@dsh-cc/command-permissions 0.5.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/lib/client/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Browser half of `@dsh-cc/command-permissions`. Hangs a popupSelect
+ * DECORATION on the host `/permissions` command. The decoration owns only the
+ * bare invocation; the host command keeps its catalog row, the argued path
+ * (`/permissions <mode>` still switches directly), and the lifecycle logging.
+ * A pick submits `/permissions ${id}` so both surfaces write through one path.
+ *
+ * `/permission` (host, sandbox+approval presets) is hidden from the CC
+ * slash catalog by the host half wrapping `commands.list`; this decoration
+ * only covers `/permissions`. The composer chip still executes
+ * `/permission <preset>` against the global handler.
+ *
+ * @module @dsh-cc/command-permissions/client
+ */
+import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client';
+export declare const inject: string[];
+/**
+ * Register the `/permissions` bare-invocation popup over the host command.
+ * @param ctx - client root context.
+ */
+export declare function apply(ctx: ClientContext): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,aAAa,EAA0B,MAAM,wCAAwC,CAAA;AAKnG,eAAO,MAAM,MAAM,UAA4B,CAAA;AAuB/C;;;GAGG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAoB9C"}

package/lib/client/index.js

@@ -0,0 +1,50 @@
+import { BYPASS_CONFIRMATION, BYPASS_MODE, PERMISSION_MODE_OPTIONS } from "../modes.js";
+export const inject = ['commandUi', 'sessions'];
+/**
+ * Resolve the live session face for a popup session scope (undefined = not
+ * materialized). `ctx.sessions` reads the client sessions face; some shared
+ * node packages over-declare the same key as their own store, so narrow it to
+ * the client contract here.
+ */
+function sessionFor(ctx, session) {
+    const sessions = ctx.sessions;
+    return sessions.binding(session.sessionId)?.session;
+}
+/** Flatten the shareable mode rows into popup options; bypassPermissions carries the risk gate. */
+function optionsOf() {
+    return PERMISSION_MODE_OPTIONS.map(option => ({
+        id: option.id,
+        label: option.label,
+        detail: option.detail,
+        ...(option.id === BYPASS_MODE ? { confirmation: { ...BYPASS_CONFIRMATION } } : {}),
+    }));
+}
+/**
+ * Register the `/permissions` bare-invocation popup over the host command.
+ * @param ctx - client root context.
+ */
+export function apply(ctx) {
+    const command = ctx.get('commandUi');
+    ctx.effect(() => command.decorate({
+        name: 'permissions',
+        // The host catalog already hides `/permissions` from non-CC sessions
+        // (`commands.list` wrap). A missing host row means this decoration is a
+        // no-op — it never manufactures a command.
+        available: () => true,
+        ui: {
+            kind: 'popupSelect',
+            options: () => Promise.resolve(optionsOf()),
+            onSelect: async (option, session) => {
+                const live = sessionFor(ctx, session);
+                if (live === undefined)
+                    throw new Error('this session is not materialized yet');
+                const result = await live.command(`/permissions ${option.id}`);
+                if (!result.ok)
+                    throw new Error(`permission mode switch failed: ${result.error.code}: ${result.error.message}`);
+                if (!result.value.matched)
+                    throw new Error('the host offers no /permissions command');
+            },
+        },
+    }), 'command-permissions: /permissions decoration');
+}
+//# sourceMappingURL=index.js.map

package/lib/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAEvF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;AAE/C;;;;;GAKG;AACH,SAAS,UAAU,CAAC,GAAkB,EAAE,OAA6B;IACnE,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAgC,CAAA;IACrD,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;AACrD,CAAC;AAED,mGAAmG;AACnG,SAAS,SAAS;IAChB,OAAO,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnF,CAAC,CAAC,CAAA;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,GAAkB;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAsB,CAAA;IACzD,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;QAChC,IAAI,EAAE,aAAa;QACnB,qEAAqE;QACrE,wEAAwE;QACxE,2CAA2C;QAC3C,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;QACrB,EAAE,EAAE;YACF,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAC3C,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;gBAClC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;gBACrC,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;gBAC/E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;gBAC9D,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC/G,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;YACvF,CAAC;SACF;KACF,CAAC,EAAE,8CAA8C,CAAC,CAAA;AACrD,CAAC"}

package/lib/client.js

@@ -0,0 +1,97 @@
+window.__ModuleLoader__.load({
+	id: "@dsh-cc/command-permissions",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		//#region src/modes.ts
+		/** The popup rows, in display order. */
+		const PERMISSION_MODE_OPTIONS = [
+			{
+				id: "default",
+				label: "Default",
+				detail: "Follow allow/deny/ask rules; unmatched calls pass through."
+			},
+			{
+				id: "acceptEdits",
+				label: "Accept edits",
+				detail: "File edits are auto-allowed; other calls follow the rules."
+			},
+			{
+				id: "plan",
+				label: "Plan",
+				detail: "Read-only until the plan is submitted via exit_plan_mode."
+			},
+			{
+				id: "auto",
+				label: "Auto",
+				detail: "Low-risk approval prompts are auto-allowed; medium-risk prompts still ask."
+			},
+			{
+				id: "bypassPermissions",
+				label: "Bypass permissions",
+				detail: "Skip permission prompts and pin the sandbox to full access. Bypass-immune and catastrophic commands stay denied."
+			}
+		];
+		/**
+		* Explicit risk gate on the bypassPermissions row, shared by the browser
+		* popupSelect confirmation and the TUI picker overlay.
+		*/
+		const BYPASS_CONFIRMATION = {
+			title: "Enable Bypass permissions?",
+			description: "Bypass permissions skips approval prompts and pins this session's sandbox to full access. Bypass-immune paths and catastrophic commands stay denied. Only use it when you trust the current task.",
+			acknowledgeLabel: "I understand the risks and want to continue",
+			cancelLabel: "Cancel",
+			confirmLabel: "Enable Bypass permissions"
+		};
+		//#endregion
+		//#region src/client/index.ts
+		const inject = ["commandUi", "sessions"];
+		/**
+		* Resolve the live session face for a popup session scope (undefined = not
+		* materialized). `ctx.sessions` reads the client sessions face; some shared
+		* node packages over-declare the same key as their own store, so narrow it to
+		* the client contract here.
+		*/
+		function sessionFor(ctx, session) {
+			return ctx.sessions.binding(session.sessionId)?.session;
+		}
+		/** Flatten the shareable mode rows into popup options; bypassPermissions carries the risk gate. */
+		function optionsOf() {
+			return PERMISSION_MODE_OPTIONS.map((option) => ({
+				id: option.id,
+				label: option.label,
+				detail: option.detail,
+				...option.id === "bypassPermissions" ? { confirmation: { ...BYPASS_CONFIRMATION } } : {}
+			}));
+		}
+		/**
+		* Register the `/permissions` bare-invocation popup over the host command.
+		* @param ctx - client root context.
+		*/
+		function apply(ctx) {
+			const command = ctx.get("commandUi");
+			ctx.effect(() => command.decorate({
+				name: "permissions",
+				available: () => true,
+				ui: {
+					kind: "popupSelect",
+					options: () => Promise.resolve(optionsOf()),
+					onSelect: async (option, session) => {
+						const live = sessionFor(ctx, session);
+						if (live === void 0) throw new Error("this session is not materialized yet");
+						const result = await live.command(`/permissions ${option.id}`);
+						if (!result.ok) throw new Error(`permission mode switch failed: ${result.error.code}: ${result.error.message}`);
+						if (!result.value.matched) throw new Error("the host offers no /permissions command");
+					}
+				}
+			}), "command-permissions: /permissions decoration");
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});
+
+//# sourceMappingURL=client.js.map

package/lib/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","names":[],"sources":["../src/modes.ts","../src/client/index.ts"],"sourcesContent":["/**\n * The single source of truth for the `/permissions` rule-engine modes. Pure\n * and browser-safe (no cordis/session imports) so the host command (the write\n * path), the client popupSelect decoration (a pick submits `/permissions\n * <id>`), and the TUI picker overlay all render from the same lists and\n * cannot drift.\n */\n\n/** The available CC rule-engine modes, shared by the switch list and the popup. */\nexport const PERMISSION_COMMAND_MODES = [\n  'default', 'acceptEdits', 'plan', 'auto', 'bypassPermissions',\n] as const\n/** A union of the rule-engine mode ids. */\nexport type PermissionCommandMode = (typeof PERMISSION_COMMAND_MODES)[number]\n\n/** One popup row: its switch id plus human-facing label and detail. */\nexport interface PermissionModeOption {\n  readonly id: PermissionCommandMode\n  readonly label: string\n  readonly detail: string\n}\n\n/** The popup rows, in display order. */\nexport const PERMISSION_MODE_OPTIONS: readonly PermissionModeOption[] = [\n  { id: 'default', label: 'Default', detail: 'Follow allow/deny/ask rules; unmatched calls pass through.' },\n  { id: 'acceptEdits', label: 'Accept edits', detail: 'File edits are auto-allowed; other calls follow the rules.' },\n  { id: 'plan', label: 'Plan', detail: 'Read-only until the plan is submitted via exit_plan_mode.' },\n  { id: 'auto', label: 'Auto', detail: 'Low-risk approval prompts are auto-allowed; medium-risk prompts still ask.' },\n  { id: 'bypassPermissions', label: 'Bypass permissions', detail: 'Skip permission prompts and pin the sandbox to full access. Bypass-immune and catastrophic commands stay denied.' },\n]\n\n/** The mode that carries the explicit risk gate (mirrors `/permission` Full access). */\nexport const BYPASS_MODE = 'bypassPermissions' as const\n\n/**\n * Explicit risk gate on the bypassPermissions row, shared by the browser\n * popupSelect confirmation and the TUI picker overlay.\n */\nexport const BYPASS_CONFIRMATION = {\n  title: 'Enable Bypass permissions?',\n  description: 'Bypass permissions skips approval prompts and pins this session\\'s sandbox to full access. Bypass-immune paths and catastrophic commands stay denied. Only use it when you trust the current task.',\n  acknowledgeLabel: 'I understand the risks and want to continue',\n  cancelLabel: 'Cancel',\n  confirmLabel: 'Enable Bypass permissions',\n} as const\n","/**\n * Browser half of `@dsh-cc/command-permissions`. Hangs a popupSelect\n * DECORATION on the host `/permissions` command. The decoration owns only the\n * bare invocation; the host command keeps its catalog row, the argued path\n * (`/permissions <mode>` still switches directly), and the lifecycle logging.\n * A pick submits `/permissions ${id}` so both surfaces write through one path.\n *\n * `/permission` (host, sandbox+approval presets) is hidden from the CC\n * slash catalog by the host half wrapping `commands.list`; this decoration\n * only covers `/permissions`. The composer chip still executes\n * `/permission <preset>` against the global handler.\n *\n * @module @dsh-cc/command-permissions/client\n */\nimport type { ClientContext, ISessions, SessionFace } from '@deepseek-ai/dsh-client-runtime/client'\nimport type { CommandUiContract, SelectOption } from '@deepseek-ai/dsh-client-ui-commands/client'\nimport type { ClientSessionContext } from '@deepseek-ai/dsh-client-ui-input-trigger/client'\nimport { BYPASS_CONFIRMATION, BYPASS_MODE, PERMISSION_MODE_OPTIONS } from '../modes.ts'\n\nexport const inject = ['commandUi', 'sessions']\n\n/**\n * Resolve the live session face for a popup session scope (undefined = not\n * materialized). `ctx.sessions` reads the client sessions face; some shared\n * node packages over-declare the same key as their own store, so narrow it to\n * the client contract here.\n */\nfunction sessionFor(ctx: ClientContext, session: ClientSessionContext): SessionFace | undefined {\n  const sessions = ctx.sessions as unknown as ISessions\n  return sessions.binding(session.sessionId)?.session\n}\n\n/** Flatten the shareable mode rows into popup options; bypassPermissions carries the risk gate. */\nfunction optionsOf(): SelectOption[] {\n  return PERMISSION_MODE_OPTIONS.map(option => ({\n    id: option.id,\n    label: option.label,\n    detail: option.detail,\n    ...(option.id === BYPASS_MODE ? { confirmation: { ...BYPASS_CONFIRMATION } } : {}),\n  }))\n}\n\n/**\n * Register the `/permissions` bare-invocation popup over the host command.\n * @param ctx - client root context.\n */\nexport function apply(ctx: ClientContext): void {\n  const command = ctx.get('commandUi') as CommandUiContract\n  ctx.effect(() => command.decorate({\n    name: 'permissions',\n    // The host catalog already hides `/permissions` from non-CC sessions\n    // (`commands.list` wrap). A missing host row means this decoration is a\n    // no-op — it never manufactures a command.\n    available: () => true,\n    ui: {\n      kind: 'popupSelect',\n      options: () => Promise.resolve(optionsOf()),\n      onSelect: async (option, session) => {\n        const live = sessionFor(ctx, session)\n        if (live === undefined) throw new Error('this session is not materialized yet')\n        const result = await live.command(`/permissions ${option.id}`)\n        if (!result.ok) throw new Error(`permission mode switch failed: ${result.error.code}: ${result.error.message}`)\n        if (!result.value.matched) throw new Error('the host offers no /permissions command')\n      },\n    },\n  }), 'command-permissions: /permissions decoration')\n}\n"],"mappings":";;;;;;;;EAuBA,MAAa,0BAA2D;GACtE;IAAE,IAAI;IAAW,OAAO;IAAW,QAAQ;GAA6D;GACxG;IAAE,IAAI;IAAe,OAAO;IAAgB,QAAQ;GAA6D;GACjH;IAAE,IAAI;IAAQ,OAAO;IAAQ,QAAQ;GAA4D;GACjG;IAAE,IAAI;IAAQ,OAAO;IAAQ,QAAQ;GAA6E;GAClH;IAAE,IAAI;IAAqB,OAAO;IAAsB,QAAQ;GAAmH;EACrL;;;;;EASA,MAAa,sBAAsB;GACjC,OAAO;GACP,aAAa;GACb,kBAAkB;GAClB,aAAa;GACb,cAAc;EAChB;;;ECzBA,MAAa,SAAS,CAAC,aAAa,UAAU;;;;;;;EAQ9C,SAAS,WAAW,KAAoB,SAAwD;GAE9F,OADiB,IAAI,SACL,QAAQ,QAAQ,SAAS,CAAC,EAAE;EAC9C;;EAGA,SAAS,YAA4B;GACnC,OAAO,wBAAwB,KAAI,YAAW;IAC5C,IAAI,OAAO;IACX,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,GAAI,OAAO,OAAA,sBAAqB,EAAE,cAAc,EAAE,GAAG,oBAAoB,EAAE,IAAI,CAAC;GAClF,EAAE;EACJ;;;;;EAMA,SAAgB,MAAM,KAA0B;GAC9C,MAAM,UAAU,IAAI,IAAI,WAAW;GACnC,IAAI,aAAa,QAAQ,SAAS;IAChC,MAAM;IAIN,iBAAiB;IACjB,IAAI;KACF,MAAM;KACN,eAAe,QAAQ,QAAQ,UAAU,CAAC;KAC1C,UAAU,OAAO,QAAQ,YAAY;MACnC,MAAM,OAAO,WAAW,KAAK,OAAO;MACpC,IAAI,SAAS,KAAA,GAAW,MAAM,IAAI,MAAM,sCAAsC;MAC9E,MAAM,SAAS,MAAM,KAAK,QAAQ,gBAAgB,OAAO,IAAI;MAC7D,IAAI,CAAC,OAAO,IAAI,MAAM,IAAI,MAAM,kCAAkC,OAAO,MAAM,KAAK,IAAI,OAAO,MAAM,SAAS;MAC9G,IAAI,CAAC,OAAO,MAAM,SAAS,MAAM,IAAI,MAAM,yCAAyC;KACtF;IACF;GACF,CAAC,GAAG,8CAA8C;EACpD"}

package/lib/index.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Human-facing `/permissions` command: render the effective permission rule
+ * state (allow/deny/ask counts per source), or switch the session's permission
+ * mode with `/permissions <mode>`. Switching is durable — engine modes route
+ * through the permission-rules engine's `setMode`; `plan` routes through the
+ * `/plan` command channel, the only cross-plane write seam plan-mode exposes
+ * (its `planMode` service lives inside the preset's isolate realm, invisible
+ * to `ctx.get` from here). See docs/plan-mode-command-channel.md.
+ *
+ * The host command remains the write path. A client decoration (see
+ * `./client`) hangs the same popupSelect on the BARE invocation, mirroring the
+ * `/permission` preset pattern — a pick submits `/permissions <mode>` through
+ * here, so both surfaces write through one path. The TUI intercepts the same
+ * bare invocation and opens an overlay that also submits `/permissions
+ * <mode>` through here.
+ *
+ * `/permission` (host, sandbox+approval presets) and `/permissions` (this
+ * package, CC rule-engine modes) drive different knobs. A CC session's slash
+ * menu should show only `/permissions`: `commands.list` drops the host
+ * `/permission` row when the session's selected agent preset is `cc`, while
+ * `find`/`execute` stay on the global handler so the composer chip can still
+ * switch sandbox presets.
+ *
+ * This package is mounted twice: the host-plane row (cc-permissions bundle)
+ * exists so `dsh-client-modules` can discover the `dsh.client` browser half
+ * (preset rows never appear in `ctx.loader.entries()`); that host apply is a
+ * no-op besides the catalog wrap. The CC preset row registers the command.
+ * @module @dsh-cc/command-permissions
+ */
+import type { Context } from '@deepseek-ai/cordis';
+export { BYPASS_CONFIRMATION, BYPASS_MODE, PERMISSION_COMMAND_MODES, PERMISSION_MODE_OPTIONS, type PermissionCommandMode, type PermissionModeOption, } from './modes.ts';
+export { planPhaseOf, type PlanPhase, type PlanUnitStateLike } from './plan-phase.ts';
+export declare const name = "command-permissions";
+/**
+ * `commands` is required; the `permissionRules` engine and `planMode` are read
+ * optionally via `ctx.get` so the command loads (and reports a friendly message)
+ * even when the engine is not composed, mirroring `/status`'s optional
+ * permission-preset read.
+ */
+export declare const inject: string[];
+/**
+ * Register `/permissions`. The host-plane mount (`ctx.agent` unset, the
+ * cc-permissions bundle row) also wraps `commands.list` so a CC session
+ * hides `/permission` and a non-CC session hides `/permissions`. That host
+ * fiber is what `dsh-client-modules` scans for `dsh.client`. A preset-scoped
+ * mount only registers the command (so a composition without the host row
+ * still works; the wrap is already on the service from the host row).
+ * @param ctx - context carrying the command registry and permission engine.
+ */
+export declare function apply(ctx: Context): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAQlD,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAErF,eAAO,MAAM,IAAI,wBAAwB,CAAA;AACzC;;;;;GAKG;AACH,eAAO,MAAM,MAAM,UAAe,CAAA;AAqHlC;;;;;;;;GAQG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAQxC"}

package/lib/index.js

@@ -0,0 +1,165 @@
+/**
+ * Human-facing `/permissions` command: render the effective permission rule
+ * state (allow/deny/ask counts per source), or switch the session's permission
+ * mode with `/permissions <mode>`. Switching is durable — engine modes route
+ * through the permission-rules engine's `setMode`; `plan` routes through the
+ * `/plan` command channel, the only cross-plane write seam plan-mode exposes
+ * (its `planMode` service lives inside the preset's isolate realm, invisible
+ * to `ctx.get` from here). See docs/plan-mode-command-channel.md.
+ *
+ * The host command remains the write path. A client decoration (see
+ * `./client`) hangs the same popupSelect on the BARE invocation, mirroring the
+ * `/permission` preset pattern — a pick submits `/permissions <mode>` through
+ * here, so both surfaces write through one path. The TUI intercepts the same
+ * bare invocation and opens an overlay that also submits `/permissions
+ * <mode>` through here.
+ *
+ * `/permission` (host, sandbox+approval presets) and `/permissions` (this
+ * package, CC rule-engine modes) drive different knobs. A CC session's slash
+ * menu should show only `/permissions`: `commands.list` drops the host
+ * `/permission` row when the session's selected agent preset is `cc`, while
+ * `find`/`execute` stay on the global handler so the composer chip can still
+ * switch sandbox presets.
+ *
+ * This package is mounted twice: the host-plane row (cc-permissions bundle)
+ * exists so `dsh-client-modules` can discover the `dsh.client` browser half
+ * (preset rows never appear in `ctx.loader.entries()`); that host apply is a
+ * no-op besides the catalog wrap. The CC preset row registers the command.
+ * @module @dsh-cc/command-permissions
+ */
+import { PERMISSION_COMMAND_MODES } from "./modes.js";
+import { planPhaseOf } from "./plan-phase.js";
+import { renderPermissions } from "./permissions.js";
+export { BYPASS_CONFIRMATION, BYPASS_MODE, PERMISSION_COMMAND_MODES, PERMISSION_MODE_OPTIONS, } from "./modes.js";
+export { planPhaseOf } from "./plan-phase.js";
+export const name = 'command-permissions';
+/**
+ * `commands` is required; the `permissionRules` engine and `planMode` are read
+ * optionally via `ctx.get` so the command loads (and reports a friendly message)
+ * even when the engine is not composed, mirroring `/status`'s optional
+ * permission-preset read.
+ */
+export const inject = ['commands'];
+/** The shared modes list — the switch list and the client popup both read it. */
+const MODES = PERMISSION_COMMAND_MODES;
+/** Render the current rule state from a mounted engine. */
+function renderState(service) {
+    return {
+        kind: 'success',
+        text: renderPermissions(service.ruleSet, service.ruleSet.bypassImmune.length),
+    };
+}
+/**
+ * Resolve the pending-aware plan phase for the invocation's agent. The plan
+ * projection (host-plane registry) sees queued intent; without it the fold
+ * sees only committed `plan/mode` events.
+ */
+function planPhaseFor(ctx, agent) {
+    const projections = ctx.get('sessionProjections');
+    const planState = projections?.stateOf(agent.session, 'plan');
+    return planPhaseOf(agent.session.events, planState);
+}
+/** Execute `/permissions` against the mounted permission-rules engine. */
+async function executePermissions(ctx, invocation) {
+    const service = ctx.get('permissionRules');
+    const raw = invocation.rawInput.trim();
+    if (raw === '') {
+        if (service === undefined) {
+            return { kind: 'success', text: 'The permission-rules engine is not mounted in this composition.' };
+        }
+        return renderState(service);
+    }
+    if (service === undefined) {
+        return { kind: 'error', text: 'The permission-rules engine is not mounted in this composition.' };
+    }
+    const [mode = ''] = raw.split(/\s+/);
+    if (!MODES.includes(mode)) {
+        return { kind: 'error', text: `unknown permission mode "${mode}"; available: ${MODES.join(', ')}` };
+    }
+    const agent = invocation.agent;
+    try {
+        // `plan` is owned by plan-mode, never the engine's setMode. The write
+        // goes through the /plan command channel — the only cross-plane seam —
+        // dispatched bare ('/plan', never '/plan on'): the upstream handler
+        // steers any non-'off' argument into the conversation as a user message.
+        if (mode === 'plan') {
+            if (planPhaseFor(ctx, agent) === 'on') {
+                return { kind: 'success', text: 'Permission mode is now "plan".' };
+            }
+            const execution = await ctx.commands.execute(agent, '/plan', [], invocation.signal);
+            if (execution === undefined) {
+                return { kind: 'error', text: 'plan mode is not mounted in this composition' };
+            }
+            return execution.result;
+        }
+        // Leave plan first: the engine overlays plan over every other mode at
+        // evaluation time, so switching underneath an active (or queued) plan is
+        // invisible work at best. A failed or unmatched exit aborts the switch.
+        if (planPhaseFor(ctx, agent) !== 'off') {
+            const execution = await ctx.commands.execute(agent, '/plan off', [], invocation.signal);
+            if (execution === undefined) {
+                return { kind: 'error', text: 'plan mode is not mounted in this composition' };
+            }
+            if (execution.result.kind === 'error')
+                return execution.result;
+        }
+        service.setMode(agent, mode);
+        return { kind: 'success', text: `Permission mode is now "${mode}".` };
+    }
+    catch (error) {
+        return { kind: 'error', text: error instanceof Error ? error.message : String(error) };
+    }
+}
+/** Whether this session selected the CC agent preset (last `agent-preset/selected` wins, else the creation header). */
+function isCcSession(agent) {
+    const events = agent.session.events;
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const event = events[index];
+        if (event.type === 'agent-preset/selected') {
+            return event.data?.agentPreset === 'cc';
+        }
+    }
+    const header = agent.session.header;
+    return header.agentPreset === 'cc';
+}
+/**
+ * Hide the host `/permission` row from `commands.list` for CC sessions.
+ * Installed once on the host-plane mount (`ctx.agent` unset). Preset mounts
+ * skip this so a session-scoped apply cannot stack wraps on the same service.
+ * `find`/`execute` are not wrapped, so `/permission workspace-write` and the
+ * composer chip keep driving the sandbox-preset switcher.
+ */
+function installCatalogWrap(ctx) {
+    const commands = ctx.commands;
+    const originalList = commands.list;
+    const wrappedList = function list(agent) {
+        const listed = originalList.call(this, agent);
+        const hidden = isCcSession(agent) ? 'permission' : 'permissions';
+        const filtered = listed.filter(entry => entry.name !== hidden);
+        return filtered.length === listed.length ? listed : Object.freeze(filtered);
+    };
+    commands.list = wrappedList;
+    ctx.effect(() => () => {
+        commands.list = originalList;
+    }, 'command-permissions: hide /permission from the CC catalog');
+}
+/**
+ * Register `/permissions`. The host-plane mount (`ctx.agent` unset, the
+ * cc-permissions bundle row) also wraps `commands.list` so a CC session
+ * hides `/permission` and a non-CC session hides `/permissions`. That host
+ * fiber is what `dsh-client-modules` scans for `dsh.client`. A preset-scoped
+ * mount only registers the command (so a composition without the host row
+ * still works; the wrap is already on the service from the host row).
+ * @param ctx - context carrying the command registry and permission engine.
+ */
+export function apply(ctx) {
+    ctx.commands.register({
+        name: 'permissions',
+        description: 'show or switch the permission mode (default|acceptEdits|plan|auto|bypassPermissions)',
+        input: { hint: '[mode]' },
+        handler: (invocation) => executePermissions(ctx, invocation),
+    });
+    if (ctx.agent === undefined)
+        installCatalogWrap(ctx);
+}
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAMH,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,EAAE,WAAW,EAA0C,MAAM,iBAAiB,CAAA;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,GAGxB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,WAAW,EAA0C,MAAM,iBAAiB,CAAA;AAErF,MAAM,CAAC,MAAM,IAAI,GAAG,qBAAqB,CAAA;AACzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,CAAA;AAQlC,iFAAiF;AACjF,MAAM,KAAK,GAAG,wBAAwB,CAAA;AAEtC,2DAA2D;AAC3D,SAAS,WAAW,CAAC,OAA4B;IAC/C,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC,OAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;KACvF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAY,EAAE,KAAY;IAC9C,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAEnC,CAAA;IACb,MAAM,SAAS,GAAG,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAkC,CAAA;IAC9F,OAAO,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AACrD,CAAC;AAED,0EAA0E;AAC1E,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,UAA6B;IAC3E,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAoC,CAAA;IAC7E,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;IACtC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,iEAAiE,EAAE,CAAA;QACrG,CAAC;QACD,OAAO,WAAW,CAAC,OAAO,CAAC,CAAA;IAC7B,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,iEAAiE,EAAE,CAAA;IACnG,CAAC;IACD,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,CAAE,KAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,4BAA4B,IAAI,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAA;IACrG,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;IAC9B,IAAI,CAAC;QACH,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,yEAAyE;QACzE,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBACtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAA;YACpE,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;YACnF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAA;YAChF,CAAC;YACD,OAAO,SAAS,CAAC,MAAM,CAAA;QACzB,CAAC;QACD,sEAAsE;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;YACvF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAA;YAChF,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,SAAS,CAAC,MAAM,CAAA;QAChE,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,2BAA2B,IAAI,IAAI,EAAE,CAAA;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IACxF,CAAC;AACH,CAAC;AAED,uHAAuH;AACvH,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAA;IACnC,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAuD,CAAA;QACjF,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAA;QACzC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAkC,CAAA;IAC/D,OAAO,MAAM,CAAC,WAAW,KAAK,IAAI,CAAA;AACpC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,GAAY;IACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;IAC7B,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAA;IAClC,MAAM,WAAW,GAAG,SAAS,IAAI,CAAwB,KAAY;QACnE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAA;QAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;QAC9D,OAAO,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC7E,CAAC,CAAA;IACD,QAAQ,CAAC,IAAI,GAAG,WAAmC,CAAA;IACnD,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;QACpB,QAAQ,CAAC,IAAI,GAAG,YAAY,CAAA;IAC9B,CAAC,EAAE,2DAA2D,CAAC,CAAA;AACjE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY;IAChC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpB,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,sFAAsF;QACnG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,OAAO,EAAE,CAAC,UAA6B,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,UAAU,CAAC;KAChF,CAAC,CAAA;IACF,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,kBAAkB,CAAC,GAAG,CAAC,CAAA;AACtD,CAAC"}

package/lib/invariant.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Package-owned invariant companion for `@dsh-cc/command-permissions`.
+ * @module @dsh-cc/command-permissions/invariant
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/** Cordis companion plugin name. */
+export declare const name = "command-permissions-invariant";
+/** Service required before the companion can reserve package ownership. */
+export declare const inject: string[];
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Cordis context carrying the invariant service.
+ * @returns the installed registration's disposer after setup succeeds.
+ */
+export declare const apply: (ctx: Context) => Promise<() => void>;
+//# sourceMappingURL=invariant.d.ts.map

package/lib/invariant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariant.d.ts","sourceRoot":"","sources":["../src/invariant.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAKlD,oCAAoC;AACpC,eAAO,MAAM,IAAI,kCAAkC,CAAA;AACnD,2EAA2E;AAC3E,eAAO,MAAM,MAAM,UAAiB,CAAA;AASpC;;;;GAIG;AACH,eAAO,MAAM,KAAK,GAAI,KAAK,OAAO,KAAG,OAAO,CAAC,MAAM,IAAI,CACU,CAAA"}

package/lib/invariant.js

@@ -0,0 +1,23 @@
+/**
+ * Package-owned invariant companion for `@dsh-cc/command-permissions`.
+ * @module @dsh-cc/command-permissions/invariant
+ */
+const PACKAGE_NAME = '@dsh-cc/command-permissions';
+/** Cordis companion plugin name. */
+export const name = 'command-permissions-invariant';
+/** Service required before the companion can reserve package ownership. */
+export const inject = ['invariants'];
+/**
+ * No runtime invariant: this command adapter owns no event stream or state projection; permissions
+ * behavior is a pure read/render over composed services, and the command registry owns
+ * registration and dispatch lifecycle.
+ */
+const install = () => { };
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Cordis context carrying the invariant service.
+ * @returns the installed registration's disposer after setup succeeds.
+ */
+export const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
+/* jscpd:ignore-end */
+//# sourceMappingURL=invariant.js.map

package/lib/invariant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariant.js","sourceRoot":"","sources":["../src/invariant.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,YAAY,GAAG,6BAA6B,CAAA;AAElD,oCAAoC;AACpC,MAAM,CAAC,MAAM,IAAI,GAAG,+BAA+B,CAAA;AACnD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,YAAY,CAAC,CAAA;AAEpC;;;;GAIG;AACH,MAAM,OAAO,GAAuB,GAAG,EAAE,GAAE,CAAC,CAAA;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,GAAY,EAAuB,EAAE,CACzD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAA;AACjE,sBAAsB"}

package/lib/modes.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The single source of truth for the `/permissions` rule-engine modes. Pure
+ * and browser-safe (no cordis/session imports) so the host command (the write
+ * path), the client popupSelect decoration (a pick submits `/permissions
+ * <id>`), and the TUI picker overlay all render from the same lists and
+ * cannot drift.
+ */
+/** The available CC rule-engine modes, shared by the switch list and the popup. */
+export declare const PERMISSION_COMMAND_MODES: readonly ["default", "acceptEdits", "plan", "auto", "bypassPermissions"];
+/** A union of the rule-engine mode ids. */
+export type PermissionCommandMode = (typeof PERMISSION_COMMAND_MODES)[number];
+/** One popup row: its switch id plus human-facing label and detail. */
+export interface PermissionModeOption {
+    readonly id: PermissionCommandMode;
+    readonly label: string;
+    readonly detail: string;
+}
+/** The popup rows, in display order. */
+export declare const PERMISSION_MODE_OPTIONS: readonly PermissionModeOption[];
+/** The mode that carries the explicit risk gate (mirrors `/permission` Full access). */
+export declare const BYPASS_MODE: "bypassPermissions";
+/**
+ * Explicit risk gate on the bypassPermissions row, shared by the browser
+ * popupSelect confirmation and the TUI picker overlay.
+ */
+export declare const BYPASS_CONFIRMATION: {
+    readonly title: "Enable Bypass permissions?";
+    readonly description: "Bypass permissions skips approval prompts and pins this session's sandbox to full access. Bypass-immune paths and catastrophic commands stay denied. Only use it when you trust the current task.";
+    readonly acknowledgeLabel: "I understand the risks and want to continue";
+    readonly cancelLabel: "Cancel";
+    readonly confirmLabel: "Enable Bypass permissions";
+};
+//# sourceMappingURL=modes.d.ts.map

package/lib/modes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modes.d.ts","sourceRoot":"","sources":["../src/modes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,mFAAmF;AACnF,eAAO,MAAM,wBAAwB,0EAE3B,CAAA;AACV,2CAA2C;AAC3C,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE7E,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,qBAAqB,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,wCAAwC;AACxC,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAMlE,CAAA;AAED,wFAAwF;AACxF,eAAO,MAAM,WAAW,EAAG,mBAA4B,CAAA;AAEvD;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;CAMtB,CAAA"}

package/lib/modes.js

@@ -0,0 +1,33 @@
+/**
+ * The single source of truth for the `/permissions` rule-engine modes. Pure
+ * and browser-safe (no cordis/session imports) so the host command (the write
+ * path), the client popupSelect decoration (a pick submits `/permissions
+ * <id>`), and the TUI picker overlay all render from the same lists and
+ * cannot drift.
+ */
+/** The available CC rule-engine modes, shared by the switch list and the popup. */
+export const PERMISSION_COMMAND_MODES = [
+    'default', 'acceptEdits', 'plan', 'auto', 'bypassPermissions',
+];
+/** The popup rows, in display order. */
+export const PERMISSION_MODE_OPTIONS = [
+    { id: 'default', label: 'Default', detail: 'Follow allow/deny/ask rules; unmatched calls pass through.' },
+    { id: 'acceptEdits', label: 'Accept edits', detail: 'File edits are auto-allowed; other calls follow the rules.' },
+    { id: 'plan', label: 'Plan', detail: 'Read-only until the plan is submitted via exit_plan_mode.' },
+    { id: 'auto', label: 'Auto', detail: 'Low-risk approval prompts are auto-allowed; medium-risk prompts still ask.' },
+    { id: 'bypassPermissions', label: 'Bypass permissions', detail: 'Skip permission prompts and pin the sandbox to full access. Bypass-immune and catastrophic commands stay denied.' },
+];
+/** The mode that carries the explicit risk gate (mirrors `/permission` Full access). */
+export const BYPASS_MODE = 'bypassPermissions';
+/**
+ * Explicit risk gate on the bypassPermissions row, shared by the browser
+ * popupSelect confirmation and the TUI picker overlay.
+ */
+export const BYPASS_CONFIRMATION = {
+    title: 'Enable Bypass permissions?',
+    description: 'Bypass permissions skips approval prompts and pins this session\'s sandbox to full access. Bypass-immune paths and catastrophic commands stay denied. Only use it when you trust the current task.',
+    acknowledgeLabel: 'I understand the risks and want to continue',
+    cancelLabel: 'Cancel',
+    confirmLabel: 'Enable Bypass permissions',
+};
+//# sourceMappingURL=modes.js.map

package/lib/modes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modes.js","sourceRoot":"","sources":["../src/modes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,mFAAmF;AACnF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB;CACrD,CAAA;AAWV,wCAAwC;AACxC,MAAM,CAAC,MAAM,uBAAuB,GAAoC;IACtE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,4DAA4D,EAAE;IACzG,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,4DAA4D,EAAE;IAClH,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,2DAA2D,EAAE;IAClG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,4EAA4E,EAAE;IACnH,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,kHAAkH,EAAE;CACrL,CAAA;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,WAAW,GAAG,mBAA4B,CAAA;AAEvD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,4BAA4B;IACnC,WAAW,EAAE,oMAAoM;IACjN,gBAAgB,EAAE,6CAA6C;IAC/D,WAAW,EAAE,QAAQ;IACrB,YAAY,EAAE,2BAA2B;CACjC,CAAA"}

package/lib/permissions.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Pure `/permissions` rendering: aggregate a permission rule set into counts
+ * per source and behavior. READ-ONLY — no mode switch is performed here.
+ * @module @dsh-cc/command-permissions/permissions
+ */
+import { type PermissionRuleSet } from '@dsh-cc/permission-rules/types';
+/** Aggregated counts for one rule source. */
+export interface SourceCounts {
+    allow: number;
+    deny: number;
+    ask: number;
+    bypassImmune: number;
+}
+/** A totals row across all sources. */
+export interface Totals {
+    allow: number;
+    deny: number;
+    ask: number;
+    bypassImmune: number;
+}
+/**
+ * Render the effective permission rule state from a rule set.
+ * @param rules - the merged rule set (the engine's `ruleSet`).
+ * @param bypassImmune - bypass-immune rule count (deny, guard-enforced).
+ * @returns a read-only report of rule counts per source and in total.
+ */
+export declare function renderPermissions(rules: PermissionRuleSet, bypassImmune: number): string;
+//# sourceMappingURL=permissions.d.ts.map

package/lib/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,gCAAgC,CAAA;AAEvC,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,uCAAuC;AACvC,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,CAAA;CACrB;AAqBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAcxF"}

package/lib/permissions.js

@@ -0,0 +1,51 @@
+/**
+ * Pure `/permissions` rendering: aggregate a permission rule set into counts
+ * per source and behavior. READ-ONLY — no mode switch is performed here.
+ * @module @dsh-cc/command-permissions/permissions
+ */
+import { SOURCE_PRIORITY, } from '@dsh-cc/permission-rules/types';
+/** Count how many rules of one source fall into each behavior. */
+function countsFor(source, rules) {
+    const out = { allow: 0, deny: 0, ask: 0, bypassImmune: 0 };
+    for (const rule of rules) {
+        if (rule.source !== source)
+            continue;
+        if (rule.behavior === 'allow')
+            out.allow += 1;
+        else if (rule.behavior === 'deny')
+            out.deny += 1;
+        else if (rule.behavior === 'ask')
+            out.ask += 1;
+    }
+    return out;
+}
+/** Sum a per-source aggregate into a grand total. */
+function addTotals(total, counts) {
+    total.allow += counts.allow;
+    total.deny += counts.deny;
+    total.ask += counts.ask;
+}
+/**
+ * Render the effective permission rule state from a rule set.
+ * @param rules - the merged rule set (the engine's `ruleSet`).
+ * @param bypassImmune - bypass-immune rule count (deny, guard-enforced).
+ * @returns a read-only report of rule counts per source and in total.
+ */
+export function renderPermissions(rules, bypassImmune) {
+    const lines = ['Permission rules (read-only)'];
+    const total = { allow: 0, deny: 0, ask: 0, bypassImmune };
+    let any = false;
+    for (const source of SOURCE_PRIORITY) {
+        const counts = countsFor(source, [...rules.allow, ...rules.deny, ...rules.ask]);
+        if (counts.allow === 0 && counts.deny === 0 && counts.ask === 0)
+            continue;
+        any = true;
+        addTotals(total, counts);
+        lines.push(`  ${source}: allow=${counts.allow} deny=${counts.deny} ask=${counts.ask}`);
+    }
+    if (!any)
+        lines.push('  (no rules configured)');
+    lines.push(`Total: allow=${total.allow} deny=${total.deny} ask=${total.ask} (bypassImmune=${bypassImmune})`);
+    return lines.join('\n');
+}
+//# sourceMappingURL=permissions.js.map

package/lib/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,GAGhB,MAAM,gCAAgC,CAAA;AAkBvC,kEAAkE;AAClE,SAAS,SAAS,CAAC,MAAc,EAAE,KAAgC;IACjE,MAAM,GAAG,GAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;IACxE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,SAAQ;QACpC,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;YAAE,GAAG,CAAC,KAAK,IAAI,CAAC,CAAA;aACxC,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAA;aAC3C,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK;YAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,qDAAqD;AACrD,SAAS,SAAS,CAAC,KAAa,EAAE,MAAoB;IACpD,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAA;IAC3B,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAA;IACzB,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAA;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAwB,EAAE,YAAoB;IAC9E,MAAM,KAAK,GAAG,CAAC,8BAA8B,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAW,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,EAAE,CAAA;IACjE,IAAI,GAAG,GAAG,KAAK,CAAA;IACf,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QAC/E,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC;YAAE,SAAQ;QACzE,GAAG,GAAG,IAAI,CAAA;QACV,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,WAAW,MAAM,CAAC,KAAK,SAAS,MAAM,CAAC,IAAI,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAC/C,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,KAAK,SAAS,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,GAAG,kBAAkB,YAAY,GAAG,CAAC,CAAA;IAC5G,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}

package/lib/plan-phase.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Pending-aware plan lifecycle phase. plan-mode owns plan state inside the
+ * preset realm and folds it into the session-projection unit keyed `'plan'`
+ * (state `{active, wanted, running}`, stateVersion 2); its wire view defines
+ * pending as `(running?.wanted ?? wanted) !== null && !== active`. This
+ * module lifts that derivation into a single predicate every mode-switch
+ * surface needs, with a session-log fold fallback for compositions without
+ * the projection registry. Pure and browser-safe.
+ * @module @dsh-cc/command-permissions/plan-phase
+ */
+import type { SessionEvent } from '@deepseek-ai/dsh-session';
+/**
+ * The plan lifecycle as mode switches see it:
+ * - `off` — no committed plan, no queued intent; entering dispatches `/plan`.
+ * - `entering` — a queued entry is in flight (applies from the next step).
+ * - `on` — plan committed, nothing queued; entering again is a no-op.
+ * - `leaving` — a queued exit is in flight.
+ */
+export type PlanPhase = 'off' | 'entering' | 'on' | 'leaving';
+/**
+ * Structural minimum of plan-mode's projection unit state — re-declared so
+ * this package never imports upstream internals.
+ */
+export interface PlanUnitStateLike {
+    readonly active: boolean;
+    readonly wanted: boolean | null;
+    readonly running: {
+        readonly wanted: boolean;
+    } | null;
+}
+/**
+ * Resolve the plan phase from the projection state, falling back to the
+ * session-log fold when the projection registry is not composed (custom
+ * minimal assemblies; both shipped profiles mount it). The projection, when
+ * present, is authoritative — it folds the same log plus replayed
+ * `command/run` pairs, so only it sees queued intent.
+ * @param events - the session event log (fold fallback).
+ * @param planState - the `'plan'` projection unit state, or undefined.
+ * @returns the current plan phase.
+ */
+export declare function planPhaseOf(events: readonly SessionEvent[], planState: PlanUnitStateLike | undefined): PlanPhase;
+//# sourceMappingURL=plan-phase.d.ts.map

package/lib/plan-phase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-phase.d.ts","sourceRoot":"","sources":["../src/plan-phase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAG5D;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,UAAU,GAAG,IAAI,GAAG,SAAS,CAAA;AAE7D;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;CACtD;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,SAAS,EAAE,iBAAiB,GAAG,SAAS,GACvC,SAAS,CAMX"}

package/lib/plan-phase.js

@@ -0,0 +1,31 @@
+/**
+ * Pending-aware plan lifecycle phase. plan-mode owns plan state inside the
+ * preset realm and folds it into the session-projection unit keyed `'plan'`
+ * (state `{active, wanted, running}`, stateVersion 2); its wire view defines
+ * pending as `(running?.wanted ?? wanted) !== null && !== active`. This
+ * module lifts that derivation into a single predicate every mode-switch
+ * surface needs, with a session-log fold fallback for compositions without
+ * the projection registry. Pure and browser-safe.
+ * @module @dsh-cc/command-permissions/plan-phase
+ */
+import { foldPlanMode } from '@deepseek-ai/dsh-plan-mode';
+/**
+ * Resolve the plan phase from the projection state, falling back to the
+ * session-log fold when the projection registry is not composed (custom
+ * minimal assemblies; both shipped profiles mount it). The projection, when
+ * present, is authoritative — it folds the same log plus replayed
+ * `command/run` pairs, so only it sees queued intent.
+ * @param events - the session event log (fold fallback).
+ * @param planState - the `'plan'` projection unit state, or undefined.
+ * @returns the current plan phase.
+ */
+export function planPhaseOf(events, planState) {
+    if (planState === undefined)
+        return foldPlanMode(events) ? 'on' : 'off';
+    const raw = planState.running?.wanted ?? planState.wanted;
+    const pending = raw !== null && raw !== undefined && raw !== planState.active ? raw : null;
+    if (!planState.active)
+        return pending === true ? 'entering' : 'off';
+    return pending === false ? 'leaving' : 'on';
+}
+//# sourceMappingURL=plan-phase.js.map

package/lib/plan-phase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-phase.js","sourceRoot":"","sources":["../src/plan-phase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AAqBzD;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,MAA+B,EAC/B,SAAwC;IAExC,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAA;IACvE,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,MAAM,IAAI,SAAS,CAAC,MAAM,CAAA;IACzD,MAAM,OAAO,GAAG,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1F,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAA;IACnE,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAA;AAC7C,CAAC"}

package/package.json

@@ -0,0 +1,70 @@
+{
+  "name": "@dsh-cc/command-permissions",
+  "description": "Human-facing /permissions command (CC rule-engine modes) plus a popupSelect decoration (and TUI overlay) for the bare invocation",
+  "version": "0.5.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/dsh-cc/dsh-cc.git",
+    "directory": "packages/interaction/command-permissions"
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./invariant": {
+      "types": "./lib/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./client": {
+      "types": "./lib/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib"
+  ],
+  "license": "Apache-2.0",
+  "dsh": {
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-commands"
+      ],
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-runtime": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-commands": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-input-trigger": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-commands": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-invariants": ">=0.1.1-rc.2",
+    "@deepseek-ai/dsh-plan-mode": ">=0.1.1-rc.2"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "link:../../../../deepseek-harness/vendor/cordis",
+    "@deepseek-ai/cordis-plugin-loader": "link:../../../../deepseek-harness/vendor/loader",
+    "@deepseek-ai/dsh-agent": "link:../../../../deepseek-harness/packages/core/agent",
+    "@deepseek-ai/dsh-client-runtime": "link:../../../../deepseek-harness/packages/client/runtime",
+    "@deepseek-ai/dsh-client-ui-commands": "link:../../../../deepseek-harness/packages/client/ui-commands",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "link:../../../../deepseek-harness/packages/client/ui-input-trigger",
+    "@deepseek-ai/dsh-commands": "link:../../../../deepseek-harness/packages/interaction/commands",
+    "@deepseek-ai/dsh-invariants": "link:../../../../deepseek-harness/packages/runtime-diagnostics/invariants",
+    "@deepseek-ai/dsh-plan-mode": "link:../../../../deepseek-harness/packages/plan/plan-mode",
+    "@deepseek-ai/dsh-session": "link:../../../../deepseek-harness/packages/core/session",
+    "@deepseek-ai/dsh-system-prompt": "link:../../../../deepseek-harness/packages/core/system-prompt",
+    "@deepseek-ai/dsh-tools": "link:../../../../deepseek-harness/packages/core/tools",
+    "tsdown": "0.22.2"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "bundle": "tsdown"
+  }
+}