@norman-else/dsh-claude 0.1.53 → 0.1.54

package/lib/client.js

@@ -4,7 +4,7 @@ window.__ModuleLoader__.load({
 		var module = { exports: {} };
 		module.exports;
 		var { Fragment, useCallback, useEffect, useId, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } = require("react");
-		var { Button, DiffBlock, DisclosureRow, HoverCard, IconAgentPresetOutline16, IconApiOutline14, IconBranchOutline16, IconCheckOutline14, IconCheckOutline16, IconChevronDownOutline14, IconChevronRightOutline14, IconChevronUpOutline14, IconCloseOutline16, IconEditOutline16, IconListPenOutline16, IconLoadingOutline16, IconQueueOutline14, IconRefreshOutline14, IconRefreshOutline16, IconRightUpOutline14, IconSearchOutline16, IconSendOutline14, IconSparkle16, IconThinkOutline14, IconTrashOutline16, MarkdownText, Menu, Modal, StateDot, Toast, Tooltip, useDismissOnOutsidePointer } = require("@deepseek-ai/dsh-client-ui-primitives");
+		var { Button, DiffBlock, DisclosureRow, HoverCard, IconAgentPresetOutline16, IconApiOutline14, IconBranchOutline16, IconCheckOutline14, IconCheckOutline16, IconChevronDownOutline14, IconChevronRightOutline14, IconChevronUpOutline14, IconCloseOutline16, IconEditOutline16, IconListPenOutline16, IconLoadingOutline16, IconQueueOutline14, IconRefreshOutline14, IconRefreshOutline16, IconRightUpOutline14, IconSearchOutline16, IconSendOutline14, IconSparkle16, IconThinkOutline14, IconTrashOutline16, MarkdownText, Menu, Modal, RiskConfirmation, StateDot, Toast, Tooltip, useDismissOnOutsidePointer } = require("@deepseek-ai/dsh-client-ui-primitives");
 		var { Fragment: Fragment$1, jsx, jsxs } = require("react/jsx-runtime");
 		var { createPortal } = require("react-dom");
 		/** Claude's subagent dispatch tools; rendered as plugin-owned group cards
@@ -26,6 +26,7 @@ window.__ModuleLoader__.load({
 		const CLAUDE_JIRA_PATH = "/plugins/dsh-claude/jira";
 		const CLAUDE_ASK_PATH = "/plugins/dsh-claude/ask";
 		const CLAUDE_REWIND_PATH = "/plugins/dsh-claude/rewind";
+		const CLAUDE_PERMISSION_MODE_PATH = "/plugins/dsh-claude/permission-mode";
 		const CLAUDE_PLAN_FEEDBACK_PATH = "/plugins/dsh-claude/plan/feedback";
 		const CLAUDE_PROMPTS_PATH = "/plugins/dsh-claude/prompts";
 		const CLAUDE_PROMPT_NAME_PATH = "/plugins/dsh-claude/prompts/name";
@@ -3888,6 +3889,53 @@ window.__ModuleLoader__.load({
 			fontSize: 13,
 			lineHeight: "20px"
 		};
+		const permissionSelectClass = "dshClaudePermissionSelect";
+		const permissionSelectTriggerClass = "dshClaudePermissionSelectTrigger";
+		const permissionSelectIconClass = "dshClaudePermissionSelectIcon";
+		const permissionSelectLabelClass = "dshClaudePermissionSelectLabel";
+		const permissionSelectChevronClass = "dshClaudePermissionSelectChevron";
+		/** The Host's PermissionSelect trigger (PermissionSelect.module.css
+		*  `.trigger`): a 28px capsule of 13px/500 secondary text with a 4px gap,
+		*  hover fill, no border. Matched here so the plugin's selector sits where the
+		*  Host's did without the row noticing the swap. */
+		const permissionSelectCss = `
+		.${permissionSelectClass} { display: inline-flex; align-items: center; min-width: 0; }
+		.${permissionSelectTriggerClass} {
+		  min-width: 0;
+		  max-width: 220px;
+		  height: 28px;
+		  display: inline-flex;
+		  align-items: center;
+		  gap: 4px;
+		  padding: 0 4px 0 8px;
+		  border: none;
+		  border-radius: 24px;
+		  background: transparent;
+		  color: var(--dsw-alias-label-secondary);
+		  font-size: 13px;
+		  font-weight: 500;
+		  line-height: 20px;
+		  cursor: pointer;
+		  outline: none;
+		}
+		.${permissionSelectTriggerClass}:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-hover); }
+		.${permissionSelectTriggerClass}:disabled { cursor: default; opacity: 0.5; }
+		.${permissionSelectTriggerClass}:focus-visible { outline: none; }
+		.${permissionSelectIconClass} { display: inline-flex; flex: none; }
+		.${permissionSelectLabelClass} { white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+		.${permissionSelectChevronClass} { flex: none; transition: transform 120ms ease; }
+		.${permissionSelectChevronClass}[data-open] { transform: rotate(180deg); }
+		`;
+		const permissionSelectRowClass = "dshClaudePermissionSelectRow";
+		const permissionSelectRowNameClass = "dshClaudePermissionSelectRowName";
+		const permissionSelectRowHintClass = "dshClaudePermissionSelectRowHint";
+		/** A mode row: its name, and under it the one line that says what the mode
+		*  does. In the row rather than a native title, which the Host never draws. */
+		const permissionSelectRowCss = `
+		.${permissionSelectRowClass} { display: flex; flex-direction: column; gap: 1px; min-width: 0; }
+		.${permissionSelectRowNameClass} { white-space: nowrap; }
+		.${permissionSelectRowHintClass} { font-size: 12px; line-height: 16px; font-weight: 400; color: var(--dsw-alias-label-tertiary); white-space: normal; max-width: 260px; }
+		`;
 		//#endregion
 		//#region src/client/markdown-theme.ts
 		/** Claude Code's code presentation over the Host's Markdown renderer.
@@ -4239,6 +4287,26 @@ window.__ModuleLoader__.load({
 			return ranges.some((range) => seq >= range.start && seq <= range.end);
 		}
 		//#endregion
+		//#region src/permission-mode.ts
+		/** Every mode the selector offers, in the order it lists them: tightest
+		*  first. `auto` hands each ask to Claude Code's own classifier and is a
+		*  per-model capability, so the selector greys it out where the catalog says
+		*  the session's model lacks it. */
+		const CLAUDE_PERMISSION_MODES = [
+			"plan",
+			"default",
+			"acceptEdits",
+			"dontAsk",
+			"auto",
+			"bypassPermissions"
+		];
+		function isClaudePermissionMode(value) {
+			return typeof value === "string" && CLAUDE_PERMISSION_MODES.includes(value);
+		}
+		function isClaudePermissionSelector(value) {
+			return value === "plugin" || value === "native";
+		}
+		//#endregion
 		//#region src/client/plugin-transport.ts
 		/**
 		* The plugin's only door to the network.
@@ -4547,7 +4615,7 @@ window.__ModuleLoader__.load({
 		const MAX_REPOSITORIES = 8;
 		const MAX_REVIEW_COMMENT_CHARS = 2e3;
 		const MAX_TRANSCRIPT_CHARS = 64e3;
-		function record$7(value) {
+		function record$8(value) {
 			return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 		}
 		function nonNegativeInteger(value) {
@@ -4557,7 +4625,7 @@ window.__ModuleLoader__.load({
 			return value === void 0 || typeof value === "string" && value.length <= MAX_REPOSITORY_TEXT_CHARS;
 		}
 		function validateRepository(value) {
-			const repository = record$7(value);
+			const repository = record$8(value);
 			if (repository === void 0 || ![
 				"ready",
 				"not-repository",
@@ -4569,11 +4637,11 @@ window.__ModuleLoader__.load({
 				"revert"
 			].includes(String(repository.operation)) || repository.pullRequestOnly !== void 0 && typeof repository.pullRequestOnly !== "boolean" || repository.conflicts !== void 0 && (!Array.isArray(repository.conflicts) || repository.conflicts.length > MAX_CONFLICT_PATHS || repository.conflicts.some((path) => typeof path !== "string" || path.length > MAX_REPOSITORY_TEXT_CHARS))) return false;
 			if (repository.diff !== void 0) {
-				const diff = record$7(repository.diff);
+				const diff = record$8(repository.diff);
 				if (diff === void 0 || !nonNegativeInteger(diff.additions) || !nonNegativeInteger(diff.deletions) || !nonNegativeInteger(diff.files) || typeof diff.truncated !== "boolean" || diff.elided !== void 0 && !(Array.isArray(diff.elided) && diff.elided.length <= 1e3 && diff.elided.every((item) => typeof item === "string")) || diff.patch !== void 0 && (typeof diff.patch !== "string" || diff.patch.length > MAX_DIFF_CHARS)) return false;
 			}
 			if (repository.pullRequest === void 0) return true;
-			const pullRequest = record$7(repository.pullRequest);
+			const pullRequest = record$8(repository.pullRequest);
 			if (pullRequest === void 0 || !Number.isSafeInteger(pullRequest.number) || Number(pullRequest.number) <= 0 || typeof pullRequest.title !== "string" || pullRequest.title.length > MAX_REPOSITORY_TEXT_CHARS || typeof pullRequest.url !== "string" || pullRequest.url.length > MAX_REPOSITORY_TEXT_CHARS || ![
 				"open",
 				"closed",
@@ -4598,33 +4666,38 @@ window.__ModuleLoader__.load({
 		}
 		/** Validate the public route envelope before publishing it to UI components. */
 		function parseClaudeClientProjection(value) {
-			const input = record$7(value);
+			const input = record$8(value);
 			if (input === void 0 || input.schemaVersion !== 1 || !nonNegativeInteger(input.revision) || typeof input.owned !== "boolean" || !Array.isArray(input.commands) || input.commands.length > MAX_COMMANDS || !Array.isArray(input.activities) || input.activities.length > MAX_ACTIVITIES) throw new Error("invalid Claude sidecar projection");
 			for (const item of input.commands) {
-				const command = record$7(item);
+				const command = record$8(item);
 				if (command === void 0 || typeof command.publicName !== "string" || typeof command.claudeName !== "string" || typeof command.description !== "string" || command.hint !== void 0 && typeof command.hint !== "string" || typeof command.prefixed !== "boolean") throw new Error("invalid Claude command projection");
 			}
 			for (const item of input.activities) {
-				const activity = record$7(item);
+				const activity = record$8(item);
 				if (activity === void 0 || !nonNegativeInteger(activity.turn) || !nonNegativeInteger(activity.step) || !nonNegativeInteger(activity.ordinal) || typeof activity.kind !== "string") throw new Error("invalid Claude sidecar activity");
 			}
-			if (input.contextUsage !== void 0 && record$7(input.contextUsage) === void 0) throw new Error("invalid Claude context projection");
-			const tasks = input.tasks === void 0 ? void 0 : record$7(input.tasks);
+			if (input.contextUsage !== void 0 && record$8(input.contextUsage) === void 0) throw new Error("invalid Claude context projection");
+			const tasks = input.tasks === void 0 ? void 0 : record$8(input.tasks);
 			if (tasks !== void 0 && !Array.isArray(tasks.tasks)) throw new Error("invalid Claude tasks projection");
 			if (input.repository !== void 0 && !validateRepository(input.repository)) throw new Error("invalid Claude repository projection");
 			if (input.repositories !== void 0 && (!Array.isArray(input.repositories) || input.repositories.length > MAX_REPOSITORIES || !input.repositories.every(validateRepository))) throw new Error("invalid Claude repositories projection");
 			if (input.reviewComments !== void 0) {
 				if (!Array.isArray(input.reviewComments) || input.reviewComments.length > MAX_REVIEW_COMMENTS) throw new Error("invalid Claude review comment projection");
 				for (const item of input.reviewComments) {
-					const comment = record$7(item);
+					const comment = record$8(item);
 					if (comment === void 0 || typeof comment.id !== "string" || comment.id.length === 0 || comment.id.length > 128 || typeof comment.path !== "string" || comment.path.length === 0 || comment.path.length > MAX_REPOSITORY_TEXT_CHARS || !nonNegativeInteger(comment.line) || comment.side !== "old" && comment.side !== "new" || typeof comment.text !== "string" || comment.text.length > MAX_REVIEW_COMMENT_CHARS) throw new Error("invalid Claude review comment projection");
 				}
 			}
+			if (input.permissionSelector !== void 0 && !isClaudePermissionSelector(input.permissionSelector)) throw new Error("invalid Claude permission selector projection");
+			if (input.permissionMode !== void 0) {
+				const view = record$8(input.permissionMode);
+				if (view === void 0 || !isClaudePermissionMode(view.mode) || typeof view.locked !== "boolean" || view.autoSupported !== void 0 && typeof view.autoSupported !== "boolean") throw new Error("invalid Claude permission mode projection");
+			}
 			if (input.rewind !== void 0) {
-				const ranges = record$7(input.rewind)?.ranges;
+				const ranges = record$8(input.rewind)?.ranges;
 				if (!Array.isArray(ranges) || ranges.length > 200) throw new Error("invalid Claude rewind projection");
 				for (const item of ranges) {
-					const range = record$7(item);
+					const range = record$8(item);
 					if (range === void 0 || !nonNegativeInteger(range.start) || !nonNegativeInteger(range.end)) throw new Error("invalid Claude rewind projection");
 				}
 			}
@@ -4682,6 +4755,8 @@ window.__ModuleLoader__.load({
 			let repositories;
 			let reviewComments;
 			let rewind;
+			let permissionMode;
+			let permissionSelector;
 			const byStep = /* @__PURE__ */ new Map();
 			const stepOrder = [];
 			/** Streaming prose still being revealed: full arrived text plus shown chars. */
@@ -4763,6 +4838,8 @@ window.__ModuleLoader__.load({
 					...repositories === void 0 ? {} : { repositories },
 					...reviewComments === void 0 ? {} : { reviewComments },
 					...rewind === void 0 ? {} : { rewind },
+					...permissionMode === void 0 ? {} : { permissionMode },
+					...permissionSelector === void 0 ? {} : { permissionSelector },
 					byStep: new Map(byStep)
 				};
 				for (const listener of [...listeners]) listener();
@@ -4844,7 +4921,7 @@ window.__ModuleLoader__.load({
 				} catch {
 					return;
 				}
-				const event = record$7(value);
+				const event = record$8(value);
 				if (event === void 0 || typeof event.type !== "string") return;
 				if (event.type === "checkpoint") {
 					if (nonNegativeInteger(event.seq) && seq !== void 0 && event.seq !== seq) desync("projection-gap", `checkpoint at ${event.seq}, applied ${seq}`);
@@ -4865,6 +4942,8 @@ window.__ModuleLoader__.load({
 							repositories = next.repositories;
 							reviewComments = next.reviewComments;
 							rewind = next.rewind;
+							permissionMode = next.permissionMode;
+							permissionSelector = next.permissionSelector;
 							reset(next.activities);
 							break;
 						}
@@ -4896,13 +4975,17 @@ window.__ModuleLoader__.load({
 								commands: event.commands,
 								...event.repository === void 0 ? {} : { repository: event.repository },
 								...event.repositories === void 0 ? {} : { repositories: event.repositories },
-								...event.reviewComments === void 0 ? {} : { reviewComments: event.reviewComments }
+								...event.reviewComments === void 0 ? {} : { reviewComments: event.reviewComments },
+								...event.permissionMode === void 0 ? {} : { permissionMode: event.permissionMode },
+								...event.permissionSelector === void 0 ? {} : { permissionSelector: event.permissionSelector }
 							});
 							owned = event.owned;
 							commands = event.commands;
 							repository = event.repository;
 							repositories = event.repositories;
 							reviewComments = event.reviewComments;
+							if (event.permissionMode !== void 0) permissionMode = event.permissionMode;
+							permissionSelector = event.permissionSelector;
 							revision += 1;
 							break;
 						default: return;
@@ -5264,7 +5347,7 @@ window.__ModuleLoader__.load({
 				return value;
 			}
 		}
-		function record$6(value) {
+		function record$7(value) {
 			return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 		}
 		function text$1(value) {
@@ -5278,7 +5361,7 @@ window.__ModuleLoader__.load({
 			if (typeof value === "string") return value;
 			if (typeof value === "number" || typeof value === "boolean") return String(value);
 			if (Array.isArray(value)) return value.map(displayValue).join(", ");
-			return record$6(value) === void 0 ? String(value) : Object.entries(value).map(([key, item]) => `${key}: ${displayValue(item)}`).join("\n");
+			return record$7(value) === void 0 ? String(value) : Object.entries(value).map(([key, item]) => `${key}: ${displayValue(item)}`).join("\n");
 		}
 		function Section({ title, children }) {
 			return /* @__PURE__ */ jsxs("section", {
@@ -5383,8 +5466,8 @@ window.__ModuleLoader__.load({
 		function ToolPresentation({ tool, t }) {
 			const inputValue = parsedValue(tool.input);
 			const outputValue = parsedValue(tool.output);
-			const input = record$6(inputValue);
-			const output = record$6(outputValue);
+			const input = record$7(inputValue);
+			const output = record$7(outputValue);
 			const outputTitle = tool.isError === true ? t("toolError") : t("toolOutput");
 			if (tool.diffs !== void 0) return /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(DiffBlock, {
 				diffs: [...tool.diffs],
@@ -5394,7 +5477,7 @@ window.__ModuleLoader__.load({
 				value: typeof outputValue === "string" ? outputValue : void 0
 			})] });
 			if (tool.toolName === "Read") {
-				const file = record$6(output?.file);
+				const file = record$7(output?.file);
 				const path = text$1(file?.filePath) ?? text$1(input?.file_path);
 				const content = text$1(file?.content) ?? (typeof outputValue === "string" ? outputValue : void 0);
 				const offset = numberValue(input?.offset) ?? 1;
@@ -6097,7 +6180,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/client/pr-feedback-api.ts
-		function record$5(value) {
+		function record$6(value) {
 			return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 		}
 		/** `root` names another checkout the session wrote into; absent, the
@@ -6111,7 +6194,7 @@ window.__ModuleLoader__.load({
 			};
 		}
 		function answer(value) {
-			const body = record$5(value);
+			const body = record$6(value);
 			if (body === void 0) throw new Error("Invalid pull request feedback response.");
 			return body;
 		}
@@ -6127,7 +6210,7 @@ window.__ModuleLoader__.load({
 			}));
 		}
 		function reviewComment(value) {
-			const input = record$5(value);
+			const input = record$6(value);
 			if (input === void 0 || typeof input.id !== "number" || typeof input.path !== "string" || typeof input.author !== "string" || typeof input.body !== "string" || typeof input.url !== "string" || input.avatarUrl !== void 0 && githubAvatarUrl(input.avatarUrl) === void 0 || input.side !== "new" && input.side !== "old" || input.line !== void 0 && typeof input.line !== "number" || input.createdAt !== void 0 && typeof input.createdAt !== "string" || input.bot !== void 0 && typeof input.bot !== "boolean") return void 0;
 			return input;
 		}
@@ -6136,7 +6219,7 @@ window.__ModuleLoader__.load({
 			if (!Array.isArray(body.threads)) throw new Error("Invalid pull request comments response.");
 			const threads = [];
 			for (const item of body.threads) {
-				const input = record$5(item);
+				const input = record$6(item);
 				if (input === void 0 || typeof input.id !== "string" || typeof input.path !== "string" || input.side !== "new" && input.side !== "old" || input.line !== void 0 && typeof input.line !== "number" || !Array.isArray(input.comments)) continue;
 				const comments = input.comments.map(reviewComment).filter((value) => value !== void 0);
 				if (comments.length === 0) continue;
@@ -6176,7 +6259,7 @@ window.__ModuleLoader__.load({
 			if (!Array.isArray(body.users)) return [];
 			const users = [];
 			for (const item of body.users) {
-				const input = record$5(item);
+				const input = record$6(item);
 				if (input === void 0 || typeof input.login !== "string" || input.login.length === 0) continue;
 				const avatarUrl = githubAvatarUrl(input.avatarUrl);
 				users.push({
@@ -6191,7 +6274,7 @@ window.__ModuleLoader__.load({
 			if (!Array.isArray(body.checks)) throw new Error("Invalid pull request checks response.");
 			const checks = [];
 			for (const item of body.checks) {
-				const input = record$5(item);
+				const input = record$6(item);
 				if (input === void 0 || typeof input.name !== "string" || input.link !== void 0 && typeof input.link !== "string" || input.description !== void 0 && typeof input.description !== "string" || input.log !== void 0 && typeof input.log !== "string") continue;
 				checks.push(input);
 			}
@@ -6666,7 +6749,7 @@ window.__ModuleLoader__.load({
 				if (code !== void 0) this.code = code;
 			}
 		};
-		function record$4(value) {
+		function record$5(value) {
 			return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 		}
 		/**
@@ -6687,7 +6770,7 @@ window.__ModuleLoader__.load({
 			return new JiraClientError(cause.message === cause.code ? "Jira is unavailable." : cause.message, cause.code);
 		}
 		function payload(value) {
-			const body = record$4(value);
+			const body = record$5(value);
 			if (body === void 0) throw new JiraClientError("Invalid Jira response.");
 			return body;
 		}
@@ -6723,7 +6806,7 @@ window.__ModuleLoader__.load({
 				if (!Array.isArray(body.tickets)) throw new JiraClientError("Invalid Jira search response.");
 				const tickets = [];
 				for (const item of body.tickets) {
-					const ticket = record$4(item);
+					const ticket = record$5(item);
 					if (ticket === void 0 || typeof ticket.key !== "string" || typeof ticket.summary !== "string" || typeof ticket.url !== "string") continue;
 					tickets.push(ticket);
 				}
@@ -6984,8 +7067,9 @@ window.__ModuleLoader__.load({
 		*  so an older Host cannot make a setting unreachable. */
 		function visibleGlobalSettings(settings) {
 			const renderer = settings.find((setting) => setting.key === "renderer");
-			if (renderer === void 0 || renderer.value !== "native") return settings;
-			return settings.filter((setting) => setting.key !== "prose");
+			const withProse = renderer === void 0 || renderer.value !== "native" ? settings : settings.filter((setting) => setting.key !== "prose");
+			const selector = settings.find((setting) => setting.key === "permissionSelector");
+			return selector === void 0 || selector.value !== "native" ? withProse : withProse.filter((setting) => setting.key !== "permissionMode");
 		}
 		/** Per-setting label and the effect note that used to sit as a standalone
 		*  paragraph under the card; it now hangs off the label as a hover hint. */
@@ -6994,6 +7078,14 @@ window.__ModuleLoader__.load({
 				label: "outputStyle",
 				hint: "globalSettingsNewSession"
 			},
+			permissionSelector: {
+				label: "permissionSelector",
+				hint: "permissionSelectorEffect"
+			},
+			permissionMode: {
+				label: "defaultPermissionMode",
+				hint: "defaultPermissionModeEffect"
+			},
 			renderer: {
 				label: "renderer",
 				hint: "rendererEffect"
@@ -7023,6 +7115,14 @@ window.__ModuleLoader__.load({
 		*  keyed `<setting>:<option>`. Options discovered on the machine (output style
 		*  names) carry no entry and keep the label the route reported. */
 		const SETTING_OPTION_COPY = {
+			"permissionSelector:plugin": "permissionSelectorPlugin",
+			"permissionSelector:native": "permissionSelectorNative",
+			"permissionMode:plan": "permissionModePlan",
+			"permissionMode:default": "permissionModeDefault",
+			"permissionMode:acceptEdits": "permissionModeAcceptEdits",
+			"permissionMode:dontAsk": "permissionModeDontAsk",
+			"permissionMode:auto": "permissionModeAuto",
+			"permissionMode:bypassPermissions": "permissionModeBypass",
 			"renderer:plugin": "rendererPlugin",
 			"renderer:native": "rendererNative",
 			"prose:plain": "prosePlain",
@@ -8131,7 +8231,7 @@ window.__ModuleLoader__.load({
 				if (commit !== void 0) this.commit = commit;
 			}
 		};
-		function record$3(value) {
+		function record$4(value) {
 			return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 		}
 		/** The dialog branches on `code`, so a route refusal keeps arriving as this
@@ -8144,20 +8244,20 @@ window.__ModuleLoader__.load({
 			return error instanceof PluginRequestError ? new RepositoryActionClientError(error.message, error.code) : error;
 		}
 		function preview(value) {
-			const input = record$3(value);
+			const input = record$4(value);
 			if (input === void 0 || typeof input.root !== "string" || typeof input.branch !== "string" || typeof input.head !== "string" || typeof input.fingerprint !== "string" || !Array.isArray(input.files) || typeof input.patch !== "string" || typeof input.truncated !== "boolean" || typeof input.hasStaged !== "boolean" || typeof input.hasUnstaged !== "boolean" || typeof input.hasUntracked !== "boolean" || input.upstream !== void 0 && typeof input.upstream !== "string" || !Array.isArray(input.unpushedCommits) || typeof input.unpushedTruncated !== "boolean") throw new Error("Invalid repository action preview.");
 			for (const file of input.files) {
-				const item = record$3(file);
+				const item = record$4(file);
 				if (item === void 0 || typeof item.path !== "string" || typeof item.staged !== "boolean" || typeof item.unstaged !== "boolean" || typeof item.untracked !== "boolean") throw new Error("Invalid repository action file.");
 			}
 			for (const commit of input.unpushedCommits) {
-				const item = record$3(commit);
+				const item = record$4(commit);
 				if (item === void 0 || typeof item.hash !== "string" || typeof item.subject !== "string") throw new Error("Invalid repository action commit.");
 			}
 			return input;
 		}
 		function result(value) {
-			const input = record$3(value);
+			const input = record$4(value);
 			if (input === void 0 || typeof input.commit !== "string" || typeof input.pushed !== "boolean" || input.pullRequestUrl !== void 0 && typeof input.pullRequestUrl !== "string" || input.conflicts !== void 0 && (!Array.isArray(input.conflicts) || input.conflicts.some((item) => typeof item !== "string"))) throw new Error("Invalid repository action result.");
 			return input;
 		}
@@ -8179,7 +8279,7 @@ window.__ModuleLoader__.load({
 		}
 		async function generateCommitMessage(sessionId, fingerprint, signal, root) {
 			try {
-				const value = record$3(await pluginWrite(`${CLAUDE_REPOSITORY_ACTION_PATH}/message`, "remote", signal, {
+				const value = record$4(await pluginWrite(`${CLAUDE_REPOSITORY_ACTION_PATH}/message`, "remote", signal, {
 					query: sessionQuery(sessionId, root),
 					json: { fingerprint }
 				}));
@@ -8193,7 +8293,7 @@ window.__ModuleLoader__.load({
 		*  `baseBranch` empty means origin's default branch. */
 		async function generatePullRequestText(sessionId, fingerprint, baseBranch, signal, root) {
 			try {
-				const value = record$3(await pluginWrite(`${CLAUDE_REPOSITORY_ACTION_PATH}/pull-request`, "remote", signal, {
+				const value = record$4(await pluginWrite(`${CLAUDE_REPOSITORY_ACTION_PATH}/pull-request`, "remote", signal, {
 					query: sessionQuery(sessionId, root),
 					json: {
 						fingerprint,
@@ -8262,16 +8362,16 @@ window.__ModuleLoader__.load({
 		/** The draft only has to describe the work; the host truncates it again before
 		*  summarizing, and the setup route caps the whole body at 16 KiB. */
 		const MAX_INTENT_CHARS = 2e3;
-		function record$2(value) {
+		function record$3(value) {
 			return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 		}
 		function setupResult(value) {
-			const item = record$2(value);
+			const item = record$3(value);
 			if (item === void 0 || item.mode !== "checkout" && item.mode !== "worktree" || typeof item.root !== "string" || typeof item.path !== "string" || typeof item.branch !== "string" || item.leaseId !== void 0 && typeof item.leaseId !== "string") return void 0;
 			return item;
 		}
 		function parseRepositorySetupEvent(line, onProgress) {
-			const event = record$2(JSON.parse(line));
+			const event = record$3(JSON.parse(line));
 			if (event?.type === "progress" && typeof event.stage === "string" && HOST_STAGES.has(event.stage)) {
 				onProgress(event.stage);
 				return;
@@ -9845,7 +9945,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/client/review-comment-api.ts
-		function record$1(value) {
+		function record$2(value) {
 			return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 		}
 		async function post(path, sessionId, body) {
@@ -9855,7 +9955,7 @@ window.__ModuleLoader__.load({
 			});
 		}
 		async function addReviewComment(sessionId, comment) {
-			const created = record$1(record$1(await post("", sessionId, comment))?.comment);
+			const created = record$2(record$2(await post("", sessionId, comment))?.comment);
 			if (created === void 0 || typeof created.id !== "string") throw new Error("Invalid review comment response.");
 			return created;
 		}
@@ -16250,11 +16350,11 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/client/ask-api.ts
-		function record(value) {
+		function record$1(value) {
 			return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 		}
 		function parseAskEvent(line) {
-			const event = record(JSON.parse(line));
+			const event = record$1(JSON.parse(line));
 			if (event?.type === "delta" && typeof event.text === "string") return {
 				type: "delta",
 				text: event.text
@@ -18823,6 +18923,244 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/client/ClaudePermissionSelect.tsx
+		const NAME_KEY = {
+			plan: "permissionModePlan",
+			default: "permissionModeDefault",
+			acceptEdits: "permissionModeAcceptEdits",
+			dontAsk: "permissionModeDontAsk",
+			auto: "permissionModeAuto",
+			bypassPermissions: "permissionModeBypass"
+		};
+		const HINT_KEY = {
+			plan: "permissionModePlanHint",
+			default: "permissionModeDefaultHint",
+			acceptEdits: "permissionModeAcceptEditsHint",
+			dontAsk: "permissionModeDontAskHint",
+			auto: "permissionModeAutoHint",
+			bypassPermissions: "permissionModeBypassHint"
+		};
+		/** One 16px outline glyph per mode, drawn to the Host's own icon grammar
+		*  (1.5px round strokes on currentColor) so the row reads as one set with
+		*  the attach and plan controls beside it. */
+		function ClaudePermissionModeGlyph({ mode }) {
+			return /* @__PURE__ */ jsx("svg", {
+				width: "16",
+				height: "16",
+				viewBox: "0 0 16 16",
+				fill: "none",
+				"aria-hidden": "true",
+				children: {
+					plan: [
+						"M6 2.75h4",
+						"M4.5 3.75h7a1 1 0 0 1 1 1v8.5a1 1 0 0 1-1 1h-7a1 1 0 0 1-1-1v-8.5a1 1 0 0 1 1-1z",
+						"M6 8h4",
+						"M6 10.5h2.5"
+					],
+					default: [
+						"M8 2.25l5 1.9v3.6c0 3.05-2.15 5.15-5 6.25-2.85-1.1-5-3.2-5-6.25v-3.6l5-1.9z",
+						"M8 6v3",
+						"M8 11h.01"
+					],
+					acceptEdits: [
+						"M10.4 3.1l2.5 2.5L6.5 12H4v-2.5l6.4-6.4z",
+						"M9 4.5l2.5 2.5",
+						"M9.5 13.25l1.5 1.5 3-3"
+					],
+					dontAsk: [
+						"M5.25 9.5V7.25a2.75 2.75 0 0 1 5.5 0V9.5l1 1.75h-7.5l1-1.75z",
+						"M6.75 12.75a1.25 1.25 0 0 0 2.5 0",
+						"M3 3l10 10"
+					],
+					auto: ["M8 2.5l1.4 3.6 3.6 1.4-3.6 1.4L8 12.5 6.6 8.9 3 7.5l3.6-1.4L8 2.5z", "M12.5 11.5l.5 1.25 1.25.5-1.25.5-.5 1.25-.5-1.25-1.25-.5 1.25-.5.5-1.25z"],
+					bypassPermissions: [
+						"M5 8V6.25a3 3 0 0 1 5.85-.95",
+						"M4.25 8h7.5v5.5h-7.5z",
+						"M8 10.25v1.5"
+					]
+				}[mode].map((d) => /* @__PURE__ */ jsx("path", {
+					d,
+					stroke: "currentColor",
+					strokeWidth: "1.5",
+					strokeLinecap: "round",
+					strokeLinejoin: "round"
+				}, d))
+			});
+		}
+		/**
+		* Claude Code's own permission modes as the session's access control, in the
+		* composer's tool row where the Host's three-mode selector sits for other
+		* agent presets. That selector is hidden for Claude sessions (host-chrome.ts)
+		* rather than replaced: it is not a slot. This one drives the same Host
+		* knobs through the plugin's route, so approvals and the sandbox follow.
+		*
+		* The pick is shown the moment it is made and held until the projection
+		* confirms it; a refused pick drops back to what the projection says.
+		*/
+		function ClaudePermissionSelect({ t, setMode, notify, useClaudeProjection, useSession }) {
+			const owned = useClaudeProjection((projection) => projection.owned);
+			const selector = useClaudeProjection((projection) => projection.permissionSelector);
+			const view = useClaudeProjection((projection) => projection.permissionMode);
+			const running = useSession === void 0 ? false : useSession((session) => session.running);
+			const [pick, setPick] = useState(null);
+			const [open, setOpen] = useState(false);
+			const [confirming, setConfirming] = useState(null);
+			const [acknowledged, setAcknowledged] = useState(false);
+			const [busy, setBusy] = useState(false);
+			const reported = view?.mode;
+			useEffect(() => {
+				if (pick !== null && reported === pick) setPick(null);
+			}, [pick, reported]);
+			if (!owned || selector !== "plugin") return null;
+			const current = pick ?? reported;
+			const locked = running || view?.locked === true;
+			const label = current === void 0 ? t("permissionMode") : t(NAME_KEY[current]);
+			const hint = locked ? t("permissionModeLocked") : current === void 0 ? t("permissionMode") : t(HINT_KEY[current]);
+			const autoUnsupported = view?.autoSupported === false;
+			const hintOf = (mode) => mode === "auto" && autoUnsupported ? t("permissionModeAutoUnsupported") : t(HINT_KEY[mode]);
+			const submit = (mode) => {
+				setPick(mode);
+				setBusy(true);
+				setMode(mode).then((outcome) => {
+					if (!outcome.hostSynced) notify?.("info", t("permissionModeHostKept"));
+				}, (error) => {
+					setPick(null);
+					notify?.("error", t("permissionModeFailed", { message: error instanceof Error ? error.message : String(error) }));
+				}).finally(() => {
+					setBusy(false);
+				});
+			};
+			const choose = (id) => {
+				setOpen(false);
+				if (id === current || !CLAUDE_PERMISSION_MODES.includes(id)) return;
+				const mode = id;
+				if (mode === "bypassPermissions") {
+					setAcknowledged(false);
+					setConfirming(mode);
+					return;
+				}
+				submit(mode);
+			};
+			const closeConfirmation = () => {
+				setAcknowledged(false);
+				setConfirming(null);
+			};
+			return /* @__PURE__ */ jsxs("span", {
+				className: permissionSelectClass,
+				children: [
+					/* @__PURE__ */ jsxs("style", {
+						"data-dsh-claude-permission-select-styles": true,
+						children: [permissionSelectCss, permissionSelectRowCss]
+					}),
+					/* @__PURE__ */ jsx(Menu, {
+						open,
+						items: CLAUDE_PERMISSION_MODES.map((mode) => ({
+							id: mode,
+							label: /* @__PURE__ */ jsxs("span", {
+								className: permissionSelectRowClass,
+								children: [/* @__PURE__ */ jsx("span", {
+									className: permissionSelectRowNameClass,
+									children: t(NAME_KEY[mode])
+								}), /* @__PURE__ */ jsx("span", {
+									className: permissionSelectRowHintClass,
+									children: hintOf(mode)
+								})]
+							}),
+							icon: /* @__PURE__ */ jsx(ClaudePermissionModeGlyph, { mode }),
+							...mode === "auto" && autoUnsupported ? { disabled: true } : {},
+							...mode === "bypassPermissions" ? { danger: true } : {}
+						})),
+						selectedId: current,
+						onSelect: choose,
+						onClose: () => {
+							setOpen(false);
+						},
+						side: "top",
+						anchor: /* @__PURE__ */ jsx(Tooltip, {
+							label: hint,
+							side: "top",
+							delayMs: 250,
+							disabled: open,
+							children: /* @__PURE__ */ jsxs("button", {
+								type: "button",
+								className: permissionSelectTriggerClass,
+								"aria-label": t("permissionModeAria", { name: label }),
+								"aria-haspopup": "menu",
+								"aria-expanded": open,
+								disabled: locked || busy,
+								onClick: () => {
+									setOpen(!open);
+								},
+								children: [
+									current === void 0 ? null : /* @__PURE__ */ jsx("span", {
+										className: permissionSelectIconClass,
+										children: /* @__PURE__ */ jsx(ClaudePermissionModeGlyph, { mode: current })
+									}),
+									/* @__PURE__ */ jsx("span", {
+										className: permissionSelectLabelClass,
+										children: label
+									}),
+									/* @__PURE__ */ jsx("svg", {
+										className: permissionSelectChevronClass,
+										width: "12",
+										height: "12",
+										viewBox: "0 0 12 12",
+										fill: "none",
+										"aria-hidden": "true",
+										"data-open": open ? "" : void 0,
+										children: /* @__PURE__ */ jsx("path", {
+											d: "M3 4.5L6 7.5L9 4.5",
+											stroke: "currentColor",
+											strokeWidth: "1.5",
+											strokeLinecap: "round",
+											strokeLinejoin: "round"
+										})
+									})
+								]
+							})
+						})
+					}),
+					/* @__PURE__ */ jsx(RiskConfirmation, {
+						open: confirming !== null,
+						title: t("permissionBypassTitle"),
+						description: t("permissionBypassDescription"),
+						acknowledgeLabel: t("permissionBypassAcknowledge"),
+						cancelLabel: t("permissionBypassCancel"),
+						closeLabel: t("permissionBypassClose"),
+						confirmLabel: t("permissionBypassConfirm"),
+						acknowledged,
+						disabled: locked,
+						onAcknowledgedChange: setAcknowledged,
+						onCancel: closeConfirmation,
+						onConfirm: () => {
+							if (locked || !acknowledged || confirming === null) return;
+							const mode = confirming;
+							closeConfirmation();
+							submit(mode);
+						}
+					})
+				]
+			});
+		}
+		//#endregion
+		//#region src/client/permission-mode-api.ts
+		function record(value) {
+			return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+		}
+		/** Make `mode` the session's Claude permission mode from its next turn. */
+		async function setClaudePermissionMode(sessionId, mode, signal) {
+			const value = record(await pluginWrite(CLAUDE_PERMISSION_MODE_PATH, "fast", signal, { json: {
+				sessionId,
+				mode
+			} }));
+			if (value === void 0 || !isClaudePermissionMode(value.mode) || typeof value.sandbox !== "string" || typeof value.hostSynced !== "boolean") throw new Error("Invalid permission mode result.");
+			return {
+				mode: value.mode,
+				sandbox: value.sandbox,
+				hostSynced: value.hostSynced
+			};
+		}
+		//#endregion
 		//#region src/client/ClaudePromptRefineAction.tsx
 		/**
 		* Rewrite the draft in place, from the composer's own tool row.
@@ -18986,7 +19324,7 @@ window.__ModuleLoader__.load({
 			`button[${CLAUDE_SEAT_ATTRIBUTE}]>[class*="seatIcon"]{display:none}`,
 			`button[${CLAUDE_SEAT_ATTRIBUTE}]::before{content:"";flex:none;width:16px;height:16px;`,
 			`background:${claudeMarkUrl()} center/contain no-repeat}`
-		].join("")}`;
+		].join("")}${`[class*="_tools"]:has(.${permissionSelectClass}) [class*="_modes"]>*:has(span[class*="_triggerLabel"]){display:none}`}`;
 		/** Install the stylesheet and the one DOM flag it depends on.
 		*  @returns a disposer that removes both again. */
 		function restyleHostChrome() {
@@ -19049,6 +19387,12 @@ window.__ModuleLoader__.load({
 			globalSettingsNewSession: "修改仅对新建 Claude 会话生效。",
 			globalSettingsError: "全局设置保存失败",
 			outputStyle: "Output Style",
+			permissionSelector: "权限选择器",
+			permissionSelectorPlugin: "插件（Claude Code 权限模式）",
+			permissionSelectorNative: "DSH 原生（三档访问模式）",
+			permissionSelectorEffect: "插件：composer 里显示本插件的选择器，提供 Claude Code 的全部权限模式，并按下面的\"默认权限模式\"初始化新会话。DSH 原生：保留 DSH 自带的只读 / 工作区写入 / 完全权限三档下拉，权限只按沙箱映射（只读对应计划，工作区写入对应自动接受编辑，完全权限对应跳过权限），会话里的选择和默认权限模式都不再参与。立即生效；正在运行的回合保持原模式。",
+			defaultPermissionMode: "默认权限模式",
+			defaultPermissionModeEffect: "新建 Claude 会话时采用的 Claude Code 权限模式，DSH 的访问预设会随之切到这个模式对应的沙箱；之后在 composer 里的权限选择器改过的会话按自己的选择运行。用 /permission 之类原生方式改过沙箱的会话，以沙箱对应的模式为准；当前模型不支持自动模式时退回默认模式。修改只对之后新建的会话生效。",
 			renderer: "AI 输出渲染器",
 			rendererPlugin: "插件渲染器",
 			rendererNative: "DSH 原生渲染器",
@@ -19229,6 +19573,30 @@ window.__ModuleLoader__.load({
 			promptSaved: "已存为「{name}」",
 			promptSaveExists: "已有同名提示词，换个名字。",
 			promptSaveFailed: "保存失败：{message}",
+			permissionMode: "权限模式",
+			permissionModeAria: "权限模式：{name}",
+			permissionModePlan: "计划",
+			permissionModePlanHint: "只读探索并写出计划，经你批准后才执行",
+			permissionModeDefault: "默认",
+			permissionModeDefaultHint: "每次文件改动和命令都先询问",
+			permissionModeAcceptEdits: "自动接受编辑",
+			permissionModeAcceptEditsHint: "文件改动自动放行，命令仍会询问",
+			permissionModeDontAsk: "不询问",
+			permissionModeDontAskHint: "没有预先放行的操作直接拒绝，不弹出审批",
+			permissionModeAuto: "自动",
+			permissionModeAutoHint: "由 Claude Code 的分类器代为批准，拿不准的才问你",
+			permissionModeAutoUnsupported: "当前模型不支持自动模式",
+			permissionModeBypass: "跳过权限",
+			permissionModeBypassHint: "跳过所有权限检查",
+			permissionModeLocked: "回合进行中无法切换权限模式",
+			permissionModeFailed: "切换权限模式失败：{message}",
+			permissionModeHostKept: "DSH 未同步访问模式，Claude 仍按所选模式运行",
+			permissionBypassTitle: "跳过所有权限检查？",
+			permissionBypassDescription: "Claude Code 将不再请求审批，直接执行文件改动和命令。",
+			permissionBypassAcknowledge: "我了解风险",
+			permissionBypassCancel: "取消",
+			permissionBypassClose: "关闭",
+			permissionBypassConfirm: "启用",
 			presetHeaderHint: "当前会话运行的 Agent 预设",
 			diffRepository: "仓库",
 			repositoryLinked: "关联仓库：本会话改动过",
@@ -19493,6 +19861,12 @@ window.__ModuleLoader__.load({
 			globalSettingsNewSession: "Changes apply only to new Claude sessions.",
 			globalSettingsError: "Global settings save failed",
 			outputStyle: "Output Style",
+			permissionSelector: "Permission selector",
+			permissionSelectorPlugin: "Plugin (Claude Code permission modes)",
+			permissionSelectorNative: "DSH native (three access modes)",
+			permissionSelectorEffect: "Plugin: the composer shows this plugin's selector with every Claude Code permission mode, and new sessions start in the default mode below. DSH native: the Host's own read-only / workspace-write / full-access selector stays, and the mode follows the sandbox alone (read-only is Plan, workspace-write is Accept edits, full access is Bypass); per-session choices and the default mode are not consulted. Takes effect immediately; a running turn keeps its mode.",
+			defaultPermissionMode: "Default permission mode",
+			defaultPermissionModeEffect: "The Claude Code permission mode a new Claude session starts in; DSH's access preset is moved onto the sandbox that mode needs as the session is created. A session you have since changed with the composer's own selector runs its own choice. A sandbox switched natively (/permission) wins over the mode, and auto yields to Default on a model that cannot run it. Changes apply to sessions created from then on.",
 			renderer: "AI output renderer",
 			rendererPlugin: "Plugin renderer",
 			rendererNative: "DSH native renderer",
@@ -19673,6 +20047,30 @@ window.__ModuleLoader__.load({
 			promptSaved: "Saved as \"{name}\"",
 			promptSaveExists: "A prompt with that name already exists. Try another.",
 			promptSaveFailed: "Could not save: {message}",
+			permissionMode: "Permission mode",
+			permissionModeAria: "Permission mode: {name}",
+			permissionModePlan: "Plan",
+			permissionModePlanHint: "Read-only exploration; the plan comes back for your approval before anything runs",
+			permissionModeDefault: "Default",
+			permissionModeDefaultHint: "Every file edit and command asks first",
+			permissionModeAcceptEdits: "Accept edits",
+			permissionModeAcceptEditsHint: "File edits go through on their own; commands still ask",
+			permissionModeDontAsk: "Don't ask",
+			permissionModeDontAskHint: "Anything not pre-approved is refused instead of asked about",
+			permissionModeAuto: "Auto",
+			permissionModeAutoHint: "Claude Code's classifier approves on your behalf and asks you only when unsure",
+			permissionModeAutoUnsupported: "The current model does not support auto mode",
+			permissionModeBypass: "Bypass permissions",
+			permissionModeBypassHint: "Skip every permission check",
+			permissionModeLocked: "The permission mode cannot change while a turn is running",
+			permissionModeFailed: "Could not switch the permission mode: {message}",
+			permissionModeHostKept: "DSH kept its own access preset; Claude still runs the chosen mode",
+			permissionBypassTitle: "Skip every permission check?",
+			permissionBypassDescription: "Claude Code will run file edits and commands without asking for approval.",
+			permissionBypassAcknowledge: "I understand the risk",
+			permissionBypassCancel: "Cancel",
+			permissionBypassClose: "Close",
+			permissionBypassConfirm: "Enable",
 			presetHeaderHint: "The agent preset this session runs",
 			diffRepository: "Repository",
 			repositoryLinked: "Linked repository: changed by this session",
@@ -20100,6 +20498,22 @@ window.__ModuleLoader__.load({
 					diffOpen: sidebarTabs.sourceFor(CLAUDE_TAB_KINDS.diff, sessionId)
 				})
 			}, ClaudeDiffHeaderAction));
+			ctx.slots.inject("conversation.input.left", () => ctx.slots.register({
+				name: "conversation.input.left",
+				id: "claude-permission-mode",
+				order: 30,
+				locale: namespace,
+				inject: (sessionId) => {
+					const scope = sessions?.scope(sessionId);
+					return {
+						t,
+						setMode: (mode) => setClaudePermissionMode(sessionId, mode),
+						...scope === void 0 || conversation === void 0 ? {} : { notify: (level, text) => {
+							sessionInput(conversation, scope).notify(level, text);
+						} }
+					};
+				}
+			}, ClaudePermissionSelect));
 			ctx.slots.inject("conversation.input.left", () => ctx.slots.register({
 				name: "conversation.input.left",
 				id: "claude-prompt-save",