@jayyuen66/dsh-quality-gate 0.1.3 → 0.1.5

package/client.js

@@ -7,209 +7,562 @@ window.__ModuleLoader__.load({
     let exports = module.exports;
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let react = require("react");
+let zod = require("zod");
 // node_modules/@jayyuen66/dsh-plugin-shared/dist/card-diff.js
-function e(t, n, r) {
+function e$1(t, n, r) {
 	if (t == null || n == null) return (t ?? null) === (n ?? null);
 	if (Object.is(t, n)) return !0;
 	if (typeof t != `object` || typeof n != `object`) return !1;
 	if (r.get(t) === n) return !0;
-	if (r.set(t, n), Array.isArray(t) || Array.isArray(n)) return !Array.isArray(t) || !Array.isArray(n) || t.length !== n.length ? !1 : t.every((t, i) => e(t, n[i], r));
+	if (r.set(t, n), Array.isArray(t) || Array.isArray(n)) return !Array.isArray(t) || !Array.isArray(n) || t.length !== n.length ? !1 : t.every((t, i) => e$1(t, n[i], r));
 	let i = Object.keys(t), a = Object.keys(n);
-	return i.length === a.length && i.every((i) => Object.hasOwn(n, i) && e(Reflect.get(t, i), Reflect.get(n, i), r));
+	return i.length === a.length && i.every((i) => Object.hasOwn(n, i) && e$1(Reflect.get(t, i), Reflect.get(n, i), r));
 }
-function t(t, n) {
+function t$1(t, n) {
 	let r = [];
-	for (let i of Object.keys(t)) e(t[i], n[i], /* @__PURE__ */ new WeakMap()) || r.push(i);
+	for (let i of Object.keys(t)) e$1(t[i], n[i], /* @__PURE__ */ new WeakMap()) || r.push(i);
 	return r;
 }
+// node_modules/@jayyuen66/dsh-plugin-shared/dist/card-ui.js
+const c = `
+.dsu-form{display:flex;flex-direction:column}
+.dsu-section{margin-top:24px;padding-top:24px;border-top:.5px solid var(--dsw-alias-border-l1)}
+.dsu-form>.dsu-section:first-child{margin-top:0;padding-top:0;border-top:0}
+.dsu-sectionTitle{margin:0;font-size:15px;font-weight:600;line-height:1.4;color:var(--dsw-alias-label-primary)}
+.dsu-sectionHint{margin:4px 0 0;font-size:12px;line-height:1.5;color:var(--dsw-alias-label-tertiary)}
+.dsu-statusbar{display:flex;flex-wrap:wrap;gap:4px 8px;margin-top:8px;font-size:12px;line-height:1.5;color:var(--dsw-alias-label-tertiary)}
+.dsu-field{display:grid;grid-template-columns:minmax(0,1fr) minmax(240px,360px);column-gap:32px;align-items:center;padding:12px 0;border-top:.5px solid var(--dsw-alias-border-l2)}
+.dsu-fieldMeta{display:flex;flex-direction:column;gap:4px;min-width:0}
+.dsu-labelRow{display:flex;align-items:center;gap:6px;min-width:0}
+.dsu-label{font-size:13px;font-weight:500;line-height:1.5;color:var(--dsw-alias-label-primary)}
+.dsu-labelMono{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:12px}
+.dsu-hint{margin:0;font-size:12px;line-height:1.5;color:var(--dsw-alias-label-tertiary)}
+.dsu-control{min-width:0;display:flex;align-items:center;gap:8px}
+.dsu-fieldWide{grid-template-columns:minmax(0,1fr);align-items:start}
+.dsu-fieldWide .dsu-control{width:100%;max-width:720px;margin-top:2px}
+.dsu-help{display:inline-flex;align-items:center;gap:6px;min-width:0}
+.dsu-helpBtn{appearance:none;border:0;background:transparent;padding:0;width:16px;height:16px;display:inline-flex;align-items:center;justify-content:center;color:var(--dsw-alias-label-tertiary);cursor:help;border-radius:50%;flex:none}
+.dsu-help:hover .dsu-helpBtn,.dsu-helpBtn:focus-visible{color:var(--dsw-alias-label-primary)}
+.dsu-helpBtn:focus-visible{outline:2px solid var(--dsw-alias-state-business-primary);outline-offset:1px}
+.dsu-tip{position:fixed;z-index:60;box-sizing:border-box;max-width:min(340px,calc(100vw - 16px));max-height:calc(100vh - 16px);overflow:auto;overflow-wrap:anywhere;padding:10px 12px;border-radius:10px;background:var(--dsw-alias-bg-layer-2);border:.5px solid var(--dsw-alias-border-l3);box-shadow:0 12px 32px rgb(0 0 0 / 45%);font-size:12px;line-height:1.6;font-weight:400;color:var(--dsw-alias-label-secondary)}
+.dsu-input{width:100%;height:34px;padding:0 12px;border:.5px solid var(--dsw-alias-border-l4);border-radius:var(--dsw-radius-md);background:var(--dsw-alias-bg-layer-3);color:var(--dsw-alias-label-primary);font:inherit;font-size:13px}
+.dsu-input:focus-visible{outline:none;border-color:var(--dsw-alias-state-business-primary)}
+.dsu-input[aria-invalid="true"]{border-color:var(--dsw-alias-state-error-primary)}
+.dsu-input:disabled{color:var(--dsw-alias-label-tertiary);cursor:default}
+.dsu-input::placeholder{color:var(--dsw-alias-label-tertiary)}
+.dsu-textarea{height:auto;min-height:96px;padding:8px 12px;line-height:1.6;resize:vertical}
+.dsu-mono{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace}
+.dsu-numberWrap{display:flex;flex-direction:column;gap:4px;width:100%;min-width:0}
+.dsu-number{display:flex;align-items:center;gap:8px;min-width:0}
+.dsu-number .dsu-input{min-width:0}
+.dsu-unit{flex:none;font-size:12px;color:var(--dsw-alias-label-tertiary)}
+.dsu-error{margin:0;font-size:12px;line-height:1.5;color:var(--dsw-alias-state-error-primary)}
+.dsu-switch{appearance:none;width:36px;height:20px;border-radius:999px;border:0;padding:2px;background:var(--dsw-alias-border-l3);display:flex;align-items:center;cursor:pointer;flex:none;transition:background-color .16s}
+.dsu-knob{width:16px;height:16px;border-radius:50%;background:var(--dsw-alias-label-primary);transition:transform .16s,background-color .16s}
+.dsu-switch[aria-checked="true"]{background:var(--dsw-alias-label-primary)}
+.dsu-switch[aria-checked="true"] .dsu-knob{transform:translateX(16px);background:var(--dsw-alias-label-primary-foreground)}
+.dsu-switch:disabled{opacity:.4;cursor:not-allowed}
+.dsu-switch:focus-visible{outline:2px solid var(--dsw-alias-state-business-primary);outline-offset:2px}
+.dsu-selectWrap{position:relative;width:100%;min-width:0}
+.dsu-select{display:flex;align-items:center;justify-content:space-between;gap:8px;text-align:left;cursor:pointer}
+.dsu-select[aria-expanded="true"]{border-color:var(--dsw-alias-state-business-primary)}
+.dsu-selectValue{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.dsu-chevron{flex:none;color:var(--dsw-alias-label-tertiary);transition:transform .16s}
+.dsu-select[aria-expanded="true"] .dsu-chevron{transform:rotate(180deg)}
+.dsu-menu{position:fixed;z-index:70;padding:4px;background:var(--dsw-alias-bg-layer-2);border:.5px solid var(--dsw-alias-border-l3);border-radius:12px;box-shadow:0 12px 32px rgb(0 0 0 / 50%);max-height:280px;overflow:auto}
+.dsu-option{appearance:none;border:0;background:transparent;color:var(--dsw-alias-label-primary);font:inherit;font-size:13px;line-height:1.4;width:100%;display:flex;align-items:center;justify-content:space-between;gap:12px;padding:8px 10px;border-radius:8px;cursor:pointer;text-align:left}
+.dsu-option:hover,.dsu-option[data-active="true"]{background:var(--dsw-alias-bg-layer-3)}
+.dsu-option:disabled{color:var(--dsw-alias-label-tertiary);cursor:not-allowed}
+.dsu-option:focus-visible{outline:2px solid var(--dsw-alias-state-business-primary);outline-offset:-2px}
+.dsu-optionGroup{padding:6px 10px 2px;font-size:11px;font-weight:600;color:var(--dsw-alias-label-tertiary)}
+.dsu-check{opacity:0;flex:none}
+.dsu-option[aria-selected="true"] .dsu-check{opacity:1}
+.dsu-savebar{display:flex;align-items:center;gap:8px;padding:12px 0;margin-top:24px;border-top:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-base)}
+.dsu-savebar[data-dirty="true"]{position:sticky;bottom:0;z-index:2;box-shadow:0 -12px 24px rgb(0 0 0 / 35%)}
+.dsu-btn{appearance:none;border:.5px solid var(--dsw-alias-border-l2);background:transparent;color:var(--dsw-alias-label-primary);font:inherit;font-size:13px;line-height:1.5;border-radius:var(--dsw-radius-md);padding:5px 14px;cursor:pointer;transition:background-color .12s,border-color .12s,color .12s,filter .12s}
+.dsu-btn:hover:not(:disabled){background:var(--dsw-alias-bg-layer-2);border-color:var(--dsw-alias-border-l3)}
+.dsu-btn:active:not(:disabled){background:var(--dsw-alias-bg-layer-1)}
+.dsu-btn:focus-visible{outline:2px solid var(--dsw-alias-state-business-primary);outline-offset:1px}
+.dsu-btn:disabled{opacity:.4;cursor:not-allowed}
+.dsu-btnPrimary{background:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)}
+.dsu-btnPrimary:hover:not(:disabled){background:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-primary);filter:brightness(.9)}
+.dsu-btnPrimary:active:not(:disabled){background:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-primary);filter:brightness(.84)}
+.dsu-btnDanger{color:var(--dsw-alias-state-error-primary)}
+.dsu-btnDanger:hover:not(:disabled){color:var(--dsw-alias-state-error-primary);border-color:var(--dsw-alias-state-error-primary);background:var(--dsw-alias-bg-layer-2)}
+.dsu-status{margin-left:auto;font-size:12px;color:var(--dsw-alias-label-tertiary)}
+.dsu-statusError{color:var(--dsw-alias-state-error-primary)}
+.dsu-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(200px,100%),1fr));gap:0 24px}
+.dsu-grid>.dsu-field{display:flex;flex-direction:column;align-items:stretch;gap:6px;padding:10px 0;border-top:.5px solid var(--dsw-alias-border-l1)}
+.dsu-grid>.dsu-field .dsu-control{width:100%}
+@media (max-width:640px){
+  .dsu-field{grid-template-columns:minmax(0,1fr);align-items:start}
+  .dsu-control{width:100%;max-width:720px}
+  .dsu-section{margin-top:20px;padding-top:20px}
+}
+@media (prefers-reduced-motion:reduce){
+  .dsu-switch,.dsu-knob,.dsu-chevron,.dsu-btn{transition:none}
+}
+`;
+function l(e, t = 30) {
+	return e.length <= t ? { hint: e } : { detail: e };
+}
+function u(t) {
+	return (0, react.createElement)(`div`, { className: `dsu-form` }, t.children);
+}
+function d(t) {
+	return (0, react.createElement)(`section`, { className: `dsu-section` }, (0, react.createElement)(`h2`, { className: `dsu-sectionTitle` }, t.title), t.hint === void 0 ? null : (0, react.createElement)(`p`, { className: `dsu-sectionHint` }, t.hint), t.children);
+}
+function m(a) {
+	let c = (0, react.useId)(), [l, u] = (0, react.useState)(!1), [d, f] = (0, react.useState)(!1), p = (0, react.useRef)(!1), m = (0, react.useRef)(!1), h = (0, react.useRef)(!1), g = (0, react.useRef)(null), _ = (0, react.useRef)(null), v = (0, react.useRef)(null), y = (0, react.useCallback)(() => {
+		v.current !== null && (clearTimeout(v.current), v.current = null);
+	}, []), b = (0, react.useCallback)(() => {
+		let e = g.current, t = _.current;
+		/* v8 ignore next 3 -- place 只在 open 的 layout effect 与挂载期监听器里调用；refs 为空只可能是卸载竞态 */
+		if (e === null || t === null) return;
+		let n = e.getBoundingClientRect(), r = t.offsetWidth, i = t.offsetHeight, { left: a } = n, o = n.bottom + 8;
+		o + i > window.innerHeight - 8 && (o = n.top - i - 8), a + r > window.innerWidth - 8 && (a = window.innerWidth - r - 8);
+		let s = Math.max(8, window.innerWidth - r - 8), c = Math.max(8, window.innerHeight - i - 8);
+		t.style.left = `${Math.min(Math.max(8, a), s)}px`, t.style.top = `${Math.min(Math.max(8, o), c)}px`;
+	}, []), x = (0, react.useCallback)(() => {
+		y(), h.current = !1, f(!1), u(!1);
+	}, [y]), S = (0, react.useCallback)(() => {
+		y(), u(!0);
+	}, [y]), C = (0, react.useCallback)(() => {
+		y(), !(p.current || m.current || h.current) && (v.current = setTimeout(() => {
+			/* v8 ignore next 3 -- 任何重新进入/钉住都会 cancelHide；这次复查只防未来的异步路径 */
+			v.current = null, p.current || m.current || h.current || u(!1);
+		}, 120));
+	}, [y]), w = (0, react.useCallback)((e) => {
+		h.current = e, f(e);
+	}, []);
+	(0, react.useLayoutEffect)(() => {
+		if (!l) return () => {};
+		b();
+		let e = (e) => {
+			let { target: t } = e;
+			t instanceof Node && _.current?.contains(t) === !0 || (h.current ? b() : x());
+		}, t = () => {
+			b();
+		};
+		return window.addEventListener(`scroll`, e, !0), window.addEventListener(`resize`, t), () => {
+			window.removeEventListener(`scroll`, e, !0), window.removeEventListener(`resize`, t);
+		};
+	}, [
+		l,
+		a.detail,
+		b,
+		x
+	]), (0, react.useEffect)(() => {
+		if (!l) return () => {};
+		let e = (e) => {
+			e.key === `Escape` && x();
+		};
+		return document.addEventListener(`keydown`, e), () => {
+			document.removeEventListener(`keydown`, e);
+		};
+	}, [l, x]), (0, react.useEffect)(() => y, [y]);
+	let T = (0, react.createElement)(`button`, {
+		ref: g,
+		type: `button`,
+		className: `dsu-helpBtn`,
+		"aria-label": `${a.label} 说明`,
+		"aria-describedby": c,
+		"aria-pressed": d,
+		onClick: () => {
+			h.current ? x() : (w(!0), S());
+		}
+	}, (0, react.createElement)(`svg`, {
+		width: 12,
+		height: 12,
+		viewBox: `0 0 14 14`,
+		"aria-hidden": !0
+	}, (0, react.createElement)(`circle`, {
+		cx: 7,
+		cy: 7,
+		r: 6,
+		fill: `none`,
+		stroke: `currentColor`,
+		strokeWidth: 1.2
+	}), (0, react.createElement)(`path`, {
+		d: `M7 6.2v4`,
+		stroke: `currentColor`,
+		strokeWidth: 1.3,
+		strokeLinecap: `round`
+	}), (0, react.createElement)(`circle`, {
+		cx: 7,
+		cy: 4.3,
+		r: .8,
+		fill: `currentColor`
+	}))), E = (0, react.createElement)(`div`, {
+		ref: _,
+		id: c,
+		role: `tooltip`,
+		className: `dsu-tip`,
+		hidden: !l
+	}, a.detail), D = a.showLabel === !1 ? null : (0, react.createElement)(`span`, { className: `dsu-label${a.compact === !0 ? ` dsu-labelMono` : ``}` }, a.label);
+	return (0, react.createElement)(`span`, {
+		className: `dsu-help`,
+		onMouseEnter: () => {
+			p.current = !0, S();
+		},
+		onMouseLeave: () => {
+			p.current = !1, C();
+		},
+		onFocus: () => {
+			m.current = !0, S();
+		},
+		onBlur: (e) => {
+			let t = e.relatedTarget;
+			t instanceof Node && e.currentTarget.contains(t) || (m.current = !1, C());
+		}
+	}, D, T, E);
+}
+function h(t) {
+	let n = `dsu-label${t.compact === !0 ? ` dsu-labelMono` : ``}`, r = t.controlId === void 0 ? (0, react.createElement)(`span`, { className: n }, t.label) : (0, react.createElement)(`label`, {
+		className: n,
+		htmlFor: t.controlId
+	}, t.label);
+	return (0, react.createElement)(`div`, { className: `dsu-labelRow` }, r, t.detail === void 0 ? null : (0, react.createElement)(m, {
+		label: t.label,
+		detail: t.detail,
+		showLabel: !1
+	}));
+}
+function g(t) {
+	let n = t.controlId === void 0 ? void 0 : `${t.controlId}-hint`;
+	return (0, react.createElement)(`div`, { className: `dsu-field${t.wide === !0 ? ` dsu-fieldWide` : ``}` }, (0, react.createElement)(`div`, { className: `dsu-fieldMeta` }, (0, react.createElement)(h, {
+		label: t.label,
+		detail: t.detail,
+		compact: t.compact,
+		controlId: t.controlId
+	}), t.hint === void 0 ? null : (0, react.createElement)(`p`, {
+		className: `dsu-hint`,
+		id: n
+	}, t.hint)), (0, react.createElement)(`div`, { className: `dsu-control` }, t.children));
+}
+function _(t) {
+	let n = (0, react.useId)(), i = t.hint === void 0 ? void 0 : `${n}-hint`;
+	return (0, react.createElement)(g, {
+		...t,
+		controlId: n
+	}, (0, react.createElement)(`button`, {
+		type: `button`,
+		role: `switch`,
+		id: n,
+		className: `dsu-switch`,
+		"aria-checked": t.checked,
+		"aria-describedby": i,
+		"data-field": t.field,
+		disabled: t.disabled === !0,
+		onClick: () => {
+			t.onChange(!t.checked);
+		}
+	}, (0, react.createElement)(`span`, { className: `dsu-knob` })));
+}
+function v(t) {
+	let i = typeof t.value == `number` && Number.isFinite(t.value) ? String(t.value) : ``, [a, c] = (0, react.useState)(i), [l, u] = (0, react.useState)(!1), d = (0, react.useRef)(void 0), f = (0, react.useId)(), p = (0, react.useId)(), m = [t.hint === void 0 ? void 0 : `${f}-hint`, l ? p : void 0].filter((e) => e !== void 0), h = m.length === 0 ? void 0 : m.join(` `);
+	(0, react.useEffect)(() => {
+		t.value !== d.current && (d.current = t.value, c(i), u(!1));
+	}, [t.value, i]);
+	let _ = (e) => {
+		let n = t.min ?? -1 / 0, r = t.max ?? 1 / 0;
+		if (!Number.isFinite(e) || e < n || e > r) return !1;
+		let { step: i } = t;
+		if (i === void 0 || i <= 0) return !0;
+		let a = (e - (t.min ?? 0)) / i;
+		return Math.abs(a - Math.round(a)) < 1e-9;
+	}, v = (e) => {
+		if (c(e), e === ``) {
+			u(!1), d.current = void 0, t.onChange(void 0);
+			return;
+		}
+		let n = Number(e);
+		_(n) ? (u(!1), d.current = n, t.onChange(n)) : u(!0);
+	}, y = () => {
+		a === `` || l || c(String(Number(a)));
+	};
+	return (0, react.createElement)(g, {
+		...t,
+		controlId: f
+	}, (0, react.createElement)(`div`, { className: `dsu-numberWrap` }, (0, react.createElement)(`div`, { className: `dsu-number` }, (0, react.createElement)(`input`, {
+		className: `dsu-input`,
+		type: `number`,
+		inputMode: `numeric`,
+		id: f,
+		value: a,
+		min: t.min,
+		max: t.max,
+		step: t.step,
+		placeholder: t.placeholder,
+		"aria-invalid": l || void 0,
+		"aria-describedby": h,
+		"data-field": t.field,
+		disabled: t.disabled === !0,
+		onChange: (e) => {
+			v(e.target.value);
+		},
+		onBlur: y
+	}), t.unit === void 0 ? null : (0, react.createElement)(`span`, { className: `dsu-unit` }, t.unit)), l ? (0, react.createElement)(`p`, {
+		className: `dsu-error`,
+		id: p
+	}, t.invalidHint) : null));
+}
+function y(t) {
+	let [i, a] = (0, react.useState)(t.value), [o, c] = (0, react.useState)(!1), l = (0, react.useId)(), u = t.hint === void 0 ? void 0 : `${l}-hint`;
+	(0, react.useEffect)(() => {
+		o || a(t.value);
+	}, [t.value, o]);
+	let d = {
+		id: l,
+		className: `dsu-input${t.multiline === !0 ? ` dsu-textarea` : ``}${t.monospace === !0 ? ` dsu-mono` : ``}`,
+		value: i,
+		placeholder: t.placeholder,
+		"aria-describedby": u,
+		"data-field": t.field,
+		disabled: t.disabled === !0,
+		onFocus: () => {
+			c(!0);
+		},
+		onBlur: () => {
+			c(!1);
+		},
+		onChange: (e) => {
+			a(e.target.value), t.onChange(e.target.value);
+		}
+	};
+	return (0, react.createElement)(g, {
+		...t,
+		controlId: l
+	}, t.multiline === !0 ? (0, react.createElement)(`textarea`, d) : (0, react.createElement)(`input`, d));
+}
+function S(t) {
+	let n = !t.writable || t.busy || !t.dirty, r;
+	return r = t.error === null ? t.writable ? t.dirty ? t.dirtyLabel : t.cleanLabel : t.readOnlyLabel : t.error, (0, react.createElement)(`div`, {
+		className: `dsu-savebar`,
+		"data-dirty": t.dirty
+	}, (0, react.createElement)(`button`, {
+		type: `button`,
+		className: `dsu-btn dsu-btnPrimary`,
+		"data-field": `save`,
+		disabled: n,
+		onClick: t.onSave
+	}, t.busy ? t.savingLabel : t.saveLabel), (0, react.createElement)(`button`, {
+		type: `button`,
+		className: `dsu-btn`,
+		"data-field": `discard`,
+		disabled: n,
+		onClick: t.onDiscard
+	}, t.revertLabel), (0, react.createElement)(`span`, { className: t.error === null ? `dsu-status` : `dsu-status dsu-statusError` }, r));
+}
 // src/ui-messages.ts
 const UI_MESSAGES = {
 	zh: {
-		cardTitle: "quality-gate 回合收口质量门禁",
-		cardDescription: "回合收口质量门禁（ECC stop-format-typecheck 移植）：本回合编辑过代码文件时，收口前自动跑项目门禁（根 package.json 声明了 check 才用 pnpm check，否则 cargo check / ruff / tsc），失败自动开新回合注入修复指令；失败事实同步 lesson-loop 总线，记忆网关沉淀默认关闭",
 		statusReadOnly: "当前作用域只读",
-		statusDirty: "有未保存的修改，点「保存」生效",
 		statusClean: "无未保存的修改",
 		save: "保存",
 		saving: "保存中…",
 		revert: "撤销",
 		saveFailed: "保存失败：{message}",
 		saveRejected: "保存被宿主拒绝（配置校验未通过或写入被跳过），修改未生效",
+		invalidGatewayUrl: "网关地址不接受：不能带用户名/口令；远端地址必须是 https，明文 http 只允许本机回环",
+		invalidKeyRef: "凭据引用名不接受：只能由字母、数字、下划线组成，且不能以数字开头",
 		outOfRange: "超出允许范围，未保存",
+		gateSection: "门禁",
+		memorySection: "记忆反馈",
+		unitTimes: "次",
+		unitSeconds: "秒",
+		dirtyCount: "已修改 {count} 项",
 		enabledLabel: "启用质量门禁",
 		enabledHint: "关闭后回合收口不再跑门禁（模型可带病收口）",
-		injectsLabel: "每回合注入配额",
-		injectsHint: "门禁失败每回合最多注入几次修复指令（1-5，默认 2，防跑飞）",
-		budgetLabel: "门禁预算（毫秒）",
-		budgetHint: "单次门禁最大耗时（10s-600s，默认 300s；超时按失败注入不静默放行）",
+		injectsLabel: "每会话注入配额",
+		injectsHint: "门禁失败后最多注入几次修复指令；配额按会话累计，门禁通过后重置",
+		budgetLabel: "门禁总预算",
+		budgetHint: "一次回合内所有门禁共享的总耗时预算（多根均分）；超时按「未能执行」注入，不静默放行",
 		memoryLabel: "门禁失败沉淀记忆",
-		memoryHint: "默认关闭。开启后：代码型门禁失败的证据（命令/根/全文报错，不截断）写入记忆网关的 L0 会话层供后续会话召回；总线 lesson-loop 的同步上报不受此开关影响。关闭后只注入不沉淀。真正决定能否投递的是网关地址能否解析出值（见下面两项）",
+		memoryHint: "默认关闭。开启后：代码型门禁失败的证据（命令/根/全文报错，不截断）写入记忆网关的 L0 会话层供后续会话召回；总线 lesson-loop 的同步上报不受此开关影响。关闭后只注入不沉淀。投递要求网关地址与凭据引用都可用（见下面两项）",
 		gatewayUrlLabel: "记忆网关地址",
-		gatewayUrlHint: "插件不带任何默认地址：本机用户请填自己的网关地址（例如 http://127.0.0.1:8420），没有网关就让它空着。此项留空时回落到环境变量 TDAI_GATEWAY_URL，两处都空才算未配置、不启用记忆反馈",
+		gatewayUrlHint: "插件不带任何默认地址：本机用户请填自己的网关地址（例如 http://127.0.0.1:8420），没有网关就让它空着。此项留空时回落到环境变量 TDAI_GATEWAY_URL，两处都空才算未配置、不启用记忆反馈。远端地址必须 https，明文 http 只允许本机回环（127.0.0.0/8、::1、localhost）",
 		keyRefLabel: "网关密钥引用",
 		keyRefHint: "网关鉴权令牌的凭据引用名（环境变量名形态，默认 TDAI_GATEWAY_KEY）。这里存的只是引用名，密钥值由 dsh 凭据服务管理（Web 凭据页或 ~/.dsh/.credentials.yaml 的 refs），不会写进 settings.yaml；清空即恢复默认引用名，而不是停用记忆反馈"
 	},
 	en: {
-		cardTitle: "quality-gate turn-end quality gate",
-		cardDescription: "Turn-end quality gate (ported from ECC stop-format-typecheck): when this turn edited code files, the project gate runs automatically before the turn closes (pnpm check only if the root package.json declares a check script, otherwise cargo check / ruff / tsc); a failure opens a new turn with repair instructions. Failure facts are also reported to the lesson-loop bus; memory-gateway persistence is off by default",
 		statusReadOnly: "This scope is read-only",
-		statusDirty: "Unsaved changes — press Save to apply",
 		statusClean: "No unsaved changes",
 		save: "Save",
 		saving: "Saving…",
 		revert: "Revert",
 		saveFailed: "Save failed: {message}",
 		saveRejected: "Save rejected by the host (validation failed or write skipped) — changes not applied",
+		invalidGatewayUrl: "Gateway URL rejected: it must not embed credentials; remote addresses must use https, plain http is only allowed for loopback",
+		invalidKeyRef: "Credential reference rejected: use letters, digits and underscores only, and do not start with a digit",
 		outOfRange: "Out of the allowed range — not saved",
+		gateSection: "Gate",
+		memorySection: "Memory feedback",
+		unitTimes: "times",
+		unitSeconds: "seconds",
+		dirtyCount: "{count} changed",
 		enabledLabel: "Enable the quality gate",
 		enabledHint: "When off: no gate runs at turn end (the model may close a turn with broken code)",
-		injectsLabel: "Repair injections per turn",
-		injectsHint: "How many repair instructions a failing gate may inject per turn (1-5, default 2 — runaway protection)",
-		budgetLabel: "Gate budget (milliseconds)",
-		budgetHint: "Max duration of one gate run (10s-600s, default 300s; a timeout injects a failure instead of passing silently)",
+		injectsLabel: "Repair injections per session",
+		injectsHint: "How many repair instructions a failing gate may inject; the quota accumulates across turns in one session and resets after a clean gate pass",
+		budgetLabel: "Gate total budget",
+		budgetHint: "Shared time budget for all gates in one turn (split across project roots); a timeout is injected as \"could not run\", never as a silent pass",
 		memoryLabel: "Persist gate failures to memory",
-		memoryHint: "Off by default. When on: the evidence of code-level gate failures (command, root, full error text, untruncated) is written into the memory gateway's L0 session layer so later sessions can recall it; synchronous reporting to the lesson-loop bus is unaffected by this switch. When off, repairs are injected but nothing is persisted. Whether it can actually deliver is decided by the gateway URL resolving to a value (see the two fields below)",
+		memoryHint: "Off by default. When on: the evidence of code-level gate failures (command, root, full error text, untruncated) is written into the memory gateway's L0 session layer so later sessions can recall it; synchronous reporting to the lesson-loop bus is unaffected by this switch. When off, repairs are injected but nothing is persisted. Delivery requires both the gateway URL and the credential ref to be usable (see the two fields below)",
 		gatewayUrlLabel: "Memory gateway URL",
-		gatewayUrlHint: "The plugin ships no default address: fill in your own gateway URL (e.g. http://127.0.0.1:8420), or leave it empty if you have no gateway. When this is empty the TDAI_GATEWAY_URL environment variable is used instead; only when both are empty is memory feedback unconfigured and disabled",
+		gatewayUrlHint: "The plugin ships no default address: fill in your own gateway URL (e.g. http://127.0.0.1:8420), or leave it empty if you have no gateway. When this is empty the TDAI_GATEWAY_URL environment variable is used instead; only when both are empty is memory feedback unconfigured and disabled. Remote addresses must use https; plain http is only allowed for loopback (127.0.0.0/8, ::1, localhost)",
 		keyRefLabel: "Gateway credential ref",
 		keyRefHint: "Name of the credential holding the gateway token (POSIX env-var form, default TDAI_GATEWAY_KEY). Only the ref name is stored here — the secret itself is managed by the dsh credentials service (the web credentials page or the refs in ~/.dsh/.credentials.yaml) and never lands in settings.yaml; clearing it restores the default ref name rather than disabling memory feedback"
 	}
 };
+// lib/credential-url.ts
+/** IPv4 单段。 */
+const IPV4_OCTET = /^\d{1,3}$/u;
+/** IPv4-mapped IPv6 的字面前缀。 */
+const IPV4_MAPPED_PREFIX = "::ffff:";
+/**
+* 是否为 IPv4-mapped 的 IPv4 回环（`::ffff:127.0.0.0/8`，URL 会归一成 `::ffff:7fxx:xxxx`）。
+*
+* 必须按末 32 位的**实际数值**判，不能按字符串前缀 `::ffff:7f`：前缀命中的
+* `::ffff:7fa:0` 末 32 位是 0x07fa0000 = 7.250.0.0，并不在 127.0.0.0/8 里。按前缀放行
+* 等于把 Bearer 令牌发往远端明文 http，与本函数的安全承诺相反（fail-open 比不判更糟）。
+* 非规范的展开写法（如 `::ffff:0:7f00:1`）判否——fail-closed，可接受。
+*
+* @param host - `URL.hostname` 去掉方括号后的主机名
+* @returns 是否为 IPv4 回环的映射写法
+*/
+function isIpv4MappedLoopback(host) {
+	if (!host.startsWith(IPV4_MAPPED_PREFIX)) return false;
+	const segments = host.slice(7).split(":");
+	if (segments.length !== 2) return false;
+	const high = Number.parseInt(String(segments[0]), 16);
+	return high >= 32512 && high <= 32767;
+}
+/**
+* 是否为 IPv4 回环（127.0.0.0/8 整段，不只是 127.0.0.1）。
+*
+* @param host - `URL.hostname` 去掉方括号后的主机名
+* @returns 是否落在 127.0.0.0/8
+*/
+function isIpv4Loopback(host) {
+	const parts = host.split(".");
+	if (parts.length !== 4 || parts[0] !== "127") return false;
+	return parts.every((part) => IPV4_OCTET.test(part) && Number(part) <= 255);
+}
+/**
+* 凭据只允许发往 https 或回环地址：明文 http 到远端会把 Bearer 令牌暴露给同网段
+* （设置卡默认值就是本机 http，属有意用法）。地址里带 userinfo 一律判否——那是另一条
+* 会随 URL 一起写进设置文件的凭据形态，与本插件把密钥交给凭据服务的设计冲突。
+*
+* 回环按整段判定而不是三个字面量：IPv4 回环是 127.0.0.0/8，网关绑在 127.0.0.2 /
+* 127.0.1.1 时同样只在本机，判成"不安全"会让记忆反馈静默停掉、而用户从提示里看不出
+* 自己其实就在本机；IPv6 的 IPv4-mapped 写法（URL 把 `[::ffff:127.0.0.1]` 归一成
+* `[::ffff:7f00:1]`）同理。
+*
+* `localhost` 这一支是**有意保留的 fail-open**：它依赖 hosts/DNS 解析，hosts 被指向远端时
+* 本函数仍判安全。保留它是为了让设置卡的默认写法可用；要彻底关掉这个口子只能改成只认 IP
+* 字面量，那会让"本机网关"这条最常见用法需要用户自己去查 IP。
+*
+* @param url - 待判定的完整 URL
+* @returns 是否可以携带凭据发往该地址
+*/
+function isCredentialSafeUrl(url) {
+	let parsed;
+	try {
+		parsed = new URL(url);
+	} catch {
+		return false;
+	}
+	if (parsed.username !== "" || parsed.password !== "") return false;
+	if (parsed.protocol === "https:") return true;
+	if (parsed.protocol !== "http:") return false;
+	const host = parsed.hostname.replaceAll(/^\[|\]$/gu, "");
+	return host === "localhost" || isIpv4Loopback(host) || host === "::1" || isIpv4MappedLoopback(host);
+}
 // src/client-entry.ts
 const NS = "quality-gate";
 const BUNDLE_PKG = "@jayyuen66/dsh-quality-gate";
-const CARD_CSS = [
-	".qgc-card{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-3);border-radius:12px;list-style:none;transition:border-color .16s,background .16s}",
-	".qgc-card:hover{border-color:var(--dsw-alias-label-dimmed)}",
-	".qgc-card-open{background:var(--dsw-alias-bg-layer-2);border-color:var(--dsw-alias-label-dimmed)}",
-	".qgc-header{appearance:none;width:100%;font:inherit;color:inherit;text-align:left;cursor:pointer;background:transparent;border:0;border-radius:12px;align-items:center;gap:12px;padding:14px 16px;display:flex}",
-	".qgc-head{flex-direction:column;flex:1;gap:4px;min-width:0;display:flex}",
-	".qgc-name{color:var(--dsw-alias-label-primary);font-size:15px;font-weight:600;line-height:1.4}",
-	".qgc-desc{color:var(--dsw-alias-label-tertiary);font-size:13px;line-height:1.5}",
-	".qgc-chevron{color:var(--dsw-alias-label-tertiary);flex:none;transition:transform .16s}",
-	".qgc-chevron-open{transform:rotate(180deg)}",
-	".qgc-body{border-top:1px solid var(--dsw-alias-border-l2);margin:0 16px;padding:8px 0 12px}",
-	".qgc-row{display:flex;flex-direction:row;justify-content:space-between;align-items:center;gap:12px;padding:9px 0}",
-	".qgc-label{font-size:13px;color:var(--dsw-alias-label-primary,inherit)}",
-	".qgc-hint{font-size:12px;color:var(--dsw-alias-label-tertiary,#8a8f99);line-height:1.5;margin-top:2px}",
-	".qgc-switch{appearance:none;position:relative;width:34px;height:20px;border-radius:10px;background:var(--dsw-alias-fill-primary,#d8dbe2);transition:background .16s;cursor:pointer;border:0;flex:none}",
-	".qgc-switch::after{content:\"\";position:absolute;top:2px;left:2px;width:16px;height:16px;border-radius:50%;background:var(--dsw-alias-bg-layer-1,#fff);transition:left .16s}",
-	".qgc-switch-on{background:var(--dsw-alias-brand-primary,#e07856)}",
-	".qgc-switch-on::after{left:16px}",
-	".qgc-switch:disabled{cursor:not-allowed;opacity:.6}",
-	".qgc-input{width:100%;box-sizing:border-box;font:inherit;font-size:12px;color:var(--dsw-alias-label-primary,inherit);background:var(--dsw-alias-bg-layer-1,transparent);border:1px solid var(--dsw-alias-border-l2,transparent);border-radius:8px;padding:6px 8px;margin-top:4px}",
-	".qgc-savebar{display:flex;gap:8px;align-items:center;padding:10px 0 2px;border-top:1px dashed var(--dsw-alias-border-l2);margin-top:6px;flex-wrap:wrap}",
-	".qgc-btn{appearance:none;font:inherit;font-size:12px;cursor:pointer;border-radius:6px;padding:4px 12px;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1,transparent);color:var(--dsw-alias-label-primary,inherit)}",
-	".qgc-btn:hover:not(:disabled){border-color:var(--dsw-alias-label-dimmed)}",
-	".qgc-btn-primary{background:var(--dsw-alias-brand-primary,#e07856);border-color:var(--dsw-alias-brand-primary,#e07856);color:var(--dsw-alias-label-primary-foreground,#fff)}",
-	".qgc-btn:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#e07856);outline-offset:1px}",
-	".qgc-btn:disabled{opacity:.5;cursor:not-allowed}",
-	".qgc-dirty{font-size:12px;color:var(--dsw-alias-label-tertiary,#8a8f99)}",
-	".qgc-saveerr{font-size:12px;color:#c4483f}"
-].join("\n");
-function ToggleRow(props) {
-	return (0, react.createElement)("div", { className: "qgc-row" }, (0, react.createElement)("div", null, (0, react.createElement)("div", { className: "qgc-label" }, props.label), (0, react.createElement)("div", { className: "qgc-hint" }, props.hint)), (0, react.createElement)("button", {
-		type: "button",
-		className: `qgc-switch${props.checked ? " qgc-switch-on" : ""}`,
-		role: "switch",
-		"aria-checked": props.checked,
-		"data-field": props.field,
-		disabled: props.disabled === true,
-		onClick: props.onToggle
-	}));
-}
-/** 数字输入行：settings 数字字段 ↔ UI 字符串（v7 配置面补齐）。 */
-function NumberInputRow(props) {
-	const num = typeof props.value === "number" && Number.isFinite(props.value) ? String(props.value) : "";
-	const [text, setText] = (0, react.useState)(num);
-	const [invalid, setInvalid] = (0, react.useState)(false);
-	(0, react.useEffect)(() => {
-		setText(num);
-		setInvalid(false);
-	}, [num]);
-	const invalidHint = props.t("outOfRange");
-	return (0, react.createElement)("div", { className: "qgc-row" }, (0, react.createElement)("div", null, (0, react.createElement)("div", { className: "qgc-label" }, props.label), (0, react.createElement)("div", { className: "qgc-hint" }, props.hint), (0, react.createElement)("input", {
-		type: "number",
-		className: "qgc-input",
-		value: text,
-		disabled: props.disabled === true,
-		"aria-invalid": invalid || void 0,
-		onChange: (event) => {
-			const next = event.target.value;
-			setText(next);
-			if (next === "") {
-				setInvalid(false);
-				props.onClear(props.field);
-				return;
-			}
-			const numeric = Number(next);
-			if (!Number.isFinite(numeric)) {
-				setInvalid(true);
-				return;
-			}
-			const min = props.min ?? -Infinity;
-			const max = props.max ?? Infinity;
-			if (numeric >= min && numeric <= max) {
-				setInvalid(false);
-				props.onChange(props.field, numeric);
-			} else setInvalid(true);
-		}
-	}), invalid ? (0, react.createElement)("div", {
-		className: "qgc-hint",
-		style: { color: "var(--dsw-alias-danger, #e5484d)" }
-	}, invalidHint) : null));
-}
 /**
-* 文本输入行：settings 字符串字段 ↔ UI 字符串。
-* 清空 = unset（回到 schema 默认值）——对本卡的两个网关字段，默认值就是"留空 = 不启用"。
+* 两个数值字段的闭区间只写在 zod schema 上：host schema（`Schema.natural().min/max`）
+* 与卡片输入框都从这里取。zod 4.6 的 `.minValue`/`.maxValue` 直接读出折叠后的边界，
+* `NumberField` 的 `min/max` 因此不再另抄一份数字。
 */
-function TextInputRow(props) {
-	const text = typeof props.value === "string" ? props.value : "";
-	const [draft, setDraft] = (0, react.useState)(text);
-	(0, react.useEffect)(() => {
-		setDraft(text);
-	}, [text]);
-	return (0, react.createElement)("div", { className: "qgc-row" }, (0, react.createElement)("div", null, (0, react.createElement)("div", { className: "qgc-label" }, props.label), (0, react.createElement)("div", { className: "qgc-hint" }, props.hint), (0, react.createElement)("input", {
-		type: "text",
-		className: "qgc-input",
-		value: draft,
-		placeholder: props.placeholder ?? "",
-		disabled: props.disabled === true,
-		onChange: (event) => {
-			const next = event.target.value;
-			setDraft(next);
-			if (next.trim() === "") {
-				props.onClear(props.field);
-				return;
-			}
-			props.onChange(props.field, next.trim());
-		}
-	})));
+const MAX_INJECTS_VALUE = zod.z.int().min(1).max(5);
+const GATE_BUDGET_MS_VALUE = zod.z.int().min(1e4).max(6e5);
+/** 把 zod 折叠后的显式边界摊成可选 props（null = 该方向没声明，不伪造一个上限）。 */
+function boundsOf(schema) {
+	const bounds = {};
+	if (schema.minValue !== null) bounds.min = schema.minValue;
+	if (schema.maxValue !== null) bounds.max = schema.maxValue;
+	return bounds;
 }
-function SaveBar(props) {
-	const { t } = props;
-	const dis = !props.writable || props.busy;
-	let dirtyText;
-	if (props.writable) dirtyText = props.dirty ? t("statusDirty") : t("statusClean");
-	else dirtyText = t("statusReadOnly");
-	return (0, react.createElement)("div", { className: "qgc-savebar" }, (0, react.createElement)("button", {
-		type: "button",
-		className: "qgc-btn qgc-btn-primary",
-		"data-field": "save",
-		disabled: dis || !props.dirty,
-		onClick: props.onSave
-	}, props.busy ? t("saving") : t("save")), (0, react.createElement)("button", {
-		type: "button",
-		className: "qgc-btn",
-		"data-field": "discard",
-		disabled: dis || !props.dirty,
-		onClick: props.onDiscard
-	}, t("revert")), props.error === null ? (0, react.createElement)("span", { className: "qgc-dirty" }, dirtyText) : (0, react.createElement)("span", { className: "qgc-saveerr" }, props.error));
+const MAX_INJECTS_BOUNDS = boundsOf(MAX_INJECTS_VALUE);
+const GATE_BUDGET_MS_BOUNDS = boundsOf(GATE_BUDGET_MS_VALUE);
+/** 两个数值 schema 的对外投影：测试用 `.minValue`/`.maxValue` 与 `z.toJSONSchema` 钉边界。 */
+const CARD_NUMBER_SCHEMAS = {
+	maxInjectsPerTurn: MAX_INJECTS_VALUE,
+	gateBudgetMs: GATE_BUDGET_MS_VALUE
+};
+/** 版本可移植的闭区间整数判：宿主平台冻结的 zod（实测 4.4.3）没有 `.validate`
+*  （4.6 才回到 classic 面），判据用 `boundsOf` 折出的边界自持，不押 zod 的方法面——
+*  否则单仓测试（catalog 4.6.7）全绿、真宿主里槽位崩溃、设置表单静默消失。 */
+function inBounds(bounds, value) {
+	return Number.isInteger(value) && (bounds.min ?? Number.NEGATIVE_INFINITY) <= value && value <= (bounds.max ?? Number.POSITIVE_INFINITY);
+}
+/** 可选整数：越界/小数/非有限值折成 undefined，只丢那一格而不是整份快照。
+*  不引 `z.compile`：编译器给客户端 bundle 增约 28 KB，且 CSP 环境会拒绝 `new Function`；
+*  卡片每帧只解析一枚快照对象，收益抵不上这两条代价。 */
+const MAX_INJECTS_SCHEMA = zod.z.preprocess((value) => typeof value === "number" && inBounds(MAX_INJECTS_BOUNDS, value) ? value : void 0, MAX_INJECTS_VALUE.optional());
+const GATE_BUDGET_MS_SCHEMA = zod.z.preprocess((value) => typeof value === "number" && inBounds(GATE_BUDGET_MS_BOUNDS, value) ? value : void 0, GATE_BUDGET_MS_VALUE.optional());
+/** 卡片可编辑字段的值面。逐字段先把错误类型折成 undefined：宿主给了坏形状时只丢掉
+*  那一格，其余字段照常渲染；整份快照不是对象时才整体回落到空表。 */
+const optionalBoolean = zod.z.preprocess((value) => typeof value === "boolean" ? value : void 0, zod.z.boolean().optional());
+const optionalString = zod.z.preprocess((value) => typeof value === "string" ? value : void 0, zod.z.string().optional());
+/** 网关地址：必须是 http(s)，且与宿主运行期同一份判据——不能带 userinfo，远端只能 https，
+*  明文 http 只允许本机回环。空串与坏文本折成未设置。 */
+const optionalHttpUrl = zod.z.preprocess((value) => {
+	let text;
+	if (typeof value === "string") {
+		const trimmed = value.trim();
+		if (trimmed !== "") text = trimmed;
+	}
+	return text;
+}, zod.z.string().refine(isCredentialSafeUrl, { error: "credential-unsafe-url" }).optional());
+const CARD_VALUES = zod.z.object({
+	enabled: optionalBoolean,
+	maxInjectsPerTurn: MAX_INJECTS_SCHEMA,
+	gateBudgetMs: GATE_BUDGET_MS_SCHEMA,
+	memoryFeedback: optionalBoolean,
+	memoryGatewayUrl: optionalHttpUrl,
+	memoryGatewayKeyRef: optionalString
+});
+/** 草稿面仍按宽 string 读：`TextField` 没有 invalid 态，输入中的半截地址不会被当场折成空串；
+*  提交时由 `writeTouched` 用同一份凭据地址判据拦下，不合规的地址不落盘。 */
+const CARD_FIELD_SCHEMAS = {
+	enabled: optionalBoolean,
+	maxInjectsPerTurn: MAX_INJECTS_SCHEMA,
+	gateBudgetMs: GATE_BUDGET_MS_SCHEMA,
+	memoryFeedback: optionalBoolean,
+	memoryGatewayUrl: optionalString,
+	memoryGatewayKeyRef: optionalString
+};
+/** 快照值投影：逐字段解析；坏形状与越界值只折掉那一格，其余字段照常渲染。
+*  整份一次 `safeParse` 会让一个坏 URL 把 enabled 与两个数字字段一起清空。 */
+function projectCardValues(raw) {
+	const out = {};
+	for (const [field, schema] of Object.entries(CARD_VALUES.shape)) {
+		const parsed = schema.safeParse(raw[field]);
+		if (parsed.success) out[field] = parsed.data;
+	}
+	return out;
 }
 /** 值语义相等（与 shared 的 diffTouched 同口径）：表单值是标量与数组，引用相等会把等值数组判成改动。 */
 function sameValue(left, right) {
 	return JSON.stringify(left ?? null) === JSON.stringify(right ?? null);
 }
+/** 凭据引用名形状：与 @deepseek-ai/dsh-credentials 的 REF_PATTERN 同式。客户端不引该包的
+*  值导出（那是宿主侧凭据服务面），所以这里按同一正则复判；两处失配时宿主运行期仍会拒绝。 */
+const CREDENTIAL_REF_PATTERN = /^[A-Za-z_]\w*$/u;
 /**
 * 逐键 await 写入并**消费受理位**（0.1.7 的 set/unset 回 Promise<boolean>：
 * true=宿主受理；false=拒绝或写入被跳过（官方语义："refuses stale revisions"；
@@ -225,6 +578,16 @@ async function writeTouched(channels) {
 	try {
 		for (const key of keys) {
 			const val = touched[key];
+			if (key === "memoryGatewayUrl" && typeof val === "string" && val.trim() !== "" && !isCredentialSafeUrl(val.trim())) {
+				setBusy(false);
+				setSaveError(t("invalidGatewayUrl"));
+				return;
+			}
+			if (key === "memoryGatewayKeyRef" && typeof val === "string" && val.trim() !== "" && !CREDENTIAL_REF_PATTERN.test(val.trim())) {
+				setBusy(false);
+				setSaveError(t("invalidKeyRef"));
+				return;
+			}
 			if (!await (val === void 0 ? unset(key) : set(key, val))) {
 				setBusy(false);
 				setSaveError(t("saveRejected"));
@@ -243,162 +606,125 @@ async function writeTouched(channels) {
 		setSaveError(t("saveFailed", { message: String(error instanceof Error ? error.message : error) }));
 	}
 }
-/** 头部：渲染子树扁平化（规避 max-nested-calls）——DOM 各层拆成独立 createElement 元素
-*  const，逐层用变量组合，避免 createElement 回调逐层内嵌。 */
-function buildCardHeader(props) {
-	const { t, open, onToggle } = props;
-	const nameEl = (0, react.createElement)("div", { className: "qgc-name" }, t("cardTitle"));
-	const descEl = (0, react.createElement)("div", { className: "qgc-desc" }, t("cardDescription"));
-	const headDiv = (0, react.createElement)("div", { className: "qgc-head" }, nameEl, descEl);
-	const chevronPathData = "M3 5l4 4 4-4";
-	const chevronPath = (0, react.createElement)("path", {
-		["d"]: chevronPathData,
-		fill: "none",
-		stroke: "currentColor",
-		strokeWidth: 1.5,
-		strokeLinecap: "round",
-		strokeLinejoin: "round"
-	});
-	const chevron = (0, react.createElement)("svg", {
-		width: 14,
-		height: 14,
-		viewBox: "0 0 14 14",
-		"aria-hidden": true,
-		className: `qgc-chevron${open ? " qgc-chevron-open" : ""}`
-	}, chevronPath);
-	return (0, react.createElement)("button", {
-		type: "button",
-		className: "qgc-header",
-		"aria-expanded": open,
-		onClick: onToggle
-	}, headDiv, chevron);
-}
-/** 展开态的 `ul` 本体：行元素仍按从前的顺序逐个传给同一个 createElement（不折成数组
-*  子节点，保持宿主侧 children 形状一致）。 */
-function buildCardBody(props) {
-	const { t, writable, eff, setField, clearField, dirty, busy, saveError, onSave, onDiscard } = props;
-	const rowEnabled = (0, react.createElement)(ToggleRow, {
+/** 门禁小节：总开关 + 注入配额 + 预算（毫秒按秒显示）。 */
+function buildGateSection(props) {
+	const { t, writable, eff, setField } = props;
+	const maxInjects = eff("maxInjectsPerTurn");
+	const budgetMs = eff("gateBudgetMs");
+	const budgetSeconds = budgetMs === void 0 ? void 0 : budgetMs / 1e3;
+	const budgetMinSeconds = (GATE_BUDGET_MS_BOUNDS.min ?? 0) / 1e3;
+	const budgetMaxSeconds = (GATE_BUDGET_MS_BOUNDS.max ?? 0) / 1e3;
+	const enabled = (0, react.createElement)(_, {
 		label: t("enabledLabel"),
-		hint: t("enabledHint"),
+		...l(t("enabledHint")),
 		field: "enabled",
-		checked: eff("enabled") !== false,
+		checked: eff("enabled") ?? true,
 		disabled: !writable,
-		onToggle: () => {
-			setField("enabled", eff("enabled") === false);
+		onChange: (next) => {
+			setField("enabled", next);
 		}
 	});
-	const rowInjects = (0, react.createElement)(NumberInputRow, {
-		t,
+	const injects = (0, react.createElement)(v, {
 		label: t("injectsLabel"),
-		hint: t("injectsHint"),
+		...l(t("injectsHint")),
 		field: "maxInjectsPerTurn",
-		value: eff("maxInjectsPerTurn"),
+		value: maxInjects,
+		...MAX_INJECTS_BOUNDS,
+		step: 1,
+		unit: t("unitTimes"),
+		invalidHint: t("outOfRange"),
 		disabled: !writable,
-		onChange: (field, val) => {
-			setField(field, val);
-		},
-		onClear: (field) => {
-			clearField(field);
-		},
-		min: 1,
-		max: 5
+		onChange: (next) => {
+			setField("maxInjectsPerTurn", next);
+		}
 	});
-	const rowBudget = (0, react.createElement)(NumberInputRow, {
-		t,
+	const budget = (0, react.createElement)(v, {
 		label: t("budgetLabel"),
-		hint: t("budgetHint"),
+		...l(t("budgetHint")),
 		field: "gateBudgetMs",
-		value: eff("gateBudgetMs"),
+		value: budgetSeconds,
+		min: budgetMinSeconds,
+		max: budgetMaxSeconds,
+		step: 1,
+		unit: t("unitSeconds"),
+		invalidHint: t("outOfRange"),
 		disabled: !writable,
-		onChange: (field, val) => {
-			setField(field, val);
-		},
-		onClear: (field) => {
-			clearField(field);
-		},
-		min: 1e4,
-		max: 6e5
+		onChange: (next) => {
+			setField("gateBudgetMs", next === void 0 ? void 0 : next * 1e3);
+		}
 	});
-	const rowMemory = (0, react.createElement)(ToggleRow, {
+	return (0, react.createElement)(d, { title: t("gateSection") }, enabled, injects, budget);
+}
+/** 记忆反馈小节：开关 + 网关地址 + 密钥引用。 */
+function buildMemorySection(props) {
+	const { t, writable, eff, setField } = props;
+	const gatewayUrl = eff("memoryGatewayUrl") ?? "";
+	const keyRef = eff("memoryGatewayKeyRef") ?? "";
+	const memory = (0, react.createElement)(_, {
 		label: t("memoryLabel"),
-		hint: t("memoryHint"),
+		...l(t("memoryHint")),
 		field: "memoryFeedback",
 		checked: eff("memoryFeedback") === true,
 		disabled: !writable,
-		onToggle: () => {
-			setField("memoryFeedback", eff("memoryFeedback") !== true);
+		onChange: (next) => {
+			setField("memoryFeedback", next);
 		}
 	});
-	const rowGatewayUrl = (0, react.createElement)(TextInputRow, {
+	const url = (0, react.createElement)(y, {
 		label: t("gatewayUrlLabel"),
-		hint: t("gatewayUrlHint"),
+		...l(t("gatewayUrlHint")),
 		field: "memoryGatewayUrl",
-		value: eff("memoryGatewayUrl"),
+		value: gatewayUrl,
 		placeholder: "http://127.0.0.1:8420",
+		monospace: true,
 		disabled: !writable,
-		onChange: (field, val) => {
-			setField(field, val);
-		},
-		onClear: (field) => {
-			clearField(field);
+		onChange: (next) => {
+			setField("memoryGatewayUrl", next.trim() === "" ? void 0 : next.trim());
 		}
 	});
-	const rowGatewayKeyRef = (0, react.createElement)(TextInputRow, {
+	const keyRefField = (0, react.createElement)(y, {
 		label: t("keyRefLabel"),
-		hint: t("keyRefHint"),
+		...l(t("keyRefHint")),
 		field: "memoryGatewayKeyRef",
-		value: eff("memoryGatewayKeyRef"),
+		value: keyRef,
 		placeholder: "TDAI_GATEWAY_KEY",
+		monospace: true,
 		disabled: !writable,
-		onChange: (field, val) => {
-			setField(field, val);
-		},
-		onClear: (field) => {
-			clearField(field);
+		onChange: (next) => {
+			setField("memoryGatewayKeyRef", next.trim() === "" ? void 0 : next.trim());
 		}
 	});
-	const rowSave = (0, react.createElement)(SaveBar, {
-		t,
-		dirty,
-		writable,
-		busy,
-		error: saveError,
-		onSave,
-		onDiscard
-	});
-	return (0, react.createElement)("ul", { className: "qgc-body" }, rowEnabled, rowInjects, rowBudget, rowMemory, rowGatewayUrl, rowGatewayKeyRef, rowSave);
+	return (0, react.createElement)(d, { title: t("memorySection") }, memory, url, keyRefField);
 }
 function DgCard(props) {
-	const { t: t$1 } = props;
-	const [open, setOpen] = (0, react.useState)(false);
+	const { t } = props;
 	const snap = props.useCard((cardSnap) => cardSnap);
-	const { value } = snap;
+	const value = projectCardValues(snap.value);
 	const writable = snap.status === "ready" && snap.writable;
 	const [touched, setTouched] = (0, react.useState)({});
 	const [busy, setBusy] = (0, react.useState)(false);
 	const [saveError, setSaveError] = (0, react.useState)(null);
-	/** 渲染取值：touched 优先，快照兜底（未触碰字段实时跟随外部快照）。 */
-	const eff = (field) => field in touched ? touched[field] : value[field];
-	const dirty = t(touched, value).length > 0;
+	/** 渲染取值：touched 优先（经 zod 收窄），快照兜底（未触碰字段实时跟随外部快照）。 */
+	const eff = (field) => {
+		if (!(field in touched)) return value[field];
+		const parsedTouched = CARD_FIELD_SCHEMAS[field].safeParse(touched[field]);
+		return parsedTouched.success ? parsedTouched.data : void 0;
+	};
+	const dirtyKeys = t$1(touched, value);
+	const dirty = dirtyKeys.length > 0;
 	const setField = (field, val) => {
 		setTouched((prev) => ({
 			...prev,
 			[field]: val
 		}));
 	};
-	const clearField = (field) => {
-		setTouched((prev) => ({
-			...prev,
-			[field]: void 0
-		}));
-	};
 	const save = () => {
-		const keys = t(touched, value);
+		const keys = t$1(touched, value);
 		if (keys.length === 0) return;
 		setBusy(true);
 		setSaveError(null);
 		writeTouched({
-			t: t$1,
+			t,
 			set: props.set,
 			unset: props.unset,
 			keys,
@@ -412,26 +738,29 @@ function DgCard(props) {
 		setTouched({});
 		setSaveError(null);
 	};
-	const header = buildCardHeader({
-		t: t$1,
-		open,
-		onToggle: () => {
-			setOpen(!open);
-		}
-	});
-	const body = open ? buildCardBody({
-		t: t$1,
+	const inputs = {
+		t,
 		writable,
 		eff,
-		setField,
-		clearField,
+		setField
+	};
+	const gate = buildGateSection(inputs);
+	const memory = buildMemorySection(inputs);
+	const saveBar = (0, react.createElement)(S, {
 		dirty,
 		busy,
-		saveError,
+		writable,
+		error: saveError,
+		saveLabel: t("save"),
+		savingLabel: t("saving"),
+		revertLabel: t("revert"),
+		dirtyLabel: t("dirtyCount", { count: dirtyKeys.length }),
+		cleanLabel: t("statusClean"),
+		readOnlyLabel: t("statusReadOnly"),
 		onSave: save,
 		onDiscard: discard
-	}) : null;
-	return (0, react.createElement)("li", { className: `qgc-card${open ? " qgc-card-open" : ""}` }, header, body);
+	});
+	return (0, react.createElement)(u, null, gate, memory, saveBar);
 }
 function cardStore(scope) {
 	let cachedSnap = null;
@@ -467,8 +796,8 @@ const inject = [
 function apply(ctx) {
 	ctx.effect(() => {
 		const tag = document.createElement("style");
-		tag.id = "quality-gate-card-css";
-		tag.textContent = CARD_CSS;
+		tag.id = "dsh-card-ui-css-quality-gate";
+		tag.textContent = c;
 		document.head.append(tag);
 		return () => {
 			tag.remove();
@@ -491,8 +820,11 @@ function apply(ctx) {
 		}, DgCard);
 	});
 }
+exports.CARD_NUMBER_SCHEMAS = CARD_NUMBER_SCHEMAS;
 exports.apply = apply;
 exports.inject = inject;
+exports.projectCardValues = projectCardValues;
+exports.writeTouched = writeTouched;
     return module.exports;
   },
 });