@dsh-cc/bundle-permissions 0.6.0 → 0.6.2

package/README.i18n.yaml

@@ -0,0 +1,6 @@
+# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
+# side as of the last confirmed-consistent state. Both languages carry equal authority;
+# after editing either side, bring the other along and re-record with:
+#   pnpm check:readme --write
+README.md: 52b790c0c2feb5c4aa66cf01d72e30947648fa77
+README.zh.md: 0892e9f67bed1353f4693a521dace3e4288e3c6e

package/README.md

@@ -0,0 +1,28 @@
+# @dsh-cc/bundle-permissions
+
+English | [中文](README.zh.md)
+
+Claude Code permission parity for dsh profiles, shipped as a single cordis bundle patch: it swaps the plain settings provider for the five-level settings cascade (settings.json precedence chain) and mounts the CC permission-rule engine that reads the merged `permissions` section from it.
+
+## Usage
+
+The package has no importable API. It is consumed as a bundle patch via its `./cordis.patch.yml` export:
+
+```yaml
+bundle:
+  patch: '@dsh-cc/bundle-permissions/cordis.patch.yml'
+```
+
+## What it provides
+
+The patch performs three mounts in registration order:
+
+- `settings-cc` — the `@dsh-cc/settings-cascade` provider, honouring `$DSH_HOME/settings.json` and the project's `.claude` settings files. The in-box settings row is disabled by ID to prevent double-mounting.
+- `permission-rules` — the `@dsh-cc/permission-rules` allow/deny/ask rule engine, reading the `permissions` settings namespace lazily at call time. Bypass-immune rules ride the monotonic guard layer.
+- `command-permissions` — the host-plane mount of the `/permissions` command plus catalog wrap; the empty host fiber is what dsh-client-modules scans for the popupSelect browser half.
+
+The CC preset keeps its own command-permissions row, so a composition without this bundle still registers the `/permissions` command.
+
+## Notes
+
+- The permission engine reads `ctx.settings` lazily at call time, so mount order does not affect correctness; the cascade is kept first only for readable boot logs.

package/README.zh.md

@@ -0,0 +1,28 @@
+# @dsh-cc/bundle-permissions
+
+[English](README.md) | 中文
+
+面向 dsh profile 的 Claude Code 权限对等层，以单个 cordis bundle patch 提供：把普通设置提供者替换为五级设置级联（settings.json 优先级链），并挂载从合并后的 `permissions` 设置段读取规则的 CC 权限规则引擎。
+
+## 用法
+
+本包没有可导入的 API。它通过 `./cordis.patch.yml` 导出作为 bundle patch 消费：
+
+```yaml
+bundle:
+  patch: '@dsh-cc/bundle-permissions/cordis.patch.yml'
+```
+
+## 提供内容
+
+该 patch 按注册顺序完成三处挂载：
+
+- `settings-cc` — `@dsh-cc/settings-cascade` 提供者，遵循 `$DSH_HOME/settings.json` 与项目的 `.claude` 设置文件。内置设置行按 ID 被禁用，避免双重挂载。
+- `permission-rules` — `@dsh-cc/permission-rules` 的 allow/deny/ask 规则引擎，惰性读取 `permissions` 设置命名空间。bypass-immune 规则走单调守卫层。
+- `command-permissions` — `/permissions` 命令及目录包装的 host 侧挂载；空的 host fiber 是 dsh-client-modules 扫描 popupSelect 浏览器侧的依据。
+
+CC 预设保留自己的 command-permissions 行，因此即使组合中没有本 bundle，`/permissions` 命令仍会被注册。
+
+## 备注
+
+- 权限引擎在调用时惰性读取 `ctx.settings`，挂载顺序不影响正确性；级联放在最前只是为了启动日志可读。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-cc/bundle-permissions",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Claude Code permission parity layer for dsh profiles: five-level settings cascade + CC permission-rule engine",
   "type": "module",
   "files": [
@@ -22,9 +22,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@dsh-cc/settings-cascade": "^0.6.0",
-    "@dsh-cc/permission-rules": "^0.6.0",
-    "@dsh-cc/command-permissions": "^0.6.0"
+    "@dsh-cc/settings-cascade": "^0.6.2",
+    "@dsh-cc/permission-rules": "^0.6.2",
+    "@dsh-cc/command-permissions": "^0.6.2"
   },
   "publishConfig": {
     "access": "public"