@duke-dsh-plugins/dsh-agent-approval 1.7.2 → 1.8.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@duke-dsh-plugins/dsh-agent-approval",
-  "version": "1.7.2",
-  "description": "Agent-decided approvals for DeepSeek Harness: a workspace-write base permission mode where an independent approval judge (an isolated subagent, or the TypeSafe Jev decision model via direct API) evaluates every sandbox escalation (risky operations are rejected), with a configurable approval model and a per-session audit trail in the conversation window's 审批 tab.",
+  "version": "1.8.0",
+  "description": "Agent-decided approvals for DeepSeek Harness: an 自动审批 permission mode where every sandbox escalation is judged automatically (default judge: one direct LLM call with no subagent session; optional isolated judge subagent or the TypeSafe Jev decision model), plus an opt-in 自动审查 per-call review mode (Full access base; every tool call reviewed by the Jev judge before execution, risky calls rejected with no human fallback), with a configurable judge model and a per-session audit trail in the conversation window's 审批 tab.",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/MoonlitDropOfBlood/dsh-agent-approval.git"

package/typert.host.js

@@ -42,6 +42,7 @@ const recordSchema = z
     durationMs: z.number(),
     childSessionId: z.string(),
     rationale: z.string(),
+    mode: z.enum(["escalation", "review"]),
   })
   .readonly();
 
@@ -52,6 +53,9 @@ const modelRouteSchema = z
   })
   .readonly();
 
+/** Judge invocation mode (v1.8.0): direct LLM stream call, or the spawn subagent. */
+const judgeModeSchema = z.enum(["llm", "subagent"]);
+
 const jevConfigSchema = z
   .object({
     apiKey: z.string(),
@@ -83,6 +87,9 @@ const ruleSchema = z
 const stateValueSchema = z
   .object({
     model: modelRouteSchema,
+    judgeMode: judgeModeSchema,
+    reviewAvailable: z.boolean(),
+    reviewDefault: z.boolean(),
     jev: jevConfigSchema,
     timeoutMs: z.number(),
     enabledSessions: z.array(enabledSessionSchema).readonly(),
@@ -96,6 +103,18 @@ const setModelValueSchema = z
   })
   .readonly();
 
+const setJudgeModeValueSchema = z
+  .object({
+    judgeMode: judgeModeSchema,
+  })
+  .readonly();
+
+const setReviewDefaultValueSchema = z
+  .object({
+    reviewDefault: z.boolean(),
+  })
+  .readonly();
+
 const setJevValueSchema = z
   .object({
     jev: jevConfigSchema,
@@ -179,6 +198,8 @@ function okResult(valueSchema) {
 
 const stateResultSchema = okResult(stateValueSchema);
 const setModelResultSchema = okResult(setModelValueSchema);
+const setJudgeModeResultSchema = okResult(setJudgeModeValueSchema);
+const setReviewDefaultResultSchema = okResult(setReviewDefaultValueSchema);
 const setJevResultSchema = okResult(setJevValueSchema);
 const setTimeoutResultSchema = okResult(setTimeoutValueSchema);
 const toggleResultSchema = okResult(toggleValueSchema);
@@ -194,6 +215,14 @@ const _agentApproval_setModel_parameter_0$schema = z.object({
   model: z.string(),
 });
 
+const _agentApproval_setJudgeMode_parameter_0$schema = z.object({
+  mode: judgeModeSchema,
+});
+
+const _agentApproval_setReviewDefault_parameter_0$schema = z.object({
+  on: z.boolean(),
+});
+
 const _agentApproval_setJevConfig_parameter_0$schema = z.object({
   apiKey: z.string(),
   endpoint: z.string(),
@@ -272,6 +301,60 @@ export const TYPERT = {
       },
       sourceLocation: { file: "index.js", line: 1, column: 1 },
     },
+    {
+      id: "dsh-agent-approval#agentApproval/setJudgeMode",
+      service: "agentApproval",
+      namespace: "agentApproval",
+      method: "setJudgeMode",
+      invocation: { kind: "direct" },
+      parameters: [
+        {
+          name: "request",
+          wire: "request",
+          source: "json",
+          codec: {
+            mode: "strict",
+            typeSymbol: "dsh-agent-approval#AgentApprovalSetJudgeModeRequest",
+            schema: _agentApproval_setJudgeMode_parameter_0$schema,
+            create: () => _agentApproval_setJudgeMode_parameter_0$schema,
+          },
+        },
+      ],
+      result: {
+        mode: "strict",
+        typeSymbol: "dsh-agent-approval#AgentApprovalSetJudgeModeResult",
+        schema: setJudgeModeResultSchema,
+        create: () => setJudgeModeResultSchema,
+      },
+      sourceLocation: { file: "index.js", line: 1, column: 1 },
+    },
+    {
+      id: "dsh-agent-approval#agentApproval/setReviewDefault",
+      service: "agentApproval",
+      namespace: "agentApproval",
+      method: "setReviewDefault",
+      invocation: { kind: "direct" },
+      parameters: [
+        {
+          name: "request",
+          wire: "request",
+          source: "json",
+          codec: {
+            mode: "strict",
+            typeSymbol: "dsh-agent-approval#AgentApprovalSetReviewDefaultRequest",
+            schema: _agentApproval_setReviewDefault_parameter_0$schema,
+            create: () => _agentApproval_setReviewDefault_parameter_0$schema,
+          },
+        },
+      ],
+      result: {
+        mode: "strict",
+        typeSymbol: "dsh-agent-approval#AgentApprovalSetReviewDefaultResult",
+        schema: setReviewDefaultResultSchema,
+        create: () => setReviewDefaultResultSchema,
+      },
+      sourceLocation: { file: "index.js", line: 1, column: 1 },
+    },
     {
       id: "dsh-agent-approval#agentApproval/setJevConfig",
       service: "agentApproval",
@@ -539,7 +622,7 @@ export const TYPERT = {
           {
             name: "AgentApprovalRecord",
             declaration:
-              "export interface AgentApprovalRecord {\n    readonly at: string;\n    readonly sessionId: string;\n    readonly toolName: string;\n    readonly reason: string;\n    readonly args: string;\n    readonly outcome: 'allowed-once' | 'rejected' | 'cancelled' | 'unavailable';\n    readonly riskLevel: string;\n    readonly model: string;\n    readonly durationMs: number;\n    readonly childSessionId: string;\n    readonly rationale: string;\n}",
+              "export interface AgentApprovalRecord {\n    readonly at: string;\n    readonly sessionId: string;\n    readonly toolName: string;\n    readonly reason: string;\n    readonly args: string;\n    readonly outcome: 'allowed-once' | 'rejected' | 'cancelled' | 'unavailable';\n    readonly riskLevel: string;\n    readonly model: string;\n    readonly durationMs: number;\n    readonly childSessionId: string;\n    readonly rationale: string;\n    readonly mode: 'escalation' | 'review';\n}",
           },
           {
             name: "AgentApprovalModelRoute",
@@ -579,7 +662,27 @@ export const TYPERT = {
           {
             name: "AgentApprovalStateValue",
             declaration:
-              "export interface AgentApprovalStateValue {\n    readonly model: AgentApprovalModelRoute;\n    readonly jev: AgentApprovalJevConfig;\n    readonly timeoutMs: number;\n    readonly enabledSessions: readonly AgentApprovalEnabledSession[];\n    readonly rules: readonly AgentApprovalRule[];\n}",
+              "export interface AgentApprovalStateValue {\n    readonly model: AgentApprovalModelRoute;\n    readonly judgeMode: 'llm' | 'subagent';\n    readonly reviewAvailable: boolean;\n    readonly reviewDefault: boolean;\n    readonly jev: AgentApprovalJevConfig;\n    readonly timeoutMs: number;\n    readonly enabledSessions: readonly AgentApprovalEnabledSession[];\n    readonly rules: readonly AgentApprovalRule[];\n}",
+          },
+          {
+            name: "AgentApprovalSetReviewDefaultRequest",
+            declaration:
+              "export interface AgentApprovalSetReviewDefaultRequest {\n    readonly on: boolean;\n}",
+          },
+          {
+            name: "AgentApprovalSetReviewDefaultResult",
+            declaration:
+              "export type AgentApprovalSetReviewDefaultResult = { ok: true; value: { readonly reviewDefault: boolean } } | { ok: false; error: { code: string; message?: string } };",
+          },
+          {
+            name: "AgentApprovalSetJudgeModeRequest",
+            declaration:
+              "export interface AgentApprovalSetJudgeModeRequest {\n    readonly mode: 'llm' | 'subagent';\n}",
+          },
+          {
+            name: "AgentApprovalSetJudgeModeResult",
+            declaration:
+              "export type AgentApprovalSetJudgeModeResult = { ok: true; value: { readonly judgeMode: 'llm' | 'subagent' } } | { ok: false; error: { code: string; message?: string } };",
           },
           {
             name: "AgentApprovalSessionRecordsRequest",