@prettier-ai/dsh-client-ui-permission-presets 0.1.2-alpha.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.i18n.yaml

@@ -0,0 +1,6 @@
+# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
+# side as of the last confirmed-consistent state. Both languages carry equal authority;
+# after editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write packages/client/ui-permission-presets/README.md
+README.md: fc7328bd0029ea86b369d3457c43aa4e24db1243
+README.zh.md: 523ea66a0f7fa3eeddb0f8fe1a901d03f9720c3d

package/README.md

@@ -0,0 +1,91 @@
+---
+description: "Permission preset surfaces for the Web GUI: the General-settings default row and the /permission picker for the current session; for users and maintainers of permission policy."
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-client-ui-permission-presets
+
+English | [中文](README.zh.md)
+
+## Summary
+
+This package provides permission preset surfaces for two lifetimes in the Web GUI: a General-settings row chooses the default for later sessions without switching the current session. A picker on the host `/permission` command switches the current session through one flat preset list with the active value marked. Kebab-case names render as title-case labels, and `danger-full-access` is presented as `Full access`. Choosing full access requires an explicit risk acknowledgement before either surface writes it. Both surfaces read one host-computed projection and write through one path, so the pushed projection frame is the single confirmation both follow.
+
+## Table of Contents
+
+- [Use this package](#use-this-package)
+- [Understand the implementation](#understand-the-implementation)
+- [Further Exploration](#further-exploration)
+- [Model Experience](#model-experience)
+- [Known Limitations and Deferred Work](#known-limitations-and-deferred-work)
+- [Dev Note](#dev-note)
+
+-----
+
+<a id="use-this-package"></a>
+## Use this package
+
+Mount this plugin alongside the settings and commands packages; the permission row then appears in General settings, and the `/permission` picker replaces the bare command invocation. The current-session picker is available exactly while the projection key is present; a permission-less composition shows neither picker nor Settings row.
+
+### The picker
+
+A pick submits the `/permission <preset>` command line. The argued path (`/permission <preset>` typed directly) still switches directly; the decoration replaces only the bare invocation. Unknown kebab-case preset names render in title case, and `custom` is display state, never a target.
+
+### The Settings row
+
+The row derives its options from the host's dynamic `defaultPreset` enum and writes one settings mutation. The value applies only when a later session is created; changing it never switches or rewrites the current session.
+
+-----
+
+<a id="understand-the-implementation"></a>
+## Understand the implementation
+
+<details>
+<summary>Implementation internals — click to expand</summary>
+
+The General row reads the explicitly exposed `permission` Settings descriptor through `ctx.settingsScope` and writes one `settings.mutate` path operation with the descriptor revision; its observable rides the slot system's `hooks` compartment, so the renderer owns React hook binding, and a push invalidation refetches the descriptor. The value is read only when a later session is created. The current-session surface is a popupSelect decoration hung on the host `/permission` command (`ctx.commandUi.decorate`): the host command keeps its slash-menu row, argued path, and durable lifecycle logging, while the decoration replaces only the bare invocation with the picker. Options and the active mark read the session's `permissions` projection — the same host-computed select the composer chip renders. The full-access option carries a `confirmation` payload the shared popup shell renders as the in-page risk gate.
+
+</details>
+
+-----
+
+<a id="further-exploration"></a>
+## Further Exploration
+
+Read these pages when the permission surface is not enough. They move from the browser surfaces to the host policy and the command shell.
+
+- [dsh-permission-presets](../../interaction/permission-presets/README.md) — the host-side permission preset policy these surfaces write.
+- [ui-commands](../ui-commands/README.md) — the popupSelect shell the `/permission` decoration registers into.
+- [ui-conversation](../ui-conversation/README.md) — the composer chip that renders the same permissions projection.
+- [Client package map](../README.md) — adjacent browser UI packages.
+
+-----
+
+<a id="model-experience"></a>
+## Model Experience
+
+Indirectly, through the permission facts its two surfaces write: the Settings row causes a future session to start with whole-value knob events, while the `/permission` picker appends the same facts when it switches the current session; those events select the sandbox mode and approval policy later tool calls resolve.
+
+#### KV Cache effect
+
+No direct invalidation; the knob consumers own any request-prefix changes.
+
+## Known Limitations and Deferred Work
+
+<a id="known-limitations-and-deferred-work"></a>
+
+
+These limits define the current permission surfaces. They are current package constraints, not a general policy comparison or a task backlog.
+
+- **The Settings row is Web-only** — non-Web clients may still switch the current session through `/permission`, but do not receive this browser contribution.
+- **Preset descriptions come from the host** — localized built-in labels may therefore appear beside a description written in another language.
+
+<a id="dev-note"></a>
+### Dev Note
+
+<details>
+<summary>Working context for maintainers — click to expand</summary>
+
+None.
+
+</details>

package/README.zh.md

@@ -0,0 +1,91 @@
+---
+description: "Web GUI 的权限预设表面：通用设置中的默认行与切换当前会话的 /permission 选择器；供权限策略的用户与维护者阅读。"
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-client-ui-permission-presets
+
+[English](README.md) | 中文
+
+## 概述
+
+本包为 Web GUI 中两种生命周期提供权限预设表面：通用设置中的一行选择之后创建会话所用的默认值，但不会切换当前会话。挂在宿主 `/permission` 命令上的选择器通过一张扁平预设列表切换当前会话，并标记 active 值。Kebab-case 名称渲染为 Title Case 标签，`danger-full-access` 显示为 `Full access`。选择完全权限时，该行或选择器写入前必须先显式确认风险。两个表面读取同一份宿主计算的投影、经同一条路径写入，因此推送的投影帧是两者共同跟随的唯一确认。
+
+## 目录
+
+- [使用本包](#use-this-package)
+- [理解实现](#understand-the-implementation)
+- [进一步探索](#further-exploration)
+- [模型体验](#model-experience)
+- [已知限制与延期工作](#known-limitations-and-deferred-work)
+- [开发备注](#dev-note)
+
+-----
+
+<a id="use-this-package"></a>
+## 使用本包
+
+与设置与命令包一起挂载本插件；权限行随即出现在通用设置中，`/permission` 选择器替换裸命令调用。当前会话选择器恰在投影 key 存在时可用；无权限组合既不显示选择器，也不显示设置行。
+
+### 选择器
+
+选中即提交 `/permission <preset>` 命令行。带参路径（直接键入 `/permission <preset>`）仍直接切换；装饰只替换裸调用。未知 kebab-case 预设名渲染为 Title Case 标签，`custom` 只是显示状态，绝非目标。
+
+### 设置行
+
+该行从宿主动态的 `defaultPreset` enum 推导选项，写入一条设置变更操作。该值只在之后创建会话时生效；改变它绝不会切换或改写当前会话。
+
+-----
+
+<a id="understand-the-implementation"></a>
+## 理解实现
+
+<details>
+<summary>实现细节——点击展开</summary>
+
+通用行经 `ctx.settingsScope` 读取显式暴露的 `permission` Settings 描述符，并携带描述符 revision 写入一条 `settings.mutate` 路径操作；其 observable 经槽位系统的 `hooks` 格传递，因此 React 钩子绑定归渲染器，推送失效通知会重新获取描述符。该值只在之后创建会话时读取。当前会话表面是挂在宿主 `/permission` 命令上的 popupSelect 装饰（`ctx.commandUi.decorate`）：宿主命令保留斜杠菜单行、带参路径与持久生命周期记账，装饰只把裸调用替换为选择器。选项与 active 标记读取会话的 `permissions` 投影——与 composer chip 渲染的同一份宿主计算 select。完全权限选项携带 `confirmation` 载荷，由共享弹窗外壳渲染为页内风险门。
+
+</details>
+
+-----
+
+<a id="further-exploration"></a>
+## 进一步探索
+
+当权限面不够用时阅读以下页面。它们从浏览器表面进入宿主策略与命令外壳。
+
+- [dsh-permission-presets](../../interaction/permission-presets/README.zh.md)——这些表面写入的宿主侧权限预设策略。
+- [ui-commands](../ui-commands/README.zh.md)——`/permission` 装饰注册进的 popupSelect 外壳。
+- [ui-conversation](../ui-conversation/README.zh.md)——渲染同一份权限投影的 composer chip。
+- [客户端包映射](../README.zh.md)——相邻的浏览器 UI 包。
+
+-----
+
+<a id="model-experience"></a>
+## 模型体验
+
+间接影响。它的两个表面写入权限事实：设置行使未来会话带着全量值旋钮事件启动，而 `/permission` 选择器切换当前会话时追加相同的事实；这些事件决定后续工具调用解析到的沙箱模式与审批策略。
+
+#### KV Cache 影响
+
+无直接失效；请求前缀的变化由旋钮消费方自行承担。
+
+## 已知限制与延期工作
+
+<a id="known-limitations-and-deferred-work"></a>
+
+
+这些限制界定了当前权限表面。它们是当前包约束，不是通用策略对比或任务积压。
+
+- **设置行仅限 Web**——非 Web 客户端仍可经 `/permission` 切换当前会话，但不会获得这项浏览器贡献。
+- **预设描述来自宿主**——本地化的内置标签旁边可能显示另一种语言编写的描述。
+
+<a id="dev-note"></a>
+### 开发备注
+
+<details>
+<summary>维护者的工作上下文——点击展开</summary>
+
+无。
+
+</details>

package/lib/client.js

@@ -0,0 +1,471 @@
+window.__ModuleLoader__.load({
+	id: "@prettier-ai/dsh-client-ui-permission-presets",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		let react_jsx_runtime = require("react/jsx-runtime");
+		let react = require("react");
+		let _prettier_ai_dsh_client_ui_primitives = require("@prettier-ai/dsh-client-ui-primitives");
+		let _prettier_ai_dsh_client_store = require("@prettier-ai/dsh-client-store");
+		//#region lib/types/client/presentation.js
+		/** Machine value of the preset that requires an explicit GUI risk gate. */
+		const FULL_ACCESS_PRESET = "danger-full-access";
+		/**
+		* Convert conventional kebab-case preset names into user-facing title case.
+		* @param name - host-supplied preset label or key.
+		* @returns the title-cased conventional key, or a non-kebab label unchanged.
+		*/
+		function displayPresetName(name) {
+			if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(name)) return name;
+			return name.split("-").map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join(" ");
+		}
+		/**
+		* Render a permission preset under its product label.
+		* @param value - preset machine value.
+		* @param name - host-supplied preset name.
+		* @returns the Full access product label or the conventional display name.
+		*/
+		function displayPermissionPreset(value, name) {
+			return value === "danger-full-access" ? "Full access" : displayPresetName(name);
+		}
+		//#endregion
+		//#region \0dsh-css:/home/runner/work/dsh-publisher/dsh-publisher/upstream/packages/client/ui-permission-presets/src/client/PermissionRow.module.css.mjs
+		const css = ".kR5lJq_row{border-bottom:1px solid var(--dsw-alias-border-l2);align-items:center;gap:8px;padding:16px 0;display:flex}.kR5lJq_rowText{flex-direction:column;flex:1;gap:4px;min-width:0;padding-right:48px;display:flex}.kR5lJq_title{color:var(--dsw-alias-label-primary);font-size:14px;font-weight:400;line-height:22px}.kR5lJq_desc{color:var(--dsw-alias-label-tertiary);font-size:12px;font-weight:400;line-height:18px}.kR5lJq_selector{background:var(--dsw-alias-bg-module-platform);height:36px;font:inherit;color:var(--dsw-alias-label-primary);cursor:pointer;border:none;border-radius:18px;align-items:center;gap:12px;padding:0 14px;font-size:14px;line-height:22px;display:inline-flex}.kR5lJq_selector:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.kR5lJq_selector:disabled{cursor:default}.kR5lJq_chevron{flex:none}";
+		const tagId = "@prettier-ai/dsh-client-ui-permission-presets/PermissionRow.module.css";
+		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
+			const tag = document.createElement("style");
+			tag.dataset.plugin = "@prettier-ai/dsh-client-ui-permission-presets";
+			tag.dataset.pluginCss = tagId;
+			tag.textContent = css;
+			document.head.appendChild(tag);
+		}
+		var PermissionRow_module_css_default = {
+			"chevron": "kR5lJq_chevron",
+			"desc": "kR5lJq_desc",
+			"row": "kR5lJq_row",
+			"rowText": "kR5lJq_rowText",
+			"selector": "kR5lJq_selector",
+			"title": "kR5lJq_title"
+		};
+		//#endregion
+		//#region lib/types/client/PermissionRow.js
+		/**
+		* Permission preference row: the default preset for subsequently created
+		* sessions. Current-session switches remain on the composer `/permission`
+		* control.
+		*/
+		/**
+		* Render the new-session Permission default selector.
+		* @param props - composed slot props.
+		* @returns the row, or null when the host does not expose permission settings.
+		*/
+		function PermissionRow({ load, select, usePermission, t }) {
+			const state = usePermission((snapshot) => snapshot);
+			const [open, setOpen] = (0, react.useState)(false);
+			const [confirmingFullAccess, setConfirmingFullAccess] = (0, react.useState)(false);
+			const [acknowledged, setAcknowledged] = (0, react.useState)(false);
+			(0, react.useEffect)(() => {
+				load();
+			}, [load]);
+			(0, react.useEffect)(() => {
+				if (state.writable && state.status !== "unavailable") return;
+				setOpen(false);
+				setAcknowledged(false);
+				setConfirmingFullAccess(false);
+			}, [state.status, state.writable]);
+			if (state.status === "unavailable") return null;
+			const selected = state.options.find((option) => option.id === state.currentValue);
+			const busy = state.status === "loading" || state.status === "saving" || confirmingFullAccess;
+			const label = selected?.label ?? (busy ? t("loading") : t("unavailable"));
+			const description = state.error ?? t("description");
+			return (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [(0, react_jsx_runtime.jsxs)("div", {
+				className: PermissionRow_module_css_default.row,
+				children: [(0, react_jsx_runtime.jsxs)("div", {
+					className: PermissionRow_module_css_default.rowText,
+					children: [(0, react_jsx_runtime.jsx)("div", {
+						className: PermissionRow_module_css_default.title,
+						children: t("title")
+					}), (0, react_jsx_runtime.jsx)("div", {
+						className: PermissionRow_module_css_default.desc,
+						role: state.error === null ? void 0 : "alert",
+						children: description
+					})]
+				}), (0, react_jsx_runtime.jsx)(_prettier_ai_dsh_client_ui_primitives.Menu, {
+					open,
+					onClose: () => {
+						setOpen(false);
+					},
+					items: state.options.map((option) => ({
+						id: option.id,
+						label: option.label
+					})),
+					selectedId: state.currentValue,
+					onSelect: (id) => {
+						setOpen(false);
+						if (id === state.currentValue) return;
+						if (id === "danger-full-access") {
+							setAcknowledged(false);
+							setConfirmingFullAccess(true);
+							return;
+						}
+						select(id);
+					},
+					align: "end",
+					portal: true,
+					anchor: (0, react_jsx_runtime.jsxs)("button", {
+						type: "button",
+						className: PermissionRow_module_css_default.selector,
+						"aria-haspopup": "menu",
+						"aria-expanded": open,
+						disabled: busy || !state.writable || state.options.length === 0,
+						onClick: () => {
+							setOpen((value) => !value);
+						},
+						children: [label, (0, react_jsx_runtime.jsx)(_prettier_ai_dsh_client_ui_primitives.IconChevronDownOutline14, { className: PermissionRow_module_css_default.chevron })]
+					})
+				})]
+			}), (0, react_jsx_runtime.jsx)(_prettier_ai_dsh_client_ui_primitives.RiskConfirmation, {
+				open: confirmingFullAccess,
+				title: t("confirm.title"),
+				description: t("confirm.description"),
+				acknowledgeLabel: t("confirm.acknowledge"),
+				cancelLabel: t("confirm.cancel"),
+				closeLabel: t("close"),
+				confirmLabel: t("confirm.enable"),
+				acknowledged,
+				disabled: !state.writable || state.status === "saving",
+				onAcknowledgedChange: setAcknowledged,
+				onCancel: () => {
+					setAcknowledged(false);
+					setConfirmingFullAccess(false);
+				},
+				onConfirm: () => {
+					setAcknowledged(false);
+					setConfirmingFullAccess(false);
+					select(FULL_ACCESS_PRESET);
+				}
+			})] });
+		}
+		//#endregion
+		//#region lib/types/client/locales.js
+		/** `settings.permission` namespace dictionaries (the Permission row's copy). */
+		/** Simplified Chinese dictionary (the key-set source of truth). */
+		const zh = {
+			"title": "权限",
+			"description": "选择新会话的默认权限模式",
+			"loading": "加载中",
+			"unavailable": "不可用",
+			"confirm.title": "确认启用 Full access？",
+			"confirm.description": "启用 Full access 后，新会话将减少确认步骤，并且可以直接执行更多操作，包括敏感操作、文件修改或外部命令。仅建议在你信任后续任务时使用。",
+			"confirm.acknowledge": "我已了解风险，并愿意继续",
+			"confirm.cancel": "取消",
+			"confirm.enable": "启用 Full access"
+		};
+		/** English dictionary, checked complete against the zh key set. */
+		const en = {
+			"title": "Permission",
+			"description": "Choose the default permission mode for new sessions",
+			"loading": "Loading",
+			"unavailable": "Unavailable",
+			"confirm.title": "Enable Full access?",
+			"confirm.description": "Full access lets new sessions reduce confirmation steps and perform more actions directly, including sensitive operations, file changes, or external commands. Only use it when you trust subsequent tasks.",
+			"confirm.acknowledge": "I understand the risks and want to continue",
+			"confirm.cancel": "Cancel",
+			"confirm.enable": "Enable Full access"
+		};
+		/** Simplified Chinese dictionary for the current-session popup gate. */
+		const accessZh = {
+			"confirm.title": "确认启用 Full access？",
+			"confirm.description": "启用 Full access 后，agent 将减少确认步骤，并且可以直接执行更多操作，包括敏感操作、文件修改或外部命令。仅建议在你信任当前任务时使用。",
+			"confirm.acknowledge": "我已了解风险，并愿意继续",
+			"confirm.cancel": "取消",
+			"confirm.enable": "启用 Full access"
+		};
+		/** English dictionary for the current-session popup gate. */
+		const accessEn = {
+			"confirm.title": "Enable Full access?",
+			"confirm.description": "Full access reduces confirmation steps and lets the agent perform more actions directly, including sensitive operations, file changes, or external commands. Only use it when you trust the current task.",
+			"confirm.acknowledge": "I understand the risks and want to continue",
+			"confirm.cancel": "Cancel",
+			"confirm.enable": "Enable Full access"
+		};
+		//#endregion
+		//#region lib/types/client/settings-store.js
+		/**
+		* Permission default-settings controller. The permission descriptor comes
+		* from the shared describe mirror (the dynamic preset enum lives in the
+		* namespace schema, which per-namespace scopes do not carry); writes target
+		* only `defaultPreset`, carry the descriptor revision, and fold their answer
+		* back into the mirror.
+		*/
+		/** Permission's settings namespace on the host wire. */
+		const PERMISSION_SETTINGS_NS = "permission";
+		/**
+		* Read the dynamic preset enum encoded by the host's `defaultPreset` schema.
+		* @param view - permission namespace descriptor.
+		* @param schema - settings schema operations.
+		* @returns current value and selectable options.
+		*/
+		function permissionDefaultOf(view, schema) {
+			const value = view.value?.defaultPreset;
+			if (typeof value !== "string") throw new Error("permission settings has no defaultPreset value");
+			const node = schema.nodeAtPath(schema.rehydrate(view.schema), ["defaultPreset"]);
+			if (node === void 0) throw new Error("permission settings schema has no defaultPreset field");
+			const options = (node.type === "union" ? node.list ?? [] : [node]).flatMap((candidate) => {
+				const choice = candidate;
+				if (choice.type !== "const" || typeof choice.value !== "string") return [];
+				const described = choice.meta?.description;
+				return [{
+					id: choice.value,
+					label: typeof described === "string" && described.length > 0 ? displayPermissionPreset(choice.value, described) : displayPermissionPreset(choice.value, choice.value)
+				}];
+			});
+			if (options.length === 0 || !options.some((option) => option.id === value)) throw new Error("permission settings schema does not advertise its current preset");
+			return {
+				currentValue: value,
+				options
+			};
+		}
+		/** Controller deriving the row from the shared mirror and writing the default through it. */
+		var PermissionPresetSettingsController = class {
+			describeFace;
+			api;
+			schema;
+			/** Row snapshot consumed through a bound selector hook. */
+			store = (0, _prettier_ai_dsh_client_store.createSnapshotStore)({
+				status: "idle",
+				error: null,
+				writable: false,
+				currentValue: "",
+				options: [],
+				revision: 0
+			});
+			following;
+			saving = false;
+			disposed = false;
+			/**
+			* @param describeFace - the shared mirror's read/fold face (descriptor and schema source).
+			* @param api - settings wire face for the `defaultPreset` write.
+			* @param schema - settings-owned schema operations.
+			*/
+			constructor(describeFace, api, schema) {
+				this.describeFace = describeFace;
+				this.api = api;
+				this.schema = schema;
+			}
+			/**
+			* Begin following the mirror (idempotent) and reflect its current answer.
+			* @returns settlement once the snapshot reflects the mirror.
+			*/
+			async load() {
+				if (this.disposed) return;
+				this.following ??= this.describeFace.subscribe(() => {
+					this.derive();
+				});
+				this.store.update((state) => {
+					state.status = "loading";
+					state.error = null;
+				});
+				await this.describeFace.ensure();
+				this.derive();
+			}
+			/**
+			* Persist one preset as the default for subsequently created sessions.
+			* A selection made while one is already saving is ignored — the row's
+			* control is disabled during the save, so this only drops programmatic
+			* double-submits rather than user intent.
+			* @param preset - advertised preset key.
+			* @returns nothing; {@link store} carries success or failure.
+			*/
+			async select(preset) {
+				const state = this.store.getSnapshot();
+				const view = this.describeFace.getSnapshot().view?.namespaces.find((entry) => entry.ns === PERMISSION_SETTINGS_NS);
+				if (view === void 0 || !state.writable || this.saving) return;
+				this.saving = true;
+				this.store.update((draft) => {
+					draft.status = "saving";
+					draft.error = null;
+				});
+				try {
+					const response = await this.api.settings.mutate(PERMISSION_SETTINGS_NS, [{
+						op: "set",
+						path: ["defaultPreset"],
+						value: preset
+					}], view.revision);
+					if (!response.ok) throw new Error(response.error.message);
+					this.saving = false;
+					if (this.disposed) return;
+					this.describeFace.acceptView(response.value);
+				} catch (error) {
+					this.saving = false;
+					if (this.disposed) return;
+					this.fail(error);
+				}
+			}
+			/** Stop following the mirror; later publishes leave the snapshot alone. */
+			dispose() {
+				this.disposed = true;
+				this.following?.();
+				this.following = void 0;
+			}
+			derive() {
+				if (this.disposed || this.saving) return;
+				const mirrored = this.describeFace.getSnapshot();
+				if (mirrored.status === "unavailable") {
+					this.store.update((state) => {
+						state.status = "unavailable";
+						state.writable = false;
+						state.currentValue = "";
+						state.options = [];
+					});
+					return;
+				}
+				if (mirrored.view === void 0) {
+					if (mirrored.error !== null) this.fail(new Error(mirrored.error));
+					return;
+				}
+				const view = mirrored.view.namespaces.find((entry) => entry.ns === PERMISSION_SETTINGS_NS);
+				if (view === void 0) {
+					this.store.update((state) => {
+						state.status = "unavailable";
+						state.writable = false;
+						state.currentValue = "";
+						state.options = [];
+					});
+					return;
+				}
+				try {
+					const resolved = permissionDefaultOf(view, this.schema);
+					const { writable } = mirrored.view;
+					this.store.update((state) => {
+						state.status = "ready";
+						state.error = null;
+						state.writable = writable;
+						state.currentValue = resolved.currentValue;
+						state.options = resolved.options;
+						state.revision = view.revision;
+					});
+				} catch (error) {
+					this.fail(error);
+				}
+			}
+			fail(error) {
+				this.store.update((state) => {
+					state.status = "error";
+					state.error = error instanceof Error ? error.message : String(error);
+				});
+			}
+		};
+		//#endregion
+		//#region lib/types/client/index.js
+		/** Required services (cordis fiber inject). */
+		const inject = [
+			"commandUi",
+			"sessions",
+			"slots",
+			"locale",
+			"remote",
+			"remote.settings",
+			"settingsScope",
+			"settingsSchema"
+		];
+		const ACCESS_NS = "permission.access";
+		/** Read one session's current permissions projection value (undefined = capability absent). */
+		function selectOf(session) {
+			return session?.projections.faceOf("permissions").getSnapshot();
+		}
+		/** Flatten the projection select into popup rows; `custom` is display state, never a target. */
+		function optionsOf(value, t) {
+			return value.options.filter((option) => option.value !== "custom").map((option) => ({
+				id: option.value,
+				label: displayPermissionPreset(option.value, option.name),
+				...option.description !== void 0 ? { detail: option.description } : {},
+				...option.value === value.currentValue ? { active: true } : {},
+				...option.value === "danger-full-access" ? { confirmation: {
+					title: t("confirm.title"),
+					description: t("confirm.description"),
+					acknowledgeLabel: t("confirm.acknowledge"),
+					cancelLabel: t("confirm.cancel"),
+					confirmLabel: t("confirm.enable")
+				} } : {}
+			}));
+		}
+		/**
+		* Client plugin body: register the /permission popup picker over the
+		* permissions projection.
+		* @param ctx - client root context.
+		*/
+		function apply(ctx) {
+			const command = ctx.get("commandUi");
+			const sessions = ctx.sessions;
+			ctx.effect(() => {
+				const disposers = [ctx.locale.register(ACCESS_NS, "zh", {
+					"confirm.title": accessZh["confirm.title"],
+					"confirm.description": accessZh["confirm.description"],
+					"confirm.acknowledge": accessZh["confirm.acknowledge"],
+					"confirm.cancel": accessZh["confirm.cancel"],
+					"confirm.enable": accessZh["confirm.enable"]
+				}), ctx.locale.register(ACCESS_NS, "en", {
+					"confirm.title": accessEn["confirm.title"],
+					"confirm.description": accessEn["confirm.description"],
+					"confirm.acknowledge": accessEn["confirm.acknowledge"],
+					"confirm.cancel": accessEn["confirm.cancel"],
+					"confirm.enable": accessEn["confirm.enable"]
+				})];
+				return () => {
+					for (const dispose of disposers) dispose();
+				};
+			}, "ui-permission: Full access confirmation dictionaries");
+			const t = ctx.locale.bind(ACCESS_NS);
+			const sessionFor = (session) => sessions.binding(session.sessionId)?.session;
+			ctx.effect(() => ctx.locale.register("settings.permission", {
+				zh,
+				en
+			}), "ui-permission: settings row dictionaries");
+			const controller = new PermissionPresetSettingsController(ctx.settingsScope.describe(), { settings: ctx.remote.settings }, ctx.settingsSchema);
+			const load = () => controller.load();
+			const select = (preset) => controller.select(preset);
+			const injected = () => ({
+				hooks: { permission: controller.store },
+				load,
+				select
+			});
+			ctx.effect(() => () => {
+				controller.dispose();
+			}, "ui-permission: settings row directory");
+			ctx.slots.inject("settings.general.item", () => ctx.slots.register({
+				name: "settings.general.item",
+				id: "permission",
+				order: -20,
+				locale: "settings.permission",
+				inject: injected
+			}, PermissionRow));
+			ctx.effect(() => command.decorate({
+				name: "permission",
+				available: (session) => selectOf(sessionFor(session)) !== void 0,
+				ui: {
+					kind: "popupSelect",
+					options: (session) => {
+						const value = selectOf(sessionFor(session));
+						if (value === void 0) throw new Error("permission presets are not available on this host");
+						return Promise.resolve(optionsOf(value, t));
+					},
+					onSelect: async (option, session) => {
+						const live = sessionFor(session);
+						if (live === void 0) throw new Error("this session is not materialized yet");
+						const result = await live.command(`/permission ${option.id}`);
+						if (!result.ok) throw new Error(`permission switch failed: ${result.error.code}: ${result.error.message}`);
+						if (!result.value.matched) throw new Error("the host offers no /permission command");
+					}
+				}
+			}), "ui-permission: /permission decoration");
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});
+
+//# sourceMappingURL=client.js.map

package/lib/index.js

@@ -0,0 +1,11 @@
+//#region lib/types/index.js
+/**
+* Permission surfaces plugin, node half. The empty apply exists so the plugin
+* appears in the host cordis.yml / Loader; the browser half ships the
+* new-session Settings row and current-session command picker through
+* exports["./client"], discovered from the package.json dsh.client declaration.
+*/
+/** Host plugin body — no host-side behavior for this surface plugin. */
+function apply() {}
+//#endregion
+export { apply };

package/lib/invariant.js

@@ -0,0 +1,24 @@
+//#region lib/types/invariant.js
+/**
+* Package-owned invariant companion for `@prettier-ai/dsh-client-ui-permission-presets`.
+* @module @prettier-ai/dsh-client-ui-permission-presets/invariant
+*/
+const PACKAGE_NAME = "@prettier-ai/dsh-client-ui-permission-presets";
+/** Cordis companion plugin name. */
+const name = "client-ui-permission-presets-invariant";
+/** Service required before the companion can reserve package ownership. */
+const inject = ["invariants"];
+/**
+* No runtime invariant: the command and slot contribution lifecycles are
+* proven by the HMR-safety spec, while the browser-only Settings controller
+* owns no host events or cross-plugin mutable state.
+*/
+const install = () => {};
+/**
+* Register this package's invariant companion.
+* @param ctx - Cordis context carrying the invariant service.
+* @returns the installed registration's disposer after setup succeeds.
+*/
+const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
+//#endregion
+export { apply, inject, name };

package/lib/types/client/PermissionRow.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Permission preference row: the default preset for subsequently created
+ * sessions. Current-session switches remain on the composer `/permission`
+ * control.
+ */
+import type { SnapshotStore } from '@prettier-ai/dsh-client-store';
+import type { InjectFace, PropsLocale, PropsRuntime } from '@prettier-ai/dsh-client-ui-slots';
+import type { PermissionSettingsState } from './settings-store.ts';
+import type { PermissionSettingsKey } from './locales.ts';
+/** Registration-side business face for the host-backed preference. */
+export interface PermissionRowInjected {
+    hooks: {
+        /** Permission settings snapshot bound by the renderer as usePermission. */
+        permission: SnapshotStore<PermissionSettingsState>;
+    };
+    /** Load the descriptor when the row first renders. */
+    load: () => Promise<void>;
+    /** Persist one advertised preset. */
+    select: (preset: string) => Promise<void>;
+}
+/** Full component props. */
+export type PermissionRowProps = PropsRuntime<'settings.general.item'> & PropsLocale<'settings.permission'> & InjectFace<PermissionRowInjected>;
+/**
+ * Render the new-session Permission default selector.
+ * @param props - composed slot props.
+ * @returns the row, or null when the host does not expose permission settings.
+ */
+export declare function PermissionRow({ load, select, usePermission, t }: PermissionRowProps): import("react").JSX.Element | null;
+declare module '@prettier-ai/dsh-client-ui-slots' {
+    interface LocaleNamespaceMap {
+        /** Permission row copy. */
+        'settings.permission': PermissionSettingsKey;
+    }
+}
+//# sourceMappingURL=PermissionRow.d.ts.map

package/lib/types/client/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Permission preset plugin, browser half — a popupSelect DECORATION hung on
+ * the host `/permission` command: one flat list of presets, current value
+ * marked active, a pick executes the switch. The decoration owns only the
+ * bare invocation; the host command keeps its catalog row, the argued path
+ * (`/permission <preset>` still switches directly), and the lifecycle
+ * logging. Options and the active mark read the session's `permissions`
+ * projection (the same host-computed select the composer chip renders); a
+ * pick submits the `/permission <preset>` command line, so both surfaces
+ * write through one path and the pushed projection frame is the one
+ * confirmation. The Full access row carries the same explicit risk gate as
+ * the composer chip; the shared popup shell owns the modal mechanics.
+ * The General-settings row separately writes the default preset for sessions
+ * created later through the host Settings API.
+ */
+import type { Context as ClientContext } from '@prettier-ai/cordis';
+export type { PermissionRowInjected, PermissionRowProps } from './PermissionRow.tsx';
+export type { PermissionDefaultOption, PermissionSettingsState, } from './settings-store.ts';
+/** Required services (cordis fiber inject). */
+export declare const inject: string[];
+/**
+ * Client plugin body: register the /permission popup picker over the
+ * permissions projection.
+ * @param ctx - client root context.
+ */
+export declare function apply(ctx: ClientContext): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/client/locales.d.ts

@@ -0,0 +1,46 @@
+/** `settings.permission` namespace dictionaries (the Permission row's copy). */
+/** Simplified Chinese dictionary (the key-set source of truth). */
+export declare const zh: {
+    title: string;
+    description: string;
+    loading: string;
+    unavailable: string;
+    'confirm.title': string;
+    'confirm.description': string;
+    'confirm.acknowledge': string;
+    'confirm.cancel': string;
+    'confirm.enable': string;
+};
+/** The settings.permission namespace key union. */
+export type PermissionSettingsKey = keyof typeof zh;
+/** English dictionary, checked complete against the zh key set. */
+export declare const en: {
+    title: string;
+    description: string;
+    loading: string;
+    unavailable: string;
+    'confirm.title': string;
+    'confirm.description': string;
+    'confirm.acknowledge': string;
+    'confirm.cancel': string;
+    'confirm.enable': string;
+};
+/** Simplified Chinese dictionary for the current-session popup gate. */
+export declare const accessZh: {
+    'confirm.title': string;
+    'confirm.description': string;
+    'confirm.acknowledge': string;
+    'confirm.cancel': string;
+    'confirm.enable': string;
+};
+/** Current-session popup-gate key union. */
+export type PermissionAccessKey = keyof typeof accessZh;
+/** English dictionary for the current-session popup gate. */
+export declare const accessEn: {
+    'confirm.title': string;
+    'confirm.description': string;
+    'confirm.acknowledge': string;
+    'confirm.cancel': string;
+    'confirm.enable': string;
+};
+//# sourceMappingURL=locales.d.ts.map

package/lib/types/client/presentation.d.ts

@@ -0,0 +1,16 @@
+/** Machine value of the preset that requires an explicit GUI risk gate. */
+export declare const FULL_ACCESS_PRESET = "danger-full-access";
+/**
+ * Convert conventional kebab-case preset names into user-facing title case.
+ * @param name - host-supplied preset label or key.
+ * @returns the title-cased conventional key, or a non-kebab label unchanged.
+ */
+export declare function displayPresetName(name: string): string;
+/**
+ * Render a permission preset under its product label.
+ * @param value - preset machine value.
+ * @param name - host-supplied preset name.
+ * @returns the Full access product label or the conventional display name.
+ */
+export declare function displayPermissionPreset(value: string, name: string): string;
+//# sourceMappingURL=presentation.d.ts.map

package/lib/types/client/settings-store.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Permission default-settings controller. The permission descriptor comes
+ * from the shared describe mirror (the dynamic preset enum lives in the
+ * namespace schema, which per-namespace scopes do not carry); writes target
+ * only `defaultPreset`, carry the descriptor revision, and fold their answer
+ * back into the mirror.
+ */
+import type { SettingsNamespaceView } from '@prettier-ai/dsh-api-remotes/client';
+import { type SnapshotStore } from '@prettier-ai/dsh-client-store';
+import type { SettingsDescribeFace, SettingsSchemaService, SettingsWireFace } from '@prettier-ai/dsh-client-ui-settings/client';
+/** Permission's settings namespace on the host wire. */
+export declare const PERMISSION_SETTINGS_NS = "permission";
+/** One selectable new-session default. */
+export interface PermissionDefaultOption {
+    /** Preset key written to Settings. */
+    id: string;
+    /** Host-supplied label or a title-cased preset key. */
+    label: string;
+}
+/** Permission settings-row snapshot. */
+export interface PermissionSettingsState {
+    status: 'idle' | 'loading' | 'ready' | 'saving' | 'unavailable' | 'error';
+    error: string | null;
+    writable: boolean;
+    currentValue: string;
+    options: readonly PermissionDefaultOption[];
+    revision: number;
+}
+/**
+ * Read the dynamic preset enum encoded by the host's `defaultPreset` schema.
+ * @param view - permission namespace descriptor.
+ * @param schema - settings schema operations.
+ * @returns current value and selectable options.
+ */
+export declare function permissionDefaultOf(view: SettingsNamespaceView, schema: SettingsSchemaService): {
+    currentValue: string;
+    options: PermissionDefaultOption[];
+};
+/** Controller deriving the row from the shared mirror and writing the default through it. */
+export declare class PermissionPresetSettingsController {
+    private readonly describeFace;
+    private readonly api;
+    private readonly schema;
+    /** Row snapshot consumed through a bound selector hook. */
+    readonly store: SnapshotStore<PermissionSettingsState>;
+    private following;
+    private saving;
+    private disposed;
+    /**
+     * @param describeFace - the shared mirror's read/fold face (descriptor and schema source).
+     * @param api - settings wire face for the `defaultPreset` write.
+     * @param schema - settings-owned schema operations.
+     */
+    constructor(describeFace: SettingsDescribeFace, api: SettingsWireFace, schema: SettingsSchemaService);
+    /**
+     * Begin following the mirror (idempotent) and reflect its current answer.
+     * @returns settlement once the snapshot reflects the mirror.
+     */
+    load(): Promise<void>;
+    /**
+     * Persist one preset as the default for subsequently created sessions.
+     * A selection made while one is already saving is ignored — the row's
+     * control is disabled during the save, so this only drops programmatic
+     * double-submits rather than user intent.
+     * @param preset - advertised preset key.
+     * @returns nothing; {@link store} carries success or failure.
+     */
+    select(preset: string): Promise<void>;
+    /** Stop following the mirror; later publishes leave the snapshot alone. */
+    dispose(): void;
+    private derive;
+    private fail;
+}
+//# sourceMappingURL=settings-store.d.ts.map

package/lib/types/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Permission surfaces plugin, node half. The empty apply exists so the plugin
+ * appears in the host cordis.yml / Loader; the browser half ships the
+ * new-session Settings row and current-session command picker through
+ * exports["./client"], discovered from the package.json dsh.client declaration.
+ */
+/** Host plugin body — no host-side behavior for this surface plugin. */
+export declare function apply(): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/invariant.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Package-owned invariant companion for `@prettier-ai/dsh-client-ui-permission-presets`.
+ * @module @prettier-ai/dsh-client-ui-permission-presets/invariant
+ */
+import type { Context } from '@prettier-ai/cordis';
+/** Cordis companion plugin name. */
+export declare const name = "client-ui-permission-presets-invariant";
+/** Service required before the companion can reserve package ownership. */
+export declare const inject: string[];
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Cordis context carrying the invariant service.
+ * @returns the installed registration's disposer after setup succeeds.
+ */
+export declare const apply: (ctx: Context) => Promise<() => void>;
+//# sourceMappingURL=invariant.d.ts.map

package/package.json

@@ -0,0 +1,87 @@
+{
+  "name": "@prettier-ai/dsh-client-ui-permission-presets",
+  "description": "Permission surfaces: a new-session default in General settings and a current-session /permission popup over the permissions projection",
+  "version": "0.1.2-alpha.1",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/deepseek-ai/deepseek-harness.git",
+    "directory": "packages/client/ui-permission-presets"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./invariant": {
+      "types": "./lib/types/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "dsh": {
+    "client": {
+      "inject": [
+        "@prettier-ai/dsh-api-session-controller",
+        "@prettier-ai/dsh-client-locale",
+        "@prettier-ai/dsh-client-ui-commands",
+        "@prettier-ai/dsh-api-remotes",
+        "@prettier-ai/dsh-client-ui-settings"
+      ],
+      "platform": "web"
+    }
+  },
+  "license": "MIT",
+  "peerDependencies": {
+    "@prettier-ai/dsh-api-remotes": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-api-session-controller": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-ui-commands": "^0.1.2-alpha.1",
+    "@prettier-ai/cordis": "^4.0.1",
+    "@prettier-ai/dsh-client-ui-input-trigger": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-ui-settings": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-invariants": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-permission-presets": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-locale": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-ui-session": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-ui-renderer": "^0.1.2-alpha.1"
+  },
+  "devDependencies": {
+    "@types/react": "~18.3.1",
+    "react": "^18.2.0",
+    "@prettier-ai/cordis": "^4.0.1",
+    "@prettier-ai/dsh-api-session-controller": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-api-remotes": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-locale": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-store": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-test-runtime": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-ui-commands": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-ui-settings": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-ui-primitives": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-ui-input-trigger": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-ui-slots": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-invariants": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-ui-renderer": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-permission-presets": "^0.1.2-alpha.1",
+    "@prettier-ai/dsh-client-ui-session": "^0.1.2-alpha.1"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/invariant.js",
+    "lib/client.js",
+    "lib/types/**/*.d.ts"
+  ],
+  "scripts": {
+    "bundle": "tsdown",
+    "watch": "tsdown --watch"
+  }
+}