@zq-silk/yui 2.12.0 → 2.14.0

package/README.md

@@ -199,6 +199,11 @@ Settings; saving it does not switch the current view or Session.
 MCP forms and URL confirmations can be completed in Terminal or declined in
 Conversation. Native additional input is saved as a user Message with its exact
 steer receipt before submission.
+
+**Settings → Command permissions** provides a searchable, read-only command ×
+role discovery matrix and built-in capability contracts. Visibility is not
+authorization for a specific call; this view never changes rules or Grants.
+See [discovery and authorization](docs/authorization.md#read-only-web-templates).
 Attachments and native configuration changes
 are not supported by this managed text-input surface.
 The detail has four tabs: Overview (user input, progress and key Decisions),

package/dist/controller/runtime.js

@@ -45,6 +45,7 @@ import { archiveOrdinaryTask } from "../task/ordinaryArchive.js";
 import { createWebSettings } from "../web/webSettings.js";
 import { createModelManagement } from "../models/modelManagement.js";
 import { createWebSkills } from "../web/webSkills.js";
+import { createWebPermissions } from "../web/webPermissions.js";
 import { createWebJobs } from "../web/webJobs.js";
 import { isTaskOwnedWorkspace, sameManagedWorkspaceIdentity } from "../worktree/managedWorkspace.js";
 import { AgentRuntimeObserver } from "./agentRuntimeObserver.js";
@@ -417,6 +418,7 @@ export async function startFileTaskControllerRuntime(home, options = {}) {
         const web = createControllerWeb(store, {
             previews: () => createTaskPreviews(store, home),
             skills: createWebSkills(store),
+            permissions: createWebPermissions(store),
             jobs: createWebJobs(store, home),
             models: createModelManagement(store),
             settings: createWebSettings(store, {

package/dist/web/assets/client/app/settings.js

@@ -9,6 +9,7 @@ import { clearPreference, readSessionAccessMode, writeSessionAccessMode } from "
 import { i18n, createManageShell, pageSections, registerManagePage, navigateManage } from "/assets/js/layout/manageShell.js";
 import { mountSkills } from "/assets/js/views/skills.js";
 import { mountJobs } from "/assets/js/views/jobs.js";
+import { mountPermissions } from "/assets/js/views/permissions.js";
 
 const $ = selector => document.querySelector(selector);
 const t = i18n.t;
@@ -20,12 +21,14 @@ function readSection() {
 }
 let section = readSection();
 let jobs;
+let permissions;
 const shell = createManageShell({ page: "settings", t, onNavigate: navigate });
 function showSection(next) {
   section = next;
   document.querySelectorAll("#settings-root > .manage-section[data-section]").forEach(panel => { panel.hidden = panel.dataset.section !== next; });
   shell.set(next);
   if (next === "jobs" && !jobs) jobs = mountJobs($("#global-jobs"), t);
+  if (next === "permissions" && !permissions) permissions = mountPermissions($("#permission-browser"), t);
 }
 function navigate(next) {
   navigateManage({ page: "settings", section: next });
@@ -39,6 +42,7 @@ registerManagePage("settings", { show: next => showSection(next.section) });
 i18n.subscribe(() => shell.render());
 i18n.subscribe(() => {
   if (jobs && !jobs.isDirty() && !jobs.isBusy()) jobs = mountJobs($("#global-jobs"), t);
+  permissions?.translate();
 });
 showSection(section);
 const skills = mountSkills($("#skill-browser"), t, { heading: false, onDirty: value => markDirty("skills", value) });

package/dist/web/assets/client/i18n/en.js

@@ -3,6 +3,52 @@
 // domain vocabulary (statuses, owners, actions) keeps the exact product terms.
 // Placeholders such as {count} are filled by fill() in lib/format.
 export const EN = {
+    "settings.section.permissions": "Command permissions",
+    "permissions.intro": "Read-only discovery templates, not authorization for a specific call. No rules or Grants are changed.",
+    "permissions.notice": "Compare CLI discovery by role. Visible means included in that role's default help/completion, not permission to execute. Choosing a role does not switch your identity.",
+    "permissions.commands": "Command × role matrix",
+    "permissions.capabilities": "Built-in capability contracts",
+    "permissions.view": "View",
+    "permissions.search": "Find a command or capability",
+    "permissions.role": "Role template",
+    "permissions.category": "Command category",
+    "permissions.allRoles": "Compare all role templates",
+    "permissions.allCategories": "All categories",
+    "permissions.configured": "Configured GlobalRole",
+    "permissions.role.public": "Terminal / unmanaged",
+    "permissions.role.operator": "Operator",
+    "permissions.role.global": "GlobalRole",
+    "permissions.role.leader": "Task Leader",
+    "permissions.role.worker": "Task Worker",
+    "permissions.role.reviewer": "Task Reviewer",
+    "permissions.role.unbound": "Unbound identity",
+    "permissions.command": "Command",
+    "permissions.visible": "Visible",
+    "permissions.hidden": "Hidden",
+    "permissions.tableHint": "Discovery only · select a command for role-specific usage and boundaries. Scroll horizontally to compare roles.",
+    "permissions.reason.visible": "Included by the current catalog projection. Options below are filtered by the same role audience as CLI help.",
+    "permissions.reason.hidden": "Not discoverable as an executable command in this audience's catalog. This is not a missing-Grant assessment.",
+    "permissions.unevaluated": "No specific authorization assessment performed. No target, live Session or Grant has been inspected.",
+    "permissions.boundaries": "Execution still checks the actual Session, Task/lifecycle, planning or delivery authority, Assignment/Review, Project/workspace and resource/Grant bounds as applicable. The catalog cannot enumerate every domain check; never infer authorization from visibility, command name or a query effect.",
+    "permissions.boundary.public": "Ordinary terminals and unmanaged sessions share the public surface. This does not grant a managed identity or authorize unrequested effects.",
+    "permissions.boundary.operator": "Requires the current Operator binding and the domain's operation-specific checks. An offline template cannot establish that binding.",
+    "permissions.boundary.global": "Configured GlobalRoles share this discovery audience, not Operator authority. Role configuration and exact domain scope remain authoritative.",
+    "permissions.boundary.leader": "Own Task and captured Project scope. Planning Sessions do not acquire delivery authority just because a Task becomes active.",
+    "permissions.boundary.assignment": "Worker and Reviewer share discovery templates, but their exact Assignment/Review, frozen references and writable workspace may differ.",
+    "permissions.boundary.unbound": "Incomplete/conflicting managed identity has no public fallback. Historical or revoked Sessions are rechecked at execution even if offline help is visible.",
+    "permissions.capabilityNotice": "Built-in descriptors from the existing registry definition, not a second CLI-to-capability map. Permission categories and required inputs are contracts, not role grants. Task-local plugin descriptors and live assessments are intentionally excluded.",
+    "permissions.effect": "Declared effect",
+    "permissions.requiredPermissions": "Required permission categories",
+    "permissions.requiredInputs": "Required target inputs",
+    "permissions.inputs": "All input fields",
+    "permissions.legend": "Meaning, limits and sources",
+    "permissions.states": "Exact capability discovery may return hidden, requestable (with a bounded request route), or authorized (rechecked at execution). Without exact input there is no access assessment; this page never labels a role/command pair authorized or requestable.",
+    "permissions.sources": "Sources",
+    "permissions.previous": "Previous",
+    "permissions.next": "Next",
+    "permissions.loading": "Loading templates…",
+    "permissions.empty": "No matching templates.",
+    "permissions.retry": "Retry read",
     "tabs.jobs": "Jobs",
     "settings.section.jobs": "Jobs & schedules",
     "jobs.builtinSync": "Built-in Project sync · safe fast-forward only",

package/dist/web/assets/client/i18n/zh-CN.js

@@ -1,6 +1,52 @@
 // Simplified Chinese UI copy. Typed against the English catalog, so a key that
 // does not exist in en.ts is a compile error; a missing key falls back to en.
 export const ZH_CN = {
+    "settings.section.permissions": "命令权限",
+    "permissions.intro": "只读的命令发现模板，不是具体调用的授权结论。不会修改规则或 Grant。",
+    "permissions.notice": "按角色比较 CLI 发现范围。“可见”仅表示默认帮助与补全包含该命令，不代表可以执行。选择角色不会切换你的身份。",
+    "permissions.commands": "命令 × 角色矩阵",
+    "permissions.capabilities": "内置能力契约",
+    "permissions.view": "视图",
+    "permissions.search": "查找命令或能力",
+    "permissions.role": "角色模板",
+    "permissions.category": "命令分类",
+    "permissions.allRoles": "比较全部角色模板",
+    "permissions.allCategories": "全部分类",
+    "permissions.configured": "已配置 GlobalRole",
+    "permissions.role.public": "终端 / 非管控会话",
+    "permissions.role.operator": "Operator",
+    "permissions.role.global": "GlobalRole",
+    "permissions.role.leader": "Task Leader",
+    "permissions.role.worker": "Task Worker",
+    "permissions.role.reviewer": "Task Reviewer",
+    "permissions.role.unbound": "未绑定身份",
+    "permissions.command": "命令",
+    "permissions.visible": "发现可见",
+    "permissions.hidden": "隐藏",
+    "permissions.tableHint": "仅展示发现范围 · 选择命令查看各角色用法与边界；可横向滚动比较角色。",
+    "permissions.reason.visible": "当前目录投影包含该命令。下方选项与 CLI 帮助使用相同的角色过滤规则。",
+    "permissions.reason.hidden": "该角色的目录中不展示此可执行命令。这不表示仅缺少一个 Grant。",
+    "permissions.unevaluated": "尚未进行具体授权评估；未检查目标、实时 Session 或 Grant。",
+    "permissions.boundaries": "执行仍按实际操作检查 Session、Task/生命周期、planning 或 delivery 权限、Assignment/Review、Project/工作区及资源/Grant 边界。目录不能枚举全部领域检查；不可根据可见性、命令名称或 query 效果推断已授权。",
+    "permissions.boundary.public": "普通终端与非 Yui 管控会话共用公共入口；这不赋予管控身份，也不授权未被请求的操作。",
+    "permissions.boundary.operator": "需要当前 Operator 绑定及领域操作检查。离线模板不能证明该绑定有效。",
+    "permissions.boundary.global": "已配置 GlobalRole 共用此发现范围，但不继承 Operator 权限；角色配置和具体领域范围仍是权威来源。",
+    "permissions.boundary.leader": "限自身 Task 及已捕获的 Project 范围。Task 激活不会将 planning Session 自动提升为 delivery。",
+    "permissions.boundary.assignment": "Worker 与 Reviewer 共用发现模板，但各自 Assignment/Review、冻结引用和可写工作区可能不同。",
+    "permissions.boundary.unbound": "不完整或冲突的管控身份不能回退为公共身份。历史或已撤销 Session 即使能看到离线帮助，执行时仍会被重新检查。",
+    "permissions.capabilityNotice": "直接展示现有 registry 的内置描述，不维护另一份 CLI 与能力映射。权限类别和必填输入是契约，不是角色授权；不展示 Task 私有插件描述或实时评估。",
+    "permissions.effect": "声明效果",
+    "permissions.requiredPermissions": "所需权限类别",
+    "permissions.requiredInputs": "必填目标输入",
+    "permissions.inputs": "全部输入字段",
+    "permissions.legend": "含义、限制与来源",
+    "permissions.states": "具体能力发现可能返回 hidden（隐藏）、requestable（可经限定渠道申请）或 authorized（已授权，执行时仍复核）。缺少具体输入时不提供 access 结论；此页不会将角色与命令组合标为已授权或可申请。",
+    "permissions.sources": "来源",
+    "permissions.previous": "上一页",
+    "permissions.next": "下一页",
+    "permissions.loading": "正在读取模板…",
+    "permissions.empty": "没有匹配的模板。",
+    "permissions.retry": "重新读取",
     "tabs.jobs": "Job",
     "settings.section.jobs": "Job 与时间计划",
     "jobs.builtinSync": "内置 Project 同步 · 仅安全快进",

package/dist/web/assets/client/index.js

@@ -61,6 +61,7 @@ import { TASK_VIEW_SCRIPT } from "./app/taskView.js";
 import { SETTINGS_SCRIPT } from "./app/settings.js";
 import { SKILLS_SCRIPT } from "./views/skills.js";
 import { JOBS_SCRIPT } from "./views/jobs.js";
+import { PERMISSIONS_SCRIPT } from "./views/permissions.js";
 import { MODELS_VIEW_SCRIPT } from "./views/models.js";
 import { MODELS_SCRIPT } from "./app/models.js";
 import { MANAGE_SHELL_SCRIPT } from "./layout/manageShell.js";
@@ -69,6 +70,7 @@ export { APP_SCRIPT } from "./app/main.js";
 export const CLIENT_MODULES = Object.freeze({
     "views/skills": SKILLS_SCRIPT,
     "views/jobs": JOBS_SCRIPT,
+    "views/permissions": PERMISSIONS_SCRIPT,
     "views/models": MODELS_VIEW_SCRIPT,
     "lib/dom": DOM_SCRIPT,
     "lib/format": FORMAT_SCRIPT,

package/dist/web/assets/client/views/permissions.js

@@ -0,0 +1,129 @@
+export const PERMISSIONS_SCRIPT = String.raw `
+import { h } from "/assets/js/lib/dom.js";
+import { requestJson } from "/assets/js/lib/api.js";
+
+export function mountPermissions(root, t) {
+  let meta, generation = 0, timer;
+  let mode = "commands", role = "", category = "", q = "", cursor = "0", previous = [];
+  const label = r => r.name ? t("permissions.configured") + ": " + r.name : t("permissions.role." + r.id);
+  let status, results, prev, next, search, roleSelect, categorySelect;
+  function reset() { cursor = "0"; previous = []; load(); }
+  function controls() {
+    const modeSelect = h("select", { onchange: () => {
+      mode = modeSelect.value; roleSelect.disabled = categorySelect.disabled = mode !== "commands"; reset();
+    } }, ["commands", "capabilities"].map(id => h("option", { value: id }, t("permissions." + id))));
+    modeSelect.value = mode;
+    search = h("input", { type: "search", value: q, maxlength: 200, oninput: () => {
+      q = search.value; clearTimeout(timer);
+      // Invalidate any older result immediately, even during debounce.
+      generation++; prev.disabled = next.disabled = true;
+      timer = setTimeout(reset, 180);
+    } });
+    roleSelect = h("select", { onchange: () => { role = roleSelect.value; reset(); } },
+      h("option", { value: "" }, t("permissions.allRoles")),
+      meta.roles.map(r => h("option", { value: r.id }, label(r))));
+    roleSelect.value = role;
+    categorySelect = h("select", { onchange: () => { category = categorySelect.value; reset(); } },
+      h("option", { value: "" }, t("permissions.allCategories")),
+      meta.categories.map(c => h("option", { value: c }, c)));
+    categorySelect.value = category;
+    roleSelect.disabled = categorySelect.disabled = mode !== "commands";
+    status = h("p", { role: "status", "aria-live": "polite" });
+    results = h("div.permissions-results");
+    prev = h("button.btn", { type: "button", disabled: true, onclick: () => { cursor = previous.pop(); load(); } }, t("permissions.previous"));
+    next = h("button.btn", { type: "button", disabled: true }, t("permissions.next"));
+    const field = (key, input) => h("label.field", null, h("span", null, t("permissions." + key)), input);
+    root.replaceChildren(
+      h("div.card.settings-card.settings-stack", null,
+        h("p", null, t("permissions.notice")),
+        h("div.settings-grid", null, field("view", modeSelect), field("search", search),
+          field("role", roleSelect), field("category", categorySelect))),
+      status, results, h("div.settings-actions", null, prev, next),
+      h("details.settings-card", null, h("summary", null, t("permissions.legend")),
+        h("p", null, t("permissions.states")),
+        h("p", null, t("permissions.boundaries")),
+        h("p", null, t("permissions.sources") + ": " + meta.sources.join(" · "))));
+  }
+  function detailContent(data) {
+    return h("div.settings-stack", null,
+      h("p", null, t("permissions.unevaluated")),
+      h("p", null, t("permissions.boundaries")),
+      data.roles.map(r => h("div", null,
+        h("h3", null, label(meta.roles.find(item => item.id === r.role))),
+        h("p", null, t("permissions.reason." + (r.visible ? "visible" : "hidden"))),
+        h("p", null, t("permissions.boundary." + r.audience)),
+        r.usage.length ? h("pre", null, r.usage.join("\n")) : null)),
+      h("small", null, t("permissions.sources") + ": " + data.source));
+  }
+  function commandTable(page, version) {
+    const shown = role ? meta.roles.filter(r => r.id === role) : meta.roles.filter(r => !r.name);
+    const body = h("tbody");
+    page.items.forEach((item, index) => {
+      const detail = h("td", { colSpan: shown.length + 1 });
+      const detailRow = h("tr", { hidden: true, id: "permission-detail-" + version + "-" + index }, detail);
+      let loaded = false;
+      const button = h("button.permissions-command", { type: "button", "aria-expanded": "false",
+        "aria-controls": detailRow.id, onclick: async () => {
+          detailRow.hidden = !detailRow.hidden;
+          button.setAttribute("aria-expanded", String(!detailRow.hidden));
+          if (detailRow.hidden || loaded) return;
+          loaded = true; detail.textContent = t("permissions.loading");
+          try {
+            const params = new URLSearchParams({ id: item.id, ...(role ? { role } : {}) });
+            const data = await requestJson("/api/permissions/command?" + params);
+            if (version !== generation) return;
+            detail.replaceChildren(detailContent(data));
+          } catch (error) { loaded = false; detail.textContent = error.message; }
+        } }, item.id);
+      body.append(h("tr", null, h("th", { scope: "row" }, button, h("small", null, item.summary)),
+        item.roles.map(r => h("td", null, h("span", { class: r.visible ? "permissions-visible" : "permissions-hidden" },
+          t("permissions." + (r.visible ? "visible" : "hidden")))))), detailRow);
+    });
+    return h("div.permissions-scroll", { tabIndex: 0, role: "region", "aria-label": t("permissions.commands") },
+      h("table.permissions-table", null,
+        h("caption", null, t("permissions.tableHint")),
+        h("thead", null, h("tr", null, h("th", { scope: "col" }, t("permissions.command")),
+          shown.map(r => h("th", { scope: "col" }, label(r))))), body));
+  }
+  async function load() {
+    clearTimeout(timer);
+    const version = ++generation;
+    status.textContent = t("permissions.loading");
+    results.replaceChildren(); prev.disabled = next.disabled = true;
+    const params = new URLSearchParams({ q, cursor, ...(mode === "commands" ? { role, category } : {}) });
+    try {
+      const page = await requestJson("/api/permissions/" + mode + "?" + params);
+      if (version !== generation) return;
+      status.textContent = page.items.length ? (Number(cursor) + 1) + "–" + (Number(cursor) + page.items.length) + " / " + page.total : t("permissions.empty");
+      if (mode === "commands") results.append(commandTable(page, version));
+      else results.append(h("p", null, t("permissions.capabilityNotice")), ...page.items.map(item =>
+        h("details.settings-card", null, h("summary", null, item.name),
+          h("p", null, item.summary), h("p", null, t("permissions.unevaluated")),
+          h("p", null, t("permissions.effect") + ": " + item.effect),
+          h("p", null, t("permissions.requiredPermissions") + ": " + (item.requiredPermissions.join(", ") || "—")),
+          h("p", null, t("permissions.requiredInputs") + ": " + (item.requiredInputs.join(", ") || "—")),
+          h("p", null, t("permissions.inputs") + ": " + (item.inputs.join(", ") || "—")),
+          h("small", null, t("permissions.sources") + ": " + page.source + " → " + item.source))));
+      prev.disabled = previous.length === 0;
+      next.disabled = page.nextCursor === null;
+      next.onclick = () => { previous.push(cursor); cursor = page.nextCursor; load(); };
+    } catch (error) {
+      if (version !== generation) return;
+      status.textContent = error.message;
+      results.append(h("button.btn", { type: "button", onclick: load }, t("permissions.retry")));
+    }
+  }
+  async function init() {
+    root.replaceChildren(h("p", { role: "status" }, t("permissions.loading")));
+    try {
+      meta = await requestJson("/api/permissions");
+      controls(); load();
+    } catch (error) {
+      root.replaceChildren(h("p", { role: "status" }, error.message),
+        h("button.btn", { type: "button", onclick: init }, t("permissions.retry")));
+    }
+  }
+  init();
+  return { translate() { if (meta) { controls(); load(); } } };
+}
+`;

package/dist/web/assets/shared/manageNav.js

@@ -8,6 +8,7 @@ export const MANAGE_SECTIONS = Object.freeze({
         { page: "settings", section: "preferences", key: "settings.section.preferences", label: "Preferences" },
         { page: "settings", section: "skills", key: "settings.section.skills", label: "Skills" },
         { page: "settings", section: "jobs", key: "settings.section.jobs", label: "Jobs & schedules" },
+        { page: "settings", section: "permissions", key: "settings.section.permissions", label: "Command permissions" },
         { page: "settings", section: "server", key: "settings.section.server", label: "Agents & server" },
         { page: "models", section: "connection", key: "models.section.connection", label: "Model connection" }
     ]

package/dist/web/assets/shell/settingsContent.js

@@ -30,4 +30,8 @@ export const SETTINGS_MAIN = `
         <label class="field settings-search"><span data-i18n="settings.search">Find a setting</span><input id="settings-search" type="search" autocomplete="off"></label>
         <p id="settings-status" role="status"></p>
         <div id="settings-groups" class="settings-stack"></div>
+      </section>
+      <section class="manage-section" data-section="permissions" aria-labelledby="settings-permissions-title" hidden>
+        ${manageHead("settings-permissions-title", "settings.section.permissions", "Command permissions", "permissions.intro", "Read-only discovery templates, not authorization for a specific call. No rules or Grants are changed.")}
+        <section id="permission-browser" class="settings-stack"></section>
       </section>`;

package/dist/web/assets/styles/views/settings.js

@@ -33,6 +33,19 @@ export const SETTINGS_STYLES = `
 .settings-search input{width:100%;max-width:520px}
 #settings-status:empty,#browser-receipt:empty{display:none}
 .mono-line{overflow-wrap:anywhere}
+.permissions-results{display:grid;gap:12px;min-width:0}
+.permissions-scroll{overflow:auto;border:1px solid var(--line);border-radius:var(--r-lg);background:var(--surface)}
+.permissions-table{border-collapse:collapse;width:100%;font-size:var(--fs-xs)}
+.permissions-table caption{text-align:left;padding:14px;color:var(--ink-2)}
+.permissions-table th,.permissions-table td{text-align:left;vertical-align:top;padding:12px;border-bottom:1px solid var(--line)}
+.permissions-table thead th{background:var(--surface-2);min-width:100px;font-weight:600}
+.permissions-table th[scope=row]{min-width:240px;max-width:360px;font-weight:400}
+.permissions-table small{display:block;color:var(--ink-3);margin-top:6px;overflow-wrap:anywhere}
+.permissions-command{font-family:var(--font-mono);color:var(--accent);background:none;border:0;padding:4px 0;cursor:pointer;text-align:left;overflow-wrap:anywhere}
+.permissions-command:hover{text-decoration:underline}
+.permissions-table pre{white-space:pre-wrap;overflow-wrap:anywhere;font-size:var(--fs-xs);max-width:700px}
+.permissions-visible{color:var(--ink);white-space:nowrap}
+.permissions-hidden{color:var(--ink-3);white-space:nowrap}
 @media(max-width:${BREAKPOINTS.small}px){
   .settings-grid{grid-template-columns:minmax(0,1fr)}
   .settings-card{padding:14px}

package/dist/web/webPermissions.js

@@ -0,0 +1,97 @@
+import { ROOT_COMMAND } from "../cli/commandCatalog.js";
+import { discoveryCommandTree } from "../cli/commandDiscovery.js";
+import { BUILTIN_CAPABILITIES } from "../kernel/builtinCapabilities.js";
+const templates = [
+    { id: "public", audience: "public" },
+    { id: "operator", audience: "operator" },
+    { id: "global", audience: "global" },
+    { id: "leader", audience: "leader" },
+    { id: "worker", audience: "assignment" },
+    { id: "reviewer", audience: "assignment" },
+    { id: "unbound", audience: "unbound" }
+];
+function executableNodes(node) {
+    return [...(node.kind !== "group" && node.discovery?.surface !== "runtime" ? [node] : []),
+        ...node.children.flatMap(executableNodes)];
+}
+const commands = executableNodes(ROOT_COMMAND);
+// The same pure projection as CLI help/completion. No fake Session, caller
+// environment, authority issuance, registry invocation or domain assessment.
+const projections = new Map(templates.map(role => [role.audience,
+    new Map(executableNodes(discoveryCommandTree({}, role.audience)).map(node => [node.path.join(" "), node]))]));
+const pageSize = 30;
+function searchText(value = "") {
+    if (value.length > 200)
+        throw new Error("Search is limited to 200 characters.");
+    return value.trim().toLowerCase();
+}
+function page(items, cursor = "0") {
+    if (!/^(0|[1-9]\d*)$/.test(cursor) || !Number.isSafeInteger(Number(cursor)))
+        throw new Error("Invalid cursor.");
+    const start = Number(cursor);
+    return { items: items.slice(start, start + pageSize), total: items.length,
+        nextCursor: start + pageSize < items.length ? String(start + pageSize) : null };
+}
+/** Read-only metadata projection for the authenticated local Web user.
+ * Only configured GlobalRole names cross the Store boundary. Task contents,
+ * bindings, profiles, Sessions, Grants and plugin descriptors are not read.
+ * These templates deliberately have no AccessAssessment field. */
+export function createWebPermissions(store) {
+    const roles = () => [...templates, ...store.listGlobalRoles()
+            .filter(role => role.name !== "operator").map(role => ({
+            id: `global:${role.name}`, name: role.name, audience: "global"
+        }))];
+    const selected = (id) => {
+        if (!id)
+            return templates;
+        const role = roles().find(role => role.id === id);
+        if (!role)
+            throw new Error("Unknown role template.");
+        return [role];
+    };
+    const cells = (id, selectedRoles) => selectedRoles.map(role => {
+        const projected = projections.get(role.audience).get(id);
+        return { role: role.id, visible: !!projected };
+    });
+    return {
+        index() {
+            return { roles: roles(), categories: [...new Set(commands.map(node => node.path[1]))].sort(),
+                sources: ["cli/commandCatalog.ts", "cli/commandDiscovery.ts", "kernel/builtinCapabilities.ts", "docs/authorization.md"],
+                evaluation: "not-performed" };
+        },
+        commands(query = {}) {
+            const q = searchText(query.q);
+            const selectedRoles = selected(query.role);
+            return { ...page(commands.filter(node => (!query.category || node.path[1] === query.category)
+                    && `${node.path.join(" ")} ${node.summary}`.toLowerCase().includes(q))
+                    .map(node => ({ id: node.path.join(" "), summary: node.summary, category: node.path[1],
+                    roles: cells(node.path.join(" "), selectedRoles) })), query.cursor),
+                evaluation: "not-performed" };
+        },
+        command(id, role) {
+            const node = commands.find(node => node.path.join(" ") === id);
+            if (!node)
+                throw new Error("Unknown command template.");
+            return { id, summary: node.summary, evaluation: "not-performed",
+                source: "cli/commandCatalog.ts → cli/commandDiscovery.ts",
+                roles: selected(role).map(role => {
+                    const projected = projections.get(role.audience).get(id);
+                    return { role: role.id, audience: role.audience, visible: !!projected,
+                        // Use the projected usage/options, including option audience gates.
+                        usage: projected?.usage ?? [], options: projected?.options ?? [] };
+                }) };
+        },
+        capabilities(query = {}) {
+            const q = searchText(query.q);
+            return { ...page(BUILTIN_CAPABILITIES
+                    .filter(entry => `${entry.name} ${entry.summary} ${entry.requiredPermissions.join(" ")}`.toLowerCase().includes(q))
+                    .map(entry => ({
+                    name: entry.name, summary: entry.summary, effect: entry.effect, source: entry.source,
+                    requiredPermissions: entry.requiredPermissions,
+                    requiredInputs: entry.inputSchema.required ?? [],
+                    inputs: Object.keys(entry.inputSchema.properties ?? {})
+                })), query.cursor), evaluation: "not-performed",
+                source: "kernel/builtinCapabilities.ts (registry built-in descriptors)" };
+        }
+    };
+}

package/dist/web/webServer.js

@@ -126,6 +126,44 @@ async function handleHttpRequest(request, response, store, dependencies, token,
         sendJson(response, 403, { error: "Invalid Yui web token.", disposition: "not-submitted" }, method === "HEAD");
         return;
     }
+    if (pathname === "/api/permissions" || pathname.startsWith("/api/permissions/")) {
+        if (method !== "GET") {
+            sendJson(response, 405, { error: "Permission templates are read-only.", disposition: "not-submitted" }, method === "HEAD");
+            return;
+        }
+        const allowed = {
+            "/api/permissions": [],
+            "/api/permissions/commands": ["q", "role", "category", "cursor"],
+            "/api/permissions/command": ["id", "role"],
+            "/api/permissions/capabilities": ["q", "cursor"]
+        };
+        if (!Object.hasOwn(allowed, pathname)) {
+            sendJson(response, 404, { error: "Unknown permission template route." }, false);
+            return;
+        }
+        if (!dependencies.permissions) {
+            sendJson(response, 503, { error: "Permission templates unavailable." }, false);
+            return;
+        }
+        try {
+            const query = new URL(request.url, "http://localhost").searchParams;
+            if ([...query.keys()].some(key => !allowed[pathname].includes(key) || query.getAll(key).length !== 1)) {
+                throw new Error("Unknown or repeated template query.");
+            }
+            const params = Object.fromEntries(query);
+            const service = dependencies.permissions;
+            const value = pathname === "/api/permissions" ? service.index()
+                : pathname.endsWith("/commands") ? service.commands(params)
+                    : pathname.endsWith("/command") ? service.command(params.id ?? "", params.role)
+                        : service.capabilities(params);
+            sendJson(response, 200, value, false);
+        }
+        catch (error) {
+            sendJson(response, 400, { error: error instanceof Error ? error.message : "Invalid template query.",
+                disposition: "not-submitted" }, false);
+        }
+        return;
+    }
     if (pathname.startsWith("/preview/") && dependencies.previews) {
         await dependencies.previews.serve(request, response);
         return;
@@ -632,7 +670,7 @@ async function handleHttpRequest(request, response, store, dependencies, token,
         try {
             const assetVersion = new URL(request.url, "http://localhost").searchParams.get("v");
             const asset = findWebAsset(pathname, assetVersion);
-            const managementPage = /^\/(?:models(?:\/(?:providers|catalog|quota))?|settings(?:\/(?:preferences|skills|jobs|server|connection))?)\/?$/.test(pathname);
+            const managementPage = /^\/(?:models(?:\/(?:providers|catalog|quota))?|settings(?:\/(?:preferences|skills|jobs|permissions|server|connection))?)\/?$/.test(pathname);
             if (pathname === "/" || pathname === "/index.html" || managementPage) {
                 sendText(response, 200, "text/html; charset=utf-8", prepareWebDocument(managementPage ? MODELS_HTML.replace("__YUI_WEB_TOKEN__", token) : dashboardHtml(token), managementPage ? "/assets/js/app/manage.js" : "/assets/app.js"), method === "HEAD");
             }

package/docs/authorization.md

@@ -111,6 +111,41 @@ remains a limited template, while execution reports the original storage/identit
 failure. Complete launch hints can still show a role's static help on a broken
 Home; they cannot authorize reads or effects.
 
+## Read-only Web templates
+
+Open **Settings → Command permissions** (`/settings/permissions`) to compare
+CLI discovery for ordinary terminals/unmanaged sessions, Operator, GlobalRole,
+Task Leader, Worker and Reviewer. Configured GlobalRole names are selectable;
+they use the existing global discovery audience, not a new role impersonation
+path. Search, category/role filters and 30-row pages keep the view bounded.
+Expand a command for its audience-filtered usage and scope explanation.
+
+“Visible” means the existing `discoveryCommandTree` retains the executable
+command; “Hidden” means it does not. Neither is an exact authorization
+assessment. Worker and Reviewer can share a template while having different
+Assignment/Review and workspace constraints. Planning/delivery, lifecycle,
+revocation and resource/Grant checks remain in their existing execution owners.
+The directory cannot express every domain condition and this page does not
+attempt to infer them from command names.
+
+The adjacent **Built-in capability contracts** view projects
+`BUILTIN_CAPABILITIES`, the same descriptors registered in `CapabilityRegistry`,
+including required permission categories, input names, declared effect and
+semantic source. It does not invent a CLI-to-capability mapping or interpret
+those categories as role grants. Task-local plugin descriptors are excluded.
+Exact `hidden` / `requestable` / `authorized` observations still require the
+existing authenticated discovery path and target input; this page performs no
+such assessment and emits no `access` field.
+
+The `/api/permissions` metadata, `/commands`, `/command` and `/capabilities`
+routes are GET-only, use the existing Web authentication, Host/Origin and page
+token protection, and reject target/identity arguments. The only Store read is
+the configured global role list, projected to names. No Session, Task contents,
+Grant, plugin instance or Provider is read/acquired, and no operation is invoked.
+New catalog commands enter automatically; do not maintain a Web ACL.
+`web-permissions.test.js` checks full projection coverage, option filtering,
+private-read/write exclusion and the HTTP read-only boundary.
+
 ## Verification and maintenance
 
 `cli-authority.test.js` exercises isolated launcher-backed public reads, Draft

package/docs/release-workflow.md

@@ -51,6 +51,41 @@ merely to avoid a version decision. Package versions remain distinct from protoc
 and persistent-storage contracts: their compatibility checks and required migrations
 are unchanged, and the storage rules below do not authorize a package release.
 
+### 2.14.0 compatibility and migration notes
+
+The `v2.13.0` tag is retained as failed release evidence: its publication gates
+failed before npm publication. This replacement minor retains the feature below
+and fixes the package-smoke handover observation: one Controller snapshot and a
+bounded 60-second multi-turn wait, preserving the input, Host identity, terminal
+and no-replay assertions. Production runtime timeouts and release gates are
+unchanged; the full fresh-install matrix must pass before publication.
+
+This minor adds Settings → Permissions: a read-only command-by-role discovery
+matrix and built-in capability contracts, with bounded search, filters and
+details. The view derives from the existing command catalog, discovery projection
+and capability registry; it is not a second ACL or an authorization engine.
+
+Role-template visibility is not an exact invocation's authorization result.
+Task, Project, Assignment, lifecycle, resource and Grant boundaries still apply
+at execution time. Viewing a role does not impersonate it, execute a command,
+issue or revoke authorization, or consume the viewed operation's Grant.
+The new GET endpoints retain the existing Web access and request protections.
+Existing CLI authorization, discovery and default permissions are unchanged.
+See [authorization](authorization.md).
+
+Storage remains **1.20**; this feature adds no storage migration or protocol
+change. Earlier supported Homes still use the existing contiguous same-major
+migration chain. With separate update authorization, use
+`yui update --version 2.14.0`; the updater owns preflight, backup, migration when
+needed, and Controller handover. Do not open upgraded Homes with an older binary
+or edit storage manually. Minor numbering is not a general compatibility promise.
+
+Release gates require exact-commit Core CI and fresh installation of the same
+runtime tarball on Linux x64 and macOS x64/arm64 with Node 20/22/24/26.
+These are deterministic isolated checks, not real-model validation. Publication
+does not update a global CLI, migrate a production Home, replace its Controller,
+or deploy or start a production Web listener.
+
 ### 2.12.0 compatibility and migration notes
 
 This minor completes the scoped Job platform: explicit business results and fixed

package/docs/release-workflow.zh-CN.md

@@ -36,6 +36,32 @@ Agent 选择一个预先声明的计划，设施从持久状态驱动该计划
 不能将不兼容冒称为兼容，也不为回避版本选择新增历史兼容机制。包版本与协议、
 持久存储契约仍然独立：兼容性检查和必要迁移要求不变，下文存储规则不授予发版权限。
 
+### 2.14.0 兼容性及迁移说明
+
+保留 `v2.13.0` 标签作为失败发布证据：其发布门禁在 npm 发布前失败。
+本次替代 minor 保留下述功能，并修正包 smoke 的接续观察方式：使用一次 Controller
+快照和有界的 60 秒多回合等待，保留输入、Host 身份、终态及不重放断言。
+生产运行时超时和发布门禁不变；发布前仍须通过完整的全新安装矩阵。
+
+本 minor 新增 Settings → Permissions：命令×角色的只读发现矩阵与内置能力契约，
+支持有界搜索、筛选和详情。视图派生自现有 command catalog、discovery 投影及
+capability registry，不维护第二份 ACL，也不是新的授权引擎。
+
+角色模板的可见性不代表某次具体调用已获授权。Task、Project、Assignment、生命周期、
+资源和 Grant 边界仍在执行时检查。查看角色不会冒充该角色、执行命令、签发或撤销授权，
+也不会消费被查看操作的 Grant。新增 GET 接口沿用现有 Web 访问及请求保护。
+既有 CLI 授权、命令发现和默认权限不变。参见[授权说明](authorization.md)。
+
+存储保持 **1.20**；本功能不新增存储迁移或协议变更。更早的受支持 Home 仍通过现有
+连续同 major 迁移链升级。另获更新授权后使用 `yui update --version 2.14.0`；
+更新器负责预检、备份、必要迁移及 Controller 接续。不要用旧二进制打开已升级的 Home，
+也不要手改存储。minor 编号不是通用的兼容性承诺。
+
+发布门禁要求精确提交的 Core CI，并在 Linux x64、macOS x64/arm64 与
+Node 20/22/24/26 上全新安装同一个 runtime tarball。这些是确定性隔离检查，
+不是真实模型验证。发布不会更新全局 CLI、迁移生产 Home、替换其 Controller，
+也不会部署或启动生产 Web。
+
 ### 2.12.0 兼容性及迁移说明
 
 本 minor 完成作用域明确的 Job 平台：显式业务结果及固定产物、Schedule 目标与服务

package/i18n/README.zh-CN.md

@@ -179,6 +179,10 @@ Agent 可以重新读取任务上下文，继续兼容的 Session，或在必要
 
 ### 产品结构
 
+Web 的 **设置 → 命令权限** 提供可搜索的只读“命令 × 角色”发现矩阵与内置能力契约。
+“发现可见”不代表具体调用已授权；页面不会修改权限规则或 Grant。
+详见[发现与授权说明](../docs/authorization.md#read-only-web-templates)。
+
 Yui 为你组织的东西 —— 是持久对象，而不是进程：
 
 ```text

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zq-silk/yui",
-  "version": "2.12.0",
+  "version": "2.14.0",
   "description": "Local control plane for long-running native agent CLI sessions backed by tmux.",
   "license": "MIT",
   "private": false,