@dsh-enhanced/personal-assistant 0.1.36 → 0.1.38
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/cordis.patch.yml +7 -3
- package/lib/version.d.ts +1 -1
- package/lib/version.js +1 -1
- package/package.json +5 -5
package/README.md
CHANGED
|
@@ -20,7 +20,7 @@ patch 会完整覆盖上游 `permission` 行，并挂载唯一的 `dsh-enhanced-
|
|
|
20
20
|
|
|
21
21
|
## 默认安全状态
|
|
22
22
|
|
|
23
|
-
- 原生 Permission selector 固定显示 `workspace-write`（请求批准）、`auto`（帮我批准）和 `danger-full-access`（完全访问）三项；前两项共享 `workspace-write + ask` 执行 bundle
|
|
23
|
+
- 原生 Permission selector 固定显示 `workspace-write`（请求批准）、`auto`（帮我批准）和 `danger-full-access`（完全访问）三项；前两项共享 `workspace-write + ask` 执行 bundle（同一沙箱、同一人工审批策略），区别只是 `auto` 档把低/中风险的可逆动作交隔离 reviewer 自动批准，高风险仍直达人工。没有用户层设置的新安装默认 `auto`。已有 `settings.yaml` 的 `permission.defaultPreset` 仍由 DSH Settings 用户层优先，不会被 bundle 强制覆盖。
|
|
24
24
|
- policy 默认写入一条 `dsh-enhanced-foreground-capability-*`：本机 Web/direct 的 foreground Agent 可访问 profile 已挂载的全部技能、工具与插件动作，后续动态挂载也无需逐项补 allow；它不会安装尚未安装的插件，也不授权 background 或飞书 external 身份。显式 deny、紧急停止、身份/预算检查仍优先。`budgets` 默认留空。
|
|
25
25
|
- automations scheduler 默认关闭；创建并审批 automation 后仍需由部署者显式启用 scheduler。
|
|
26
26
|
- Memory、Wiki、Policy、Automations 使用各自的 DSH home 私有路径和独立真源。
|
package/cordis.patch.yml
CHANGED
|
@@ -14,11 +14,15 @@
|
|
|
14
14
|
sandbox: danger-full-access
|
|
15
15
|
approval: never
|
|
16
16
|
name: 完全访问权限
|
|
17
|
-
#
|
|
18
|
-
#
|
|
17
|
+
# Default to `auto`: it keeps the exact same workspace-write sandbox and
|
|
18
|
+
# human approval policy as `workspace-write`; the only difference is that
|
|
19
|
+
# low/medium-risk actions are pre-approved by the isolated model reviewer
|
|
20
|
+
# instead of prompting. Deterministically sensitive actions (secrets,
|
|
21
|
+
# network, privilege escalation, destruction, background tasks) bypass the
|
|
22
|
+
# reviewer and still reach a human. The owner can explicitly pick
|
|
19
23
|
# `danger-full-access` in DSH's native selector (or via the installer
|
|
20
24
|
# confirmation) after understanding the consequence.
|
|
21
|
-
defaultPreset:
|
|
25
|
+
defaultPreset: auto
|
|
22
26
|
|
|
23
27
|
- insert:
|
|
24
28
|
- id: dsh-enhanced-personal-assistant
|
package/lib/version.d.ts
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export declare const version = "0.1.
|
|
1
|
+
export declare const version = "0.1.38";
|
|
2
2
|
//# sourceMappingURL=version.d.ts.map
|
package/lib/version.js
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export const version = '0.1.
|
|
1
|
+
export const version = '0.1.38';
|
|
2
2
|
//# sourceMappingURL=version.js.map
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@dsh-enhanced/personal-assistant",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.38",
|
|
4
4
|
"description": "A core-only meta-bundle for the DSH personal assistant policy, memory, Wiki, and automations plugins.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -48,10 +48,10 @@
|
|
|
48
48
|
},
|
|
49
49
|
"dependencies": {
|
|
50
50
|
"@deepseek-ai/schemastery": "3.18.2",
|
|
51
|
-
"@dsh-enhanced/assistant-
|
|
52
|
-
"@dsh-enhanced/assistant-
|
|
53
|
-
"@dsh-enhanced/personal-wiki": "0.1.
|
|
54
|
-
"@dsh-enhanced/personal-memory": "0.1.
|
|
51
|
+
"@dsh-enhanced/assistant-automations": "0.1.38",
|
|
52
|
+
"@dsh-enhanced/assistant-policy": "0.1.38",
|
|
53
|
+
"@dsh-enhanced/personal-wiki": "0.1.38",
|
|
54
|
+
"@dsh-enhanced/personal-memory": "0.1.38"
|
|
55
55
|
},
|
|
56
56
|
"peerDependencies": {
|
|
57
57
|
"@deepseek-ai/cordis": "^4.0.1"
|