@elinpf/dsh-ops-access-gate 0.1.7 → 0.2.0

package/README.md

@@ -27,7 +27,7 @@ The gate sits between the ops-access registry (`@elinpf/dsh-ops-access`) and eve
 | `defaultTtlMinutes` | `30` | Grant lifetime when `request_access` omits `ttlMinutes` |
 | `maxTtlMinutes` | `480` | Upper bound for a requested grant lifetime |
 | `auditFile` | `~/.dsh-ops/audit.log` | JSONL audit log path (`~` expands) |
-| `grantTtlOptions` | `[5, 10, 30]` | TTL choices the access panel offers |
+| `grantTtlOptions` | `[10, 30, 60, 120]` | TTL choices the access panel offers |
 | `pendingRequestTimeoutMinutes` | `5` | How long a parked request awaits a human before auto-rejecting |
 | `deniedFile` | `~/.dsh-ops/denied.json` | Persisted lockdown state (survives restarts) |
 

package/README.zh.md

@@ -27,7 +27,7 @@ DeepSeek Harness 运维模式的按会话凭据代理（credential brokering）
 | `defaultTtlMinutes` | `30` | `request_access` 省略 `ttlMinutes` 时的授权时长 |
 | `maxTtlMinutes` | `480` | 申请授权时长的上限 |
 | `auditFile` | `~/.dsh-ops/audit.log` | JSONL 审计日志路径（`~` 展开） |
-| `grantTtlOptions` | `[5, 10, 30]` | 授权面板提供的 TTL 选项 |
+| `grantTtlOptions` | `[10, 30, 60, 120]` | 授权面板提供的 TTL 选项 |
 | `pendingRequestTimeoutMinutes` | `5` | 驻留请求等待人工裁决的超时（超时自动拒绝） |
 | `deniedFile` | `~/.dsh-ops/denied.json` | 持久化封禁状态（重启保留） |
 

package/lib/index.js

@@ -48,7 +48,12 @@ export const Config = z.object({
     defaultTtlMinutes: z.number().default(30),
     maxTtlMinutes: z.number().default(480),
     auditFile: z.string().default('~/.dsh-ops/audit.log'),
-    grantTtlOptions: z.array(z.number()).default([5, 10, 30]),
+    // The panel can only grant one of these options. [5, 10, 30] once made 30
+    // the effective ceiling for every grant — agents asked 60/120 for
+    // hour-spanning recovery work and were cut to 30 every time, forcing
+    // repeat full-approval requests mid-incident (2026-09-10). Include the
+    // realistic durations so the human's adjustment is a choice, not a clamp.
+    grantTtlOptions: z.array(z.number()).default([10, 30, 60, 120]),
     pendingRequestTimeoutMinutes: z.number().default(5),
     deniedFile: z.string().default('~/.dsh-ops/denied.json'),
 });
@@ -726,7 +731,7 @@ export function apply(ctx, config) {
             action: { type: 'string', enum: ['request', 'list', 'revoke'], required: true, description: 'request: ask a human for a timed grant; list: show this session\'s active grants; revoke: drop a grant immediately.' },
             profile: { type: 'string', description: '"kind/name", e.g. "k8s/prod". Required for request and revoke.' },
             reason: { type: 'string', description: 'Why the access is needed — shown verbatim to the human approver. Required for request.' },
-            ttlMinutes: { type: 'number', description: 'Requested grant lifetime in minutes (default ' + config.defaultTtlMinutes + ', max ' + config.maxTtlMinutes + '). The human may approve a shorter lifetime from the panel options: ' + config.grantTtlOptions.join(', ') + '.' },
+            ttlMinutes: { type: 'number', description: 'Requested grant lifetime in minutes (default ' + config.defaultTtlMinutes + ', max ' + config.maxTtlMinutes + '). Ask for the SMALLEST sufficient lifetime: the human approves one of the fixed panel options (' + config.grantTtlOptions.join(', ') + '), and a request beyond the largest option is almost always cut to it. If the grant lapses mid-work, simply request again.' },
         },
         output: {
             schema: {
@@ -832,7 +837,11 @@ export function apply(ctx, config) {
             }
             if (!settled.approved) {
                 const why = settled.outcome === 'timeout'
-                    ? 'no operator decision within ' + config.pendingRequestTimeoutMinutes + ' min'
+                    // An unanswered request is a SILENT failure for the operator (they
+                    // may simply not be watching the panel) — tell the agent its next
+                    // move instead of leaving the work item hanging (2026-09-10: a
+                    // next-day inspection lost its ssh wing to exactly this).
+                    ? 'no operator decision within ' + config.pendingRequestTimeoutMinutes + ' min — the request expired. The operator may not be watching the access panel: tell the user a request is waiting (panel: /access-all), then re-request when they are ready'
                     : settled.outcome === 'cancelled'
                         ? 'cancelled'
                         : 'rejected by the operator';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elinpf/dsh-ops-access-gate",
-  "version": "0.1.7",
+  "version": "0.2.0",
   "description": "Ops access gate — per-session credential brokering. Owns an in-process grant ledger keyed by agent.id and registers a pure-decision broker (ro/rw) into the ops-access seam. Never touches credential fields.",
   "type": "module",
   "main": "lib/index.js",
@@ -34,14 +34,14 @@
   },
   "dependencies": {
     "@deepseek-ai/schemastery": "^3.18.1",
-    "@elinpf/dsh-ops-panel": "^0.1.7"
+    "@elinpf/dsh-ops-panel": "^0.2.0"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/dsh-invariants": "^0.1.0-rc.8",
     "@deepseek-ai/dsh-llm": "^0.1.0-rc.8",
     "@deepseek-ai/dsh-tools": "^0.1.0-rc.8",
-    "@elinpf/dsh-ops-access": "^0.1.7"
+    "@elinpf/dsh-ops-access": "^0.2.0"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.1",
@@ -51,8 +51,8 @@
     "typescript": "^5.4.0",
     "vitest": "^4.1.11",
     "zod": "^4.4.3",
-    "@elinpf/dsh-ops-access": "0.1.7",
-    "@elinpf/dsh-ops-panel": "0.1.7"
+    "@elinpf/dsh-ops-access": "0.2.0",
+    "@elinpf/dsh-ops-panel": "0.2.0"
   },
   "license": "MIT",
   "publishConfig": {