@xrkseek/harness 0.5.5 → 0.5.6

package/node_modules/@xrkseek/server-face/dist/model-catalog.js

@@ -1,6 +1,14 @@
 import { DEFAULT_DEEPSEEK_MODELS } from "./settings-schemas.js";
 import { mergeLayers, persistSettingsDocument } from "./settings-document.js";
 import { listDeclaredPiAiProviders, piAiProviderProfile, providerHasUsableCredential, providerRouteServed, resolveProviderBinding, } from "./llm-provider-context.js";
+/** Wire efforts for official DeepSeek chat (`thinking` / `reasoning_effort`). */
+const DEEPSEEK_REASONING_EFFORTS = [
+    { id: "off", name: "Off" },
+    { id: "low", name: "Low" },
+    { id: "high", name: "High" },
+    { id: "max", name: "Max" },
+];
+const DEEPSEEK_REASONING_IDS = new Set(DEEPSEEK_REASONING_EFFORTS.map((effort) => effort.id));
 function mergedNamespace(runtime, ns) {
     const slot = runtime.settingsNamespaces.ensure(ns);
     return mergeLayers(slot.base, slot.user);
@@ -43,18 +51,32 @@ function asModelRows(raw) {
     }
     return out;
 }
+/** Settings `llm-deepseek.reasoningEffort` when valid; else High. */
+function deepseekReasoning(runtime) {
+    const merged = mergedNamespace(runtime, "llm-deepseek");
+    const raw = merged.reasoningEffort;
+    const defaultEffort = typeof raw === "string" && DEEPSEEK_REASONING_IDS.has(raw) ? raw : "high";
+    return {
+        efforts: DEEPSEEK_REASONING_EFFORTS.map((effort) => ({ ...effort })),
+        defaultEffort,
+    };
+}
+function withDeepseekReasoning(models, reasoning) {
+    return models.map((model) => model.reasoning === undefined ? { ...model, reasoning } : model);
+}
 function deepseekModels(runtime) {
     const merged = mergedNamespace(runtime, "llm-deepseek");
+    const reasoning = deepseekReasoning(runtime);
     const fromSettings = asModelRows(merged.models);
     if (fromSettings.length > 0)
-        return fromSettings;
-    return DEFAULT_DEEPSEEK_MODELS.map((m) => ({
+        return withDeepseekReasoning(fromSettings, reasoning);
+    return withDeepseekReasoning(DEFAULT_DEEPSEEK_MODELS.map((m) => ({
         id: m.id,
         name: m.name,
         ...(m.description ? { description: m.description } : {}),
         ...(m.contextWindow ? { contextWindow: m.contextWindow } : {}),
         ...(m.inputModalities ? { inputModalities: m.inputModalities } : {}),
-    }));
+    })), reasoning);
 }
 function piAiProviderModels(runtime, brandId) {
     const profile = piAiProviderProfile(runtime, brandId);

package/node_modules/@xrkseek/server-face/dist/model-catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-catalog.js","sourceRoot":"","sources":["../src/model-catalog.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,2BAA2B,EAC3B,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AAuBnC,SAAS,eAAe,CACtB,OAAoB,EACpB,EAAU;IAEV,MAAM,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnD,OAAO,WAAW,CAChB,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,IAAI,CACV,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,EAAE,GAAG,MAAM,CAAE,GAAwB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,OAAO,GAAI,GAA0B,CAAC,IAAI,CAAC;QACjD,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,OAAO,GAAI,GAAiC,CAAC,WAAW,CAAC;QAC/D,MAAM,KAAK,GAAI,GAAmC,CAAC,aAAa,CAAC;QACjE,MAAM,OAAO,GAAI,GAAqC,CAAC,eAAe,CAAC;QACvE,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5C,CAAC,CAAC,OAAO;iBACJ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBAC5B,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,CAAC;YACxE,CAAC,CAAC,SAAS,CAAC;QACd,GAAG,CAAC,IAAI,CAAC;YACP,EAAE;YACF,IAAI;YACJ,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;gBAC/C,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE;gBACjC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ;gBAC7B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;gBACvB,KAAK,GAAG,CAAC;gBACP,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE;gBAC1B,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;gBAC/C,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,OAAoB;IAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC;IACjD,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAoB,EACpB,OAAe;IAEf,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CACrB,OAAoB,EACpB,KAAiB;IAEjB,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU;QAAE,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAC7C,uEAAuE;IACvE,IAAI,KAAK,CAAC,YAAY,IAAI,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACjE,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,WAAW,CAAC,OAAoB,EAAE,QAAgB;IAChE,OAAO,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,qBAAqB,CACnC,OAAoB;IAEpB,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ;YAAE,SAAS;QACtD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAE,SAAS;QACtD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChE,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,WAAW;YAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE;gBACpB,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS;oBAC/B,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE;oBACpC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAClC,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,wBAAwB,CACtC,OAAoB,EACpB,SAA6B;IAE7B,OAAO,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,aAAa,CAAC;AAC7D,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,0BAA0B,CACxC,OAAoB,EACpB,SAA6B;IAE7B,OAAO,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,eAAe,CAAC;AAC/D,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAoB,EACpB,SAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ;SAC3B,UAAU,EAAE;SACZ,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,SAAS,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACtC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CACzD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,wBAAwB,CACtC,OAAoB;IAEpB,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;IACzC,OAAO;QACL,QAAQ;QACR,KAAK;QACL,GAAG,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE;YACnD,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE;YACvC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,4BAA4B,CAC1C,OAAoB,EACpB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YACH,sBAAsB,CAAC,OAAO,EAAE;gBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ;SAClC,UAAU,EAAE;SACZ,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;QAChC,2BAA2B,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1C,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAC7B,CAAC;IACJ,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,KAAK;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC1D,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,IAAI,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAClE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAoB,EACpB,SAA6B;IAE7B,MAAM,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACtE,IAAI,CAAC,IAAI,GAAG;QACV,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,GAAG,CAAC,SAAS,CAAC,eAAe;YAC3B,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IACnB,MAAM,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;AACrE,CAAC"}
+{"version":3,"file":"model-catalog.js","sourceRoot":"","sources":["../src/model-catalog.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,2BAA2B,EAC3B,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AAuBnC,iFAAiF;AACjF,MAAM,0BAA0B,GAAkC;IAChE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;IAC1B,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;IAC1B,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;IAC5B,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;CAC3B,CAAC;AAEF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CACpC,0BAA0B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CACtD,CAAC;AAcF,SAAS,eAAe,CACtB,OAAoB,EACpB,EAAU;IAEV,MAAM,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnD,OAAO,WAAW,CAChB,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,IAAI,CACV,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,EAAE,GAAG,MAAM,CAAE,GAAwB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,OAAO,GAAI,GAA0B,CAAC,IAAI,CAAC;QACjD,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,OAAO,GAAI,GAAiC,CAAC,WAAW,CAAC;QAC/D,MAAM,KAAK,GAAI,GAAmC,CAAC,aAAa,CAAC;QACjE,MAAM,OAAO,GAAI,GAAqC,CAAC,eAAe,CAAC;QACvE,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5C,CAAC,CAAC,OAAO;iBACJ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBAC5B,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,CAAC;YACxE,CAAC,CAAC,SAAS,CAAC;QACd,GAAG,CAAC,IAAI,CAAC;YACP,EAAE;YACF,IAAI;YACJ,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;gBAC/C,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE;gBACjC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ;gBAC7B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;gBACvB,KAAK,GAAG,CAAC;gBACP,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE;gBAC1B,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;gBAC/C,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qEAAqE;AACrE,SAAS,iBAAiB,CAAC,OAAoB;IAC7C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC;IACnC,MAAM,aAAa,GACjB,OAAO,GAAG,KAAK,QAAQ,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5E,OAAO;QACL,OAAO,EAAE,0BAA0B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACpE,aAAa;KACd,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAiC,EACjC,SAA6B;IAE7B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1B,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,CAChE,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAAoB;IAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,qBAAqB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACnF,OAAO,qBAAqB,CAC1B,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC,EACH,SAAS,CACV,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAoB,EACpB,OAAe;IAEf,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CACrB,OAAoB,EACpB,KAAiB;IAEjB,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU;QAAE,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAC7C,uEAAuE;IACvE,IAAI,KAAK,CAAC,YAAY,IAAI,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACjE,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,WAAW,CAAC,OAAoB,EAAE,QAAgB;IAChE,OAAO,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,qBAAqB,CACnC,OAAoB;IAEpB,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ;YAAE,SAAS;QACtD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAE,SAAS;QACtD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChE,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,WAAW;YAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE;gBACpB,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS;oBAC/B,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE;oBACpC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAClC,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,wBAAwB,CACtC,OAAoB,EACpB,SAA6B;IAE7B,OAAO,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,aAAa,CAAC;AAC7D,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,0BAA0B,CACxC,OAAoB,EACpB,SAA6B;IAE7B,OAAO,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,eAAe,CAAC;AAC/D,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAoB,EACpB,SAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ;SAC3B,UAAU,EAAE;SACZ,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,SAAS,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACtC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CACzD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,wBAAwB,CACtC,OAAoB;IAEpB,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;IACzC,OAAO;QACL,QAAQ;QACR,KAAK;QACL,GAAG,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE;YACnD,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE;YACvC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,4BAA4B,CAC1C,OAAoB,EACpB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YACH,sBAAsB,CAAC,OAAO,EAAE;gBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ;SAClC,UAAU,EAAE;SACZ,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;QAChC,2BAA2B,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1C,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAC7B,CAAC;IACJ,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,KAAK;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC1D,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,IAAI,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAClE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAoB,EACpB,SAA6B;IAE7B,MAAM,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACtE,IAAI,CAAC,IAAI,GAAG;QACV,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,GAAG,CAAC,SAAS,CAAC,eAAe;YAC3B,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IACnB,MAAM,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;AACrE,CAAC"}

package/node_modules/@xrkseek/server-face/dist/permission-auto.d.ts

@@ -0,0 +1,51 @@
+/**
+ * DSH `registerAuto` — Auto (Guardian) is not a configured table entry; it
+ * appears in the current-session catalog only while an integration is live.
+ *
+ * Dispose closes admission, optionally migrates live Auto sessions, aborts
+ * in-flight reviews, drains them, then withdraws the catalog (DSH auto-review
+ * lifecycle).
+ */
+/** Synchronous admission gate run before selecting or restoring Auto. */
+export type FacePermissionAutoAdmit = () => void;
+/** Live registration surface for in-flight review cancellation. */
+export interface FacePermissionAutoLifecycle {
+    readonly signal: AbortSignal;
+    /** Whether new Auto selections / reviews are still accepted. */
+    isAccepting(): boolean;
+    /** Track a review so dispose can drain it after abort. */
+    track(work: Promise<unknown>): void;
+}
+export interface FacePermissionAutoGate {
+    /**
+     * Publish Auto for the integration lifetime (DSH `registerAuto`).
+     * @param admit - synchronous gate run before live Auto selection or restore.
+     * @param options.migrateAway - move live Auto sessions off Auto before
+     *   withdrawing the catalog (typically → `danger-full-access`).
+     * @returns disposer that closes admission, migrates, aborts reviews, drains,
+     *   then removes Auto from the catalog.
+     */
+    registerAuto(admit: FacePermissionAutoAdmit, options?: {
+        readonly migrateAway?: () => void;
+    }): () => void;
+    /** Whether Guardian/auto-review has published Auto. */
+    isLive(): boolean;
+    /** Whether the live integration still accepts Auto selection / restore. */
+    isAccepting(): boolean;
+    /**
+     * Run the live admit hook (before `/permission auto` or restore).
+     * @throws when Auto is not live, closing, or when admit rejects.
+     */
+    admit(): void;
+    /** Base presets, then `auto` while live. */
+    catalogNames(): readonly string[];
+    /** Listen for catalog attach/detach (republish permissions projection). */
+    onCatalogChange(listener: () => void): () => void;
+    /** Abort/track face while Auto is published; undefined when withdrawn. */
+    lifecycle(): FacePermissionAutoLifecycle | undefined;
+}
+/**
+ * Process-local Auto catalog gate. One admit at a time (DSH rejects duplicates).
+ */
+export declare function createFacePermissionAutoGate(): FacePermissionAutoGate;
+//# sourceMappingURL=permission-auto.d.ts.map

package/node_modules/@xrkseek/server-face/dist/permission-auto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-auto.d.ts","sourceRoot":"","sources":["../src/permission-auto.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,yEAAyE;AACzE,MAAM,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC;AAEjD,mEAAmE;AACnE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,gEAAgE;IAChE,WAAW,IAAI,OAAO,CAAC;IACvB,0DAA0D;IAC1D,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;;;;OAOG;IACH,YAAY,CACV,KAAK,EAAE,uBAAuB,EAC9B,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;KACnC,GACA,MAAM,IAAI,CAAC;IACd,uDAAuD;IACvD,MAAM,IAAI,OAAO,CAAC;IAClB,2EAA2E;IAC3E,WAAW,IAAI,OAAO,CAAC;IACvB;;;OAGG;IACH,KAAK,IAAI,IAAI,CAAC;IACd,4CAA4C;IAC5C,YAAY,IAAI,SAAS,MAAM,EAAE,CAAC;IAClC,2EAA2E;IAC3E,eAAe,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;IAClD,0EAA0E;IAC1E,SAAS,IAAI,2BAA2B,GAAG,SAAS,CAAC;CACtD;AAED;;GAEG;AACH,wBAAgB,4BAA4B,IAAI,sBAAsB,CAmGrE"}

package/node_modules/@xrkseek/server-face/dist/permission-auto.js

@@ -0,0 +1,106 @@
+/**
+ * DSH `registerAuto` — Auto (Guardian) is not a configured table entry; it
+ * appears in the current-session catalog only while an integration is live.
+ *
+ * Dispose closes admission, optionally migrates live Auto sessions, aborts
+ * in-flight reviews, drains them, then withdraws the catalog (DSH auto-review
+ * lifecycle).
+ */
+import { AUTO_PERMISSION_PRESET, FACE_PERMISSION_PRESETS, } from "./face-schema.js";
+/**
+ * Process-local Auto catalog gate. One admit at a time (DSH rejects duplicates).
+ */
+export function createFacePermissionAutoGate() {
+    let autoAdmit;
+    let migrateAway;
+    let accepting = false;
+    let lifecycleAbort;
+    const active = new Set();
+    const listeners = new Set();
+    const emit = () => {
+        for (const listener of listeners) {
+            try {
+                listener();
+            }
+            catch {
+                /* catalog listeners must not break Host */
+            }
+        }
+    };
+    const lifecycleFace = () => {
+        if (lifecycleAbort === undefined)
+            return undefined;
+        const signal = lifecycleAbort.signal;
+        return {
+            signal,
+            isAccepting: () => accepting,
+            track(work) {
+                active.add(work);
+                void work.finally(() => {
+                    active.delete(work);
+                });
+            },
+        };
+    };
+    return {
+        registerAuto(admit, options) {
+            if (autoAdmit !== undefined) {
+                throw new Error('permission: preset "auto" is already registered');
+            }
+            autoAdmit = admit;
+            migrateAway = options?.migrateAway;
+            accepting = true;
+            lifecycleAbort = new AbortController();
+            emit();
+            return () => {
+                if (autoAdmit !== admit)
+                    return;
+                // DSH: close admission first so migration observers cannot re-select Auto.
+                accepting = false;
+                try {
+                    migrateAway?.();
+                }
+                finally {
+                    const abort = lifecycleAbort;
+                    lifecycleAbort = undefined;
+                    migrateAway = undefined;
+                    abort?.abort(new Error("auto-review integration disposed"));
+                    // Drain without blocking Host close; reviews observe abort via signal.
+                    void Promise.allSettled([...active]).then(() => {
+                        active.clear();
+                    });
+                    autoAdmit = undefined;
+                    emit();
+                }
+            };
+        },
+        isLive() {
+            return autoAdmit !== undefined;
+        },
+        isAccepting() {
+            return accepting && autoAdmit !== undefined;
+        },
+        admit() {
+            if (autoAdmit === undefined) {
+                throw new Error('permission: preset "auto" is not available (Guardian integration not mounted)');
+            }
+            if (!accepting) {
+                throw new Error("auto-review: integration is closing");
+            }
+            autoAdmit();
+        },
+        catalogNames() {
+            return autoAdmit === undefined
+                ? FACE_PERMISSION_PRESETS
+                : [...FACE_PERMISSION_PRESETS, AUTO_PERMISSION_PRESET];
+        },
+        onCatalogChange(listener) {
+            listeners.add(listener);
+            return () => {
+                listeners.delete(listener);
+            };
+        },
+        lifecycle: lifecycleFace,
+    };
+}
+//# sourceMappingURL=permission-auto.js.map

package/node_modules/@xrkseek/server-face/dist/permission-auto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-auto.js","sourceRoot":"","sources":["../src/permission-auto.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AA8C1B;;GAEG;AACH,MAAM,UAAU,4BAA4B;IAC1C,IAAI,SAA8C,CAAC;IACnD,IAAI,WAAqC,CAAC;IAC1C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,cAA2C,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;IAExC,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,QAAQ,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,GAA4C,EAAE;QAClE,IAAI,cAAc,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACnD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QACrC,OAAO;YACL,MAAM;YACN,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS;YAC5B,KAAK,CAAC,IAAI;gBACR,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjB,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,YAAY,CAAC,KAAK,EAAE,OAAO;YACzB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,SAAS,GAAG,KAAK,CAAC;YAClB,WAAW,GAAG,OAAO,EAAE,WAAW,CAAC;YACnC,SAAS,GAAG,IAAI,CAAC;YACjB,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;YACvC,IAAI,EAAE,CAAC;YACP,OAAO,GAAG,EAAE;gBACV,IAAI,SAAS,KAAK,KAAK;oBAAE,OAAO;gBAChC,2EAA2E;gBAC3E,SAAS,GAAG,KAAK,CAAC;gBAClB,IAAI,CAAC;oBACH,WAAW,EAAE,EAAE,CAAC;gBAClB,CAAC;wBAAS,CAAC;oBACT,MAAM,KAAK,GAAG,cAAc,CAAC;oBAC7B,cAAc,GAAG,SAAS,CAAC;oBAC3B,WAAW,GAAG,SAAS,CAAC;oBACxB,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;oBAC5D,uEAAuE;oBACvE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;wBAC7C,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,CAAC,CAAC,CAAC;oBACH,SAAS,GAAG,SAAS,CAAC;oBACtB,IAAI,EAAE,CAAC;gBACT,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QAED,MAAM;YACJ,OAAO,SAAS,KAAK,SAAS,CAAC;QACjC,CAAC;QAED,WAAW;YACT,OAAO,SAAS,IAAI,SAAS,KAAK,SAAS,CAAC;QAC9C,CAAC;QAED,KAAK;YACH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,CAAC;YACD,SAAS,EAAE,CAAC;QACd,CAAC;QAED,YAAY;YACV,OAAO,SAAS,KAAK,SAAS;gBAC5B,CAAC,CAAC,uBAAuB;gBACzB,CAAC,CAAC,CAAC,GAAG,uBAAuB,EAAE,sBAAsB,CAAC,CAAC;QAC3D,CAAC;QAED,eAAe,CAAC,QAAQ;YACtB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,GAAG,EAAE;gBACV,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,CAAC,CAAC;QACJ,CAAC;QAED,SAAS,EAAE,aAAa;KACzB,CAAC;AACJ,CAAC"}

package/node_modules/@xrkseek/server-face/dist/permissions.d.ts

@@ -5,14 +5,28 @@
 import { type SessionStore } from "@xrkseek/core-session";
 import { type ApprovalPolicy, type PermissionKnobState, type SandboxMode, type SessionEvent } from "@xrkseek/protocol";
 import { type FacePermissionPreset } from "./face-schema.js";
+import type { FacePermissionAutoGate } from "./permission-auto.js";
 import type { FaceRuntime } from "./context.js";
 export declare const CUSTOM_PERMISSION_PRESET: "custom";
+/** @deprecated Prefer {@link AUTO_PERMISSION_PRESET}; DSH alias. */
+export declare const AUTO_PRESET: "auto";
 export interface PermissionPresetSpec {
     readonly sandbox: SandboxMode;
     readonly approval: ApprovalPolicy;
     readonly name: string;
     readonly description: string;
 }
+/**
+ * Fixed execution bundle for Auto (DSH `AUTO_PRESET_SPEC`): full sandbox with
+ * `ask` so reviewer denials still surface to the user.
+ */
+export declare const AUTO_PRESET_SPEC: PermissionPresetSpec;
+/**
+ * User-facing permission line for `/status` and Status chrome (Codex
+ * `Workspace (Approve for me)` class — Auto is a whole preset here).
+ * Machine id stays `auto` on the snapshot; only the display string is remapped.
+ */
+export declare function formatPermissionStatusLabel(permission: string): string;
 export interface PermissionSelectOption {
     readonly value: string;
     readonly name: string;
@@ -24,21 +38,40 @@ export interface PermissionSelect {
 }
 /** Same table ids as settings `permission.defaultPreset`. */
 export declare const FACE_PERMISSION_TABLE: Readonly<Record<FacePermissionPreset, PermissionPresetSpec>>;
+/** Resolve a configured table entry or the live Auto bundle. */
+export declare function resolvePermissionPresetSpec(name: string, autoLive: boolean): PermissionPresetSpec | undefined;
 /**
  * Derive select currentValue from folded knobs + composition defaults.
  * Defaults match a coding harness (workspace-write + ask).
+ * `auto` appears in options only while Guardian `registerAuto` is live.
  */
 export declare function derivePermissionSelect(state: PermissionKnobState, defaults?: {
     readonly sandbox?: SandboxMode;
     readonly approval?: ApprovalPolicy;
+}, options?: {
+    readonly autoLive?: boolean;
+}): PermissionSelect;
+export declare function permissionSelectFromEvents(events: readonly SessionEvent[], options?: {
+    readonly autoLive?: boolean;
 }): PermissionSelect;
-export declare function permissionSelectFromEvents(events: readonly SessionEvent[]): PermissionSelect;
 export declare function defaultPermissionPreset(runtime: FaceRuntime): FacePermissionPreset;
 /** Pin durable knobs on a fresh session (settings defaultPreset). */
-export declare function pinInitialPermission(store: SessionStore, sessionId: string, preset: FacePermissionPreset): void;
+export declare function pinInitialPermission(store: SessionStore, sessionId: string, preset: FacePermissionPreset, options?: {
+    readonly autoGate?: FacePermissionAutoGate;
+}): void;
+/**
+ * Move every live Auto session to Full access (DSH dispose migrateAway).
+ * Called while Auto is still catalog-live but admission is already closed.
+ */
+export declare function migrateAutoSessionsToFullAccess(store: SessionStore, autoGate: FacePermissionAutoGate, options?: {
+    readonly hasPtyActivity?: () => boolean;
+}): void;
 /**
- * Switch preset: append changed knobs only. Selecting the effective preset
- * again appends nothing.
+ * Switch preset: record identity when the derived current value changes, then
+ * write each changed knob. Auto and Full access share `danger-full-access`
+ * sandbox — the switch still appends `permission/preset` and only the
+ * differing `approval/policy` (DSH shared-bundle switch). Selecting the
+ * effective preset again appends nothing (Auto admission still runs).
  *
  * Optional `hasPtyActivity` fences sandbox mode changes while **Agent**
  * `terminal_*` PTY sessions are open or spawning (CV DSH terminal-bash
@@ -47,6 +80,7 @@ export declare function pinInitialPermission(store: SessionStore, sessionId: str
  */
 export declare function applyPermissionPreset(store: SessionStore, sessionId: string, name: string, options?: {
     readonly hasPtyActivity?: () => boolean;
+    readonly autoGate?: FacePermissionAutoGate;
 }): {
     readonly ok: true;
     readonly changed: boolean;

package/node_modules/@xrkseek/server-face/dist/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,eAAO,MAAM,wBAAwB,EAAG,QAAiB,CAAC;AAE1D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAC1C,MAAM,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAuBnD,CAAC;AA8BF;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,mBAAmB,EAC1B,QAAQ,GAAE;IACR,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC/B,GACL,gBAAgB,CAyBlB;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,gBAAgB,CAElB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,WAAW,GAAG,oBAAoB,CAOlF;AAeD,qEAAqE;AACrE,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,oBAAoB,GAC3B,IAAI,CAoBN;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAA;CAAE,GAEnD;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAgDnD;AAED;;;;GAIG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,WAAW,EACpB,YAAY,EAAE,OAAO,EACrB,SAAS,EAAE,OAAO,GACjB,OAAO,CAAC,IAAI,CAAC,CA6Bf"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,eAAO,MAAM,wBAAwB,EAAG,QAAiB,CAAC;AAE1D,oEAAoE;AACpE,eAAO,MAAM,WAAW,QAAyB,CAAC;AAElD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,oBAO9B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAMtE;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAC1C,MAAM,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAuBnD,CAAC;AAEF,gEAAgE;AAChE,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,OAAO,GAChB,oBAAoB,GAAG,SAAS,CAIlC;AAqCD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,mBAAmB,EAC1B,QAAQ,GAAE;IACR,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC/B,EACN,OAAO,GAAE;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GAC5C,gBAAgB,CA+ClB;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,OAAO,GAAE;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GAC5C,gBAAgB,CAElB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,WAAW,GAAG,oBAAoB,CAOlF;AAeD,qEAAqE;AACrE,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,oBAAoB,EAC5B,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAA;CAAE,GACvD,IAAI,CAgCN;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,sBAAsB,EAChC,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAA;CAAE,GACpD,IAAI,CAcN;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CAC5C,GAEC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAiEnD;AAED;;;;GAIG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,WAAW,EACpB,YAAY,EAAE,OAAO,EACrB,SAAS,EAAE,OAAO,GACjB,OAAO,CAAC,IAAI,CAAC,CA8Bf"}

package/node_modules/@xrkseek/server-face/dist/permissions.js

@@ -4,8 +4,33 @@
  */
 import { readSessionEvents } from "@xrkseek/core-session";
 import { foldPermissionKnobs, } from "@xrkseek/protocol";
-import { FACE_PERMISSION_PRESETS, isFacePermissionPreset, } from "./face-schema.js";
+import { AUTO_PERMISSION_PRESET, FACE_PERMISSION_PRESETS, isFacePermissionPreset, } from "./face-schema.js";
 export const CUSTOM_PERMISSION_PRESET = "custom";
+/** @deprecated Prefer {@link AUTO_PERMISSION_PRESET}; DSH alias. */
+export const AUTO_PRESET = AUTO_PERMISSION_PRESET;
+/**
+ * Fixed execution bundle for Auto (DSH `AUTO_PRESET_SPEC`): full sandbox with
+ * `ask` so reviewer denials still surface to the user.
+ */
+export const AUTO_PRESET_SPEC = {
+    sandbox: "danger-full-access",
+    approval: "ask",
+    // DSH product name; Codex status/permission chrome says "Approve for me".
+    name: "Auto review",
+    description: "Full sandbox access with per-call Auto Review; denials still ask the user.",
+};
+/**
+ * User-facing permission line for `/status` and Status chrome (Codex
+ * `Workspace (Approve for me)` class — Auto is a whole preset here).
+ * Machine id stays `auto` on the snapshot; only the display string is remapped.
+ */
+export function formatPermissionStatusLabel(permission) {
+    if (permission === AUTO_PERMISSION_PRESET) {
+        // Codex "Approve for me" + DSH Auto review; explicit no-sandbox / per-call.
+        return "Auto review (Approve for me) · no sandbox · per-call review";
+    }
+    return permission;
+}
 /** Same table ids as settings `permission.defaultPreset`. */
 export const FACE_PERMISSION_TABLE = {
     "read-only": {
@@ -27,6 +52,14 @@ export const FACE_PERMISSION_TABLE = {
         description: "No approval prompts; shell is not sandboxed. File tools still cannot leave the workspace root.",
     },
 };
+/** Resolve a configured table entry or the live Auto bundle. */
+export function resolvePermissionPresetSpec(name, autoLive) {
+    if (isFacePermissionPreset(name))
+        return FACE_PERMISSION_TABLE[name];
+    if (name === AUTO_PERMISSION_PRESET && autoLive)
+        return AUTO_PRESET_SPEC;
+    return undefined;
+}
 function optionOf(name) {
     if (name === CUSTOM_PERMISSION_PRESET) {
         return {
@@ -35,6 +68,13 @@ function optionOf(name) {
             description: "Current sandbox and approval settings do not match a preset.",
         };
     }
+    if (name === AUTO_PERMISSION_PRESET) {
+        return {
+            value: AUTO_PERMISSION_PRESET,
+            name: AUTO_PRESET_SPEC.name,
+            description: AUTO_PRESET_SPEC.description,
+        };
+    }
     const spec = FACE_PERMISSION_TABLE[name];
     if (!spec) {
         throw new Error(`permission: unknown preset "${name}"`);
@@ -51,15 +91,26 @@ function matches(spec, sandbox, approval) {
 /**
  * Derive select currentValue from folded knobs + composition defaults.
  * Defaults match a coding harness (workspace-write + ask).
+ * `auto` appears in options only while Guardian `registerAuto` is live.
  */
-export function derivePermissionSelect(state, defaults = {}) {
+export function derivePermissionSelect(state, defaults = {}, options = {}) {
+    const autoLive = options.autoLive === true;
     const sandbox = state.sandbox ?? defaults.sandbox ?? "workspace-write";
     const approval = state.approval ?? defaults.approval ?? "ask";
     let currentValue = CUSTOM_PERMISSION_PRESET;
     if (state.preset !== null) {
-        const spec = FACE_PERMISSION_TABLE[state.preset];
+        const spec = resolvePermissionPresetSpec(state.preset, autoLive);
         if (spec && matches(spec, sandbox, approval))
             currentValue = state.preset;
+        // DSH: a stored Auto identity also matches `never` (delegated child pins
+        // reviewer denials as final) while sandbox stays danger-full-access.
+        if (currentValue === CUSTOM_PERMISSION_PRESET &&
+            state.preset === AUTO_PERMISSION_PRESET &&
+            autoLive &&
+            AUTO_PRESET_SPEC.sandbox === sandbox &&
+            approval === "never") {
+            currentValue = AUTO_PERMISSION_PRESET;
+        }
     }
     if (currentValue === CUSTOM_PERMISSION_PRESET) {
         for (const name of FACE_PERMISSION_PRESETS) {
@@ -68,10 +119,18 @@ export function derivePermissionSelect(state, defaults = {}) {
                 break;
             }
         }
+        if (currentValue === CUSTOM_PERMISSION_PRESET &&
+            autoLive &&
+            matches(AUTO_PRESET_SPEC, sandbox, approval)) {
+            currentValue = AUTO_PERMISSION_PRESET;
+        }
     }
+    const catalog = autoLive
+        ? [...FACE_PERMISSION_PRESETS, AUTO_PERMISSION_PRESET]
+        : [...FACE_PERMISSION_PRESETS];
     return {
         options: [
-            ...FACE_PERMISSION_PRESETS.map((n) => optionOf(n)),
+            ...catalog.map((n) => optionOf(n)),
             ...(currentValue === CUSTOM_PERMISSION_PRESET
                 ? [optionOf(CUSTOM_PERMISSION_PRESET)]
                 : []),
@@ -79,8 +138,8 @@ export function derivePermissionSelect(state, defaults = {}) {
         currentValue,
     };
 }
-export function permissionSelectFromEvents(events) {
-    return derivePermissionSelect(foldPermissionKnobs(events));
+export function permissionSelectFromEvents(events, options = {}) {
+    return derivePermissionSelect(foldPermissionKnobs(events), {}, options);
 }
 export function defaultPermissionPreset(runtime) {
     const viewed = runtime.settingsNamespaces.view("permission", { defaultPreset: "workspace-write" });
@@ -96,8 +155,18 @@ function hasAnyKnob(events) {
         e.type === "approval/policy");
 }
 /** Pin durable knobs on a fresh session (settings defaultPreset). */
-export function pinInitialPermission(store, sessionId, preset) {
+export function pinInitialPermission(store, sessionId, preset, options) {
     const events = readSessionEvents(store, sessionId);
+    const knobs = foldPermissionKnobs(events);
+    // DSH: a stored Auto identity requires the live integration + admission
+    // before the session may publish; never rewrite the seed.
+    if (knobs.preset === AUTO_PERMISSION_PRESET) {
+        if (options?.autoGate?.isLive() !== true) {
+            throw new Error('permission: cannot restore preset "auto" without its active integration');
+        }
+        options.autoGate.admit();
+        return;
+    }
     if (hasAnyKnob(events))
         return;
     const spec = FACE_PERMISSION_TABLE[preset];
@@ -119,8 +188,28 @@ export function pinInitialPermission(store, sessionId, preset) {
     });
 }
 /**
- * Switch preset: append changed knobs only. Selecting the effective preset
- * again appends nothing.
+ * Move every live Auto session to Full access (DSH dispose migrateAway).
+ * Called while Auto is still catalog-live but admission is already closed.
+ */
+export function migrateAutoSessionsToFullAccess(store, autoGate, options) {
+    for (const sessionId of store.list()) {
+        const current = permissionSelectFromEvents(readSessionEvents(store, sessionId), { autoLive: true }).currentValue;
+        if (current !== AUTO_PERMISSION_PRESET)
+            continue;
+        applyPermissionPreset(store, sessionId, "danger-full-access", {
+            autoGate,
+            ...(options?.hasPtyActivity
+                ? { hasPtyActivity: options.hasPtyActivity }
+                : {}),
+        });
+    }
+}
+/**
+ * Switch preset: record identity when the derived current value changes, then
+ * write each changed knob. Auto and Full access share `danger-full-access`
+ * sandbox — the switch still appends `permission/preset` and only the
+ * differing `approval/policy` (DSH shared-bundle switch). Selecting the
+ * effective preset again appends nothing (Auto admission still runs).
  *
  * Optional `hasPtyActivity` fences sandbox mode changes while **Agent**
  * `terminal_*` PTY sessions are open or spawning (CV DSH terminal-bash
@@ -128,51 +217,68 @@ export function pinInitialPermission(store, sessionId, preset) {
  * Sidebar user terminals are independent and must not be reported here.
  */
 export function applyPermissionPreset(store, sessionId, name, options) {
-    if (!isFacePermissionPreset(name)) {
+    const autoLive = options?.autoGate?.isLive() === true;
+    const catalog = options?.autoGate?.catalogNames() ?? FACE_PERMISSION_PRESETS;
+    const spec = resolvePermissionPresetSpec(name, autoLive);
+    if (!spec) {
         return {
             ok: false,
-            message: `unknown preset "${name}" (available: ${FACE_PERMISSION_PRESETS.join(", ")})`,
+            message: `unknown preset "${name}" (available: ${catalog.join(", ")})`,
         };
     }
+    if (name === AUTO_PERMISSION_PRESET) {
+        try {
+            options?.autoGate?.admit();
+        }
+        catch (err) {
+            return {
+                ok: false,
+                message: err instanceof Error ? err.message : String(err),
+            };
+        }
+    }
     const events = readSessionEvents(store, sessionId);
-    const current = permissionSelectFromEvents(events).currentValue;
-    if (current === name)
-        return { ok: true, changed: false };
-    const spec = FACE_PERMISSION_TABLE[name];
+    const current = permissionSelectFromEvents(events, { autoLive }).currentValue;
     const knobs = foldPermissionKnobs(events);
-    const currentSandbox = knobs.sandbox ?? FACE_PERMISSION_TABLE["workspace-write"].sandbox;
-    if (knobs.sandbox !== spec.sandbox &&
+    // Effective knobs (composition defaults) — same basis as derivePermissionSelect.
+    const effectiveSandbox = knobs.sandbox ?? FACE_PERMISSION_TABLE["workspace-write"].sandbox;
+    const effectiveApproval = knobs.approval ?? "ask";
+    if (effectiveSandbox !== spec.sandbox &&
         options?.hasPtyActivity?.() === true) {
-        // Keep wording aligned with `sandboxModeChangeBlockedMessage` in exec-pty
-        // (Face must not depend on node-pty / exec-pty for this leaf).
         return {
             ok: false,
-            message: `cannot change sandbox mode from "${currentSandbox}" to "${spec.sandbox}" while Agent terminal_* sessions are open or being created; wait for creation to settle and close them first`,
+            message: `cannot change sandbox mode from "${effectiveSandbox}" to "${spec.sandbox}" while Agent terminal_* sessions are open or being created; wait for creation to settle and close them first`,
         };
     }
+    // DSH: identity tracks derived current, not the raw last preset event — so
+    // Auto↔Full (shared sandbox) still records the new selection.
+    let changed = false;
     const ts = now();
-    if (knobs.preset !== name) {
+    if (current !== name) {
         store.append(sessionId, {
             type: "permission/preset",
             ts,
             preset: name,
         });
+        changed = true;
     }
-    if (knobs.sandbox !== spec.sandbox) {
+    if (effectiveSandbox !== spec.sandbox) {
         store.append(sessionId, {
             type: "sandbox/mode",
             ts: ts + 1,
             mode: spec.sandbox,
         });
+        changed = true;
     }
-    if (knobs.approval !== spec.approval) {
+    if (effectiveApproval !== spec.approval) {
         store.append(sessionId, {
             type: "approval/policy",
             ts: ts + 2,
             policy: spec.approval,
         });
+        changed = true;
     }
-    return { ok: true, changed: true };
+    return { ok: true, changed };
 }
 /**
  * Settings `permission.defaultPreset` is `applies: live`. Push the new default
@@ -201,6 +307,7 @@ export async function applyLivePermissionDefaultPreset(runtime, previousUser, ne
             ...(runtime.hasPtyActivity
                 ? { hasPtyActivity: () => runtime.hasPtyActivity() }
                 : {}),
+            autoGate: runtime.permissionAuto,
         });
         if (applied.ok && applied.changed) {
             await runtime.invalidateAgent?.(sessionId);