@deepseek-ai/dsh-client-ui-permission-presets 0.0.1-rc.3

package/LICENSE

@@ -0,0 +1,28 @@
+BSD 3-Clause License
+
+Copyright (c) 2026, DeepSeek
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

package/README.i18n.yaml

@@ -0,0 +1,6 @@
+# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
+# side as of the last confirmed-consistent state. Both languages carry equal authority;
+# after editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write packages/client/ui-permission-presets/README.md
+README.md: 20529e6ce8a187254774fc85cfd981e4a9115937
+README.zh.md: afe7ff36e52511a182a783153879125d48cccca5

package/README.md

@@ -0,0 +1,21 @@
+# @deepseek-ai/dsh-client-ui-permission-presets
+
+English | [中文](README.zh.md)
+
+Permission browser surfaces for two different lifetimes. The General-settings row reads the explicitly exposed `permission` Settings descriptor, derives its options from the host's dynamic `defaultPreset` enum, and writes one `settings.mutate` path operation with the descriptor revision. Its observable rides the slot system's `hooks` compartment, so the renderer owns React hook binding; a push invalidation refetches the descriptor. This value applies only when a later session is created; changing it does not switch the current session. Choosing Full access requires an explicit risk acknowledgement before the row writes it.
+
+The current-session surface remains a popupSelect DECORATION hung on the host `/permission` command (`ctx.commandUi.decorate`). A decoration is not a second command — the host command keeps its slash-menu row, the argued path (`/permission <preset>` switches directly), and the durable lifecycle logging; the decoration replaces only the bare invocation with the picker: one flat preset list with the current value marked active and kebab-case preset names rendered as title-case labels (`workspace-write` → `Workspace Write`, the composer chip's display transform twin), where a pick submits the `/permission <preset>` command line. Options and the active mark read the session's `permissions` projection (the same host-computed select the composer chip renders), so both current-session surfaces share one read source and one write path, and the pushed projection frame is the single confirmation both follow. The decoration is available exactly while the projection key is present; a permission-less composition shows neither picker nor Settings row.
+
+The `/client` exports are the plugin body (`apply`/`inject`).
+
+## Model Experience
+
+Indirectly, through the permission facts written by its two surfaces: the Settings row causes a future session to start with whole-value knob events (`permission/preset`, `sandbox/mode`, `approval/policy`), while the `/permission` picker appends the same facts when it switches the current session; those events select the sandbox mode and approval policy later tool calls resolve, and picker interaction adds no prompt content.
+
+#### KV Cache effect
+
+No direct invalidation; the knob consumers own any request-prefix changes.
+
+## Known Limitations and Deferred Work
+
+- **The Settings row is Web-only** — non-Web clients may still switch the current session through `/permission`, but do not receive this browser contribution.

package/README.zh.md

@@ -0,0 +1,21 @@
+# @deepseek-ai/dsh-client-ui-permission-presets
+
+[English](README.md) | 中文
+
+面向两种不同生命周期的浏览器权限界面。「通用」设置行读取显式暴露的 `permission` Settings 描述符，从 host 的动态 `defaultPreset` enum 中推导选项，并携带描述符的 revision 写入一条 `settings.mutate` 路径操作。它的 observable 经 slot 系统的 `hooks` 格传递，因此 React 钩子由渲染器绑定；推送的失效通知会重新获取描述符。这个值仅在后续会话创建时生效；改变它不会切换当前会话。选择 Full access 时必须先显式确认风险，该行随后才会写入。
+
+当前会话界面仍是挂在 host `/permission` 命令上的 popupSelect **装饰**（`ctx.commandUi.decorate`）。装饰不是第二条命令——host 命令保留斜杠菜单行、带参路径（`/permission <preset>` 直接切换）与持久生命周期记账；装饰只把裸调用替换为选择框：一张扁平预设列表，当前值标记为 active，kebab-case 预设名渲染为 Title Case 标签（`workspace-write` → `Workspace Write`，与 composer chip 的显示变换孪生），选中即提交 `/permission <preset>` 命令行。选项与 active 标记读取会话的 `permissions` 投影（与 composer chip 渲染的同一份 host 计算 select），因此两个当前会话界面共享同一读源与同一写路径，推送的投影帧是两者共同跟随的唯一确认。装饰恰在投影 key 存在时可用；无权限组合既不显示选择框，也不显示 Settings 行。
+
+`/client` 导出面为插件本体（`apply`／`inject`）。
+
+## 模型体验
+
+通过两个界面写入的权限事实间接影响：Settings 行使未来会话带着全量值旋钮事件（`permission/preset`、`sandbox/mode`、`approval/policy`）启动，而 `/permission` 选择框切换当前会话时会追加相同的事实；这些事件决定后续工具调用解析到的沙箱模式与审批策略，选择框交互本身不添加任何提示词内容。
+
+#### KV Cache 影响
+
+无直接失效；请求前缀的变化由旋钮消费方自行承担。
+
+## 已知限制与暂缓事项
+
+- **Settings 行仅在 Web 中可用**：非 Web 客户端仍可通过 `/permission` 切换当前会话，但不会获得这项浏览器贡献。

package/lib/client.js

@@ -0,0 +1,461 @@
+window.__ModuleLoader__.load({
+	id: "@deepseek-ai/dsh-client-ui-permission-presets",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		let react_jsx_runtime = require("react/jsx-runtime");
+		let react = require("react");
+		let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
+		let _deepseek_ai_dsh_client_runtime_client = require("@deepseek-ai/dsh-client-runtime/client");
+		let _deepseek_ai_dsh_client_schema_form = require("@deepseek-ai/dsh-client-schema-form");
+		//#region lib/types/client/presentation.js
+		/** Machine value of the preset that requires an explicit GUI risk gate. */
+		const FULL_ACCESS_PRESET = "danger-full-access";
+		/**
+		* Convert conventional kebab-case preset names into user-facing title case.
+		* @param name - host-supplied preset label or key.
+		* @returns the title-cased conventional key, or a non-kebab label unchanged.
+		*/
+		function displayPresetName(name) {
+			if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name)) return name;
+			return name.split("-").map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join(" ");
+		}
+		/**
+		* Render a permission preset under its product label.
+		* @param value - preset machine value.
+		* @param name - host-supplied preset name.
+		* @returns the Full access product label or the conventional display name.
+		*/
+		function displayPermissionPreset(value, name) {
+			return value === "danger-full-access" ? "Full access" : displayPresetName(name);
+		}
+		//#endregion
+		//#region \0dsh-css:/home/runner/work/deepseek-harness/deepseek-harness/packages/client/ui-permission-presets/src/client/PermissionRow.module.css.mjs
+		const css = ".oY77xG_row{border-bottom:1px solid var(--dsw-alias-border-l2);align-items:center;gap:8px;padding:16px 0;display:flex}.oY77xG_rowText{flex-direction:column;flex:1;gap:4px;min-width:0;padding-right:48px;display:flex}.oY77xG_title{color:var(--dsw-alias-label-primary);font-size:14px;font-weight:400;line-height:22px}.oY77xG_desc{color:var(--dsw-alias-label-tertiary);font-size:12px;font-weight:400;line-height:18px}.oY77xG_selector{background:var(--dsw-alias-bg-module-platform);height:36px;font:inherit;color:var(--dsw-alias-label-primary);cursor:pointer;border:none;border-radius:18px;align-items:center;gap:12px;padding:0 14px;font-size:14px;line-height:22px;display:inline-flex}.oY77xG_selector:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.oY77xG_selector:disabled{cursor:default}.oY77xG_chevron{flex:none}";
+		const tagId = "@deepseek-ai/dsh-client-ui-permission-presets/PermissionRow.module.css";
+		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
+			const tag = document.createElement("style");
+			tag.dataset.plugin = "@deepseek-ai/dsh-client-ui-permission-presets";
+			tag.dataset.pluginCss = tagId;
+			tag.textContent = css;
+			document.head.appendChild(tag);
+		}
+		var PermissionRow_module_css_default = {
+			"desc": "oY77xG_desc",
+			"title": "oY77xG_title",
+			"selector": "oY77xG_selector",
+			"rowText": "oY77xG_rowText",
+			"row": "oY77xG_row",
+			"chevron": "oY77xG_chevron"
+		};
+		//#endregion
+		//#region lib/types/client/PermissionRow.js
+		/**
+		* Permission preference row: the default preset for subsequently created
+		* sessions. Current-session switches remain on the composer `/permission`
+		* control.
+		*/
+		/**
+		* Render the new-session Permission default selector.
+		* @param props - composed slot props.
+		* @returns the row, or null when the host does not expose permission settings.
+		*/
+		function PermissionRow({ load, select, usePermission, t }) {
+			const state = usePermission((snapshot) => snapshot);
+			const [open, setOpen] = (0, react.useState)(false);
+			const [confirmingFullAccess, setConfirmingFullAccess] = (0, react.useState)(false);
+			const [acknowledged, setAcknowledged] = (0, react.useState)(false);
+			(0, react.useEffect)(() => {
+				load();
+			}, [load]);
+			(0, react.useEffect)(() => {
+				if (state.writable && state.status !== "unavailable") return;
+				setOpen(false);
+				setAcknowledged(false);
+				setConfirmingFullAccess(false);
+			}, [state.status, state.writable]);
+			if (state.status === "unavailable") return null;
+			const selected = state.options.find((option) => option.id === state.currentValue);
+			const busy = state.status === "loading" || state.status === "saving" || confirmingFullAccess;
+			const label = selected?.label ?? (busy ? t("loading") : t("unavailable"));
+			const description = state.error ?? t("description");
+			return (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [(0, react_jsx_runtime.jsxs)("div", {
+				className: PermissionRow_module_css_default.row,
+				children: [(0, react_jsx_runtime.jsxs)("div", {
+					className: PermissionRow_module_css_default.rowText,
+					children: [(0, react_jsx_runtime.jsx)("div", {
+						className: PermissionRow_module_css_default.title,
+						children: t("title")
+					}), (0, react_jsx_runtime.jsx)("div", {
+						className: PermissionRow_module_css_default.desc,
+						role: state.error === null ? void 0 : "alert",
+						children: description
+					})]
+				}), (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Menu, {
+					open,
+					onClose: () => {
+						setOpen(false);
+					},
+					items: state.options.map((option) => ({
+						id: option.id,
+						label: option.label
+					})),
+					selectedId: state.currentValue,
+					onSelect: (id) => {
+						setOpen(false);
+						if (id === state.currentValue) return;
+						if (id === "danger-full-access") {
+							setAcknowledged(false);
+							setConfirmingFullAccess(true);
+							return;
+						}
+						select(id);
+					},
+					align: "end",
+					portal: true,
+					anchor: (0, react_jsx_runtime.jsxs)("button", {
+						type: "button",
+						className: PermissionRow_module_css_default.selector,
+						"aria-haspopup": "menu",
+						"aria-expanded": open,
+						disabled: busy || !state.writable || state.options.length === 0,
+						onClick: () => {
+							setOpen((value) => !value);
+						},
+						children: [label, (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutline14, { className: PermissionRow_module_css_default.chevron })]
+					})
+				})]
+			}), (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.RiskConfirmation, {
+				open: confirmingFullAccess,
+				title: t("confirm.title"),
+				description: t("confirm.description"),
+				acknowledgeLabel: t("confirm.acknowledge"),
+				cancelLabel: t("confirm.cancel"),
+				confirmLabel: t("confirm.enable"),
+				acknowledged,
+				disabled: !state.writable || state.status === "saving",
+				onAcknowledgedChange: setAcknowledged,
+				onCancel: () => {
+					setAcknowledged(false);
+					setConfirmingFullAccess(false);
+				},
+				onConfirm: () => {
+					setAcknowledged(false);
+					setConfirmingFullAccess(false);
+					select(FULL_ACCESS_PRESET);
+				}
+			})] });
+		}
+		//#endregion
+		//#region lib/types/client/locales.js
+		/** `settings.permission` namespace dictionaries (the Permission row's copy). */
+		/** Simplified Chinese dictionary (the key-set source of truth). */
+		const zh = {
+			"title": "权限",
+			"description": "选择新会话的默认权限模式",
+			"loading": "加载中",
+			"unavailable": "不可用",
+			"confirm.title": "确认启用 Full access？",
+			"confirm.description": "启用 Full access 后，新会话将减少确认步骤，并且可以直接执行更多操作，包括敏感操作、文件修改或外部命令。仅建议在你信任后续任务时使用。",
+			"confirm.acknowledge": "我已了解风险，并愿意继续",
+			"confirm.cancel": "取消",
+			"confirm.enable": "启用 Full access"
+		};
+		/** English dictionary, checked complete against the zh key set. */
+		const en = {
+			"title": "Permission",
+			"description": "Choose the default permission mode for new sessions",
+			"loading": "Loading",
+			"unavailable": "Unavailable",
+			"confirm.title": "Enable Full access?",
+			"confirm.description": "Full access lets new sessions reduce confirmation steps and perform more actions directly, including sensitive operations, file changes, or external commands. Only use it when you trust subsequent tasks.",
+			"confirm.acknowledge": "I understand the risks and want to continue",
+			"confirm.cancel": "Cancel",
+			"confirm.enable": "Enable Full access"
+		};
+		/** Simplified Chinese dictionary for the current-session popup gate. */
+		const accessZh = {
+			"confirm.title": "确认启用 Full access？",
+			"confirm.description": "启用 Full access 后，agent 将减少确认步骤，并且可以直接执行更多操作，包括敏感操作、文件修改或外部命令。仅建议在你信任当前任务时使用。",
+			"confirm.acknowledge": "我已了解风险，并愿意继续",
+			"confirm.cancel": "取消",
+			"confirm.enable": "启用 Full access"
+		};
+		/** English dictionary for the current-session popup gate. */
+		const accessEn = {
+			"confirm.title": "Enable Full access?",
+			"confirm.description": "Full access reduces confirmation steps and lets the agent perform more actions directly, including sensitive operations, file changes, or external commands. Only use it when you trust the current task.",
+			"confirm.acknowledge": "I understand the risks and want to continue",
+			"confirm.cancel": "Cancel",
+			"confirm.enable": "Enable Full access"
+		};
+		//#endregion
+		//#region lib/types/client/settings-store.js
+		/**
+		* Permission default-settings controller. The host descriptor supplies the
+		* current value and the dynamic preset enum; writes target only
+		* `defaultPreset` and carry the descriptor revision.
+		*/
+		/** Permission's settings namespace on the host wire. */
+		const PERMISSION_SETTINGS_NS = "permission";
+		/**
+		* Read the dynamic preset enum encoded by the host's `defaultPreset` schema.
+		* @param view - permission namespace descriptor.
+		* @returns current value and selectable options.
+		*/
+		function permissionDefaultOf(view) {
+			const value = view.value?.defaultPreset;
+			if (typeof value !== "string") throw new Error("permission settings has no defaultPreset value");
+			const node = (0, _deepseek_ai_dsh_client_schema_form.nodeAtPath)((0, _deepseek_ai_dsh_client_schema_form.rehydrateSchema)(view.schema), ["defaultPreset"]);
+			if (node === void 0) throw new Error("permission settings schema has no defaultPreset field");
+			const options = (node.type === "union" ? node.list ?? [] : [node]).flatMap((candidate) => {
+				const choice = candidate;
+				if (choice.type !== "const" || typeof choice.value !== "string") return [];
+				const described = choice.meta?.description;
+				return [{
+					id: choice.value,
+					label: typeof described === "string" && described.length > 0 ? displayPermissionPreset(choice.value, described) : displayPermissionPreset(choice.value, choice.value)
+				}];
+			});
+			if (options.length === 0 || !options.some((option) => option.id === value)) throw new Error("permission settings schema does not advertise its current preset");
+			return {
+				currentValue: value,
+				options
+			};
+		}
+		/** Controller joining Settings reads, writes, and pushed invalidations. */
+		var PermissionPresetSettingsController = class {
+			api;
+			/** Row snapshot consumed through a bound selector hook. */
+			store = (0, _deepseek_ai_dsh_client_runtime_client.createSnapshotStore)({
+				status: "idle",
+				error: null,
+				writable: false,
+				currentValue: "",
+				options: [],
+				revision: 0
+			});
+			generation = 0;
+			view;
+			/** @param api - Settings wire face. */
+			constructor(api) {
+				this.api = api;
+			}
+			/**
+			* Refresh the permission descriptor. Latest request wins.
+			* @returns nothing; {@link store} carries success or failure.
+			*/
+			async load() {
+				const generation = ++this.generation;
+				this.store.update((state) => {
+					state.status = "loading";
+					state.error = null;
+				});
+				try {
+					const response = await this.api.settings.describe({});
+					if (!response.result.ok) throw new Error(response.result.error.message);
+					if (generation !== this.generation) return;
+					const view = response.result.value.namespaces.find((entry) => entry.ns === PERMISSION_SETTINGS_NS);
+					if (view === void 0) {
+						this.view = void 0;
+						this.store.update((state) => {
+							state.status = "unavailable";
+							state.writable = false;
+							state.currentValue = "";
+							state.options = [];
+						});
+						return;
+					}
+					this.accept(view, response.result.value.writable);
+				} catch (error) {
+					if (generation !== this.generation) return;
+					this.fail(error);
+				}
+			}
+			/**
+			* Persist one preset as the default for subsequently created sessions.
+			* @param preset - advertised preset key.
+			* @returns nothing; {@link store} carries success or failure.
+			*/
+			async select(preset) {
+				const view = this.view;
+				const state = this.store.getSnapshot();
+				if (view === void 0 || !state.writable) return;
+				const generation = ++this.generation;
+				this.store.update((draft) => {
+					draft.status = "saving";
+					draft.error = null;
+				});
+				try {
+					const response = await this.api.settings.mutate({
+						ns: PERMISSION_SETTINGS_NS,
+						ops: [{
+							op: "set",
+							path: ["defaultPreset"],
+							value: preset
+						}],
+						expectedRevision: view.revision
+					});
+					if (generation !== this.generation) return;
+					if (!response.result.ok) throw new Error(response.result.error.message);
+					this.accept(response.result.value, true);
+				} catch (error) {
+					if (generation !== this.generation) return;
+					this.fail(error);
+				}
+			}
+			/** Stop in-flight responses from publishing after plugin disposal. */
+			dispose() {
+				this.generation += 1;
+				this.view = void 0;
+			}
+			accept(view, writable) {
+				const resolved = permissionDefaultOf(view);
+				this.view = view;
+				this.store.update((state) => {
+					state.status = "ready";
+					state.error = null;
+					state.writable = writable;
+					state.currentValue = resolved.currentValue;
+					state.options = resolved.options;
+					state.revision = view.revision;
+				});
+			}
+			fail(error) {
+				this.store.update((state) => {
+					state.status = "error";
+					state.error = error instanceof Error ? error.message : String(error);
+				});
+			}
+		};
+		/**
+		* Refetch only after the row has opened once.
+		* @param controller - permission settings controller.
+		*/
+		function refreshPermissionIfLoaded(controller) {
+			if (controller.store.getSnapshot().status === "idle") return;
+			controller.load();
+		}
+		//#endregion
+		//#region lib/types/client/index.js
+		/** Required services (cordis fiber inject). */
+		const inject = [
+			"commandUi",
+			"sessions",
+			"slots",
+			"locale",
+			"connection",
+			"remote"
+		];
+		const ACCESS_NS = "permission.access";
+		/** Read one session's current permissions projection value (undefined = capability absent). */
+		function selectOf(session) {
+			return session?.projections.faceOf("permissions").getSnapshot();
+		}
+		/** Flatten the projection select into popup rows; `custom` is display state, never a target. */
+		function optionsOf(value, t) {
+			return value.options.filter((option) => option.value !== "custom").map((option) => ({
+				id: option.value,
+				label: displayPermissionPreset(option.value, option.name),
+				...option.description !== void 0 ? { detail: option.description } : {},
+				...option.value === value.currentValue ? { active: true } : {},
+				...option.value === "danger-full-access" ? { confirmation: {
+					title: t("confirm.title"),
+					description: t("confirm.description"),
+					acknowledgeLabel: t("confirm.acknowledge"),
+					cancelLabel: t("confirm.cancel"),
+					confirmLabel: t("confirm.enable")
+				} } : {}
+			}));
+		}
+		/**
+		* Client plugin body: register the /permission popup picker over the
+		* permissions projection.
+		* @param ctx - client root context.
+		*/
+		function apply(ctx) {
+			const command = ctx.get("commandUi");
+			const sessions = ctx.sessions;
+			ctx.effect(() => {
+				const disposers = [ctx.locale.register(ACCESS_NS, "zh", {
+					"confirm.title": accessZh["confirm.title"],
+					"confirm.description": accessZh["confirm.description"],
+					"confirm.acknowledge": accessZh["confirm.acknowledge"],
+					"confirm.cancel": accessZh["confirm.cancel"],
+					"confirm.enable": accessZh["confirm.enable"]
+				}), ctx.locale.register(ACCESS_NS, "en", {
+					"confirm.title": accessEn["confirm.title"],
+					"confirm.description": accessEn["confirm.description"],
+					"confirm.acknowledge": accessEn["confirm.acknowledge"],
+					"confirm.cancel": accessEn["confirm.cancel"],
+					"confirm.enable": accessEn["confirm.enable"]
+				})];
+				return () => {
+					for (const dispose of disposers) dispose();
+				};
+			}, "ui-permission: Full access confirmation dictionaries");
+			const t = ctx.locale.bind(ACCESS_NS);
+			const sessionFor = (session) => sessions.binding(session.sessionId)?.session;
+			ctx.effect(() => ctx.locale.register("settings.permission", {
+				zh,
+				en
+			}), "ui-permission: settings row dictionaries");
+			const controller = new PermissionPresetSettingsController(ctx.get("connection").api);
+			const load = () => controller.load();
+			const select = (preset) => controller.select(preset);
+			const injected = () => ({
+				hooks: { permission: controller.store },
+				load,
+				select
+			});
+			ctx.effect(() => {
+				const refresh = () => {
+					refreshPermissionIfLoaded(controller);
+				};
+				const disposers = [ctx.remote.$on("settings/document-updated", (ns) => {
+					if (ns !== "permission") return;
+					refresh();
+				}), ctx.on("connection/reset", () => {
+					refresh();
+				})];
+				return () => {
+					controller.dispose();
+					for (const dispose of disposers) dispose();
+				};
+			}, "ui-permission: settings invalidations");
+			ctx.slots.inject("settings.general.item", () => ctx.slots.register({
+				name: "settings.general.item",
+				id: "permission",
+				order: -20,
+				locale: "settings.permission",
+				inject: injected
+			}, PermissionRow));
+			ctx.effect(() => command.decorate({
+				name: "permission",
+				available: (session) => selectOf(sessionFor(session)) !== void 0,
+				ui: {
+					kind: "popupSelect",
+					options: (session) => {
+						const value = selectOf(sessionFor(session));
+						if (value === void 0) throw new Error("permission presets are not available on this host");
+						return Promise.resolve(optionsOf(value, t));
+					},
+					onSelect: async (option, session) => {
+						const live = sessionFor(session);
+						if (live === void 0) throw new Error("this session is not materialized yet");
+						const result = await live.command(`/permission ${option.id}`);
+						if (!result.ok) throw new Error(`permission switch failed: ${result.error.code}: ${result.error.message}`);
+						if (!result.value.matched) throw new Error("the host offers no /permission command");
+					}
+				}
+			}), "ui-permission: /permission decoration");
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});
+
+//# sourceMappingURL=client.js.map

package/lib/index.js

@@ -0,0 +1,11 @@
+//#region lib/types/index.js
+/**
+* Permission surfaces plugin, node half. The empty apply exists so the plugin
+* appears in the host cordis.yml / Loader; the browser half ships the
+* new-session Settings row and current-session command picker through
+* exports["./client"], discovered from the package.json dsh.client declaration.
+*/
+/** Host plugin body — no host-side behavior for this surface plugin. */
+function apply() {}
+//#endregion
+export { apply };

package/lib/invariant.js

@@ -0,0 +1,24 @@
+//#region lib/types/invariant.js
+/**
+* Package-owned invariant companion for `@deepseek-ai/dsh-client-ui-permission-presets`.
+* @module @deepseek-ai/dsh-client-ui-permission-presets/invariant
+*/
+const PACKAGE_NAME = "@deepseek-ai/dsh-client-ui-permission-presets";
+/** Cordis companion plugin name. */
+const name = "client-ui-permission-presets-invariant";
+/** Service required before the companion can reserve package ownership. */
+const inject = ["invariants"];
+/**
+* No runtime invariant: the command and slot contribution lifecycles are
+* proven by the HMR-safety spec, while the browser-only Settings controller
+* owns no host events or cross-plugin mutable state.
+*/
+const install = () => {};
+/**
+* Register this package's invariant companion.
+* @param ctx - Cordis context carrying the invariant service.
+* @returns the installed registration's disposer after setup succeeds.
+*/
+const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
+//#endregion
+export { apply, inject, name };

package/lib/types/client/PermissionRow.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Permission preference row: the default preset for subsequently created
+ * sessions. Current-session switches remain on the composer `/permission`
+ * control.
+ */
+import type { SnapshotStore } from '@deepseek-ai/dsh-client-runtime/client';
+import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
+import type { PermissionSettingsState } from './settings-store.ts';
+import type { PermissionSettingsKey } from './locales.ts';
+/** Registration-side business face for the host-backed preference. */
+export interface PermissionRowInjected {
+    hooks: {
+        /** Permission settings snapshot bound by the renderer as usePermission. */
+        permission: SnapshotStore<PermissionSettingsState>;
+    };
+    /** Load the descriptor when the row first renders. */
+    load: () => Promise<void>;
+    /** Persist one advertised preset. */
+    select: (preset: string) => Promise<void>;
+}
+/** Full component props. */
+export type PermissionRowProps = PropsRuntime<'settings.general.item'> & PropsLocale<'settings.permission'> & InjectFace<PermissionRowInjected>;
+/**
+ * Render the new-session Permission default selector.
+ * @param props - composed slot props.
+ * @returns the row, or null when the host does not expose permission settings.
+ */
+export declare function PermissionRow({ load, select, usePermission, t }: PermissionRowProps): import("react").JSX.Element | null;
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+    interface LocaleNamespaceMap {
+        /** Permission row copy. */
+        'settings.permission': PermissionSettingsKey;
+    }
+}
+//# sourceMappingURL=PermissionRow.d.ts.map

package/lib/types/client/index.d.ts

@@ -0,0 +1,12 @@
+import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client';
+export type { PermissionRowInjected, PermissionRowProps } from './PermissionRow.tsx';
+export type { PermissionDefaultOption, PermissionSettingsState, } from './settings-store.ts';
+/** Required services (cordis fiber inject). */
+export declare const inject: string[];
+/**
+ * Client plugin body: register the /permission popup picker over the
+ * permissions projection.
+ * @param ctx - client root context.
+ */
+export declare function apply(ctx: ClientContext): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/client/locales.d.ts

@@ -0,0 +1,46 @@
+/** `settings.permission` namespace dictionaries (the Permission row's copy). */
+/** Simplified Chinese dictionary (the key-set source of truth). */
+export declare const zh: {
+    title: string;
+    description: string;
+    loading: string;
+    unavailable: string;
+    'confirm.title': string;
+    'confirm.description': string;
+    'confirm.acknowledge': string;
+    'confirm.cancel': string;
+    'confirm.enable': string;
+};
+/** The settings.permission namespace key union. */
+export type PermissionSettingsKey = keyof typeof zh;
+/** English dictionary, checked complete against the zh key set. */
+export declare const en: {
+    title: string;
+    description: string;
+    loading: string;
+    unavailable: string;
+    'confirm.title': string;
+    'confirm.description': string;
+    'confirm.acknowledge': string;
+    'confirm.cancel': string;
+    'confirm.enable': string;
+};
+/** Simplified Chinese dictionary for the current-session popup gate. */
+export declare const accessZh: {
+    'confirm.title': string;
+    'confirm.description': string;
+    'confirm.acknowledge': string;
+    'confirm.cancel': string;
+    'confirm.enable': string;
+};
+/** Current-session popup-gate key union. */
+export type PermissionAccessKey = keyof typeof accessZh;
+/** English dictionary for the current-session popup gate. */
+export declare const accessEn: {
+    'confirm.title': string;
+    'confirm.description': string;
+    'confirm.acknowledge': string;
+    'confirm.cancel': string;
+    'confirm.enable': string;
+};
+//# sourceMappingURL=locales.d.ts.map

package/lib/types/client/presentation.d.ts

@@ -0,0 +1,16 @@
+/** Machine value of the preset that requires an explicit GUI risk gate. */
+export declare const FULL_ACCESS_PRESET = "danger-full-access";
+/**
+ * Convert conventional kebab-case preset names into user-facing title case.
+ * @param name - host-supplied preset label or key.
+ * @returns the title-cased conventional key, or a non-kebab label unchanged.
+ */
+export declare function displayPresetName(name: string): string;
+/**
+ * Render a permission preset under its product label.
+ * @param value - preset machine value.
+ * @param name - host-supplied preset name.
+ * @returns the Full access product label or the conventional display name.
+ */
+export declare function displayPermissionPreset(value: string, name: string): string;
+//# sourceMappingURL=presentation.d.ts.map

package/lib/types/client/settings-store.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Permission default-settings controller. The host descriptor supplies the
+ * current value and the dynamic preset enum; writes target only
+ * `defaultPreset` and carry the descriptor revision.
+ */
+import type { IApiClient, SettingsNamespaceView } from '@deepseek-ai/dsh-api-remotes/client';
+import { type SnapshotStore } from '@deepseek-ai/dsh-client-runtime/client';
+/** Permission's settings namespace on the host wire. */
+export declare const PERMISSION_SETTINGS_NS = "permission";
+/** One selectable new-session default. */
+export interface PermissionDefaultOption {
+    /** Preset key written to Settings. */
+    id: string;
+    /** Host-supplied label or a title-cased preset key. */
+    label: string;
+}
+/** Permission settings-row snapshot. */
+export interface PermissionSettingsState {
+    status: 'idle' | 'loading' | 'ready' | 'saving' | 'unavailable' | 'error';
+    error: string | null;
+    writable: boolean;
+    currentValue: string;
+    options: readonly PermissionDefaultOption[];
+    revision: number;
+}
+/**
+ * Read the dynamic preset enum encoded by the host's `defaultPreset` schema.
+ * @param view - permission namespace descriptor.
+ * @returns current value and selectable options.
+ */
+export declare function permissionDefaultOf(view: SettingsNamespaceView): {
+    currentValue: string;
+    options: PermissionDefaultOption[];
+};
+/** Controller joining Settings reads, writes, and pushed invalidations. */
+export declare class PermissionPresetSettingsController {
+    private readonly api;
+    /** Row snapshot consumed through a bound selector hook. */
+    readonly store: SnapshotStore<PermissionSettingsState>;
+    private generation;
+    private view;
+    /** @param api - Settings wire face. */
+    constructor(api: Pick<IApiClient, 'settings'>);
+    /**
+     * Refresh the permission descriptor. Latest request wins.
+     * @returns nothing; {@link store} carries success or failure.
+     */
+    load(): Promise<void>;
+    /**
+     * Persist one preset as the default for subsequently created sessions.
+     * @param preset - advertised preset key.
+     * @returns nothing; {@link store} carries success or failure.
+     */
+    select(preset: string): Promise<void>;
+    /** Stop in-flight responses from publishing after plugin disposal. */
+    dispose(): void;
+    private accept;
+    private fail;
+}
+/**
+ * Refetch only after the row has opened once.
+ * @param controller - permission settings controller.
+ */
+export declare function refreshPermissionIfLoaded(controller: PermissionPresetSettingsController): void;
+//# sourceMappingURL=settings-store.d.ts.map

package/lib/types/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Permission surfaces plugin, node half. The empty apply exists so the plugin
+ * appears in the host cordis.yml / Loader; the browser half ships the
+ * new-session Settings row and current-session command picker through
+ * exports["./client"], discovered from the package.json dsh.client declaration.
+ */
+/** Host plugin body — no host-side behavior for this surface plugin. */
+export declare function apply(): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/invariant.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Package-owned invariant companion for `@deepseek-ai/dsh-client-ui-permission-presets`.
+ * @module @deepseek-ai/dsh-client-ui-permission-presets/invariant
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/** Cordis companion plugin name. */
+export declare const name = "client-ui-permission-presets-invariant";
+/** Service required before the companion can reserve package ownership. */
+export declare const inject: string[];
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Cordis context carrying the invariant service.
+ * @returns the installed registration's disposer after setup succeeds.
+ */
+export declare const apply: (ctx: Context) => Promise<() => void>;
+//# sourceMappingURL=invariant.d.ts.map

package/package.json

@@ -0,0 +1,91 @@
+{
+  "name": "@deepseek-ai/dsh-client-ui-permission-presets",
+  "description": "Permission surfaces: a new-session default in General settings and a current-session /permission popup over the permissions projection",
+  "version": "0.0.1-rc.3",
+  "publishConfig": {
+    "access": "restricted"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/deepseek-ai/deepseek-harness.git",
+    "directory": "packages/client/ui-permission-presets"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./invariant": {
+      "types": "./lib/types/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "dsh": {
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-commands",
+        "@deepseek-ai/dsh-api-remotes",
+        "@deepseek-ai/dsh-client-ui-settings"
+      ],
+      "platform": "web"
+    }
+  },
+  "license": "BSD-3-Clause",
+  "peerDependencies": {
+    "react": "^18.2.0",
+    "@deepseek-ai/cordis": "^4.0.1-rc.1",
+    "@deepseek-ai/dsh-client-connection": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-locale": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-runtime": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-schema-form": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-commands": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-api-remotes": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-invariants": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-permission-presets": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.0.1-rc.3"
+  },
+  "devDependencies": {
+    "@types/react": "~18.3.1",
+    "react": "^18.2.0",
+    "@deepseek-ai/cordis": "^4.0.1-rc.1",
+    "@deepseek-ai/dsh-api-remotes": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-connection": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-locale": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-runtime": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-schema-form": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-test-runtime": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-commands": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-client-web-react": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-invariants": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-permission-presets": "^0.0.1-rc.3"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/invariant.js",
+    "lib/client.js",
+    "lib/types/**/*.d.ts"
+  ],
+  "scripts": {
+    "bundle": "tsdown",
+    "watch": "tsdown --watch"
+  }
+}