iterate-plugin 3.7.0 → 3.8.0

package/dist/tools/transcript.js

@@ -23,6 +23,7 @@ import { defineTool } from '@deepseek-ai/dsh-tools';
 import { mkdir, readFile } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
 import { writeTextAtomicAsync } from "../atomic-fs.js";
+import { withProjectLock } from "../file-lock.js";
 import { dirname } from 'node:path';
 import { loadEffectiveConfig, resolveProjectRootForExec, } from "../config-loader.js";
 import { transcriptPath } from "../paths.js";
@@ -73,7 +74,7 @@ function normalizeCheckpoint(input) {
     if (round <= 0)
         return null;
     return {
-        mode: c.mode === 'dry-run' || c.mode === 'normal' ? c.mode : 'normal',
+        mode: c.mode === 'dry-run' || c.mode === 'normal' ? c.mode : null,
         round,
         maxRounds: typeof c.maxRounds === 'number' && Number.isFinite(c.maxRounds) ? c.maxRounds : 0,
         fixedCount: typeof c.fixedCount === 'number' && Number.isFinite(c.fixedCount) ? c.fixedCount : 0,
@@ -198,7 +199,23 @@ export function registerTranscriptTool(ctx) {
                     'the run console can show which commands ran and whether they passed.',
             },
             refReadFiles: { type: 'json', description: 'For `capture`: flat array of all read files across rounds (optional).' },
-            stoppedReason: { type: 'string', description: 'For `capture`: why the run ended — "converged" | "max_rounds_reached" | "aborted_by_validation" | "aborted_by_config" | "schema_invalid" | "no_usable_reviewer_output" | "inconclusive". When omitted, derived from the convergence trend (trailing 0 = converged, otherwise = max_rounds_reached once a round ran).' },
+            stoppedReason: {
+                type: 'string',
+                // Enum guard: the label renderer keys off this value, so a stray or
+                // prototype-chain string (e.g. "__proto__") must not enter the tool.
+                // The render path additionally uses Object.hasOwn (defense for
+                // hand-edited manifests that bypass this schema).
+                enum: [
+                    'converged',
+                    'max_rounds_reached',
+                    'aborted_by_validation',
+                    'aborted_by_config',
+                    'schema_invalid',
+                    'no_usable_reviewer_output',
+                    'inconclusive',
+                ],
+                description: 'For `capture`: why the run ended — "converged" | "max_rounds_reached" | "aborted_by_validation" | "aborted_by_config" | "schema_invalid" | "no_usable_reviewer_output" | "inconclusive". When omitted, derived from the convergence trend (trailing 0 = converged, otherwise = max_rounds_reached once a round ran).'
+            },
             // `string | null` (NOT plain `type: 'string'`): dsh validates arguments
             // against the compiled schema BEFORE execute, and the docs — plus the
             // client's clear button — advertise `{"operation":"nudge","text":null}`.
@@ -288,52 +305,65 @@ export function registerTranscriptTool(ctx) {
                 };
             }
             if (args.operation === 'nudge') {
-                let manifest = null;
-                if (existsSync(file)) {
-                    try {
-                        const parsed = JSON.parse(await readFile(file, 'utf-8'));
-                        manifest = parsed;
+                // Read-modify-write across processes: a concurrent nudge in a sibling
+                // process would otherwise read the same manifest and write back over
+                // each other's steering text. Serialize on the shared transcript lock
+                // (same pattern as the config/triage writers). The body still awaits,
+                // so the lock is held across the read and write; a same-process
+                // re-entry degrades to unlocked (the advisory lock is per-pid), which
+                // is the documented best-effort fallback for a low-value projection.
+                return withProjectLock(projectRoot, 'transcript', async () => {
+                    let manifest = null;
+                    if (existsSync(file)) {
+                        try {
+                            const parsed = JSON.parse(await readFile(file, 'utf-8'));
+                            manifest = parsed;
+                        }
+                        catch {
+                            manifest = null;
+                        }
                     }
-                    catch {
-                        manifest = null;
+                    // Rehydrating a parsed-but-malformed manifest (e.g. `rounds: [null]`
+                    // or a non-object) must never crash the nudge — degrade to a fresh
+                    // builder so the steering text still lands. The fallback must keep
+                    // the ORIGINAL run identity (mode/taskMode/goal/maxRounds) so a
+                    // stray malformed field can never silently rewrite a dry-run run
+                    // into a `normal` one.
+                    const fallbackOpts = {
+                        project: projectRoot,
+                        mode: (manifest?.mode === 'dry-run' || manifest?.mode === 'normal' ? manifest.mode : null),
+                        taskMode: (manifest?.taskMode === 'code' || manifest?.taskMode === 'iterate' ? manifest.taskMode : null),
+                        approval,
+                        goal: typeof manifest?.goal === 'string' ? manifest.goal : '',
+                        maxRounds: typeof manifest?.maxRounds === 'number' ? manifest.maxRounds : 0,
+                    };
+                    let builder;
+                    if (manifest) {
+                        try {
+                            builder = rehydrateBuilder(manifest, approval);
+                        }
+                        catch {
+                            builder = new ReviewTranscriptBuilder(fallbackOpts);
+                        }
                     }
-                }
-                // Rehydrating a parsed-but-malformed manifest (e.g. `rounds: [null]`
-                // or a non-object) must never crash the nudge — degrade to a fresh
-                // builder so the steering text still lands. The fallback must keep
-                // the ORIGINAL run identity (mode/taskMode/goal/maxRounds) so a
-                // stray malformed field can never silently rewrite a dry-run run
-                // into a `normal` one.
-                const fallbackOpts = {
-                    project: projectRoot,
-                    mode: (manifest?.mode === 'dry-run' || manifest?.mode === 'normal' ? manifest.mode : null),
-                    taskMode: (manifest?.taskMode === 'code' || manifest?.taskMode === 'iterate' ? manifest.taskMode : null),
-                    approval,
-                    goal: typeof manifest?.goal === 'string' ? manifest.goal : '',
-                    maxRounds: typeof manifest?.maxRounds === 'number' ? manifest.maxRounds : 0,
-                };
-                let builder;
-                if (manifest) {
-                    try {
-                        builder = rehydrateBuilder(manifest, approval);
+                    else {
+                        // No manifest yet: the run's mode is genuinely unknown at nudge
+                        // time (capture sets it). Recording `mode: 'normal'` here would
+                        // rewrite a dry-run run into a `normal` one in the status/badge
+                        // until capture lands — `null` honestly says "not captured yet".
+                        builder = new ReviewTranscriptBuilder({ project: projectRoot, mode: null, approval });
                     }
-                    catch {
-                        builder = new ReviewTranscriptBuilder(fallbackOpts);
+                    builder.setNudge(typeof args.text === 'string' && args.text.trim() ? args.text : null);
+                    const persisted = await persistChecked(file, builder.serialize());
+                    if (!persisted.ok) {
+                        return { operation: 'nudge', updated: false, error: persisted.error };
                     }
-                }
-                else {
-                    builder = new ReviewTranscriptBuilder({ project: projectRoot, mode: 'normal', approval });
-                }
-                builder.setNudge(typeof args.text === 'string' && args.text.trim() ? args.text : null);
-                const persisted = await persistChecked(file, builder.serialize());
-                if (!persisted.ok) {
-                    return { operation: 'nudge', updated: false, error: persisted.error };
-                }
-                return {
-                    operation: 'nudge',
-                    updated: true,
-                    transcript: builder.serialize(),
-                };
+                    return {
+                        operation: 'nudge',
+                        updated: true,
+                        transcript: builder.serialize(),
+                    };
+                });
             }
             // capture
             // `observatory.capture: false` opts the project out of transcript

package/dist/tools/triage.js

@@ -5,6 +5,7 @@ import yaml from 'js-yaml';
 import { resolveProjectRootForExec } from "../config-loader.js";
 import { writeTextAtomic } from "../atomic-fs.js";
 import { configBackupSuffix } from "../config-write.js";
+import { withProjectLock } from "../file-lock.js";
 import { WHOLE_FILE_LINE } from "../evidence.js";
 const CONFIG_FILE = 'iterate.config.yaml';
 /** Personalization key that holds the known-intentional list. */
@@ -227,58 +228,64 @@ function readConfigFile(configPath) {
 /** Apply the triage entries: backup, merge, write, rollback on failure. */
 function applyEntries(projectRoot, incoming) {
     const configPath = join(projectRoot, CONFIG_FILE);
-    let config;
-    try {
-        config = readConfigFile(configPath);
-    }
-    catch (err) {
-        // The file exists but is malformed — refuse to overwrite user data.
-        return { ok: false, error: `Failed to read config: ${String(err)}` };
-    }
-    const existing = readKnownIntentional(config);
-    const { merged, added, skipped, dropped } = mergeKnownIntentional(existing, incoming);
-    const nextConfig = buildConfigWithKnownIntentional(config, merged);
-    const hadFile = existsSync(configPath);
-    const backupPath = hadFile ? `${configPath}.bak-${backupSuffix()}` : null;
-    if (backupPath) {
+    // Serialize against `iterate_config write` (SAME lock name) so a triage apply
+    // and a config write on one project cannot interleave their read-modify-write
+    // and silently drop each other's updates. The lock spans read → merge →
+    // backup → write → backup-prune so the whole cycle is atomic.
+    return withProjectLock(projectRoot, 'config-write', () => {
+        let config;
         try {
-            copyFileSync(configPath, backupPath);
+            config = readConfigFile(configPath);
         }
         catch (err) {
-            return {
-                ok: false,
-                error: `Failed to create backup: ${String(err)}`,
-            };
+            // The file exists but is malformed — refuse to overwrite user data.
+            return { ok: false, error: `Failed to read config: ${String(err)}` };
         }
-    }
-    const yamlText = yaml.dump(nextConfig, { noRefs: true });
-    try {
-        writeTextAtomic(configPath, yamlText);
-    }
-    catch (err) {
-        // Rollback: restore the backup, or REMOVE the file we just created when
-        // there was no prior config — an empty file left behind would poison all
-        // future config reads (empty YAML is not a valid mapping).
-        let rollbackError = '';
+        const existing = readKnownIntentional(config);
+        const { merged, added, skipped, dropped } = mergeKnownIntentional(existing, incoming);
+        const nextConfig = buildConfigWithKnownIntentional(config, merged);
+        const hadFile = existsSync(configPath);
+        const backupPath = hadFile ? `${configPath}.bak-${backupSuffix()}` : null;
+        if (backupPath) {
+            try {
+                copyFileSync(configPath, backupPath);
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    error: `Failed to create backup: ${String(err)}`,
+                };
+            }
+        }
+        const yamlText = yaml.dump(nextConfig, { noRefs: true });
         try {
-            if (backupPath)
-                copyFileSync(backupPath, configPath);
-            else if (existsSync(configPath))
-                rmSync(configPath, { force: true });
+            writeTextAtomic(configPath, yamlText);
         }
-        catch (rbErr) {
-            rollbackError = `; rollback also failed: ${String(rbErr)}`;
+        catch (err) {
+            // Rollback: restore the backup, or REMOVE the file we just created when
+            // there was no prior config — an empty file left behind would poison all
+            // future config reads (empty YAML is not a valid mapping).
+            let rollbackError = '';
+            try {
+                if (backupPath)
+                    copyFileSync(backupPath, configPath);
+                else if (existsSync(configPath))
+                    rmSync(configPath, { force: true });
+            }
+            catch (rbErr) {
+                rollbackError = `; rollback also failed: ${String(rbErr)}`;
+            }
+            return {
+                ok: false,
+                error: `Failed to write config: ${String(err)}${rollbackError}`,
+            };
         }
-        return {
-            ok: false,
-            error: `Failed to write config: ${String(err)}${rollbackError}`,
-        };
-    }
-    // Success: bound the accumulation of timestamped backups so a long-lived
-    // project never collects an unbounded pile of config snapshots.
-    if (backupPath)
-        pruneOldConfigBackups(configPath);
-    return { ok: true, added, skipped, dropped, count: merged.length, configPath, backupPath };
+        // Success: bound the accumulation of timestamped backups so a long-lived
+        // project never collects an unbounded pile of config snapshots.
+        if (backupPath)
+            pruneOldConfigBackups(configPath);
+        return { ok: true, added, skipped, dropped, count: merged.length, configPath, backupPath };
+    });
 }
 /**
  * Register the `iterate_triage` tool.

package/dist/transcript.js

@@ -501,7 +501,7 @@ export class ReviewTranscriptBuilder {
             return;
         }
         this.checkpoint = {
-            mode: state.mode === 'dry-run' || state.mode === 'normal' ? state.mode : 'normal',
+            mode: state.mode === 'dry-run' || state.mode === 'normal' ? state.mode : null,
             round: typeof state.round === 'number' ? state.round : 0,
             maxRounds: typeof state.maxRounds === 'number' ? state.maxRounds : 0,
             fixedCount: typeof state.fixedCount === 'number' ? state.fixedCount : 0,
@@ -725,7 +725,7 @@ function normalizeCheckpointRow(input) {
     if (round <= 0)
         return null;
     return {
-        mode: c.mode === 'dry-run' || c.mode === 'normal' ? c.mode : 'normal',
+        mode: c.mode === 'dry-run' || c.mode === 'normal' ? c.mode : null,
         round: clampRoundValue(c.round),
         maxRounds: clampCountValue(c.maxRounds),
         fixedCount: clampCountValue(c.fixedCount),

package/lib/client.js

@@ -1,4 +1,4 @@
-/* iterate-plugin client source-digest: 7da1ef5af84458a763f4b0ad8cd75ba2de3fb16b9831e00c0a9767bc16fece65 */
+/* iterate-plugin client source-digest: fc3f99c3c9a74c891ce54564ac49e7a336441432dfafe0cb21775ee4afe8f411 */
 window.__ModuleLoader__.load({ id: "iterate-plugin", factory: (require) => {
 var module = { exports: {} };
 var exports = module.exports;
@@ -1539,8 +1539,11 @@ function stoppedReasonLabel(reason, lang = "zh") {
     schema_invalid: "Done \xB7 repeated schema validation failures in review output",
     no_usable_reviewer_output: "Done \xB7 no usable review output"
   };
-  if (lang === "en") return en[reason] ?? (reason ? `Done \xB7 ${reason}` : "Done");
-  return zh[reason] ?? (reason ? `\u5DF2\u7ED3\u675F \xB7 ${reason}` : "\u5DF2\u7ED3\u675F");
+  const table = lang === "en" ? en : zh;
+  if (typeof reason === "string" && Object.hasOwn(table, reason)) return table[reason];
+  const text = typeof reason === "string" && reason !== "" ? reason : "";
+  if (lang === "en") return text ? `Done \xB7 ${text}` : "Done";
+  return text ? `\u5DF2\u7ED3\u675F \xB7 ${text}` : "\u5DF2\u7ED3\u675F";
 }
 function buildCompletionSummary(report, lang = "zh") {
   const conv = (
@@ -1626,8 +1629,9 @@ function buildConfigEditGuide() {
     "---------------------",
     "\u914D\u7F6E\u6587\u4EF6\uFF1A\u9879\u76EE\u6839\u76EE\u5F55 iterate.config.yaml\u3002",
     "",
-    "\u26A0 \u672A\u914D\u7F6E validation.commands \u65F6\u8FED\u4EE3\u4E0D\u88AB\u4FDD\u62A4\uFF1A\u6BCF\u8F6E validate \u62FF\u5230\u7A7A\u7ED3\u679C\u4F1A\u88AB\u5F53\u4F5C",
-    "  \u201C\u9A8C\u8BC1\u901A\u8FC7\u201D\uFF0C\u7B49\u4E8E\u5728\u6CA1\u6709\u4EFB\u4F55\u6D4B\u8BD5\u4FDD\u62A4\u7684\u60C5\u51B5\u4E0B\u7EE7\u7EED\u6536\u655B\u3002\u7B2C\u4E00\u6B21\u542F\u52A8\u8FED\u4EE3\u524D\uFF0C",
+    "\u26A0 \u672A\u914D\u7F6E validation.commands \u65F6\u8FED\u4EE3\u4E0D\u88AB\u4FDD\u62A4\uFF1A\u8BE5\u8F6E\u4F1A\u76F4\u63A5\u4E2D\u6B62\uFF08fail-closed\uFF09\uFF0C",
+    "  \u7A7A\u9A8C\u8BC1\u7ED3\u679C/\u9A8C\u8BC1\u672A\u6267\u884C\u7EDD\u4E0D\u5F53\u4F5C\u201C\u9A8C\u8BC1\u901A\u8FC7\u201D\uFF0C\u8FD0\u884C\u4EE5 converged_unverified /",
+    "  aborted_by_config \u6536\u5C3E\u800C\u4E0D\u662F plain converged\u3002\u7B2C\u4E00\u6B21\u542F\u52A8\u8FED\u4EE3\u524D\uFF0C",
     "  \u8BF7\u5148\u7ED9 validation.commands \u914D\u4E0A\u81F3\u5C11\u4E00\u6761\u771F\u5B9E\u547D\u4EE4\uFF08\u5982 npm test\uFF09\u3002",
     "",
     "\u53EF\u7F16\u8F91\u5B57\u6BB5\uFF1A",
@@ -1844,7 +1848,7 @@ function pickExportExtras(extra) {
   }
   return out;
 }
-function buildRoundComparison(report, validations) {
+function buildRoundComparison(report, validations, fixes) {
   const rounds = /* @__PURE__ */ new Map();
   const rowsFor = (round) => {
     const n = Number(round);
@@ -1861,7 +1865,18 @@ function buildRoundComparison(report, validations) {
     row.findings += 1;
     const sev = typeof f.severity === "string" && f.severity ? f.severity : "unknown";
     row.severities[sev] = (row.severities[sev] || 0) + 1;
-    if (f.status === "fixed") row.fixed += 1;
+  }
+  const fixList = Array.isArray(fixes) ? fixes : [];
+  for (const fx of fixList) {
+    if (!fx || typeof fx !== "object") continue;
+    if (
+      /** @type {Record<string, unknown>} */
+      fx.success !== true
+    ) continue;
+    rowsFor(
+      /** @type {Record<string, unknown>} */
+      fx.round
+    ).fixed += 1;
   }
   const vals = Array.isArray(validations) ? validations : [];
   for (const v of vals) {
@@ -2841,9 +2856,17 @@ function ConvergenceDashboard(props) {
     noteSession(session);
   }, [session]);
   const report = latestReport(session);
+  const pulseSeenRef = React.useRef(null);
   React.useEffect(() => {
     if (!report) return;
     const cur = getCurrentRound(report);
+    const key = hashReport(report) + ":" + String(cur);
+    if (pulseSeenRef.current === null) {
+      pulseSeenRef.current = key;
+      return;
+    }
+    if (pulseSeenRef.current === key) return;
+    pulseSeenRef.current = key;
     const conv = report.convergence;
     emitRoundPulse(cur, conv?.converged === true);
     setPulseKey((k) => k + 1);
@@ -3146,6 +3169,7 @@ function TriagePanel(props) {
     setVerdicts((prev) => setAllVerdicts(prev, "keep"));
     setSelectAll(false);
   };
+  const rootRef = React.useRef(null);
   React.useEffect(() => {
     const doc = typeof document !== "undefined" ? document : null;
     if (!doc) return;
@@ -3154,7 +3178,7 @@ function TriagePanel(props) {
       const t2 = ev.target;
       if (t2 && (t2.tagName === "INPUT" || t2.tagName === "TEXTAREA" || t2.tagName === "SELECT")) return;
       if (t2 && typeof t2.isContentEditable === "boolean" && t2.isContentEditable) return;
-      const rootEl = doc.querySelector('[data-iterate="triage"]');
+      const rootEl = rootRef.current;
       if (!rootEl) return;
       const activeEl = doc.activeElement;
       if (!activeEl) return;
@@ -3292,7 +3316,7 @@ function TriagePanel(props) {
   });
   return React.createElement(
     "div",
-    { "data-iterate-root": "", "data-iterate": "triage", className: "iterate-triage" },
+    { ref: rootRef, "data-iterate-root": "", "data-iterate": "triage", className: "iterate-triage" },
     React.createElement(
       "div",
       { className: "iterate-triage-head" },
@@ -4196,7 +4220,7 @@ function ObservatoryPanel(props) {
     }
     const points = conv.map((n, i) => ({ round: i + 1, count: n }));
     const report = latestReport(session);
-    const comparison = buildRoundComparison(report, manifest.validations || []);
+    const comparison = buildRoundComparison(report, manifest.validations || [], manifest.fixes || []);
     const comparisonTable = comparison.length === 0 ? null : React.createElement(
       "table",
       { className: "iterate-obs-table" },

package/lib/parse.js

@@ -2281,8 +2281,17 @@ export function stoppedReasonLabel(reason, lang = 'zh') {
     schema_invalid: 'Done \u00b7 repeated schema validation failures in review output',
     no_usable_reviewer_output: 'Done \u00b7 no usable review output',
   }
-  if (lang === 'en') return en[reason] ?? (reason ? `Done \u00b7 ${reason}` : 'Done')
-  return zh[reason] ?? (reason ? `已结束 · ${reason}` : '已结束')
+  // Object.hasOwn, NOT `zh[reason]`: a model/hand-edited `stoppedReason` of
+  // `__proto__` / `constructor` / `toString` would otherwise resolve through
+  // the PROTOTYPE CHAIN to Object.prototype or a function (never a string) and
+  // crash React ("Objects are not valid as a React child") when the badge
+  // renders it. An own-key hit is the only way to return a table value; any
+  // other value degrades to a plain text label.
+  const table = lang === 'en' ? en : zh
+  if (typeof reason === 'string' && Object.hasOwn(table, reason)) return table[reason]
+  const text = typeof reason === 'string' && reason !== '' ? reason : ''
+  if (lang === 'en') return text ? `Done \u00b7 ${text}` : 'Done'
+  return text ? `已结束 · ${text}` : '已结束'
 }
 
 // ─── Completion notification ────────────────────────────────────────────────
@@ -2391,8 +2400,9 @@ export function buildConfigEditGuide() {
     '---------------------',
     '配置文件：项目根目录 iterate.config.yaml。',
     '',
-    '⚠ 未配置 validation.commands 时迭代不被保护：每轮 validate 拿到空结果会被当作',
-    '  “验证通过”，等于在没有任何测试保护的情况下继续收敛。第一次启动迭代前，',
+    '⚠ 未配置 validation.commands 时迭代不被保护：该轮会直接中止（fail-closed），',
+    '  空验证结果/验证未执行绝不当作“验证通过”，运行以 converged_unverified /',
+    '  aborted_by_config 收尾而不是 plain converged。第一次启动迭代前，',
     '  请先给 validation.commands 配上至少一条真实命令（如 npm test）。',
     '',
     '可编辑字段：',
@@ -2789,14 +2799,19 @@ function pickExportExtras(extra) {
  * One row per round: findings raised, findings fixed, severity mix and the
  * validation command outcomes recorded on the manifest.
  *
+ * `fixed` counts SUCCESSFUL fixes applied in that round, taken from the
+ * transcript's `fixes` (each `{ round, success }`) — the review `findings`
+ * schema carries no `status`, so reading `f.status` here always yielded 0.
+ *
  * Cross-*session* comparison is intentionally out of scope — that is what the
  * #4 pull instruction is for (see `buildDiskSnapshotInstruction`).
  *
  * @param {unknown} report
  * @param {unknown} validations
+ * @param {unknown} [fixes] transcript fixes (`{round, success}[]`) for the fixed counts
  * @returns {Array<{round: number, findings: number, fixed: number, severities: Record<string, number>, validations: Array<{command: string, exitCode: number|null, allowed: boolean}>}>}
  */
-export function buildRoundComparison(report, validations) {
+export function buildRoundComparison(report, validations, fixes) {
   const rounds = new Map()
   const rowsFor = (round) => {
     const n = Number(round)
@@ -2814,7 +2829,15 @@ export function buildRoundComparison(report, validations) {
     row.findings += 1
     const sev = typeof f.severity === 'string' && f.severity ? f.severity : 'unknown'
     row.severities[sev] = (row.severities[sev] || 0) + 1
-    if (f.status === 'fixed') row.fixed += 1
+  }
+
+  // Fixed counts come from applied fixes (real data), not a finding `status`
+  // the findings schema never produces.
+  const fixList = Array.isArray(fixes) ? fixes : []
+  for (const fx of fixList) {
+    if (!fx || typeof fx !== 'object') continue
+    if ((/** @type {Record<string, unknown>} */ (fx)).success !== true) continue
+    rowsFor((/** @type {Record<string, unknown>} */ (fx)).round).fixed += 1
   }
 
   const vals = Array.isArray(validations) ? validations : []

package/package.json

@@ -1,17 +1,16 @@
 {
   "name": "iterate-plugin",
-  "version": "3.7.0",
+  "version": "3.8.0",
   "description": "dsh plugin that turns the iterate skill into an autonomous closed-loop harness with quality command center and experience bank (v3.3). Features: plan -> parallel review xN -> atomic fixes -> validate -> loop -> auto-stop, plus dry-run pure-review mode, quality gate compute/persist, writable experience bank, defense events stream (record + bilingual labels), and native command buttons — with a live quality command center (F8/F9/F10 render real session data), §8 assign-fix instruction, and task_mode indicator wired end to end.",
   "type": "module",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/jingzhao-l/iterate-skill.git",
-    "directory": "harness/iterate-plugin"
+    "url": "https://github.com/jingzhao-l/iterate-plugin.git"
   },
-  "homepage": "https://github.com/jingzhao-l/iterate-skill/tree/main/harness/iterate-plugin",
+  "homepage": "https://github.com/jingzhao-l/iterate-plugin#readme",
   "bugs": {
-    "url": "https://github.com/jingzhao-l/iterate-skill/issues"
+    "url": "https://github.com/jingzhao-l/iterate-plugin/issues"
   },
   "keywords": [
     "dsh-plugin",
@@ -47,7 +46,9 @@
         "0.2.0-rc.1": "compatible",
         "0.2.0-rc.2": "compatible",
         "0.2.1-alpha.1": "compatible",
-        "0.2.1-alpha.2": "compatible"
+        "0.2.1-alpha.2": "compatible",
+        "0.2.1-alpha.3": "compatible",
+        "0.2.1-alpha.4": "compatible"
       }
     },
     "client": {
@@ -84,15 +85,31 @@
     "test:validate": "tsx --test test/validate.test.ts"
   },
   "dependencies": {
-    "@deepseek-ai/cordis": "4.0.5-alpha.1",
-    "@deepseek-ai/dsh-tools": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-util-values": "0.2.1-alpha.2",
     "js-yaml": "4.3.2"
   },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.5-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.1-rc.1 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4",
+    "@deepseek-ai/dsh-util-values": "0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.5-rc.2 || 0.1.6-alpha.1 || 0.1.6-alpha.2 || 0.1.7-alpha.1 || 0.1.7-alpha.2 || 0.1.7-rc.1 || 0.1.7-rc.2 || 0.2.0-rc.1 || 0.2.0-rc.2 || 0.2.1-alpha.1 || 0.2.1-alpha.2 || 0.2.1-alpha.3 || 0.2.1-alpha.4"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-util-values": {
+      "optional": true
+    }
+  },
   "devDependencies": {
-    "@deepseek-ai/dsh-agent": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-jobs": "0.2.1-alpha.2",
-    "@deepseek-ai/dsh-session": "0.2.1-alpha.2",
+    "@deepseek-ai/cordis": "4.0.5-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-jobs": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-tools": "0.2.1-alpha.4",
+    "@deepseek-ai/dsh-util-values": "0.2.1-alpha.4",
     "@types/js-yaml": "4.0.9",
     "@types/node": "22.15.0",
     "@types/react": "19.2.2",
@@ -104,6 +121,7 @@
     "typescript": "5.9.3"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=20",
+    "dsh": ">=0.1.1-rc.1"
   }
 }

package/src/client/index.ts

@@ -1054,9 +1054,22 @@ function ConvergenceDashboard(props: SlotProps) {
   }, [session])
   const report = latestReport(session)
 
+  // Mount-time suppression: opening a session that ALREADY has a report mounts
+  // this component with that report, and an effect keyed on the report hash
+  // fires immediately — popping a stale "Round X 完成" bubble for work that did
+  // not just complete. Track the first key this instance sees and skip it; only
+  // a subsequent round progression pulses.
+  const pulseSeenRef = React.useRef<string | null>(null)
   React.useEffect(() => {
     if (!report) return
     const cur = getCurrentRound(report)
+    const key = hashReport(report) + ':' + String(cur)
+    if (pulseSeenRef.current === null) {
+      pulseSeenRef.current = key
+      return
+    }
+    if (pulseSeenRef.current === key) return
+    pulseSeenRef.current = key
     const conv = report.convergence
     emitRoundPulse(cur, conv?.converged === true)
     setPulseKey((k) => k + 1)
@@ -1406,6 +1419,11 @@ function TriagePanel(props: SlotProps) {
   }
 
   // ── Keyboard shortcuts (y / n / a on the selected finding, ↑/↓ to move) ──
+  // Multi-instance scoping: every turn that has a report mounts its OWN triage
+  // panel. Keying off `document.querySelector('[data-iterate="triage"]')` would
+  // return only the FIRST one, so y/n/a/↑/↓ silently dead whenever focus sits
+  // in a later panel. A per-component ref points at THIS instance's root.
+  const rootRef = React.useRef<HTMLDivElement | null>(null)
   React.useEffect(() => {
     const doc = typeof document !== 'undefined' ? document : null
     if (!doc) return
@@ -1417,10 +1435,10 @@ function TriagePanel(props: SlotProps) {
       const t = ev.target as HTMLElement | null
       if (t && (t.tagName === 'INPUT' || t.tagName === 'TEXTAREA' || t.tagName === 'SELECT')) return
       if (t && typeof t.isContentEditable === 'boolean' && t.isContentEditable) return
-      // Only act when focus is INSIDE the triage panel. Everything else keeps
+      // Only act when focus is INSIDE THIS panel. Everything else keeps
       // standard behavior (↑/↓ page scroll, typing in the composer), so we do
       // not hijack document-level keys just because a report is mounted.
-      const rootEl = doc.querySelector('[data-iterate="triage"]')
+      const rootEl = rootRef.current
       if (!rootEl) return
       const activeEl = doc.activeElement as HTMLElement | null
       if (!activeEl) return
@@ -1584,7 +1602,7 @@ function TriagePanel(props: SlotProps) {
     )
   })
 
-  return React.createElement('div', { 'data-iterate-root': '', 'data-iterate': 'triage', className: 'iterate-triage' },
+  return React.createElement('div', { ref: rootRef, 'data-iterate-root': '', 'data-iterate': 'triage', className: 'iterate-triage' },
     React.createElement('div', { className: 'iterate-triage-head' },
       React.createElement('span', { role: 'heading', 'aria-level': 3 }, tf(`Iterate · Findings 分诊 ({a0}/{a1})`, { a0: filtered.length, a1: findings.length })),
       React.createElement('span', { className: 'iterate-triage-hint' }, t('y=修复 · n=跳过 · a=已知有意 · ↑/↓ 选择')),
@@ -2525,7 +2543,7 @@ function ObservatoryPanel(props: SlotProps) {
     // client has no filesystem access, so `iterate_history` aggregates have to
     // be echoed back into the session first).
     const report = latestReport(session)
-    const comparison = buildRoundComparison(report, manifest.validations || [])
+    const comparison = buildRoundComparison(report, manifest.validations || [], manifest.fixes || [])
     const comparisonTable = comparison.length === 0
       ? null
       : React.createElement('table', { className: 'iterate-obs-table' },