@mzzsfy/dsh-shell-select 0.1.0 → 0.2.0

package/README.md

@@ -60,7 +60,7 @@ env 优先级(同键高右):内置覆盖集(NO_COLOR/PAGER/GIT_PAGER)< 条目 `e
 - 配置节顶层 `deny`:正则字符串数组,对模型提交的整条命令文本匹配(大小写不敏感),命中即拒绝——**deny 绝对,无豁免语义**;空数组 = 不拦截(出厂默认)。
 - 精细放行在模式内用正则前瞻表达:`deny: ['rm -rf\\s+(?!\\S*node_modules)']` 禁 rm -rf 但放行清依赖目录;默认放行系统下独立 allow 列表的唯一语义就是覆盖 deny,与"deny 绝对"矛盾,故不设。
 - 拦截点在执行器 runFor/startFor 入口:经 `ctx.shell` 代理的官方 pwsh 工具同样受管。拒绝以模型可见标记返回:`[blocked by shell-select: matches deny pattern …]`,后台任务在启动前同步拒绝,不产生僵尸任务。
-- 定位是防误触护栏而非安全边界:整文本正则挡不住间接包装(编码/嵌套壳),真正的边界始终是访问模式与沙箱。坏正则条目容错跳过,不瘫执行链;设置页多行文本域编辑(每行一条正则),保存时校验正则合法性。
+- 定位是防误触护栏而非安全边界:整文本正则挡不住间接包装(编码/嵌套壳),真正的边界始终是访问模式与沙箱。坏正则条目容错跳过,不瘫执行链;设置页为逐条规则编辑器(每条规则独立行,行级即时校验并标错,保存时按行定位拦截非法正则)。
 
 ### bash 形探测与 msys2
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mzzsfy/dsh-shell-select",
   "description": "Windows shell 接管:替换默认 pwsh 工具为可配置多客户端的 shell 工具(git bash/WSL/cmd/pwsh,自定义路径,默认客户端,模型按名选择)",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "type": "module",
   "main": "src/executor.mjs",
   "exports": {

package/src/client.js

@@ -84,6 +84,18 @@ window.__ModuleLoader__.load({
       '.sls-hint { font-size:12px; opacity:.7; }',
       '.sls-error { font-size:12px; color:#c44; white-space:pre-wrap; }',
       '.sls-args { font-size:12px; font-family:var(--sls-mono, monospace); }',
+      // 命令黑名单:逐条规则编辑器(每条规则独立行,行级即时校验)
+      '.sls-rules { display:flex; flex-direction:column; gap:6px; padding:10px; border:1px solid var(--sls-border, rgba(128,128,128,.35)); border-radius:8px; }',
+      '.sls-rules__head { display:flex; align-items:center; gap:8px; }',
+      '.sls-rules__title { font-weight:500; }',
+      '.sls-rules__note { font-size:12px; opacity:.7; }',
+      '.sls-rule { display:flex; align-items:center; gap:6px; }',
+      '.sls-rule__no { flex:none; width:18px; text-align:right; font-size:12px; opacity:.45; user-select:none; }',
+      '.sls-rule__input { flex:1; min-width:0; padding:4px 8px; border-radius:6px; border:1px solid var(--sls-border, rgba(128,128,128,.35)); background:transparent; color:inherit; font-size:12px; font-family:var(--sls-mono, monospace); }',
+      '.sls-rule__input:focus { outline:none; border-color:var(--sls-accent, #4b7bcc); }',
+      '.sls-rule--bad .sls-rule__input { border-color:#c44; }',
+      '.sls-rule__err { flex:none; max-width:40%; font-size:11px; color:#c44; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }',
+      '.sls-rule__del { flex:none; padding:2px 8px; }',
       // tool.call.toolview 卡片(key 'shell'):官方 terminal 行同构 + 复制/折行增强
       '.sls-tv { font-size:13px; line-height:1.45; }',
       '.sls-tv__row { display:flex; align-items:center; gap:7px; padding:2px 0; cursor:default; }',
@@ -142,7 +154,7 @@ window.__ModuleLoader__.load({
     }
 
     // 保存负载:仅取设置 schema 字段,剥离探测态
-    function toSection(entries, defaultId, denyText) {
+    function toSection(entries, defaultId, denyRules) {
       return {
         shells: entries.map((entry) => ({
           id: entry.id.trim(),
@@ -155,16 +167,25 @@ window.__ModuleLoader__.load({
           env: parseEnvText(entry.envText),
         })),
         default: defaultId,
-        deny: splitPatternLines(denyText),
+        deny: denyRules.filter((rule) => rule.length > 0),
       }
     }
 
-    // 名单文本(每行一正则)→ 数组;空行与纯空白行忽略
-    // LOGIC-BEGIN splitPatternLines
-    function splitPatternLines(text) {
-      return String(text ?? '').split('\n').map((line) => line.trim()).filter((line) => line.length > 0)
+    // 逐条规则的正则校验:返回非法条目 [{index, error}](index 为规则序,供行级标错与保存拦截复用)
+    // LOGIC-BEGIN denyPatternIssues
+    function denyPatternIssues(rules) {
+      const issues = []
+      for (let index = 0; index < rules.length; index += 1) {
+        if (rules[index].length === 0) continue
+        try {
+          new RegExp(rules[index])
+        } catch (error) {
+          issues.push({ index, error: String(error?.message ?? error) })
+        }
+      }
+      return issues
     }
-    // LOGIC-END splitPatternLines
+    // LOGIC-END denyPatternIssues
 
     // 环境文本(每行 K=V)→ 记录;空行与缺 = 的行忽略,值保留原样含空格与 =。
     // LOGIC-BEGIN parseEnvText
@@ -190,7 +211,7 @@ window.__ModuleLoader__.load({
     }
     // LOGIC-END invalidEnvLines
 
-    // 服务器清单 → 编辑态(argsText 汇成一串便于编辑;envText 每行 K=V;denyText 每行一正则)
+    // 服务器清单 → 编辑态(argsText 汇成一串便于编辑;envText 每行 K=V;deny 为逐条规则数组)
     function toEntries(section) {
       return section.shells.map((entry) => ({
         id: entry.id,
@@ -206,9 +227,9 @@ window.__ModuleLoader__.load({
       }))
     }
 
-    // 名单数组 → 每行一正则的编辑态文本
+    // 名单数组 → 编辑态数组(去空白行;加载侧解析)
     function patternText(list) {
-      return (Array.isArray(list) ? list : []).join('\n')
+      return (Array.isArray(list) ? list : []).map((rule) => String(rule).trim()).filter((rule) => rule.length > 0)
     }
 
     function ShellSelectApp() {
@@ -217,7 +238,7 @@ window.__ModuleLoader__.load({
       const [dirty, setDirty] = useState(false)
       const [notice, setNotice] = useState(null)
       const [busy, setBusy] = useState(false)
-      const [denyText, setDenyText] = useState('')
+      const [denyRules, setDenyRules] = useState([])
 
       useEffect(() => {
         let disposed = false
@@ -225,7 +246,7 @@ window.__ModuleLoader__.load({
           if (disposed) return
           setEntries(toEntries(section))
           setDefaultId(section.default)
-          setDenyText(patternText(section.deny))
+          setDenyRules(patternText(section.deny))
         }).catch((error) => {
           if (!disposed) setNotice('加载失败:' + error.message)
         })
@@ -251,11 +272,26 @@ window.__ModuleLoader__.load({
         if (defaultId === target.id) setDefaultId(entries.length > 1 ? entries[0].id : '')
       }
 
+      const patchRule = (index, value) => {
+        setDirty(true)
+        setDenyRules(denyRules.map((rule, at) => (at === index ? value : rule)))
+      }
+
+      const addRule = () => {
+        setDirty(true)
+        setDenyRules([...denyRules, ''])
+      }
+
+      const removeRule = (index) => {
+        setDirty(true)
+        setDenyRules(denyRules.filter((_, at) => at !== index))
+      }
+
       const save = async () => {
         setBusy(true)
         setNotice(null)
         try {
-          const section = toSection(entries, defaultId, denyText)
+          const section = toSection(entries, defaultId, denyRules)
           const ids = section.shells.map((entry) => entry.id)
           if (ids.some((id) => id.length === 0)) throw new Error('存在空 id 条目')
           if (new Set(ids).size !== ids.length) throw new Error('id 重复:' + ids.join(', '))
@@ -263,16 +299,14 @@ window.__ModuleLoader__.load({
           const invalid = entries.map((entry) => ({ entry, lines: invalidEnvLines(entry.envText) }))
             .find(({ lines }) => lines.length > 0)
           if (invalid !== undefined) throw new Error(`环境变量行缺少 =(条目 ${invalid.entry.id || '(未命名)'}):${invalid.lines.join(' ; ')}`)
-          const badPatterns = section.deny.filter((line) => {
-            try { new RegExp(line); return false } catch { return true }
-          })
-          if (badPatterns.length > 0) {
-            throw new Error(`拒绝名单正则非法:${badPatterns[0]}`)
+          const issue = denyPatternIssues(section.deny)[0]
+          if (issue !== undefined) {
+            throw new Error(`命令黑名单第 ${issue.index + 1} 条正则非法:${issue.error}`)
           }
           const payload = await api(API.config, { method: 'POST', body: JSON.stringify(section) })
           setEntries(toEntries({ shells: payload.resolved.shells }))
           setDefaultId(payload.resolved.default)
-          setDenyText(patternText(payload.resolved.deny))
+          setDenyRules(patternText(payload.resolved.deny))
           setDirty(false)
           setNotice('已保存,工具描述与默认客户端即时生效')
         } catch (error) {
@@ -427,15 +461,37 @@ window.__ModuleLoader__.load({
             }),
           ),
         )),
-        h('div', { className: 'sls-grid' },
-          h('span', { className: 'sls-grid__label' }, '拒绝名单'),
-          h('textarea', {
-            className: 'sls-input sls-args',
-            rows: 3,
-            value: denyText,
-            placeholder: '每行一条正则,命中的命令拒绝执行(绝对,无豁免);精细放行用前瞻,如 rm -rf\\s+(?!\\S*node_modules)',
-            onChange: (event) => { setDirty(true); setDenyText(event.target.value) },
-          }),
+        h('div', { className: 'sls-rules' },
+          h('div', { className: 'sls-rules__head' },
+            h('span', { className: 'sls-rules__title' }, '命令黑名单'),
+            h('span', { className: 'sls-badge' + (denyRules.length > 0 ? ' sls-badge--ok' : ' sls-badge--bad') },
+              denyRules.length > 0 ? denyRules.length + ' 条规则' : '未生效'),
+          ),
+          h('span', { className: 'sls-rules__note' },
+            '每条规则为一条正则,对整条命令全文匹配(大小写不敏感),命中即拒,无豁免;精细放行写在模式内用前瞻,如 rm -rf\\s+(?!\\S*node_modules)。'),
+          denyRules.length === 0
+            ? h('span', { className: 'sls-rules__note' }, '未配置,命中拦截不生效,模型可执行任意命令。')
+            : denyRules.map((rule, index) => {
+              const issue = denyPatternIssues([rule])[0]
+              return h('div', { className: 'sls-rule' + (issue !== undefined ? ' sls-rule--bad' : ''), key: index },
+                h('span', { className: 'sls-rule__no' }, index + 1),
+                h('input', {
+                  className: 'sls-rule__input',
+                  value: rule,
+                  placeholder: '正则,如 ^format\\s',
+                  onChange: (event) => patchRule(index, event.target.value),
+                }),
+                issue !== undefined ? h('span', { className: 'sls-rule__err', title: issue.error }, issue.error) : null,
+                h('button', {
+                  className: 'sls-btn sls-rule__del',
+                  title: '删除该条规则',
+                  onClick: () => removeRule(index),
+                }, '删除'),
+              )
+            }),
+          h('div', { className: 'sls-row' },
+            h('button', { className: 'sls-btn', onClick: addRule }, '添加规则'),
+          ),
         ),
         h('div', { className: 'sls-row' },
           h('button', { className: 'sls-btn', disabled: busy, onClick: addEntry }, '添加客户端'),

package/src/executor.mjs

@@ -83,8 +83,10 @@ function assertPositiveFinite(name, value) {
 }
 
 // yaml 无引号标量会把 `\` 字面落盘,任何一层再转义都让路径翻倍(C:\\ 实测):
-// 入口统一归一,保证进 schema 的 path 就是干净值
+// 入口统一归一,保证进 schema 的 path 就是干净值。
+// 仅 Windows 宿主生效:posix 路径以 / 分隔,归一会把合法路径毁成反斜杠字面(CI linux 实测)
 function normalizeWin32Path(path) {
+  if (process.platform !== 'win32') return path
   if (typeof path !== 'string' || path.length === 0) return path
   return path.replace(/\\{2,}/g, '\\').replace(/\//g, '\\')
 }

package/test/client-id.test.mjs

@@ -58,11 +58,40 @@ test('扩展字段守卫:login/distro/env 进设置页数据链(wholesale replac
   assert.match(source, /发行版/)
 })
 
-test('deny 名单进设置页数据链:state/toSection/校验/往返;allow 已移除(deny 绝对)', () => {
-  assert.match(source, /denyText/)
-  assert.match(source, /deny: splitPatternLines\(denyText\)/)
-  assert.match(source, /名单正则非法/)
-  assert.match(source, /拒绝名单/)
-  assert.doesNotMatch(source, /allowText/)
-  assert.doesNotMatch(source, /豁免名单/)
+test('deny 黑名单进设置页数据链:逐条规则编辑器(deny 绝对,allow 已移除)', () => {
+  // 数据链:state 数组 → 保存直落 deny;加载侧 patternText 按条解析(Trim 去空白)
+  assert.match(source, /denyRules/)
+  assert.match(source, /deny: denyRules/)
+  assert.match(source, /patternText\(section\.deny\)/)
+  // 行级即时校验 LOGIC 段 + 保存侧复用
+  assert.match(source, /denyPatternIssues/)
+  assert.match(source, /LOGIC-BEGIN denyPatternIssues/)
+  // 交互结构:规则行 + 删除 + 添加 + 空态提示
+  assert.match(source, /sls-rule/)
+  assert.match(source, /添加规则/)
+  assert.match(source, /未配置.*命中拦截不生效/)
+  // 术语与僵尸防线
+  assert.match(source, /命令黑名单/)
+  assert.doesNotMatch(source, /denyText/)
+  assert.doesNotMatch(source, /allowText|豁免名单|拒绝名单/)
 })
+
+// LOGIC 段行为测试:行级正则校验(提取形态照 client-card.test.mjs)
+function extractLogic(name) {
+  const pattern = new RegExp('// LOGIC-BEGIN ' + name + '\\n([\\s\\S]*?)\\n\\s*// LOGIC-END ' + name)
+  const match = source.match(pattern)
+  if (!match) throw new Error('client.js 缺少 LOGIC 段: ' + name)
+  return new Function('return (' + match[1].trim() + ')')()
+}
+
+test('denyPatternIssues:合法与空规则无问题', () => {
+  const issues = extractLogic('denyPatternIssues')(['^format\\s', 'rm -rf\\s+(?!\\S*node_modules)', ''])
+  assert.deepEqual(issues, [])
+})
+
+test('denyPatternIssues:非法规则定位到行(行号 = 规则序)', () => {
+  const issues = extractLogic('denyPatternIssues')(['^format\\s', 'rm -rf\\s+(?!', 'shutdown'])
+  assert.equal(issues.length, 1)
+  assert.equal(issues[0].index, 1)
+  assert.match(issues[0].error, /Invalid|regular|正则/)
+})

package/test/config-entry.test.mjs

@@ -31,7 +31,7 @@ test('S10 args 模板条目接管 argv,distro 不出现', () => {
 })
 
 test('S6 entryFor 透传 env 与 distro;spawnSpec env 含条目键', () => {
-  const cmdPath = `${process.env.SystemRoot ?? 'C:\\WINDOWS'}\\System32\\cmd.exe`
+  const cmdPath = process.execPath
   const config = Config({
     shells: [{ id: 'c', name: 'CMD', kind: 'cmd', path: cmdPath, env: { MSYSTEM: 'MINGW64' } }, { id: 'p', name: 'pwsh', kind: 'pwsh' }],
     default: 'c',

package/test/executor-seam.test.mjs

@@ -79,10 +79,25 @@ function shadow(executor) {
   return Object.create(executor)
 }
 
+
+// 跨平台显式 path:node 自身在所有平台存在,注入后 entryFor/listShells 不依赖真实 shell
+// (CI linux 无 pwsh/cmd/git-bash,出厂 auto 探测必失败)
+const NODE_EXE = process.execPath
+function baseConfig() {
+  return {
+    shells: [
+      { id: 'pwsh', name: 'PowerShell', kind: 'pwsh', path: NODE_EXE },
+      { id: 'git-bash', name: 'Git Bash', kind: 'bash', path: NODE_EXE },
+      { id: 'cmd', name: 'CMD', kind: 'cmd', path: NODE_EXE },
+    ],
+    default: 'pwsh',
+  }
+}
+
 test('官方 run seam:存在且走默认客户端,spec 已解析形态(danger 直跑)', async () => {
   const spawn = stubSpawn('seam-out', '')
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   assert.equal(typeof executor.run, 'function')
   const result = await executor.run(executor.resolve({ command: 'Get-Date', workdir: process.cwd() }))
   assert.equal(spawn.calls.length, 1)
@@ -94,7 +109,7 @@ test('官方 run seam:存在且走默认客户端,spec 已解析形态(danger
 test('官方 start seam:存在且返回 ShellProcess 形态句柄', async () => {
   const spawn = stubSpawn('bg', '')
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   assert.equal(typeof executor.start, 'function')
   const proc = executor.start(executor.resolve({ command: 'sleep 1', workdir: process.cwd() }))
   assert.equal(proc.status, 'running')
@@ -104,7 +119,7 @@ test('官方 start seam:存在且返回 ShellProcess 形态句柄', async () =>
 
 test('cordis 阴影 receiver:公开面调用不触发私有品牌错误', () => {
   const { ctx } = stubCtx()
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const mirrored = shadow(executor)
   // 官方 tool-pwsh 的调用面:resolve/run/start + apply 期 sandboxMode
   assert.doesNotThrow(() => mirrored.resolve({ command: 'x' }))
@@ -119,7 +134,7 @@ test('cordis 阴影 receiver:公开面调用不触发私有品牌错误', () =>
 test('cordis 阴影 receiver:受限模式 run 全链路(confine + 结果分类)', async () => {
   const spawn = stubSpawn('', 'file access denied here', 1)
   const { ctx } = stubCtx({ spawn, sandboxMode: 'read-only' })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const mirrored = shadow(executor)
   const result = await mirrored.run(mirrored.resolve({ command: 'dir', workdir: process.cwd() }))
   assert.equal(spawn.calls[0].argv[0], 'WRAPPED')
@@ -129,8 +144,8 @@ test('cordis 阴影 receiver:受限模式 run 全链路(confine + 结果分类)'
 
 test('sandboxMode:透出部署默认模式,策略缺席时 undefined', () => {
   const { ctx } = stubCtx({ sandboxMode: 'workspace-write' })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   assert.equal(executor.sandboxMode, 'workspace-write')
-  const bare = new ShellSelectExecutor({ ...ctx, sandboxPolicy: undefined }, {})
+  const bare = new ShellSelectExecutor({ ...ctx, sandboxPolicy: undefined }, baseConfig())
   assert.equal(bare.sandboxMode, undefined)
 })

package/test/executor.test.mjs

@@ -88,9 +88,23 @@ function stubCtx({ withSettings = true, sandboxMode = 'danger-full-access', spaw
   return { ctx, registered, disposers }
 }
 
+// 跨平台显式 path:node 自身在所有平台存在,注入后 entryFor/listShells 不依赖真实 shell
+// (CI linux 无 pwsh/cmd/git-bash,出厂 auto 探测必失败)
+const NODE_EXE = process.execPath
+function baseConfig() {
+  return {
+    shells: [
+      { id: 'pwsh', name: 'PowerShell', kind: 'pwsh', path: NODE_EXE },
+      { id: 'git-bash', name: 'Git Bash', kind: 'bash', path: NODE_EXE },
+      { id: 'cmd', name: 'CMD', kind: 'cmd', path: NODE_EXE },
+    ],
+    default: 'pwsh',
+  }
+}
+
 function build() {
   const { ctx, registered } = stubCtx()
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   return { executor, registered }
 }
 
@@ -111,7 +125,7 @@ test('构造:注册 shell 工具、systemPrompt 段、shell-select 设置节、
 
 test('settings 缺席:降级不 installSection,工具照常注册', () => {
   const { ctx, registered } = stubCtx({ withSettings: false })
-  new ShellSelectExecutor(ctx, {})
+  new ShellSelectExecutor(ctx, baseConfig())
   assert.equal(registered.sections.length, 0)
   assert.equal(registered.tools.length, 1)
 })
@@ -122,7 +136,7 @@ test('listShells:出厂条目自动解析为真实路径(pwsh/cmd 必在本机)'
   assert.equal(listing.default, 'pwsh')
   const pwsh = listing.shells.find((entry) => entry.id === 'pwsh')
   assert.equal(pwsh.available, true)
-  assert.match(pwsh.path, /pwsh\.exe$|powershell\.exe$/)
+  assert.equal(pwsh.path, NODE_EXE)
 })
 
 test('entryFor:缺省落 default;未知 id 报可用清单;坏路径条目报配置指引', () => {
@@ -148,7 +162,7 @@ test('resolve:预算字段生效,策略缺省落部署策略', () => {
 test('runFor danger 直跑:argv 按条目组装,不经 confine,stdout/stderr 回传', async () => {
   const spawn = stubSpawn('out-text', 'err-text')
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const entry = executor.entryFor('git-bash')
   const result = await executor.runFor(entry, executor.resolve({ command: 'ls -la', workdir: process.cwd() }))
   assert.equal(spawn.calls.length, 1)
@@ -161,7 +175,7 @@ test('runFor danger 直跑:argv 按条目组装,不经 confine,stdout/stderr 回
 test('deny 拦截:runFor 命中 deny 抛 DenyError 不 spawn', async () => {
   const spawn = stubSpawn('ok', '')
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, { deny: ['format '] })
+  const executor = new ShellSelectExecutor(ctx, { ...baseConfig(), deny: ['format '] })
   const entry = executor.entryFor('git-bash')
   await assert.rejects(
     () => executor.runFor(entry, executor.resolve({ command: 'format c: /q', workdir: process.cwd() })),
@@ -174,7 +188,7 @@ test('deny 拦截:runFor 命中 deny 抛 DenyError 不 spawn', async () => {
 test('deny 拦截:startFor 同样拒绝(后台入口)', () => {
   const spawn = stubSpawn('', '', 0)
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, { deny: ['shutdown'] })
+  const executor = new ShellSelectExecutor(ctx, { ...baseConfig(), deny: ['shutdown'] })
   const entry = executor.entryFor('cmd')
   assert.throws(
     () => executor.startFor(entry, executor.resolve({ command: 'shutdown /r', workdir: process.cwd() })),
@@ -186,7 +200,7 @@ test('deny 拦截:startFor 同样拒绝(后台入口)', () => {
 test('runFor 受限模式:经 confine 包装 argv,结果分类', async () => {
   const spawn = stubSpawn('', 'some file access denied happened', 1)
   const { ctx } = stubCtx({ spawn, sandboxMode: 'read-only' })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const entry = executor.entryFor('cmd')
   const result = await executor.runFor(entry, executor.resolve({ command: 'dir', workdir: process.cwd() }))
   assert.equal(spawn.calls[0].argv[0], 'WRAPPED')
@@ -199,7 +213,7 @@ test('runFor 受限模式:经 confine 包装 argv,结果分类', async () => {
 test('runFor pwsh 条目:非交互形 + 编码前缀进 argv', async () => {
   const spawn = stubSpawn()
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const entry = executor.entryFor('pwsh')
   await executor.runFor(entry, executor.resolve({ command: 'Get-Date', workdir: process.cwd() }))
   const argv = spawn.calls[0].argv
@@ -232,7 +246,7 @@ test('updateConfig:await settings.update 后读数即新值(setSource 接线)',
     scope.value = Config(section)
     registered.sectionsHook.onChange()
   }
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   assert.equal(executor.config.default, 'pwsh')
   await executor.updateConfig({ default: 'git-bash' })
   assert.equal(executor.config.default, 'git-bash')
@@ -245,7 +259,7 @@ test('updateConfig:部分补丁归并当前节后 replace(单改 default 不丢
   ctx.settings.replace = async (ns, section) => {
     written.push(section)
   }
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   await executor.updateConfig({ default: 'git-bash' })
   assert.equal(written[0].shells.length, 3)
   assert.equal(written[0].default, 'git-bash')
@@ -265,7 +279,7 @@ test('api POST config:await updateConfig,resolved 即新清单(async 修复)', a
     registered.sections[0].hooks.setSource(() => section)
     registered.sections[0].hooks.onChange()
   }
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const handler = ctx.__routes.find((r) => r.path === '/api/shell-select/config').handler
   let captured = null
   const fakeRes = {
@@ -291,12 +305,14 @@ test('api POST config:await updateConfig,resolved 即新清单(async 修复)', a
 })
 
 test('updateConfig:入参 path 反斜杠归一(防 yaml 无引号落盘字面翻倍)', async () => {
+  // 归一是 Windows 宿主行为(linux 无反斜杠翻倍怪癖,源码层按平台守卫)
+  if (process.platform !== 'win32') return
   const { ctx, registered } = stubCtx()
   const written = []
   ctx.settings.replace = async (ns, section) => {
     written.push(section)
   }
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   await executor.updateConfig({
     shells: [{ id: 'pwsh', name: 'PowerShell', kind: 'pwsh', path: 'C:\\\\WINDOWS\\\\System32\\\\powershell.exe' }],
   })
@@ -310,6 +326,7 @@ test('entryFor:双反斜杠污染路径被归一后仍可用', () => {
     shells: [{ id: 'pwsh', name: 'PowerShell', kind: 'pwsh', path: 'C:\\\\WINDOWS\\\\System32\\\\WindowsPowerShell\\\\v1.0\\\\powershell.exe' }],
     default: 'pwsh',
   })
+  if (process.platform !== 'win32') return
   const entry = polluted.entryFor(undefined)
   assert.equal(entry.path, 'C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe')
 })
@@ -318,29 +335,29 @@ test('entryFor:login 布尔透传,argv 产出 -lc(配置→执行全链)', async
   const ctx2 = stubCtx()
   const executor = new ShellSelectExecutor(ctx2.ctx, {
     shells: [
-      { id: 'm', name: 'MSYS2', kind: 'bash', path: 'C:\\Program Files\\Git\\bin\\bash.exe', login: true },
-      { id: 'g', name: 'Git Bash', kind: 'bash', path: 'C:\\Program Files\\Git\\bin\\bash.exe' },
+      { id: 'm', name: 'MSYS2', kind: 'bash', path: NODE_EXE, login: true },
+      { id: 'g', name: 'Git Bash', kind: 'bash', path: NODE_EXE },
     ],
     default: 'm',
   })
   const loginEntry = executor.entryFor('m')
   assert.equal(loginEntry.login, true)
-  assert.deepEqual(executor.argvFor(loginEntry, { command: 'uname -a' }).slice(0, 2), ['C:\\Program Files\\Git\\bin\\bash.exe', '-lc'])
+  assert.deepEqual(executor.argvFor(loginEntry, { command: 'uname -a' }).slice(0, 2), [NODE_EXE, '-lc'])
   const plainEntry = executor.entryFor('g')
   assert.equal(plainEntry.login, false)
-  assert.deepEqual(executor.argvFor(plainEntry, { command: 'uname -a' }).slice(0, 2), ['C:\\Program Files\\Git\\bin\\bash.exe', '-c'])
+  assert.deepEqual(executor.argvFor(plainEntry, { command: 'uname -a' }).slice(0, 2), [NODE_EXE, '-c'])
 })
 
 function stubCtxAndBuild() {
   const { ctx, registered } = stubCtx()
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   return { executor, registered }
 }
 
 test('startFor danger:返回进程句柄,readOutput 增量与 done 定局', async () => {
   const spawn = stubSpawn('bg-out', '')
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const proc = executor.startFor(executor.entryFor('pwsh'), executor.resolve({ command: 'sleep 1', workdir: process.cwd() }))
   assert.equal(proc.status, 'running')
   const first = proc.readOutput()