@dsh-enhanced/assistant-policy 0.1.3 → 0.1.5

package/bin/dsh-permission-setup.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+
+import { runPermissionSetup } from '../lib/permission-setup.js'
+
+void runPermissionSetup().catch(error => {
+  process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`)
+  process.exitCode = 1
+})

package/lib/permission-setup.d.ts

@@ -0,0 +1,11 @@
+export type PermissionPreset = 'workspace-write' | 'auto' | 'danger-full-access';
+export interface PermissionSetupArgs {
+    dshHome: string;
+    preset: PermissionPreset;
+    help: boolean;
+}
+export declare function parsePermissionSetupArgs(argv: readonly string[]): PermissionSetupArgs;
+export declare function permissionSetupUsage(): string;
+export declare function setPermissionDefault(input: Pick<PermissionSetupArgs, 'dshHome' | 'preset'>): Promise<string>;
+export declare function runPermissionSetup(argv?: string[]): Promise<void>;
+//# sourceMappingURL=permission-setup.d.ts.map

package/lib/permission-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-setup.d.ts","sourceRoot":"","sources":["../src/permission-setup.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,gBAAgB,GAAG,iBAAiB,GAAG,MAAM,GAAG,oBAAoB,CAAA;AAEhF,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,gBAAgB,CAAA;IACxB,IAAI,EAAE,OAAO,CAAA;CACd;AAUD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,mBAAmB,CAqBrF;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,QAAQ,CAAC,GACrD,OAAO,CAAC,MAAM,CAAC,CA4BjB;AAED,wBAAsB,kBAAkB,CAAC,IAAI,WAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQpF"}

package/lib/permission-setup.js

@@ -0,0 +1,84 @@
+import { randomUUID } from 'node:crypto';
+import { chmod, mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import { isAbsolute, join } from 'node:path';
+import { isMap, parseDocument } from 'yaml';
+const allowedPresets = new Set(['workspace-write', 'auto', 'danger-full-access']);
+function argumentValue(argv, index, option) {
+    const value = argv[index + 1];
+    if (value === undefined || value.startsWith('--'))
+        throw new Error(`assistant-policy permission setup: ${option} requires a value`);
+    return value;
+}
+export function parsePermissionSetupArgs(argv) {
+    const result = {
+        dshHome: process.env.DSH_HOME ?? join(process.env.HOME ?? '', '.dsh'),
+        preset: 'workspace-write',
+        help: false,
+    };
+    for (let index = 0; index < argv.length; index += 1) {
+        const option = argv[index];
+        if (option === '--help' || option === '-h') {
+            result.help = true;
+            continue;
+        }
+        if (option === '--dsh-home')
+            result.dshHome = argumentValue(argv, index++, option);
+        else if (option === '--preset')
+            result.preset = argumentValue(argv, index++, option);
+        else
+            throw new Error(`assistant-policy permission setup: unknown option: ${option}`);
+    }
+    if (!isAbsolute(result.dshHome))
+        throw new Error('assistant-policy permission setup: DSH home must be an absolute path');
+    if (!allowedPresets.has(result.preset)) {
+        throw new Error('assistant-policy permission setup: preset must be workspace-write, auto, or danger-full-access');
+    }
+    return result;
+}
+export function permissionSetupUsage() {
+    return [
+        'Usage: dsh-permission-setup [--dsh-home <absolute-path>] --preset <workspace-write|auto|danger-full-access>',
+        '',
+        'Writes only permission.defaultPreset in DSH settings.yaml using an atomic replacement.',
+    ].join('\n');
+}
+export async function setPermissionDefault(input) {
+    const settingsPath = join(input.dshHome, 'settings.yaml');
+    let source = '';
+    try {
+        source = await readFile(settingsPath, 'utf8');
+    }
+    catch (error) {
+        if (!(error instanceof Error) || !('code' in error) || error.code !== 'ENOENT')
+            throw error;
+    }
+    const document = parseDocument(source.length === 0 ? '{}' : source);
+    if (document.errors.length > 0) {
+        throw new Error(`assistant-policy permission setup: settings.yaml is invalid YAML: ${document.errors[0]?.message}`);
+    }
+    if (!isMap(document.contents)) {
+        throw new Error('assistant-policy permission setup: settings.yaml must contain a YAML mapping');
+    }
+    const permission = document.get('permission', true);
+    if (permission !== undefined && !isMap(permission)) {
+        throw new Error('assistant-policy permission setup: settings.permission must be a YAML mapping');
+    }
+    document.setIn(['permission', 'defaultPreset'], input.preset);
+    const serialized = document.toString({ lineWidth: 0 });
+    await mkdir(input.dshHome, { recursive: true });
+    const temporaryPath = `${settingsPath}.${randomUUID()}.tmp`;
+    await writeFile(temporaryPath, serialized, { encoding: 'utf8', mode: 0o600 });
+    await chmod(temporaryPath, 0o600);
+    await rename(temporaryPath, settingsPath);
+    return settingsPath;
+}
+export async function runPermissionSetup(argv = process.argv.slice(2)) {
+    const args = parsePermissionSetupArgs(argv);
+    if (args.help) {
+        process.stdout.write(`${permissionSetupUsage()}\n`);
+        return;
+    }
+    const settingsPath = await setPermissionDefault(args);
+    process.stdout.write(`Updated ${settingsPath}: permission.defaultPreset=${args.preset}\n`);
+}
+//# sourceMappingURL=permission-setup.js.map

package/lib/permission-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-setup.js","sourceRoot":"","sources":["../src/permission-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAA;AAU3C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAmB,CAAC,iBAAiB,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAA;AAEnG,SAAS,aAAa,CAAC,IAAuB,EAAE,KAAa,EAAE,MAAc;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,mBAAmB,CAAC,CAAA;IACnI,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAuB;IAC9D,MAAM,MAAM,GAAwB;QAClC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC;QACrE,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,KAAK;KACZ,CAAA;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAE,CAAA;QAC3B,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;YAClB,SAAQ;QACV,CAAC;QACD,IAAI,MAAM,KAAK,YAAY;YAAE,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAA;aAC7E,IAAI,MAAM,KAAK,UAAU;YAAE,MAAM,CAAC,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,CAAqB,CAAA;;YACnG,MAAM,IAAI,KAAK,CAAC,sDAAsD,MAAM,EAAE,CAAC,CAAA;IACtF,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;IACxH,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;IACnH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,6GAA6G;QAC7G,EAAE;QACF,wFAAwF;KACzF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAsD;IAEtD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;IACzD,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IAC/C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IAC7F,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACnE,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,qEAAqE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IACrH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;IACjG,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;IACnD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAA;IAClG,CAAC;IACD,QAAQ,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAC7D,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;IAEtD,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,aAAa,GAAG,GAAG,YAAY,IAAI,UAAU,EAAE,MAAM,CAAA;IAC3D,MAAM,SAAS,CAAC,aAAa,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7E,MAAM,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;IACjC,MAAM,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,CAAA;IACzC,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAA;IAC3C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,oBAAoB,EAAE,IAAI,CAAC,CAAA;QACnD,OAAM;IACR,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAA;IACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,YAAY,8BAA8B,IAAI,CAAC,MAAM,IAAI,CAAC,CAAA;AAC5F,CAAC"}

package/lib/version.d.ts

@@ -1,2 +1,2 @@
-export declare const version = "0.1.3";
+export declare const version = "0.1.5";
 //# sourceMappingURL=version.d.ts.map

package/lib/version.js

@@ -1,2 +1,2 @@
-export const version = '0.1.3';
+export const version = '0.1.5';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,20 +1,28 @@
 {
   "name": "@dsh-enhanced/assistant-policy",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "A DeepSeek Harness plugin for Assistant Policy.",
   "license": "MIT",
   "type": "module",
   "main": "./lib/index.js",
   "types": "./lib/index.d.ts",
+  "bin": {
+    "dsh-permission-setup": "./bin/dsh-permission-setup.js"
+  },
   "exports": {
     ".": {
       "types": "./lib/index.d.ts",
       "default": "./lib/index.js"
     },
     "./cordis.patch.yml": "./cordis.patch.yml",
+    "./permission-setup": {
+      "types": "./lib/permission-setup.d.ts",
+      "default": "./lib/permission-setup.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [
+    "bin",
     "lib",
     "cordis.patch.yml",
     "README.md",
@@ -42,7 +50,8 @@
     }
   },
   "dependencies": {
-    "@deepseek-ai/schemastery": "3.18.1"
+    "@deepseek-ai/schemastery": "3.18.1",
+    "yaml": "2.9.0"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",