@mzzsfy/dsh-shell-select 0.1.0 → 0.3.0

package/README.md

@@ -6,7 +6,8 @@ Windows shell 链接管:禁用官方 `pwsh` 工具与执行器,替换为可配
 
 - bundle 补丁按 id 禁用官方 `tool-pwsh`、`pwsh-sandbox` 两行,插入本包主行(`ctx.shell` 执行器 + `shell` 工具 + 设置节 + 浏览器设置页路由)与 guard 哨兵行;卸载本包即补丁消失,官方行自动复位。
 - client 半区 `dsh.client.inject` 声明(官方机制,dsh-client-file-upload 等官方包同款):保证 client 运行时模块表中 `primitives`/`slots` 面在场;primitives 另有 try/catch 降级自绘兜底。
-- 本包执行器完整实现官方 `ctx.shell` seam(`resolve`/`run`/`start`/`runFor`/`startFor`/`entryFor`/`sandboxMode`),结构官方 PwshLocalExecutor 同构(实例状态/方法全公有——cordis 服务代理会把经 `ctx.shell` 调用的方法 `this` 重定向到阴影对象,`#` 私有触发品牌检查错误)。agent preset 注入的官方 `pwsh` 工具因此照常可用:经 `ctx.shell` 代理走默认客户端;`shell` 工具提供多客户端选择面。
+- 本包执行器完整实现官方 `ctx.shell` seam(`resolve`/`run`/`start`/`runFor`/`startFor`/`entryFor`/`sandboxMode`),结构官方 PwshLocalExecutor 同构(实例状态/方法全公有——cordis 服务代理会把经 `ctx.shell` 调用的方法 `this` 重定向到阴影对象,`#` 私有触发品牌检查错误)。
+- preset 面收口:web 面把 agent 平面后移到每会话 agent preset,内置 standard 预设在 win32 重新声明官方 `pwsh` 工具行,bundle 补丁对 preset 组合树不可达。本包自带预设 `shell-select`(standard 全量副本 − tool-pwsh 行,`presets/shell-select/`),经补丁覆写 `agent-presets` 行接入:win32 默认预设切到本包预设(POSIX 保持 standard,行为与上游一致),`roots` 指向本包 presets 目录;`agent-presets.default` 的 settings 值恒优先于补丁缺省,用户显式选择不被劫持。上游预设漂移由 `test/preset-drift.test.mjs` 逐行守卫,升级后按官方实文对表。
 - 沙箱语义官方同构:`danger-full-access` 直跑;受限模式经 `ctx.sandbox.confine` 包装并按官方方言分类拒绝/runner 失败,权限模型不变。
 - 死态自愈:用户 patch 层禁用主行的窗口内,guard 哨兵(id 含 `/`,市场不写该层)代挂官方 `dsh-tool-pwsh` + `dsh-pwsh-sandbox` 恢复 host 面服务与 boot 组合(预载失败退避重试,至多 3 次),任一方复活先卸代挂。哨兵/复活让位语义逐项同构 `dsh-llm-pi-gateway`。边界:cordis 服务按 fiber 树解析,代挂对 agent preset 作用域不可见,死态窗口新会话的 preset tool-pwsh 行拒挂(报错清晰)属预期。
 - POSIX 上本包全部行停用,官方 bash 链不受影响。
@@ -59,8 +60,8 @@ env 优先级(同键高右):内置覆盖集(NO_COLOR/PAGER/GIT_PAGER)< 条目 `e
 
 - 配置节顶层 `deny`:正则字符串数组,对模型提交的整条命令文本匹配(大小写不敏感),命中即拒绝——**deny 绝对,无豁免语义**;空数组 = 不拦截(出厂默认)。
 - 精细放行在模式内用正则前瞻表达:`deny: ['rm -rf\\s+(?!\\S*node_modules)']` 禁 rm -rf 但放行清依赖目录;默认放行系统下独立 allow 列表的唯一语义就是覆盖 deny,与"deny 绝对"矛盾,故不设。
-- 拦截点在执行器 runFor/startFor 入口:经 `ctx.shell` 代理的官方 pwsh 工具同样受管。拒绝以模型可见标记返回:`[blocked by shell-select: matches deny pattern …]`,后台任务在启动前同步拒绝,不产生僵尸任务。
-- 定位是防误触护栏而非安全边界:整文本正则挡不住间接包装(编码/嵌套壳),真正的边界始终是访问模式与沙箱。坏正则条目容错跳过,不瘫执行链;设置页多行文本域编辑(每行一条正则),保存时校验正则合法性。
+- 拦截点在执行器 runFor/startFor 入口:经 `ctx.shell` 代理的消费方(如 hooks 桥)与 preset 预设切换前的官方 pwsh 工具同样受管。拒绝以模型可见标记返回:`[blocked by shell-select: matches deny pattern …]`,后台任务在启动前同步拒绝,不产生僵尸任务。
+- 定位是防误触护栏而非安全边界:整文本正则挡不住间接包装(编码/嵌套壳),真正的边界始终是访问模式与沙箱。坏正则条目容错跳过,不瘫执行链;设置页为逐条规则编辑器(每条规则独立行,行级即时校验并标错,保存时按行定位拦截非法正则)。
 
 ### bash 形探测与 msys2
 

package/cordis.patch.yml

@@ -14,6 +14,17 @@
 # 哨兵自愈与复活让位语义逐项同构 packages/dsh-llm-pi-gateway 的 guard/takeover,
 # 差异仅两处:官方代挂对象为 tool-pwsh + pwsh-sandbox 两行;行配置读官方
 # `shell` settings 节(pwsh-sandbox 经其 Config 消费,保持官方 pwshPath 配置)。
+#
+# preset 面:web 面把 agent 平面后移到每会话 agent preset,内置 standard 预设
+# 在 win32 重新声明 tool-pwsh 行,bundle patch 对 preset 组合树不可达。收口方式:
+# 本包自带 preset(standard 全量副本 − tool-pwsh 行,见 presets/shell-select/),
+# 经 agent-presets 行覆写接入——roots 指向本包 presets 目录(default 'user' 承接
+# schema 缺省),default 在 win32 切到本包预设、POSIX 保持 standard(本包行在
+# POSIX 全停用,行为须与上游逐字一致)。路径表达式由 ctx.baseUrl(profile 目录)
+# 推 node_modules/@mzzsfy/dsh-shell-select/presets/:bundle 必经 profile node_modules
+# 解析(resolveBundleDir 顺序),本 patch 在执行即证目录在。default 仅为 settings
+# `agent-presets.default` 缺省(config.default 是其 base),用户显式选择恒优先;
+# 上游行更名/缺行时 patch 告警跳过,行为自然回落 standard。
 
 - id: pwsh-sandbox
   disabled: true
@@ -21,6 +32,13 @@
 - id: tool-pwsh
   disabled: true
 
+- id: agent-presets
+  name: '@deepseek-ai/dsh-agent-presets'
+  config:
+    default: !!js "process.platform === 'win32' ? 'shell-select' : 'standard'"
+    roots:
+      - path: !!js decodeURIComponent(new URL('node_modules/@mzzsfy/dsh-shell-select/presets/', ctx.baseUrl).pathname).replace(/^\/([A-Za-z]:)/, '$1')
+
 - insert:
     - id: shell-select
       name: '@mzzsfy/dsh-shell-select'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mzzsfy/dsh-shell-select",
   "description": "Windows shell 接管:替换默认 pwsh 工具为可配置多客户端的 shell 工具(git bash/WSL/cmd/pwsh,自定义路径,默认客户端,模型按名选择)",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "type": "module",
   "main": "src/executor.mjs",
   "exports": {
@@ -59,7 +59,8 @@
     "@deepseek-ai/dsh-subprocess": "0.1.5-rc.2",
     "@deepseek-ai/dsh-timeout": "0.1.5-rc.2",
     "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
-    "@deepseek-ai/schemastery": "3.18.2"
+    "@deepseek-ai/schemastery": "3.18.2",
+    "js-yaml": "4.3.2"
   },
   "files": [
     "src",

package/src/client.js

@@ -65,6 +65,31 @@ window.__ModuleLoader__.load({
       return payload
     }
 
+    // 工具卡客户端名册缓存:GET /config 单飞拉取,shell 徽章按 id→用户命名解析。
+    // 失败置 null(徽章不渲染),不重试——下次页面加载自然重取
+    let clientCatalog = null
+    let clientCatalogPromise = null
+    // LOGIC-BEGIN ensureClientCatalog
+    function ensureClientCatalog() {
+      if (clientCatalogPromise === null) {
+        clientCatalogPromise = api(API.config).then((section) => {
+          const byId = {}
+          for (const entry of section.resolved?.shells ?? []) byId[entry.id] = entry.name
+          clientCatalog = { default: section.resolved?.default, byId }
+        }).catch(() => { })
+      }
+      return clientCatalogPromise
+    }
+    // LOGIC-END ensureClientCatalog
+    // 显式 shell 参数按 id 取用户命名;缺省落 default 客户端的用户命名(配置即当前解析事实)
+    // LOGIC-BEGIN clientDisplayName
+    function clientDisplayName(requested) {
+      if (clientCatalog === null) return undefined
+      const id = requested !== undefined && requested !== '' ? requested : clientCatalog.default
+      return id !== undefined ? clientCatalog.byId[id] : undefined
+    }
+    // LOGIC-END clientDisplayName
+
     const CSS = [
       '.sls-card { display:flex; flex-direction:column; gap:10px; }',
       '.sls-row { display:flex; align-items:center; gap:8px; flex-wrap:wrap; }',
@@ -84,23 +109,38 @@ window.__ModuleLoader__.load({
       '.sls-hint { font-size:12px; opacity:.7; }',
       '.sls-error { font-size:12px; color:#c44; white-space:pre-wrap; }',
       '.sls-args { font-size:12px; font-family:var(--sls-mono, monospace); }',
-      // tool.call.toolview 卡片(key 'shell'):官方 terminal 行同构 + 复制/折行增强
-      '.sls-tv { font-size:13px; line-height:1.45; }',
+      // 命令黑名单:逐条规则编辑器(每条规则独立行,行级即时校验)
+      '.sls-rules { display:flex; flex-direction:column; gap:6px; padding:10px; border:1px solid var(--sls-border, rgba(128,128,128,.35)); border-radius:8px; }',
+      '.sls-rules__head { display:flex; align-items:center; gap:8px; }',
+      '.sls-rules__title { font-weight:500; }',
+      '.sls-rules__note { font-size:12px; opacity:.7; }',
+      '.sls-rule { display:flex; align-items:center; gap:6px; }',
+      '.sls-rule__no { flex:none; width:18px; text-align:right; font-size:12px; opacity:.45; user-select:none; }',
+      '.sls-rule__input { flex:1; min-width:0; padding:4px 8px; border-radius:6px; border:1px solid var(--sls-border, rgba(128,128,128,.35)); background:transparent; color:inherit; font-size:12px; font-family:var(--sls-mono, monospace); }',
+      '.sls-rule__input:focus { outline:none; border-color:var(--sls-accent, #4b7bcc); }',
+      '.sls-rule--bad .sls-rule__input { border-color:#c44; }',
+      '.sls-rule__err { flex:none; max-width:40%; font-size:11px; color:#c44; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }',
+      '.sls-rule__del { flex:none; padding:2px 8px; }',
+      // tool.call.toolview 卡片(key 'shell'):官方 terminal 行同构 + 复制/折行增强。
+      // 色彩对齐官方 ToolRow:标题 label-secondary、icon 盒 label-tertiary(实证自
+      // 官方行 computed style);token 缺失时回退 inherit 不致不可读
+      '.sls-tv { font-size:13px; line-height:1.45; color:var(--dsw-alias-label-secondary, inherit); }',
       '.sls-tv__row { display:flex; align-items:center; gap:7px; padding:2px 0; cursor:default; }',
       '.sls-tv__row--exp { cursor:pointer; user-select:none; }',
-      '.sls-tv__lead { display:flex; align-items:center; gap:4px; color:inherit; }',
+      '.sls-tv__lead { display:flex; align-items:center; gap:4px; color:var(--dsw-alias-label-tertiary, inherit); }',
       '.sls-tv__chev { opacity:.45; transition:transform .15s ease; }',
       '.sls-tv__row[data-open="1"] .sls-tv__chev { transform:rotate(-90deg); }',
       '.sls-tv__sr { position:absolute; width:1px; height:1px; overflow:hidden; clip:rect(0 0 0 0); }',
-      '.sls-tv__title { font-weight:500; }',
-      '.sls-tv__sep { width:3px; height:3px; border-radius:50%; background:currentColor; opacity:.35; flex:none; }',
-      '.sls-tv__sum { opacity:.6; white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }',
-      '.sls-tv__sum--err { color:#d4553f; opacity:.95; }',
+      '.sls-tv__title { font-weight:400; }',
+      '.sls-tv__sep { width:2px; height:2px; border-radius:1px; background:var(--dsw-alias-label-caption, currentColor); opacity:.8; flex:none; }',
+      '.sls-tv__sum { color:var(--dsw-alias-label-tertiary, inherit); white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }',
+      '.sls-tv__sum--err { color:var(--dsw-alias-state-error-primary, #d4553f); }',
       '.sls-tv__body { margin:6px 0 4px; border:1px solid rgba(128,128,128,.28); border-radius:8px; overflow:hidden; }',
       '.sls-tv__head { display:flex; align-items:center; gap:8px; padding:6px 10px; border-bottom:1px solid rgba(128,128,128,.18); background:rgba(128,128,128,.05); }',
       '.sls-tv__cwd { font-family:var(--sls-mono, monospace); font-size:12px; opacity:.7; }',
       '.sls-tv__badge { font-size:11px; padding:0 7px; border-radius:999px; border:1px solid rgba(128,128,128,.35); opacity:.85; flex:none; }',
       '.sls-tv__pill { font-size:12px; color:#d4553f; flex:none; }',
+      '.sls-tv__pill--bg { color:var(--dsw-alias-label-tertiary, inherit); }',
       '.sls-tv__sp { flex:1; }',
       '.sls-tv__copy { display:flex; align-items:center; gap:2px; flex:none; }',
       '.sls-tv__copyBtn { padding:2px 8px; border:1px solid rgba(128,128,128,.35); border-radius:6px; background:transparent; color:inherit; cursor:pointer; font-size:12px; }',
@@ -142,7 +182,7 @@ window.__ModuleLoader__.load({
     }
 
     // 保存负载:仅取设置 schema 字段,剥离探测态
-    function toSection(entries, defaultId, denyText) {
+    function toSection(entries, defaultId, denyRules) {
       return {
         shells: entries.map((entry) => ({
           id: entry.id.trim(),
@@ -155,16 +195,25 @@ window.__ModuleLoader__.load({
           env: parseEnvText(entry.envText),
         })),
         default: defaultId,
-        deny: splitPatternLines(denyText),
+        deny: denyRules.filter((rule) => rule.length > 0),
       }
     }
 
-    // 名单文本(每行一正则)→ 数组;空行与纯空白行忽略
-    // LOGIC-BEGIN splitPatternLines
-    function splitPatternLines(text) {
-      return String(text ?? '').split('\n').map((line) => line.trim()).filter((line) => line.length > 0)
+    // 逐条规则的正则校验:返回非法条目 [{index, error}](index 为规则序,供行级标错与保存拦截复用)
+    // LOGIC-BEGIN denyPatternIssues
+    function denyPatternIssues(rules) {
+      const issues = []
+      for (let index = 0; index < rules.length; index += 1) {
+        if (rules[index].length === 0) continue
+        try {
+          new RegExp(rules[index])
+        } catch (error) {
+          issues.push({ index, error: String(error?.message ?? error) })
+        }
+      }
+      return issues
     }
-    // LOGIC-END splitPatternLines
+    // LOGIC-END denyPatternIssues
 
     // 环境文本(每行 K=V)→ 记录;空行与缺 = 的行忽略,值保留原样含空格与 =。
     // LOGIC-BEGIN parseEnvText
@@ -190,7 +239,7 @@ window.__ModuleLoader__.load({
     }
     // LOGIC-END invalidEnvLines
 
-    // 服务器清单 → 编辑态(argsText 汇成一串便于编辑;envText 每行 K=V;denyText 每行一正则)
+    // 服务器清单 → 编辑态(argsText 汇成一串便于编辑;envText 每行 K=V;deny 为逐条规则数组)
     function toEntries(section) {
       return section.shells.map((entry) => ({
         id: entry.id,
@@ -206,9 +255,9 @@ window.__ModuleLoader__.load({
       }))
     }
 
-    // 名单数组 → 每行一正则的编辑态文本
+    // 名单数组 → 编辑态数组(去空白行;加载侧解析)
     function patternText(list) {
-      return (Array.isArray(list) ? list : []).join('\n')
+      return (Array.isArray(list) ? list : []).map((rule) => String(rule).trim()).filter((rule) => rule.length > 0)
     }
 
     function ShellSelectApp() {
@@ -217,7 +266,7 @@ window.__ModuleLoader__.load({
       const [dirty, setDirty] = useState(false)
       const [notice, setNotice] = useState(null)
       const [busy, setBusy] = useState(false)
-      const [denyText, setDenyText] = useState('')
+      const [denyRules, setDenyRules] = useState([])
 
       useEffect(() => {
         let disposed = false
@@ -225,7 +274,7 @@ window.__ModuleLoader__.load({
           if (disposed) return
           setEntries(toEntries(section))
           setDefaultId(section.default)
-          setDenyText(patternText(section.deny))
+          setDenyRules(patternText(section.deny))
         }).catch((error) => {
           if (!disposed) setNotice('加载失败:' + error.message)
         })
@@ -251,11 +300,26 @@ window.__ModuleLoader__.load({
         if (defaultId === target.id) setDefaultId(entries.length > 1 ? entries[0].id : '')
       }
 
+      const patchRule = (index, value) => {
+        setDirty(true)
+        setDenyRules(denyRules.map((rule, at) => (at === index ? value : rule)))
+      }
+
+      const addRule = () => {
+        setDirty(true)
+        setDenyRules([...denyRules, ''])
+      }
+
+      const removeRule = (index) => {
+        setDirty(true)
+        setDenyRules(denyRules.filter((_, at) => at !== index))
+      }
+
       const save = async () => {
         setBusy(true)
         setNotice(null)
         try {
-          const section = toSection(entries, defaultId, denyText)
+          const section = toSection(entries, defaultId, denyRules)
           const ids = section.shells.map((entry) => entry.id)
           if (ids.some((id) => id.length === 0)) throw new Error('存在空 id 条目')
           if (new Set(ids).size !== ids.length) throw new Error('id 重复:' + ids.join(', '))
@@ -263,16 +327,14 @@ window.__ModuleLoader__.load({
           const invalid = entries.map((entry) => ({ entry, lines: invalidEnvLines(entry.envText) }))
             .find(({ lines }) => lines.length > 0)
           if (invalid !== undefined) throw new Error(`环境变量行缺少 =(条目 ${invalid.entry.id || '(未命名)'}):${invalid.lines.join(' ; ')}`)
-          const badPatterns = section.deny.filter((line) => {
-            try { new RegExp(line); return false } catch { return true }
-          })
-          if (badPatterns.length > 0) {
-            throw new Error(`拒绝名单正则非法:${badPatterns[0]}`)
+          const issue = denyPatternIssues(section.deny)[0]
+          if (issue !== undefined) {
+            throw new Error(`命令黑名单第 ${issue.index + 1} 条正则非法:${issue.error}`)
           }
           const payload = await api(API.config, { method: 'POST', body: JSON.stringify(section) })
           setEntries(toEntries({ shells: payload.resolved.shells }))
           setDefaultId(payload.resolved.default)
-          setDenyText(patternText(payload.resolved.deny))
+          setDenyRules(patternText(payload.resolved.deny))
           setDirty(false)
           setNotice('已保存,工具描述与默认客户端即时生效')
         } catch (error) {
@@ -427,15 +489,37 @@ window.__ModuleLoader__.load({
             }),
           ),
         )),
-        h('div', { className: 'sls-grid' },
-          h('span', { className: 'sls-grid__label' }, '拒绝名单'),
-          h('textarea', {
-            className: 'sls-input sls-args',
-            rows: 3,
-            value: denyText,
-            placeholder: '每行一条正则,命中的命令拒绝执行(绝对,无豁免);精细放行用前瞻,如 rm -rf\\s+(?!\\S*node_modules)',
-            onChange: (event) => { setDirty(true); setDenyText(event.target.value) },
-          }),
+        h('div', { className: 'sls-rules' },
+          h('div', { className: 'sls-rules__head' },
+            h('span', { className: 'sls-rules__title' }, '命令黑名单'),
+            h('span', { className: 'sls-badge' + (denyRules.length > 0 ? ' sls-badge--ok' : ' sls-badge--bad') },
+              denyRules.length > 0 ? denyRules.length + ' 条规则' : '未生效'),
+          ),
+          h('span', { className: 'sls-rules__note' },
+            '每条规则为一条正则,对整条命令全文匹配(大小写不敏感),命中即拒,无豁免;精细放行写在模式内用前瞻,如 rm -rf\\s+(?!\\S*node_modules)。'),
+          denyRules.length === 0
+            ? h('span', { className: 'sls-rules__note' }, '未配置,命中拦截不生效,模型可执行任意命令。')
+            : denyRules.map((rule, index) => {
+              const issue = denyPatternIssues([rule])[0]
+              return h('div', { className: 'sls-rule' + (issue !== undefined ? ' sls-rule--bad' : ''), key: index },
+                h('span', { className: 'sls-rule__no' }, index + 1),
+                h('input', {
+                  className: 'sls-rule__input',
+                  value: rule,
+                  placeholder: '正则,如 ^format\\s',
+                  onChange: (event) => patchRule(index, event.target.value),
+                }),
+                issue !== undefined ? h('span', { className: 'sls-rule__err', title: issue.error }, issue.error) : null,
+                h('button', {
+                  className: 'sls-btn sls-rule__del',
+                  title: '删除该条规则',
+                  onClick: () => removeRule(index),
+                }, '删除'),
+              )
+            }),
+          h('div', { className: 'sls-row' },
+            h('button', { className: 'sls-btn', onClick: addRule }, '添加规则'),
+          ),
         ),
         h('div', { className: 'sls-row' },
           h('button', { className: 'sls-btn', disabled: busy, onClick: addEntry }, '添加客户端'),
@@ -536,27 +620,31 @@ window.__ModuleLoader__.load({
       } catch { /* 结构外形态走 generic */ }
       const command = typeof args?.command === 'string' && args.command.trim() !== '' ? args.command : ''
       const description = typeof args?.description === 'string' && args.description.trim() !== '' ? args.description : undefined
-      const cwdDir = (() => {
-        const dir = displayCwd(typeof args?.workdir === 'string' ? args.workdir : undefined, sessionCwd)
-        return dir !== undefined ? lastSegment(dir) : undefined
-      })()
-      const shellName = typeof args?.shell === 'string' && args.shell !== '' ? args.shell : undefined
+      const cwdFull = displayCwd(typeof args?.workdir === 'string' ? args.workdir : undefined, sessionCwd)
+      const cwdDir = cwdFull !== undefined ? lastSegment(cwdFull) : undefined
+      // shell 名 = 用户在配置页起的条目名;args.shell 缺省时按 default 客户端解析(配置当前读数)
+      const shellName = clientDisplayName(typeof args?.shell === 'string' ? args.shell : undefined)
       if (command === '') return { kind: 'generic', command: '', summary: undefined, output: null }
 
       if (!settled) {
         // running persistent(进行中无描述):回退行但状态点用进行中灰,非 warning 黄
         if (description === undefined) return { kind: 'generic', command, summary: undefined, output: null, running: true }
-        return { kind: 'terminal', status: 'running', command, description, cwdDir, shellName, output: undefined, exitCode: undefined, signal: undefined, code: undefined }
+        return { kind: 'terminal', status: 'running', command, description, cwdDir, cwdFull, shellName, output: undefined, exitCode: undefined, signal: undefined, code: undefined }
       }
 
       const contentText = (block.content ?? []).map((part) => (part.type === 'text' ? part.text : '')).filter((text) => text !== '').join('\n')
+      // 后台 ack:独立卡呈现命令全文与任务号徽标,ack 原文作输出(不再落 generic 简版行)
+      if (args.run_in_background === true) {
+        const jobId = /started background job (\S+)/.exec(contentText)?.[1]
+        return { kind: 'background', status: 'background', command, description, cwdDir, cwdFull, shellName, output: contentText, jobId }
+      }
       // 空结果落 generic:官方 singleResultText 无文本即回通用卡,避免空输出伪 done 终端卡
-      if (contentText === '' || block.isError === true || block.error !== undefined || args.run_in_background === true || description === undefined || hasSpillNotice(contentText)) {
+      if (contentText === '' || block.isError === true || block.error !== undefined || description === undefined || hasSpillNotice(contentText)) {
         return { kind: 'generic', command, summary: description, output: contentText }
       }
       const tail = parseExitTail(contentText)
       const status = tail.signal !== undefined ? 'signaled' : tail.exitCode !== 0 ? 'failed' : 'done'
-      return { kind: 'terminal', status, command, description, cwdDir, shellName, output: tail.output, exitCode: tail.exitCode, signal: tail.signal, code: undefined }
+      return { kind: 'terminal', status, command, description, cwdDir, cwdFull, shellName, output: tail.output, exitCode: tail.exitCode, signal: tail.signal, code: undefined }
     }
     // LOGIC-END shellCardModel
 
@@ -571,6 +659,7 @@ window.__ModuleLoader__.load({
     function statusTextOf(status, en) {
       switch (status) {
         case 'running': return en ? 'Running' : '运行中'
+        case 'background': return en ? 'Background' : '后台运行'
         case 'failed': case 'signaled': return en ? 'Failed' : '失败'
         default: return null
       }
@@ -579,6 +668,12 @@ window.__ModuleLoader__.load({
     function headMetaOf(model, en) {
       switch (model.status) {
         case 'running': return { dot: 'ongoing', label: en ? 'Running' : '运行中', pill: undefined }
+        case 'background': return {
+          dot: 'ongoing',
+          label: en ? 'Background' : '后台运行',
+          pill: model.jobId !== undefined ? (en ? `bg ${model.jobId}` : `后台 ${model.jobId}`) : undefined,
+          pillTone: 'bg',
+        }
         case 'done': return { dot: 'done', label: en ? 'Done' : '已完成', pill: undefined }
         case 'failed': return { dot: 'error', label: en ? 'Failed' : '失败', pill: en ? `exit ${model.exitCode}` : `退出码 ${model.exitCode}` }
         case 'signaled': return { dot: 'error', label: en ? 'Failed' : '失败', pill: en ? `signal ${model.signal}` : `信号 ${model.signal}` }
@@ -659,10 +754,10 @@ window.__ModuleLoader__.load({
             TOOLVIEW_ICONS.StateDot({ state: meta.dot }),
             h('span', { className: 'sls-tv__sr' }, meta.label),
           ),
-          model.cwdDir !== undefined ? h('span', { className: 'sls-tv__cwd' }, model.cwdDir) : null,
-          model.shellName !== undefined ? h('span', { className: 'sls-tv__badge' }, model.shellName) : null,
+          model.cwdDir !== undefined ? h('span', { className: 'sls-tv__cwd', title: 'pwd: ' + (model.cwdFull ?? model.cwdDir) }, model.cwdDir) : null,
+          model.shellName !== undefined ? h('span', { className: 'sls-tv__badge', title: en ? 'Shell client' : 'Shell 客户端' }, model.shellName) : null,
           h('span', { className: 'sls-tv__sp' }),
-          meta.pill !== undefined ? h('span', { className: 'sls-tv__pill' }, meta.pill) : null,
+          meta.pill !== undefined ? h('span', { className: 'sls-tv__pill' + (meta.pillTone === 'bg' ? ' sls-tv__pill--bg' : '') }, meta.pill) : null,
           h('span', { className: 'sls-tv__copy' },
             h(CopyButton, {
               label: copyCommandLabel,
@@ -687,8 +782,15 @@ window.__ModuleLoader__.load({
     function ShellToolRow(props) {
       const { block, cwd, inspect } = props
       const en = detectEnglish()
-      const [open, setOpen] = useState(false)
       const model = shellCardModel(block, cwd)
+      // 后台 ack 卡默认展开:内容即命令全文,收起只剩一行摘要失去可读性
+      const [open, setOpen] = useState(model.kind === 'background')
+      const [, setCatalogReady] = useState(false)
+      useEffect(() => {
+        let disposed = false
+        ensureClientCatalog().then(() => { if (!disposed) setCatalogReady(true) })
+        return () => { disposed = true }
+      }, [])
       if (model.kind === 'generic') return h(GenericShellRow, { model, inspect, en })
       const expandable = true
       const srStatus = statusTextOf(model.status, en)

package/src/executor.mjs

@@ -83,8 +83,10 @@ function assertPositiveFinite(name, value) {
 }
 
 // yaml 无引号标量会把 `\` 字面落盘,任何一层再转义都让路径翻倍(C:\\ 实测):
-// 入口统一归一,保证进 schema 的 path 就是干净值
+// 入口统一归一,保证进 schema 的 path 就是干净值。
+// 仅 Windows 宿主生效:posix 路径以 / 分隔,归一会把合法路径毁成反斜杠字面(CI linux 实测)
 function normalizeWin32Path(path) {
+  if (process.platform !== 'win32') return path
   if (typeof path !== 'string' || path.length === 0) return path
   return path.replace(/\\{2,}/g, '\\').replace(/\//g, '\\')
 }

package/test/client-card.test.mjs

@@ -18,10 +18,16 @@ function extractLogic(name, deps = {}) {
   return new Function(...keys, 'return (' + match[1].trim() + ')')(...keys.map((key) => deps[key]))
 }
 
-function cardModel() {
+function cardModel(catalog = null) {
   const lastSegment = extractLogic('lastSegment')
   const displayCwd = extractLogic('displayCwd', { lastSegment })
-  return extractLogic('shellCardModel', { displayCwd, lastSegment, parseExitTail: extractLogic('parseExitTail'), hasSpillNotice: extractLogic('hasSpillNotice') })
+  return extractLogic('shellCardModel', {
+    displayCwd,
+    lastSegment,
+    parseExitTail: extractLogic('parseExitTail'),
+    hasSpillNotice: extractLogic('hasSpillNotice'),
+    clientDisplayName: extractLogic('clientDisplayName', { clientCatalog: catalog }),
+  })
 }
 
 function parseEnvText() {
@@ -77,14 +83,63 @@ test('S12b running 完整参数:terminal running 卡', () => {
   assert.equal(model.status, 'running')
 })
 
-test('S12c 后台 ack 与 isError 仍走 generic(回归)', () => {
-  const background = cardModel()(
-    settledBlock(JSON.stringify({ ...JSON.parse(ARGS), run_in_background: true }), 'started', { isError: false }),
-    SESSION_CWD,
-  )
-  assert.equal(background.kind, 'generic')
+test('S15 shell 徽章命名:显式参数按 id 取用户命名,缺省落 default 客户端命名', () => {
+  const catalog = { default: 'git-bash', byId: { 'git-bash': 'Git Bash', pwsh: 'PowerShell' } }
+  const explicit = cardModel(catalog)(
+    settledBlock(JSON.stringify({ command: 'ls', description: 'list', shell: 'pwsh' }), 'out\n[exit code: 0]'), SESSION_CWD)
+  assert.equal(explicit.shellName, 'PowerShell')
+  const fallback = cardModel(catalog)(
+    settledBlock(ARGS, 'out\n[exit code: 0]'), SESSION_CWD)
+  assert.equal(fallback.shellName, 'Git Bash')
+  const unknown = cardModel(catalog)(
+    settledBlock(JSON.stringify({ command: 'ls', description: 'list', shell: 'ghost' }), 'out\n[exit code: 0]'), SESSION_CWD)
+  assert.equal(unknown.shellName, undefined)
+})
+
+test('S15b cwd 悬浮全路径:model 携带 cwdFull', () => {
+  const model = cardModel()(
+    settledBlock(JSON.stringify({ command: 'git status', description: 'Show working tree status', workdir: 'sub' }), 'out\n[exit code: 0]'), SESSION_CWD)
+  assert.equal(model.cwdDir, 'sub')
+  assert.equal(model.cwdFull, 'C:\\repo\\sub')
+  const noWorkdir = cardModel()(
+    settledBlock(JSON.stringify({ command: 'git status', description: 'Show working tree status' }), 'out\n[exit code: 0]'), SESSION_CWD)
+  assert.equal(noWorkdir.cwdFull, SESSION_CWD)
+})
+
+test('S16 cwd 悬浮说明:可见文本为 basename,title 为 pwd: + 全路径(渲染守卫)', () => {
+  // BDD:Given shell 调用带 workdir,When 悬浮 cwd 元数据,Then 可见文本为 basename,title 为 'pwd: <全路径>' 单段说明
+  assert.match(source, /title: 'pwd: ' \+ \(model\.cwdFull \?\? model\.cwdDir\)/)
+  assert.match(source, /\}, model\.cwdDir\)/)
+})
+
+test('S17 后台 ack:派生 background 卡,命令在场且解析出 jobId', () => {
+  // BDD:Given run_in_background 调用已定,When 派生卡片模型,Then kind=background,jobId 取自 ack 标记,命令与 ack 原文保留
+  const model = cardModel()(settledBlock(
+    JSON.stringify({ command: 'node server.js', description: 'Boot server', run_in_background: true }),
+    'started background job shell-11'), SESSION_CWD)
+  assert.equal(model.kind, 'background')
+  assert.equal(model.jobId, 'shell-11')
+  assert.equal(model.command, 'node server.js')
+  assert.equal(model.output, 'started background job shell-11')
+})
+
+test('S17b 后台 ack 异常文本:仍 background,jobId 缺省不冒充', () => {
+  const model = cardModel()(settledBlock(
+    JSON.stringify({ command: 'x', description: 'd', run_in_background: true }), 'other'), SESSION_CWD)
+  assert.equal(model.kind, 'background')
+  assert.equal(model.jobId, undefined)
+})
+
+test('S17c 后台卡渲染面:状态文案与中性任务号徽标(渲染守卫)', () => {
+  assert.match(source, /case 'background':/)
+  assert.match(source, /sls-tv__pill--bg/)
+})
+
+test('S12c isError 与空结果仍走 generic(回归)', () => {
   const errored = cardModel()(settledBlock(ARGS, 'boom', { isError: true }), SESSION_CWD)
   assert.equal(errored.kind, 'generic')
+  const empty = cardModel()(settledBlock(ARGS, ''), SESSION_CWD)
+  assert.equal(empty.kind, 'generic')
 })
 
 test('S13 注册面:shell/pwsh/bash 三 key 且 priority -1(文本守卫)', () => {

package/test/client-id.test.mjs

@@ -58,11 +58,40 @@ test('扩展字段守卫:login/distro/env 进设置页数据链(wholesale replac
   assert.match(source, /发行版/)
 })
 
-test('deny 名单进设置页数据链:state/toSection/校验/往返;allow 已移除(deny 绝对)', () => {
-  assert.match(source, /denyText/)
-  assert.match(source, /deny: splitPatternLines\(denyText\)/)
-  assert.match(source, /名单正则非法/)
-  assert.match(source, /拒绝名单/)
-  assert.doesNotMatch(source, /allowText/)
-  assert.doesNotMatch(source, /豁免名单/)
+test('deny 黑名单进设置页数据链:逐条规则编辑器(deny 绝对,allow 已移除)', () => {
+  // 数据链:state 数组 → 保存直落 deny;加载侧 patternText 按条解析(Trim 去空白)
+  assert.match(source, /denyRules/)
+  assert.match(source, /deny: denyRules/)
+  assert.match(source, /patternText\(section\.deny\)/)
+  // 行级即时校验 LOGIC 段 + 保存侧复用
+  assert.match(source, /denyPatternIssues/)
+  assert.match(source, /LOGIC-BEGIN denyPatternIssues/)
+  // 交互结构:规则行 + 删除 + 添加 + 空态提示
+  assert.match(source, /sls-rule/)
+  assert.match(source, /添加规则/)
+  assert.match(source, /未配置.*命中拦截不生效/)
+  // 术语与僵尸防线
+  assert.match(source, /命令黑名单/)
+  assert.doesNotMatch(source, /denyText/)
+  assert.doesNotMatch(source, /allowText|豁免名单|拒绝名单/)
 })
+
+// LOGIC 段行为测试:行级正则校验(提取形态照 client-card.test.mjs)
+function extractLogic(name) {
+  const pattern = new RegExp('// LOGIC-BEGIN ' + name + '\\n([\\s\\S]*?)\\n\\s*// LOGIC-END ' + name)
+  const match = source.match(pattern)
+  if (!match) throw new Error('client.js 缺少 LOGIC 段: ' + name)
+  return new Function('return (' + match[1].trim() + ')')()
+}
+
+test('denyPatternIssues:合法与空规则无问题', () => {
+  const issues = extractLogic('denyPatternIssues')(['^format\\s', 'rm -rf\\s+(?!\\S*node_modules)', ''])
+  assert.deepEqual(issues, [])
+})
+
+test('denyPatternIssues:非法规则定位到行(行号 = 规则序)', () => {
+  const issues = extractLogic('denyPatternIssues')(['^format\\s', 'rm -rf\\s+(?!', 'shutdown'])
+  assert.equal(issues.length, 1)
+  assert.equal(issues[0].index, 1)
+  assert.match(issues[0].error, /Invalid|regular|正则/)
+})

package/test/config-entry.test.mjs

@@ -31,7 +31,7 @@ test('S10 args 模板条目接管 argv,distro 不出现', () => {
 })
 
 test('S6 entryFor 透传 env 与 distro;spawnSpec env 含条目键', () => {
-  const cmdPath = `${process.env.SystemRoot ?? 'C:\\WINDOWS'}\\System32\\cmd.exe`
+  const cmdPath = process.execPath
   const config = Config({
     shells: [{ id: 'c', name: 'CMD', kind: 'cmd', path: cmdPath, env: { MSYSTEM: 'MINGW64' } }, { id: 'p', name: 'pwsh', kind: 'pwsh' }],
     default: 'c',

package/test/executor-seam.test.mjs

@@ -79,10 +79,25 @@ function shadow(executor) {
   return Object.create(executor)
 }
 
+
+// 跨平台显式 path:node 自身在所有平台存在,注入后 entryFor/listShells 不依赖真实 shell
+// (CI linux 无 pwsh/cmd/git-bash,出厂 auto 探测必失败)
+const NODE_EXE = process.execPath
+function baseConfig() {
+  return {
+    shells: [
+      { id: 'pwsh', name: 'PowerShell', kind: 'pwsh', path: NODE_EXE },
+      { id: 'git-bash', name: 'Git Bash', kind: 'bash', path: NODE_EXE },
+      { id: 'cmd', name: 'CMD', kind: 'cmd', path: NODE_EXE },
+    ],
+    default: 'pwsh',
+  }
+}
+
 test('官方 run seam:存在且走默认客户端,spec 已解析形态(danger 直跑)', async () => {
   const spawn = stubSpawn('seam-out', '')
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   assert.equal(typeof executor.run, 'function')
   const result = await executor.run(executor.resolve({ command: 'Get-Date', workdir: process.cwd() }))
   assert.equal(spawn.calls.length, 1)
@@ -94,7 +109,7 @@ test('官方 run seam:存在且走默认客户端,spec 已解析形态(danger
 test('官方 start seam:存在且返回 ShellProcess 形态句柄', async () => {
   const spawn = stubSpawn('bg', '')
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   assert.equal(typeof executor.start, 'function')
   const proc = executor.start(executor.resolve({ command: 'sleep 1', workdir: process.cwd() }))
   assert.equal(proc.status, 'running')
@@ -104,7 +119,7 @@ test('官方 start seam:存在且返回 ShellProcess 形态句柄', async () =>
 
 test('cordis 阴影 receiver:公开面调用不触发私有品牌错误', () => {
   const { ctx } = stubCtx()
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const mirrored = shadow(executor)
   // 官方 tool-pwsh 的调用面:resolve/run/start + apply 期 sandboxMode
   assert.doesNotThrow(() => mirrored.resolve({ command: 'x' }))
@@ -119,7 +134,7 @@ test('cordis 阴影 receiver:公开面调用不触发私有品牌错误', () =>
 test('cordis 阴影 receiver:受限模式 run 全链路(confine + 结果分类)', async () => {
   const spawn = stubSpawn('', 'file access denied here', 1)
   const { ctx } = stubCtx({ spawn, sandboxMode: 'read-only' })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const mirrored = shadow(executor)
   const result = await mirrored.run(mirrored.resolve({ command: 'dir', workdir: process.cwd() }))
   assert.equal(spawn.calls[0].argv[0], 'WRAPPED')
@@ -129,8 +144,8 @@ test('cordis 阴影 receiver:受限模式 run 全链路(confine + 结果分类)'
 
 test('sandboxMode:透出部署默认模式,策略缺席时 undefined', () => {
   const { ctx } = stubCtx({ sandboxMode: 'workspace-write' })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   assert.equal(executor.sandboxMode, 'workspace-write')
-  const bare = new ShellSelectExecutor({ ...ctx, sandboxPolicy: undefined }, {})
+  const bare = new ShellSelectExecutor({ ...ctx, sandboxPolicy: undefined }, baseConfig())
   assert.equal(bare.sandboxMode, undefined)
 })

package/test/executor.test.mjs

@@ -88,9 +88,23 @@ function stubCtx({ withSettings = true, sandboxMode = 'danger-full-access', spaw
   return { ctx, registered, disposers }
 }
 
+// 跨平台显式 path:node 自身在所有平台存在,注入后 entryFor/listShells 不依赖真实 shell
+// (CI linux 无 pwsh/cmd/git-bash,出厂 auto 探测必失败)
+const NODE_EXE = process.execPath
+function baseConfig() {
+  return {
+    shells: [
+      { id: 'pwsh', name: 'PowerShell', kind: 'pwsh', path: NODE_EXE },
+      { id: 'git-bash', name: 'Git Bash', kind: 'bash', path: NODE_EXE },
+      { id: 'cmd', name: 'CMD', kind: 'cmd', path: NODE_EXE },
+    ],
+    default: 'pwsh',
+  }
+}
+
 function build() {
   const { ctx, registered } = stubCtx()
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   return { executor, registered }
 }
 
@@ -111,7 +125,7 @@ test('构造:注册 shell 工具、systemPrompt 段、shell-select 设置节、
 
 test('settings 缺席:降级不 installSection,工具照常注册', () => {
   const { ctx, registered } = stubCtx({ withSettings: false })
-  new ShellSelectExecutor(ctx, {})
+  new ShellSelectExecutor(ctx, baseConfig())
   assert.equal(registered.sections.length, 0)
   assert.equal(registered.tools.length, 1)
 })
@@ -122,7 +136,7 @@ test('listShells:出厂条目自动解析为真实路径(pwsh/cmd 必在本机)'
   assert.equal(listing.default, 'pwsh')
   const pwsh = listing.shells.find((entry) => entry.id === 'pwsh')
   assert.equal(pwsh.available, true)
-  assert.match(pwsh.path, /pwsh\.exe$|powershell\.exe$/)
+  assert.equal(pwsh.path, NODE_EXE)
 })
 
 test('entryFor:缺省落 default;未知 id 报可用清单;坏路径条目报配置指引', () => {
@@ -148,7 +162,7 @@ test('resolve:预算字段生效,策略缺省落部署策略', () => {
 test('runFor danger 直跑:argv 按条目组装,不经 confine,stdout/stderr 回传', async () => {
   const spawn = stubSpawn('out-text', 'err-text')
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const entry = executor.entryFor('git-bash')
   const result = await executor.runFor(entry, executor.resolve({ command: 'ls -la', workdir: process.cwd() }))
   assert.equal(spawn.calls.length, 1)
@@ -161,7 +175,7 @@ test('runFor danger 直跑:argv 按条目组装,不经 confine,stdout/stderr 回
 test('deny 拦截:runFor 命中 deny 抛 DenyError 不 spawn', async () => {
   const spawn = stubSpawn('ok', '')
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, { deny: ['format '] })
+  const executor = new ShellSelectExecutor(ctx, { ...baseConfig(), deny: ['format '] })
   const entry = executor.entryFor('git-bash')
   await assert.rejects(
     () => executor.runFor(entry, executor.resolve({ command: 'format c: /q', workdir: process.cwd() })),
@@ -174,7 +188,7 @@ test('deny 拦截:runFor 命中 deny 抛 DenyError 不 spawn', async () => {
 test('deny 拦截:startFor 同样拒绝(后台入口)', () => {
   const spawn = stubSpawn('', '', 0)
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, { deny: ['shutdown'] })
+  const executor = new ShellSelectExecutor(ctx, { ...baseConfig(), deny: ['shutdown'] })
   const entry = executor.entryFor('cmd')
   assert.throws(
     () => executor.startFor(entry, executor.resolve({ command: 'shutdown /r', workdir: process.cwd() })),
@@ -186,7 +200,7 @@ test('deny 拦截:startFor 同样拒绝(后台入口)', () => {
 test('runFor 受限模式:经 confine 包装 argv,结果分类', async () => {
   const spawn = stubSpawn('', 'some file access denied happened', 1)
   const { ctx } = stubCtx({ spawn, sandboxMode: 'read-only' })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const entry = executor.entryFor('cmd')
   const result = await executor.runFor(entry, executor.resolve({ command: 'dir', workdir: process.cwd() }))
   assert.equal(spawn.calls[0].argv[0], 'WRAPPED')
@@ -199,7 +213,7 @@ test('runFor 受限模式:经 confine 包装 argv,结果分类', async () => {
 test('runFor pwsh 条目:非交互形 + 编码前缀进 argv', async () => {
   const spawn = stubSpawn()
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const entry = executor.entryFor('pwsh')
   await executor.runFor(entry, executor.resolve({ command: 'Get-Date', workdir: process.cwd() }))
   const argv = spawn.calls[0].argv
@@ -232,7 +246,7 @@ test('updateConfig:await settings.update 后读数即新值(setSource 接线)',
     scope.value = Config(section)
     registered.sectionsHook.onChange()
   }
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   assert.equal(executor.config.default, 'pwsh')
   await executor.updateConfig({ default: 'git-bash' })
   assert.equal(executor.config.default, 'git-bash')
@@ -245,7 +259,7 @@ test('updateConfig:部分补丁归并当前节后 replace(单改 default 不丢
   ctx.settings.replace = async (ns, section) => {
     written.push(section)
   }
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   await executor.updateConfig({ default: 'git-bash' })
   assert.equal(written[0].shells.length, 3)
   assert.equal(written[0].default, 'git-bash')
@@ -265,7 +279,7 @@ test('api POST config:await updateConfig,resolved 即新清单(async 修复)', a
     registered.sections[0].hooks.setSource(() => section)
     registered.sections[0].hooks.onChange()
   }
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const handler = ctx.__routes.find((r) => r.path === '/api/shell-select/config').handler
   let captured = null
   const fakeRes = {
@@ -291,12 +305,14 @@ test('api POST config:await updateConfig,resolved 即新清单(async 修复)', a
 })
 
 test('updateConfig:入参 path 反斜杠归一(防 yaml 无引号落盘字面翻倍)', async () => {
+  // 归一是 Windows 宿主行为(linux 无反斜杠翻倍怪癖,源码层按平台守卫)
+  if (process.platform !== 'win32') return
   const { ctx, registered } = stubCtx()
   const written = []
   ctx.settings.replace = async (ns, section) => {
     written.push(section)
   }
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   await executor.updateConfig({
     shells: [{ id: 'pwsh', name: 'PowerShell', kind: 'pwsh', path: 'C:\\\\WINDOWS\\\\System32\\\\powershell.exe' }],
   })
@@ -310,6 +326,7 @@ test('entryFor:双反斜杠污染路径被归一后仍可用', () => {
     shells: [{ id: 'pwsh', name: 'PowerShell', kind: 'pwsh', path: 'C:\\\\WINDOWS\\\\System32\\\\WindowsPowerShell\\\\v1.0\\\\powershell.exe' }],
     default: 'pwsh',
   })
+  if (process.platform !== 'win32') return
   const entry = polluted.entryFor(undefined)
   assert.equal(entry.path, 'C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe')
 })
@@ -318,29 +335,29 @@ test('entryFor:login 布尔透传,argv 产出 -lc(配置→执行全链)', async
   const ctx2 = stubCtx()
   const executor = new ShellSelectExecutor(ctx2.ctx, {
     shells: [
-      { id: 'm', name: 'MSYS2', kind: 'bash', path: 'C:\\Program Files\\Git\\bin\\bash.exe', login: true },
-      { id: 'g', name: 'Git Bash', kind: 'bash', path: 'C:\\Program Files\\Git\\bin\\bash.exe' },
+      { id: 'm', name: 'MSYS2', kind: 'bash', path: NODE_EXE, login: true },
+      { id: 'g', name: 'Git Bash', kind: 'bash', path: NODE_EXE },
     ],
     default: 'm',
   })
   const loginEntry = executor.entryFor('m')
   assert.equal(loginEntry.login, true)
-  assert.deepEqual(executor.argvFor(loginEntry, { command: 'uname -a' }).slice(0, 2), ['C:\\Program Files\\Git\\bin\\bash.exe', '-lc'])
+  assert.deepEqual(executor.argvFor(loginEntry, { command: 'uname -a' }).slice(0, 2), [NODE_EXE, '-lc'])
   const plainEntry = executor.entryFor('g')
   assert.equal(plainEntry.login, false)
-  assert.deepEqual(executor.argvFor(plainEntry, { command: 'uname -a' }).slice(0, 2), ['C:\\Program Files\\Git\\bin\\bash.exe', '-c'])
+  assert.deepEqual(executor.argvFor(plainEntry, { command: 'uname -a' }).slice(0, 2), [NODE_EXE, '-c'])
 })
 
 function stubCtxAndBuild() {
   const { ctx, registered } = stubCtx()
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   return { executor, registered }
 }
 
 test('startFor danger:返回进程句柄,readOutput 增量与 done 定局', async () => {
   const spawn = stubSpawn('bg-out', '')
   const { ctx } = stubCtx({ spawn })
-  const executor = new ShellSelectExecutor(ctx, {})
+  const executor = new ShellSelectExecutor(ctx, baseConfig())
   const proc = executor.startFor(executor.entryFor('pwsh'), executor.resolve({ command: 'sleep 1', workdir: process.cwd() }))
   assert.equal(proc.status, 'running')
   const first = proc.readOutput()

package/test/preset-drift.test.mjs

@@ -0,0 +1,174 @@
+// preset 接管守卫:本包自带预设(standard 副本 − tool-pwsh 行)与 bundle patch
+// 的 agent-presets 覆写形态。漂移守卫对照已安装 dsh 的内置 standard 预设——
+// 上游增删行/改表达式即红,升级后按官方实文对表镜像;宿主缺失(无 dsh 本体的
+// 最小环境)时 skip,不制造假红。
+
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import { readFileSync, existsSync, mkdirSync, symlinkSync, rmSync, readdirSync } from 'node:fs'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+import { dirname, join, resolve } from 'node:path'
+import { createRequire } from 'node:module'
+import { tmpdir } from 'node:os'
+import { execPath } from 'node:process'
+
+const here = dirname(fileURLToPath(import.meta.url))
+const pkgRoot = join(here, '..')
+const presetText = readFileSync(join(pkgRoot, 'presets', 'shell-select', 'agent.cordis.yml'), 'utf8')
+const metaText = readFileSync(join(pkgRoot, 'presets', 'shell-select', 'preset.yml'), 'utf8')
+const patchText = readFileSync(join(pkgRoot, 'cordis.patch.yml'), 'utf8')
+
+// ── 宿主侧 yaml 能力探测:js-yaml 与官方 entryListSchema 经 dsh 安装位解析 ──
+
+function locateHarnessDir() {
+  // 候选锚:运行中 node 的全局安装位(nvm/全局布局:execPath 目录/node_modules)→
+  // 仓库 compat 隔离宿主(.dsh-versions/<v>/package)。缺失即返回 null(skip)。
+  const candidates = [
+    resolve(dirname(execPath), 'node_modules', '@deepseek-ai', 'dsh'),
+  ]
+  const versionsDir = resolve(pkgRoot, '..', '..', '.dsh-versions')
+  try {
+    for (const version of readdirSync(versionsDir)) {
+      candidates.push(join(versionsDir, version, 'package'))
+    }
+  } catch { /* 无 .dsh-versions,忽略 */ }
+  for (const candidate of candidates) {
+    if (existsSync(join(candidate, 'package.json'))) return candidate
+  }
+  return null
+}
+
+// yaml 能力与宿主解耦:js-yaml 为 devDep(CI 无宿主也可解析本包文件)。
+// !!js 标签本地同形 Type:tag 必须写完整 URI(tag:yaml.org,2002:js)——文档简写
+// !!js 展开后按完整 URI 匹配,字面 '!!js' 永不命中(unknown tag,CI 假绿教训)。
+// 形态场景恒走 LOCAL_SCHEMA(本机/CI 同路径);漂移守卫在场时改用官方
+// entryListSchema 求同(对照面只在有宿主时跑)
+import yamlStatic from 'js-yaml'
+
+const LOCAL_SCHEMA = yamlStatic.JSON_SCHEMA.extend(new yamlStatic.Type('tag:yaml.org,2002:js', {
+  kind: 'scalar',
+  resolve: (data) => typeof data === 'string',
+  construct: (data) => ({ __jsExpr: data }),
+  represent: (data) => data['__jsExpr'],
+}))
+
+let harness = null
+let entryListSchema = LOCAL_SCHEMA
+try {
+  harness = locateHarnessDir()
+  if (harness !== null) {
+    const req = createRequire(join(harness, 'package.json'))
+    const toUrl = (specifier) => pathToFileURL(req.resolve(specifier)).href
+    entryListSchema = (await import(toUrl('@deepseek-ai/cordis-plugin-include'))).entryListSchema
+  }
+} catch { /* 官方 schema 缺失按本地同形标签处理 */ }
+
+const loadYaml = (text) => yamlStatic.load(text, { schema: entryListSchema })
+
+// 镜像 loader 的表达式求值形态(new Function + with(ctx),全局可用)
+const evalExpr = (expr, ctx) => new Function('ctx', `with (ctx) { return (${expr}) }`)(ctx)
+
+// ── 结构对比:展平行树为 id → {name, disabled, config 键集} ──
+
+function flattenRows(rows, out = new Map()) {
+  for (const row of rows ?? []) {
+    if (row.id !== undefined) {
+      out.set(row.id, {
+        name: row.name,
+        disabled: row.disabled === undefined ? undefined : row.disabled.__jsExpr ?? row.disabled,
+        configKeys: row.config && !Array.isArray(row.config) ? Object.keys(row.config).sort() : undefined,
+      })
+    }
+    if (row.group && Array.isArray(row.config)) flattenRows(row.config, out)
+  }
+  return out
+}
+
+// ── 场景 ──
+
+test('预设形态:preset.yml 元数据在场', () => {
+  const meta = metaText.trim().split('\n').map((line) => line.split(/:(.*)/s)[0])
+  assert.ok(meta.includes('name'), 'preset.yml 缺 name')
+  assert.ok(metaText.includes('description:'), 'preset.yml 缺 description')
+})
+
+test('预设形态:agent.cordis.yml 可解析且无 tool-pwsh 行', () => {
+  // 形态断言恒走本地同形 schema:本机与 CI 同一路径,官方 schema 在场与否不影响本场景
+  const rows = yamlStatic.load(presetText, { schema: LOCAL_SCHEMA })
+  assert.ok(Array.isArray(rows), '预设组合必须是行数组')
+  const ids = new Set()
+  const walk = (list) => {
+    for (const row of list) {
+      if (row.id !== undefined) ids.add(row.id)
+      if (row.group && Array.isArray(row.config)) walk(row.config)
+    }
+  }
+  walk(rows)
+  assert.ok(ids.has('tool-bash'), 'POSIX bash 工具行必须保留')
+  assert.ok(!ids.has('tool-pwsh'), 'tool-pwsh 行必须移除(win32 shell 面由本包接管)')
+})
+
+test('漂移守卫:与已安装 standard 逐行对表(缺失宿主则 skip)', (t) => {
+  if (harness === null) return t.skip('未找到 dsh 本体安装,无对照源')
+  const standardPath = join(harness, 'node_modules', '@deepseek-ai', 'dsh-agent-presets', 'presets', 'standard', 'agent.cordis.yml')
+  if (!existsSync(standardPath)) return t.skip('dsh 安装位无 standard 预设,无对照源')
+  const standard = flattenRows(loadYaml(readFileSync(standardPath, 'utf8')))
+  const ours = flattenRows(loadYaml(presetText))
+  for (const [id, row] of standard) {
+    if (id === 'tool-pwsh') {
+      assert.ok(!ours.has(id), 'standard 有 tool-pwsh 而本包预设也出现了:镜像被污染')
+      continue
+    }
+    assert.ok(ours.has(id), `standard 行 ${id} 在本包预设缺失,须对表镜像`)
+    assert.deepEqual(ours.get(id), row, `行 ${id} 与 standard 漂移,升级后按官方实文对表`)
+  }
+  for (const id of ours.keys()) {
+    assert.ok(standard.has(id), `本包预设多出 standard 没有的行 ${id}:镜像越界`)
+  }
+})
+
+test('schema 同构:本地 !!js Type 与官方 entryListSchema 产物 deepEqual(缺失宿主则 skip)', (t) => {
+  if (harness === null) return t.skip('未找到 dsh 本体安装,无官方 schema 对照')
+  // harness 命中时 entryListSchema 已是官方版:loadYaml=官方路径,与 LOCAL_SCHEMA 逐文本对照。
+  // 本地同形标签的语义漂移曾以 unknown tag 形态炸穿 CI,此处固化为机器断言
+  for (const [label, text] of [['预设组合', presetText], ['bundle patch', patchText]]) {
+    assert.deepEqual(
+      yamlStatic.load(text, { schema: LOCAL_SCHEMA }),
+      loadYaml(text),
+      `${label} 双 schema 产物漂移,本地 !!js Type 须与官方 JsExpr 同构`,
+    )
+  }
+})
+
+test('patch 形态:agent-presets 覆写带 name 防御且含 default 与 roots', () => {
+  const patch = yamlStatic.load(patchText, { schema: LOCAL_SCHEMA })
+  const row = patch.find((entry) => entry.id === 'agent-presets')
+  assert.ok(row, 'patch 缺 agent-presets 覆写行')
+  assert.equal(row.name, '@deepseek-ai/dsh-agent-presets', 'name 字段是官方行改名防御,必须钉住包名')
+  assert.match(row.config.default.__jsExpr, /'shell-select'/)
+  assert.match(row.config.default.__jsExpr, /'standard'/)
+  assert.equal(row.config.roots.length, 1)
+  assert.match(row.config.roots[0].path.__jsExpr, /ctx\.baseUrl/)
+})
+
+test('patch 表达式求值:default 按平台切换,roots 指向本包 presets 目录', () => {
+  const patch = yamlStatic.load(patchText, { schema: LOCAL_SCHEMA })
+  const config = patch.find((entry) => entry.id === 'agent-presets').config
+  const expectedDefault = process.platform === 'win32' ? 'shell-select' : 'standard'
+  assert.equal(evalExpr(config.default.__jsExpr, { baseUrl: 'file:///any/profile/dir/' }), expectedDefault)
+  // 合成 profile 布局:baseUrl 锚 <profile>/profiles/web,其下 node_modules/@mzzsfy/dsh-shell-select
+  // 为符号链接桥(自依赖桥同构;junction 穿透到真实包目录)
+  const fakeProfile = join(tmpdir(), 'shell-select-preset-probe-' + process.pid)
+  const linkDir = join(fakeProfile, 'profiles', 'web', 'node_modules', '@mzzsfy')
+  mkdirSync(linkDir, { recursive: true })
+  symlinkSync(pkgRoot, join(linkDir, 'dsh-shell-select'), 'junction')
+  try {
+    const evaluated = evalExpr(config.roots[0].path.__jsExpr, {
+      baseUrl: pathToFileURL(join(fakeProfile, 'profiles', 'web') + '/').href,
+    })
+    assert.ok(/presets\/$/.test(evaluated), '求值路径必须锚在包内 presets 目录: ' + evaluated)
+    assert.ok(existsSync(join(evaluated, 'shell-select', 'agent.cordis.yml')), '求值路径必须落在本包 presets 目录(符号链接桥穿透)')
+  } finally {
+    rmSync(fakeProfile, { recursive: true, force: true })
+  }
+})