@michengai/dsh-automation 0.1.11 → 0.1.12

package/docs/00-/344/272/244/346/216/245/345/205/245/345/217/243/01-/351/241/271/347/233/256/346/246/202/350/247/210.md

@@ -13,7 +13,7 @@
 - 每次到期都创建全新 root Agent 和 Session，不继承来源对话。
 - 规则、修订号和运行历史持久化。
 - 同一条规则同时最多一个 active run；超时、重叠和 Host 中断都有明确终态。
-- 默认只读；可显式选择 `workspace-write`。禁止无人值守 `danger-full-access`。
+- 权限预设与 Chat 保持一致，完整使用 Host 提供的列表与默认值；切换到 `danger-full-access` 时显示同款风险确认。
 
 ## 稳定边界
 

package/lib/client.js

@@ -405,6 +405,11 @@ function permissionLabel(option, t) {
   return option.name || option.value;
 }
 
+// src/client/create-modal-logic.ts
+function shouldConfirmFullAccess(current, next) {
+  return current !== next && next === "danger-full-access";
+}
+
 // src/client/menu.tsx
 var import_react = require("react");
 var import_react_dom = require("react-dom");
@@ -635,13 +640,29 @@ function CreateModal({
 }) {
   const [form, setForm] = (0, import_react2.useState)(() => ({ ...defaultFormState(/* @__PURE__ */ new Date(), workspaces, defaultModel, defaultPermission), ...draft }));
   const [validationError, setValidationError] = (0, import_react2.useState)();
+  const [confirmingPermission, setConfirmingPermission] = (0, import_react2.useState)();
+  const [fullAccessAcknowledged, setFullAccessAcknowledged] = (0, import_react2.useState)(false);
   const update = (patch) => {
     setForm((current) => ({ ...current, ...patch }));
     setValidationError(void 0);
   };
   const choosePermission = (permission) => {
+    if (shouldConfirmFullAccess(form.permission, permission)) {
+      setFullAccessAcknowledged(false);
+      setConfirmingPermission(permission);
+      return;
+    }
     update({ permission });
   };
+  const cancelFullAccessConfirmation = () => {
+    setFullAccessAcknowledged(false);
+    setConfirmingPermission(void 0);
+  };
+  const confirmFullAccess = () => {
+    if (!fullAccessAcknowledged || confirmingPermission === void 0) return;
+    update({ permission: confirmingPermission });
+    cancelFullAccessConfirmation();
+  };
   (0, import_react2.useEffect)(() => {
     const onKey = (event) => {
       if (event.key !== "Escape") return;
@@ -837,7 +858,22 @@ function CreateModal({
         /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("button", { type: "submit", className: "dsh-st-btn dsh-st-btn--primary", disabled: busy, children: t("modal.save") })
       ] })
     ] }),
-    /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("div", { className: "dsh-st-flyout-root", ref: setMenuHost })
+    /* @__PURE__ */ (0, import_jsx_runtime3.jsx)("div", { className: "dsh-st-flyout-root", ref: setMenuHost }),
+    /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
+      import_dsh_client_ui_primitives.RiskConfirmation,
+      {
+        open: confirmingPermission !== void 0,
+        title: permissionT("confirm.title"),
+        description: permissionT("confirm.description"),
+        acknowledgeLabel: permissionT("confirm.acknowledge"),
+        cancelLabel: permissionT("confirm.cancel"),
+        confirmLabel: permissionT("confirm.enable"),
+        acknowledged: fullAccessAcknowledged,
+        onAcknowledgedChange: setFullAccessAcknowledged,
+        onCancel: cancelFullAccessConfirmation,
+        onConfirm: confirmFullAccess
+      }
+    )
   ] }) });
 }
 function ModelPicker({