一位从
 * `Session.id` 上拿回来就是品牌的）。
 */
 async function resolveEventWindow(query, sessionId, lastSeq) {
 	let window;
-	if (query !== void 0) try {
-		const observation = await query.observeSession(sessionId);
+	try {
+		const observation = await query.observeSession(sessionId, { projectionMode: "none" });
 		const forkCut = observation.inheritedEventCount ?? 0;
 		const from = Math.max(forkCut, lastSeq.get(sessionId) ?? forkCut);
 		if (isArrayDelivery(observation.events)) window = {
@@ -758,7 +780,7 @@ function reportProblemToBus(get, attribution, gate, problem, log) {
 		cwd: attribution.cwd,
 		sessionId: attribution.sessionId,
 		turn: attribution.turn,
-		signature: gate.command.join(" "),
+		signature: gateCommandText(gate),
 		detail: problem.text,
 		evidence: {
 			root: gate.root,
@@ -785,6 +807,10 @@ async function resolveFeedbackTarget(cfg, credentials) {
 		ok: false,
 		reason: "memoryGatewayUrl 未配置（留空 = 不启用记忆反馈）"
 	};
+	if (!isCredentialSafeUrl(url)) return {
+		ok: false,
+		reason: `memoryGatewayUrl ${url} 是明文 http 且非回环：Bearer 凭据只发往 https 或本机`
+	};
 	if (!isCredentialRefName(cfg.memoryGatewayKeyRef)) return {
 		ok: false,
 		reason: `memoryGatewayKeyRef "${cfg.memoryGatewayKeyRef}" 不是合法凭据引用名`
@@ -857,20 +883,40 @@ function isGateHost(value) {
 	return typeof get === "function" && typeof on === "function" && typeof effect === "function" && typeof inject === "function" && isRecord(fiber) && typeof fieldOf(settings, "describe") === "function" && typeof fieldOf(settings, "configure") === "function";
 }
 /**
+* 一个文件的最近清单根 → 实际要跑的根：workspace 根优先，**但只在外层真能产出门禁时**才升级。
+*
+* 只判「上面有没有 pnpm-workspace.yaml」就升级是漏门禁的一条路：外层若是"有 workspace 清单、
+* 却没有 check 脚本也没有 tsconfig"的根，gate-detect 对它返回空表，子包本来有的
+* `npx tsc --noEmit` / `ruff check` 会被这次上溯抹掉，且没有任何输出。
+*/
+function rootForFile(useRoot, maxDepth) {
+	const inner = probeProjectRoot(useRoot);
+	const upgraded = workspaceRootUpgrade(useRoot, maxDepth);
+	if (upgraded === useRoot) return inner;
+	const outer = probeProjectRoot(upgraded);
+	if (detectGate([outer]).length > 0) return outer;
+	return detectGate([inner]).length > 0 ? inner : outer;
+}
+/**
 * 从编辑文件路径向上找最近的清单根（层数上限 = Config 的 maxRootDepth，非 volatile
 * 部署值），每个根探一次真实盘上事实（清单名 + 已声明脚本）。找不到清单根的文件跳过
-* （无门禁面）。
+* （无门禁面）。同一内层根只判一次盘：一轮改几百个文件时逐文件重复探盘没有意义。
 */
 function projectRootsOf(files, maxDepth, log) {
 	const roots = /* @__PURE__ */ new Map();
+	const chosenByInner = /* @__PURE__ */ new Map();
 	for (const file of files) {
 		const hit = findManifestRoot(file, maxDepth);
 		const useRoot = hit.root;
 		if (useRoot === void 0) {
 			if (hit.hitDepthLimit) log.warn(`[quality-gate] no manifest within ${maxDepth} levels of ${file}; gate skipped for it`);
 		} else {
-			const upgraded = workspaceRootUpgrade(useRoot, maxDepth);
-			if (!roots.has(upgraded)) roots.set(upgraded, probeProjectRoot(upgraded));
+			let chosen = chosenByInner.get(useRoot);
+			if (chosen === void 0) {
+				chosen = rootForFile(useRoot, maxDepth);
+				chosenByInner.set(useRoot, chosen);
+			}
+			if (!roots.has(chosen.root)) roots.set(chosen.root, chosen);
 		}
 	}
 	return [...roots.values()];
@@ -886,7 +932,7 @@ async function runGate(messages, shell, gate, budgetMs, context) {
 	let outcome;
 	try {
 		const spec = shell.resolve({
-			command: gate.command.join(" "),
+			command: gateCommandText(gate),
 			workdir: gate.root,
 			stdoutMaxBytes,
 			timeoutMs: budgetMs,
@@ -895,7 +941,7 @@ async function runGate(messages, shell, gate, budgetMs, context) {
 		});
 		outcome = classifyRun(messages, gate, budgetMs, await (await shell.execute(spec)).result(), log);
 	} catch (error) {
-		log.error(`[quality-gate] gate did not run: ${gate.command.join(" ")} @ ${gate.root} — ${messageOf(error)}`);
+		log.error(`[quality-gate] gate did not run: ${gateCommandText(gate)} @ ${gate.root} — ${messageOf(error)}`);
 		const cause = messageOf(error);
 		outcome = isSandboxUnavailable(error) ? {
 			kind: "not-run",
@@ -970,7 +1016,7 @@ function accumulatorOf(rt, sessionId) {
 * tool/result 的 isError 标记失败 callId，只记成功的。
 * turn-stopping 时本回合 call+result 同处一个增量窗，单次扫描即可关联；无 callId 的事件
 * （异常/旧形状/测试 mock）保守直记，避免漏门禁。
-* fork 前缀修复（源码核对 0.1.3 后落地）：子代理会话 fork 自父会话时，
+* fork 前缀：子代理会话 fork 自父会话时，
 * 事件流含父事件前缀，游标从 0 首读会把父会话的历史编辑一并计入、多跑门禁。
 * Session.inheritedEventCount（0.1.2-rc.1 起公开只读）给出 fork 切点——首读下限
 * 取切点而非 0，父前缀天然跳过；缺属性退回 0（旧行为，保守不漏门禁）。
@@ -978,8 +1024,22 @@ function accumulatorOf(rt, sessionId) {
 async function readEditedFiles(rt, agent, acc) {
 	const { session } = agent;
 	const sessionId = session.id;
-	const window = await resolveEventWindow(rt.svc.get("sessionQuery"), sessionId, rt.lastSeqBySession);
-	if (window === void 0) return;
+	const query = rt.svc.get("sessionQuery");
+	if (query === void 0) {
+		if (!rt.queryMissingWarned) {
+			rt.queryMissingWarned = true;
+			rt.log.warn("[quality-gate] sessionQuery service unavailable; edit accounting is off, so no gate will run");
+		}
+		return;
+	}
+	const window = await resolveEventWindow(query, sessionId, rt.lastSeqBySession);
+	if (window === void 0) {
+		if (!rt.queryReadWarned) {
+			rt.queryReadWarned = true;
+			rt.log.warn("[quality-gate] session event read returned no window; this turn's gate is skipped (further read failures stay silent)");
+		}
+		return;
+	}
 	rt.lastSeqBySession.set(sessionId, window.from + window.events.length);
 	pruneToSessionBudget(rt.lastSeqBySession, sessionId);
 	const edits = collectEdits(window.events);
@@ -1219,6 +1279,8 @@ function apply(ctx, config) {
 		gateAbort: new AbortController(),
 		inFlightGates: /* @__PURE__ */ new Set(),
 		shellWarned: false,
+		queryMissingWarned: false,
+		queryReadWarned: false,
 		disposed: false
 	};
 	svc.on("agent/turn-stopping", async (payload) => {
@@ -1243,4 +1305,4 @@ var host_default = {
 	apply
 };
 //#endregion
-export { Config, apply, host_default as default };
+export { Config, apply, host_default as default, shellArg };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jayyuen66/dsh-quality-gate",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "dsh 插件：回合收口质量门禁（在 agent/turn-stopping 按项目形态跑 pnpm check / cargo check / ruff check / tsc，未过则注入修复指令开新轮）",
   "license": "MIT",
   "author": "JayYuen",
@@ -31,50 +31,51 @@
     "registry": "https://registry.npmjs.org"
   },
   "dependencies": {
-    "@jayyuen66/dsh-plugin-shared": "^0.1.4"
+    "@jayyuen66/dsh-plugin-shared": "^0.1.6",
+    "typescript": "7.0.2"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.5-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-api-remotes": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-locale": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-store": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-layout": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-plugin-manager": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-credentials": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-package-manifest": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-sandbox": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-scope": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-query": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session-title": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-settings": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-shell": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-subprocess": "0.2.1-alpha.2",
-    "@deepseek-ai/schemastery": "3.18.5-alpha.1",
+    "@deepseek-ai/cordis": "4.0.5",
+    "@deepseek-ai/dsh-agent": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-api-remotes": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-store": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-layout": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-plugin-manager": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-package-manifest": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-scope": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session-query": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session-title": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-settings": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-shell": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-subprocess": "0.2.1-rc.2",
+    "@deepseek-ai/schemastery": "3.18.5",
     "@types/node": "26.6.5",
     "@types/react": "19.3.0",
-    "@vitest/coverage-v8": "5.0.3",
+    "@vitest/coverage-v8": "5.0.5",
     "eslint-plugin-sonarjs": "4.2.2",
-    "oxfmt": "0.72.0",
-    "oxlint": "1.87.0",
+    "oxfmt": "0.73.0",
+    "oxlint": "1.88.0",
     "oxlint-tsgolint": "7.0.2004",
     "react": "^19.3.0",
-    "rolldown": "1.2.13",
+    "rolldown": "1.2.14",
     "typescript": "7.0.2",
     "vite": "8.3.4",
-    "vitest": "5.0.3"
+    "vitest": "5.0.5"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh": "^0.2.1-alpha.2",
-    "@deepseek-ai/dsh-credentials": "0.2.1-alpha.2",
-    "@deepseek-ai/schemastery": "3.18.5-alpha.1"
+    "@deepseek-ai/dsh": "^0.2.1-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.2.1-rc.2",
+    "@deepseek-ai/schemastery": "3.18.5"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh": {
@@ -83,7 +84,7 @@
   },
   "icon": "icon.svg",
   "engines": {
-    "dsh": ">=0.2.1-alpha.2",
+    "dsh": "^0.2.1-rc.2",
     "node": ">=22.12.0"
   },
   "dsh": {