@duke-dsh-plugins/dsh-agent-approval 1.7.1 → 1.7.2

package/README.md

@@ -62,7 +62,7 @@
 dsh plugin --profile web add /path/to/dsh-agent-approval
 
 # 正式发布：从 GitHub Release tarball 安装（资产名为 npm pack 的 scope 形式）
-dsh plugin --profile web add https://github.com/MoonlitDropOfBlood/dsh-agent-approval/releases/download/v1.7.1/duke-dsh-plugins-dsh-agent-approval-1.7.1.tgz
+dsh plugin --profile web add https://github.com/MoonlitDropOfBlood/dsh-agent-approval/releases/download/v1.7.2/duke-dsh-plugins-dsh-agent-approval-1.7.2.tgz
 ```
 
 重启 DSH 后：设置面板出现 **Agent 审批** 页；`/permission` 菜单出现第四项 **Agent 审批**。

package/index.js

@@ -1394,6 +1394,20 @@ export class AgentApprovalService extends TypertRemoteService {
 
     const pApprove = Number(probabilities.approve);
     const pReject = Number(probabilities.reject);
+    // riskLevel 是与 decision 独立的另一条 Choice（v1.7.2）：审计里 risk=high
+    // 却看不到 high 的把握度，记录无法自解释。与 decision 同款防御读取，字段
+    // 缺失只做省略——纯审计文本增强，不改变任何 outcome 判定与校验门槛。
+    const riskProbabilities =
+      risk && risk.probabilities && typeof risk.probabilities === "object" ? risk.probabilities : {};
+    const pLow = Number(riskProbabilities.low);
+    const pMedium = Number(riskProbabilities.medium);
+    const pHigh = Number(riskProbabilities.high);
+    const riskConfidence = risk ? Number(risk.confidence) : NaN;
+    const riskParts = [];
+    if (Number.isFinite(riskConfidence)) riskParts.push("置信度 " + riskConfidence.toFixed(2));
+    if (Number.isFinite(pLow) && Number.isFinite(pMedium) && Number.isFinite(pHigh)) {
+      riskParts.push("p low/medium/high " + pLow.toFixed(2) + "/" + pMedium.toFixed(2) + "/" + pHigh.toFixed(2));
+    }
     const rationale =
       "Jev 决策=" + choice +
       "（置信度 " + confidence.toFixed(2) +
@@ -1401,6 +1415,7 @@ export class AgentApprovalService extends TypertRemoteService {
         ? "，p approve/reject " + pApprove.toFixed(2) + "/" + pReject.toFixed(2)
         : "") +
       "）；风险=" + riskChoice +
+      (riskParts.length > 0 ? "（" + riskParts.join("，") + "）" : "") +
       "；具体风险概率=" + probeNoul.toFixed(2) +
       "。Jev 为结构化决策模型，不生成文字，本理由由概率分布合成。";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@duke-dsh-plugins/dsh-agent-approval",
-  "version": "1.7.1",
+  "version": "1.7.2",
   "description": "Agent-decided approvals for DeepSeek Harness: a workspace-write base permission mode where an independent approval judge (an isolated subagent, or the TypeSafe Jev decision model via direct API) evaluates every sandbox escalation (risky operations are rejected), with a configurable approval model and a per-session audit trail in the conversation window's 审批 tab.",
   "repository": {
     "type": "git",