@t4r71/dsh-dual-axis-ui 0.1.0

package/lib/client.js

@@ -0,0 +1,3401 @@
+window.__ModuleLoader__.load({
+	id: "@t4r71/dsh-dual-axis-ui",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		let react = require("react");
+		let _deepseek_ai_dsh_client_store = require("@deepseek-ai/dsh-client-store");
+		let react_jsx_runtime = require("react/jsx-runtime");
+		let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
+		//#region lib/types/client/permission/catalog.js
+		/** Identity-stable process permission catalog shared by both selection surfaces. */
+		/** One latest-result-wins catalog reader for the whole browser process. */
+		var PermissionCatalogDirectory = class {
+			ctx;
+			/** Complete snapshot consumed by both the slash popup and composer seat. */
+			store = (0, _deepseek_ai_dsh_client_store.createSnapshotStore)({ value: null });
+			/**
+			* One tick per invalidation (a catalog notification or a connection-generation
+			* change), published before the replacement read starts. Consumers that must
+			* drop displayed options subscribe here instead of to {@link store}, whose
+			* publications also settle a read a displayed surface is waiting for.
+			*/
+			invalidations = (0, _deepseek_ai_dsh_client_store.createSnapshotStore)({ count: 0 });
+			connection;
+			stopCatalog;
+			stopGeneration;
+			generationId;
+			initialized = false;
+			epoch = 0;
+			pending;
+			failure = /* @__PURE__ */ new Error("permission catalog has no complete value");
+			disposed = false;
+			/**
+			* Subscribe to both invalidation sources before the first read, closing the
+			* install/read race.
+			* @param ctx - root Client context carrying Remote and Connection.
+			*/
+			constructor(ctx) {
+				this.ctx = ctx;
+				this.connection = ctx.get("connection");
+				this.stopCatalog = ctx.remote.$on("permission-presets/catalog-changed", () => {
+					this.invalidate();
+					this.refresh();
+				});
+				this.stopGeneration = this.connection.generation.subscribe(() => {
+					this.syncGeneration();
+				});
+				this.syncGeneration();
+			}
+			/**
+			* Publish one invalidation tick for consumers holding displayed options.
+			* Neither caller can run after disposal: `dispose()` unsubscribes the
+			* catalog-changed listener, and `syncGeneration()` returns early when the
+			* directory is disposed.
+			*/
+			invalidate() {
+				this.invalidations.set({ count: this.invalidations.getSnapshot().count + 1 });
+			}
+			/** Force a fresh complete read for the active connection generation. */
+			refresh() {
+				if (this.disposed) return;
+				const generationId = this.connection.generation.getSnapshot()?.id;
+				if (generationId === void 0) return;
+				if (generationId !== this.generationId) {
+					this.syncGeneration();
+					return;
+				}
+				this.startRead(generationId);
+			}
+			/**
+			* Resolve a complete current-generation catalog for an imperative popup
+			* open. An active refresh settles before a retained value can be reused.
+			* @returns The active Host generation's complete permission catalog.
+			*/
+			async load() {
+				if (this.pending === void 0 && this.store.getSnapshot().value === null) this.refresh();
+				while (!this.disposed) {
+					const generationId = this.connection.generation.getSnapshot()?.id;
+					if (generationId === void 0) throw new Error("permission catalog has no active Host connection");
+					if (generationId !== this.generationId) this.syncGeneration();
+					const pending = this.pending;
+					if (pending !== void 0) {
+						await pending;
+						continue;
+					}
+					const state = this.store.getSnapshot();
+					if (state.value !== null) return state.value;
+					throw this.failure;
+				}
+				throw new Error("permission catalog directory is disposed");
+			}
+			/** Stop subscriptions and revoke every late settlement's write access. */
+			dispose() {
+				if (this.disposed) return;
+				this.disposed = true;
+				++this.epoch;
+				this.pending = void 0;
+				this.stopGeneration();
+				this.stopCatalog();
+			}
+			/** Observe generation loss/replacement and hard-clear the old Host value. */
+			syncGeneration() {
+				if (this.disposed) return;
+				const generationId = this.connection.generation.getSnapshot()?.id;
+				if (this.initialized && generationId === this.generationId) return;
+				if (this.initialized) this.invalidate();
+				this.initialized = true;
+				this.generationId = generationId;
+				++this.epoch;
+				this.pending = void 0;
+				this.failure = /* @__PURE__ */ new Error("permission catalog has no complete value");
+				this.store.set({ value: null });
+				if (generationId !== void 0) this.startRead(generationId);
+			}
+			/** Start one independent read; the newest epoch in the same generation wins. */
+			startRead(generationId) {
+				const epoch = ++this.epoch;
+				this.failure = /* @__PURE__ */ new Error("permission catalog has no complete value");
+				const operation = this.ctx.remote.permissionPresets.catalog().then((result) => {
+					if (!result.ok) throw new Error(`${result.error.code}: ${result.error.message}`);
+					if (!this.accepts(epoch, generationId)) return;
+					this.store.set({ value: result.value });
+				}).catch((error) => {
+					if (!this.accepts(epoch, generationId)) return;
+					this.failure = error instanceof Error ? error : new Error(String(error));
+					this.store.set({ value: null });
+				}).finally(() => {
+					if (this.pending === operation) this.pending = void 0;
+				});
+				this.pending = operation;
+			}
+			/** Fence by disposal, refresh epoch, and the actual Connection generation. */
+			accepts(epoch, generationId) {
+				return !this.disposed && epoch === this.epoch && generationId === this.generationId && this.connection.generation.getSnapshot()?.id === generationId;
+			}
+		};
+		//#endregion
+		//#region ../../node_modules/.pnpm/clsx@2.1.1/node_modules/clsx/dist/clsx.mjs
+		function r(e) {
+			var t, f, n = "";
+			if ("string" == typeof e || "number" == typeof e) n += e;
+			else if ("object" == typeof e) if (Array.isArray(e)) {
+				var o = e.length;
+				for (t = 0; t < o; t++) e[t] && (f = r(e[t])) && (n && (n += " "), n += f);
+			} else for (f in e) e[f] && (n && (n += " "), n += f);
+			return n;
+		}
+		function clsx() {
+			for (var e, t, f = 0, n = "", o = arguments.length; f < o; f++) (e = arguments[f]) && (t = r(e)) && (n && (n += " "), n += t);
+			return n;
+		}
+		//#endregion
+		//#region lib/types/client/permission/locales.js
+		/** `settings.permission` namespace dictionaries (the Permission row's copy). */
+		/** Locale namespace shared by both current-session permission pickers. */
+		const PERMISSION_ACCESS_NS = "permission.access";
+		/** Simplified Chinese dictionary (the key-set source of truth). */
+		const zh$1 = {
+			"title": "权限",
+			"description": "选择新会话的默认权限模式",
+			"loading": "加载中",
+			"unavailable": "不可用",
+			"preset.readOnly": "仅可查看",
+			"preset.workspaceWrite": "工作区内修改",
+			"preset.fullAccess": "完全权限"
+		};
+		/** English dictionary, checked complete against the zh key set. */
+		const en$1 = {
+			"title": "Permission",
+			"description": "Choose the default permission mode for new sessions",
+			"loading": "Loading",
+			"unavailable": "Unavailable",
+			"preset.readOnly": "Read Only",
+			"preset.workspaceWrite": "Workspace Write",
+			"preset.fullAccess": "Full access"
+		};
+		/**
+		* Simplified Chinese dictionary for the two current-session axis pickers. Each
+		* axis is a four-value dropdown (`deny / workspace / all / custom`), and the two
+		* dropdowns must stay unambiguous for assistive technology, for role-based
+		* locators, and for the eye: the two pickers sit side by side with no visible
+		* caption, so every value states its own axis in the copy itself. `custom` is the
+		* one shared value — "自定义" opens a path editor whose contents say which axis it
+		* belongs to, and the two pickers are already told apart by the other three.
+		*/
+		const accessZh = {
+			"axis.read.deny": "禁止读",
+			"axis.read.workspace": "工作区读",
+			"axis.read.all": "全盘读",
+			"axis.write.deny": "禁止写",
+			"axis.write.workspace": "工作区写",
+			"axis.write.all": "全盘写",
+			"axis.custom": "自定义",
+			"axis.unknown": "未设置",
+			"editor.readTitle": "读取权限 · 自定义路径",
+			"editor.writeTitle": "写入权限 · 自定义路径",
+			"editor.base": "底座",
+			"editor.readBase": "读取权限的底座",
+			"editor.writeBase": "写入权限的底座",
+			"editor.baseDeny": "概不允许",
+			"editor.baseWorkspace": "会话工作区",
+			"editor.baseAll": "整台主机",
+			"editor.allow": "额外放行的绝对路径（每行一条）",
+			"editor.readAllow": "读取权限额外放行的绝对路径",
+			"editor.writeAllow": "写入权限额外放行的绝对路径",
+			"editor.deny": "排除的绝对路径（每行一条，优先于放行）",
+			"editor.readDeny": "读取权限排除的绝对路径",
+			"editor.writeDeny": "写入权限排除的绝对路径",
+			"editor.hint": "允许的范围 = 底座 + 放行 − 排除；一条路径同时出现在两边时，排除优先。",
+			"editor.submit": "应用",
+			"editor.sending": "提交中…",
+			"editor.cancel": "取消",
+			"editor.failed": "宿主没有接受这次改动：自定义路径需要审批，未获批准时不写入。",
+			"editor.notStored": "宿主执行了这条命令，但设置文档里没有出现这次改动：它被拒绝了。下拉仍显示当刻生效的取值。",
+			"editor.problemBase": "未知的底座。",
+			"editor.problemPath": "路径必须是绝对路径（以斜杠、盘符或双反斜杠开头）。",
+			"editor.problemComma": "路径里不能含逗号：宿主用逗号分隔参数。",
+			"editor.groups": "规则组（可多选，也可以一个都不选）",
+			"editor.groupBoth": "读 + 写",
+			"editor.groupRead": "仅读侧",
+			"editor.groupWrite": "仅写侧",
+			"editor.groupNone": "两侧都没有规则",
+			"editor.groupMissing": "设置页没有定义这个 id",
+			"editor.groupsEmpty": "设置页还没有定义规则组。",
+			"narrowing.title": "写轴被读轴收窄",
+			"narrowing.body": "实际生效的写范围 = 写轴 ∩ 读轴。下面这些根本来由写轴放行，读轴不覆盖它们，因此写不进去。",
+			"narrowing.removed": "读轴从写范围里削掉了：{roots}",
+			"narrowing.none": "（没有）",
+			"narrowing.lostUnbounded": "写轴本来无界（整台主机），现在被收成读轴的范围。",
+			"narrowing.marker": "{title}：{removed}",
+			"editor.problemGroupId": "选中的规则组 id 里含分隔符（竖线、逗号或等号），宿主读不出这个 id。请到设置页改掉这个 id。",
+			"readLabel": "读取权限，当前：{name}",
+			"writeLabel": "写入权限，当前：{name}",
+			"customSummary": "自定义路径，基于{base}",
+			"customAllow": "额外允许：{paths}",
+			"customDeny": "额外禁止：{paths}",
+			"customNone": "无",
+			"close": "关闭",
+			"preset.readOnly": "仅可查看",
+			"preset.workspaceWrite": "工作区内修改",
+			"preset.fullAccess": "完全权限",
+			"confirm.title": "确认放开权限？",
+			"confirm.description": "这次改动会把该条访问轴放到「整台主机」或额外的绝对路径上，后续操作将减少确认步骤，并且可以直接执行更多操作，包括敏感操作、文件修改或外部命令。仅建议在你信任后续任务时使用。",
+			"confirm.acknowledge": "我已了解风险，并愿意继续",
+			"confirm.cancel": "取消",
+			"confirm.enable": "确认放开"
+		};
+		/** English dictionary for the two current-session axis pickers. */
+		const accessEn = {
+			"axis.read.deny": "Deny read",
+			"axis.read.workspace": "Read workspace",
+			"axis.read.all": "Read all",
+			"axis.write.deny": "Deny write",
+			"axis.write.workspace": "Write workspace",
+			"axis.write.all": "Write all",
+			"axis.custom": "Custom",
+			"axis.unknown": "Not set",
+			"editor.readTitle": "Read access · custom paths",
+			"editor.writeTitle": "Write access · custom paths",
+			"editor.base": "Base",
+			"editor.readBase": "Read access base",
+			"editor.writeBase": "Write access base",
+			"editor.baseDeny": "Deny everything",
+			"editor.baseWorkspace": "Session workspace",
+			"editor.baseAll": "The whole host",
+			"editor.allow": "Additional allowed absolute paths (one per line)",
+			"editor.readAllow": "Absolute paths read access also allows",
+			"editor.writeAllow": "Absolute paths write access also allows",
+			"editor.deny": "Excluded absolute paths (one per line, they win)",
+			"editor.readDeny": "Absolute paths read access excludes",
+			"editor.writeDeny": "Absolute paths write access excludes",
+			"editor.hint": "Allowed = base + allowed − excluded; when a path is on both lists, the exclusion wins.",
+			"editor.submit": "Apply",
+			"editor.sending": "Applying…",
+			"editor.cancel": "Cancel",
+			"editor.failed": "The host refused this change: custom paths need approval, and nothing is written without it.",
+			"editor.notStored": "The host ran the command but the settings document never showed this change, so it was refused. The dropdown still shows the value in force.",
+			"editor.problemBase": "Unknown base.",
+			"editor.problemPath": "A path must be absolute (start with a slash, a drive letter, or a double backslash).",
+			"editor.problemComma": "A path cannot contain a comma: the host separates its arguments with commas.",
+			"editor.groups": "Rule groups (pick any number, or none at all)",
+			"editor.groupBoth": "read + write",
+			"editor.groupRead": "read side only",
+			"editor.groupWrite": "write side only",
+			"editor.groupNone": "no rules on either side",
+			"editor.groupMissing": "the settings page does not define this id",
+			"editor.groupsEmpty": "The settings page defines no rule groups yet.",
+			"narrowing.title": "The read axis narrowed the write axis",
+			"narrowing.body": "The write range in force is the write axis INTERSECTED with the read axis. These roots the write axis granted are not covered by the read axis, so nothing can be written there.",
+			"narrowing.removed": "The read axis removed these from the write range: {roots}",
+			"narrowing.none": "(none)",
+			"narrowing.lostUnbounded": "The write axis was unbounded (the whole host) and is now held to the read range.",
+			"narrowing.marker": "{title}: {removed}",
+			"editor.problemGroupId": "A selected rule-group id carries a separator (a bar, a comma, or an equals sign), so the host cannot read it back. Rename that id on the settings page.",
+			"readLabel": "Read access, current: {name}",
+			"writeLabel": "Write access, current: {name}",
+			"customSummary": "Custom paths over {base}",
+			"customAllow": "Also allowed: {paths}",
+			"customDeny": "Also denied: {paths}",
+			"customNone": "none",
+			"close": "Close",
+			"preset.readOnly": "Read Only",
+			"preset.workspaceWrite": "Workspace Write",
+			"preset.fullAccess": "Full access",
+			"confirm.title": "Widen access?",
+			"confirm.description": "This change puts that access axis on the whole host, or on additional absolute paths. Later actions reduce confirmation steps and can run more things directly, including sensitive operations, file changes, or external commands. Only use it when you trust subsequent tasks.",
+			"confirm.acknowledge": "I understand the risks and want to continue",
+			"confirm.cancel": "Cancel",
+			"confirm.enable": "Widen access"
+		};
+		//#endregion
+		//#region lib/types/client/permission/presentation.js
+		/** Every value the axes offer, in the dropdowns' display order. */
+		const AXIS_VALUES = [
+			"deny",
+			"workspace",
+			"all",
+			"custom"
+		];
+		/**
+		* Narrow one axis's wire kind to a value the dropdowns can show.
+		* @param kind - the kind field as it arrives on the wire.
+		* @returns one of the four values, or undefined when the kind is unrecognized.
+		*/
+		function axisValueOf$2(kind) {
+			return AXIS_VALUES.includes(kind) ? kind : void 0;
+		}
+		const AXIS_LABEL_KEYS = {
+			read: {
+				"deny": "axis.read.deny",
+				"workspace": "axis.read.workspace",
+				"all": "axis.read.all",
+				"custom": "axis.custom"
+			},
+			write: {
+				"deny": "axis.write.deny",
+				"workspace": "axis.write.workspace",
+				"all": "axis.write.all",
+				"custom": "axis.custom"
+			}
+		};
+		/** English fallback per axis label, read from the dictionary that owns the copy. */
+		const DEFAULT_AXIS_LABELS = {
+			"axis.read.deny": accessEn["axis.read.deny"],
+			"axis.read.workspace": accessEn["axis.read.workspace"],
+			"axis.read.all": accessEn["axis.read.all"],
+			"axis.write.deny": accessEn["axis.write.deny"],
+			"axis.write.workspace": accessEn["axis.write.workspace"],
+			"axis.write.all": accessEn["axis.write.all"],
+			"axis.custom": accessEn["axis.custom"],
+			"axis.unknown": accessEn["axis.unknown"]
+		};
+		const PRESET_LABEL_KEYS = /* @__PURE__ */ new Map([
+			["read-only", "preset.readOnly"],
+			["workspace-write", "preset.workspaceWrite"],
+			["danger-full-access", "preset.fullAccess"]
+		]);
+		/**
+		* English built-in preset labels, read from the dictionary that owns the copy
+		* so a host-supplied machine value still renders as product copy on a surface
+		* that has no locale seat.
+		*/
+		const DEFAULT_PRESET_LABELS = {
+			"preset.readOnly": en$1["preset.readOnly"],
+			"preset.workspaceWrite": en$1["preset.workspaceWrite"],
+			"preset.fullAccess": en$1["preset.fullAccess"]
+		};
+		/**
+		* Render one axis value under its product label. The axis is required because
+		* the two pickers share no visible caption, so the label itself says which axis
+		* it belongs to ("工作区读" under the read picker, "工作区写" under the write one).
+		* @param value - the axis value.
+		* @param axis - the axis the value belongs to, which selects the copy.
+		* @param t - optional locale dictionary lookup for the built-in labels.
+		* @returns the localized label, or the English label without a locale seat.
+		*/
+		function axisLabel(value, axis, t) {
+			const key = AXIS_LABEL_KEYS[axis][value];
+			return t?.(key) ?? DEFAULT_AXIS_LABELS[key];
+		}
+		/**
+		* The NAME half of one dropdown's trigger label: one word per value.
+		*
+		* A `custom` axis renders as the bare word and nothing else. It used to append
+		* its base and group count, which is how a group pick on an already-custom axis
+		* became visible; the trigger does not have room for that text, and the editor a
+		* `custom` pick opens states the base, the groups and both path lists in full,
+		* so the detail lives there instead of on the trigger. Nothing else observes the
+		* difference: a submission is judged by the stored record the read-back
+		* compares against, never by the trigger's text.
+		*
+		* An absent value (no stored record, or a kind this build does not know) says so
+		* instead of borrowing a value: the two dropdowns must render even when nothing
+		* can be claimed about the axis, and "未设置" is the honest label for that.
+		* @param value - the axis value to name, or `undefined` when there is none.
+		* @param axis - which axis this name belongs to.
+		* @param t - locale lookup for the label.
+		* @returns the name to interpolate into the trigger's `readLabel`/`writeLabel`.
+		*/
+		function axisValueName(value, axis, t) {
+			if (value === void 0) return t("axis.unknown");
+			return axisLabel(value, axis, (key) => t(key));
+		}
+		/**
+		* Build the write axis's narrowing notice.
+		* @param narrowing - the host's report, or `undefined` when there is none.
+		* @param t - locale lookup for every sentence.
+		* @returns the notice to render, or `undefined` when nothing was removed.
+		*/
+		function narrowingNotice(narrowing, t) {
+			if (narrowing === void 0 || !narrowing.narrowed) return void 0;
+			const roots = narrowing.droppedRoots.length === 0 ? t("narrowing.none") : narrowing.droppedRoots.join("\n");
+			const title = t("narrowing.title");
+			const removed = t("narrowing.removed", { roots });
+			return {
+				title,
+				removed,
+				lostUnbounded: narrowing.lostUnbounded ? t("narrowing.lostUnbounded") : "",
+				marked: true,
+				marker: t("narrowing.marker", {
+					title,
+					removed
+				})
+			};
+		}
+		/**
+		* Render a permission preset under its product label.
+		* @param value - preset machine value.
+		* @param name - host-supplied preset name.
+		* @param t - optional locale dictionary lookup for built-in product labels.
+		* @returns the localized built-in label, or the host's own name VERBATIM.
+		*/
+		function displayPermissionPreset(value, name, t) {
+			const key = PRESET_LABEL_KEYS.get(value);
+			if (key !== void 0 && (name === value || name === DEFAULT_PRESET_LABELS[key])) return t?.(key) ?? DEFAULT_PRESET_LABELS[key];
+			return name;
+		}
+		//#endregion
+		//#region lib/types/client/permission/axis-editor.js
+		/**
+		* 输入框上方两个访问轴下拉的 `custom` 路径编辑器：把一条轴收成可编辑的草稿、
+		* 把草稿收成宿主 `/permission` 命令接受的参数串，并给出全局初值与兜底默认值。
+		*
+		* 这里不碰 React、不碰 DOM、也不碰宿主 —— 界面半边每次展开编辑器与每次提交都走
+		* 这几个函数，因此"界面上能编的形状"与"宿主解析器接受的形状"只有这一份定义。
+		* 宿主的语法在 `dsh-dual-axis` 的 `parseAxisEntry` / `parseCustomFragment`：
+		* `<axis>:<kind>[:base=<deny|workspace|all>,groups=<id>|<id>,allow=<绝对路径>,deny=<绝对路径>]`，
+		* `allow` / `deny` 重复 key 表示多条、逗号分隔，路径必须是绝对路径；`groups` 只写
+		* **组 id**，组体由宿主在判定时按 id 现取。
+		*
+		* @module @deepseek-ai/dsh-client-ui-permission-presets/client/axis-editor
+		*/
+		/** `custom` 可叠加的三个底座，与宿主 `AxisBase` 同一套字面量。 */
+		const AXIS_BASES$2 = [
+			"deny",
+			"workspace",
+			"all"
+		];
+		/** 两个下拉里那个「整台主机」的取值；它就是要过二次确认闸的那一个。 */
+		const ALL_AXIS = "all";
+		/**
+		* 把设置节的 `groups` 读成多选用的组清单。
+		*
+		* 读取是宽容的：读不懂的成员跳过，不抛 —— 这个清单只是给人选的东西，坏取值由宿主
+		* 的 `parseLibrary` 在判定时响亮失败，界面不该因为一个坏成员就整块打不开。
+		* @param value - 设置节里的 `groups`，未信任。
+		* @returns 每个可用的组一项，顺序与文档一致，id 去重。
+		*/
+		function groupOptionsOf(value) {
+			if (!Array.isArray(value)) return [];
+			const options = [];
+			const seen = /* @__PURE__ */ new Set();
+			for (const entry of value) {
+				if (typeof entry !== "object" || entry === null) continue;
+				const candidate = entry;
+				if (typeof candidate.id !== "string" || candidate.id === "" || seen.has(candidate.id)) continue;
+				seen.add(candidate.id);
+				options.push({
+					id: candidate.id,
+					name: typeof candidate.name === "string" && candidate.name !== "" ? candidate.name : candidate.id,
+					read: candidate.read !== void 0 && candidate.read !== null,
+					write: candidate.write !== void 0 && candidate.write !== null
+				});
+			}
+			return options;
+		}
+		/**
+		* 多选列表的完整内容：设置页定义的组，加上这条对话已经引用、但设置页不再定义的 id。
+		*
+		* 后一类必须留在列表里并保持勾选：它们缺席就等于「打开编辑器再应用」会**静默**把
+		* 引用删掉，而宿主正是靠这些引用响亮失败的（规格 §「引用不到的组 id → 响亮失败」）。
+		* 取消勾选仍然允许 —— 移除一个引用属于收窄，永远允许。
+		* @param library - 设置页当前定义的组。
+		* @param selected - 这条对话预设里引用的 id。
+		* @returns 列表的每一行。
+		*/
+		function groupChoicesOf(library, selected) {
+			const choices = library.map((option) => ({
+				id: option.id,
+				name: option.name,
+				coverage: option.read && option.write ? "both" : option.read ? "read" : option.write ? "write" : "none",
+				missing: false,
+				checked: selected.includes(option.id)
+			}));
+			for (const id of selected) {
+				if (library.some((option) => option.id === id)) continue;
+				choices.push({
+					id,
+					name: id,
+					coverage: "none",
+					missing: true,
+					checked: true
+				});
+			}
+			return choices;
+		}
+		/**
+		* 某一轴拿不到任何配置时使用的兜底轴：读轴 `all`、写轴 `workspace`，
+		* 即 `dsh-sandbox` 的 `DEFAULT_READ_SCOPE` / `DEFAULT_WRITE_SCOPE`。
+		*
+		* 这两条是**部署默认值**，不是"兜底给全盘权限"：读轴 `all`、写轴 `workspace`
+		* 正是 `dsh-sandbox` 里那两条默认轴，所以拿不到全局配置时也不会把写权限放大。
+		* @param axis - 轴名。
+		* @returns 该轴的兜底取值。
+		*/
+		function fallbackAxis(axis) {
+			return axis === "read" ? "all" : "workspace";
+		}
+		/**
+		* 一条空白草稿：以给定取值起步，并以该取值本身为底座。
+		*
+		* 底座取"这条轴当前的取值"而不是写死的 `workspace`：拿不到任何全局配置时，读轴的
+		* 兜底是 `all`，于是编辑器的底座也必须是 `all` —— 若写死 `workspace`，兜底打开的
+		* 编辑器会静默把读轴收窄成会话工作区，与那条兜底值本身矛盾。
+		* @param kind - 起步取值，同时用作底座。
+		* @returns 一份可编辑的草稿。
+		*/
+		function emptyDraft(kind) {
+			return {
+				kind,
+				base: AXIS_BASES$2.includes(kind) ? kind : "workspace",
+				groups: [],
+				allow: "",
+				deny: ""
+			};
+		}
+		/**
+		* 一条轴的起始草稿：**这条会话自己的轴**优先，它缺席时才退到部署设置值，再没有
+		* 才用该轴的部署默认值。它永远不会空着打开，也永远不抛 —— 兜底就是这个函数的
+		* 全部意义。
+		*
+		* 「会话优先」不是顺序偏好而是这个界面的定义：编辑器表达的就是这条会话，打开时
+		* 显示别的值会与它旁边那个下拉自相矛盾。会话读轴是 `deny` 时初值必须是 `deny`，
+		* 不是部署默认的 `all`。
+		* @param axis - 正在编辑的轴。
+		* @param current - 这条会话在该轴上的取值，宿主投影还没有这条轴时为 undefined。
+		* @param global - 部署设置在该轴上的取值，只在会话没有取值时兜底。
+		* @returns 一份不用重打任何东西就能提交的草稿。
+		*/
+		function initialDraft(axis, current, global) {
+			const source = current ?? global;
+			if (source === void 0) return emptyDraft(fallbackAxis(axis));
+			if (source.kind !== "custom") return {
+				kind: "custom",
+				base: AXIS_BASES$2.includes(source.kind) ? source.kind : "workspace",
+				groups: [],
+				allow: "",
+				deny: ""
+			};
+			return {
+				kind: "custom",
+				base: AXIS_BASES$2.includes(source.base ?? "") ? source.base : "workspace",
+				groups: [...source.groups ?? []],
+				allow: (source.allow ?? []).join("\n"),
+				deny: (source.deny ?? []).join("\n")
+			};
+		}
+		/** 一条绝对路径写法（POSIX 或 Windows）。与宿主的 `isAbsoluteSpelling` 同一条规则。 */
+		const POSIX_ABSOLUTE = /^\//u;
+		/** Windows 盘符或 UNC 写法。 */
+		const WINDOWS_ABSOLUTE = /^(?:[A-Za-z]:[\\/]|\\\\)/u;
+		/**
+		* 一个写法是否为绝对路径。相对路径只能相对宿主进程的 cwd 解析，永远不是写这份配置
+		* 的人想说的位置，所以与宿主一样在这里就拒绝，而不是留给宿主报一句难读的错。
+		* @param value - 待检查的路径写法。
+		* @returns 该写法是否为绝对路径。
+		*/
+		function isAbsolutePath$1(value) {
+			return POSIX_ABSOLUTE.test(value) || WINDOWS_ABSOLUTE.test(value);
+		}
+		/**
+		* 把一个多行文本框读成路径列表：去掉空行与首尾空白。
+		* @param text - 文本框里的原文。
+		* @returns 其中每一行作为一条路径。
+		*/
+		function pathLines$1(text) {
+			return text.split(/\r?\n/u).map((line) => line.trim()).filter((line) => line !== "");
+		}
+		/**
+		* 把一份 `custom` 草稿收成宿主解析器接受的参数片段
+		* （`base=<…>,groups=<id>|<id>,allow=<…>,deny=<…>`，`allow` / `deny` 每条重复一次 key）。
+		*
+		* 路径里的逗号、以及组 id 里的三类分隔符都会被宿主的解析器当成别的东西，因此它们
+		* 在这里就拒绝，而不是拼出一条宿主读成另一个意思的命令行。
+		* @param draft - 编辑器里的草稿。
+		* @param problemOf - 生成本地化说明的回调。
+		* @returns 参数片段，或一句说明这份草稿为什么还不能提交的话。
+		*/
+		function customFragment(draft, problemOf) {
+			if (!AXIS_BASES$2.includes(draft.base)) return {
+				ok: false,
+				problem: problemOf("baseUnknown")
+			};
+			for (const id of draft.groups) if (id === "" || id.includes("|") || id.includes(",") || id.includes("=")) return {
+				ok: false,
+				problem: problemOf("groupUnsupported")
+			};
+			const entries = [];
+			if (draft.groups.length > 0) entries.push("groups=" + draft.groups.join("|"));
+			const lists = [["allow", draft.allow], ["deny", draft.deny]];
+			for (const [key, text] of lists) for (const path of pathLines$1(text)) {
+				if (!isAbsolutePath$1(path)) return {
+					ok: false,
+					problem: problemOf("notAbsolute")
+				};
+				if (path.includes(",")) return {
+					ok: false,
+					problem: problemOf("commaUnsupported")
+				};
+				entries.push(`${key}=${path}`);
+			}
+			return {
+				ok: true,
+				fragment: ["base=" + draft.base, ...entries].join(",")
+			};
+		}
+		/**
+		* 一份 `custom` 草稿提交出去之后，宿主文档里应当出现的那条轴值。
+		*
+		* 与 {@link customFragment} 同一份草稿、同一套取值：片段是发给宿主的那句话，这里是
+		* 那句话落成记录之后的形状。两者一起用才有意义 —— 宿主对自己没写的改动同样会回一句
+		* 「命令执行了」（`Session.command` 的 `matched` 只说明命令被解析到，见
+		* `packages/api/session-controller/src/client/sessions/session.ts:387-391`），所以界面
+		* 只能拿写入之后的记录来核对这次提交到底有没有生效。
+		*
+		* 组 id 去重，因为宿主 `normalizeScope` 的 `groupIds` 也去重；路径列表保持顺序，
+		* 因为宿主的 `pathList` 保序。
+		* @param draft - 编辑器里的草稿。
+		* @returns 宿主文档里那条轴的形状。
+		*/
+		function draftScope(draft) {
+			return {
+				kind: "custom",
+				base: draft.base,
+				groups: [...new Set(draft.groups)],
+				allow: pathLines$1(draft.allow),
+				deny: pathLines$1(draft.deny)
+			};
+		}
+		/**
+		* 两条轴值是不是同一件事 —— 按值比，不按引用比。
+		*
+		* 比较的是宿主写进文档之后的那份形状：`groups` / `allow` / `deny` 只有一条轴真的是
+		* `custom` 时才参与比较（`deny` / `workspace` / `all` 都不带这些成员），列表按顺序比，
+		* 因为顺序是取值的一部分（提交顺序就是用户勾选的顺序）。
+		* @param left - 一条轴值。
+		* @param right - 另一条轴值。
+		* @returns 两者是否描述同一条轴。
+		*/
+		function sameStoredAxis(left, right) {
+			if (left === void 0 || right === void 0) return left === right;
+			if (left.kind !== right.kind) return false;
+			if (left.kind !== "custom" || right.kind !== "custom") return true;
+			const sameList = (a, b) => {
+				const one = a ?? [];
+				const other = b ?? [];
+				return one.length === other.length && one.every((value, index) => value === other[index]);
+			};
+			return left.base === right.base && sameList(left.groups, right.groups) && sameList(left.allow, right.allow) && sameList(left.deny, right.deny);
+		}
+		/**
+		* 一条轴取值是否会**放开**权限：只有 `all`（整台主机）与带额外放行路径的 `custom`
+		* 会，`deny` / `workspace` 和空清单的 `custom` 不会。
+		*
+		* 这个判定就是发布版二次确认闸的开关。它按**取值本身**算，不按界面动作算：同一条
+		* `write:all`，无论从下拉选出还是从编辑器拼出，都要过一次同样的确认。
+		* @param value - 轴取值。
+		* @returns 该取值是否会放大访问范围。
+		*/
+		function widensAccess(value) {
+			return value === ALL_AXIS;
+		}
+		/**
+		* 一条 `custom` 提交片段是否会放开权限：底座是 `all`，或带了任何额外放行路径。
+		* 排除清单不收窄判定 —— `base=all,deny=/x` 仍然是整台主机减去一条路径。
+		* @param fragment - `customFragment` 产出的片段。
+		* @returns 该片段是否会放大访问范围。
+		*/
+		function fragmentWidensAccess(fragment) {
+			const entries = fragment.split(",");
+			if (entries[0] === `base=${ALL_AXIS}`) return true;
+			if (entries.some((entry) => entry.startsWith("groups="))) return true;
+			return entries.some((entry) => entry.startsWith("allow="));
+		}
+		//#endregion
+		//#region \0t4-css:M:\T4\out\release\dsh-dual-axis\packages\dual-axis-ui\src\client\permission\PermissionSelect.module.css.mjs
+		const css$1 = "._9vJ8OG_axes{background:var(--dsw-alias-bg-module-platform);border-radius:24px;align-items:center;gap:2px;min-width:0;padding:0 4px 0 6px;display:inline-flex}._9vJ8OG_trigger{min-width:0;max-width:200px;height:28px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:20px;outline:none;align-items:center;gap:4px;padding:0 4px 0 6px;font-size:13px;font-weight:500;line-height:20px;display:inline-flex}._9vJ8OG_trigger:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}._9vJ8OG_trigger:focus-visible{box-shadow:0 0 0 2px var(--dsw-alias-border-l3)}._9vJ8OG_trigger:disabled{color:var(--dsw-alias-label-dimmed);cursor:default}._9vJ8OG_triggerIcon{flex:none;display:inline-flex}._9vJ8OG_triggerIcon svg{width:14px;height:14px}._9vJ8OG_triggerLabel{text-overflow:ellipsis;white-space:nowrap;min-width:0;overflow:hidden}._9vJ8OG_optionLabel{align-items:baseline;gap:4px;min-width:0;max-width:100%;display:inline-flex}._9vJ8OG_optionLabelText{text-overflow:ellipsis;white-space:nowrap;min-width:0;overflow:hidden}._9vJ8OG_badge{color:var(--dsw-alias-label-tertiary);letter-spacing:.2px;flex:none;align-self:flex-start;margin-top:-1px;font-size:8px;font-weight:600;line-height:10px}._9vJ8OG_chevron{color:var(--dsw-alias-label-caption);flex:none;transition:transform .12s;display:inline-flex}@container (width<=460px){._9vJ8OG_triggerLabel{display:none}}._9vJ8OG_chevronOpen{transform:rotate(180deg)}._9vJ8OG_seat{align-items:center;min-width:0;display:inline-flex;position:relative}._9vJ8OG_editor{z-index:30;border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-module-platform);width:320px;box-shadow:var(--dsw-shadow-popover,0 8px 24px #0000002e);color:var(--dsw-alias-label-primary);text-align:left;border-radius:12px;gap:8px;padding:12px;font-size:12px;display:grid;position:absolute;bottom:calc(100% + 6px);left:0}._9vJ8OG_editorTitle{font-size:13px;font-weight:600}._9vJ8OG_editorRow{align-items:center;gap:8px;display:flex}._9vJ8OG_editorField{gap:3px;display:grid}._9vJ8OG_editorLabel{min-width:3rem;color:var(--dsw-alias-label-secondary)}._9vJ8OG_editorSelect{border:1px solid var(--dsw-alias-border-l2);min-width:0;height:26px;color:inherit;font:inherit;background:0 0;border-radius:6px;flex:auto}._9vJ8OG_editorArea{resize:vertical;border:1px solid var(--dsw-alias-border-l2);width:100%;color:inherit;background:0 0;border-radius:6px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12px;line-height:18px}._9vJ8OG_editorHint{color:var(--dsw-alias-label-tertiary);line-height:16px}._9vJ8OG_editorProblem{color:var(--dsw-alias-label-error,#d4380d);line-height:16px}._9vJ8OG_editorActions{align-items:center;gap:8px;display:flex}._9vJ8OG_editorSubmit,._9vJ8OG_editorCancel{border:1px solid var(--dsw-alias-border-l2);height:26px;color:inherit;font:inherit;cursor:pointer;background:0 0;border-radius:6px;padding:0 10px}._9vJ8OG_editorSubmit{background:var(--dsw-alias-interactive-bg-hover);font-weight:600}._9vJ8OG_editorSubmit:disabled,._9vJ8OG_editorCancel:disabled{color:var(--dsw-alias-label-dimmed);cursor:default}._9vJ8OG_groupList{gap:2px;max-height:132px;display:grid;overflow-y:auto}._9vJ8OG_groupRow{cursor:pointer;align-items:center;gap:6px;min-width:0;display:flex}._9vJ8OG_groupName{text-overflow:ellipsis;white-space:nowrap;min-width:0;overflow:hidden}._9vJ8OG_groupId{color:var(--dsw-alias-label-tertiary);flex:none;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:11px}._9vJ8OG_groupCoverage{color:var(--dsw-alias-label-caption);flex:none;font-size:11px}._9vJ8OG_groupMissing{color:var(--dsw-alias-label-error,#d4380d);flex:none;font-size:11px}._9vJ8OG_narrowingMark{background:var(--dsw-alias-label-error,#d4380d);border-radius:50%;flex:none;width:5px;height:5px;margin-right:-2px}._9vJ8OG_narrowing{border-left:2px solid var(--dsw-alias-label-error,#d4380d);background:var(--dsw-alias-interactive-bg-hover);border-radius:4px;gap:3px;padding:6px 8px;display:grid}._9vJ8OG_narrowingTitle{font-weight:600}._9vJ8OG_narrowingBody{color:var(--dsw-alias-label-secondary);line-height:15px}._9vJ8OG_narrowingRoots{color:var(--dsw-alias-label-primary);white-space:pre-wrap;overflow-wrap:anywhere;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:11px;line-height:16px}";
+		const tagId$1 = "@t4r71/dsh-dual-axis-ui/PermissionSelect.module.css";
+		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId$1) + "]") === null) {
+			const tag = document.createElement("style");
+			tag.dataset.plugin = "@t4r71/dsh-dual-axis-ui";
+			tag.dataset.pluginCss = tagId$1;
+			tag.textContent = css$1;
+			document.head.appendChild(tag);
+		}
+		var PermissionSelect_module_css_default = {
+			"axes": "_9vJ8OG_axes",
+			"badge": "_9vJ8OG_badge",
+			"chevron": "_9vJ8OG_chevron",
+			"chevronOpen": "_9vJ8OG_chevronOpen",
+			"editor": "_9vJ8OG_editor",
+			"editorActions": "_9vJ8OG_editorActions",
+			"editorArea": "_9vJ8OG_editorArea",
+			"editorCancel": "_9vJ8OG_editorCancel",
+			"editorField": "_9vJ8OG_editorField",
+			"editorHint": "_9vJ8OG_editorHint",
+			"editorLabel": "_9vJ8OG_editorLabel",
+			"editorProblem": "_9vJ8OG_editorProblem",
+			"editorRow": "_9vJ8OG_editorRow",
+			"editorSelect": "_9vJ8OG_editorSelect",
+			"editorSubmit": "_9vJ8OG_editorSubmit",
+			"editorTitle": "_9vJ8OG_editorTitle",
+			"groupCoverage": "_9vJ8OG_groupCoverage",
+			"groupId": "_9vJ8OG_groupId",
+			"groupList": "_9vJ8OG_groupList",
+			"groupMissing": "_9vJ8OG_groupMissing",
+			"groupName": "_9vJ8OG_groupName",
+			"groupRow": "_9vJ8OG_groupRow",
+			"narrowing": "_9vJ8OG_narrowing",
+			"narrowingBody": "_9vJ8OG_narrowingBody",
+			"narrowingMark": "_9vJ8OG_narrowingMark",
+			"narrowingRoots": "_9vJ8OG_narrowingRoots",
+			"narrowingTitle": "_9vJ8OG_narrowingTitle",
+			"optionLabel": "_9vJ8OG_optionLabel",
+			"optionLabelText": "_9vJ8OG_optionLabelText",
+			"seat": "_9vJ8OG_seat",
+			"trigger": "_9vJ8OG_trigger",
+			"triggerIcon": "_9vJ8OG_triggerIcon",
+			"triggerLabel": "_9vJ8OG_triggerLabel"
+		};
+		//#endregion
+		//#region lib/types/client/permission/PermissionCustomEditor.js
+		/**
+		* 一条轴的 `custom` 路径编辑器：底座下拉加两个绝对路径列表。
+		*
+		* 这个编辑器是让 `custom` 成为一条完整策略语句的东西。另外三个取值本身各自就是
+		* 完整语句 —— 选中即提交 —— 而 `custom` 必须带底座，宿主的解析器宁可拒绝一条裸的
+		* `write:custom` 也不肯替用户猜一个。所以下拉里选中 `custom` 时不直接提交，而是展开
+		* 这个编辑器，由它提交完整的 `axis:custom:base=…,allow=…,deny=…` 参数。
+		*
+		* 两个路径框都是一行一条绝对路径。全局设置文档里存的是列表，而这个界面没有路径
+		* 选择器，所以文本是诚实的载体；一条相对路径会挡住提交并说明原因，而不是被解析到
+		* 某个用户从没指定过的目录上去。
+		*
+		* 提交要过一次风险确认：`base=all` 或带额外放行路径的 `custom` 都会放大该轴的
+		* 访问范围，所以「应用」先落到确认框，只有勾选并确认才真的写下去。不放大权限的
+		* 草稿（例如在 `workspace` 底座上只加排除路径）不过闸，免得确认变成噪音。
+		*
+		* @module @deepseek-ai/dsh-client-ui-permission-presets/client/PermissionCustomEditor
+		*/
+		/** 该轴在该取值下的词典键前缀（读轴写轴各一套文案）。 */
+		function axisKeys(axis) {
+			return axis === "read" ? {
+				title: "editor.readTitle",
+				base: "editor.readBase",
+				allow: "editor.readAllow",
+				deny: "editor.readDeny"
+			} : {
+				title: "editor.writeTitle",
+				base: "editor.writeBase",
+				allow: "editor.writeAllow",
+				deny: "editor.writeDeny"
+			};
+		}
+		/** 一个底座取值对应的词典键。 */
+		function baseOptionKey(base) {
+			return base === "deny" ? "editor.baseDeny" : base === "workspace" ? "editor.baseWorkspace" : "editor.baseAll";
+		}
+		/**
+		* 渲染一条轴的 `custom` 路径编辑器。
+		*
+		* 草稿从会话当前值起步，**任何取值都算**：这条会话的轴是这个界面表达的对象，
+		* 编辑器打开时显示别的值（例如部署默认）就会与它旁边那个下拉自相矛盾。只有
+		* 会话值缺席时才退到该轴的部署默认值。一次失败的提交保留草稿并显示一句可读的话，
+		* 而不是抛出去，所以被拒的审批留下的是一个还能用的编辑器。
+		* @param props - 轴、起始值、写入口与词典座位。
+		* @returns 底座下拉、两个路径框与提交行。
+		*/
+		function PermissionCustomEditor({ axis, current, global, notice, groups, locked, busy, onSubmit, onDismiss, t }) {
+			const keys = axisKeys(axis);
+			const [draft, setDraft] = (0, react.useState)(() => initialDraft(axis, current, global));
+			const [failure, setFailure] = (0, react.useState)("none");
+			const [sending, setSending] = (0, react.useState)(false);
+			const [gate, setGate] = (0, react.useState)(null);
+			const [acknowledged, setAcknowledged] = (0, react.useState)(false);
+			const parsed = customFragment(draft, (key) => t(problemFor(key)));
+			const problem = parsed.ok ? "" : parsed.problem;
+			const choices = groupChoicesOf(groups(), draft.groups);
+			const edit = (patch) => {
+				setDraft((state) => ({
+					...state,
+					...patch
+				}));
+			};
+			const toggleGroup = (id, checked) => {
+				edit({ groups: checked ? [...draft.groups, id] : draft.groups.filter((current) => current !== id) });
+			};
+			const disabled = locked || busy || sending || gate !== null;
+			/**
+			* 真正提交一份已经完整的参数串。
+			*
+			* 只有文档里真的出现了这次取值才关掉编辑器：宿主对自己**没有**写入的命令同样会回
+			* 一句「命令执行了」（它只回答命令有没有被解析到，见 `PermissionSelectInjected.select`），
+			* 所以一次被拒的写入在旧实现里与成功一模一样 —— 编辑器关掉、下拉回到原值、设置文档
+			* 没变、界面上一个字都没有。
+			*/
+			const send = (args, expected) => {
+				setSending(true);
+				setFailure("none");
+				onSubmit(args, expected).then((landed) => {
+					setSending(false);
+					if (landed) onDismiss();
+					else setFailure("refused");
+				}).catch(() => {
+					setSending(false);
+					setFailure("failed");
+				});
+			};
+			const submit = () => {
+				if (!parsed.ok) return;
+				setFailure("none");
+				const entry = `${axis}:custom:${parsed.fragment}`;
+				const expected = draftScope(draft);
+				if (fragmentWidensAccess(parsed.fragment)) {
+					setAcknowledged(false);
+					setGate({
+						args: entry,
+						expected
+					});
+					return;
+				}
+				send(entry, expected);
+			};
+			return (0, react_jsx_runtime.jsxs)("div", {
+				className: PermissionSelect_module_css_default.editor,
+				"data-dsh-axis-editor": axis,
+				children: [
+					(0, react_jsx_runtime.jsx)("div", {
+						className: PermissionSelect_module_css_default.editorTitle,
+						children: t(keys.title)
+					}),
+					notice === void 0 ? null : (0, react_jsx_runtime.jsxs)("div", {
+						className: PermissionSelect_module_css_default.narrowing,
+						"data-dsh-axis-narrowing": axis,
+						role: "status",
+						children: [
+							(0, react_jsx_runtime.jsx)("div", {
+								className: PermissionSelect_module_css_default.narrowingTitle,
+								"data-dsh-narrowing-title": true,
+								children: notice.title
+							}),
+							(0, react_jsx_runtime.jsx)("div", {
+								className: PermissionSelect_module_css_default.narrowingBody,
+								children: t("narrowing.body")
+							}),
+							(0, react_jsx_runtime.jsx)("div", {
+								className: PermissionSelect_module_css_default.narrowingRoots,
+								"data-dsh-narrowing-roots": true,
+								children: notice.removed
+							}),
+							notice.lostUnbounded === "" ? null : (0, react_jsx_runtime.jsx)("div", {
+								className: PermissionSelect_module_css_default.narrowingBody,
+								children: notice.lostUnbounded
+							})
+						]
+					}),
+					(0, react_jsx_runtime.jsxs)("label", {
+						className: PermissionSelect_module_css_default.editorRow,
+						children: [(0, react_jsx_runtime.jsx)("span", {
+							className: PermissionSelect_module_css_default.editorLabel,
+							children: t("editor.base")
+						}), (0, react_jsx_runtime.jsx)("select", {
+							className: PermissionSelect_module_css_default.editorSelect,
+							"data-dsh-axis-base": axis,
+							"aria-label": t(keys.base),
+							value: draft.base,
+							disabled,
+							onChange: (event) => {
+								edit({ base: event.target.value });
+							},
+							children: AXIS_BASES$2.map((base) => (0, react_jsx_runtime.jsx)("option", {
+								value: base,
+								children: t(baseOptionKey(base))
+							}, base))
+						})]
+					}),
+					(0, react_jsx_runtime.jsxs)("label", {
+						className: PermissionSelect_module_css_default.editorField,
+						children: [(0, react_jsx_runtime.jsx)("span", {
+							className: PermissionSelect_module_css_default.editorLabel,
+							children: t("editor.allow")
+						}), (0, react_jsx_runtime.jsx)("textarea", {
+							className: PermissionSelect_module_css_default.editorArea,
+							"data-dsh-axis-allow": axis,
+							"aria-label": t(keys.allow),
+							rows: 3,
+							spellCheck: false,
+							value: draft.allow,
+							disabled,
+							onChange: (event) => {
+								edit({ allow: event.target.value });
+							}
+						})]
+					}),
+					(0, react_jsx_runtime.jsxs)("label", {
+						className: PermissionSelect_module_css_default.editorField,
+						children: [(0, react_jsx_runtime.jsx)("span", {
+							className: PermissionSelect_module_css_default.editorLabel,
+							children: t("editor.deny")
+						}), (0, react_jsx_runtime.jsx)("textarea", {
+							className: PermissionSelect_module_css_default.editorArea,
+							"data-dsh-axis-deny": axis,
+							"aria-label": t(keys.deny),
+							rows: 3,
+							spellCheck: false,
+							value: draft.deny,
+							disabled,
+							onChange: (event) => {
+								edit({ deny: event.target.value });
+							}
+						})]
+					}),
+					(0, react_jsx_runtime.jsxs)("div", {
+						className: PermissionSelect_module_css_default.editorField,
+						"data-dsh-axis-groups": axis,
+						children: [(0, react_jsx_runtime.jsx)("span", {
+							className: PermissionSelect_module_css_default.editorLabel,
+							children: t("editor.groups")
+						}), choices.length === 0 ? (0, react_jsx_runtime.jsx)("div", {
+							className: PermissionSelect_module_css_default.editorHint,
+							children: t("editor.groupsEmpty")
+						}) : (0, react_jsx_runtime.jsx)("div", {
+							className: PermissionSelect_module_css_default.groupList,
+							children: choices.map((choice) => (0, react_jsx_runtime.jsxs)("label", {
+								className: PermissionSelect_module_css_default.groupRow,
+								"data-dsh-group-choice": choice.id,
+								children: [
+									(0, react_jsx_runtime.jsx)("input", {
+										type: "checkbox",
+										"data-dsh-group-check": choice.id,
+										checked: choice.checked,
+										disabled,
+										onChange: (event) => {
+											toggleGroup(choice.id, event.target.checked);
+										}
+									}),
+									(0, react_jsx_runtime.jsx)("span", {
+										className: PermissionSelect_module_css_default.groupName,
+										children: choice.name
+									}),
+									choice.name === choice.id ? null : (0, react_jsx_runtime.jsx)("span", {
+										className: PermissionSelect_module_css_default.groupId,
+										children: choice.id
+									}),
+									(0, react_jsx_runtime.jsx)("span", {
+										className: PermissionSelect_module_css_default.groupCoverage,
+										children: coverageLabel(choice, t)
+									}),
+									!choice.missing ? null : (0, react_jsx_runtime.jsx)("span", {
+										className: PermissionSelect_module_css_default.groupMissing,
+										children: t("editor.groupMissing")
+									})
+								]
+							}, choice.id))
+						})]
+					}),
+					(0, react_jsx_runtime.jsx)("div", {
+						className: PermissionSelect_module_css_default.editorHint,
+						children: t("editor.hint")
+					}),
+					problem === "" ? null : (0, react_jsx_runtime.jsx)("div", {
+						className: PermissionSelect_module_css_default.editorProblem,
+						role: "alert",
+						children: problem
+					}),
+					failure === "none" ? null : (0, react_jsx_runtime.jsx)("div", {
+						className: PermissionSelect_module_css_default.editorProblem,
+						role: "alert",
+						children: t(failure === "refused" ? "editor.notStored" : "editor.failed")
+					}),
+					(0, react_jsx_runtime.jsxs)("div", {
+						className: PermissionSelect_module_css_default.editorActions,
+						children: [(0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: PermissionSelect_module_css_default.editorSubmit,
+							"data-dsh-axis-submit": axis,
+							disabled: disabled || problem !== "",
+							onClick: submit,
+							children: t(sending ? "editor.sending" : "editor.submit")
+						}), (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: PermissionSelect_module_css_default.editorCancel,
+							disabled: sending,
+							onClick: onDismiss,
+							children: t("editor.cancel")
+						})]
+					}),
+					gate === null ? null : (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.RiskConfirmation, {
+						open: true,
+						title: t("confirm.title"),
+						description: t("confirm.description"),
+						acknowledgeLabel: t("confirm.acknowledge"),
+						cancelLabel: t("confirm.cancel"),
+						closeLabel: t("close"),
+						confirmLabel: t("confirm.enable"),
+						acknowledged,
+						disabled: locked,
+						onAcknowledgedChange: setAcknowledged,
+						onCancel: () => {
+							setAcknowledged(false);
+							setGate(null);
+						},
+						onConfirm: () => {
+							const pending = gate;
+							setGate(null);
+							setAcknowledged(false);
+							if (pending !== null) send(pending.args, pending.expected);
+						}
+					})
+				]
+			});
+		}
+		/**
+		* 一个组覆盖哪些轴的说明文案。
+		*
+		* 选择器两个并排、没有可见标题，所以「这个组对这根轴什么也不做」必须明说：写侧组
+		* 出现在读轴的选择器里不报错，但它对读轴一条规则也不贡献。
+		* @param choice - 多选列表里的一行。
+		* @param t - 词典座位。
+		* @returns 一句话说明。
+		*/
+		function coverageLabel(choice, t) {
+			if (choice.missing) return t("editor.groupMissing");
+			if (choice.coverage === "both") return t("editor.groupBoth");
+			if (choice.coverage === "read") return t("editor.groupRead");
+			if (choice.coverage === "write") return t("editor.groupWrite");
+			return t("editor.groupNone");
+		}
+		/** 一句拒绝说明对应的词典键。 */
+		function problemFor(key) {
+			if (key === "baseUnknown") return "editor.problemBase";
+			if (key === "notAbsolute") return "editor.problemPath";
+			if (key === "commaUnsupported") return "editor.problemComma";
+			return "editor.problemGroupId";
+		}
+		//#endregion
+		//#region lib/types/client/permission/PermissionSelect.js
+		/** Every value an axis offers when the Host catalog advertises none of the four. */
+		const AXIS_FALLBACK_VALUES = [
+			"deny",
+			"workspace",
+			"all",
+			"custom"
+		];
+		const permissionGlyphs = /* @__PURE__ */ new Map([
+			["deny", (0, react_jsx_runtime.jsxs)("svg", {
+				width: "16",
+				height: "16",
+				viewBox: "0 0 16 16",
+				fill: "none",
+				"aria-hidden": true,
+				children: [(0, react_jsx_runtime.jsx)("path", {
+					d: _deepseek_ai_dsh_client_ui_primitives.SHIELD_OUTLINE_PATH,
+					stroke: "currentColor",
+					strokeWidth: "1",
+					strokeLinejoin: "round"
+				}), (0, react_jsx_runtime.jsx)("path", {
+					d: "M5.4 5.4L10.6 10.6M10.6 5.4L5.4 10.6",
+					stroke: "currentColor",
+					strokeWidth: "1.4",
+					strokeLinecap: "round"
+				})]
+			})],
+			["workspace", (0, react_jsx_runtime.jsxs)("svg", {
+				width: "16",
+				height: "16",
+				viewBox: "0 0 16 16",
+				fill: "none",
+				"aria-hidden": true,
+				children: [(0, react_jsx_runtime.jsx)("path", {
+					d: _deepseek_ai_dsh_client_ui_primitives.SHIELD_OUTLINE_PATH,
+					stroke: "currentColor",
+					strokeWidth: "1",
+					strokeLinejoin: "round"
+				}), (0, react_jsx_runtime.jsx)("path", {
+					d: "M12.1654 5.7552L8.9447 9.41475C8.73044 9.65816 8.53628 9.8804 8.35774 10.0423C8.1713 10.2114 7.94235 10.3717 7.64016 10.4254C7.48207 10.4535 7.32 10.4552 7.16151 10.4294C6.85843 10.3801 6.62728 10.2223 6.43836 10.0559C6.25752 9.89653 6.06037 9.67732 5.84264 9.43705L4.72925 8.20897L5.63557 7.38707L6.74897 8.61594C6.98603 8.87755 7.12974 9.03533 7.24673 9.13839C7.31033 9.19443 7.34485 9.21476 7.35823 9.22122C7.38068 9.22484 7.40352 9.22515 7.42593 9.22122C7.40522 9.22502 7.42893 9.23294 7.53583 9.136C7.65132 9.03126 7.79316 8.87139 8.02643 8.60638L11.2479 4.94763L12.1654 5.7552Z",
+					fill: "currentColor"
+				})]
+			})],
+			["all", (0, react_jsx_runtime.jsxs)("svg", {
+				width: "16",
+				height: "16",
+				viewBox: "0 0 16 16",
+				fill: "none",
+				"aria-hidden": true,
+				children: [
+					(0, react_jsx_runtime.jsx)("path", {
+						d: _deepseek_ai_dsh_client_ui_primitives.SHIELD_OUTLINE_PATH,
+						stroke: "currentColor",
+						strokeWidth: "1",
+						strokeLinejoin: "round"
+					}),
+					(0, react_jsx_runtime.jsx)("path", {
+						d: "M9.10094 4.5V8.75939H7.59888V4.5H9.10094Z",
+						fill: "currentColor"
+					}),
+					(0, react_jsx_runtime.jsx)("path", {
+						d: "M9.10094 9.8114V11.5H7.59888V9.8114H9.10094Z",
+						fill: "currentColor"
+					})
+				]
+			})],
+			["custom", (0, react_jsx_runtime.jsxs)("svg", {
+				width: "16",
+				height: "16",
+				viewBox: "0 0 16 16",
+				fill: "none",
+				"aria-hidden": true,
+				children: [(0, react_jsx_runtime.jsx)("path", {
+					d: _deepseek_ai_dsh_client_ui_primitives.SHIELD_OUTLINE_PATH,
+					stroke: "currentColor",
+					strokeWidth: "1",
+					strokeLinejoin: "round"
+				}), (0, react_jsx_runtime.jsx)("path", {
+					d: "M6.4 5.2H11.6M6.4 7.6H11.6M6.4 10H9.8",
+					stroke: "currentColor",
+					strokeWidth: "1.3",
+					strokeLinecap: "round"
+				})]
+			})],
+			["unknown", (0, react_jsx_runtime.jsxs)("svg", {
+				width: "16",
+				height: "16",
+				viewBox: "0 0 16 16",
+				fill: "none",
+				"aria-hidden": true,
+				children: [
+					(0, react_jsx_runtime.jsx)("path", {
+						d: _deepseek_ai_dsh_client_ui_primitives.SHIELD_OUTLINE_PATH,
+						stroke: "currentColor",
+						strokeWidth: "1",
+						strokeLinejoin: "round"
+					}),
+					(0, react_jsx_runtime.jsx)("path", {
+						d: "M5.6 6.6C5.6 5.6 6.15 5 7.05 5C7.95 5 8.5 5.5 8.5 6.3C8.5 7.4 7.05 7.4 7.05 8.6",
+						stroke: "currentColor",
+						strokeWidth: "1.2",
+						strokeLinecap: "round",
+						fill: "none"
+					}),
+					(0, react_jsx_runtime.jsx)("path", {
+						d: "M7.05 10.3V10.9",
+						stroke: "currentColor",
+						strokeWidth: "1.4",
+						strokeLinecap: "round"
+					})
+				]
+			})]
+		]);
+		/**
+		* Glyph for one axis value. An absent value gets the `unknown` glyph rather
+		* than nothing: the seat still has to read as an axis control.
+		* @param value - the axis value, or `undefined` when none can be named.
+		* @returns the glyph node.
+		*/
+		function permissionGlyph(value) {
+			return permissionGlyphs.get(value ?? "unknown");
+		}
+		/** Locale key naming one axis's dropdown. */
+		const AXIS_LABEL_KEY = {
+			read: "readLabel",
+			write: "writeLabel"
+		};
+		/**
+		* Render one axis dropdown. The two dropdowns keep independent open, busy and
+		* confirmation state, so a switch on one axis never disturbs the other's
+		* displayed value.
+		*
+		* Picking `deny` or `workspace` applies directly: neither one widens access.
+		* Picking `all` opens the risk confirmation first — it hands the whole host to
+		* that axis — and only an acknowledged confirmation submits. Picking `custom`
+		* opens {@link PermissionCustomEditor} instead of submitting: `custom` alone is
+		* not a policy statement, and the host refuses it rather than guessing a base.
+		* The editor runs the same gate on its own submission when that submission
+		* widens access, so both routes to a widened axis pass one acknowledgement.
+		*
+		* The gate is per axis on purpose: the confirmation names the axis it is about,
+		* which is the only thing that tells two side-by-side dropdowns apart.
+		* @param props - the axis, its values, the locale seat, and the write path.
+		* @returns the dropdown trigger and its menu, plus the editor while it is open.
+		*/
+		function AxisPicker({ axis, current, currentState, narrowing, values, locked, t, select, global, groups, pending, onPending }) {
+			const [open, setOpen] = (0, react.useState)(false);
+			const [editing, setEditing] = (0, react.useState)(false);
+			const [gate, setGate] = (0, react.useState)(null);
+			const [acknowledged, setAcknowledged] = (0, react.useState)(false);
+			const shown = pending ?? current;
+			const shownName = axisValueName(shown, axis, (key) => t(key));
+			const notice = axis === "write" ? narrowingNotice(narrowing, t) : void 0;
+			const label = t(AXIS_LABEL_KEY[axis], { name: shownName });
+			const marker = notice?.marker ?? null;
+			const items = values.map((value) => ({
+				id: value,
+				label: axisLabel(value, axis, (key) => t(key)),
+				icon: permissionGlyph(value)
+			}));
+			/**
+			* 真正写下去：乐观取值 → 提交 → 无论成败都收回乐观取值。
+			*
+			* 乐观取值是给人看的即时反馈，不是结论：`landed` 为假时它被收回，触发器于是回到
+			* 当刻真的生效的那个取值，而不是停在一个宿主并没有接受的取值上。
+			*/
+			const settle = (value, args) => {
+				onPending(value);
+				return select(axis, args, { kind: value }).catch(() => false).then((landed) => {
+					onPending(null);
+					return landed;
+				});
+			};
+			/**
+			* 一次取值改动。放开权限的取值先挂起等确认，其余直接写。
+			* @param value - 轴取值。
+			* @param args - 交给宿主 `/permission` 的完整参数串。
+			* @returns 宿主结清后的结果；挂起期间返回的是确认后的结果。
+			*/
+			const request = (value, args) => {
+				if (!widensAccess(value)) return settle(value, args);
+				setAcknowledged(false);
+				setGate(value);
+				return Promise.resolve(false);
+			};
+			/** 确认框点了「启用」：提交这次已经过用户明示同意的改动。 */
+			const confirm = () => {
+				const value = gate;
+				if (value === null) return;
+				setGate(null);
+				setAcknowledged(false);
+				settle(value, `${axis}:${value}`);
+			};
+			const choose = (id) => {
+				setOpen(false);
+				const picked = values.find((value) => value === id);
+				if (picked === void 0) return;
+				if (picked === "custom") {
+					setEditing(true);
+					return;
+				}
+				if (picked === shown) return;
+				request(picked, `${axis}:${picked}`);
+			};
+			return (0, react_jsx_runtime.jsxs)("span", {
+				className: PermissionSelect_module_css_default.seat,
+				children: [
+					(0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Menu, {
+						open,
+						items,
+						selectedId: shown,
+						onSelect: choose,
+						onClose: () => {
+							setOpen(false);
+						},
+						side: "top",
+						portal: true,
+						anchor: (0, react_jsx_runtime.jsxs)("button", {
+							type: "button",
+							className: PermissionSelect_module_css_default.trigger,
+							"aria-label": label,
+							"aria-expanded": editing,
+							disabled: locked || pending !== null,
+							onClick: () => {
+								setOpen(!open);
+							},
+							children: [
+								(0, react_jsx_runtime.jsx)("span", {
+									className: PermissionSelect_module_css_default.triggerIcon,
+									"aria-hidden": true,
+									children: permissionGlyph(shown)
+								}),
+								(0, react_jsx_runtime.jsx)("span", {
+									className: PermissionSelect_module_css_default.triggerLabel,
+									children: shownName
+								}),
+								marker === null ? null : (0, react_jsx_runtime.jsx)("span", {
+									className: PermissionSelect_module_css_default.narrowingMark,
+									"data-dsh-narrowing-mark": axis,
+									title: marker,
+									"aria-label": marker,
+									role: "img"
+								}),
+								(0, react_jsx_runtime.jsx)("span", {
+									className: clsx(PermissionSelect_module_css_default.chevron, open && PermissionSelect_module_css_default.chevronOpen),
+									"aria-hidden": true,
+									children: (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineMedium, {})
+								})
+							]
+						})
+					}),
+					editing ? (0, react_jsx_runtime.jsx)(PermissionCustomEditor, {
+						axis,
+						current: currentState,
+						global: global(axis),
+						notice,
+						groups,
+						locked,
+						busy: pending !== null,
+						onSubmit: (args, expected) => {
+							onPending("custom");
+							return select(axis, args, expected).finally(() => {
+								onPending(null);
+							});
+						},
+						onDismiss: () => {
+							setEditing(false);
+						},
+						t
+					}) : null,
+					gate === null ? null : (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.RiskConfirmation, {
+						open: true,
+						title: t("confirm.title"),
+						description: t("confirm.description"),
+						acknowledgeLabel: t("confirm.acknowledge"),
+						cancelLabel: t("confirm.cancel"),
+						closeLabel: t("close"),
+						confirmLabel: t("confirm.enable"),
+						acknowledged,
+						disabled: locked,
+						onAcknowledgedChange: setAcknowledged,
+						onCancel: () => {
+							setAcknowledged(false);
+							setGate(null);
+						},
+						onConfirm: confirm
+					})
+				]
+			});
+		}
+		function PermissionSelect({ locked, select, global, groupLibrary, sessionAxes, usePermissionCatalog, t, sessionId }) {
+			const catalog = usePermissionCatalog((state) => state.value);
+			const view = sessionAxes.useAxes(sessionId);
+			const [pending, setPending] = (0, react.useState)({
+				read: null,
+				write: null
+			});
+			if (catalog === null) return null;
+			const axisValues = catalog.options.map((option) => option.value).filter((value) => value === "deny" || value === "workspace" || value === "all" || value === "custom");
+			/**
+			* One seat's props. Never returns nothing: an axis this build cannot name is a
+			* seat showing "未设置", because a permission control that disappears reads as
+			* a removed feature, and the person looking at it has no way to tell the two
+			* apart.
+			* @param axis - which axis this seat edits.
+			* @returns that seat's props.
+			*/
+			const seat = (axis) => {
+				const scope = view.state === "unknown" ? void 0 : view.axes[axis];
+				return {
+					axis,
+					current: scope === void 0 ? void 0 : axisValueOf$2(scope.kind),
+					narrowing: view.state === "unknown" ? void 0 : view.axes.narrowing,
+					currentState: scope,
+					values: axisValues.length > 0 ? axisValues : AXIS_FALLBACK_VALUES,
+					locked,
+					t,
+					select,
+					global,
+					groups: groupLibrary,
+					pending: pending[axis],
+					onPending: (value) => {
+						setPending((state) => ({
+							...state,
+							[axis]: value
+						}));
+					}
+				};
+			};
+			return (0, react_jsx_runtime.jsxs)("div", {
+				className: PermissionSelect_module_css_default.axes,
+				children: [(0, react_jsx_runtime.jsx)(AxisPicker, { ...seat("read") }), (0, react_jsx_runtime.jsx)(AxisPicker, { ...seat("write") })]
+			});
+		}
+		//#endregion
+		//#region \0t4-css:M:\T4\out\release\dsh-dual-axis\packages\dual-axis-ui\src\client\permission\PermissionRow.module.css.mjs
+		const css = ".jUZ4eG_row{border-bottom:.5px solid var(--dsw-alias-border-l2);align-items:center;gap:8px;padding:16px 0;display:flex}.jUZ4eG_rowText{flex-direction:column;flex:1;gap:4px;min-width:0;padding-right:48px;display:flex}.jUZ4eG_title{color:var(--dsw-alias-label-primary);font-size:14px;font-weight:400;line-height:22px}.jUZ4eG_desc{color:var(--dsw-alias-label-tertiary);font-size:12px;font-weight:400;line-height:18px}.jUZ4eG_selector{background:var(--dsw-alias-bg-module-platform);height:36px;font:inherit;color:var(--dsw-alias-label-primary);cursor:pointer;border:none;border-radius:18px;align-items:center;gap:12px;padding:0 14px;font-size:14px;line-height:22px;display:inline-flex}.jUZ4eG_selector:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.jUZ4eG_selector:disabled{cursor:default}.jUZ4eG_chevron{flex:none}";
+		const tagId = "@t4r71/dsh-dual-axis-ui/PermissionRow.module.css";
+		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
+			const tag = document.createElement("style");
+			tag.dataset.plugin = "@t4r71/dsh-dual-axis-ui";
+			tag.dataset.pluginCss = tagId;
+			tag.textContent = css;
+			document.head.appendChild(tag);
+		}
+		var PermissionRow_module_css_default = {
+			"chevron": "jUZ4eG_chevron",
+			"desc": "jUZ4eG_desc",
+			"row": "jUZ4eG_row",
+			"rowText": "jUZ4eG_rowText",
+			"selector": "jUZ4eG_selector",
+			"title": "jUZ4eG_title"
+		};
+		//#endregion
+		//#region lib/types/client/permission/PermissionRow.js
+		/**
+		* Permission preference row: the default preset for subsequently created
+		* sessions. Current-session switches remain on the composer's read/write
+		* axis dropdowns.
+		*/
+		/**
+		* Render the new-session Permission default selector. The row keeps the host's
+		* single preset enum on purpose: its options come from the Host settings
+		* schema (which still publishes one bundled preset per mode), not from the
+		* current-session two-axis catalog, so splitting it here would invent a second
+		* source of truth for the same durable value. A visible pick applies directly —
+		* the full-access acknowledgement step was removed with the composer's.
+		* @param props - composed slot props.
+		* @returns the row, or null when the host does not expose permission settings.
+		*/
+		function PermissionRow({ load, select, usePermission, t }) {
+			const state = usePermission((snapshot) => snapshot);
+			const [open, setOpen] = (0, react.useState)(false);
+			(0, react.useEffect)(() => {
+				load();
+			}, [load]);
+			(0, react.useEffect)(() => {
+				if (state.writable && state.status !== "unavailable") return;
+				setOpen(false);
+			}, [state.status, state.writable]);
+			if (state.status === "unavailable") return null;
+			const selected = state.options.find((option) => option.id === state.currentValue);
+			const busy = state.status === "loading" || state.status === "saving";
+			const optionLabel = (option) => displayPermissionPreset(option.id, option.label, t);
+			const label = selected !== void 0 ? optionLabel(selected) : busy ? t("loading") : t("unavailable");
+			const description = state.error ?? t("description");
+			return (0, react_jsx_runtime.jsxs)("div", {
+				className: PermissionRow_module_css_default.row,
+				children: [(0, react_jsx_runtime.jsxs)("div", {
+					className: PermissionRow_module_css_default.rowText,
+					children: [(0, react_jsx_runtime.jsx)("div", {
+						className: PermissionRow_module_css_default.title,
+						children: t("title")
+					}), (0, react_jsx_runtime.jsx)("div", {
+						className: PermissionRow_module_css_default.desc,
+						role: state.error === null ? void 0 : "alert",
+						children: description
+					})]
+				}), (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Menu, {
+					open,
+					onClose: () => {
+						setOpen(false);
+					},
+					items: state.options.map((option) => ({
+						id: option.id,
+						label: optionLabel(option)
+					})),
+					selectedId: state.currentValue,
+					onSelect: (id) => {
+						setOpen(false);
+						if (id === state.currentValue) return;
+						select(id);
+					},
+					align: "end",
+					portal: true,
+					anchor: (0, react_jsx_runtime.jsxs)("button", {
+						type: "button",
+						className: PermissionRow_module_css_default.selector,
+						"aria-haspopup": "menu",
+						"aria-expanded": open,
+						disabled: busy || !state.writable || state.options.length === 0,
+						onClick: () => {
+							setOpen((value) => !value);
+						},
+						children: [label, (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineMedium, { className: PermissionRow_module_css_default.chevron })]
+					})
+				})]
+			});
+		}
+		//#endregion
+		//#region lib/types/client/permission/settings-store.js
+		/**
+		* Permission default-settings controller. 权限描述符来自共享的 describe 镜像，可选
+		* 取值来自进程级 {@link PermissionCatalogDirectory}（0.1.7 起动态预设枚举不再从
+		* namespace schema 里挖，改由权限目录的 `defaultOptions` 提供）；写入只针对
+		* `defaultPreset`，带上描述符 revision，并把宿主接受的答案折回镜像。
+		*/
+		/** Permission's settings namespace on the host wire. */
+		const PERMISSION_SETTINGS_NS = "permission";
+		/**
+		* Resolve the new-session choices from the permission domain's catalog.
+		* @param view - 当前配置描述符。
+		* @param catalog - 权限目录：可选预设与生效默认值。
+		* @returns 当前取值，以及它允许的那些取值的标签。
+		*/
+		function permissionDefaultOf(view, catalog) {
+			const currentValue = view.value?.defaultPreset ?? catalog.defaultPreset;
+			const options = catalog.defaultOptions.map((option) => ({
+				id: option.value,
+				label: displayPermissionPreset(option.value, option.name)
+			}));
+			if (!options.some((option) => option.id === currentValue)) throw new Error("permission catalog does not advertise its current default");
+			return {
+				currentValue,
+				options
+			};
+		}
+		/** Controller deriving the row from the shared mirror and writing the default through it. */
+		var PermissionPresetSettingsController = class {
+			describeFace;
+			ctx;
+			catalog;
+			/** Row snapshot consumed through a bound selector hook. */
+			store = (0, _deepseek_ai_dsh_client_store.createSnapshotStore)({
+				status: "idle",
+				error: null,
+				writable: false,
+				currentValue: "",
+				options: [],
+				revision: 0
+			});
+			following;
+			followingCatalog;
+			saving = false;
+			disposed = false;
+			/**
+			* @param describeFace - the shared mirror's read/fold face (descriptor and schema source).
+			* @param ctx - the row plugin's context, whose `remote.settings` namespace
+			* carries the `defaultPreset` write.
+			* @param catalog - 已配置的权限可选值与生效默认值（进程级目录，与斜杠弹窗共用一份）。
+			*/
+			constructor(describeFace, ctx, catalog) {
+				this.describeFace = describeFace;
+				this.ctx = ctx;
+				this.catalog = catalog;
+			}
+			/**
+			* Begin following the mirror (idempotent) and reflect its current answer.
+			* @returns settlement once the snapshot reflects the mirror.
+			*/
+			async load() {
+				if (this.disposed) return;
+				this.following ??= this.describeFace.subscribe(() => {
+					this.derive();
+				});
+				this.followingCatalog ??= this.catalog.store.subscribe(() => {
+					this.derive();
+				});
+				this.store.update((state) => {
+					state.status = "loading";
+					state.error = null;
+				});
+				await this.describeFace.ensure();
+				if (this.describeFace.getSnapshot().status !== "unavailable") try {
+					await this.catalog.load();
+				} catch (error) {
+					this.fail(error);
+					return;
+				}
+				this.derive();
+			}
+			/**
+			* Persist one preset as the default for subsequently created sessions.
+			* A selection made while one is already saving is ignored — the row's
+			* control is disabled during the save, so this only drops programmatic
+			* double-submits rather than user intent.
+			* @param preset - advertised preset key.
+			* @returns nothing; {@link store} carries success or failure.
+			*/
+			async select(preset) {
+				const state = this.store.getSnapshot();
+				const view = this.describeFace.getSnapshot().view?.namespaces.find((entry) => entry.ns === PERMISSION_SETTINGS_NS);
+				if (view === void 0 || !state.writable || this.saving) return;
+				this.saving = true;
+				this.store.update((draft) => {
+					draft.status = "saving";
+					draft.error = null;
+				});
+				let response;
+				try {
+					response = await this.ctx.remote.settings.mutate(PERMISSION_SETTINGS_NS, [{
+						op: "set",
+						path: ["defaultPreset"],
+						value: preset
+					}], view.revision);
+				} finally {
+					this.saving = false;
+				}
+				if (this.disposed) return;
+				if (!response.ok) {
+					this.fail(response.error);
+					return;
+				}
+				this.describeFace.acceptView(response.value);
+			}
+			/** Stop following the mirror; later publishes leave the snapshot alone. */
+			dispose() {
+				this.disposed = true;
+				this.following?.();
+				this.following = void 0;
+				this.followingCatalog?.();
+				this.followingCatalog = void 0;
+			}
+			derive() {
+				if (this.disposed || this.saving) return;
+				const mirrored = this.describeFace.getSnapshot();
+				if (mirrored.status === "unavailable") {
+					this.store.update((state) => {
+						state.status = "unavailable";
+						state.writable = false;
+						state.currentValue = "";
+						state.options = [];
+					});
+					return;
+				}
+				if (mirrored.view === void 0) {
+					if (mirrored.error !== null) this.fail(new Error(mirrored.error));
+					return;
+				}
+				const view = mirrored.view.namespaces.find((entry) => entry.ns === PERMISSION_SETTINGS_NS);
+				if (view === void 0) {
+					this.store.update((state) => {
+						state.status = "unavailable";
+						state.writable = false;
+						state.currentValue = "";
+						state.options = [];
+					});
+					return;
+				}
+				try {
+					const catalog = this.catalog.store.getSnapshot().value;
+					if (catalog === null) return;
+					const resolved = permissionDefaultOf(view, catalog);
+					const { writable } = mirrored.view;
+					this.store.update((state) => {
+						state.status = "ready";
+						state.error = null;
+						state.writable = writable;
+						state.currentValue = resolved.currentValue;
+						state.options = resolved.options;
+						state.revision = view.revision;
+					});
+				} catch (error) {
+					this.fail(error);
+				}
+			}
+			fail(error) {
+				this.store.update((state) => {
+					state.status = "error";
+					state.error = error instanceof Error ? error.message : String(error);
+				});
+			}
+		};
+		//#endregion
+		//#region lib/types/client/permission/session-axes-seed.js
+		/**
+		* 记录缺席时两个下拉该显示的那一对轴：宿主 `seedPair` 的逐字镜像。
+		*
+		* 宿主那一份在 `@t4r71/dsh-dual-axis` 的 `src/session-store.ts`，是
+		* `seedAxesFor` 的纯核：设置页那一行（`read` / `write` / `defaultGroups`），
+		* 加上子代理子会话从**父会话当刻的记录**继承来的那一对，折成「这条会话在新存储里
+		* 还没有记录时被钉下、也被判定路径执行的那一对」。记录落地之前，活读路径（模型提示词、
+		* 读围栏、`/axis` 的兜底）交回的就是它，所以界面必须显示同一个值 —— 显示别的就是
+		* 「界面显示 A、宿主执行 B」：设置页默认若是「禁止读」，那一轮仍然被当成「全盘读」。
+		*
+		* 为什么另起一个模块：它必须能在**零依赖**的程序里被直接加载，好让宿主包的
+		* `tests/seed-parity.spec.ts` 把两侧喂同一组输入、断言输出逐字相等（这是防止两份
+		* 实现以后各自漂移的唯一手段）。因此本文件不 import 任何东西，下面每一步都与宿主那
+		* 一份一一对应：取值集合、校验顺序、键的插入顺序、连报错条件都一致。
+		*
+		* 与 `./session-axes-data.ts` 的分工：那边负责「文档里有没有这条会话的记录」，
+		* 这边只负责「没有记录时那一对该是什么」。
+		*
+		* @module @deepseek-ai/dsh-client-ui-permission-presets/client/session-axes-seed
+		*/
+		/** 四种取值，校验顺序与宿主的 `AXIS_KINDS` 相同。 */
+		const AXIS_KINDS$1 = [
+			"deny",
+			"workspace",
+			"all",
+			"custom"
+		];
+		/** 三个底座，校验顺序与宿主的 `AXIS_BASES` 相同。 */
+		const AXIS_BASES$1 = [
+			"deny",
+			"workspace",
+			"all"
+		];
+		/**
+		* 读不懂任何输入时的那一对：宿主 `DEFAULT_AXES` 的同一对取值
+		* （`packages/bundle/dual-axis/src/axis.ts` 的 `DEFAULT_READ_SCOPE` /
+		* `DEFAULT_WRITE_SCOPE`）。
+		*
+		* 它**不再**是「会话没有记录」时的答案 —— 那是 {@link sessionAxesSeed} 算出来的
+		* 种子。这一对只在设置页那一行整个读不懂时出现，而宿主在那同一种情形下交回的也正是
+		* 它（`seedPair` 的 catch 与 `ensure` 的 catch 都答 `DEFAULT_AXES`）。
+		*/
+		const SESSION_AXES_FALLBACK = Object.freeze({
+			read: Object.freeze({ kind: "all" }),
+			write: Object.freeze({ kind: "workspace" })
+		});
+		/**
+		* 一条配置字段是「普通对象」还是别的东西。数组也算对象，与宿主一致：数组随后会在
+		* `kind` 那一关被拒，判定因此仍然落在同一处。
+		* @param value - 待判定的取值。
+		* @returns 是否是非 null 的 object。
+		*/
+		function isObjectLike(value) {
+			return typeof value === "object" && value !== null;
+		}
+		/**
+		* 解开一个 `.volatile()` 字段的 accessor。文档走的是 JSON，正常只会拿到普通值；
+		* 保留这一步是为了与宿主逐字同形 —— 包括宿主在 `null` 上取属性会抛这一点，两侧因此
+		* 在同一个输入上落到同一条兜底。
+		* @param value - 字段取值。
+		* @returns 底层取值。
+		*/
+		function unwrapVolatile(value) {
+			if (value === void 0) return void 0;
+			const accessor = value;
+			return typeof accessor.get === "function" ? accessor.get() : value;
+		}
+		/**
+		* 一条轴的路径表（`allow` / `deny`）。宿主 `pathList` 的镜像：必须是绝对路径，
+		* 顺序即取值的一部分。
+		* @param label - 报错里的轴名。
+		* @param entry - 报错里的表名（`allow` 或 `deny`）。
+		* @param value - 未信任的列表取值。
+		* @returns 校验过的列表。
+		* @throws 不是字符串数组，或含非绝对路径条目时。
+		*/
+		function pathList(label, entry, value) {
+			if (value === void 0) return [];
+			if (!Array.isArray(value) || value.some((item) => typeof item !== "string")) throw new Error(`dual-axis: ${label} ${entry} must be an array of absolute path strings`);
+			for (const item of value) if (item.length === 0 || !isAbsoluteSpelling(item)) throw new Error(`dual-axis: ${label} ${entry} entry ${JSON.stringify(item)} must be an absolute path`);
+			return [...value];
+		}
+		/**
+		* 一条轴引用的组 id。宿主 `groupIds` 的镜像：只查「是非空字符串的名字」，
+		* 按首次出现去重；这个名字在库里存不存在是判定时的事。
+		* @param label - 报错里的轴名。
+		* @param value - 未信任的 `groups` 取值。
+		* @returns 去重后的 id 列表。
+		* @throws 不是非空字符串数组时。
+		*/
+		function groupIds(label, value) {
+			if (value === void 0) return [];
+			if (!Array.isArray(value) || value.some((item) => typeof item !== "string" || item.length === 0)) throw new Error(`dual-axis: ${label} groups must be an array of non-empty rule-group ids`);
+			return [...new Set(value)];
+		}
+		/**
+		* 一个配置路径在拼写上是否绝对。宿主 `isAbsoluteSpelling` 的镜像：POSIX 与
+		* Windows 两种拼法都收，真正绑定到本机的是随后的规范化。
+		* @param path - 配置里的路径拼写。
+		* @returns 是否绝对。
+		*/
+		function isAbsoluteSpelling(path) {
+			return path.startsWith("/") || /^[A-Za-z]:[\\/]/.test(path) || path.startsWith("\\\\");
+		}
+		/**
+		* 一条轴取值从文档（人手可能改过）收窄成合法的轴。宿主 `normalizeScope` 的镜像：
+		* 读不懂就抛，绝不猜一个更宽或更窄的边界。
+		* @param label - 报错里的轴名（`read` 或 `write`）。
+		* @param value - 未信任的轴取值。
+		* @returns 合法的轴取值。
+		* @throws 不是四种取值之一，或 custom 的底座/路径不合法时。
+		*/
+		function normalizeAxis(label, value) {
+			if (typeof value !== "object" || value === null) throw new Error(`dual-axis: ${label} must be an access-axis object, received ${JSON.stringify(value)}`);
+			const candidate = value;
+			if (typeof candidate.kind !== "string" || !AXIS_KINDS$1.includes(candidate.kind)) throw new Error(`dual-axis: ${label} carries unknown kind ${JSON.stringify(candidate.kind)} (expected: ${AXIS_KINDS$1.join(", ")})`);
+			if (candidate.kind !== "custom") return { kind: candidate.kind };
+			if (typeof candidate.base !== "string" || !AXIS_BASES$1.includes(candidate.base)) throw new Error(`dual-axis: ${label} custom base must be ${AXIS_BASES$1.join(", ")}, received ${JSON.stringify(candidate.base)}`);
+			return {
+				kind: "custom",
+				base: candidate.base,
+				groups: groupIds(label, candidate.groups),
+				allow: pathList(label, "allow", candidate.allow),
+				deny: pathList(label, "deny", candidate.deny)
+			};
+		}
+		/**
+		* 设置页那一行折成一对轴。宿主 `axesOf` 的镜像：两侧缺席时各退回内置默认轴。
+		* @param row - 那一行的取值，未信任。
+		* @returns 那一行声明的两条轴。
+		* @throws 任一条轴读不懂时。
+		*/
+		function axesOfRow(row) {
+			const declared = isObjectLike(row) ? row : {};
+			return {
+				read: normalizeAxis("read", unwrapVolatile(declared.read) ?? { kind: "all" }),
+				write: normalizeAxis("write", unwrapVolatile(declared.write) ?? { kind: "workspace" })
+			};
+		}
+		/**
+		* 重新收窄另一处读出来的一对轴。宿主 `pairOf` 的镜像：宿主写下的那一对本就是收窄过的，
+		* 而客户端从文档里读到的父会话记录是原始字节，两侧必须过同一道校验才谈得上逐字相等。
+		* @param pair - 未信任的一对轴。
+		* @returns 收窄后的一对轴。
+		* @throws 任一成员不是合法轴取值时。
+		*/
+		function pairOf(pair) {
+			return {
+				read: normalizeAxis("read", pair.read),
+				write: normalizeAxis("write", pair.write)
+			};
+		}
+		/**
+		* 设置页那一行声明的 `defaultGroups`。宿主 `defaultGroupIds` 的镜像。
+		* @param row - 那一行的取值，未信任。
+		* @returns 去重后的组 id；没声明时为空。
+		* @throws 声明了非法的组 id 时。
+		*/
+		function defaultGroupIds(row) {
+			return groupIds("defaultGroups", isObjectLike(row) ? unwrapVolatile(row.defaultGroups) : void 0);
+		}
+		/**
+		* 把新会话默认加载的组 id 挂到**自己就是 `custom` 的那条轴**上，其余轴按声明原样留下。
+		* 宿主 `seedGroupReferences` 的镜像。
+		*
+		* 逐轴独立判断：只有 kind 本身就是 `custom` 的轴才带得住引用。判在设置页那一行上
+		* （一个并不绑定到轴的勾选框）会把 `read: all` 提升成 `read: { kind: 'custom', base: 'all' }`，
+		* 而两条轴谁都没被选成自定义。闭合成取值没有地方放 id，原样播种 —— 提升会报出一条
+		* 设置页从没显示过的自定义范围。两条轴因此互不影响：一条挂组，另一条保持闭合取值。
+		* @param axes - 被播种的那一对轴。
+		* @param ids - 设置页那一行的 `defaultGroups`。
+		* @returns 带上这些引用的那一对轴。
+		*/
+		function seedGroupReferences(axes, ids) {
+			if (ids.length === 0) return axes;
+			const attach = (axis) => axis.kind === "custom" ? {
+				...axis,
+				groups: [.../* @__PURE__ */ new Set([...axis.groups ?? [], ...ids])]
+			} : axis;
+			return {
+				read: attach(axes.read),
+				write: attach(axes.write)
+			};
+		}
+		/**
+		* 记录缺席时该显示的那一对轴 —— 与宿主 `seedPair` 同一份计算、同一个兜底。
+		*
+		* 永不抛：设置页那一行读不懂、父会话记录读不懂，一律答
+		* {@link SESSION_AXES_FALLBACK}，与宿主在同一种输入上的答案相同。
+		* @param row - 设置页那一行（`dual-axis` 命名空间）的取值，未信任。
+		* @param inherited - 子代理子会话从父会话记录继承来的那一对，或 `undefined`。
+		* @returns 这条会话此刻被钉下、也被被执行的那一对轴。
+		*/
+		function sessionAxesSeed(row, inherited) {
+			try {
+				return seedGroupReferences(inherited === void 0 ? axesOfRow(row) : pairOf(inherited), defaultGroupIds(row));
+			} catch {
+				return SESSION_AXES_FALLBACK;
+			}
+		}
+		//#endregion
+		//#region lib/types/client/permission/session-axes-data.js
+		/**
+		* 会话轴在配置文档里的形状，以及按会话 id 取值的纯读取。
+		*
+		* 单独一个模块，唯一的理由是它必须能在**不被 store 依赖污染**的程序里被直接测到：
+		* 本包的宿主半边把它存进自有的设置命名空间 `dual-axis-sessions`，字段名与结构是
+		* 两边之间的接口，改一处就要改另一处。订阅与快照那一层在 `./session-axes.ts`。
+		*
+		* 这里只管**文档里有没有这条会话的记录**。「没有记录时该显示哪一对」是另一件事，
+		* 由 `./session-axes-seed.ts` 按与宿主同一份计算给出 —— 那一对是设置页那一行
+		* （加上子代理继承），不是内置默认对。
+		*
+		* @module @deepseek-ai/dsh-client-ui-permission-presets/client/session-axes-data
+		*/
+		/** 宿主存轴用的设置命名空间（Loader entry id）。 */
+		const SESSION_AXES_NAMESPACE = "dual-axis-sessions";
+		/** 设置页那一行的设置命名空间（Loader entry id）：新会话的**种子**来源。 */
+		const DUAL_AXIS_ROW_NAMESPACE = "dual-axis";
+		/**
+		* 从一条记录里读出宿主发布的收窄结论。
+		*
+		* 未信任输入：文档可能被人手改过，也可能带着旧版本写下的、没有这个成员的记录。
+		* 前者读不懂就**丢掉**（当作没有收窄可显示），而不是把一份读不出来的报告渲染成
+		* 「什么也没被削」—— 那正是最坏的那一种错。后者（成员整个缺席）本来就是「没有收窄」，
+		* 与宿主围栏在那种记录下执行的范围一致。
+		* @param value - 记录里的 `narrowing` 成员，未信任。
+		* @returns 收窄结论，或 undefined（缺席 / 读不懂 / 两侧都说没有）。
+		*/
+		function narrowingOf(value) {
+			if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+			const candidate = value;
+			if (typeof candidate.narrowed !== "boolean" || typeof candidate.lostUnbounded !== "boolean") return void 0;
+			if (!candidate.narrowed) return void 0;
+			const dropped = candidate.droppedRoots;
+			if (!Array.isArray(dropped) || dropped.some((root) => typeof root !== "string")) return void 0;
+			return {
+				narrowed: true,
+				droppedRoots: [...dropped],
+				lostUnbounded: candidate.lostUnbounded
+			};
+		}
+		/**
+		* 一份 describe 快照里，本命名空间那一行的取值。
+		* @param namespaces - 快照里的全部命名空间行，或 undefined（还没有读到答案）。
+		* @returns 那一行的取值，或 undefined（宿主没服务这一节）。
+		*/
+		function sessionAxesSectionValue(namespaces) {
+			return namespaces?.find((row) => row.ns === SESSION_AXES_NAMESPACE)?.value;
+		}
+		/**
+		* 一份 describe 快照里，设置页那一行（`dual-axis`）的取值 —— 新会话的种子。
+		*
+		* 它与 {@link sessionAxesSectionValue} 是**两节**，不能混：那一行的 read/write/defaultGroups
+		* 描述的是**将要建立**的会话，判定路径不读它；而「这条会话没有记录」时判定路径执行的
+		* 是种子算出来的那一对，所以界面必须能读到同一行才能显示同一个值。
+		* @param namespaces - 快照里的全部命名空间行，或 undefined。
+		* @returns 那一行的取值，或 undefined（宿主没服务这一节）。
+		*/
+		function sessionAxesRowValue(namespaces) {
+			return namespaces?.find((row) => row.ns === DUAL_AXIS_ROW_NAMESPACE)?.value;
+		}
+		/**
+		* 按会话 id 从一份文档快照里取出那一对轴。
+		*
+		* 未信任输入：文档可能被人手改过、也可能由别的写入方改过，所以只在形状真的读得懂时才
+		* 返回取值；读不懂时返回 `undefined`，由 {@link sessionAxesView} 决定那是「照种子
+		* 显示」还是「无从得知」。这里**不抛**：一个读不懂的会话轴不该让整个输入条崩掉。
+		* @param value - 本命名空间那一行的取值。
+		* @param sessionId - 要读的那条会话。
+		* @returns 那条会话的轴对，或 undefined。
+		*/
+		function sessionAxesOf(value, sessionId) {
+			if (sessionId === void 0) return void 0;
+			if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+			const field = value.axes;
+			if (typeof field !== "object" || field === null || Array.isArray(field)) return void 0;
+			const record = field[sessionId];
+			if (typeof record !== "object" || record === null || Array.isArray(record)) return void 0;
+			const pair = record;
+			if (typeof pair.read !== "object" || pair.read === null) return void 0;
+			if (typeof pair.write !== "object" || pair.write === null) return void 0;
+			const narrowing = narrowingOf(pair.narrowing);
+			return {
+				read: pair.read,
+				write: pair.write,
+				...narrowing === void 0 ? {} : { narrowing }
+			};
+		}
+		/**
+		* Resolve what the two dropdowns show for one session.
+		*
+		* Never returns nothing and never throws: an unreadable document, an unknown
+		* session id, and a missing record each have a state of their own.
+		* @param namespaces - every namespace row of one describe snapshot, or `undefined`
+		*   when the mirror has not delivered a document (which is NOT the same as a
+		*   document that carries no record for this session).
+		* @param sessionId - the session to read; `undefined` when none is selected.
+		* @param parentSessionId - the session's parent when it is a subagent child, which
+		*   changes the seed: a child inherits its parent's STORED pair rather than the
+		*   settings row, exactly as `inheritedAxes` does on the host. `undefined` for a
+		*   top-level session (and for a child whose lineage the client has not learned).
+		* @returns the view the dropdowns render from.
+		*/
+		function sessionAxesView(namespaces, sessionId, parentSessionId) {
+			if (sessionId === void 0) return { state: "unknown" };
+			if (namespaces === void 0) return { state: "unknown" };
+			const stored = sessionAxesSectionValue(namespaces);
+			const axes = sessionAxesOf(stored, sessionId);
+			if (axes !== void 0) return {
+				state: "record",
+				axes
+			};
+			const inherited = parentSessionId === void 0 ? void 0 : sessionAxesOf(stored, parentSessionId);
+			return {
+				state: "default",
+				axes: sessionAxesSeed(sessionAxesRowValue(namespaces), inherited)
+			};
+		}
+		//#endregion
+		//#region lib/types/client/permission/session-axes.js
+		/**
+		* 会话轴在本包浏览器半边的取值面：从共享的 settings describe 镜像里，按**会话 id**
+		* 读出这条会话的那一对轴。
+		*
+		* 轴不再随会话日志下发（宿主半边把它存进自有的设置命名空间 `dual-axis-sessions`，
+		* 见 `@t4r71/dsh-dual-axis/session-store`），于是客户端唯一的取数通道就是那份
+		* 配置文档的镜像。变更通知因此是免费的：宿主写文档后发 `settings/document-updated`，
+		* 该事件在转发白名单上，共享镜像已订阅它并重读（`ui-settings/src/client/index.ts:43`），
+		* 本目录只是跟着镜像的快照走。
+		*
+		* 读的是**另一个命名空间**里的按会话分区字段，不是设置页那一行
+		* （`dual-axis`）：那一行的 read/write/defaultGroups 是新会话的种子，已经在跑的
+		* 会话只认自己的记录。但**记录缺席**时两者交汇：那时宿主执行的正是那一行算出来的
+		* 种子（见 `./session-axes-seed.ts`），所以本目录在没有记录时也要读那一行，才能显示
+		* 与宿主同一个值。分组库仍由那一行的表单拥有，见 `./axis-editor.ts`。
+		*
+		* @module @deepseek-ai/dsh-client-ui-permission-presets/client/session-axes
+		*/
+		/**
+		* 会话轴目录：把共享镜像的快照换成一个能直接喂给 `useSyncExternalStore` 的稳定值。
+		*
+		* 快照在这里重新发布，而不是把镜像的快照原样透出去：镜像每次重读都换一个对象，
+		* 而重渲染的代价只有在这一层做一次比较才能省掉。比较是序列化比较 —— 镜像只在这份
+		* 文档真的变了之后才发布（宿主只在 entry 的 raw 变化时发 `settings/document-updated`，
+		* 见 `settings/src/index.ts:311-317`），所以那次序列化每次文档变更只做一次。
+		*/
+		var SessionAxesDirectory = class {
+			describeFace;
+			parentOf;
+			local;
+			following;
+			/**
+			* @param describeFace - 共享的 describe 镜像（`ctx.configForms.describe()`）。
+			* @param parentOf - 这条会话的父会话 id；默认「不是子会话」，于是种子只按设置页那一行算。
+			*/
+			constructor(describeFace, parentOf = () => void 0) {
+				this.describeFace = describeFace;
+				this.parentOf = parentOf;
+				this.local = (0, _deepseek_ai_dsh_client_store.createSnapshotStore)(describeFace.getSnapshot());
+				this.following = describeFace.subscribe(() => {
+					this.fold();
+				});
+				this.fold();
+			}
+			/** 稳定快照，直接交给 `useSyncExternalStore`。 */
+			getSnapshot = () => this.local.getSnapshot();
+			/** 订阅本地快照的替换。 */
+			subscribe = (listener) => this.local.subscribe(listener);
+			/**
+			* 一条会话当刻该显示的轴。同步，供编辑器取初值与提交后的核对使用。
+			* @param sessionId - 当前会话 id；没有选中会话时是 undefined。
+			* @returns 三态取值：有记录 / 照这条会话的种子显示 / 无从得知。
+			*/
+			axesOf = (sessionId) => sessionAxesView(this.local.getSnapshot().view?.namespaces, sessionId, sessionId === void 0 ? void 0 : this.parentOf(sessionId));
+			/** 停掉对镜像的跟随；之后的发布不再进入本目录。 */
+			dispose() {
+				this.following();
+			}
+			fold() {
+				const held = this.local.getSnapshot();
+				const next = this.describeFace.getSnapshot();
+				if (JSON.stringify(next.view?.namespaces ?? null) === JSON.stringify(held.view?.namespaces ?? null) && next.status === held.status && next.error === held.error) return;
+				this.local.set(next);
+			}
+		};
+		//#endregion
+		//#region lib/types/client/permission/index.js
+		/**
+		* Permission plugin, browser half. The `/permission` slash popup stays the
+		* PRESET picker (a full bundle switch), while the composer control is two
+		* independent axis dropdowns — read and write — each carrying one of
+		* `deny / workspace / all / custom`, and each displaying its own current
+		* value (no preset name is shown). Options read the process catalog (preset
+		* contract: id, label, optional detail/badge). The composer's axes read the
+		* session `permissions` projection for their CURRENT kinds and the same
+		* catalog for the values each axis offers, and submit `/permission
+		* <axis>:<value>`. A pick is applied directly: the
+		* full-access/full-permission acknowledgement step is gone, because a visible
+		* selection is already an explicit one. The General-settings row separately
+		* writes the default preset for sessions created later through the host
+		* Settings API.
+		*/
+		/**
+		* 双轴组合包在宿主上注册的设置节名（`@t4r71/dsh-dual-axis`）。
+		*
+		* 0.1.7 的设置命名空间就是 Loader entry id（`packages/settings/settings/src/index.ts`
+		* 的 `describe()` 按已装载 entry 投影），而宿主那一行在 `cordis.patch.yml` 里就叫
+		* `dual-axis`（`packages/bundle/dual-axis/src/config.ts` 的 `DUAL_AXIS_ROW_ID`）。
+		* 0.1.6 的 `sandbox-axis` 已经退役：写它取不到任何值，于是这张表单永远返回
+		* undefined，编辑器的部署兜底静默退化成编译期默认。
+		*
+		* 这一节持有「新会话从哪两条轴开始」。两个下拉的路径编辑器只在**会话还没有这条轴**
+		* 时以它为初值；对话级的选择永远优先。
+		*/
+		const DUAL_AXIS_SETTINGS_NAMESPACE = "dual-axis";
+		/** 提交之后最多等多久，等这次取值出现在设置文档里。 */
+		const AXIS_CONFIRM_TIMEOUT_MS = 3e3;
+		/** Required services (cordis fiber inject). */
+		const inject$2 = [
+			"commandUi",
+			"connection",
+			"sessions",
+			"slots",
+			"locale",
+			"remote",
+			"remote.permissionPresets",
+			"remote.settings",
+			"configForms"
+		];
+		/** Read one session's current permissions projection value (undefined = capability absent). */
+		function selectionOf(session) {
+			return session?.projections.faceOf("permissions").getSnapshot();
+		}
+		/**
+		* Join the process catalog with one Session's current value. Options carry no
+		* acknowledgement gate, so a pick is applied directly. A built-in preset's
+		* label is localized from this package's dictionary: the host catalog names
+		* those entries by their machine value (`read-only`), and showing that kebab
+		* key to a person is a regression, not a design. A deployment's own preset name
+		* is not recognized by the dictionary and is displayed verbatim.
+		* @param catalog - the current Host's complete preset catalog.
+		* @param currentValue - the session's current preset identity.
+		* @param t - this package's locale seat.
+		* @returns the option rows the shared popup shell renders.
+		*/
+		function optionsOf(catalog, currentValue, t) {
+			return catalog.options.map((option) => ({
+				id: option.value,
+				label: displayPermissionPreset(option.value, option.value === option.name ? option.value : option.name, (key) => t(key)),
+				...option.description !== void 0 ? { detail: option.description } : {},
+				...option.value === currentValue ? { active: true } : {}
+			}));
+		}
+		/**
+		* Client plugin body: register the /permission popup picker over the
+		* permissions projection.
+		* @param ctx - client root context.
+		*/
+		function apply$2(ctx) {
+			const command = ctx.get("commandUi");
+			const sessions = ctx.sessions;
+			ctx.effect(() => ctx.locale.register(PERMISSION_ACCESS_NS, {
+				zh: accessZh,
+				en: accessEn
+			}), "ui-permission: current-session dictionaries");
+			const t = ctx.locale.bind(PERMISSION_ACCESS_NS);
+			const sessionFor = (session) => sessions.binding(session.sessionId)?.session;
+			/**
+			* 一次 `/axis` 调用被宿主**接受**（命令解析得到、handler 跑完）。
+			*
+			* 注意它不说明这次改动有没有写进去：`Session.command` 把结果收成 `matched`
+			* （`packages/api/session-controller/src/client/sessions/session.ts:387-391`，`matched: result.value !== undefined`），丢掉了 handler 自己的 `kind`/`text`。
+			* handler 返回 `{ kind: 'error' }` 的命令同样得到 `matched: true`。写入是否生效因此只能
+			* 由 {@link select} 回读文档来判断。
+			*/
+			const submit = async (sessionId, args) => {
+				const live = sessions.binding(sessionId)?.session;
+				if (live === void 0) throw new Error("this session is not materialized yet");
+				const result = await live.command("/axis " + args);
+				if (!result.ok) throw new Error(`permission switch failed: ${result.error.code}: ${result.error.message}`);
+				if (!result.value.matched) throw new Error("the host offers no /axis command");
+			};
+			/**
+			* 等这条会话在设置文档里真的变成 `expected`。
+			*
+			* 宿主写完轴是整份文档的异步写，写完才发 `settings/document-updated`，镜像再重读，
+			* 所以这里给的是一个有上界的等待而不是一次即时读。等到就是成功；等不到回答 `false`
+			* —— 那正是「命令执行了但没写进去」，界面据此把失败说出来，而不是关掉编辑器假装成功。
+			* @param sessionId - 提交所属的会话。
+			* @param axis - 这次写的哪条轴。
+			* @param expected - 这次提交应当落成的取值。
+			* @returns 文档里是否出现了这次取值。
+			*/
+			const stored = async (sessionId, axis, expected) => {
+				const deadline = Date.now() + AXIS_CONFIRM_TIMEOUT_MS;
+				for (;;) {
+					const view = sessionAxes.axesOf(sessionId);
+					if (view.state === "record" && sameStoredAxis(view.axes[axis], expected)) return true;
+					if (Date.now() >= deadline) return false;
+					await new Promise((resolve) => {
+						setTimeout(resolve, 100);
+					});
+				}
+			};
+			const catalog = new PermissionCatalogDirectory(ctx);
+			ctx.effect(() => () => {
+				catalog.dispose();
+			}, "ui-permission: process catalog directory");
+			ctx.effect(() => catalog.invalidations.subscribe(() => {
+				command.dismiss("permission");
+			}), "ui-permission: dismiss stale slash choices");
+			ctx.effect(() => ctx.locale.register("settings.permission", {
+				zh: zh$1,
+				en: en$1
+			}), "ui-permission: settings row dictionaries");
+			const controller = new PermissionPresetSettingsController(ctx.configForms.describe(), ctx, catalog);
+			const load = () => controller.load();
+			const select = (preset) => controller.select(preset);
+			const injected = () => ({
+				hooks: { permission: controller.store },
+				load,
+				select
+			});
+			ctx.effect(() => () => {
+				controller.dispose();
+			}, "ui-permission: settings row directory");
+			const parentOf = (sessionId) => sessions.subagentAddress(sessionId)?.parentSessionId;
+			const sessionAxes = new SessionAxesDirectory(ctx.configForms.describe(), parentOf);
+			ctx.effect(() => () => {
+				sessionAxes.dispose();
+			}, "ui-permission: session axes directory");
+			ctx.slots.inject("settings.general.item", () => ctx.slots.register({
+				name: "settings.general.item",
+				id: "permission",
+				order: -20,
+				locale: "settings.permission",
+				inject: injected
+			}, PermissionRow));
+			const globalForm = ctx.configForms.get(DUAL_AXIS_SETTINGS_NAMESPACE);
+			const globalAxes = () => globalForm.getSnapshot().value ?? {};
+			const globalOf = (axis) => {
+				const value = globalAxes()[axis];
+				if (typeof value !== "object" || value === null) return void 0;
+				const candidate = value;
+				return typeof candidate.kind === "string" ? candidate : void 0;
+			};
+			ctx.slots.inject("conversation.input.permission", () => ctx.slots.register({
+				name: "conversation.input.permission",
+				locale: PERMISSION_ACCESS_NS,
+				inject: (sessionId) => ({
+					hooks: { permissionCatalog: catalog.store },
+					select: async (axis, args, expected) => {
+						await submit(sessionId, args);
+						return await stored(sessionId, axis, expected);
+					},
+					global: (axis) => globalOf(axis),
+					groupLibrary: () => groupOptionsOf(globalAxes().groups),
+					sessionAxes: {
+						useAxes: (sessionId) => {
+							return sessionAxesView((0, react.useSyncExternalStore)(sessionAxes.subscribe, sessionAxes.getSnapshot).view?.namespaces, sessionId, sessionId === void 0 ? void 0 : parentOf(sessionId));
+						},
+						axesOf: (sessionId) => sessionAxes.axesOf(sessionId)
+					}
+				})
+			}, PermissionSelect));
+			ctx.effect(() => command.decorate({
+				name: "permission",
+				available: (session) => selectionOf(sessionFor(session)) !== void 0,
+				ui: {
+					kind: "popupSelect",
+					options: async (session) => {
+						const selection = selectionOf(sessionFor(session));
+						if (selection === void 0) throw new Error("permission presets are not available on this host");
+						return optionsOf(await catalog.load(), selection.currentValue, t);
+					},
+					onSelect: (option, session) => submit(session.sessionId, option.id).then(() => void 0)
+				}
+			}), "ui-permission: /permission decoration");
+		}
+		//#endregion
+		//#region lib/types/client/row/axes.js
+		/**
+		* 双轴配置页的纯函数层：把设置节里的一条轴收成可编辑的草稿、把草稿收成一条
+		* 轴值、把一条轴渲染成一句话。这里不碰 React、不碰 DOM，也不碰宿主 —— 界面
+		* 半边每次挂载与每次保存都走这几个函数，因此"页面上能改的形状"与"宿主接受
+		* 的形状"只有这一份定义。
+		*
+		* @module @t4r71/dsh-dual-axis-ui/client/axes
+		*/
+		/** 界面上的四条轴取值，顺序即下拉顺序：从最窄到最宽，custom 排在最后。 */
+		const AXIS_KINDS = [
+			"deny",
+			"workspace",
+			"all",
+			"custom"
+		];
+		/** 界面上的三个底座，顺序即下拉顺序。 */
+		const AXIS_BASES = [
+			"deny",
+			"workspace",
+			"all"
+		];
+		/**
+		* 一条绝对路径写法（POSIX 或 Windows）。与宿主半边的同名校验同一条规则：相对
+		* 路径只能相对宿主进程的 cwd 解析，不可能是写配置的人想说的位置。
+		* @param value - 待检查的路径写法。
+		* @returns 该写法是否为绝对路径。
+		*/
+		function isAbsolutePath(value) {
+			return value.startsWith("/") || /^[A-Za-z]:[\\/]/.test(value) || value.startsWith("\\\\");
+		}
+		/**
+		* 把一个未信任的值收成一条轴值。
+		* @param value - 设置节里的取值，或 `undefined`。
+		* @returns 一条轴值；形状不对时返回 undefined，由调用方决定用什么兜底。
+		*/
+		function axisValueOf$1(value) {
+			if (typeof value !== "object" || value === null) return void 0;
+			const candidate = value;
+			if (typeof candidate.kind !== "string" || !AXIS_KINDS.includes(candidate.kind)) return void 0;
+			if (candidate.kind !== "custom") return { kind: candidate.kind };
+			if (typeof candidate.base !== "string" || !AXIS_BASES.includes(candidate.base)) return void 0;
+			return {
+				kind: "custom",
+				base: candidate.base,
+				allow: stringList(candidate.allow),
+				deny: stringList(candidate.deny)
+			};
+		}
+		/**
+		* 把一份字符串列表读出来；不是数组的取值读成空列表。
+		* @param value - 待读取的值。
+		* @returns 其中的字符串成员。
+		*/
+		function stringList(value) {
+			return Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
+		}
+		/**
+		* 把一条轴值收成界面草稿。
+		* @param value - 设置节里的取值。
+		* @param fallback - 取值缺失或读不懂时使用的兜底轴（组合层声明的默认值）。
+		* @returns 一份可编辑的草稿。
+		*/
+		function draftOf(value, fallback) {
+			return draftOfAxis(axisValueOf$1(value) ?? fallback, axisValueOf$1(value) === void 0 && value !== void 0 ? "宿主给出的这条轴读不懂，已退回组合默认值" : "");
+		}
+		/**
+		* 把一条已经收好的轴值转成草稿。
+		* @param axis - 一条轴值。
+		* @param problem - 直接带上的说明；不传即没有内容可说明。
+		* @returns 一份可编辑的草稿。
+		*/
+		function draftOfAxis(axis, problem = "") {
+			const kind = axis.kind;
+			return {
+				kind,
+				base: kind === "custom" ? axis.base : "workspace",
+				allow: kind === "custom" ? axis.allow.join("\n") : "",
+				deny: kind === "custom" ? axis.deny.join("\n") : "",
+				problem
+			};
+		}
+		/**
+		* 把草稿收成一条可以写回设置的轴值。非 custom 的草稿只带取值本身 —— 界面上
+		* 留着的历史路径不会被写进另一条取值里，否则切一次取值就等于做了一次没人要求
+		* 的授权。
+		* @param draft - 界面上的草稿。
+		* @returns 一条轴值，或一条说明这份草稿为什么还不能保存的话。
+		*/
+		function scopeOf(draft) {
+			if (!AXIS_KINDS.includes(draft.kind)) return {
+				ok: false,
+				problem: `未知的取值 ${draft.kind}`
+			};
+			if (draft.kind !== "custom") return {
+				ok: true,
+				value: { kind: draft.kind }
+			};
+			if (!AXIS_BASES.includes(draft.base)) return {
+				ok: false,
+				problem: `未知的底座 ${draft.base}`
+			};
+			const allow = pathLines(draft.allow);
+			const deny = pathLines(draft.deny);
+			for (const [entry, paths] of [["allow", allow], ["deny", deny]]) {
+				const bad = paths.find((path) => !isAbsolutePath(path));
+				if (bad !== void 0) return {
+					ok: false,
+					problem: `${entry} 里的 ${JSON.stringify(bad)} 不是绝对路径`
+				};
+			}
+			return {
+				ok: true,
+				value: {
+					kind: "custom",
+					base: draft.base,
+					allow,
+					deny
+				}
+			};
+		}
+		/**
+		* 把一个多行文本框读成路径列表：忽略空行与首尾空白。
+		* @param text - 文本框里的原文。
+		* @returns 其中每一行作为一条路径。
+		*/
+		function pathLines(text) {
+			return text.split(/\r?\n/u).map((line) => line.trim()).filter((line) => line !== "");
+		}
+		/**
+		* 两条轴是否描述同一个边界。逐成员比较：custom 的两个路径列表连顺序都是它取值
+		* 的一部分，而每次重解析都会新建轴对象。
+		* @param left - 一条轴。
+		* @param right - 另一条轴。
+		* @returns 两者是否描述同一条轴。
+		*/
+		function sameAxis(left, right) {
+			if (left.kind !== right.kind) return false;
+			if (left.kind !== "custom" || right.kind !== "custom") return true;
+			const sameList = (a, b) => a.length === b.length && a.every((value, index) => value === b[index]);
+			return left.base === right.base && sameList(left.allow, right.allow) && sameList(left.deny, right.deny);
+		}
+		/**
+		* 把一条轴渲染成一句话，供配置页的摘要行与草稿预览使用。
+		* @param axis - 一条轴值。
+		* @param text - 当前语言的文案表。
+		* @returns 一句话说明。
+		*/
+		function describeAxis(axis, text) {
+			if (axis.kind !== "custom") return text.kind(axis.kind);
+			const paths = [];
+			if (axis.allow.length > 0) paths.push(`+${axis.allow.join(", ")}`);
+			if (axis.deny.length > 0) paths.push(`-${axis.deny.join(", ")}`);
+			return text.custom(text.base(axis.base), paths.length === 0 ? "—" : paths.join(" "));
+		}
+		//#endregion
+		//#region lib/types/client/row/groups.js
+		/**
+		* 双轴配置页的规则组纯函数层：把设置节里的 `groups` / `defaultGroups` 收成可编辑
+		* 草稿、把草稿收成宿主解析器接受的组库。这里不碰 React、不碰 DOM、也不碰宿主 ——
+		* 界面每次挂载与每次保存都走这几个函数，因此「页面上能编的形状」与「宿主
+		* `parseLibrary` 接受的形状」只有这一份定义。
+		*
+		* 组体只在设置页这一份：会话按 id 引用它，判定时现取（规格 §「为什么对话里绝不能
+		* 存组体」）。所以这里的编辑结果写回的是**定义**，不是任何一条会话。
+		*
+		* @module @t4r71/dsh-dual-axis-ui/client/row/groups
+		*/
+		/**
+		* 把一个未信任的取值读成一份文本草稿：不是数组时读成空串（界面上不显示任何路径）。
+		* @param value - 设置文档里那条轴的 `allow` 或 `deny`。
+		* @returns 每行一条的文本。
+		*/
+		function textOfPaths(value) {
+			return (Array.isArray(value) ? value : []).filter((item) => typeof item === "string").join("\n");
+		}
+		/**
+		* 把一份未信任的组取值读成界面草稿。
+		* @param value - 组库里的一项。
+		* @param isDefault - 这个 id 是否在 `defaultGroups` 里。
+		* @returns 该组的草稿；id 不是一个字符串时用空串，让用户在界面上看见并改它。
+		*/
+		function draftOfGroup(value, isDefault) {
+			const candidate = typeof value === "object" && value !== null ? value : {};
+			const side = (rules) => {
+				const rules_ = typeof rules === "object" && rules !== null ? rules : {};
+				return {
+					allow: textOfPaths(rules_.allow),
+					deny: textOfPaths(rules_.deny)
+				};
+			};
+			return {
+				id: typeof candidate.id === "string" ? candidate.id : "",
+				name: typeof candidate.name === "string" ? candidate.name : "",
+				read: side(candidate.read),
+				write: side(candidate.write),
+				default: isDefault
+			};
+		}
+		/**
+		* 把设置文档里的组库与默认加载清单读成界面草稿。
+		*
+		* 读取是**宽容**的：这个函数的产物要能渲染出来让人修，所以读不懂的成员按空值处理，
+		* 而不是抛出去让整页打不开。挡住保存的是 {@link groupLibraryOf}，那里才拒绝坏取值。
+		* @param groups - 设置文档里的 `groups`，未信任。
+		* @param defaultGroups - 设置文档里的 `defaultGroups`，未信任。
+		* @returns 每个组一份草稿，顺序与文档一致。
+		*/
+		function groupDraftsOf(groups, defaultGroups) {
+			if (!Array.isArray(groups)) return [];
+			const defaults = Array.isArray(defaultGroups) ? defaultGroups.filter((item) => typeof item === "string") : [];
+			return groups.map((entry) => {
+				const id = typeof entry === "object" && entry !== null ? entry.id : void 0;
+				return draftOfGroup(entry, typeof id === "string" && defaults.includes(id));
+			});
+		}
+		/**
+		* 一条草稿的某一侧：两个列表都空即这一侧缺席。
+		* @param side - 该侧的草稿。
+		* @returns 该侧的取值，或 undefined。
+		*/
+		function axisValueOf(side) {
+			const allow = pathLines(side.allow);
+			const deny = pathLines(side.deny);
+			if (allow.length === 0 && deny.length === 0) return void 0;
+			return {
+				allow,
+				deny
+			};
+		}
+		/**
+		* 把一份组草稿收成可以写回设置的组库。
+		*
+		* 校验与宿主 `parseLibrary` / `groupAt` 逐条对齐：id 非空且唯一，每条路径必须是
+		* 绝对路径。宿主在库读不懂时会让**每一次判定**都响亮失败，所以这里必须在写入之前
+		* 就挡住坏取值，而不是把一份宿主读不懂的库保存下去。
+		* @param drafts - 界面上的草稿。
+		* @param problemOf - 把说明键转成当前语言文案的回调。
+		* @returns 组库取值，或一句说明这份草稿为什么还不能保存的话。
+		*/
+		function groupLibraryOf(drafts, problemOf) {
+			const seen = /* @__PURE__ */ new Set();
+			const value = [];
+			for (const draft of drafts) {
+				const id = draft.id.trim();
+				if (id === "") return {
+					ok: false,
+					problem: problemOf("idEmpty", {})
+				};
+				if (seen.has(id)) return {
+					ok: false,
+					problem: problemOf("idDuplicate", { id })
+				};
+				seen.add(id);
+				const sides = [["read", draft.read], ["write", draft.write]];
+				for (const [side, rules] of sides) for (const [entry, text] of [["allow", rules.allow], ["deny", rules.deny]]) {
+					const bad = pathLines(text).find((path) => !isAbsolutePath(path));
+					if (bad !== void 0) return {
+						ok: false,
+						problem: problemOf("notAbsolute", {
+							id,
+							side,
+							entry,
+							path: bad
+						})
+					};
+				}
+				const read = axisValueOf(draft.read);
+				const write = axisValueOf(draft.write);
+				value.push({
+					id,
+					name: draft.name.trim() === "" ? id : draft.name,
+					...read === void 0 ? {} : { read },
+					...write === void 0 ? {} : { write }
+				});
+			}
+			return {
+				ok: true,
+				value
+			};
+		}
+		/**
+		* 草稿里被勾上「新对话默认加载」的组 id。
+		*
+		* 只在 {@link groupLibraryOf} 通过之后取用：那时 id 非空且唯一，所以这份清单本身
+		* 也是合法的 `defaultGroups`。
+		* @param drafts - 界面上的草稿。
+		* @returns 勾选顺序即文档顺序的 id 清单。
+		*/
+		function defaultGroupIdsOf(drafts) {
+			return drafts.filter((draft) => draft.default).map((draft) => draft.id.trim());
+		}
+		/**
+		* 给新加的一个组起一个还没有被占用的 id。
+		*
+		* 默认名 `g1`、`g2`…：id 是会话引用的东西，先给出一个能用的，再由人改。
+		* @param drafts - 当前已有的草稿。
+		* @returns 一个没有被占用的 id。
+		*/
+		function nextGroupId(drafts) {
+			const taken = new Set(drafts.map((draft) => draft.id.trim()));
+			for (let index = 1;; index += 1) {
+				const candidate = `g${String(index)}`;
+				if (!taken.has(candidate)) return candidate;
+			}
+		}
+		/**
+		* 一个空组的草稿：id 未被占用、名字留空（保存时用 id 顶上）、两侧规则都空、
+		* 默认不加载。空组是合法的 —— 组的内容随时可改，先建出来再填是正常用法。
+		* @param drafts - 当前已有的草稿。
+		* @returns 一份可以加进列表的草稿。
+		*/
+		function emptyGroupDraft(drafts) {
+			return {
+				id: nextGroupId(drafts),
+				name: "",
+				read: {
+					allow: "",
+					deny: ""
+				},
+				write: {
+					allow: "",
+					deny: ""
+				},
+				default: false
+			};
+		}
+		/**
+		* 两份组库是否描述同一份定义。
+		*
+		* 与轴的 `sameAxis` 同一个用法：保存时比对「现在的草稿」与「文档里已生效的值」，
+		* 相同就不发写入。逐成员比较而不是引用比较，因为每次重解析都会新建对象。
+		* @param left - 一份组库取值。
+		* @param right - 另一份组库取值。
+		* @returns 两者是否描述同一份组库。
+		*/
+		function sameGroupLibrary(left, right) {
+			const list = (value) => (value ?? []).join("\0");
+			const side = (value) => value === void 0 ? "" : list(value.allow) + "
" + list(value.deny);
+			if (left.length !== right.length) return false;
+			return left.every((group, index) => {
+				const other = right[index];
+				if (other === void 0) return false;
+				return group.id === other.id && group.name === other.name && side(group.read) === side(other.read) && side(group.write) === side(other.write);
+			});
+		}
+		/**
+		* 把一份已经收好的组库摊成设置文档接受的 JSON。
+		*
+		* 取值里的列表是 `readonly string[]`，而文档取值是可变的 JSON 数组：传只读数组会被
+		* 线上格式挡住，所以写入前摊平一层（与轴的 `jsonAxis` 同因）。
+		* @param library - 一份校验过的组库。
+		* @returns 同一份取值的可变副本。
+		*/
+		function jsonGroupLibrary(library) {
+			const side = (value) => value === void 0 ? void 0 : {
+				allow: [...value.allow],
+				deny: [...value.deny]
+			};
+			return library.map((group) => {
+				const read = side(group.read);
+				const write = side(group.write);
+				return {
+					id: group.id,
+					name: group.name,
+					...read === void 0 ? {} : { read },
+					...write === void 0 ? {} : { write }
+				};
+			});
+		}
+		/**
+		* 默认加载清单的 JSON 形式（可变数组）。
+		* @param ids - 被勾选的组 id。
+		* @returns 同一份清单的可变副本。
+		*/
+		function jsonDefaultGroupIds(ids) {
+			return [...ids];
+		}
+		//#endregion
+		//#region lib/types/client/row/locales.js
+		/**
+		* 双轴配置页自己的词典。界面文案只在这里出现一份，配置页按当前语言取用。
+		*
+		* @module @t4r71/dsh-dual-axis-ui/client/locales
+		*/
+		/** 词典命名空间：与配置页注册到 slot 上的 `locale` 一致。 */
+		const DUAL_AXIS_LOCALE_NS = "sandbox-axis";
+		/** 中文文案。 */
+		const zh = {
+			rowSummary: "文件沙箱的两条访问轴：新会话按这里的读轴与写轴执行。",
+			titleRead: "读轴",
+			titleWrite: "写轴",
+			hintRead: "这条轴界定的是一条读操作能碰到的路径范围；它压在所有读取之上。",
+			hintWrite: "这条轴界定的是一条写操作能碰到的路径范围；它比读轴更严：读轴放行、写轴不放行，仍然写不了。",
+			kindLabel: "取值",
+			baseLabel: "底座",
+			allowLabel: "额外放行的绝对路径（每行一条）",
+			denyLabel: "排除的绝对路径（每行一条，优先于放行）",
+			kindDeny: "概不允许",
+			kindWorkspace: "仅会话工作区",
+			kindAll: "整台主机",
+			kindCustom: "自定义（底座 + 放行 - 排除）",
+			baseDeny: "概不允许",
+			baseWorkspace: "会话工作区",
+			baseAll: "整台主机",
+			customTemplate: "在「{base}」之上放行 {paths}",
+			save: "保存",
+			saving: "保存中…",
+			discard: "放弃改动",
+			reset: "恢复默认",
+			overridden: "已自定义",
+			failed: "保存失败：宿主拒绝了这次写入，草稿已保留",
+			readOnly: "当前设置文档不可写，改动无法保存",
+			loading: "正在读取双轴设置…",
+			unavailable: "宿主没有提供 {ns} 这个设置命名空间，因此这里没有可改的值。",
+			groupsTitle: "规则组库",
+			groupsHint: "规则组是具名的规则片段：对话按 id 引用它，判定时现取定义。改这里的内容会立刻作用于所有引用它的对话。",
+			groupsEmpty: "还没有定义规则组。",
+			groupsAdd: "新增规则组",
+			groupsRemove: "删除这个组",
+			groupIdLabel: "id",
+			groupNameLabel: "名称",
+			groupDefaultLoad: "新对话默认加载",
+			groupSideRead: "读侧规则",
+			groupSideWrite: "写侧规则",
+			entryAllow: "放行",
+			entryDeny: "排除",
+			groupAxesHint: "两侧都可以留空：留空表示这个组不覆盖那一根轴。",
+			groupsDefaultHint: "勾上的组是新对话的初始组；已经在跑的对话按它自己的预设走，不受这里影响。",
+			groupsDefaultHintCustom: "只挂在本节取值选为「自定义」的那条轴上；两条轴都是闭合取值时，这个勾选不起作用。",
+			groupsProblemIdEmpty: "规则组的 id 不能为空。",
+			groupsProblemIdDuplicate: "规则组的 id 必须唯一：{id} 出现了多次。",
+			groupsProblemNotAbsolute: "规则组 {id} 的{side}{entry}列表里，{path} 不是绝对路径。",
+			live: "保存后对之后创建的会话生效；当前会话仍由输入框上方的两个下拉控制。"
+		};
+		/** 英文文案：键集合与中文一致。 */
+		const en = {
+			rowSummary: "The file sandbox's two access axes: new sessions run under the read and write axes set here.",
+			titleRead: "Read axis",
+			titleWrite: "Write axis",
+			hintRead: "This axis bounds the paths a read operation can reach; it sits above every read.",
+			hintWrite: "This axis bounds the paths a write operation can reach. It is stricter than the read axis: permitted to read but not to write still means no write.",
+			kindLabel: "Kind",
+			baseLabel: "Base",
+			allowLabel: "Additional allowed absolute paths (one per line)",
+			denyLabel: "Excluded absolute paths (one per line, they win)",
+			kindDeny: "Deny everything",
+			kindWorkspace: "Session workspace only",
+			kindAll: "The whole host",
+			kindCustom: "Custom (base + allow − deny)",
+			baseDeny: "Deny everything",
+			baseWorkspace: "Session workspace",
+			baseAll: "The whole host",
+			customTemplate: "Over \"{base}\", allow {paths}",
+			save: "Save",
+			saving: "Saving…",
+			discard: "Discard",
+			reset: "Restore default",
+			overridden: "Customized",
+			failed: "Save failed: the host refused the write and the draft is kept",
+			readOnly: "The settings document is not writable, so changes cannot be saved",
+			loading: "Reading the dual-axis settings…",
+			unavailable: "The host serves no {ns} settings namespace, so there is nothing to edit here.",
+			groupsTitle: "Rule groups",
+			groupsHint: "A rule group is a named rule fragment: a session references it by id and the definition is read at decision time. Editing one here applies at once to every session that references it.",
+			groupsEmpty: "No rule groups are defined yet.",
+			groupsAdd: "Add a rule group",
+			groupsRemove: "Remove this group",
+			groupIdLabel: "id",
+			groupNameLabel: "Name",
+			groupDefaultLoad: "New sessions load it",
+			groupSideRead: "Read-side rules",
+			groupSideWrite: "Write-side rules",
+			entryAllow: "allowed",
+			entryDeny: "excluded",
+			groupAxesHint: "Either side may stay empty: an empty side means this group does not cover that axis.",
+			groupsDefaultHint: "The checked groups are what a new session starts out referencing; a session already running keeps its own preset and is unaffected here.",
+			groupsDefaultHintCustom: "They are attached only to the axis whose kind is set to Custom here; while both axes keep a closed kind this checkbox does nothing.",
+			groupsProblemIdEmpty: "A rule group needs a non-empty id.",
+			groupsProblemIdDuplicate: "Rule-group ids must be unique: {id} appears more than once.",
+			groupsProblemNotAbsolute: "{path} in the {side} {entry} list of rule group {id} is not an absolute path.",
+			live: "A save applies to sessions created afterwards; the current session stays with the two dropdowns above the composer."
+		};
+		//#endregion
+		//#region lib/types/client/row/index.js
+		/**
+		* 双轴访问模式组合包的浏览器半边：General 设置页上这一行自己的配置。
+		* 宿主半边在 `@t4r71/dsh-dual-axis`（注册设置节、新会话钉轴），这一半只负责改那份设置。
+		*
+		* 页面只表达一件事 —— 新会话从哪两条轴开始：读轴与写轴，每条都能选
+		* deny / workspace / all / custom，选 custom 时再给底座与两个绝对路径列表
+		* （放行、排除，排除优先），再加上组库与「新对话默认加载哪些组」。取值只写进
+		* 宿主注册的 `dual-axis` 设置节（节名就是这一行在条目树里的行 id），页面上不另存一份。
+		*
+		* 0.1.7 起，设置页的表单由**页面下发**：这一行不再自持 `ctx.settingsScope`
+		* （该服务已整块删除），而是消费 `props.form` —— owner 渲染时算好的
+		* `{ state: ConfigFormSnapshot, mutate }`。state 里的 `value` / `user` / `writable`
+		* 与 0.1.6 的 scope 快照同义，因此草稿层原样保留；写入从逐字段的
+		* `set` / `unset` 改成一次 `mutate`，两条轴共用同一个 revision fence。
+		*
+		* @module @t4r71/dsh-dual-axis-ui/client
+		*/
+		/** 两条轴的字段名。逐个处理而不是复制两段代码：加一条轴不会漏掉另一条。 */
+		const AXES = ["read", "write"];
+		/**
+		* 这一行在组合包 `cordis.patch.yml` 里的行 id。
+		*
+		* 宿主半边 `@t4r71/dsh-dual-axis` 的补丁里那一行就叫 `dual-axis`
+		* （`packages/bundle/dual-axis/cordis.patch.yml:11`）。**这个 id 不能自造**：
+		* 插件页是拿它去条目树里查那一条 entry 的。
+		*/
+		const DUAL_AXIS_ROW_ID = "dual-axis";
+		/** 这一行的配置页在插件页上注册的键：`<组合包名>#<行 id>`。 */
+		const DUAL_AXIS_ROW_KEY = `@t4r71/dsh-dual-axis#${DUAL_AXIS_ROW_ID}`;
+		/** 这份配置行需要的服务：page 由 ui-settings-general 的 General 分栏声明。 */
+		const inject$1 = ["slots", "locale"];
+		/** 一条规则草稿读不懂时用的词典键。 */
+		const GROUP_PROBLEM_KEYS = {
+			idEmpty: "groupsProblemIdEmpty",
+			idDuplicate: "groupsProblemIdDuplicate",
+			notAbsolute: "groupsProblemNotAbsolute"
+		};
+		/**
+		* 把规则组的说明键转成当前语言的文案。
+		*
+		* 说明里的「哪一侧、哪个列表」也是界面文案，所以在这里一并换成本地化词，而不是把
+		* `read` / `allow` 这类字段名直接塞进句子给人看。
+		* @param t - 这一行的翻译座位。
+		* @returns 说明键与参数到文案的回调。
+		*/
+		function problemText(t) {
+			return (key, params) => {
+				const side = params["side"];
+				const entry = params["entry"];
+				return t(GROUP_PROBLEM_KEYS[key], {
+					...params,
+					...side === void 0 ? {} : { side: t(side === "read" ? "groupSideRead" : "groupSideWrite") },
+					...entry === void 0 ? {} : { entry: t(entry === "allow" ? "entryAllow" : "entryDeny") }
+				});
+			};
+		}
+		/** 词典交给 {@link describeAxis} 的文案表。 */
+		function textOf(t) {
+			const kindLabels = {
+				deny: "kindDeny",
+				workspace: "kindWorkspace",
+				all: "kindAll",
+				custom: "kindCustom"
+			};
+			const baseLabels = {
+				deny: "baseDeny",
+				workspace: "baseWorkspace",
+				all: "baseAll"
+			};
+			return {
+				kind: (kind) => t(kindLabels[kind]),
+				base: (base) => t(baseLabels[base]),
+				custom: (base, paths) => t("customTemplate").replace("{base}", base).replace("{paths}", paths)
+			};
+		}
+		/** 一条轴的中文/英文标题键。 */
+		function titleKey(field) {
+			return field === "read" ? "titleRead" : "titleWrite";
+		}
+		/** 一条轴的说明键。 */
+		function hintKey(field) {
+			return field === "read" ? "hintRead" : "hintWrite";
+		}
+		/**
+		* 组合层声明的兜底轴：设置节里缺一条轴时，页面按这一条显示。
+		* @param field - 轴字段名。
+		* @returns 该字段的兜底轴值。
+		*/
+		function fallbackOf(field) {
+			return field === "read" ? { kind: "all" } : { kind: "workspace" };
+		}
+		/**
+		* 去掉一份草稿表里的某个字段。用展开重写而不是 `delete`：后者在 TS 里是对动态
+		* 键的删除，lint 明确禁止，而这里本来就只是要一份少了该字段的新表。
+		* @param drafts - 当前草稿表。
+		* @param field - 要去掉的轴字段名。
+		* @returns 少了该字段的新表。
+		*/
+		function omitKey(drafts, field) {
+			const { [field]: _dropped, ...rest } = drafts;
+			return rest;
+		}
+		/**
+		* 把一条轴值摊成设置文档接受的那份 JSON。
+		*
+		* `AxisValue` 的两个路径列表是 `readonly string[]`，而设置文档的取值是
+		* `JsonValue`（可变数组）：传只读数组会被线上格式挡住，所以写入前摊平一层。
+		* @param axis - 一条轴值。
+		* @returns 同一份取值的可变副本。
+		*/
+		function jsonAxis(axis) {
+			if (axis.kind !== "custom") return { kind: axis.kind };
+			return {
+				kind: "custom",
+				base: axis.base,
+				allow: [...axis.allow],
+				deny: [...axis.deny]
+			};
+		}
+		/** 用户层里是否写着这个字段；presence 就是「已自定义」的判据。 */
+		function overriddenIn(user, field) {
+			return typeof user === "object" && user !== null && field in user;
+		}
+		/**
+		* 两份 id 清单是否相同。默认加载清单的顺序就是文档顺序，所以逐位比较。
+		* @param left - 一份 id 清单。
+		* @param right - 另一份 id 清单。
+		* @returns 两者是否逐位相同。
+		*/
+		function sameIdList(left, right) {
+			return left.length === right.length && left.every((id, index) => id === right[index]);
+		}
+		/**
+		* 跟踪两条轴与规则组库的草稿、把草稿写回设置节。
+		*
+		* 保存是一次全有或全无的提交：任何一份草稿还不是合法取值，这次保存就不发出任何
+		* 写入 —— 一次只落一半的保存会留下"读轴改了、写轴没改"这种没人要求的中间状态，
+		* 而它恰恰是权限配置里最不该出现的状态。规则组库与默认加载清单写在同一节里，
+		* 于是它们也共用同一个 revision fence，不会出现「组建好了但没人默认加载」这种半落。
+		* 0.1.7 的 `form.mutate` 收一串 op 并共用一个 fence，因此这一条契约由一次调用
+		* 本身保证，不再靠调用方连发两次写入去凑。
+		* @param form - 页面下发的表单面：当前快照与一次原子提交。
+		* @param t - 这一行的翻译座位，规则组的说明文案按当前语言取。
+		* @returns 两条轴与组库的状态，以及编辑、保存、放弃动作。
+		*/
+		function useDrafts(form, t) {
+			const [drafts, setDrafts] = (0, react.useState)({});
+			const [resetting, setResetting] = (0, react.useState)([]);
+			const [groupDraft, setGroupDraft] = (0, react.useState)(null);
+			const [saving, setSaving] = (0, react.useState)(false);
+			const [failed, setFailed] = (0, react.useState)(false);
+			const value = form.state.value ?? {};
+			const user = form.state.user;
+			const rows = {};
+			for (const field of AXES) rows[field] = {
+				draft: drafts[field] ?? draftOf(value[field], fallbackOf(field)),
+				overridden: overriddenIn(user, field) || resetting.includes(field)
+			};
+			const storedGroups = groupDraftsOf(value.groups, value.defaultGroups);
+			const groups = groupDraft ?? storedGroups;
+			const groupValidation = groupDraft === null ? void 0 : groupLibraryOf(groupDraft, problemText(t));
+			/** 这次保存要执行的写动作，或第一条挡住保存的说明。 */
+			const plan = () => {
+				const writes = [];
+				for (const field of AXES) {
+					if (resetting.includes(field)) {
+						if (overriddenIn(user, field)) writes.push({
+							kind: "clear",
+							path: [field]
+						});
+						continue;
+					}
+					const parsed = scopeOf(rows[field].draft);
+					if (!parsed.ok) return { problem: parsed.problem };
+					const saved = scopeOf(draftOf(value[field], fallbackOf(field)));
+					if (saved.ok && sameAxis(saved.value, parsed.value)) continue;
+					writes.push({
+						kind: "set",
+						path: [field],
+						value: jsonAxis(parsed.value)
+					});
+				}
+				if (groupDraft === null) return { writes };
+				const library = groupLibraryOf(groupDraft, problemText(t));
+				if (!library.ok) return { problem: library.problem };
+				const stored = groupLibraryOf(storedGroups, problemText(t));
+				const libraryChanged = !(stored.ok && sameGroupLibrary(stored.value, library.value));
+				const defaultsChanged = !sameIdList(defaultGroupIdsOf(storedGroups), defaultGroupIdsOf(groupDraft));
+				if (libraryChanged) writes.push({
+					kind: "set",
+					path: ["groups"],
+					value: jsonGroupLibrary(library.value)
+				});
+				if (libraryChanged || defaultsChanged) writes.push({
+					kind: "set",
+					path: ["defaultGroups"],
+					value: jsonDefaultGroupIds(defaultGroupIdsOf(groupDraft))
+				});
+				return { writes };
+			};
+			const validation = plan();
+			const invalid = "problem" in validation ? validation.problem : "";
+			const save = () => {
+				const planned = plan();
+				if ("problem" in planned || planned.writes.length === 0) return;
+				const ops = planned.writes.map((write) => write.kind === "clear" ? {
+					op: "unset",
+					path: [...write.path]
+				} : {
+					op: "set",
+					path: [...write.path],
+					value: write.value
+				});
+				setSaving(true);
+				setFailed(false);
+				(async () => {
+					let landed = false;
+					try {
+						landed = await form.mutate(ops);
+					} catch {
+						landed = false;
+					}
+					setSaving(false);
+					setFailed(!landed);
+					if (landed) {
+						setDrafts({});
+						setResetting([]);
+						setGroupDraft(null);
+					}
+				})();
+			};
+			return {
+				rows,
+				groups,
+				groupProblem: groupValidation !== void 0 && !groupValidation.ok ? groupValidation.problem : "",
+				edit: (field, draft) => {
+					setDrafts((current) => ({
+						...current,
+						[field]: draft
+					}));
+				},
+				editGroups: (next) => {
+					setGroupDraft(next);
+				},
+				reset: (field) => {
+					setResetting((current) => current.includes(field) ? current : [...current, field]);
+					setDrafts((current) => omitKey(current, field));
+				},
+				save,
+				discard: () => {
+					setDrafts({});
+					setResetting([]);
+					setGroupDraft(null);
+					setFailed(false);
+				},
+				dirty: Object.keys(drafts).length > 0 || resetting.length > 0 || groupDraft !== null,
+				saving,
+				failed,
+				invalid
+			};
+		}
+		/**
+		* 一条轴的一组控件：取值下拉，custom 时再加底座与两个路径文本框。
+		* @param props - 这一条轴的字段名、草稿、禁用状态、翻译与编辑回调。
+		* @returns 这一条轴的控件。
+		*/
+		function AxisFields(props) {
+			const { draft } = props.row;
+			const t = props.t;
+			const title = t(titleKey(props.field));
+			const edit = (patch) => {
+				props.onEdit({
+					...draft,
+					...patch
+				});
+			};
+			return (0, react.createElement)("div", {
+				"data-dsh-axis": props.field,
+				style: {
+					display: "grid",
+					gap: "6px"
+				}
+			}, (0, react.createElement)("div", { style: {
+				display: "flex",
+				gap: "8px",
+				alignItems: "center"
+			} }, (0, react.createElement)("span", { style: {
+				fontWeight: 600,
+				minWidth: "5rem"
+			} }, title), (0, react.createElement)("label", { style: {
+				display: "flex",
+				gap: "8px",
+				alignItems: "center"
+			} }, (0, react.createElement)("span", { style: { fontSize: "12px" } }, t("kindLabel")), (0, react.createElement)("select", {
+				"data-dsh-axis-kind": props.field,
+				"aria-label": title + " " + t("kindLabel"),
+				value: draft.kind,
+				disabled: props.disabled,
+				onChange: (event) => {
+					edit({ kind: event.target.value });
+				}
+			}, AXIS_KINDS.map((kind) => (0, react.createElement)("option", {
+				key: kind,
+				value: kind
+			}, t(kind === "deny" ? "kindDeny" : kind === "workspace" ? "kindWorkspace" : kind === "all" ? "kindAll" : "kindCustom"))))), props.row.overridden ? (0, react.createElement)("span", { style: {
+				display: "inline-flex",
+				gap: "6px",
+				alignItems: "center",
+				fontSize: "12px",
+				opacity: .7
+			} }, t("overridden"), (0, react.createElement)("button", {
+				type: "button",
+				"data-dsh-axis-reset": props.field,
+				disabled: props.disabled,
+				style: {
+					fontSize: "12px",
+					cursor: "pointer"
+				},
+				onClick: props.onReset
+			}, t("reset"))) : null), (0, react.createElement)("div", { style: {
+				opacity: .7,
+				fontSize: "12px"
+			} }, t(hintKey(props.field))), draft.kind !== "custom" ? null : (0, react.createElement)("div", { style: {
+				display: "grid",
+				gap: "6px",
+				paddingLeft: "1rem"
+			} }, (0, react.createElement)("label", { style: {
+				display: "flex",
+				gap: "8px",
+				alignItems: "center"
+			} }, (0, react.createElement)("span", { style: {
+				fontSize: "12px",
+				minWidth: "3rem"
+			} }, t("baseLabel")), (0, react.createElement)("select", {
+				"data-dsh-axis-base": props.field,
+				"aria-label": title + " " + t("baseLabel"),
+				value: draft.base,
+				disabled: props.disabled,
+				onChange: (event) => {
+					edit({ base: event.target.value });
+				}
+			}, AXIS_BASES.map((base) => (0, react.createElement)("option", {
+				key: base,
+				value: base
+			}, t(base === "deny" ? "baseDeny" : base === "workspace" ? "baseWorkspace" : "baseAll"))))), (0, react.createElement)("label", { style: {
+				display: "grid",
+				gap: "2px"
+			} }, (0, react.createElement)("span", { style: { fontSize: "12px" } }, t("allowLabel")), (0, react.createElement)("textarea", {
+				"data-dsh-axis-allow": props.field,
+				"aria-label": title + " " + t("allowLabel"),
+				rows: 3,
+				spellCheck: false,
+				value: draft.allow,
+				disabled: props.disabled,
+				style: {
+					fontFamily: "monospace",
+					width: "100%"
+				},
+				onChange: (event) => {
+					edit({ allow: event.target.value });
+				}
+			})), (0, react.createElement)("label", { style: {
+				display: "grid",
+				gap: "2px"
+			} }, (0, react.createElement)("span", { style: { fontSize: "12px" } }, t("denyLabel")), (0, react.createElement)("textarea", {
+				"data-dsh-axis-deny": props.field,
+				"aria-label": title + " " + t("denyLabel"),
+				rows: 3,
+				spellCheck: false,
+				value: draft.deny,
+				disabled: props.disabled,
+				style: {
+					fontFamily: "monospace",
+					width: "100%"
+				},
+				onChange: (event) => {
+					edit({ deny: event.target.value });
+				}
+			}))), draft.problem === "" ? null : (0, react.createElement)("div", { style: {
+				fontSize: "12px",
+				opacity: .85
+			} }, draft.problem));
+		}
+		/**
+		* 配置行本体：两条轴各一组控件，加一个保存、一个放弃、以及每条轴自己的
+		* 「恢复默认」。
+		* @param props - 页面在 \`plugins.row.config\` 渲染点下发的 \`view\` 与表单面，加当前语言的翻译。
+		* @returns 摘要行，或带控件的表单。
+		*/
+		function DualAxisRow(props) {
+			const t = props.t;
+			const form = props.form;
+			if (form === void 0) return (0, react.createElement)("div", null, t("unavailable", { ns: DUAL_AXIS_ROW_ID }));
+			return (0, react.createElement)(DualAxisForm, {
+				view: props.view,
+				form,
+				t
+			});
+		}
+		/**
+		* 一个规则组的控件：id、名字、默认加载勾选、删除，以及读侧与写侧各两个路径框。
+		*
+		* 两侧各自可空 —— 一个组可以只给读侧、只给写侧或两者都给（规格 §「组的规则可只
+		* 覆盖一根轴」）。两侧都空的组是合法的：内容随时可改，先建出来再填是正常用法。
+		* 四个路径框用 \`data-dsh-group-side\`、\`data-dsh-group-entry\` 与 \`data-dsh-group-index\`
+		* 三件套定位，而不是四组写死的属性名：两侧的结构本来就是同一份。
+		* @param props - 组在这份草稿里的位置、草稿本身、禁用状态、翻译与编辑回调。
+		* @returns 这一个组的控件。
+		*/
+		function GroupFields(props) {
+			const draft = props.draft;
+			const t = props.t;
+			const index = props.index;
+			const ordinal = String(index + 1);
+			/** 改这个组的某一侧规则。 */
+			const editSide = (which, patch) => {
+				props.onEdit(which === "read" ? { read: {
+					...draft.read,
+					...patch
+				} } : { write: {
+					...draft.write,
+					...patch
+				} });
+			};
+			/** 这个组的一条轴的两个路径框。 */
+			const side = (which) => {
+				const rules = which === "read" ? draft.read : draft.write;
+				const sideName = t(which === "read" ? "groupSideRead" : "groupSideWrite");
+				const area = (entry) => (0, react.createElement)("label", { style: {
+					display: "grid",
+					gap: "2px"
+				} }, (0, react.createElement)("span", { style: { fontSize: "12px" } }, t(entry === "allow" ? "allowLabel" : "denyLabel")), (0, react.createElement)("textarea", {
+					"data-dsh-group-side": which,
+					"data-dsh-group-entry": entry,
+					"data-dsh-group-index": index,
+					"aria-label": sideName + " " + t(entry === "allow" ? "allowLabel" : "denyLabel"),
+					rows: 2,
+					spellCheck: false,
+					value: rules[entry],
+					disabled: props.disabled,
+					style: {
+						fontFamily: "monospace",
+						width: "100%"
+					},
+					onChange: (event) => {
+						editSide(which, { [entry]: event.target.value });
+					}
+				}));
+				return (0, react.createElement)("div", { style: {
+					display: "grid",
+					gap: "4px",
+					paddingLeft: "0.5rem"
+				} }, (0, react.createElement)("div", { style: {
+					fontSize: "12px",
+					fontWeight: 600
+				} }, sideName), area("allow"), area("deny"));
+			};
+			return (0, react.createElement)("div", {
+				"data-dsh-group": index,
+				style: {
+					display: "grid",
+					gap: "6px",
+					padding: "8px",
+					border: "1px solid var(--dsw-alias-border-l2)",
+					borderRadius: "8px"
+				}
+			}, (0, react.createElement)("div", { style: {
+				display: "flex",
+				gap: "10px",
+				alignItems: "center",
+				flexWrap: "wrap"
+			} }, (0, react.createElement)("label", { style: {
+				display: "flex",
+				gap: "6px",
+				alignItems: "center"
+			} }, (0, react.createElement)("span", { style: { fontSize: "12px" } }, t("groupIdLabel")), (0, react.createElement)("input", {
+				type: "text",
+				"data-dsh-group-id": index,
+				"aria-label": t("groupIdLabel") + " " + ordinal,
+				value: draft.id,
+				disabled: props.disabled,
+				spellCheck: false,
+				style: {
+					fontFamily: "monospace",
+					width: "10rem"
+				},
+				onChange: (event) => {
+					props.onEdit({ id: event.target.value });
+				}
+			})), (0, react.createElement)("label", { style: {
+				display: "flex",
+				gap: "6px",
+				alignItems: "center"
+			} }, (0, react.createElement)("span", { style: { fontSize: "12px" } }, t("groupNameLabel")), (0, react.createElement)("input", {
+				type: "text",
+				"data-dsh-group-name": index,
+				"aria-label": t("groupNameLabel") + " " + ordinal,
+				value: draft.name,
+				disabled: props.disabled,
+				onChange: (event) => {
+					props.onEdit({ name: event.target.value });
+				}
+			})), (0, react.createElement)("label", { style: {
+				display: "flex",
+				gap: "6px",
+				alignItems: "center",
+				fontSize: "12px"
+			} }, (0, react.createElement)("input", {
+				type: "checkbox",
+				"data-dsh-group-default": index,
+				checked: draft.default,
+				disabled: props.disabled,
+				onChange: (event) => {
+					props.onEdit({ default: event.target.checked });
+				}
+			}), t("groupDefaultLoad")), (0, react.createElement)("button", {
+				type: "button",
+				"data-dsh-group-remove": index,
+				disabled: props.disabled,
+				style: {
+					fontSize: "12px",
+					cursor: "pointer"
+				},
+				onClick: props.onRemove
+			}, t("groupsRemove"))), (0, react.createElement)("div", { style: {
+				fontSize: "12px",
+				opacity: .7
+			} }, t("groupAxesHint")), side("read"), side("write"));
+		}
+		/**
+		* 拿到表单面之后的表单本体。页面只在 \`view === 'page'\` 时给出 form，因此
+		* \`summary\` 分支读的是设置文档里已生效的轴值，与 \`page\` 分支同一份快照。
+		* @param props - 视图、表单面与翻译。
+		* @returns 一句话摘要，或带控件的表单。
+		*/
+		function DualAxisForm(props) {
+			const form = props.form;
+			const t = props.t;
+			const drafts = useDrafts(form, t);
+			const text = textOf(t);
+			const stored = form.state.value ?? {};
+			const summary = AXES.map((field) => `${t(titleKey(field))}: ${describeAxis(axisValueOf$1(stored[field]) ?? fallbackOf(field), text)}`).join(" · ");
+			if (props.view === "summary") return summary;
+			if (form.state.status === "loading") return (0, react.createElement)("div", null, t("loading"));
+			const disabled = !form.state.writable || drafts.saving;
+			return (0, react.createElement)("div", { style: {
+				display: "grid",
+				gap: "12px",
+				maxWidth: "760px"
+			} }, (0, react.createElement)("div", null, summary), (0, react.createElement)("div", { style: {
+				fontSize: "12px",
+				opacity: .7
+			} }, t("live")), ...AXES.map((field) => (0, react.createElement)(AxisFields, {
+				key: field,
+				field,
+				row: drafts.rows[field],
+				disabled,
+				t,
+				onEdit: (draft) => {
+					drafts.edit(field, draft);
+				},
+				onReset: () => {
+					drafts.reset(field);
+				}
+			})), (0, react.createElement)("div", {
+				"data-dsh-groups": "",
+				style: {
+					display: "grid",
+					gap: "8px"
+				}
+			}, (0, react.createElement)("div", { style: { fontWeight: 600 } }, t("groupsTitle")), (0, react.createElement)("div", { style: {
+				fontSize: "12px",
+				opacity: .7
+			} }, t("groupsHint")), drafts.groups.length === 0 ? (0, react.createElement)("div", { style: {
+				fontSize: "12px",
+				opacity: .7
+			} }, t("groupsEmpty")) : null, ...drafts.groups.map((group, index) => (0, react.createElement)(GroupFields, {
+				key: String(index),
+				index,
+				draft: group,
+				disabled,
+				t,
+				onEdit: (patch) => {
+					drafts.editGroups(drafts.groups.map((current, at) => at === index ? {
+						...current,
+						...patch
+					} : current));
+				},
+				onRemove: () => {
+					drafts.editGroups(drafts.groups.filter((_current, at) => at !== index));
+				}
+			})), (0, react.createElement)("button", {
+				type: "button",
+				"data-dsh-group-add": "",
+				disabled,
+				style: {
+					justifySelf: "start",
+					fontSize: "12px",
+					cursor: "pointer"
+				},
+				onClick: () => {
+					drafts.editGroups([...drafts.groups, emptyGroupDraft(drafts.groups)]);
+				}
+			}, t("groupsAdd")), drafts.groupProblem === "" ? null : (0, react.createElement)("div", {
+				role: "alert",
+				style: { fontSize: "12px" }
+			}, drafts.groupProblem), (0, react.createElement)("div", { style: {
+				fontSize: "12px",
+				opacity: .7
+			} }, t("groupsDefaultHint")), (0, react.createElement)("div", { style: {
+				fontSize: "12px",
+				opacity: .7
+			} }, t("groupsDefaultHintCustom"))), (0, react.createElement)("div", { style: {
+				display: "flex",
+				gap: "8px",
+				alignItems: "center",
+				flexWrap: "wrap"
+			} }, (0, react.createElement)("button", {
+				type: "button",
+				"data-dsh-axis-save": "",
+				disabled: disabled || !drafts.dirty || drafts.invalid !== "",
+				onClick: drafts.save
+			}, t(drafts.saving ? "saving" : "save")), (0, react.createElement)("button", {
+				type: "button",
+				disabled: !drafts.dirty || drafts.saving,
+				onClick: drafts.discard
+			}, t("discard")), drafts.failed ? (0, react.createElement)("span", { style: { fontSize: "12px" } }, t("failed")) : null, drafts.invalid !== "" ? (0, react.createElement)("span", { style: { fontSize: "12px" } }, drafts.invalid) : null, !form.state.writable ? (0, react.createElement)("span", { style: { fontSize: "12px" } }, t("readOnly")) : null));
+		}
+		/**
+		* 挂载配置行：注册词典，再把这一行注册到插件页的 \`plugins.row.config\`。
+		* 表单由页面下发，这里不再自持任何 scope。
+		* @param ctx - 浏览器插件上下文。
+		*/
+		function apply$1(ctx) {
+			ctx.effect(() => ctx.locale.register(DUAL_AXIS_LOCALE_NS, {
+				zh,
+				en
+			}), "dual-axis: dictionaries");
+			ctx.slots.inject("plugins.row.config", () => ctx.slots.register({
+				name: "plugins.row.config",
+				key: DUAL_AXIS_ROW_KEY,
+				locale: DUAL_AXIS_LOCALE_NS
+			}, DualAxisRow));
+		}
+		//#endregion
+		//#region lib/types/client/index.js
+		const inject = [.../* @__PURE__ */ new Set([...inject$2, ...inject$1])];
+		/**
+		* 挂载两个界面面：下拉那面先挂（它注册会话输入区的 slot 与词典），配置行那面随后。
+		* @param ctx - 浏览器插件上下文。
+		*/
+		function apply(ctx) {
+			apply$2(ctx);
+			apply$1(ctx);
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});
+
+//# sourceMappingURL=client.js.map