@klarkxy/dsh-safe-auto 0.4.0 → 0.5.1

package/lib/client.js

@@ -294,7 +294,14 @@ function useModelCatalog(load, options = {}) {
 		refresh
 	};
 }
-/** Also accepts a mapped state from a caller that owns broader async orchestration. */
+/**
+* Also accepts a mapped state from a caller that owns broader async orchestration.
+*
+* The dsh-ui-* classes carry the styling and resolve through the consuming
+* plugin's own officialUiCss scope (every consumer mounts its root class, so
+* e.g. `.dsh-model-hub .dsh-ui-loading` paints this); dsh-model-catalog-status
+* stays as a structural hook for tests and layout, never a colour source.
+*/
 function ModelCatalogStatus({ state, locale }) {
 	const zh = locale?.toLowerCase().startsWith("zh") === true;
 	const copy = zh ? {
@@ -310,15 +317,17 @@ function ModelCatalogStatus({ state, locale }) {
 	};
 	if (!state.loading && !state.error && state.failures.length === 0) return null;
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-		className: "dsh-model-catalog-status",
+		className: "dsh-model-catalog-status dsh-ui-stack",
 		lang: zh ? "zh" : "en",
 		children: [
 			state.loading ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 				role: "status",
+				className: "dsh-ui-loading",
 				children: copy.loading
 			}) : null,
 			state.error ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
 				role: "alert",
+				className: "dsh-ui-error dsh-ui-wrap",
 				children: [
 					copy.error,
 					": ",
@@ -327,20 +336,27 @@ function ModelCatalogStatus({ state, locale }) {
 			}) : null,
 			state.failures.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				role: "status",
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: copy.partial }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", { children: state.failures.map((failure, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", { children: [
-					failure.name || failure.id,
-					": ",
-					failure.message
-				] }, `${failure.id}:${index}`)) })]
+				className: "dsh-ui-meta",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: copy.partial }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+					className: "dsh-ui-list",
+					children: state.failures.map((failure, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", { children: [
+						failure.name || failure.id,
+						": ",
+						failure.message
+					] }, `${failure.id}:${index}`))
+				})]
 			}) : null,
-			state.error || state.failures.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
-				type: "button",
-				size: "sm",
-				disabled: state.loading,
-				onClick: () => {
-					state.refresh();
-				},
-				children: copy.retry
+			state.error || state.failures.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: "dsh-ui-actions",
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+					type: "button",
+					size: "sm",
+					disabled: state.loading,
+					onClick: () => {
+						state.refresh();
+					},
+					children: copy.retry
+				})
 			}) : null
 		]
 	});
@@ -358,7 +374,8 @@ function ModelCatalogStatus({ state, locale }) {
 * Sticky group headings, subsequence ranking, highlight walking and focus
 * hand-back all match the host. SYNC POINT: when the host's ModelSelect or
 * ModelSelect.module.css changes, this copy must be re-transcribed; styles
-* below may only reference --dsw-* theme tokens, never literal colors.
+* below may only reference allowlisted theme tokens (the --dsw-* set plus the
+* host's --ds-* motion tokens), never literal colors.
 *
 * It statically imports the primitives, so only browser clients should load
 * this entry; host code and node tests use the core entry (`./index.ts`).
@@ -866,7 +883,8 @@ function ModelMenu(props) {
 * sticky group headings (MenuGroup's own CSS), and the l1-stroke prominent
 * elevation at portal z-index 1100. The trigger mirrors the composer's 28px
 * model pill, chevron rotating open. MenuSurface paints fill and backdrop.
-* Only --dsw-* theme tokens may appear here — a literal color is a bug.
+* Only allowlisted --dsw- and --ds- theme tokens may appear here — a literal
+* color is a bug.
 */
 const modelMenuCss = `
 .dsh-model-menu-root { min-width: 0; position: relative; display: inline-flex; }
@@ -889,12 +907,14 @@ const modelMenuCss = `
   display: flex;
 }
 .dsh-model-menu-trigger:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-hover); }
-.dsh-model-menu-trigger:focus-visible:not([data-selection-focus]) { box-shadow: 0 0 0 2px var(--dsw-focus-ring-color, var(--dsw-alias-state-business-primary)); }
+.dsh-model-menu-trigger:focus-visible:not([data-selection-focus]) { box-shadow: 0 0 0 var(--dsw-focus-ring-width) var(--dsw-focus-ring-color, var(--dsw-alias-state-business-primary)); }
 .dsh-model-menu-trigger:disabled { color: var(--dsw-alias-label-dimmed); cursor: default; }
 .dsh-model-menu-triggerLabel { text-overflow: ellipsis; white-space: nowrap; min-width: 0; overflow: hidden; }
 .dsh-model-menu-triggerEffort { text-overflow: ellipsis; white-space: nowrap; min-width: 0; color: var(--dsw-alias-label-caption); flex-shrink: 1000; overflow: hidden; }
-.dsh-model-menu-chevron { color: var(--dsw-alias-label-caption); flex: none; transition: transform 0.12s; }
+.dsh-model-menu-chevron { color: var(--dsw-alias-label-caption); flex: none; transition: transform var(--ds-transition-duration) var(--ds-ease-in-out); }
 .dsh-model-menu-chevronOpen { transform: rotate(180deg); }
+/* Portal overlay: the host publishes no z-index token, so the card keeps the
+ * native menu layer's 1100 verbatim. */
 .dsh-model-menu-menu {
   z-index: 1100;
   --dsw-elevation-stroke-color: var(--dsw-alias-border-l1);
@@ -920,6 +940,8 @@ const modelMenuCss = `
 .dsh-model-menu-searchWithQuery { padding-right: 34px; }
 .dsh-model-menu-searchRow .dsh-model-menu-search input { padding: 0; font-size: 12px; line-height: normal; }
 .dsh-model-menu-searchRow .dsh-model-menu-search input::placeholder { color: var(--dsw-alias-label-caption); }
+/* The clear button is a circle by geometry (border-radius: 50%), a shape the
+ * radius token scale does not describe. */
 .dsh-model-menu-searchClear {
   width: 24px;
   height: 24px;
@@ -1167,6 +1189,17 @@ ${scope} {
 /* --- Layout scaffolding. --- */
 & .dsh-ui-stack { display: flex; flex-direction: column; gap: 12px; }
 & .dsh-ui-stack-lg { display: flex; flex-direction: column; gap: 20px; }
+/* Plugin detail pages share one reading column. These are layout recipes;
+ * controls keep their own primitive styles. Form spacing follows the host's
+ * settings-form/fields.module.css and SettingsForm.module.css. */
+& .dsh-ui-page { display: flex; flex-direction: column; gap: 16px; width: 100%; max-width: 760px; min-width: 0; }
+& .dsh-ui-form { display: flex; flex-direction: column; gap: 0; min-width: 0; }
+&.dsh-ui-form > .dsh-ui-field, & .dsh-ui-form > .dsh-ui-field { padding: 12px 0; }
+& .dsh-ui-form-footer { display: flex; align-items: center; flex-wrap: wrap; gap: 8px; padding-top: 16px; min-width: 0; }
+& .dsh-ui-fields-grid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 12px 20px; min-width: 0; margin: 0; padding: 0; border: 0; }
+@media (max-width: 560px) {
+  & .dsh-ui-fields-grid { grid-template-columns: minmax(0, 1fr); }
+}
 & .dsh-ui-row { display: flex; align-items: center; gap: 8px; min-width: 0; }
 & .dsh-ui-row-wrap { display: flex; align-items: center; flex-wrap: wrap; gap: 8px; }
 & .dsh-ui-spacer { flex: 1; min-width: 0; }
@@ -1194,6 +1227,9 @@ ${scope} {
  * official primitive, so this only owns the vertical rhythm. --- */
 & .dsh-ui-field { display: flex; flex-direction: column; gap: 6px; min-width: 0; }
 & .dsh-ui-field + .dsh-ui-field { border-top: 0.5px solid var(--dsw-alias-border-l2); padding-top: 12px; }
+/* Grid fields share a row, so the stacked-field divider must not win later in
+ * the cascade. Reset it here, after the field recipe. */
+& .dsh-ui-fields-grid > .dsh-ui-field { padding: 0; border: 0; }
 & .dsh-ui-label { display: flex; align-items: center; gap: 6px; font-size: 13px; line-height: 20px; font-weight: 500; color: var(--dsw-alias-label-primary); }
 & .dsh-ui-label-row { display: flex; align-items: baseline; justify-content: space-between; gap: 8px; }
 & .dsh-ui-help { font-size: 12px; line-height: 1.6; color: var(--dsw-alias-label-secondary); }
@@ -1384,7 +1420,7 @@ ${scope} {
   & *, & *::before, & *::after { transition-duration: 0.01ms !important; animation-duration: 0.01ms !important; }
 }
 }
-`.replace(/^& (\.dsh-ui-[a-z0-9-]+)(?![+>~])/gm, (_match, className) => `&${className}, & ${className}`);
+`.replace(/^& (\.dsh-ui-[a-z0-9-]+)(?=\s*\{)/gm, (_match, className) => `&${className}, & ${className}`);
 }
 //#endregion
 //#region ../dsh-plugin-kit/lib/client-utils.js
@@ -1870,9 +1906,6 @@ const css = `${officialUiCss("dsh-safe-auto")}${modelMenuCss}
  * legend keeps the UA inline padding from indenting the group title. */
 .dsh-safe-auto legend { padding: 0; }
 `;
-function Style() {
-	return h("style", null, css);
-}
 function ErrorText({ error, t }) {
 	return error ? h("p", {
 		role: "alert",
@@ -1965,7 +1998,7 @@ function PermissionMenu({ sessionId, locked, api, locale, initialSnapshot = null
 	return h("span", {
 		className: "dsh-safe-auto dsh-safe-auto-permission",
 		"aria-busy": busy
-	}, h(Style), h(_deepseek_ai_dsh_client_ui_primitives.Menu, {
+	}, h(_deepseek_ai_dsh_client_ui_primitives.Menu, {
 		open,
 		side: "top",
 		align: "start",
@@ -2004,7 +2037,7 @@ function ReviewerFields({ values, catalog, disabled, onChange, locale }) {
 	const retained = effort && h("span", null, " ", t("savedEffortRetained", effort));
 	return h("fieldset", {
 		disabled,
-		className: "dsh-ui-card"
+		className: "dsh-safe-auto dsh-ui-card"
 	}, h("legend", { className: "dsh-ui-heading" }, t("reviewer")), h("div", { className: "dsh-ui-field" }, h("span", { className: "dsh-ui-label" }, t("model")), h(ModelMenu, {
 		open,
 		onOpenChange: setOpen,
@@ -2047,6 +2080,339 @@ function ReviewerFields({ values, catalog, disabled, onChange, locale }) {
 		clearSearchLabel: t("clearSearch")
 	})), state.follow && h("p", { className: "dsh-ui-help" }, t("followHelp"), retained), !state.follow && !state.known && h("p", { className: "dsh-ui-help" }, t("modelAbsent")), !state.follow && unknownEffort && h("p", { className: "dsh-ui-help" }, t("effortAbsent")), !state.follow && h("p", { className: "dsh-ui-help" }, t("effortClears")));
 }
+const HISTORY_TEXT = {
+	zh: {
+		title: "审核历史",
+		help: "保存启用此功能后的审核。内容已尽力脱敏；记录持续保留，可导出供审计。",
+		search: "搜索内容",
+		session: "会话 ID",
+		tool: "工具",
+		outcome: "审核结果",
+		risk: "风险",
+		from: "开始时间",
+		to: "结束时间",
+		all: "全部",
+		apply: "查询",
+		refresh: "刷新",
+		next: "下一页",
+		back: "上一页",
+		detail: "查看详情",
+		empty: "没有匹配的审核记录",
+		loading: "正在查询…",
+		exportOne: "导出此记录",
+		exportAll: "导出筛选结果",
+		cancel: "取消导出",
+		exporting: (count) => `正在导出 ${count} 条…`,
+		count: (count) => `共 ${count} 条`,
+		missing: "审核记录不存在",
+		execution: "工具结果",
+		approval: "实际审批",
+		approvalUnknown: "未观察到审批结果",
+		unavailable: "未记录",
+		outcomes: {
+			pending: "审核中",
+			interrupted: "审核中断",
+			"allowed-once": "审核通过",
+			rejected: "拒绝",
+			cancelled: "取消",
+			unavailable: "审批不可用"
+		},
+		risks: {
+			low: "低",
+			medium: "中",
+			high: "高",
+			critical: "严重"
+		},
+		states: {
+			"not-observed": "未观察到执行结果",
+			succeeded: "工具返回成功",
+			failed: "工具返回错误"
+		}
+	},
+	en: {
+		title: "Review history",
+		help: "Reviews are retained from the time this feature is enabled. Content is redacted on a best-effort basis and can be exported for audit.",
+		search: "Search contents",
+		session: "Session ID",
+		tool: "Tool",
+		outcome: "Outcome",
+		risk: "Risk",
+		from: "From",
+		to: "To",
+		all: "All",
+		apply: "Search",
+		refresh: "Refresh",
+		next: "Next",
+		back: "Previous",
+		detail: "View details",
+		empty: "No matching reviews",
+		loading: "Loading reviews…",
+		exportOne: "Export this record",
+		exportAll: "Export filtered results",
+		cancel: "Cancel export",
+		exporting: (count) => `Exporting ${count} records…`,
+		count: (count) => `${count} records`,
+		missing: "Review record not found",
+		execution: "Tool result",
+		approval: "Actual approval",
+		approvalUnknown: "No approval result observed",
+		unavailable: "Not recorded",
+		outcomes: {
+			pending: "Pending",
+			interrupted: "Interrupted",
+			"allowed-once": "Review passed",
+			rejected: "Rejected",
+			cancelled: "Cancelled",
+			unavailable: "Approval unavailable"
+		},
+		risks: {
+			low: "Low",
+			medium: "Medium",
+			high: "High",
+			critical: "Critical"
+		},
+		states: {
+			"not-observed": "No execution result observed",
+			succeeded: "Tool returned success",
+			failed: "Tool returned an error"
+		}
+	}
+};
+function historyFilters(values) {
+	return Object.fromEntries(Object.entries(values).filter(([, value]) => value !== "").map(([key, value]) => [key, key === "from" || key === "to" ? new Date(value).toISOString() : value]));
+}
+function downloadHistory(records, filename = "safe-auto-history.json") {
+	const url = URL.createObjectURL(new Blob([JSON.stringify({
+		format: "safe-auto-audit-v1",
+		exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		count: records.length,
+		records
+	}, null, 2)], { type: "application/json" }));
+	const link = document.createElement("a");
+	link.href = url;
+	link.download = filename;
+	link.click();
+	setTimeout(() => URL.revokeObjectURL(url), 6e4);
+}
+function HistoryPanel({ api, locale, initialPage = null, download = downloadHistory }) {
+	const language = (0, react.useSyncExternalStore)((listener) => locale?.subscribe?.(listener) ?? (() => {}), () => localeLanguage(locale), () => localeLanguage(locale));
+	const t = HISTORY_TEXT[language];
+	const [draft, setDraft] = (0, react.useState)({
+		query: "",
+		sessionId: "",
+		tool: "",
+		outcome: "",
+		risk: "",
+		from: "",
+		to: ""
+	});
+	const [filter, setFilter] = (0, react.useState)({});
+	const [page, setPage] = (0, react.useState)(initialPage);
+	const [cursors, setCursors] = (0, react.useState)([void 0]);
+	const [index, setIndex] = (0, react.useState)(0);
+	const [error, setError] = (0, react.useState)("");
+	const [busy, setBusy] = (0, react.useState)(false);
+	const [detail, setDetail] = (0, react.useState)(null);
+	const [exporting, setExporting] = (0, react.useState)(null);
+	const generation = (0, react.useRef)(0), detailsGeneration = (0, react.useRef)(0), exportGeneration = (0, react.useRef)(0);
+	const alive = (0, react.useRef)(true), filterRef = (0, react.useRef)(filter);
+	filterRef.current = filter;
+	const load = (0, react.useCallback)(async (filters, cursor) => {
+		const ticket = ++generation.current;
+		++detailsGeneration.current;
+		++exportGeneration.current;
+		setBusy(true);
+		setError("");
+		setDetail(null);
+		setExporting(null);
+		try {
+			const result = await api.historyList({
+				...filters,
+				limit: 25,
+				...cursor ? { cursor } : {}
+			});
+			if (alive.current && ticket === generation.current) setPage(result);
+		} catch (e) {
+			if (alive.current && ticket === generation.current) {
+				setError(errorMessage(e));
+				setPage(null);
+			}
+		} finally {
+			if (alive.current && ticket === generation.current) setBusy(false);
+		}
+	}, [api]);
+	(0, react.useEffect)(() => {
+		alive.current = true;
+		load({}, void 0);
+		const stop = api.subscribeGeneration?.(() => {
+			setCursors([void 0]);
+			setIndex(0);
+			load(filterRef.current, void 0);
+		});
+		return () => {
+			alive.current = false;
+			generation.current++;
+			detailsGeneration.current++;
+			exportGeneration.current++;
+			stop?.();
+		};
+	}, [load, api]);
+	const search = (e) => {
+		e?.preventDefault();
+		try {
+			const next = historyFilters(draft);
+			setFilter(next);
+			setCursors([void 0]);
+			setIndex(0);
+			load(next);
+		} catch (e) {
+			setError(errorMessage(e));
+		}
+	};
+	const showDetail = async (id) => {
+		const ticket = ++detailsGeneration.current;
+		setError("");
+		setDetail(null);
+		try {
+			const row = await api.historyGet(id);
+			if (!row) throw new Error(t.missing);
+			if (alive.current && ticket === detailsGeneration.current) setDetail(row);
+		} catch (e) {
+			if (alive.current && ticket === detailsGeneration.current) setError(errorMessage(e));
+		}
+	};
+	const exportAll = async () => {
+		const ticket = ++exportGeneration.current;
+		const records = [];
+		let cursor;
+		setExporting(0);
+		setError("");
+		try {
+			const now = (/* @__PURE__ */ new Date()).toISOString();
+			const filters = {
+				...filter,
+				to: filter.to && Date.parse(filter.to) < Date.parse(now) ? filter.to : now
+			};
+			do {
+				const batch = await api.historyList({
+					...filters,
+					limit: 100,
+					...cursor ? { cursor } : {}
+				});
+				if (!alive.current || ticket !== exportGeneration.current) return;
+				for (const item of batch.items) {
+					const row = await api.historyGet(item.id);
+					if (!alive.current || ticket !== exportGeneration.current) return;
+					if (!row) throw new Error(t.missing);
+					records.push(row);
+					setExporting(records.length);
+				}
+				if (batch.nextCursor && batch.nextCursor === cursor) throw new Error("Invalid history cursor");
+				cursor = batch.nextCursor;
+			} while (cursor);
+			download(records);
+		} catch (e) {
+			if (alive.current && ticket === exportGeneration.current) setError(errorMessage(e));
+		} finally {
+			if (alive.current && ticket === exportGeneration.current) setExporting(null);
+		}
+	};
+	const field = (key, label, options) => h("label", {
+		key,
+		className: "dsh-ui-field"
+	}, h("span", { className: "dsh-ui-label" }, label), options ? h("select", {
+		className: "dsh-ui-select",
+		value: draft[key],
+		onChange: (e) => setDraft({
+			...draft,
+			[key]: e.target.value
+		})
+	}, h("option", { value: "" }, t.all), ...Object.entries(options).map(([value, label]) => h("option", {
+		key: value,
+		value
+	}, label))) : h(_deepseek_ai_dsh_client_ui_primitives.Input, {
+		type: key === "from" || key === "to" ? "datetime-local" : "text",
+		maxLength: 256,
+		value: draft[key],
+		onChange: (e) => setDraft({
+			...draft,
+			[key]: e.target.value
+		})
+	}));
+	return h("section", {
+		className: "dsh-ui-stack",
+		"aria-label": t.title,
+		"aria-busy": busy
+	}, h("p", { className: "dsh-ui-help" }, t.help), h("form", {
+		className: "dsh-ui-stack",
+		onSubmit: search
+	}, h("div", { className: "dsh-ui-fields-grid" }, field("query", t.search), field("sessionId", t.session), field("tool", t.tool), field("outcome", t.outcome, t.outcomes), field("risk", t.risk, t.risks), field("from", t.from), field("to", t.to)), h("div", { className: "dsh-ui-actions" }, h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		type: "submit",
+		variant: "primary"
+	}, t.apply), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		type: "button",
+		variant: "ghost",
+		onClick: () => {
+			setCursors([void 0]);
+			setIndex(0);
+			load(filter);
+		}
+	}, t.refresh), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		type: "button",
+		variant: "ghost",
+		disabled: busy || exporting !== null || !page?.total,
+		onClick: exportAll
+	}, t.exportAll))), error && h("p", {
+		role: "alert",
+		className: "dsh-ui-error"
+	}, error), exporting !== null && h("div", {
+		className: "dsh-ui-actions",
+		role: "status"
+	}, t.exporting(exporting), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		variant: "ghost",
+		onClick: () => {
+			exportGeneration.current++;
+			setExporting(null);
+		}
+	}, t.cancel)), busy ? h("p", { role: "status" }, t.loading) : page && h(react.default.Fragment, null, h("p", { className: "dsh-ui-meta" }, t.count(page.total)), !page.items.length && h("p", { className: "dsh-ui-empty" }, t.empty), ...page.items.map((row) => h("article", {
+		key: row.id,
+		className: "dsh-ui-card dsh-ui-stack"
+	}, h("div", { className: "dsh-ui-row-wrap" }, h("strong", null, row.tool), h("span", null, t.outcomes[row.reviewOutcome || row.outcome] || row.reviewOutcome || row.outcome), h("span", null, t.risks[row.risk] || row.risk || "")), h("p", { className: "dsh-ui-meta dsh-ui-wrap" }, new Date(row.startedAt).toLocaleString(language), " · ", row.sessionId, " · ", row.reviewer ? `${row.reviewer.provider}/${row.reviewer.model}` : t.unavailable), row.rationale && h("p", { className: "dsh-ui-wrap" }, row.rationale), h("p", { className: "dsh-ui-help" }, t.approval, ": ", !row.approvalState || row.approvalState === "not-observed" ? t.approvalUnknown : row.approvalState === "allowed-once" ? language === "zh" ? "单次放行" : "Allowed once" : t.outcomes[row.approvalState]), h("p", { className: "dsh-ui-help" }, t.execution, ": ", t.states[row.executionState || "not-observed"]), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		variant: "ghost",
+		onClick: () => showDetail(row.id)
+	}, t.detail))), h("div", { className: "dsh-ui-actions" }, h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		variant: "ghost",
+		disabled: index === 0,
+		onClick: () => {
+			const next = index - 1;
+			setIndex(next);
+			load(filter, cursors[next]);
+		}
+	}, t.back), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		variant: "ghost",
+		disabled: !page.nextCursor,
+		onClick: () => {
+			const next = index + 1;
+			setCursors([...cursors.slice(0, next), page.nextCursor]);
+			setIndex(next);
+			load(filter, page.nextCursor);
+		}
+	}, t.next))), detail && h("section", {
+		className: "dsh-ui-stack",
+		"aria-label": t.detail
+	}, h("h3", null, detail.id), h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		variant: "ghost",
+		onClick: () => download([detail], `safe-auto-${detail.id}.json`)
+	}, t.exportOne), h("pre", {
+		className: "dsh-ui-wrap",
+		style: {
+			whiteSpace: "pre-wrap",
+			overflowWrap: "anywhere",
+			maxHeight: "60vh",
+			overflow: "auto"
+		}
+	}, JSON.stringify(detail, null, 2))));
+}
 function SettingsPanel({ view, api, locale, initialSettings = null, initialCatalog = null, initialTab = "reviewer" }) {
 	const t = useText(locale);
 	const [settings, setSettings] = (0, react.useState)(initialSettings);
@@ -2197,21 +2563,22 @@ function SettingsPanel({ view, api, locale, initialSettings = null, initialCatal
 		tabIndex: 0,
 		className
 	}, children);
-	if (view === "summary") return h("div", { className: "dsh-safe-auto" }, h(Style), h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("summary")), h(ErrorText, {
+	if (view === "summary") return h("div", { className: "dsh-safe-auto" }, h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("summary")), h(ErrorText, {
 		error,
 		t
 	}));
 	return h("section", {
-		className: "dsh-safe-auto dsh-ui-stack",
+		className: "dsh-safe-auto dsh-ui-page",
 		"aria-label": t("panelLabel"),
 		"aria-busy": busy
-	}, h(Style), h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("intro")), !values && h("p", { className: "dsh-ui-loading" }, t("loading")), values && h(react.default.Fragment, null, h(_deepseek_ai_dsh_client_ui_primitives.SegmentedTabs, {
+	}, h("p", { className: "dsh-ui-compact dsh-ui-wrap" }, t("intro")), !values && h("p", { className: "dsh-ui-loading" }, t("loading")), values && h(react.default.Fragment, null, h(_deepseek_ai_dsh_client_ui_primitives.SegmentedTabs, {
 		value: activeTab,
 		onChange: setTab,
 		label: t("tabsLabel"),
 		items: [
 			tabItem("reviewer", t("tabReviewer")),
 			tabItem("details", t("details")),
+			tabItem("history", HISTORY_TEXT[localeLanguage(locale)].title),
 			...settings?.policyLimits ? [tabItem("limits", t("tabLimits"))] : []
 		]
 	}), tabPanel("reviewer", "dsh-ui-stack", [
@@ -2243,13 +2610,16 @@ function SettingsPanel({ view, api, locale, initialSettings = null, initialCatal
 			id: "sa-prompt-hint",
 			className: "dsh-ui-help"
 		}, t("promptHint", (values.reviewerPrompt || "").length))
-	]), tabPanel("details", "dsh-ui-stack", h("div", { className: "dsh-ui-help" }, h("p", null, t("safetyDetail")), h("p", null, t("reviewInput")), h("p", null, t("breakerDetail")))), settings?.policyLimits && tabPanel("limits", "dsh-ui-stack", [h("p", {
+	]), tabPanel("details", "dsh-ui-stack", h("div", { className: "dsh-ui-help" }, h("p", null, t("safetyDetail")), h("p", null, t("reviewInput")), h("p", null, t("breakerDetail")))), tabPanel("history", "dsh-ui-stack", activeTab === "history" ? h(HistoryPanel, {
+		api,
+		locale
+	}) : null), settings?.policyLimits && tabPanel("limits", "dsh-ui-stack", [h("p", {
 		key: "line",
 		className: "dsh-ui-meta dsh-ui-wrap"
 	}, t("limitsLine", settings.policyLimits)), h("p", {
 		key: "help",
 		className: "dsh-ui-help"
-	}, t("limitsHelp"))]), h("div", { className: "dsh-ui-actions" }, h(_deepseek_ai_dsh_client_ui_primitives.Button, {
+	}, t("limitsHelp"))]), activeTab === "reviewer" && h("div", { className: "dsh-ui-form-footer" }, h(_deepseek_ai_dsh_client_ui_primitives.Button, {
 		variant: "primary",
 		disabled: busy || externalChange || !dirty.current || (values.reviewerPrompt || "").length > 4096,
 		onClick: save
@@ -2275,6 +2645,14 @@ function SettingsPanel({ view, api, locale, initialSettings = null, initialCatal
 	}, t("saved")));
 }
 function apply(ctx) {
+	ctx.effect(() => {
+		if (typeof document === "undefined") return void 0;
+		const style = document.createElement("style");
+		style.setAttribute("data-plugin", BUNDLE);
+		style.textContent = css;
+		document.head.appendChild(style);
+		return () => style.remove();
+	});
 	mountModelSettingsChanges(ctx, BUNDLE);
 	const settingsSubscriber = createModelSettingsSubscriber(ctx, BUNDLE);
 	const call = (endpoint, payload) => unwrapRpc((...args) => ctx.connection.rpc.call(...args), endpoint, payload);
@@ -2284,6 +2662,8 @@ function apply(ctx) {
 		getSettings: () => call("settings.get", {}),
 		saveSettings: (payload) => call("settings.save", payload),
 		modelCatalog: () => readModelCatalog(ctx),
+		historyList: (payload) => call("history.list", payload),
+		historyGet: (id) => call("history.get", { id }),
 		getSession: (sessionId) => call("session.get", { sessionId }),
 		selectSession: (payload) => call("session.select", payload)
 	});
@@ -2307,12 +2687,15 @@ function apply(ctx) {
 //#endregion
 exports.BUNDLE = BUNDLE;
 exports.CHANNEL = CHANNEL;
+exports.HistoryPanel = HistoryPanel;
 exports.PermissionMenu = PermissionMenu;
 exports.ReviewerFields = ReviewerFields;
 exports.SettingsPanel = SettingsPanel;
 exports.apply = apply;
 exports.createRequestScope = createRequestScope;
+exports.downloadHistory = downloadHistory;
 exports.errorText = errorText;
+exports.historyFilters = historyFilters;
 exports.inject = inject;
 exports.localeLanguage = localeLanguage;
 exports.name = name;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@klarkxy/dsh-safe-auto",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "description": "Safe Auto: a reviewer model answers native approval requests, Codex auto-review style; only a pass approves that one call.",
   "icon": "./icon.svg",
   "type": "module",
@@ -23,7 +23,7 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "node --check src/config.js && node --check src/dangerous.js && node --check src/transcript.js && node --check src/model-route.js && node --check src/reviewer.js && node --check src/index.js && node --check src/control.js && node --check src/ui-host.js && tsdown && node ../../scripts/editor-plugins/wrap-client.mjs @klarkxy/dsh-safe-auto",
+    "build": "node --check src/config.js && node --check src/dangerous.js && node --check src/transcript.js && node --check src/model-route.js && node --check src/reviewer.js && node --check src/audit.js && node --check src/index.js && node --check src/control.js && node --check src/ui-host.js && tsdown && node ../../scripts/editor-plugins/wrap-client.mjs @klarkxy/dsh-safe-auto",
     "test": "node --test test/*.test.js"
   },
   "engines": {
@@ -58,7 +58,7 @@
     }
   },
   "dependencies": {
-    "@klarkxy/dsh-plugin-kit": "0.4.0",
+    "@klarkxy/dsh-plugin-kit": "0.5.0",
     "zod": "^4.1.5"
   },
   "peerDependencies": {
@@ -81,7 +81,7 @@
     "@deepseek-ai/cordis": "4.0.5",
     "@deepseek-ai/dsh-client-ui-primitives": "0.2.1-rc.1",
     "@deepseek-ai/dsh-storage-domain": "0.2.1-rc.1",
-    "@klarkxy/dsh-model-route": "0.2.5",
+    "@klarkxy/dsh-model-route": "0.2.6",
     "jsdom": "29.1.1",
     "@deepseek-ai/dsh-working-directory": "0.2.1-rc.1"
   },
@@ -90,6 +90,6 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dshRelease": {
-    "contentHash": "fbbaa607cab540cfc58b7d99946f5a0954f3b4c51b9ceb90e452fb3fd0522bed"
+    "contentHash": "f1c3c6a5282fcee7e6ae41538bd2c87f4eaa362ec2165412a4b5292d46f430ff"
   }
 }