@anweat/dsh-browser 0.2.1 → 0.2.3

package/lib/downloads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"downloads.js","sourceRoot":"","sources":["../src/downloads.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAEnD,kFAAkF;AAClF,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAA;AAuBxC,+DAA+D;AAC/D,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACtB;IAArB,YAAqB,QAAgB;QACnC,KAAK,CAAC,iDAAiD,QAAQ,0DAA0D,CAAC,CAAA;QADvG,aAAQ,GAAR,QAAQ,CAAQ;QAEnC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAA;IAClC,CAAC;CACF;AAED,8GAA8G;AAC9G,MAAM,SAAS,GAAG,iFAAiF,CAAA;AACnG,4EAA4E;AAC5E,MAAM,eAAe,GAAG,WAAW,CAAA;AACnC,MAAM,mBAAmB,GAAG,YAAY,CAAA;AACxC,MAAM,gBAAgB,GAAG,wCAAwC,CAAA;AACjE,MAAM,cAAc,GAAG,GAAG,CAAA;AAE1B,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,IAAI,CAAC,MAAM,IAAI,cAAc;QAAE,OAAO,IAAI,CAAA;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,MAAe;IAC/D,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE,GAAG,MAAM,IAAI,cAAc,CAAC,YAAY,OAAO,EAAE,EAAE,4FAA4F,CAAC,CAAA,CAAC,CAAC,CAAA;IAC1L,IAAI,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAC7C,IAAI,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,oDAAoD,CAAC,CAAA;IAC5F,IAAI,CAAC,MAAM;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;IACnD,IAAI,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,uCAAuC,CAAC,CAAA;IACvF,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;IAC7C,sHAAsH;IACtH,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IACxC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,IAAI,MAAM;YAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;QAClD,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QAC/C,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,IAAI,6BAA6B,CAAC,CAAA;QACvD,IAAI,GAAG,GAAG,GAAG,IAAI,CAAA;IACnB,CAAC;IACD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAA;AAC1B,CAAC;AAED,8HAA8H;AAC9H,MAAM,UAAU,uBAAuB,CAAC,KAA+D;IACrG,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IACrF,OAAO,oBAAoB,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,KAAK,CAAC;WACpD,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC;WACjE,UAAU,CAAA;AACjB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;QACzE,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,0BAA0B,CAAC,MAA0B;IACnE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IACtB,MAAM,QAAQ,GAAG,yCAAyC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvE,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,MAAM,GAAG,qCAAqC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACjE,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACrD,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACnD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,IAAY,EAAE,SAAiB;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC7F,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAChE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,OAAO,GAAG,SAAS,EAAE,CAAC,CAAA;QAC1F,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjI,IAAI,CAAC;YACH,8FAA8F;YAC9F,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAA;YAClD,IAAI,IAAI,KAAK,QAAQ;gBAAE,SAAQ;YAC/B,+EAA+E;YAC/E,IAAI,CAAC;gBACH,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YACnE,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,IAAK,SAAmC,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAQ;gBACpE,MAAM,SAAS,CAAA;YACjB,CAAC;QACH,CAAC;QACD,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;AAC1G,CAAC;AAED,oHAAoH;AACpH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,SAAS,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAqE,EAAE,IAAY,EAAE,QAAgB;IACtI,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACjD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAwC,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;YACrE,KAAK,IAAI,MAAM,CAAC,MAAM,CAAA;YACtB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,MAAM,CAAC,OAAO,EAAE,EAAE,CAAA;gBAClB,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAA;YACxC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACnB,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC5B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC9C,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAY,EAAE,QAAgB;IAC5E,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ;QAAE,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAClE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5C,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC/F,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,aAAa,CAAC,IAAwB;IACpD,IAAI,CAAC,IAAI;QAAE,OAAM;IACjB,IAAI,CAAC;QAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;AAC1D,CAAC"}

package/lib/index.d.ts

@@ -1,8 +1,9 @@
 /**
  * dsh-browser — self-contained browser runtime plugin for DeepSeek Harness.
  *
- * Bundles Playwright (chromium) + OpenCLI as plugin-local npm dependencies and
- * provides a `browser` service for other plugins (web-search-pro injects it),
+ * Ships Playwright and Patchright as plugin-local npm dependencies (the browser itself is a system Chrome / Edge, or
+ * Playwright Chromium downloaded on demand); OpenCLI is optional and installed separately. Provides
+ * a `browser` service for other plugins (web-search-pro injects it),
  * plus model-facing interactive browser tools.
  * @module dsh-browser
  */

package/lib/index.js

@@ -1,8 +1,9 @@
 /**
  * dsh-browser — self-contained browser runtime plugin for DeepSeek Harness.
  *
- * Bundles Playwright (chromium) + OpenCLI as plugin-local npm dependencies and
- * provides a `browser` service for other plugins (web-search-pro injects it),
+ * Ships Playwright and Patchright as plugin-local npm dependencies (the browser itself is a system Chrome / Edge, or
+ * Playwright Chromium downloaded on demand); OpenCLI is optional and installed separately. Provides
+ * a `browser` service for other plugins (web-search-pro injects it),
  * plus model-facing interactive browser tools.
  * @module dsh-browser
  */
@@ -13,6 +14,7 @@ import { BrowserService } from "./browser-service.js";
 import { registerTools } from "./tools.js";
 import { browserCallDecision, browserPolicyDecision } from "./approval-policy.js";
 import { resolveBrowserCall } from "./actions/surface.js";
+import { policyChangeFor } from "./actions/policy.js";
 import { registerSkillWhenAvailable } from "./skill.js";
 import { installErrorHints } from "./actions/errors.js";
 import { describePrompts } from "./prompts.js";
@@ -77,7 +79,9 @@ export function apply(ctx, config) {
             const callArgs = (call.args ?? {});
             const replaysAsset = call.action === 'automation.run' || (call.action === 'automation.develop' && callArgs.action === 'test');
             const target = replaysAsset && typeof callArgs.id === 'string' ? assets.get(callArgs.id) : undefined;
-            return browserCallDecision(call.action, call.args, resolved.automationMode, target?.kind, call.action === 'automation.develop' ? target?.recipe : undefined, target ? { id: target.id, name: target.name, revision: target.revision } : undefined);
+            const policyChange = policyChangeFor(call.action, call.args);
+            const preview = policyChange ? service.previewPolicyChange(policyChange) : undefined;
+            return browserCallDecision(call.action, call.args, resolved.automationMode, target?.kind, call.action === 'automation.develop' ? target?.recipe : undefined, target ? { id: target.id, name: target.name, revision: target.revision } : undefined, preview);
         }
         return browserPolicyDecision(exec.name, exec.arguments, resolved.automationMode);
     });

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAuB,MAAM,aAAa,CAAA;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AAEvE,MAAM,CAAC,MAAM,IAAI,GAAG,aAAa,CAAA;AACjC,qHAAqH;AACrH,4GAA4G;AAC5G,iHAAiH;AACjH,oHAAoH;AACpH,kHAAkH;AAClH,uDAAuD;AACvD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,CAAA;AAE/B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAC7D,eAAe,MAAM,CAAA;AAErB,OAAO,EAAE,MAAM,EAAE,CAAA;AAOjB,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAElE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAEjK,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAE5I,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAAc;IAChD,yGAAyG;IACzG,wGAAwG;IACxG,qGAAqG;IACrG,yGAAyG;IACzG,wGAAwG;IACxG,yFAAyF;IACzF,MAAM,QAAQ,GAAmB,aAAa,CAAC,MAAM,CAAC,CAAA;IACtD,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEvD,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IAElE,yEAAyE;IACzE,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,EAAE,CAAA;QAC/B,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,UAAU,CAAA;QAClD,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAC1D,oEAAoE;QACpE,+EAA+E;QAC/E,IAAI,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,EAAE,IAAI,KAAK,YAAY;YAAE,OAAO,UAAU,CAAA;QAC5E,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,8GAA8G;YAC9G,sDAAsD;YACtD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAuC,CAAA;YACxE,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,KAAK,gBAAgB,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,oBAAoB,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;YAC7H,MAAM,MAAM,GAAG,YAAY,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACpG,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,oBAAoB,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACpP,CAAC;QACD,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,4EAA4E;IAC5E,2CAA2C;IAC3C,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;IAE5C,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,mGAAmG;IACnG,MAAM,KAAK,GAAG,0BAA0B,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IAE1E,4FAA4F;IAC5F,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAEhF,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;IACjH,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IAEpM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;YAC/D,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC3C,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAA;QACpB,CAAC;QAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACzC,CAAC;IAED,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,8BAA8B,GAAG,QAAQ,CAAC,OAAO,GAAG,YAAY,GAAG,QAAQ,CAAC,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC,cAAc,GAAG,cAAc,GAAG,QAAQ,CAAC,cAAc,GAAG,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAA;AACvO,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAuB,MAAM,aAAa,CAAA;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AAEvE,MAAM,CAAC,MAAM,IAAI,GAAG,aAAa,CAAA;AACjC,qHAAqH;AACrH,4GAA4G;AAC5G,iHAAiH;AACjH,oHAAoH;AACpH,kHAAkH;AAClH,uDAAuD;AACvD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,CAAA;AAE/B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAC7D,eAAe,MAAM,CAAA;AAErB,OAAO,EAAE,MAAM,EAAE,CAAA;AAOjB,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAElE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAEjK,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAE5I,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAAc;IAChD,yGAAyG;IACzG,wGAAwG;IACxG,qGAAqG;IACrG,yGAAyG;IACzG,wGAAwG;IACxG,yFAAyF;IACzF,MAAM,QAAQ,GAAmB,aAAa,CAAC,MAAM,CAAC,CAAA;IACtD,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEvD,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IAElE,yEAAyE;IACzE,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,EAAE,CAAA;QAC/B,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,UAAU,CAAA;QAClD,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAC1D,oEAAoE;QACpE,+EAA+E;QAC/E,IAAI,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,EAAE,IAAI,KAAK,YAAY;YAAE,OAAO,UAAU,CAAA;QAC5E,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,8GAA8G;YAC9G,sDAAsD;YACtD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAuC,CAAA;YACxE,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,KAAK,gBAAgB,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,oBAAoB,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;YAC7H,MAAM,MAAM,GAAG,YAAY,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACpG,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YAC5D,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACpF,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,oBAAoB,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC7P,CAAC;QACD,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,4EAA4E;IAC5E,2CAA2C;IAC3C,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;IAE5C,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,mGAAmG;IACnG,MAAM,KAAK,GAAG,0BAA0B,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IAE1E,4FAA4F;IAC5F,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAEhF,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;IACjH,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IAEpM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;YAC/D,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC3C,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAA;QACpB,CAAC;QAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACzC,CAAC;IAED,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,8BAA8B,GAAG,QAAQ,CAAC,OAAO,GAAG,YAAY,GAAG,QAAQ,CAAC,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC,cAAc,GAAG,cAAc,GAAG,QAAQ,CAAC,cAAc,GAAG,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAA;AACvO,CAAC"}

package/lib/policy-keys.d.ts

@@ -28,3 +28,42 @@ export declare const USAGE_POLICY_BOUNDS: {
     readonly cooldownMs: readonly [100, 300000];
 };
 export declare const USAGE_POLICY_KEYS: (keyof typeof USAGE_POLICY_BOUNDS)[];
+/** The name of a login profile: starts with a letter or digit, then letters, digits, `_` and `-`, at most 40 characters. The policy overlay and the settings card use this one rule. */
+export declare const AUTH_PROFILE_ID: RegExp;
+/** `usagePolicy` defaults (what a missing key means). test/policy-keys.test.ts holds them equal to the resolver's. */
+export declare const USAGE_POLICY_DEFAULTS: {
+    readonly minDelayMs: 750;
+    readonly maxConcurrency: 2;
+    readonly burst: 3;
+    readonly maxPagesPerRun: 20;
+    readonly maxDepth: 2;
+    readonly retryLimit: 2;
+    readonly backoffBaseMs: 1000;
+    readonly cooldownMs: 30000;
+};
+/**
+ * `automationAssets` defaults and the inclusive range of each number. The resolver CLAMPS a value outside its range
+ * without a word; the card shows the range and refuses such a value instead. `directory` has no default (the plugin
+ * picks one under $DSH_HOME).
+ */
+export declare const ASSET_POLICY_DEFAULTS: {
+    readonly enabled: true;
+    readonly persistenceMode: "suggest";
+    readonly activationMode: "manual";
+    readonly minSuccessfulRuns: 3;
+    readonly minDistinctSessions: 2;
+    readonly successWindowDays: 14;
+    readonly minSuccessRate: 0.8;
+    readonly maxCandidates: 20;
+    readonly candidateTtlDays: 14;
+    readonly maxSuggestionsPerDay: 2;
+    readonly maxDrafts: 10;
+    readonly maxActiveAssets: 50;
+    readonly retrievalTopK: 5;
+    readonly catalogTokenBudget: 800;
+    readonly modelDevelopmentEnabled: true;
+    readonly maxModelDraftWritesPerSession: 3;
+    readonly maxTestCredentials: 5;
+    readonly minInputSetsForActivation: 2;
+};
+export declare const ASSET_POLICY_BOUNDS: Partial<Record<AssetPolicyKey, readonly [number, number]>>;

package/lib/policy-keys.js

@@ -31,4 +31,25 @@ export const USAGE_POLICY_BOUNDS = {
     maxDepth: [0, 5], retryLimit: [0, 5], backoffBaseMs: [1, 60_000], cooldownMs: [100, 300_000],
 };
 export const USAGE_POLICY_KEYS = Object.keys(USAGE_POLICY_BOUNDS);
+/** The name of a login profile: starts with a letter or digit, then letters, digits, `_` and `-`, at most 40 characters. The policy overlay and the settings card use this one rule. */
+export const AUTH_PROFILE_ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,39}$/;
+/** `usagePolicy` defaults (what a missing key means). test/policy-keys.test.ts holds them equal to the resolver's. */
+export const USAGE_POLICY_DEFAULTS = {
+    minDelayMs: 750, maxConcurrency: 2, burst: 3, maxPagesPerRun: 20, maxDepth: 2, retryLimit: 2, backoffBaseMs: 1_000, cooldownMs: 30_000,
+};
+/**
+ * `automationAssets` defaults and the inclusive range of each number. The resolver CLAMPS a value outside its range
+ * without a word; the card shows the range and refuses such a value instead. `directory` has no default (the plugin
+ * picks one under $DSH_HOME).
+ */
+export const ASSET_POLICY_DEFAULTS = {
+    enabled: true, persistenceMode: 'suggest', activationMode: 'manual', minSuccessfulRuns: 3, minDistinctSessions: 2, successWindowDays: 14,
+    minSuccessRate: 0.8, maxCandidates: 20, candidateTtlDays: 14, maxSuggestionsPerDay: 2, maxDrafts: 10, maxActiveAssets: 50, retrievalTopK: 5,
+    catalogTokenBudget: 800, modelDevelopmentEnabled: true, maxModelDraftWritesPerSession: 3, maxTestCredentials: 5, minInputSetsForActivation: 2,
+};
+export const ASSET_POLICY_BOUNDS = {
+    minSuccessfulRuns: [2, 20], minDistinctSessions: [1, 10], successWindowDays: [1, 90], minSuccessRate: [0.5, 1], maxCandidates: [1, 100],
+    candidateTtlDays: [1, 90], maxSuggestionsPerDay: [0, 20], maxDrafts: [1, 100], maxActiveAssets: [1, 200], retrievalTopK: [1, 20],
+    catalogTokenBudget: [100, 4_000], maxModelDraftWritesPerSession: [1, 20], maxTestCredentials: [1, 20], minInputSetsForActivation: [1, 5],
+};
 //# sourceMappingURL=policy-keys.js.map

package/lib/policy-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-keys.js","sourceRoot":"","sources":["../src/policy-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB;IACvG,mBAAmB,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,sBAAsB;IAClG,WAAW,EAAE,iBAAiB,EAAE,eAAe,EAAE,oBAAoB;IACrE,yBAAyB,EAAE,+BAA+B,EAAE,oBAAoB,EAAE,2BAA2B;CACrG,CAAA;AAIV,8EAA8E;AAC9E,MAAM,CAAC,MAAM,yBAAyB,GAA8B,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAA;AAC1G,MAAM,CAAC,MAAM,wBAAwB,GAA8B,CAAC,WAAW,CAAC,CAAA;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAuD;IACpF,eAAe,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC;IAC3D,cAAc,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC;CAC1C,CAAA;AACD,uGAAuG;AACvG,MAAM,CAAC,MAAM,2BAA2B,GAA+D;IACrG,yBAAyB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CAClC,CAAA;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC;IACzF,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC;CAChC,CAAA;AAE9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAyC,CAAA"}
+{"version":3,"file":"policy-keys.js","sourceRoot":"","sources":["../src/policy-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB;IACvG,mBAAmB,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,sBAAsB;IAClG,WAAW,EAAE,iBAAiB,EAAE,eAAe,EAAE,oBAAoB;IACrE,yBAAyB,EAAE,+BAA+B,EAAE,oBAAoB,EAAE,2BAA2B;CACrG,CAAA;AAIV,8EAA8E;AAC9E,MAAM,CAAC,MAAM,yBAAyB,GAA8B,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAA;AAC1G,MAAM,CAAC,MAAM,wBAAwB,GAA8B,CAAC,WAAW,CAAC,CAAA;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAuD;IACpF,eAAe,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC;IAC3D,cAAc,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC;CAC1C,CAAA;AACD,uGAAuG;AACvG,MAAM,CAAC,MAAM,2BAA2B,GAA+D;IACrG,yBAAyB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CAClC,CAAA;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC;IACzF,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC;CAChC,CAAA;AAE9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAyC,CAAA;AAEzG,wLAAwL;AACxL,MAAM,CAAC,MAAM,eAAe,GAAG,kCAAkC,CAAA;AAEjE,sHAAsH;AACtH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM;CACnE,CAAA;AAErE;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE;IACxI,cAAc,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;IAC3I,kBAAkB,EAAE,GAAG,EAAE,uBAAuB,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,yBAAyB,EAAE,CAAC;CACrI,CAAA;AAEV,MAAM,CAAC,MAAM,mBAAmB,GAA+D;IAC7F,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC;IACvI,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IAChI,kBAAkB,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,6BAA6B,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,yBAAyB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CACzI,CAAA"}

package/lib/policy-overlay.d.ts

@@ -0,0 +1,189 @@
+/**
+ * The policy overlay: restriction-type settings that an agent may edit, without hand-editing the config.
+ *
+ * Only two kinds of field can be overlaid: `authProfiles` (allowed domains, persistState, storageStatePath, and
+ * creating or removing a profile) and the `usagePolicy` throttle values. The panel's configuration stays the
+ * baseline; the overlay is a small managed file next to the plugin's other data (`$DSH_HOME/data/browser/`) that is
+ * merged on top of it, with a revision for optimistic locking and a bounded audit trail.
+ *
+ * Everything an agent may put in the overlay is validated here, strictly, by the same functions that re-validate the
+ * file when it is loaded: a file that does not parse, fails its checksum or holds a value the validators refuse is
+ * ignored as a whole (the baseline applies) and reported, never half-applied.
+ * @module dsh-browser/policy-overlay
+ */
+import type { AuthProfileConfig } from './auth-profiles.ts';
+import type { UsagePolicy } from './usage-policy.ts';
+export declare const MAX_DOMAINS_PER_PROFILE = 50;
+export declare const MAX_PROFILES = 30;
+export declare const MAX_AUDIT_ENTRIES = 50;
+/** Whether a (non-wildcard) name is a TLD or a registry/platform suffix, which can never be a login scope. */
+export declare function isPublicSuffix(name: string): boolean;
+export interface DomainEnv {
+    allowPrivateHosts: boolean;
+}
+/**
+ * Normalize one allowed-domain entry to its stored form (lower-case punycode, `*.` kept) or throw
+ * {@link ActionArgError} saying exactly why it is refused.
+ */
+export declare function normalizeAllowedDomain(raw: unknown, env: DomainEnv): string;
+/** The name an entry matches (`*.a.com` and `a.com` scope the same hosts, see hostAllowed). */
+export declare function domainBase(entry: string): string;
+export declare function normalizeAllowedDomains(raw: unknown, env: DomainEnv): string[];
+export declare function checkProfileId(id: unknown): string;
+export declare function checkReason(reason: unknown): string;
+export interface PathEnv {
+    /** The only directory an agent-set storageStatePath may live in. */
+    authDir: string;
+    /** Directories no auth file may be inside of. */
+    forbidden: readonly string[];
+    /** Set when the auth directory overlaps one of {@link forbidden}: every agent-set path is refused. */
+    authDirProblem?: string;
+}
+/** The absolute path of an agent-set auth state file, or an {@link ActionArgError} saying why not. */
+export declare function checkStorageStatePath(raw: unknown, env: PathEnv, takenByOthers?: readonly string[]): string;
+/** Whether the auth directory overlaps the directories that hold downloads or screenshots (then no agent path is trusted). */
+export declare function authDirConflict(authDir: string, forbidden: readonly string[]): string | undefined;
+export declare function checkUsagePatch(raw: unknown): Partial<UsagePolicy>;
+/** What an overlay entry may hold for a profile: only the fields that differ from the baseline (all of them for a new profile). */
+export interface OverlayProfile {
+    allowedDomains?: string[];
+    persistState?: boolean;
+    storageStatePath?: string;
+}
+export type Direction = 'tighten' | 'loosen' | 'none';
+export interface AuditEntry {
+    revision: number;
+    at: string;
+    /** `agent` (an action), `panel` (the settings card's clear button). */
+    source: 'agent' | 'panel';
+    /** The session that asked, for an agent change. */
+    session?: string;
+    action: string;
+    reason: string;
+    direction: Direction;
+    /** One line per change. */
+    changes: string[];
+}
+export interface PolicyOverlay {
+    version: 1;
+    revision: number;
+    updatedAt: string;
+    /** `null` removes a baseline profile. */
+    authProfiles: Record<string, OverlayProfile | null>;
+    usagePolicy: Partial<UsagePolicy>;
+    audit: AuditEntry[];
+}
+export interface EffectivePolicy {
+    authProfiles: Record<string, AuthProfileConfig>;
+    usagePolicy: UsagePolicy;
+}
+export interface Baseline {
+    authProfiles: Record<string, AuthProfileConfig>;
+    usagePolicy: UsagePolicy;
+}
+export declare function emptyOverlay(): PolicyOverlay;
+/** The baseline with the overlay merged on top. Never mutates its inputs. */
+export declare function mergeOverlay(baseline: Baseline, overlay: PolicyOverlay): EffectivePolicy;
+export interface ProfileDiff {
+    id: string;
+    change: 'added' | 'removed' | 'changed';
+    domainsAdded: string[];
+    domainsRemoved: string[];
+    persistState?: {
+        before: boolean;
+        after: boolean;
+    };
+    storageStatePath?: {
+        before: string;
+        after: string;
+    };
+}
+export interface PolicyDiff {
+    profiles: ProfileDiff[];
+    usage: {
+        key: string;
+        before: number;
+        after: number;
+        direction: Direction;
+    }[];
+    direction: Direction;
+    /** One human-readable line per change. */
+    lines: string[];
+}
+export declare function diffPolicy(before: EffectivePolicy, after: EffectivePolicy): PolicyDiff;
+export interface PolicyStoreOptions {
+    /** `$DSH_HOME/data/browser/policy-overlay.json`. */
+    file: string;
+    authDir: string;
+    snapshotDir: string;
+    downloadDir: string;
+    allowPrivateHosts: boolean;
+    baseline: Baseline;
+}
+export type PolicyChange = {
+    kind: 'setAuthProfile';
+    id: string;
+    allowedDomains?: unknown;
+    persistState?: unknown;
+    storageStatePath?: unknown;
+} | {
+    kind: 'removeAuthProfile';
+    id: string;
+} | {
+    kind: 'setUsagePolicy';
+    values: unknown;
+} | {
+    kind: 'reset';
+    scope: 'all' | 'usagePolicy' | 'authProfile';
+    id?: string;
+};
+export interface ChangeMeta {
+    source: 'agent' | 'panel';
+    session?: string;
+    reason: string;
+    action: string;
+    /** When given, the change only applies if the overlay is still at this revision. */
+    expectedRevision?: number;
+}
+export interface PlannedChange {
+    before: EffectivePolicy;
+    after: EffectivePolicy;
+    overlay: PolicyOverlay;
+    diff: PolicyDiff;
+}
+export interface AppliedChange extends PlannedChange {
+    revision: number;
+    audit: AuditEntry;
+}
+export declare class PolicyConflictError extends Error {
+    constructor(message: string);
+}
+export declare function checksumOf(overlay: PolicyOverlay): string;
+export declare class PolicyOverlayStore {
+    private readonly options;
+    private overlay;
+    private signature;
+    private problem;
+    private readonly pathEnv;
+    constructor(options: PolicyStoreOptions);
+    get file(): string;
+    get authDir(): string;
+    get allowPrivateHosts(): boolean;
+    get baseline(): Baseline;
+    /** Why the overlay file was ignored, if it was. */
+    get warning(): string | undefined;
+    current(): PolicyOverlay;
+    effective(): EffectivePolicy;
+    private stat;
+    /** Re-read the file when it changed on disk. Returns whether the effective policy may have changed. */
+    refresh(): boolean;
+    private reload;
+    /** Strict parse: unknown keys, wrong types, a failed checksum or any value the validators refuse reject the whole file. */
+    private parse;
+    /** Compute a change without writing anything. Throws {@link ActionArgError} for an invalid change. */
+    plan(change: PolicyChange): PlannedChange;
+    /** Plan and write a change: re-reads the file first, checks the revision, writes atomically (0600) and appends the audit entry. */
+    apply(change: PolicyChange, meta: ChangeMeta): AppliedChange;
+    /** Move an unreadable file aside (kept for inspection) so a fresh overlay can start. */
+    private quarantine;
+}