@klarkxy/dsh-safe-auto 0.3.0 → 0.5.0

package/lib/client.js

@@ -294,7 +294,14 @@ function useModelCatalog(load, options = {}) {
 		refresh
 	};
 }
-/** Also accepts a mapped state from a caller that owns broader async orchestration. */
+/**
+* Also accepts a mapped state from a caller that owns broader async orchestration.
+*
+* The dsh-ui-* classes carry the styling and resolve through the consuming
+* plugin's own officialUiCss scope (every consumer mounts its root class, so
+* e.g. `.dsh-model-hub .dsh-ui-loading` paints this); dsh-model-catalog-status
+* stays as a structural hook for tests and layout, never a colour source.
+*/
 function ModelCatalogStatus({ state, locale }) {
 	const zh = locale?.toLowerCase().startsWith("zh") === true;
 	const copy = zh ? {
@@ -310,15 +317,17 @@ function ModelCatalogStatus({ state, locale }) {
 	};
 	if (!state.loading && !state.error && state.failures.length === 0) return null;
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-		className: "dsh-model-catalog-status",
+		className: "dsh-model-catalog-status dsh-ui-stack",
 		lang: zh ? "zh" : "en",
 		children: [
 			state.loading ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 				role: "status",
+				className: "dsh-ui-loading",
 				children: copy.loading
 			}) : null,
 			state.error ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
 				role: "alert",
+				className: "dsh-ui-error dsh-ui-wrap",
 				children: [
 					copy.error,
 					": ",
@@ -327,20 +336,27 @@ function ModelCatalogStatus({ state, locale }) {
 			}) : null,
 			state.failures.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				role: "status",
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: copy.partial }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", { children: state.failures.map((failure, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", { children: [
-					failure.name || failure.id,
-					": ",
-					failure.message
-				] }, `${failure.id}:${index}`)) })]
+				className: "dsh-ui-meta",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: copy.partial }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+					className: "dsh-ui-list",
+					children: state.failures.map((failure, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", { children: [
+						failure.name || failure.id,
+						": ",
+						failure.message
+					] }, `${failure.id}:${index}`))
+				})]
 			}) : null,
-			state.error || state.failures.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
-				type: "button",
-				size: "sm",
-				disabled: state.loading,
-				onClick: () => {
-					state.refresh();
-				},
-				children: copy.retry
+			state.error || state.failures.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: "dsh-ui-actions",
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+					type: "button",
+					size: "sm",
+					disabled: state.loading,
+					onClick: () => {
+						state.refresh();
+					},
+					children: copy.retry
+				})
 			}) : null
 		]
 	});
@@ -358,7 +374,8 @@ function ModelCatalogStatus({ state, locale }) {
 * Sticky group headings, subsequence ranking, highlight walking and focus
 * hand-back all match the host. SYNC POINT: when the host's ModelSelect or
 * ModelSelect.module.css changes, this copy must be re-transcribed; styles
-* below may only reference --dsw-* theme tokens, never literal colors.
+* below may only reference allowlisted theme tokens (the --dsw-* set plus the
+* host's --ds-* motion tokens), never literal colors.
 *
 * It statically imports the primitives, so only browser clients should load
 * this entry; host code and node tests use the core entry (`./index.ts`).
@@ -866,7 +883,8 @@ function ModelMenu(props) {
 * sticky group headings (MenuGroup's own CSS), and the l1-stroke prominent
 * elevation at portal z-index 1100. The trigger mirrors the composer's 28px
 * model pill, chevron rotating open. MenuSurface paints fill and backdrop.
-* Only --dsw-* theme tokens may appear here — a literal color is a bug.
+* Only allowlisted --dsw- and --ds- theme tokens may appear here — a literal
+* color is a bug.
 */
 const modelMenuCss = `
 .dsh-model-menu-root { min-width: 0; position: relative; display: inline-flex; }
@@ -889,12 +907,14 @@ const modelMenuCss = `
   display: flex;
 }
 .dsh-model-menu-trigger:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-hover); }
-.dsh-model-menu-trigger:focus-visible:not([data-selection-focus]) { box-shadow: 0 0 0 2px var(--dsw-focus-ring-color, var(--dsw-alias-state-business-primary)); }
+.dsh-model-menu-trigger:focus-visible:not([data-selection-focus]) { box-shadow: 0 0 0 var(--dsw-focus-ring-width) var(--dsw-focus-ring-color, var(--dsw-alias-state-business-primary)); }
 .dsh-model-menu-trigger:disabled { color: var(--dsw-alias-label-dimmed); cursor: default; }
 .dsh-model-menu-triggerLabel { text-overflow: ellipsis; white-space: nowrap; min-width: 0; overflow: hidden; }
 .dsh-model-menu-triggerEffort { text-overflow: ellipsis; white-space: nowrap; min-width: 0; color: var(--dsw-alias-label-caption); flex-shrink: 1000; overflow: hidden; }
-.dsh-model-menu-chevron { color: var(--dsw-alias-label-caption); flex: none; transition: transform 0.12s; }
+.dsh-model-menu-chevron { color: var(--dsw-alias-label-caption); flex: none; transition: transform var(--ds-transition-duration) var(--ds-ease-in-out); }
 .dsh-model-menu-chevronOpen { transform: rotate(180deg); }
+/* Portal overlay: the host publishes no z-index token, so the card keeps the
+ * native menu layer's 1100 verbatim. */
 .dsh-model-menu-menu {
   z-index: 1100;
   --dsw-elevation-stroke-color: var(--dsw-alias-border-l1);
@@ -920,6 +940,8 @@ const modelMenuCss = `
 .dsh-model-menu-searchWithQuery { padding-right: 34px; }
 .dsh-model-menu-searchRow .dsh-model-menu-search input { padding: 0; font-size: 12px; line-height: normal; }
 .dsh-model-menu-searchRow .dsh-model-menu-search input::placeholder { color: var(--dsw-alias-label-caption); }
+/* The clear button is a circle by geometry (border-radius: 50%), a shape the
+ * radius token scale does not describe. */
 .dsh-model-menu-searchClear {
   width: 24px;
   height: 24px;
@@ -1167,6 +1189,17 @@ ${scope} {
 /* --- Layout scaffolding. --- */
 & .dsh-ui-stack { display: flex; flex-direction: column; gap: 12px; }
 & .dsh-ui-stack-lg { display: flex; flex-direction: column; gap: 20px; }
+/* Plugin detail pages share one reading column. These are layout recipes;
+ * controls keep their own primitive styles. Form spacing follows the host's
+ * settings-form/fields.module.css and SettingsForm.module.css. */
+& .dsh-ui-page { display: flex; flex-direction: column; gap: 16px; width: 100%; max-width: 760px; min-width: 0; }
+& .dsh-ui-form { display: flex; flex-direction: column; gap: 0; min-width: 0; }
+&.dsh-ui-form > .dsh-ui-field, & .dsh-ui-form > .dsh-ui-field { padding: 12px 0; }
+& .dsh-ui-form-footer { display: flex; align-items: center; flex-wrap: wrap; gap: 8px; padding-top: 16px; min-width: 0; }
+& .dsh-ui-fields-grid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 12px 20px; min-width: 0; margin: 0; padding: 0; border: 0; }
+@media (max-width: 560px) {
+  & .dsh-ui-fields-grid { grid-template-columns: minmax(0, 1fr); }
+}
 & .dsh-ui-row { display: flex; align-items: center; gap: 8px; min-width: 0; }
 & .dsh-ui-row-wrap { display: flex; align-items: center; flex-wrap: wrap; gap: 8px; }
 & .dsh-ui-spacer { flex: 1; min-width: 0; }
@@ -1194,6 +1227,9 @@ ${scope} {
  * official primitive, so this only owns the vertical rhythm. --- */
 & .dsh-ui-field { display: flex; flex-direction: column; gap: 6px; min-width: 0; }
 & .dsh-ui-field + .dsh-ui-field { border-top: 0.5px solid var(--dsw-alias-border-l2); padding-top: 12px; }
+/* Grid fields share a row, so the stacked-field divider must not win later in
+ * the cascade. Reset it here, after the field recipe. */
+& .dsh-ui-fields-grid > .dsh-ui-field { padding: 0; border: 0; }
 & .dsh-ui-label { display: flex; align-items: center; gap: 6px; font-size: 13px; line-height: 20px; font-weight: 500; color: var(--dsw-alias-label-primary); }
 & .dsh-ui-label-row { display: flex; align-items: baseline; justify-content: space-between; gap: 8px; }
 & .dsh-ui-help { font-size: 12px; line-height: 1.6; color: var(--dsw-alias-label-secondary); }
@@ -1384,7 +1420,7 @@ ${scope} {
   & *, & *::before, & *::after { transition-duration: 0.01ms !important; animation-duration: 0.01ms !important; }
 }
 }
-`.replace(/^& (\.dsh-ui-[a-z0-9-]+)(?![+>~])/gm, (_match, className) => `&${className}, & ${className}`);
+`.replace(/^& (\.dsh-ui-[a-z0-9-]+)(?=\s*\{)/gm, (_match, className) => `&${className}, & ${className}`);
 }
 //#endregion
 //#region ../dsh-plugin-kit/lib/client-utils.js
@@ -1414,25 +1450,18 @@ function createPluginReadGate(now = Date.now) {
 }
 //#endregion
 //#region ../dsh-plugin-kit/lib/contracts.js
-/**
-* Remote contribution for model-settings change notifications.
-* Provided by `@klarkxy/dsh-model-hub` (`ModelSettingsChangesController`);
-* subscribers degrade silently when that package is not installed.
-* The stream carries invalidations only — `ready` is never a settings snapshot.
-*/
-const MODEL_SETTINGS_CHANGES_REMOTE = {
-	package: "@klarkxy/dsh-model-hub",
-	descriptors: [{
-		id: "modelSettingsChanges/watch",
-		service: "modelSettingsChangesController",
-		namespace: "modelSettingsChanges",
-		method: "watch",
-		mode: "stream",
-		invocation: { kind: "direct" },
-		parameters: [],
-		cancellation: { parameter: "signal" }
-	}]
-};
+/** `@klarkxy/dsh-git-commit` becomes `KlarkxyDshGitCommitModelSettingsChanges`. */
+function modelSettingsChangesIdentity(packageName) {
+	const scoped = /^@([^/]+)\/(.+)$/.exec(packageName);
+	const parts = (scoped ? `${scoped[1]}/${scoped[2]}` : packageName).split(/[^A-Za-z0-9]+/).filter(Boolean);
+	if (!parts.length) throw new Error("Model settings package name has no RPC segment");
+	const segment = `${parts.map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join("")}ModelSettingsChanges`;
+	if (!/^[A-Z][A-Za-z0-9]*$/.test(segment)) throw new Error(`Model settings sync name is not an RPC segment: ${segment}`);
+	return {
+		service: segment,
+		namespace: segment
+	};
+}
 //#endregion
 //#region ../dsh-plugin-kit/lib/model-settings-client.js
 /** This stream carries invalidations only; ready is never a settings snapshot. */
@@ -1447,17 +1476,44 @@ function parseModelSettingsChangeFrame(value) {
 	};
 	throw new Error("Invalid model settings change frame");
 }
-MODEL_SETTINGS_CHANGES_REMOTE.package, MODEL_SETTINGS_CHANGES_REMOTE.descriptors.map((descriptor) => ({
-	...descriptor,
-	result: {
-		mode: "strict",
-		typeSymbol: "ModelSettings.ChangeFrame",
-		create: () => ({ parse: parseModelSettingsChangeFrame })
-	}
-}));
+/** One owner's contribution. Each package mounts only its own endpoint. */
+function modelSettingsChangesRemote(packageName, identity = modelSettingsChangesIdentity(packageName)) {
+	return {
+		package: packageName,
+		descriptors: [{
+			id: `${identity.namespace}/watch`,
+			service: identity.service,
+			namespace: identity.namespace,
+			method: "watch",
+			mode: "stream",
+			invocation: { kind: "direct" },
+			parameters: [],
+			cancellation: { parameter: "signal" },
+			result: {
+				mode: "strict",
+				typeSymbol: "ModelSettings.ChangeFrame",
+				create: () => ({ parse: parseModelSettingsChangeFrame })
+			}
+		}]
+	};
+}
+/** Mount from a synchronous apply. Disposal waits for an in-flight mount and
+* then withdraws it, so the contribution cannot outlive the plugin. */
+function mountModelSettingsChanges(ctx, packageName) {
+	const contribution = modelSettingsChangesRemote(packageName);
+	ctx.inject(["remote"], (injected) => {
+		const scope = injected;
+		const mounting = scope.remote.$mount(contribution);
+		mounting.catch(() => {});
+		scope.effect(() => async () => {
+			await (await mounting.catch(() => void 0))?.();
+		});
+	});
+}
 /** Native RemoteStream owns carrier reconnects; no timers or browser transport.
 * A factory shares one logical stream while at least one subscriber remains. */
-function createModelSettingsSubscriber(ctx, namespace) {
+function createModelSettingsSubscriber(ctx, packageName, identity = modelSettingsChangesIdentity(packageName), accept = (ns) => ns === packageName) {
+	const endpoint = identity;
 	const listeners = /* @__PURE__ */ new Set();
 	let injection;
 	let current;
@@ -1483,12 +1539,18 @@ function createModelSettingsSubscriber(ctx, namespace) {
 	};
 	const start = () => {
 		const life = ++lifecycle;
-		injection = ctx.inject(["remote", "remote.modelSettingsChanges"], (injected) => {
+		injection = ctx.inject(["remote", `remote.${endpoint.namespace}`], (injected) => {
 			if (life !== lifecycle || !listeners.size) return;
 			const scope = injected;
+			const service = scope.remote[endpoint.namespace];
+			if (!service || !("watch" in service) || !service.watch) {
+				report("Model settings sync service unavailable");
+				return;
+			}
+			const watch = service.watch;
 			const stream = scope.remote.$stream({
 				name: "Model settings sync",
-				open: (signal) => scope.remote.modelSettingsChanges.watch(signal),
+				open: (signal) => watch(signal),
 				ended: (accepted) => /* @__PURE__ */ new Error(`Model settings sync stream ended ${accepted ? "after" : "before"} ready; refresh or reopen the page`)
 			});
 			const session = {
@@ -1523,7 +1585,7 @@ function createModelSettingsSubscriber(ctx, namespace) {
 							invalidate();
 						} else {
 							if (!ready) throw new Error("Model settings sync change arrived before ready");
-							if (namespace === "*" || frame.ns === namespace) invalidate();
+							if (accept(frame.ns)) invalidate();
 						}
 					}
 				} catch (error) {
@@ -1844,9 +1906,6 @@ const css = `${officialUiCss("dsh-safe-auto")}${modelMenuCss}
  * legend keeps the UA inline padding from indenting the group title. */
 .dsh-safe-auto legend { padding: 0; }
 `;
-function Style() {
-	return h("style", null, css);
-}
 function ErrorText({ error, t }) {
 	return error ? h("p", {
 		role: "alert",
@@ -1939,7 +1998,7 @@ function PermissionMenu({ sessionId, locked, api, locale, initialSnapshot = null
 	return h("span", {
 		className: "dsh-safe-auto dsh-safe-auto-permission",
 		"aria-busy": busy
-	}, h(Style), h(_deepseek_ai_dsh_client_ui_primitives.Menu, {
+	}, h(_deepseek_ai_dsh_client_ui_primitives.Menu, {
 		open,
 		side: "top",
 		align: "start",
@@ -1978,7 +2037,7 @@ function ReviewerFields({ values, catalog, disabled, onChange, locale }) {
 	const retained = effort && h("span", null, " ", t("savedEffortRetained", effort));
 	return h("fieldset", {
 		disabled,
-		className: "dsh-ui-card"
+		className: "dsh-safe-auto dsh-ui-card"
 	}, h("legend", { className: "dsh-ui-heading" }, t("reviewer")), h("div", { className: "dsh-ui-field" }, h("span", { className: "dsh-ui-label" }, t("model")), h(ModelMenu, {
 		open,
 		onOpenChange: setOpen,
@@ -2021,6 +2080,339 @@ function ReviewerFields({ values, catalog, disabled, onChange, locale }) {
 		clearSearchLabel: t("clearSearch")
 	})), state.follow && h("p", { className: "dsh-ui-help" }, t("followHelp"), retained), !state.follow && !state.known && h("p", { className: "dsh-ui-help" }, t("modelAbsent")), !state.follow && unknownEffort && h("p", { className: "dsh-ui-help" }, t("effortAbsent")), !state.follow && h("p", { className: "dsh-ui-help" }, t("effortClears")));
 }
+const HISTORY_TEXT = {
+	zh: {
+		title: "审核历史",
+		help: "保存启用此功能后的审核。内容已尽力脱敏；记录持续保留，可导出供审计。",
+		search: "搜索内容",
+		session: "会话 ID",
+		tool: "工具",
+		outcome: "审核结果",
+		risk: "风险",
+		from: "开始时间",
+		to: "结束时间",
+		all: "全部",
+		apply: "查询",
+		refresh: "刷新",
+		next: "下一页",
+		back: "上一页",
+		detail: "查看详情",
+		empty: "没有匹配的审核记录",
+		loading: "正在查询…",
+		exportOne: "导出此记录",
+		exportAll: "导出筛选结果",
+		cancel: "取消导出",
+		exporting: (count) => `正在导出 ${count} 条…`,
+		count: (count) => `共 ${count} 条`,
+		missing: "审核记录不存在",
+		execution: "工具结果",
+		approval: "实际审批",
+		approvalUnknown: "未观察到审批结果",
+		unavailable: "未记录",
+		outcomes: {
+			pending: "审核中",
+			interrupted: "审核中断",
+			"allowed-once": "审核通过",
+			rejected: "拒绝",
+			cancelled: "取消",
+			unavailable: "审批不可用"
+		},
+		risks: {
+			low: "低",
+			medium: "中",
+			high: "高",
+			critical: "严重"
+		},
+		states: {
+			"not-observed": "未观察到执行结果",
+			succeeded: "工具返回成功",
+			failed: "工具返回错误"
+		}
+	},
+	en: {
+		title: "Review history",
+		help: "Reviews are retained from the time this feature is enabled. Content is redacted on a best-effort basis and can be exported for audit.",
+		search: "Search contents",
+		session: "Session ID",
+		tool: "Tool",
+		outcome: "Outcome",
+		risk: "Risk",
+		from: "From",
+		to: "To",
+		all: "All",
+		apply: "Search",
+		refresh: "Refresh",
+		next: "Next",
+		back: "Previous",
+		detail: "View details",
+		empty: "No matching reviews",
+		loading: "Loading reviews…",
+		exportOne: "Export this record",
+		exportAll: "Export filtered results",
+		cancel: "Cancel export",
+		exporting: (count) => `Exporting ${count} records…`,
+		count: (count) => `${count} records`,
+		missing: "Review record not found",
+		execution: "Tool result",
+		approval: "Actual approval",
+		approvalUnknown: "No approval result observed",
+		unavailable: "Not recorded",
+		outcomes: {
+			pending: "Pending",
+			interrupted: "Interrupted",
+			"allowed-once": "Review passed",
+			rejected: "Rejected",
+			cancelled: "Cancelled",
+			unavailable: "Approval unavailable"
+		},
+		risks: {
+			low: "Low",
+			medium: "Medium",
+			high: "High",
+			critical: "Critical"
+		},
+		states: {
+			"not-observed": "No execution result observed",
+			succeeded: "Tool returned success",
+			failed: "Tool returned an error"
+		}
+	}
+};
+function historyFilters(values) {
+	return Object.fromEntries(Object.entries(values).filter(([, value]) => value !== "").map(([key, value]) => [key, key === "from" || key === "to" ? new Date(value).toISOString() : value]));
+}
+function downloadHistory(records, filename = "safe-auto-history.json") {
+	const url = URL.createObjectURL(new Blob([JSON.stringify({
+		format: "safe-auto-audit-v1",
+		exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		count: records.length,
+		records
+	}, null, 2)], { type: "application/json" }));
+	const link = document.createElement("a");
+	link.href = url;
+	link.download = filename;
+	link.click();
+	setTimeout(() => URL.revokeObjectURL(url), 6e4);
+}
+function HistoryPanel({ api, locale, initialPage = null, download = downloadHistory }) {
+	const language = (0, react.useSyncExternalStore)((listener) => locale?.subscribe?.(listener) ?? (() => {}), () => localeLanguage(locale), () => localeLanguage(locale));
+	const t = HISTORY_TEXT[language];
+	const [draft, setDraft] = (0, react.useState)({
+		query: "",
+		sessionId: "",
+		tool: "",
+		outcome: "",
+		risk: "",
+		from: "",
+		to: ""
+	});
+	const [filter, setFilter] = (0, react.useState)({});
+	const [page, setPage] = (0, react.useState)(initialPage);
+	const [cursors, setCursors] = (0, react.useState)([void 0]);
+	const [index, setIndex] = (0, react.useState)(0);
+	const [error, setError] = (0, react.useState)("");
+	const [busy, setBusy] = (0, react.useState)(false);
+	const [detail, setDetail] = (0, react.useState)(null);
+	const [exporting, setExporting] = (0, react.useState)(null);
+	const generation = (0, react.useRef)(0), detailsGeneration = (0, react.useRef)(0), exportGeneration = (0, react.useRef)(0);
+	const alive = (0, react.useRef)(true), filterRef = (0, react.useRef)(filter);
+	filterRef.current = filter;
+	const load = (0, react.useCallback)(async (filters, cursor) => {
+		const ticket = ++generation.current;
+		++detailsGeneration.current;
+		++exportGeneration.current;
+		setBusy(true);
+		setError("");
+		setDetail(null);
+		setExporting(null);
+		try {
+			const result = await api.historyList({
+				...filters,
+				limit: 25,
+				...cursor ? { cursor } : {}
+			});
+			if (alive.current && ticket === generation.current) setPage(result);
+		} catch (e) {
+			if (alive.current && ticket === generation.current) {
+				setError(errorMessage(e));
+				setPage(null);
+			}
+		} finally {
+			if (alive.current && ticket === generation.current) setBusy(false);
+		}
+	}, [api]);
+	(0, react.useEffect)(() => {
+		alive.current = true;
+		load({}, void 0);
+		const stop = api.subscribeGeneration?.(() => {
+			setCursors([void 0]);
+			setIndex(0);
+			load(filterRef.current, void 0);
+		});
+		return () => {
+			alive.current = false;
+			generation.current++;
+			detailsGeneration.current++;
+			exportGeneration.current++;
+			stop?.();
+		};
+	}, [load, api]);
+	const search = (e) => {
+		e?.preventDefault();
+		try {
+			const next = historyFilters(draft);
+			setFilter(next);
+			setCursors([void 0]);
+			setIndex(0);
+			load(next);
+		} catch (e) {
+			setError(errorMessage(e));
+		}
+	};
+	const showDetail = async (id) => {
+		const ticket = ++detailsGeneration.current;
+		setError("");
+		setDetail(null);
+		try {
+			const row = await api.historyGet(id);
+			if (!row) throw new Error(t.missing);
+			if (alive.current && ticket === detailsGeneration.current) setDetail(row);
+		} catch (e) {
+			if (alive.current && ticket === detailsGeneration.current) setError(errorMessage(e));
+		}
+	};
+	const exportAll = async () => {
+		const ticket = ++exportGeneration.current;
+		const records = [];
+		let cursor;
+		setExporting(0);
+		setError("");
+		try {
+			const now = (/* @__PURE__ */ new Date()).toISOString();
+			const filters = {
+				...filter,
+				to: filter.to && Date.parse(filter.to) < Date.parse(now) ? filter.to : now
+			};
+			do {
+				const batch = await api.historyList({
+					...filters,
+					limit: 100,
+					...cursor ? { cursor } : {}
+				});
+				if (!alive.current || ticket !== exportGeneration.current) return;
+				for (const item of batch.items) {
+					const row = await api.historyGet(item.id);
+					if (!alive.current || ticket !== exportGeneration.current) return;
+					if (!row) throw new Error(t.missing);
+					records.push(row);
+					setExporting(records.length);
+				}
+				if (batch.nextCursor && batch.nextCursor === cursor) throw new Error("Invalid history cursor");
+				cursor = batch.nextCursor;
+			} while (cursor);
+			download(records);
+		} catch (e) {
+			if (alive.current && ticket === exportGeneration.current) setError(errorMessage(e));
+		} finally {
+			if (alive.current && ticket === exportGeneration.current) setExporting(null);
+		}
+	};
+	const field = (key, label, options) => h("label", {
+		key,
+		className: "dsh-ui-field"
+	}, h("span", { className: "dsh-ui-label" }, label), options ? h("select", {
+		className: "dsh-ui-select",
+		value: draft[key],
+		onChange: (e) => setDraft({
+			...draft,
+			[key]: e.target.value
+		})
+	}, h("option", { value: "" }, t.all), ...Object.entries(options).map(([value, label]) => h("option", {
+		key: value,
+		value
+	}, label))) : h(_deepseek_ai_dsh_client_ui_primitives.Input, {
+		type: key === "from" || key === "to" ? "datetime-local" : "text",
+		maxLength: 256,
+		value: draft[key],
+		onChange: (e) => setDraft({
+			...draft,
+			[key]: e.target.value
+		})
+	}));
+	return h("section", {
+		className: "dsh-ui-stack",
+		"aria-label": t.title,
+		"aria-busy": busy
+	}, h("p", { className: "dsh-ui-help" }, t.help), h("form", {
+		className: "dsh-ui-stack",
+		onSubmit: search
+	}, h("div", { className: "dsh-ui-fields-grid" }, field("query", t.search), field("sessionId", t.session), field("tool", t.tool), field("outcome", t.outcome, t.outcomes), field("risk", t.risk, t.risks), field("from", t.from), field("to", t.to)), h("div", { className: "dsh-ui-actions" }, h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		type: "submit",
+		variant: "primary"
+	}, t.apply), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		type: "button",
+		variant: "ghost",
+		onClick: () => {
+			setCursors([void 0]);
+			setIndex(0);
+			load(filter);
+		}
+	}, t.refresh), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		type: "button",
+		variant: "ghost",
+		disabled: busy || exporting !== null || !page?.total,
+		onClick: exportAll
+	}, t.exportAll))), error && h("p", {
+		role: "alert",
+		className: "dsh-ui-error"
+	}, error), exporting !== null && h("div", {
+		className: "dsh-ui-actions",
+		role: "status"
+	}, t.exporting(exporting), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		variant: "ghost",
+		onClick: () => {
+			exportGeneration.current++;
+			setExporting(null);
+		}
+	}, t.cancel)), busy ? h("p", { role: "status" }, t.loading) : page && h(react.default.Fragment, null, h("p", { className: "dsh-ui-meta" }, t.count(page.total)), !page.items.length && h("p", { className: "dsh-ui-empty" }, t.empty), ...page.items.map((row) => h("article", {
+		key: row.id,
+		className: "dsh-ui-card dsh-ui-stack"
+	}, h("div", { className: "dsh-ui-row-wrap" }, h("strong", null, row.tool), h("span", null, t.outcomes[row.reviewOutcome || row.outcome] || row.reviewOutcome || row.outcome), h("span", null, t.risks[row.risk] || row.risk || "")), h("p", { className: "dsh-ui-meta dsh-ui-wrap" }, new Date(row.startedAt).toLocaleString(language), " · ", row.sessionId, " · ", row.reviewer ? `${row.reviewer.provider}/${row.reviewer.model}` : t.unavailable), row.rationale && h("p", { className: "dsh-ui-wrap" }, row.rationale), h("p", { className: "dsh-ui-help" }, t.approval, ": ", !row.approvalState || row.approvalState === "not-observed" ? t.approvalUnknown : row.approvalState === "allowed-once" ? language === "zh" ? "单次放行" : "Allowed once" : t.outcomes[row.approvalState]), h("p", { className: "dsh-ui-help" }, t.execution, ": ", t.states[row.executionState || "not-observed"]), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		variant: "ghost",
+		onClick: () => showDetail(row.id)
+	}, t.detail))), h("div", { className: "dsh-ui-actions" }, h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		variant: "ghost",
+		disabled: index === 0,
+		onClick: () => {
+			const next = index - 1;
+			setIndex(next);
+			load(filter, cursors[next]);
+		}
+	}, t.back), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		variant: "ghost",
+		disabled: !page.nextCursor,
+		onClick: () => {
+			const next = index + 1;
+			setCursors([...cursors.slice(0, next), page.nextCursor]);
+			setIndex(next);
+			load(filter, page.nextCursor);
+		}
+	}, t.next))), detail && h("section", {
+		className: "dsh-ui-stack",
+		"aria-label": t.detail
+	}, h("h3", null, detail.id), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		variant: "ghost",
+		onClick: () => download([detail], `safe-auto-${detail.id}.json`)
+	}, t.exportOne), h("pre", {
+		className: "dsh-ui-wrap",
+		style: {
+			whiteSpace: "pre-wrap",
+			overflowWrap: "anywhere",
+			maxHeight: "60vh",
+			overflow: "auto"
+		}
+	}, JSON.stringify(detail, null, 2))));
+}
 function SettingsPanel({ view, api, locale, initialSettings = null, initialCatalog = null, initialTab = "reviewer" }) {
 	const t = useText(locale);
 	const [settings, setSettings] = (0, react.useState)(initialSettings);
@@ -2171,21 +2563,22 @@ function SettingsPanel({ view, api, locale, initialSettings = null, initialCatal
 		tabIndex: 0,
 		className
 	}, children);
-	if (view === "summary") return h("div", { className: "dsh-safe-auto" }, h(Style), h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("summary")), h(ErrorText, {
+	if (view === "summary") return h("div", { className: "dsh-safe-auto" }, h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("summary")), h(ErrorText, {
 		error,
 		t
 	}));
 	return h("section", {
-		className: "dsh-safe-auto dsh-ui-stack",
+		className: "dsh-safe-auto dsh-ui-page",
 		"aria-label": t("panelLabel"),
 		"aria-busy": busy
-	}, h(Style), h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("intro")), !values && h("p", { className: "dsh-ui-loading" }, t("loading")), values && h(react.default.Fragment, null, h(_deepseek_ai_dsh_client_ui_primitives.SegmentedTabs, {
+	}, h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("intro")), !values && h("p", { className: "dsh-ui-loading" }, t("loading")), values && h(react.default.Fragment, null, h(_deepseek_ai_dsh_client_ui_primitives.SegmentedTabs, {
 		value: activeTab,
 		onChange: setTab,
 		label: t("tabsLabel"),
 		items: [
 			tabItem("reviewer", t("tabReviewer")),
 			tabItem("details", t("details")),
+			tabItem("history", HISTORY_TEXT[localeLanguage(locale)].title),
 			...settings?.policyLimits ? [tabItem("limits", t("tabLimits"))] : []
 		]
 	}), tabPanel("reviewer", "dsh-ui-stack", [
@@ -2217,13 +2610,16 @@ function SettingsPanel({ view, api, locale, initialSettings = null, initialCatal
 			id: "sa-prompt-hint",
 			className: "dsh-ui-help"
 		}, t("promptHint", (values.reviewerPrompt || "").length))
-	]), tabPanel("details", "dsh-ui-stack", h("div", { className: "dsh-ui-help" }, h("p", null, t("safetyDetail")), h("p", null, t("reviewInput")), h("p", null, t("breakerDetail")))), settings?.policyLimits && tabPanel("limits", "dsh-ui-stack", [h("p", {
+	]), tabPanel("details", "dsh-ui-stack", h("div", { className: "dsh-ui-help" }, h("p", null, t("safetyDetail")), h("p", null, t("reviewInput")), h("p", null, t("breakerDetail")))), tabPanel("history", "dsh-ui-stack", activeTab === "history" ? h(HistoryPanel, {
+		api,
+		locale
+	}) : null), settings?.policyLimits && tabPanel("limits", "dsh-ui-stack", [h("p", {
 		key: "line",
 		className: "dsh-ui-meta dsh-ui-wrap"
 	}, t("limitsLine", settings.policyLimits)), h("p", {
 		key: "help",
 		className: "dsh-ui-help"
-	}, t("limitsHelp"))]), h("div", { className: "dsh-ui-actions" }, h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+	}, t("limitsHelp"))]), activeTab === "reviewer" && h("div", { className: "dsh-ui-form-footer" }, h(_deepseek_ai_dsh_client_ui_primitives.Button, {
 		variant: "primary",
 		disabled: busy || externalChange || !dirty.current || (values.reviewerPrompt || "").length > 4096,
 		onClick: save
@@ -2249,6 +2645,15 @@ function SettingsPanel({ view, api, locale, initialSettings = null, initialCatal
 	}, t("saved")));
 }
 function apply(ctx) {
+	ctx.effect(() => {
+		if (typeof document === "undefined") return void 0;
+		const style = document.createElement("style");
+		style.setAttribute("data-plugin", BUNDLE);
+		style.textContent = css;
+		document.head.appendChild(style);
+		return () => style.remove();
+	});
+	mountModelSettingsChanges(ctx, BUNDLE);
 	const settingsSubscriber = createModelSettingsSubscriber(ctx, BUNDLE);
 	const call = (endpoint, payload) => unwrapRpc((...args) => ctx.connection.rpc.call(...args), endpoint, payload);
 	const api = Object.freeze({
@@ -2257,6 +2662,8 @@ function apply(ctx) {
 		getSettings: () => call("settings.get", {}),
 		saveSettings: (payload) => call("settings.save", payload),
 		modelCatalog: () => readModelCatalog(ctx),
+		historyList: (payload) => call("history.list", payload),
+		historyGet: (id) => call("history.get", { id }),
 		getSession: (sessionId) => call("session.get", { sessionId }),
 		selectSession: (payload) => call("session.select", payload)
 	});
@@ -2280,12 +2687,15 @@ function apply(ctx) {
 //#endregion
 exports.BUNDLE = BUNDLE;
 exports.CHANNEL = CHANNEL;
+exports.HistoryPanel = HistoryPanel;
 exports.PermissionMenu = PermissionMenu;
 exports.ReviewerFields = ReviewerFields;
 exports.SettingsPanel = SettingsPanel;
 exports.apply = apply;
 exports.createRequestScope = createRequestScope;
+exports.downloadHistory = downloadHistory;
 exports.errorText = errorText;
+exports.historyFilters = historyFilters;
 exports.inject = inject;
 exports.localeLanguage = localeLanguage;
 exports.name = name;