@t4r71/dsh-dual-axis-ui 0.1.0

package/lib/types/client/permission/locales.d.ts

@@ -0,0 +1,161 @@
+/** `settings.permission` namespace dictionaries (the Permission row's copy). */
+/** Locale namespace shared by both current-session permission pickers. */
+export declare const PERMISSION_ACCESS_NS = "permission.access";
+/** Simplified Chinese dictionary (the key-set source of truth). */
+export declare const zh: {
+    title: string;
+    description: string;
+    loading: string;
+    unavailable: string;
+    'preset.readOnly': string;
+    'preset.workspaceWrite': string;
+    'preset.fullAccess': string;
+};
+/** The settings.permission namespace key union. */
+export type PermissionSettingsKey = keyof typeof zh;
+/** English dictionary, checked complete against the zh key set. */
+export declare const en: {
+    title: string;
+    description: string;
+    loading: string;
+    unavailable: string;
+    'preset.readOnly': string;
+    'preset.workspaceWrite': string;
+    'preset.fullAccess': string;
+};
+/**
+ * Simplified Chinese dictionary for the two current-session axis pickers. Each
+ * axis is a four-value dropdown (`deny / workspace / all / custom`), and the two
+ * dropdowns must stay unambiguous for assistive technology, for role-based
+ * locators, and for the eye: the two pickers sit side by side with no visible
+ * caption, so every value states its own axis in the copy itself. `custom` is the
+ * one shared value — "自定义" opens a path editor whose contents say which axis it
+ * belongs to, and the two pickers are already told apart by the other three.
+ */
+export declare const accessZh: {
+    'axis.read.deny': string;
+    'axis.read.workspace': string;
+    'axis.read.all': string;
+    'axis.write.deny': string;
+    'axis.write.workspace': string;
+    'axis.write.all': string;
+    'axis.custom': string;
+    'axis.unknown': string;
+    'editor.readTitle': string;
+    'editor.writeTitle': string;
+    'editor.base': string;
+    'editor.readBase': string;
+    'editor.writeBase': string;
+    'editor.baseDeny': string;
+    'editor.baseWorkspace': string;
+    'editor.baseAll': string;
+    'editor.allow': string;
+    'editor.readAllow': string;
+    'editor.writeAllow': string;
+    'editor.deny': string;
+    'editor.readDeny': string;
+    'editor.writeDeny': string;
+    'editor.hint': string;
+    'editor.submit': string;
+    'editor.sending': string;
+    'editor.cancel': string;
+    'editor.failed': string;
+    'editor.notStored': string;
+    'editor.problemBase': string;
+    'editor.problemPath': string;
+    'editor.problemComma': string;
+    'editor.groups': string;
+    'editor.groupBoth': string;
+    'editor.groupRead': string;
+    'editor.groupWrite': string;
+    'editor.groupNone': string;
+    'editor.groupMissing': string;
+    'editor.groupsEmpty': string;
+    'narrowing.title': string;
+    'narrowing.body': string;
+    'narrowing.removed': string;
+    'narrowing.none': string;
+    'narrowing.lostUnbounded': string;
+    'narrowing.marker': string;
+    'editor.problemGroupId': string;
+    readLabel: string;
+    writeLabel: string;
+    customSummary: string;
+    customAllow: string;
+    customDeny: string;
+    customNone: string;
+    close: string;
+    'preset.readOnly': string;
+    'preset.workspaceWrite': string;
+    'preset.fullAccess': string;
+    'confirm.title': string;
+    'confirm.description': string;
+    'confirm.acknowledge': string;
+    'confirm.cancel': string;
+    'confirm.enable': string;
+};
+/** Current-session axis-picker key union. */
+export type PermissionAccessKey = keyof typeof accessZh;
+/** English dictionary for the two current-session axis pickers. */
+export declare const accessEn: {
+    'axis.read.deny': string;
+    'axis.read.workspace': string;
+    'axis.read.all': string;
+    'axis.write.deny': string;
+    'axis.write.workspace': string;
+    'axis.write.all': string;
+    'axis.custom': string;
+    'axis.unknown': string;
+    'editor.readTitle': string;
+    'editor.writeTitle': string;
+    'editor.base': string;
+    'editor.readBase': string;
+    'editor.writeBase': string;
+    'editor.baseDeny': string;
+    'editor.baseWorkspace': string;
+    'editor.baseAll': string;
+    'editor.allow': string;
+    'editor.readAllow': string;
+    'editor.writeAllow': string;
+    'editor.deny': string;
+    'editor.readDeny': string;
+    'editor.writeDeny': string;
+    'editor.hint': string;
+    'editor.submit': string;
+    'editor.sending': string;
+    'editor.cancel': string;
+    'editor.failed': string;
+    'editor.notStored': string;
+    'editor.problemBase': string;
+    'editor.problemPath': string;
+    'editor.problemComma': string;
+    'editor.groups': string;
+    'editor.groupBoth': string;
+    'editor.groupRead': string;
+    'editor.groupWrite': string;
+    'editor.groupNone': string;
+    'editor.groupMissing': string;
+    'editor.groupsEmpty': string;
+    'narrowing.title': string;
+    'narrowing.body': string;
+    'narrowing.removed': string;
+    'narrowing.none': string;
+    'narrowing.lostUnbounded': string;
+    'narrowing.marker': string;
+    'editor.problemGroupId': string;
+    readLabel: string;
+    writeLabel: string;
+    customSummary: string;
+    customAllow: string;
+    customDeny: string;
+    customNone: string;
+    close: string;
+    'preset.readOnly': string;
+    'preset.workspaceWrite': string;
+    'preset.fullAccess': string;
+    'confirm.title': string;
+    'confirm.description': string;
+    'confirm.acknowledge': string;
+    'confirm.cancel': string;
+    'confirm.enable': string;
+};

package/lib/types/client/permission/presentation.d.ts

@@ -0,0 +1,167 @@
+/**
+ * One access axis. The 0.1.7 workspace's permission domain exports only the
+ * whole-value preset catalog (`PermissionCatalog` / `PermissionSelection`), so
+ * the two-axis vocabulary is owned here rather than imported.
+ */
+export type PermissionAxis = 'read' | 'write';
+/** A selectable value on one axis. */
+export type PermissionAxisValue = 'deny' | 'workspace' | 'all' | 'custom';
+/**
+ * One axis as the host half publishes it on the wire: the kind, plus the custom
+ * detail when the kind is custom. The client's own model keeps only the kind,
+ * so this is the wire's JSON shape rather than a second axis vocabulary.
+ */
+export interface DualAxisAxisWire {
+    kind: string;
+    base?: string;
+    /**
+     * Ids of the rule groups this axis references, in reference order.
+     *
+     * Declared here because the stored record carries them and the editor reads
+     * them back as its initial selection: omitting the member would make a group
+     * pick look like it never happened on the next open.
+     */
+    groups?: readonly string[];
+    allow?: readonly string[];
+    deny?: readonly string[];
+}
+/**
+ * The session's two axes, as the host half stores them in the settings document
+ * (`dual-axis-sessions`, partitioned by session id). Not a session projection
+ * value any more: the axes are outside the session log, so the shape here is the
+ * stored JSON rather than a wire view.
+ */
+export interface DualAxisAxesWire {
+    readonly read: DualAxisAxisWire;
+    readonly write: DualAxisAxisWire;
+    /**
+     * What the read axis removed from the write range, as the HOST's resolution
+     * computed it (`resolveEffectiveAxes` in `@t4r71/dsh-dual-axis`), or
+     * `undefined` when the record carries no report — a record written before this
+     * member existed, or one the intersection left alone.
+     *
+     * Published rather than re-derived here: the host's resolution canonicalizes
+     * every root with `realpath` and derives a `workspace` base from
+     * `os.tmpdir()`, so a browser cannot reproduce its root list. A surface that
+     * reports a narrowing the fence does not enforce — or misses one it does — is
+     * worse than one that reports nothing.
+     */
+    readonly narrowing?: DualAxisNarrowingWire;
+}
+/**
+ * The host's report of what the read axis removed from the write range.
+ *
+ * Mirrors `WriteNarrowing` in `@t4r71/dsh-dual-axis/src/groups.ts`; that
+ * module is the producer and this is only the JSON spelling the document carries.
+ */
+export interface DualAxisNarrowingWire {
+    /** Whether the read axis makes the effective write range strictly smaller. */
+    readonly narrowed: boolean;
+    /**
+     * Absolute roots the write axis permitted and the effective range does not,
+     * already canonicalized by the host.
+     */
+    readonly droppedRoots: readonly string[];
+    /** Whether an unbounded write axis became bounded, which no root list states. */
+    readonly lostUnbounded: boolean;
+}
+/**
+ * Narrow one axis's wire kind to a value the dropdowns can show.
+ * @param kind - the kind field as it arrives on the wire.
+ * @returns one of the four values, or undefined when the kind is unrecognized.
+ */
+export declare function axisValueOf(kind: string): PermissionAxisValue | undefined;
+/**
+ * Locale dictionary key for one axis value's label. Every value states its own
+ * axis except `custom`, whose editor says which axis it belongs to — the two
+ * pickers have no visible caption beside them, so the copy has to carry it.
+ */
+export type AxisLabelKey = 'axis.read.deny' | 'axis.read.workspace' | 'axis.read.all' | 'axis.write.deny' | 'axis.write.workspace' | 'axis.write.all' | 'axis.custom' | 'axis.unknown';
+/** Locale dictionary key for a built-in permission preset label. */
+export type PermissionPresetLabelKey = 'preset.readOnly' | 'preset.workspaceWrite' | 'preset.fullAccess';
+/**
+ * Render one axis value under its product label. The axis is required because
+ * the two pickers share no visible caption, so the label itself says which axis
+ * it belongs to ("工作区读" under the read picker, "工作区写" under the write one).
+ * @param value - the axis value.
+ * @param axis - the axis the value belongs to, which selects the copy.
+ * @param t - optional locale dictionary lookup for the built-in labels.
+ * @returns the localized label, or the English label without a locale seat.
+ */
+export declare function axisLabel(value: PermissionAxisValue, axis: PermissionAxis, t?: (key: AxisLabelKey) => string): string;
+/**
+ * The NAME half of one dropdown's trigger label: one word per value.
+ *
+ * A `custom` axis renders as the bare word and nothing else. It used to append
+ * its base and group count, which is how a group pick on an already-custom axis
+ * became visible; the trigger does not have room for that text, and the editor a
+ * `custom` pick opens states the base, the groups and both path lists in full,
+ * so the detail lives there instead of on the trigger. Nothing else observes the
+ * difference: a submission is judged by the stored record the read-back
+ * compares against, never by the trigger's text.
+ *
+ * An absent value (no stored record, or a kind this build does not know) says so
+ * instead of borrowing a value: the two dropdowns must render even when nothing
+ * can be claimed about the axis, and "未设置" is the honest label for that.
+ * @param value - the axis value to name, or `undefined` when there is none.
+ * @param axis - which axis this name belongs to.
+ * @param t - locale lookup for the label.
+ * @returns the name to interpolate into the trigger's `readLabel`/`writeLabel`.
+ */
+export declare function axisValueName(value: PermissionAxisValue | undefined, axis: PermissionAxis, t: (key: AxisLabelKey) => string): string;
+/**
+ * One line of the widening report that sits beside the write axis, or nothing to
+ * render.
+ *
+ * The content comes from the HOST's resolution of the same inputs — the roots it
+ * names are the roots it will refuse — so this function only decides how to spell
+ * them, never whether the narrowing happened. An absent report and a report that
+ * removed nothing both yield `undefined`: the notice appears exactly when the
+ * fence is narrower than the write axis.
+ */
+export interface NarrowingNotice {
+    /** The heading, naming the invariant. */
+    readonly title: string;
+    /** What the intersection removed, in the roots' own spelling. */
+    readonly removed: string;
+    /** The unbounded-to-bounded sentence, or empty when the roots carry the loss. */
+    readonly lostUnbounded: string;
+    /**
+     * Whether the write trigger's corner marker is shown. It is the only part of
+     * the report visible with the editor closed, and it carries no text: the
+     * trigger's label is the picked value and nothing else.
+     */
+    readonly marked: boolean;
+    /**
+     * The marker's accessible name — the whole report in one sentence, since the
+     * marker itself has no room and no text. Built HERE rather than at the call
+     * site so the sentences that need parameters are interpolated with them: a
+     * caller that forwards a key-only lookup leaves literal placeholders on screen.
+     */
+    readonly marker: string;
+}
+/** The locale lookups one notice needs; the dictionary itself owns the copy. */
+export type NarrowingText = (key: NarrowingKey, params?: Record<string, string>) => string;
+/** Dictionary keys the notice is built from. */
+export type NarrowingKey = 'narrowing.title' | 'narrowing.body' | 'narrowing.removed' | 'narrowing.none' | 'narrowing.lostUnbounded' | 'narrowing.marker';
+/**
+ * Build the write axis's narrowing notice.
+ * @param narrowing - the host's report, or `undefined` when there is none.
+ * @param t - locale lookup for every sentence.
+ * @returns the notice to render, or `undefined` when nothing was removed.
+ */
+export declare function narrowingNotice(narrowing: DualAxisNarrowingWire | undefined, t: NarrowingText): NarrowingNotice | undefined;
+/**
+ * Convert conventional kebab-case preset names into user-facing title case.
+ * @param name - host-supplied preset label or key.
+ * @returns the title-cased conventional key, or a non-kebab label unchanged.
+ */
+export declare function displayPresetName(name: string): string;
+/**
+ * Render a permission preset under its product label.
+ * @param value - preset machine value.
+ * @param name - host-supplied preset name.
+ * @param t - optional locale dictionary lookup for built-in product labels.
+ * @returns the localized built-in label, or the host's own name VERBATIM.
+ */
+export declare function displayPermissionPreset(value: string, name: string, t?: (key: PermissionPresetLabelKey) => string): string;

package/lib/types/client/permission/session-axes-data.d.ts

@@ -0,0 +1,108 @@
+/**
+ * 会话轴在配置文档里的形状，以及按会话 id 取值的纯读取。
+ *
+ * 单独一个模块，唯一的理由是它必须能在**不被 store 依赖污染**的程序里被直接测到：
+ * 本包的宿主半边把它存进自有的设置命名空间 `dual-axis-sessions`，字段名与结构是
+ * 两边之间的接口，改一处就要改另一处。订阅与快照那一层在 `./session-axes.ts`。
+ *
+ * 这里只管**文档里有没有这条会话的记录**。「没有记录时该显示哪一对」是另一件事，
+ * 由 `./session-axes-seed.ts` 按与宿主同一份计算给出 —— 那一对是设置页那一行
+ * （加上子代理继承），不是内置默认对。
+ *
+ * @module @deepseek-ai/dsh-client-ui-permission-presets/client/session-axes-data
+ */
+import type { DualAxisAxesWire, DualAxisNarrowingWire } from './presentation.ts';
+export { SESSION_AXES_FALLBACK, sessionAxesSeed } from './session-axes-seed.ts';
+export type { SeededAxes, SeededAxis } from './session-axes-seed.ts';
+/** 宿主存轴用的设置命名空间（Loader entry id）。 */
+export declare const SESSION_AXES_NAMESPACE = "dual-axis-sessions";
+/** 设置页那一行的设置命名空间（Loader entry id）：新会话的**种子**来源。 */
+export declare const DUAL_AXIS_ROW_NAMESPACE = "dual-axis";
+/** 该命名空间里那个按会话 id 分区的字段名。 */
+export declare const SESSION_AXES_FIELD = "axes";
+/** 快照里本命名空间那一行 —— 只声明这里真的会读的两个成员。 */
+export interface SessionAxesSectionView {
+    readonly ns: string;
+    readonly value: unknown;
+}
+/**
+ * 从一条记录里读出宿主发布的收窄结论。
+ *
+ * 未信任输入：文档可能被人手改过，也可能带着旧版本写下的、没有这个成员的记录。
+ * 前者读不懂就**丢掉**（当作没有收窄可显示），而不是把一份读不出来的报告渲染成
+ * 「什么也没被削」—— 那正是最坏的那一种错。后者（成员整个缺席）本来就是「没有收窄」，
+ * 与宿主围栏在那种记录下执行的范围一致。
+ * @param value - 记录里的 `narrowing` 成员，未信任。
+ * @returns 收窄结论，或 undefined（缺席 / 读不懂 / 两侧都说没有）。
+ */
+export declare function narrowingOf(value: unknown): DualAxisNarrowingWire | undefined;
+/**
+ * 一份 describe 快照里，本命名空间那一行的取值。
+ * @param namespaces - 快照里的全部命名空间行，或 undefined（还没有读到答案）。
+ * @returns 那一行的取值，或 undefined（宿主没服务这一节）。
+ */
+export declare function sessionAxesSectionValue(namespaces: readonly SessionAxesSectionView[] | undefined): unknown;
+/**
+ * 一份 describe 快照里，设置页那一行（`dual-axis`）的取值 —— 新会话的种子。
+ *
+ * 它与 {@link sessionAxesSectionValue} 是**两节**，不能混：那一行的 read/write/defaultGroups
+ * 描述的是**将要建立**的会话，判定路径不读它；而「这条会话没有记录」时判定路径执行的
+ * 是种子算出来的那一对，所以界面必须能读到同一行才能显示同一个值。
+ * @param namespaces - 快照里的全部命名空间行，或 undefined。
+ * @returns 那一行的取值，或 undefined（宿主没服务这一节）。
+ */
+export declare function sessionAxesRowValue(namespaces: readonly SessionAxesSectionView[] | undefined): unknown;
+/**
+ * 按会话 id 从一份文档快照里取出那一对轴。
+ *
+ * 未信任输入：文档可能被人手改过、也可能由别的写入方改过，所以只在形状真的读得懂时才
+ * 返回取值；读不懂时返回 `undefined`，由 {@link sessionAxesView} 决定那是「照种子
+ * 显示」还是「无从得知」。这里**不抛**：一个读不懂的会话轴不该让整个输入条崩掉。
+ * @param value - 本命名空间那一行的取值。
+ * @param sessionId - 要读的那条会话。
+ * @returns 那条会话的轴对，或 undefined。
+ */
+export declare function sessionAxesOf(value: unknown, sessionId: string | undefined): DualAxisAxesWire | undefined;
+/**
+ * What the two dropdowns display for one session, and why.
+ *
+ * Three states, because two of them look alike and mean different things:
+ *
+ * - `record` — the document carries this session's pair. This is the ordinary
+ *   state and the only one that has an answer of its own.
+ * - `default` — the document was read and does NOT carry this session. The host
+ *   is holding the session to its SEED right now — the pair `pin` pins a new
+ *   session with, recomputed by {@link sessionAxesSeed} from the settings row —
+ *   so that is what is shown. Showing nothing here is the defect this type exists
+ *   to prevent: it reads to a person as "the feature is gone". Showing
+ *   `SESSION_AXES_FALLBACK` here instead would be the OTHER defect: it labels the
+ *   axis with a range the host does not enforce.
+ * - `unknown` — there is nothing to read: no session is selected, or the settings
+ *   mirror has not delivered a document yet. No value can be claimed to agree
+ *   with the host, so the dropdowns say so instead of inventing one.
+ */
+export type SessionAxesView = {
+    readonly state: 'record';
+    readonly axes: DualAxisAxesWire;
+} | {
+    readonly state: 'default';
+    readonly axes: DualAxisAxesWire;
+} | {
+    readonly state: 'unknown';
+};
+/**
+ * Resolve what the two dropdowns show for one session.
+ *
+ * Never returns nothing and never throws: an unreadable document, an unknown
+ * session id, and a missing record each have a state of their own.
+ * @param namespaces - every namespace row of one describe snapshot, or `undefined`
+ *   when the mirror has not delivered a document (which is NOT the same as a
+ *   document that carries no record for this session).
+ * @param sessionId - the session to read; `undefined` when none is selected.
+ * @param parentSessionId - the session's parent when it is a subagent child, which
+ *   changes the seed: a child inherits its parent's STORED pair rather than the
+ *   settings row, exactly as `inheritedAxes` does on the host. `undefined` for a
+ *   top-level session (and for a child whose lineage the client has not learned).
+ * @returns the view the dropdowns render from.
+ */
+export declare function sessionAxesView(namespaces: readonly SessionAxesSectionView[] | undefined, sessionId: string | undefined, parentSessionId?: string | undefined): SessionAxesView;

package/lib/types/client/permission/session-axes-seed.d.ts

@@ -0,0 +1,60 @@
+/**
+ * 记录缺席时两个下拉该显示的那一对轴：宿主 `seedPair` 的逐字镜像。
+ *
+ * 宿主那一份在 `@t4r71/dsh-dual-axis` 的 `src/session-store.ts`，是
+ * `seedAxesFor` 的纯核：设置页那一行（`read` / `write` / `defaultGroups`），
+ * 加上子代理子会话从**父会话当刻的记录**继承来的那一对，折成「这条会话在新存储里
+ * 还没有记录时被钉下、也被判定路径执行的那一对」。记录落地之前，活读路径（模型提示词、
+ * 读围栏、`/axis` 的兜底）交回的就是它，所以界面必须显示同一个值 —— 显示别的就是
+ * 「界面显示 A、宿主执行 B」：设置页默认若是「禁止读」，那一轮仍然被当成「全盘读」。
+ *
+ * 为什么另起一个模块：它必须能在**零依赖**的程序里被直接加载，好让宿主包的
+ * `tests/seed-parity.spec.ts` 把两侧喂同一组输入、断言输出逐字相等（这是防止两份
+ * 实现以后各自漂移的唯一手段）。因此本文件不 import 任何东西，下面每一步都与宿主那
+ * 一份一一对应：取值集合、校验顺序、键的插入顺序、连报错条件都一致。
+ *
+ * 与 `./session-axes-data.ts` 的分工：那边负责「文档里有没有这条会话的记录」，
+ * 这边只负责「没有记录时那一对该是什么」。
+ *
+ * @module @deepseek-ai/dsh-client-ui-permission-presets/client/session-axes-seed
+ */
+/** 一条轴在文档里的拼写：闭合取值只有 `kind`。 */
+export interface SeededAxis {
+    /** 四种取值之一：`deny` / `workspace` / `all` / `custom`。 */
+    readonly kind: string;
+    /** `custom` 的比较底座。 */
+    readonly base?: string;
+    /** `custom` 引用的规则组 id。 */
+    readonly groups?: readonly string[];
+    /** `custom` 在底座之上追加的绝对路径。 */
+    readonly allow?: readonly string[];
+    /** `custom` 从（底座 ∪ allow）里排除的绝对路径。 */
+    readonly deny?: readonly string[];
+}
+/** 一条会话的一对轴。 */
+export interface SeededAxes {
+    /** 读轴。 */
+    readonly read: SeededAxis;
+    /** 写轴。 */
+    readonly write: SeededAxis;
+}
+/**
+ * 读不懂任何输入时的那一对：宿主 `DEFAULT_AXES` 的同一对取值
+ * （`packages/bundle/dual-axis/src/axis.ts` 的 `DEFAULT_READ_SCOPE` /
+ * `DEFAULT_WRITE_SCOPE`）。
+ *
+ * 它**不再**是「会话没有记录」时的答案 —— 那是 {@link sessionAxesSeed} 算出来的
+ * 种子。这一对只在设置页那一行整个读不懂时出现，而宿主在那同一种情形下交回的也正是
+ * 它（`seedPair` 的 catch 与 `ensure` 的 catch 都答 `DEFAULT_AXES`）。
+ */
+export declare const SESSION_AXES_FALLBACK: SeededAxes;
+/**
+ * 记录缺席时该显示的那一对轴 —— 与宿主 `seedPair` 同一份计算、同一个兜底。
+ *
+ * 永不抛：设置页那一行读不懂、父会话记录读不懂，一律答
+ * {@link SESSION_AXES_FALLBACK}，与宿主在同一种输入上的答案相同。
+ * @param row - 设置页那一行（`dual-axis` 命名空间）的取值，未信任。
+ * @param inherited - 子代理子会话从父会话记录继承来的那一对，或 `undefined`。
+ * @returns 这条会话此刻被钉下、也被被执行的那一对轴。
+ */
+export declare function sessionAxesSeed(row: unknown, inherited: SeededAxes | undefined): SeededAxes;

package/lib/types/client/permission/session-axes.d.ts

@@ -0,0 +1,68 @@
+/**
+ * 会话轴在本包浏览器半边的取值面：从共享的 settings describe 镜像里，按**会话 id**
+ * 读出这条会话的那一对轴。
+ *
+ * 轴不再随会话日志下发（宿主半边把它存进自有的设置命名空间 `dual-axis-sessions`，
+ * 见 `@t4r71/dsh-dual-axis/session-store`），于是客户端唯一的取数通道就是那份
+ * 配置文档的镜像。变更通知因此是免费的：宿主写文档后发 `settings/document-updated`，
+ * 该事件在转发白名单上，共享镜像已订阅它并重读（`ui-settings/src/client/index.ts:43`），
+ * 本目录只是跟着镜像的快照走。
+ *
+ * 读的是**另一个命名空间**里的按会话分区字段，不是设置页那一行
+ * （`dual-axis`）：那一行的 read/write/defaultGroups 是新会话的种子，已经在跑的
+ * 会话只认自己的记录。但**记录缺席**时两者交汇：那时宿主执行的正是那一行算出来的
+ * 种子（见 `./session-axes-seed.ts`），所以本目录在没有记录时也要读那一行，才能显示
+ * 与宿主同一个值。分组库仍由那一行的表单拥有，见 `./axis-editor.ts`。
+ *
+ * @module @deepseek-ai/dsh-client-ui-permission-presets/client/session-axes
+ */
+import type { SettingsDescribeFace, SettingsMirrorSnapshot } from '@deepseek-ai/dsh-client-ui-settings/client';
+import type { SessionAxesView } from './session-axes-data.ts';
+/**
+ * 一条会话的父会话 id，子代理子会话才有。
+ *
+ * 由组合层注入：子会话的种子取父会话**当刻的记录**，所以界面必须知道这条会话是不是
+ * 子会话、父是谁。取不到（不是子会话、或本进程还没学到这条血缘）时返回 undefined，
+ * 那时种子退回设置页那一行 —— 与宿主「父会话没有记录时」同一条分支。
+ */
+export type SessionAxesParentOf = (sessionId: string) => string | undefined;
+/**
+ * 这条会话该显示的那一对轴，以及那份取值的来源。
+ *
+ * 返回的永远是三态而不是「有/没有」：没有记录与读不到文档是两件事，前者宿主当刻执行的
+ * 就是内置默认对（所以照它显示），后者没有任何可声称与宿主一致的值（所以如实说不知道）。
+ * 见 `./session-axes-data.ts` 的 `SessionAxesView`。
+ */
+export type SessionAxesReader = (sessionId: string | undefined) => SessionAxesView;
+/**
+ * 会话轴目录：把共享镜像的快照换成一个能直接喂给 `useSyncExternalStore` 的稳定值。
+ *
+ * 快照在这里重新发布，而不是把镜像的快照原样透出去：镜像每次重读都换一个对象，
+ * 而重渲染的代价只有在这一层做一次比较才能省掉。比较是序列化比较 —— 镜像只在这份
+ * 文档真的变了之后才发布（宿主只在 entry 的 raw 变化时发 `settings/document-updated`，
+ * 见 `settings/src/index.ts:311-317`），所以那次序列化每次文档变更只做一次。
+ */
+export declare class SessionAxesDirectory {
+    private readonly describeFace;
+    private readonly parentOf;
+    private readonly local;
+    private readonly following;
+    /**
+     * @param describeFace - 共享的 describe 镜像（`ctx.configForms.describe()`）。
+     * @param parentOf - 这条会话的父会话 id；默认「不是子会话」，于是种子只按设置页那一行算。
+     */
+    constructor(describeFace: SettingsDescribeFace, parentOf?: SessionAxesParentOf);
+    /** 稳定快照，直接交给 `useSyncExternalStore`。 */
+    readonly getSnapshot: () => SettingsMirrorSnapshot;
+    /** 订阅本地快照的替换。 */
+    readonly subscribe: (listener: () => void) => (() => void);
+    /**
+     * 一条会话当刻该显示的轴。同步，供编辑器取初值与提交后的核对使用。
+     * @param sessionId - 当前会话 id；没有选中会话时是 undefined。
+     * @returns 三态取值：有记录 / 照这条会话的种子显示 / 无从得知。
+     */
+    readonly axesOf: SessionAxesReader;
+    /** 停掉对镜像的跟随；之后的发布不再进入本目录。 */
+    dispose(): void;
+    private fold;
+}

package/lib/types/client/permission/settings-store.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Permission default-settings controller. 权限描述符来自共享的 describe 镜像，可选
+ * 取值来自进程级 {@link PermissionCatalogDirectory}（0.1.7 起动态预设枚举不再从
+ * namespace schema 里挖，改由权限目录的 `defaultOptions` 提供）；写入只针对
+ * `defaultPreset`，带上描述符 revision，并把宿主接受的答案折回镜像。
+ */
+import type { Context as ClientContext } from '@deepseek-ai/cordis';
+import type { SettingsNamespaceView } from '@deepseek-ai/dsh-api-remotes/client';
+import { type SnapshotStore } from '@deepseek-ai/dsh-client-store';
+import type { SettingsDescribeFace } from '@deepseek-ai/dsh-client-ui-settings/client';
+import type { PermissionCatalog } from '@deepseek-ai/dsh-permission-presets/client';
+import type { PermissionCatalogDirectory } from './catalog.ts';
+/** Permission's settings namespace on the host wire. */
+export declare const PERMISSION_SETTINGS_NS = "permission";
+/** One selectable new-session default. */
+export interface PermissionDefaultOption {
+    /** Preset key written to Settings. */
+    id: string;
+    /** Host-supplied label or a title-cased preset key. */
+    label: string;
+}
+/** Permission settings-row snapshot. */
+export interface PermissionSettingsState {
+    status: 'idle' | 'loading' | 'ready' | 'saving' | 'unavailable' | 'error';
+    error: string | null;
+    writable: boolean;
+    currentValue: string;
+    options: readonly PermissionDefaultOption[];
+    revision: number;
+}
+/**
+ * Resolve the new-session choices from the permission domain's catalog.
+ * @param view - 当前配置描述符。
+ * @param catalog - 权限目录：可选预设与生效默认值。
+ * @returns 当前取值，以及它允许的那些取值的标签。
+ */
+export declare function permissionDefaultOf(view: SettingsNamespaceView, catalog: PermissionCatalog): {
+    currentValue: string;
+    options: PermissionDefaultOption[];
+};
+/** Controller deriving the row from the shared mirror and writing the default through it. */
+export declare class PermissionPresetSettingsController {
+    private readonly describeFace;
+    private readonly ctx;
+    private readonly catalog;
+    /** Row snapshot consumed through a bound selector hook. */
+    readonly store: SnapshotStore<PermissionSettingsState>;
+    private following;
+    private followingCatalog;
+    private saving;
+    private disposed;
+    /**
+     * @param describeFace - the shared mirror's read/fold face (descriptor and schema source).
+     * @param ctx - the row plugin's context, whose `remote.settings` namespace
+     * carries the `defaultPreset` write.
+     * @param catalog - 已配置的权限可选值与生效默认值（进程级目录，与斜杠弹窗共用一份）。
+     */
+    constructor(describeFace: SettingsDescribeFace, ctx: ClientContext, catalog: Pick<PermissionCatalogDirectory, 'store' | 'load'>);
+    /**
+     * Begin following the mirror (idempotent) and reflect its current answer.
+     * @returns settlement once the snapshot reflects the mirror.
+     */
+    load(): Promise<void>;
+    /**
+     * Persist one preset as the default for subsequently created sessions.
+     * A selection made while one is already saving is ignored — the row's
+     * control is disabled during the save, so this only drops programmatic
+     * double-submits rather than user intent.
+     * @param preset - advertised preset key.
+     * @returns nothing; {@link store} carries success or failure.
+     */
+    select(preset: string): Promise<void>;
+    /** Stop following the mirror; later publishes leave the snapshot alone. */
+    dispose(): void;
+    private derive;
+    private fail;
+}