dsh-auto-review 0.5.2 → 0.5.4

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 All notable changes to `dsh-auto-review` are documented here. The repo is pre-release; versions follow the DeepSeek Harness `0.1.0-rc.x` target runtime and bump on every behavior change.
 
+## [0.5.4] — 2026-08-22
+
+### Changed
+
+- Runtime `dependencies` and `devDependencies` pin the exact `0.1.1-rc.2` line and `dshWorkshop.dshVersions` lists `0.1.1-rc.2`; the peer specs stay on the `>=0.1.0-rc.8 <0.2.0` range, which already covers `0.1.1-rc.2`.
+- The session-projection unit migrated to the rc2 `ProjectionDefinition` contract (`stateSchema` + `wire: { viewSchema, view }` + the required `stateVersion`), and the `autoReview` key now declares both the client `SessionProjectionMap` and the host `SessionProjectionStateMap` entries.
+- The browser panel calls the rc2 `remote.commands.execute` shape (empty image list for the text-only `/auto-review` command).
+- `scripts/check-host-versions.mjs` now recognizes the `0.1.1-rc.N` line family; `pnpm-workspace.yaml` excludes the whole `@deepseek-ai/*` scope from `minimumReleaseAge`; the compat workflow pins the rc2 CLI and `dsh-base`/`dsh-headless` bundles.
+
+## [0.5.3] — 2026-08-21
+
+### Changed
+
+- Peers and dev/test pins bumped `0.1.0-rc.7` → `0.1.0-rc.8` (npm `next` moved; the batch rc8 compatibility release). Peer specs now use the `>=0.1.0-rc.8 <0.2.0` range form; runtime `dependencies` and `devDependencies` pin the exact `0.1.0-rc.8` line, and `dshWorkshop.dshVersions` lists `0.1.0-rc.8`.
+- `isUnmarkedHostVersion` bound extended to `0.1.0-rc.8`: the rc.8 release still drops the `ignorable` envelope marker (the stamping fix exists on harness master only), so rc.8 hosts are detected BEFORE the first append and session-log audit degrades to the in-memory mirror instead of polluting the log with an unmarked `autoReview/*` event. Docs (five-language READMEs, AGENTS.md) and the README compatibility table updated to the rc.8 line.
+- `scripts/check-host-versions.mjs` now accepts both exact (`0.1.0-rc.N`) and range (`>=0.1.0-rc.N <0.2.0`) peer pins and fails when they no longer cover the newest rc line published by `@deepseek-ai/dsh` (on `latest` or `next`).
+
 ## [0.5.2] — 2026-08-19
 
 ### Fixed

package/README.es.md

@@ -24,7 +24,7 @@
 
 | Superficie | Estado |
 |---|---|
-| Harness | DeepSeek Harness `0.1.0-rc.7` (peers fijados a `0.1.0-rc.7`) |
+| Harness | DeepSeek Harness `0.1.1-rc.2` (dependencias fijadas a `0.1.1-rc.2`; peers `>=0.1.0-rc.8 <0.2.0`) |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Plataformas | Todas (answerer de host; panel web opcional mediante la capacidad de proyección de sesión) |
 | Modelo | Cualquiera (el revisor hereda la ruta del agente de sesión; `reviewerModel` la reemplaza) |
@@ -216,7 +216,7 @@ Puerta de CI: el proceso sale con 0 solo cuando todos los casos de todas las sui
 
 - **Permisos**: el manifiesto del workshop declara `session:append`, `approval:answer`, `subagent:spawn`, `command:register` y `tools:observe`.
 - **Datos**: nada se guarda en disco; el búfer circular de informes está en memoria y acotado. Sin peticiones de red propias.
-- **Registro de sesión**: los eventos `autoReview/*` llevan identidad del revisor, veredicto, razón, riesgo y duración — añadidos con el marcador de sobre `ignorable: true` para que cualquier compilación cargue el registro. Los hosts cuyo `Session.append` es anterior al marcador (todas las líneas rc publicadas hasta `0.1.0-rc.7` — ninguna versión lo estampa aún) se detectan antes del primer append (precomprobación de la versión del peer y luego sondeo del sobre devuelto) y la auditoría se degrada a un espejo en memoria con comentarios sin marcador, de modo que las sesiones siguen siendo cargables en todas partes.
+- **Registro de sesión**: los eventos `autoReview/*` llevan identidad del revisor, veredicto, razón, riesgo y duración — añadidos con el marcador de sobre `ignorable: true` para que cualquier compilación cargue el registro. Los hosts cuyo `Session.append` es anterior al marcador (todas las líneas rc publicadas hasta `0.1.1-rc.2` — ninguna versión lo estampa aún) se detectan antes del primer append (precomprobación de la versión del peer y luego sondeo del sobre devuelto) y la auditoría se degrada a un espejo en memoria con comentarios sin marcador, de modo que las sesiones siguen siendo cargables en todas partes.
 
 ## Límites de seguridad
 
@@ -236,7 +236,7 @@ Puerta de CI: el proceso sale con 0 solo cuando todos los casos de todas las sui
 - Las reglas de riesgo emparejan el `reason` de la solicitud, el `toolName` o los `arguments` redactados de la llamada según su `field`; otras condiciones van en `toolsPolicy.overrides`.
 - La anulación `/auto-review approve` autoriza la siguiente revisión de la misma herramienta, no la llamada histórica exacta; una acción diferente sobre la misma herramienta la consume.
 - Los eventos de veredicto son solo-registro; el panel web de revisión lee la proyección `autoReview` plegada (el flujo crudo de eventos nunca llega a los plugins del navegador).
-- `autoReview/state` y `autoReview/verdict` se añaden con el marcador de sobre `ignorable: true` en hosts que lo respetan, de modo que cualquier compilación del harness carga el registro — los lectores que no conocen los tipos fuera del repo simplemente omiten esos registros. En hosts rc publicados (rc.1–rc.7) el runtime detecta el marcador descartado y nunca escribe estos eventos (el espejo en memoria mantiene el comando, los presupuestos, el disyuntor y `approve` durante la sesión); las sesiones ya contaminadas por versiones anteriores a 0.5.1 pueden repararse con `scripts/repair-session-logs.mjs` de `dsh-permission-rules` (su conjunto de tipos por defecto cubre los cinco eventos `autoReview/*`).
+- `autoReview/state` y `autoReview/verdict` se añaden con el marcador de sobre `ignorable: true` en hosts que lo respetan, de modo que cualquier compilación del harness carga el registro — los lectores que no conocen los tipos fuera del repo simplemente omiten esos registros. En hosts rc publicados (rc.1–rc.8) el runtime detecta el marcador descartado y nunca escribe estos eventos (el espejo en memoria mantiene el comando, los presupuestos, el disyuntor y `approve` durante la sesión); las sesiones ya contaminadas por versiones anteriores a 0.5.1 pueden repararse con `scripts/repair-session-logs.mjs` de `dsh-permission-rules` (su conjunto de tipos por defecto cubre los cinco eventos `autoReview/*`).
 - El canal git necesita la única clave `allowBuilds` que el CLI de `dsh` imprime para el propio `dsh-auto-review`. El repo incluye su propio `pnpm-workspace.yaml` con `allowBuilds: { esbuild: true }`; `typescript` + `tsdown` son `dependencies` regulares.
 - El compañero invariant opcional necesita el servicio `invariants` (composiciones agent-spine como headless/ACP); el perfil web plano no lo proporciona, por lo que la fila se incluye comentada en el parche del bundle.
 

package/README.hi.md

@@ -24,7 +24,7 @@
 
 | सतह | स्थिति |
 |---|---|
-| Harness | DeepSeek Harness `0.1.0-rc.7` (peers `0.1.0-rc.7` पर पिन किए गए) |
+| Harness | DeepSeek Harness `0.1.1-rc.2` (dependencies `0.1.1-rc.2` पर पिन की गईं; peers `>=0.1.0-rc.8 <0.2.0`) |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | प्लेटफ़ॉर्म | सभी (होस्ट answerer; सत्र-प्रोजेक्शन क्षमता के ज़रिए वैकल्पिक वेब समीक्षा पैनल) |
 | मॉडल | कोई भी (समीक्षक सत्र एजेंट का मार्ग विरासत में लेता है; `reviewerModel` उसे बदल देता है) |
@@ -216,7 +216,7 @@ CI द्वार: प्रक्रिया केवल तभी 0 से
 
 - **अनुमतियाँ**: workshop मेनिफ़ेस्ट `session:append`, `approval:answer`, `subagent:spawn`, `command:register` और `tools:observe` घोषित करता है।
 - **डेटा**: डिस्क पर कुछ नहीं लिखा जाता; रिपोर्ट रिंग बफ़र मेमोरी में और सीमित है। अपनी ओर से कोई नेटवर्क अनुरोध नहीं।
-- **सत्र लॉग**: `autoReview/*` घटनाएँ समीक्षक पहचान, निर्णय, कारण, जोखिम और अवधि रखती हैं — लिफ़ाफ़े के `ignorable: true` मार्कर के साथ जोड़ी जाती हैं ताकि कोई भी बिल्ड लॉग लोड कर सके। जिन होस्ट का `Session.append` मार्कर से पुराना है (`0.1.0-rc.7` तक की हर रिलीज़ rc लाइन — कोई रिलीज़ अभी मार्कर नहीं छापती) उन्हें पहले append से पहले ही पहचान लिया जाता है (peer संस्करण पूर्व-जाँच, फिर लौटे लिफ़ाफ़े की जाँच) और ऑडिट बिना मार्कर वाले फीडबैक के साथ इन-मेमोरी मिरर में डिग्रेड हो जाता है — सत्र हर जगह लोड होने योग्य रहते हैं।
+- **सत्र लॉग**: `autoReview/*` घटनाएँ समीक्षक पहचान, निर्णय, कारण, जोखिम और अवधि रखती हैं — लिफ़ाफ़े के `ignorable: true` मार्कर के साथ जोड़ी जाती हैं ताकि कोई भी बिल्ड लॉग लोड कर सके। जिन होस्ट का `Session.append` मार्कर से पुराना है (`0.1.1-rc.2` तक की हर रिलीज़ rc लाइन — कोई रिलीज़ अभी मार्कर नहीं छापती) उन्हें पहले append से पहले ही पहचान लिया जाता है (peer संस्करण पूर्व-जाँच, फिर लौटे लिफ़ाफ़े की जाँच) और ऑडिट बिना मार्कर वाले फीडबैक के साथ इन-मेमोरी मिरर में डिग्रेड हो जाता है — सत्र हर जगह लोड होने योग्य रहते हैं।
 
 ## सुरक्षा सीमाएँ
 
@@ -236,7 +236,7 @@ CI द्वार: प्रक्रिया केवल तभी 0 से
 - जोखिम नियम अपने `field` के अनुसार अनुरोध के `reason`, `toolName` या संशोधित कॉल `arguments` से मिलते हैं; बाकी शर्तें `toolsPolicy.overrides` में रखें।
 - `/auto-review approve` ओवरराइड उसी टूल की अगली समीक्षा को अधिकृत करता है, उस सटीक ऐतिहासिक कॉल को नहीं; उसी टूल पर एक भिन्न क्रिया उसे उपभोग कर लेती है।
 - निर्णय घटनाएँ केवल-लॉग हैं; वेब समीक्षा पैनल मुड़ा हुआ `autoReview` प्रोजेक्शन पढ़ता है (कच्ची घटना धारा ब्राउज़र प्लगइन तक कभी नहीं पहुँचती)।
-- मार्कर का सम्मान करने वाले होस्ट पर `autoReview/state` और `autoReview/verdict` लिफ़ाफ़े के `ignorable: true` मार्कर के साथ जोड़े जाते हैं, ताकि कोई भी harness बिल्ड लॉग लोड करे — जो पाठक रेपो-बाहरी प्रकारों को नहीं जानते वे उन रिकॉर्ड को बस छोड़ देते हैं। रिलीज़ किए गए rc होस्ट (rc.1–rc.7) पर runtime छूटे मार्कर का पता लगाकर ये घटनाएँ कभी नहीं लिखता (इन-मेमोरी मिरर कमांड, बजट, ब्रेकर और `approve` को सत्र भर बनाए रखता है); 0.5.1 से पहले के संस्करणों से दूषित सत्र `dsh-permission-rules` के `scripts/repair-session-logs.mjs` से मरम्मत किए जा सकते हैं (इसका डिफ़ॉल्ट सेट सभी पाँच `autoReview/*` घटना प्रकारों को कवर करता है)।
+- मार्कर का सम्मान करने वाले होस्ट पर `autoReview/state` और `autoReview/verdict` लिफ़ाफ़े के `ignorable: true` मार्कर के साथ जोड़े जाते हैं, ताकि कोई भी harness बिल्ड लॉग लोड करे — जो पाठक रेपो-बाहरी प्रकारों को नहीं जानते वे उन रिकॉर्ड को बस छोड़ देते हैं। रिलीज़ किए गए rc होस्ट (rc.1–rc.8) पर runtime छूटे मार्कर का पता लगाकर ये घटनाएँ कभी नहीं लिखता (इन-मेमोरी मिरर कमांड, बजट, ब्रेकर और `approve` को सत्र भर बनाए रखता है); 0.5.1 से पहले के संस्करणों से दूषित सत्र `dsh-permission-rules` के `scripts/repair-session-logs.mjs` से मरम्मत किए जा सकते हैं (इसका डिफ़ॉल्ट सेट सभी पाँच `autoReview/*` घटना प्रकारों को कवर करता है)।
 - git चैनल को वह एकल `allowBuilds` कुंजी चाहिए जो `dsh` CLI स्वयं `dsh-auto-review` के लिए छापता है। रेपो अपना `pnpm-workspace.yaml` `allowBuilds: { esbuild: true }` के साथ शिप करता है; `typescript` + `tsdown` नियमित `dependencies` हैं।
 - वैकल्पिक invariant साथी को `invariants` सेवा चाहिए (agent-spine रचनाएँ जैसे headless/ACP); सादा web प्रोफ़ाइल वह नहीं देता, इसलिए पंक्ति बंडल पैच में टिप्पणी-बंद शिप होती है।
 

package/README.md

@@ -1,6 +1,7 @@
 <div align="center">
 
 # 🤖 dsh-auto-review
+[![Gitee](https://img.shields.io/badge/Gitee-mirror-c71d23?logo=gitee)](https://gitee.com/perrylink/dsh-auto-review)
 
 **Second-model AI approval for DeepSeek Harness — a read-only reviewer subagent decides allow/deny on the approval chain, fail-closed by default.**
 
@@ -24,7 +25,7 @@
 
 | Surface | Status |
 |---|---|
-| Harness | DeepSeek Harness `0.1.0-rc.7` (peers pinned to `0.1.0-rc.7`) |
+| Harness | DeepSeek Harness `0.1.1-rc.2` (dependencies pinned to `0.1.1-rc.2`; peers `>=0.1.0-rc.8 <0.2.0`) |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Platforms | All (host answerer; optional Web review panel via the session-projection capability) |
 | Model | Any (the reviewer inherits the session agent's route; `reviewerModel` overrides) |
@@ -216,7 +217,7 @@ CI gate: the process exits 0 only when every case of every suite passed — drop
 
 - **Permissions**: the workshop manifest declares `session:append`, `approval:answer`, `subagent:spawn`, `command:register`, and `tools:observe`.
 - **Data**: nothing is stored on disk; the report ring buffer is in-memory and bounded. No network requests of its own.
-- **Session log**: `autoReview/*` events carry reviewer identity, verdict, reason, risk, and duration — appended with the envelope's `ignorable: true` marker so any build loads the log. Hosts whose `Session.append` predates the marker (every released rc line through `0.1.0-rc.7` — no release stamps it yet) are detected before the first append (peer-version pre-check, then a probe of the returned envelope) and audit degrades to an in-memory mirror with marker-free feedback, so sessions stay loadable everywhere.
+- **Session log**: `autoReview/*` events carry reviewer identity, verdict, reason, risk, and duration — appended with the envelope's `ignorable: true` marker so any build loads the log. Hosts whose `Session.append` predates the marker (every released rc line through `0.1.1-rc.2` — no release stamps it yet) are detected before the first append (peer-version pre-check, then a probe of the returned envelope) and audit degrades to an in-memory mirror with marker-free feedback, so sessions stay loadable everywhere.
 
 ## Security boundaries
 
@@ -236,7 +237,7 @@ CI gate: the process exits 0 only when every case of every suite passed — drop
 - Risk rules match the request `reason`, the `toolName`, or the redacted call `arguments` per their `field`; other conditions belong in `toolsPolicy.overrides`.
 - The `/auto-review approve` override authorizes the next same-tool review, not the exact historical call; a different action on the same tool consumes it.
 - The verdict events are log-only; the Web review panel reads the folded `autoReview` projection (the raw event stream never reaches browser plugins).
-- `autoReview/state` and `autoReview/verdict` are appended with the envelope's `ignorable: true` marker on hosts that honor it, so any harness build loads the log — readers that do not know the out-of-repo types simply skip those records. On released rc hosts (rc.1–rc.7) the runtime detects the dropped marker and never writes these events (the in-memory mirror keeps the command, budgets, breaker, and `approve` working for the session); sessions already polluted by pre-0.5.1 versions can be repaired with `scripts/repair-session-logs.mjs` from `dsh-permission-rules` (its default target set covers all five `autoReview/*` event types).
+- `autoReview/state` and `autoReview/verdict` are appended with the envelope's `ignorable: true` marker on hosts that honor it, so any harness build loads the log — readers that do not know the out-of-repo types simply skip those records. On released rc hosts (rc.1–rc.8) the runtime detects the dropped marker and never writes these events (the in-memory mirror keeps the command, budgets, breaker, and `approve` working for the session); sessions already polluted by pre-0.5.1 versions can be repaired with `scripts/repair-session-logs.mjs` from `dsh-permission-rules` (its default target set covers all five `autoReview/*` event types).
 - The git channel needs the single `allowBuilds` key the `dsh` CLI prints for `dsh-auto-review` itself. The repo ships its own `pnpm-workspace.yaml` with `allowBuilds: { esbuild: true }`; `typescript` + `tsdown` are regular `dependencies`.
 - The optional invariant companion needs the `invariants` service (agent-spine compositions such as headless/ACP); the plain web profile does not provide it, so the row ships commented out in the bundle patch.
 

package/README.pt.md

@@ -24,7 +24,7 @@
 
 | Superfície | Status |
 |---|---|
-| Harness | DeepSeek Harness `0.1.0-rc.7` (peers fixados em `0.1.0-rc.7`) |
+| Harness | DeepSeek Harness `0.1.1-rc.2` (dependências fixadas em `0.1.1-rc.2`; peers `>=0.1.0-rc.8 <0.2.0`) |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Plataformas | Todas (answerer de host; painel web opcional via capacidade de projeção de sessão) |
 | Modelo | Qualquer (o revisor herda a rota do agente da sessão; `reviewerModel` sobrescreve) |
@@ -216,7 +216,7 @@ Portão de CI: o processo sai com 0 somente quando todos os casos de todas as su
 
 - **Permissões**: o manifesto do workshop declara `session:append`, `approval:answer`, `subagent:spawn`, `command:register` e `tools:observe`.
 - **Dados**: nada é gravado em disco; o buffer circular de relatórios fica em memória e é limitado. Sem requisições de rede próprias.
-- **Log de sessão**: os eventos `autoReview/*` carregam identidade do revisor, veredito, razão, risco e duração — anexados com o marcador de envelope `ignorable: true` para que qualquer build carregue o log. Hosts cujo `Session.append` é anterior ao marcador (todas as linhas rc publicadas até `0.1.0-rc.7` — nenhuma versão o estampa ainda) são detectados antes do primeiro append (pré-checagem da versão do peer e, em seguida, sondagem do envelope retornado) e a auditoria degrada para um espelho em memória com feedback sem marcador, mantendo as sessões carregáveis em qualquer lugar.
+- **Log de sessão**: os eventos `autoReview/*` carregam identidade do revisor, veredito, razão, risco e duração — anexados com o marcador de envelope `ignorable: true` para que qualquer build carregue o log. Hosts cujo `Session.append` é anterior ao marcador (todas as linhas rc publicadas até `0.1.1-rc.2` — nenhuma versão o estampa ainda) são detectados antes do primeiro append (pré-checagem da versão do peer e, em seguida, sondagem do envelope retornado) e a auditoria degrada para um espelho em memória com feedback sem marcador, mantendo as sessões carregáveis em qualquer lugar.
 
 ## Limites de segurança
 
@@ -236,7 +236,7 @@ Portão de CI: o processo sai com 0 somente quando todos os casos de todas as su
 - Regras de risco emparelham o `reason` da solicitação, o `toolName` ou os `arguments` redigidos da chamada conforme seu `field`; outras condições pertencem a `toolsPolicy.overrides`.
 - A anulação `/auto-review approve` autoriza a próxima revisão da mesma ferramenta, não a chamada histórica exata; uma ação diferente na mesma ferramenta a consome.
 - Os eventos de veredito são somente-log; o painel web de revisão lê a projeção `autoReview` dobrada (o fluxo bruto de eventos nunca chega aos plugins do navegador).
-- `autoReview/state` e `autoReview/verdict` são anexados com o marcador de envelope `ignorable: true` em hosts que o respeitam, para que qualquer build do harness carregue o log — leitores que não conhecem os tipos fora do repo simplesmente pulam esses registros. Em hosts rc publicados (rc.1–rc.7) o runtime detecta o marcador descartado e nunca escreve esses eventos (o espelho em memória mantém o comando, os orçamentos, o disjuntor e `approve` durante a sessão); sessões já poluídas por versões anteriores a 0.5.1 podem ser reparadas com `scripts/repair-session-logs.mjs` de `dsh-permission-rules` (seu conjunto padrão cobre os cinco tipos de evento `autoReview/*`).
+- `autoReview/state` e `autoReview/verdict` são anexados com o marcador de envelope `ignorable: true` em hosts que o respeitam, para que qualquer build do harness carregue o log — leitores que não conhecem os tipos fora do repo simplesmente pulam esses registros. Em hosts rc publicados (rc.1–rc.8) o runtime detecta o marcador descartado e nunca escreve esses eventos (o espelho em memória mantém o comando, os orçamentos, o disjuntor e `approve` durante a sessão); sessões já poluídas por versões anteriores a 0.5.1 podem ser reparadas com `scripts/repair-session-logs.mjs` de `dsh-permission-rules` (seu conjunto padrão cobre os cinco tipos de evento `autoReview/*`).
 - O canal git precisa da única chave `allowBuilds` que o CLI do `dsh` imprime para o próprio `dsh-auto-review`. O repo envia seu próprio `pnpm-workspace.yaml` com `allowBuilds: { esbuild: true }`; `typescript` + `tsdown` são `dependencies` regulares.
 - O companheiro invariant opcional precisa do serviço `invariants` (composições agent-spine como headless/ACP); o perfil web simples não o fornece, então a linha é enviada comentada no patch do bundle.
 

package/README.zh.md

@@ -24,7 +24,7 @@
 
 | 方面 | 状态 |
 |---|---|
-| Harness | DeepSeek Harness `0.1.0-rc.7`（peer 依赖锁定在 `0.1.0-rc.7`） |
+| Harness | DeepSeek Harness `0.1.1-rc.2`（依赖锁定在 `0.1.1-rc.2`；peer 范围 `>=0.1.0-rc.8 <0.2.0`） |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | 平台 | 全部（宿主 answerer；可选 Web 审查面板，依赖会话投影能力） |
 | 模型 | 任意（审查器默认继承会话代理的路由；`reviewerModel` 可覆盖） |
@@ -216,7 +216,7 @@ CI 门禁：仅当每个套件的每个用例都通过时，进程才以 0 退
 
 - **权限**：workshop 清单声明 `session:append`、`approval:answer`、`subagent:spawn`、`command:register` 与 `tools:observe`。
 - **数据**：不向磁盘写入任何内容；报告环形缓冲在内存中且有界。自身不发起网络请求。
-- **会话日志**：`autoReview/*` 事件携带审查器身份、裁决、理由、风险与耗时 —— 以信封 `ignorable: true` 标记追加，任何构建都能加载日志。`Session.append` 早于该标记的宿主（迄今发布的所有 rc 版本，至 `0.1.0-rc.7`——任何发布版都还未盖标记）会在首次追加前被探测出来（peer 版本预检 + 返回信封探测），审计降级为内存镜像 + 无标记反馈，会话日志始终保持可加载。
+- **会话日志**：`autoReview/*` 事件携带审查器身份、裁决、理由、风险与耗时 —— 以信封 `ignorable: true` 标记追加，任何构建都能加载日志。`Session.append` 早于该标记的宿主（迄今发布的所有 rc 版本，至 `0.1.1-rc.2`——任何发布版都还未盖标记）会在首次追加前被探测出来（peer 版本预检 + 返回信封探测），审计降级为内存镜像 + 无标记反馈，会话日志始终保持可加载。
 
 ## 安全边界
 
@@ -236,7 +236,7 @@ CI 门禁：仅当每个套件的每个用例都通过时，进程才以 0 退
 - 风险规则按各自的 `field` 匹配请求的 `reason`、`toolName` 或脱敏后的调用 `arguments`；其他条件应放入 `toolsPolicy.overrides`。
 - `/auto-review approve` 覆盖授权的是下一次对同一工具的审查，而不是那次确切的历史调用；同一工具上的不同操作也会消耗它。
 - 裁决事件是仅日志的；Web 审查面板读取折叠后的 `autoReview` 投影（原始事件流绝不会到达浏览器插件）。
-- `autoReview/state` 与 `autoReview/verdict` 在支持标记的宿主上以信封 `ignorable: true` 追加，任何 harness 构建都能加载日志 —— 不认识这些仓库外类型的读取方直接跳过这些记录。已发布的 rc 宿主（rc.1–rc.7）上运行时会检测到标记被丢弃并完全不写这些事件（内存镜像继续提供命令、预算、熔断器与 `approve`）；pre-0.5.1 版本污染的会话可用 `dsh-permission-rules` 的 `scripts/repair-session-logs.mjs` 修复（其默认目标集已覆盖全部五种 `autoReview/*` 事件）。
+- `autoReview/state` 与 `autoReview/verdict` 在支持标记的宿主上以信封 `ignorable: true` 追加，任何 harness 构建都能加载日志 —— 不认识这些仓库外类型的读取方直接跳过这些记录。已发布的 rc 宿主（rc.1–rc.8）上运行时会检测到标记被丢弃并完全不写这些事件（内存镜像继续提供命令、预算、熔断器与 `approve`）；pre-0.5.1 版本污染的会话可用 `dsh-permission-rules` 的 `scripts/repair-session-logs.mjs` 修复（其默认目标集已覆盖全部五种 `autoReview/*` 事件）。
 - git 渠道需要 `dsh` CLI 为 `dsh-auto-review` 打印的那个 `allowBuilds` 键。仓库自带 `pnpm-workspace.yaml`，声明 `allowBuilds: { esbuild: true }`；`typescript` + `tsdown` 是普通 `dependencies`。
 - 可选的 invariant 配套插件需要 `invariants` 服务（agent-spine 组合，如 headless/ACP）；普通 web profile 不提供该服务，所以该行在 bundle 补丁中默认被注释。
 

package/lib/client.js

@@ -468,7 +468,7 @@ window.__ModuleLoader__.load({
 				inject: (sessionId) => {
 					const remote = ctx.remote;
 					const executeCommand = async (line) => {
-						const result = await remote.commands.execute(sessionId, line);
+						const result = await remote.commands.execute(sessionId, line, []);
 						if (!result.ok) throw new Error(`${result.error.code}: ${result.error.message}`);
 						if (result.value === void 0) throw new Error("unknown command: /auto-review");
 						const command = result.value.result;

package/lib/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","names":["useState","useRef"],"sources":["../src/client/present.ts","../src/client/ReviewPanel.tsx","../src/client/locales.ts","../src/client/styles.ts","../src/client/index.ts"],"sourcesContent":["/**\n * Pure presentation for the review panel: verdict rows and badges as plain\n * strings and tone codes — no I/O, clock, or randomness. The component\n * owns layout and interaction; this module owns the text.\n * @module dsh-auto-review/client/present\n */\n\nimport type { AutoReviewVerdictView } from '../projection-types.ts'\n\n/** Badge tones the component maps to scoped styles. */\nexport type VerdictTone = 'allow' | 'deny' | 'fallback' | 'escalation'\n\n/** One presented verdict row. */\nexport interface PresentedVerdict {\n  readonly reviewId: string\n  readonly toolName: string\n  readonly label: string\n  readonly detail: string\n  readonly tone: VerdictTone\n}\n\n/** Present one verdict row (the component supplies the localized label texts). */\nexport function presentVerdict(\n  verdict: AutoReviewVerdictView,\n  labels: {\n    readonly allow: string\n    readonly deny: string\n    readonly fallback: (kind: string) => string\n    readonly escalation: string\n  },\n): PresentedVerdict {\n  if (verdict.fallback !== undefined) {\n    return {\n      reviewId: verdict.reviewId,\n      toolName: verdict.toolName,\n      label: labels.fallback(verdict.fallback),\n      detail: `${verdict.durationMs} ms`,\n      tone: 'fallback',\n    }\n  }\n  if (verdict.escalation === 'risk-policy') {\n    return {\n      reviewId: verdict.reviewId,\n      toolName: verdict.toolName,\n      label: labels.escalation,\n      detail: verdict.reason ?? '',\n      tone: 'escalation',\n    }\n  }\n  const label = verdict.decision === 'deny' ? labels.deny : labels.allow\n  return {\n    reviewId: verdict.reviewId,\n    toolName: verdict.toolName,\n    label,\n    detail: verdict.reason ?? `${verdict.durationMs} ms`,\n    tone: verdict.decision === 'deny' ? 'deny' : 'allow',\n  }\n}\n","/**\n * The session-header review panel: a button in the conversation header that\n * opens a popover with this session's auto-review state — the on/off switch,\n * budgets, cumulative statistics (including hard-disable rejections), the\n * circuit trip, recent verdicts, and one-shot approve buttons for recent\n * denials. Data arrives through the `autoReview` session projection;\n * switches and approves execute the `/auto-review` command through the\n * commands Remote.\n * @module dsh-auto-review/client/ReviewPanel\n */\n\nimport { useRef, useState, type ReactNode } from 'react'\nimport type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots'\nimport type { AutoReviewProjection } from '../projection-types.ts'\nimport { presentVerdict } from './present.ts'\nimport { NS } from './locales.ts'\n\n/** Registration-side injected face: the approve action for one recent denial. */\nexport interface ReviewPanelInjected {\n  /** Approve the n-th most recent denial (1 = most recent); resolves with the command result text. */\n  approve: (n: number) => Promise<string>\n  /** Switch the session's auto-review on/off (`/auto-review on|off`); resolves with the command result text. */\n  setEnabled: (enabled: boolean) => Promise<string>\n}\n\n/** Full component props assembled by the session-header slot renderer. */\nexport type ReviewPanelProps =\n  PropsRuntime<'conversation.session.header.actions'>\n  & PropsLocale<typeof NS>\n  & InjectFace<ReviewPanelInjected>\n\n/** Compact verdict-row badge label for the panel. */\nfunction verdictBadge(\n  value: AutoReviewProjection | undefined,\n  t: ReviewPanelProps['t'],\n): ReactNode {\n  if (value === undefined) return t('unavailable')\n  const fallback = (kind: string): string => t('fallbackLabel').replace('{kind}', kind)\n  const labels = {\n    allow: t('decisionAllow'),\n    deny: t('decisionDeny'),\n    fallback,\n    escalation: t('escalationLabel'),\n  }\n  return value.recent.map(verdict => presentVerdict(verdict, labels)).map(row => (\n    <div key={row.reviewId} data-dsh-auto-review-verdict>\n      <span data-dsh-auto-review-muted>{row.toolName}</span>\n      <span data-dsh-auto-review={`tone-${row.tone}`}>{row.label}</span>\n      <span data-dsh-auto-review-muted>{row.detail}</span>\n    </div>\n  ))\n}\n\n/**\n * Render the review panel action.\n * @param props - framework kit (sessionId, useProjection), locale, and the approve face.\n * @returns the header button with its popover.\n */\nexport function ReviewPanel({ useProjection, approve, setEnabled, t }: ReviewPanelProps): ReactNode {\n  const value = useProjection('autoReview')\n  const [open, setOpen] = useState(false)\n  const [notice, setNotice] = useState<string | null>(null)\n  const anchor = useRef<HTMLDivElement | null>(null)\n  const toggle = (): void => setOpen(previous => !previous)\n  const runApprove = async (n: number): Promise<void> => {\n    try {\n      const text = await approve(n)\n      setNotice(t('approveResult').replace('{text}', text))\n    } catch (error: unknown) {\n      setNotice(t('approveFailed').replace('{text}', error instanceof Error ? error.message : String(error)))\n    }\n  }\n  const runSwitch = async (enabled: boolean): Promise<void> => {\n    try {\n      const text = await setEnabled(enabled)\n      setNotice(t('switchedResult').replace('{text}', text))\n    } catch (error: unknown) {\n      setNotice(t('switchFailed').replace('{text}', error instanceof Error ? error.message : String(error)))\n    }\n  }\n  return (\n    <div data-dsh-auto-review ref={anchor}>\n      <button type=\"button\" data-dsh-auto-review-button onClick={toggle}>\n        {t('label')}\n      </button>\n      {open && (\n        <div data-dsh-auto-review-panel>\n          <div data-dsh-auto-review-title>{t('title')}</div>\n          {value === undefined\n            ? <div data-dsh-auto-review-muted>{t('unavailable')}</div>\n            : (\n              <div>\n                <div data-dsh-auto-review-row>\n                  <span>{t('state')}</span>\n                  <span>{value.enabled ? t('stateOn') : t('stateOff')}</span>\n                </div>\n                <div data-dsh-auto-review-row>\n                  <span>{t('enable')} / {t('disable')}</span>\n                  <span>\n                    <button\n                      type=\"button\"\n                      data-dsh-auto-review-switch\n                      disabled={value.enabled}\n                      onClick={() => void runSwitch(true)}\n                    >\n                      {t('enable')}\n                    </button>\n                    <button\n                      type=\"button\"\n                      data-dsh-auto-review-switch\n                      disabled={!value.enabled}\n                      onClick={() => void runSwitch(false)}\n                    >\n                      {t('disable')}\n                    </button>\n                  </span>\n                </div>\n                <div data-dsh-auto-review-row>\n                  <span>{t('verdicts')}</span>\n                  <span>{value.verdictsUsed}</span>\n                </div>\n                <div data-dsh-auto-review-row>\n                  <span>{t('failures')}</span>\n                  <span>{value.failuresUsed}</span>\n                </div>\n                <div data-dsh-auto-review-row>\n                  <span>{t('allTime')}</span>\n                  <span>\n                    {value.allows} {t('allows')} · {value.denies} {t('denies')} · {value.fallbacks} {t('fallbacks')} · {value.neverRejects} {t('neverRejects')} · {t('avg')} {value.avgDurationMs} {t('ms')}\n                  </span>\n                </div>\n                {value.circuit !== null && (\n                  <div data-dsh-auto-review-circuit>\n                    {t('circuit')} — {t('circuitDetail')\n                      .replace('{kind}', value.circuit.trip.kind)\n                      .replace('{count}', String(value.circuit.trip.count))\n                      .replace('{action}', value.circuit.action)}\n                  </div>\n                )}\n                {value.recentDenies.length > 0 && (\n                  <div data-dsh-auto-review-section>\n                    <div data-dsh-auto-review-title>{t('denyList')}</div>\n                    {value.recentDenies.map((deny, index) => (\n                      <div key={deny.reviewId} data-dsh-auto-review-row>\n                        <span data-dsh-auto-review-muted>{deny.toolName}</span>\n                        <button type=\"button\" data-dsh-auto-review-approve onClick={() => void runApprove(index + 1)}>\n                          {t('approve')} #{index + 1}\n                        </button>\n                      </div>\n                    ))}\n                  </div>\n                )}\n                <div data-dsh-auto-review-section>\n                  <div data-dsh-auto-review-title>{t('recent')}</div>\n                  {value.recent.length === 0 ? <div data-dsh-auto-review-muted>{t('empty')}</div> : verdictBadge(value, t)}\n                </div>\n              </div>\n            )}\n          {notice !== null && <div data-dsh-auto-review-muted>{notice}</div>}\n        </div>\n      )}\n    </div>\n  )\n}\n","/**\n * Copy dictionaries for the auto-review session-header panel (en/zh — the\n * harness locale registry accepts these two UI language codes today).\n * @module dsh-auto-review/client/locales\n */\n\n/** Simplified Chinese dictionary and key source of truth. */\nexport const zh = {\n  label: 'AI 审查',\n  title: 'AI 自动审查',\n  state: '状态',\n  stateOn: '已开启',\n  stateOff: '已关闭',\n  enable: '开启',\n  disable: '关闭',\n  verdicts: '本回合 AI 裁决',\n  failures: '本回合失败',\n  allTime: '累计',\n  allows: '放行',\n  denies: '拒绝',\n  fallbacks: '失败',\n  neverRejects: '硬禁用拒绝',\n  avg: '平均耗时',\n  circuit: '拒绝熔断器已触发',\n  circuitDetail: '触发类型：{kind}，计数 {count}，动作 {action}',\n  empty: '本会话暂无 AI 审查裁决。',\n  recent: '最近裁决',\n  denyList: '可批准的重试',\n  approve: '批准重试',\n  approveResult: '已授权：{text}',\n  approveFailed: '批准失败：{text}',\n  switchedResult: '已切换：{text}',\n  switchFailed: '切换失败：{text}',\n  unavailable: '审查面板不可用（宿主未提供会话投影能力）。',\n  decisionAllow: '放行',\n  decisionDeny: '拒绝',\n  fallbackLabel: '失败（{kind}）',\n  escalationLabel: '风险策略升级',\n  riskLow: '低风险',\n  riskMedium: '中风险',\n  riskHigh: '高风险',\n  ms: 'ms',\n} satisfies Record<string, string>\n\n/** Auto-review panel locale key union. */\nexport type ReviewPanelLocaleKey = keyof typeof zh\n\n/** English dictionary checked against the Chinese key set. */\nexport const en: Record<ReviewPanelLocaleKey, string> = {\n  label: 'AI Review',\n  title: 'AI Auto-Review',\n  state: 'State',\n  stateOn: 'ON',\n  stateOff: 'OFF',\n  enable: 'Enable',\n  disable: 'Disable',\n  verdicts: 'AI verdicts this turn',\n  failures: 'Failures this turn',\n  allTime: 'All-time',\n  allows: 'allows',\n  denies: 'denies',\n  fallbacks: 'fallbacks',\n  neverRejects: 'never rejects',\n  avg: 'avg',\n  circuit: 'Rejection circuit breaker tripped',\n  circuitDetail: '{kind}: {count} denials, action {action}',\n  empty: 'No AI review verdicts in this session yet.',\n  recent: 'Recent verdicts',\n  denyList: 'Approvable retries',\n  approve: 'Approve retry',\n  approveResult: 'Authorized: {text}',\n  approveFailed: 'Approve failed: {text}',\n  switchedResult: 'Switched: {text}',\n  switchFailed: 'Switch failed: {text}',\n  unavailable: 'The review panel is unavailable (the host does not provide the session-projection capability).',\n  decisionAllow: 'allow',\n  decisionDeny: 'deny',\n  fallbackLabel: 'fallback ({kind})',\n  escalationLabel: 'risk-policy escalation',\n  riskLow: 'low risk',\n  riskMedium: 'medium risk',\n  riskHigh: 'high risk',\n  ms: 'ms',\n}\n\n/** Dictionary namespace owned by this plugin. */\nexport const NS = 'autoReviewPanel'\n","/**\n * Scoped stylesheet for the review panel. Standalone bundles cannot use the\n * in-repo CSS-module pipeline, so the panel injects one `<style>` element\n * whose selectors are all scoped under `[data-dsh-auto-review]`.\n * @module dsh-auto-review/client/styles\n */\n\nconst STYLE_ID = 'dsh-auto-review-panel-styles'\n\nconst CSS = `\n[data-dsh-auto-review] {\n  --ar-allow: var(--dsw-color-success, #16a34a);\n  --ar-deny: var(--dsw-color-danger, #dc2626);\n  --ar-fallback: var(--dsw-color-warning, #d97706);\n  --ar-escalation: var(--dsw-color-warning, #d97706);\n  --ar-border: var(--dsw-color-border, rgba(128, 128, 128, 0.3));\n  --ar-bg: var(--dsw-color-surface, #ffffff);\n  --ar-fg: var(--dsw-color-text, #1f2328);\n  --ar-muted: var(--dsw-color-text-muted, #6b7280);\n  font-family: inherit;\n  color: var(--ar-fg);\n}\n[data-dsh-auto-review-panel] {\n  position: absolute;\n  z-index: 40;\n  min-width: 320px;\n  max-width: 420px;\n  max-height: 70vh;\n  overflow-y: auto;\n  background: var(--ar-bg);\n  border: 1px solid var(--ar-border);\n  border-radius: 8px;\n  box-shadow: 0 8px 24px rgba(0, 0, 0, 0.18);\n  padding: 12px;\n  font-size: 12px;\n  line-height: 1.5;\n}\n[data-dsh-auto-review-button] {\n  display: inline-flex;\n  align-items: center;\n  gap: 4px;\n  cursor: pointer;\n  background: transparent;\n  border: 1px solid var(--ar-border);\n  border-radius: 6px;\n  padding: 3px 8px;\n  font-size: 12px;\n  color: var(--ar-fg);\n}\n[data-dsh-auto-review-button]:hover {\n  background: rgba(128, 128, 128, 0.12);\n}\n[data-dsh-auto-review-section] {\n  margin: 8px 0;\n  border-top: 1px solid var(--ar-border);\n  padding-top: 8px;\n}\n[data-dsh-auto-review-title] {\n  font-weight: 600;\n  margin-bottom: 6px;\n}\n[data-dsh-auto-review-row] {\n  display: flex;\n  justify-content: space-between;\n  gap: 8px;\n  padding: 2px 0;\n  align-items: baseline;\n}\n[data-dsh-auto-review-muted] {\n  color: var(--ar-muted);\n}\n[data-dsh-auto-review-verdict] {\n  display: flex;\n  justify-content: space-between;\n  gap: 8px;\n  padding: 3px 0;\n  border-bottom: 1px dashed var(--ar-border);\n}\n[data-dsh-auto-review-tone-allow] { color: var(--ar-allow); }\n[data-dsh-auto-review-tone-deny] { color: var(--ar-deny); }\n[data-dsh-auto-review-tone-fallback] { color: var(--ar-fallback); }\n[data-dsh-auto-review-tone-escalation] { color: var(--ar-escalation); }\n[data-dsh-auto-review-approve] {\n  cursor: pointer;\n  border: 1px solid var(--ar-border);\n  border-radius: 4px;\n  background: transparent;\n  color: var(--ar-fg);\n  padding: 1px 6px;\n  font-size: 11px;\n}\n[data-dsh-auto-review-approve]:hover {\n  background: rgba(128, 128, 128, 0.12);\n}\n[data-dsh-auto-review-switch] {\n  cursor: pointer;\n  border: 1px solid var(--ar-border);\n  border-radius: 4px;\n  background: transparent;\n  color: var(--ar-fg);\n  padding: 1px 6px;\n  font-size: 11px;\n}\n[data-dsh-auto-review-switch] + [data-dsh-auto-review-switch] {\n  margin-left: 4px;\n}\n[data-dsh-auto-review-switch]:hover:not(:disabled) {\n  background: rgba(128, 128, 128, 0.12);\n}\n[data-dsh-auto-review-approve]:disabled,\n[data-dsh-auto-review-switch]:disabled {\n  opacity: 0.45;\n  cursor: default;\n}\n[data-dsh-auto-review-circuit] {\n  color: var(--ar-deny);\n  font-weight: 600;\n}\n`\n\n/** Install the scoped stylesheet once per plugin fiber. */\nexport function installPanelStyles(): () => void {\n  if (document.getElementById(STYLE_ID) !== null) return () => undefined\n  const element = document.createElement('style')\n  element.id = STYLE_ID\n  element.textContent = CSS\n  document.head.appendChild(element)\n  return () => {\n    element.remove()\n  }\n}\n","/**\n * `dsh-auto-review`, browser half: registers the locale dictionaries, the\n * scoped stylesheet, and the session-header review panel action. All data\n * arrives through the `autoReview` session projection; the approve buttons\n * execute the `/auto-review approve [n]` command through the commands\n * Remote namespace.\n *\n * @module dsh-auto-review/client\n */\n\nimport type { ClientContext, SessionId } from '@deepseek-ai/dsh-client-runtime/client'\nimport type {} from '@deepseek-ai/dsh-client-locale/client'\n// Type-only: pulls the 'conversation.session.header.actions' SlotMap\n// declaration into this program so the registration typechecks.\nimport type {} from '@deepseek-ai/dsh-client-ui-conversation/client'\n// Type-only: merges the commands namespace onto ctx.remote.\nimport type {} from '@deepseek-ai/dsh-api-remotes/client'\nimport type {} from '../projection-types.ts'\nimport { ReviewPanel, type ReviewPanelInjected } from './ReviewPanel.tsx'\nimport { en, NS, zh, type ReviewPanelLocaleKey } from './locales.ts'\nimport { installPanelStyles } from './styles.ts'\n\ndeclare module '@deepseek-ai/dsh-client-ui-slots' {\n  interface LocaleNamespaceMap {\n    /** Review panel copy. */\n    'autoReviewPanel': ReviewPanelLocaleKey\n  }\n}\n\nexport type { ReviewPanelProps, ReviewPanelInjected } from './ReviewPanel.tsx'\nexport type { ReviewPanelLocaleKey } from './locales.ts'\nexport { presentVerdict, type PresentedVerdict, type VerdictTone } from './present.ts'\n\n/** Plugin name: matches the package name, the graph row id, and the bundle id. */\nexport const name = 'dsh-auto-review'\n\n/** Services the panel reads; `remote.commands` is mounted by the api-remotes client. */\nexport const inject = ['slots', 'locale', 'remote', 'remote.commands']\n\n/**\n * The structural shape of the api-remotes `commands` Remote namespace the\n * panel needs. Declared locally because the ambient namespace merge onto\n * `TypertClientRemote` is assembled from several generated modules and can\n * resolve to a different physical copy under strict package managers —\n * the runtime contract is what this client depends on, so the type is\n * pinned to it explicitly (rc.6 and rc.7 both serve this shape).\n */\ninterface CommandsRemote {\n  readonly execute: (\n    agentId: SessionId,\n    line: string,\n    signal?: AbortSignal,\n  ) => Promise<\n    | { ok: false; error: { code: string; message: string } }\n    | { ok: true; value?: { result?: { kind?: string; text?: string } } }\n  >\n}\n\n/**\n * Browser plugin body: dictionaries, the scoped stylesheet, and the\n * session-header action registration.\n * @param ctx - client root context.\n */\nexport function apply(ctx: ClientContext): void {\n  ctx.effect(() => ctx.locale.register(NS, { zh, en }), 'dsh-auto-review: dictionaries')\n  ctx.effect(() => installPanelStyles(), 'dsh-auto-review: stylesheet')\n  ctx.slots.inject(\n    'conversation.session.header.actions',\n    () => ctx.slots.register({\n      name: 'conversation.session.header.actions',\n      id: 'auto-review',\n      order: 40,\n      locale: NS,\n      inject: (sessionId: SessionId): ReviewPanelInjected => {\n        const remote = ctx.remote as unknown as { commands: CommandsRemote }\n        const executeCommand = async (line: string): Promise<string> => {\n          const result = await remote.commands.execute(sessionId, line)\n          if (!result.ok) throw new Error(`${result.error.code}: ${result.error.message}`)\n          if (result.value === undefined) throw new Error('unknown command: /auto-review')\n          const command = result.value.result\n          if (command === undefined) throw new Error('/auto-review produced no command result')\n          const text = command.text ?? ''\n          return command.kind === 'success' ? text : `${command.kind}: ${text}`\n        }\n        return {\n          approve: async (n: number): Promise<string> => executeCommand(`/auto-review approve ${n}`),\n          setEnabled: async (enabled: boolean): Promise<string> => executeCommand(`/auto-review ${enabled ? 'on' : 'off'}`),\n        }\n      },\n    }, ReviewPanel),\n  )\n}\n"],"mappings":";;;;;;;;;;EAsBA,SAAgB,eACd,SACA,QAMkB;GAClB,IAAI,QAAQ,aAAa,KAAA,GACvB,OAAO;IACL,UAAU,QAAQ;IAClB,UAAU,QAAQ;IAClB,OAAO,OAAO,SAAS,QAAQ,QAAQ;IACvC,QAAQ,GAAG,QAAQ,WAAW;IAC9B,MAAM;GACR;GAEF,IAAI,QAAQ,eAAe,eACzB,OAAO;IACL,UAAU,QAAQ;IAClB,UAAU,QAAQ;IAClB,OAAO,OAAO;IACd,QAAQ,QAAQ,UAAU;IAC1B,MAAM;GACR;GAEF,MAAM,QAAQ,QAAQ,aAAa,SAAS,OAAO,OAAO,OAAO;GACjE,OAAO;IACL,UAAU,QAAQ;IAClB,UAAU,QAAQ;IAClB;IACA,QAAQ,QAAQ,UAAU,GAAG,QAAQ,WAAW;IAChD,MAAM,QAAQ,aAAa,SAAS,SAAS;GAC/C;EACF;;;;;;;;;;;;;;ECzBA,SAAS,aACP,OACA,GACW;GACX,IAAI,UAAU,KAAA,GAAW,OAAO,EAAE,aAAa;GAC/C,MAAM,YAAY,SAAyB,EAAE,eAAe,CAAC,CAAC,QAAQ,UAAU,IAAI;GACpF,MAAM,SAAS;IACb,OAAO,EAAE,eAAe;IACxB,MAAM,EAAE,cAAc;IACtB;IACA,YAAY,EAAE,iBAAiB;GACjC;GACA,OAAO,MAAM,OAAO,KAAI,YAAW,eAAe,SAAS,MAAM,CAAC,CAAC,CAAC,KAAI,QACtE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAwB,gCAAA;IAAxB,UAAA;KACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,8BAAA;MAA4B,UAAA,IAAI;KAAe,CAAA;KACrD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,wBAAsB,QAAQ,IAAI;MAAS,UAAA,IAAI;KAAY,CAAA;KACjE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,8BAAA;MAA4B,UAAA,IAAI;KAAa,CAAA;IAChD;GAJK,GAAA,IAAI,QAIT,CACN;EACH;;;;;;EAOA,SAAgB,YAAY,EAAE,eAAe,SAAS,YAAY,KAAkC;GAClG,MAAM,QAAQ,cAAc,YAAY;GACxC,MAAM,CAAC,MAAM,YAAA,GAAWA,MAAAA,SAAAA,CAAS,KAAK;GACtC,MAAM,CAAC,QAAQ,cAAA,GAAaA,MAAAA,SAAAA,CAAwB,IAAI;GACxD,MAAM,UAAA,GAASC,MAAAA,OAAAA,CAA8B,IAAI;GACjD,MAAM,eAAqB,SAAQ,aAAY,CAAC,QAAQ;GACxD,MAAM,aAAa,OAAO,MAA6B;IACrD,IAAI;KACF,MAAM,OAAO,MAAM,QAAQ,CAAC;KAC5B,UAAU,EAAE,eAAe,CAAC,CAAC,QAAQ,UAAU,IAAI,CAAC;IACtD,SAAS,OAAgB;KACvB,UAAU,EAAE,eAAe,CAAC,CAAC,QAAQ,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,CAAC;IACxG;GACF;GACA,MAAM,YAAY,OAAO,YAAoC;IAC3D,IAAI;KACF,MAAM,OAAO,MAAM,WAAW,OAAO;KACrC,UAAU,EAAE,gBAAgB,CAAC,CAAC,QAAQ,UAAU,IAAI,CAAC;IACvD,SAAS,OAAgB;KACvB,UAAU,EAAE,cAAc,CAAC,CAAC,QAAQ,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,CAAC;IACvG;GACF;GACA,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,wBAAA;IAAqB,KAAK;IAA/B,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;KAAQ,MAAK;KAAS,+BAAA;KAA4B,SAAS;KACxD,UAAA,EAAE,OAAO;IACJ,CAAA,GACP,QACC,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;KAAK,8BAAA;KAAL,UAAA;MACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,8BAAA;OAA4B,UAAA,EAAE,OAAO;MAAO,CAAA;MAChD,UAAU,KAAA,IACP,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,8BAAA;OAA4B,UAAA,EAAE,aAAa;MAAO,CAAA,IAEvD,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD,EAAA,UAAA;OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,4BAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,OAAO,EAAQ,CAAA,GACxB,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,MAAM,UAAU,EAAE,SAAS,IAAI,EAAE,UAAU,EAAQ,CAAA,CACvD;;OACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,4BAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD,EAAA,UAAA;SAAO,EAAE,QAAQ;SAAE;SAAI,EAAE,SAAS;QAAQ,EAAA,CAAA,GAC1C,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD,EAAA,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,+BAAA;SACA,UAAU,MAAM;SAChB,eAAe,KAAK,UAAU,IAAI;SAEjC,UAAA,EAAE,QAAQ;QACL,CAAA,GACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,+BAAA;SACA,UAAU,CAAC,MAAM;SACjB,eAAe,KAAK,UAAU,KAAK;SAElC,UAAA,EAAE,SAAS;QACN,CAAA,CACJ,EAAA,CAAA,CACH;;OACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,4BAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,UAAU,EAAQ,CAAA,GAC3B,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,MAAM,aAAmB,CAAA,CAC7B;;OACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,4BAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,UAAU,EAAQ,CAAA,GAC3B,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,MAAM,aAAmB,CAAA,CAC7B;;OACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,4BAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,SAAS,EAAQ,CAAA,GAC1B,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD,EAAA,UAAA;SACG,MAAM;SAAO;SAAE,EAAE,QAAQ;SAAE;SAAI,MAAM;SAAO;SAAE,EAAE,QAAQ;SAAE;SAAI,MAAM;SAAU;SAAE,EAAE,WAAW;SAAE;SAAI,MAAM;SAAa;SAAE,EAAE,cAAc;SAAE;SAAI,EAAE,KAAK;SAAE;SAAE,MAAM;SAAc;SAAE,EAAE,IAAI;QAClL,EAAA,CAAA,CACH;;OACJ,MAAM,YAAY,QACjB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,gCAAA;QAAL,UAAA;SACG,EAAE,SAAS;SAAE;SAAI,EAAE,eAAe,CAAC,CACjC,QAAQ,UAAU,MAAM,QAAQ,KAAK,IAAI,CAAC,CAC1C,QAAQ,WAAW,OAAO,MAAM,QAAQ,KAAK,KAAK,CAAC,CAAC,CACpD,QAAQ,YAAY,MAAM,QAAQ,MAAM;QACxC;;OAEN,MAAM,aAAa,SAAS,KAC3B,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,gCAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;SAAK,8BAAA;SAA4B,UAAA,EAAE,UAAU;QAAO,CAAA,GACnD,MAAM,aAAa,KAAK,MAAM,UAC7B,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;SAAyB,4BAAA;SAAzB,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;UAAM,8BAAA;UAA4B,UAAA,KAAK;SAAe,CAAA,GACtD,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;UAAQ,MAAK;UAAS,gCAAA;UAA6B,eAAe,KAAK,WAAW,QAAQ,CAAC;UAA3F,UAAA;WACG,EAAE,SAAS;WAAE;WAAG,QAAQ;UACnB;SACL,CAAA,CAAA;QALK,GAAA,KAAK,QAKV,CACN,CACE;;OAEP,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,gCAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;SAAK,8BAAA;SAA4B,UAAA,EAAE,QAAQ;QAAO,CAAA,GACjD,MAAM,OAAO,WAAW,IAAI,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;SAAK,8BAAA;SAA4B,UAAA,EAAE,OAAO;QAAO,CAAA,IAAI,aAAa,OAAO,CAAC,CACpG;;MACF,EAAA,CAAA;MAER,WAAW,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,8BAAA;OAA4B,UAAA;MAAY,CAAA;KAC9D;IAEJ,CAAA,CAAA;;EAET;;;;;;;;;EC5JA,MAAa,KAAK;GAChB,OAAO;GACP,OAAO;GACP,OAAO;GACP,SAAS;GACT,UAAU;GACV,QAAQ;GACR,SAAS;GACT,UAAU;GACV,UAAU;GACV,SAAS;GACT,QAAQ;GACR,QAAQ;GACR,WAAW;GACX,cAAc;GACd,KAAK;GACL,SAAS;GACT,eAAe;GACf,OAAO;GACP,QAAQ;GACR,UAAU;GACV,SAAS;GACT,eAAe;GACf,eAAe;GACf,gBAAgB;GAChB,cAAc;GACd,aAAa;GACb,eAAe;GACf,cAAc;GACd,eAAe;GACf,iBAAiB;GACjB,SAAS;GACT,YAAY;GACZ,UAAU;GACV,IAAI;EACN;;EAMA,MAAa,KAA2C;GACtD,OAAO;GACP,OAAO;GACP,OAAO;GACP,SAAS;GACT,UAAU;GACV,QAAQ;GACR,SAAS;GACT,UAAU;GACV,UAAU;GACV,SAAS;GACT,QAAQ;GACR,QAAQ;GACR,WAAW;GACX,cAAc;GACd,KAAK;GACL,SAAS;GACT,eAAe;GACf,OAAO;GACP,QAAQ;GACR,UAAU;GACV,SAAS;GACT,eAAe;GACf,eAAe;GACf,gBAAgB;GAChB,cAAc;GACd,aAAa;GACb,eAAe;GACf,cAAc;GACd,eAAe;GACf,iBAAiB;GACjB,SAAS;GACT,YAAY;GACZ,UAAU;GACV,IAAI;EACN;;EAGA,MAAa,KAAK;;;;;;;;;EC/ElB,MAAM,WAAW;EAEjB,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgHZ,SAAgB,qBAAiC;GAC/C,IAAI,SAAS,eAAe,QAAQ,MAAM,MAAM,aAAa,KAAA;GAC7D,MAAM,UAAU,SAAS,cAAc,OAAO;GAC9C,QAAQ,KAAK;GACb,QAAQ,cAAc;GACtB,SAAS,KAAK,YAAY,OAAO;GACjC,aAAa;IACX,QAAQ,OAAO;GACjB;EACF;;;;EChGA,MAAa,OAAO;;EAGpB,MAAa,SAAS;GAAC;GAAS;GAAU;GAAU;EAAiB;;;;;;EA0BrE,SAAgB,MAAM,KAA0B;GAC9C,IAAI,aAAa,IAAI,OAAO,SAAS,IAAI;IAAE;IAAI;GAAG,CAAC,GAAG,+BAA+B;GACrF,IAAI,aAAa,mBAAmB,GAAG,6BAA6B;GACpE,IAAI,MAAM,OACR,6CACM,IAAI,MAAM,SAAS;IACvB,MAAM;IACN,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,SAAS,cAA8C;KACrD,MAAM,SAAS,IAAI;KACnB,MAAM,iBAAiB,OAAO,SAAkC;MAC9D,MAAM,SAAS,MAAM,OAAO,SAAS,QAAQ,WAAW,IAAI;MAC5D,IAAI,CAAC,OAAO,IAAI,MAAM,IAAI,MAAM,GAAG,OAAO,MAAM,KAAK,IAAI,OAAO,MAAM,SAAS;MAC/E,IAAI,OAAO,UAAU,KAAA,GAAW,MAAM,IAAI,MAAM,+BAA+B;MAC/E,MAAM,UAAU,OAAO,MAAM;MAC7B,IAAI,YAAY,KAAA,GAAW,MAAM,IAAI,MAAM,yCAAyC;MACpF,MAAM,OAAO,QAAQ,QAAQ;MAC7B,OAAO,QAAQ,SAAS,YAAY,OAAO,GAAG,QAAQ,KAAK,IAAI;KACjE;KACA,OAAO;MACL,SAAS,OAAO,MAA+B,eAAe,wBAAwB,GAAG;MACzF,YAAY,OAAO,YAAsC,eAAe,gBAAgB,UAAU,OAAO,OAAO;KAClH;IACF;GACF,GAAG,WAAW,CAChB;EACF"}
+{"version":3,"file":"client.js","names":["useState","useRef"],"sources":["../src/client/present.ts","../src/client/ReviewPanel.tsx","../src/client/locales.ts","../src/client/styles.ts","../src/client/index.ts"],"sourcesContent":["/**\n * Pure presentation for the review panel: verdict rows and badges as plain\n * strings and tone codes — no I/O, clock, or randomness. The component\n * owns layout and interaction; this module owns the text.\n * @module dsh-auto-review/client/present\n */\n\nimport type { AutoReviewVerdictView } from '../projection-types.ts'\n\n/** Badge tones the component maps to scoped styles. */\nexport type VerdictTone = 'allow' | 'deny' | 'fallback' | 'escalation'\n\n/** One presented verdict row. */\nexport interface PresentedVerdict {\n  readonly reviewId: string\n  readonly toolName: string\n  readonly label: string\n  readonly detail: string\n  readonly tone: VerdictTone\n}\n\n/** Present one verdict row (the component supplies the localized label texts). */\nexport function presentVerdict(\n  verdict: AutoReviewVerdictView,\n  labels: {\n    readonly allow: string\n    readonly deny: string\n    readonly fallback: (kind: string) => string\n    readonly escalation: string\n  },\n): PresentedVerdict {\n  if (verdict.fallback !== undefined) {\n    return {\n      reviewId: verdict.reviewId,\n      toolName: verdict.toolName,\n      label: labels.fallback(verdict.fallback),\n      detail: `${verdict.durationMs} ms`,\n      tone: 'fallback',\n    }\n  }\n  if (verdict.escalation === 'risk-policy') {\n    return {\n      reviewId: verdict.reviewId,\n      toolName: verdict.toolName,\n      label: labels.escalation,\n      detail: verdict.reason ?? '',\n      tone: 'escalation',\n    }\n  }\n  const label = verdict.decision === 'deny' ? labels.deny : labels.allow\n  return {\n    reviewId: verdict.reviewId,\n    toolName: verdict.toolName,\n    label,\n    detail: verdict.reason ?? `${verdict.durationMs} ms`,\n    tone: verdict.decision === 'deny' ? 'deny' : 'allow',\n  }\n}\n","/**\n * The session-header review panel: a button in the conversation header that\n * opens a popover with this session's auto-review state — the on/off switch,\n * budgets, cumulative statistics (including hard-disable rejections), the\n * circuit trip, recent verdicts, and one-shot approve buttons for recent\n * denials. Data arrives through the `autoReview` session projection;\n * switches and approves execute the `/auto-review` command through the\n * commands Remote.\n * @module dsh-auto-review/client/ReviewPanel\n */\n\nimport { useRef, useState, type ReactNode } from 'react'\nimport type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots'\nimport type { AutoReviewProjection } from '../projection-types.ts'\nimport { presentVerdict } from './present.ts'\nimport { NS } from './locales.ts'\n\n/** Registration-side injected face: the approve action for one recent denial. */\nexport interface ReviewPanelInjected {\n  /** Approve the n-th most recent denial (1 = most recent); resolves with the command result text. */\n  approve: (n: number) => Promise<string>\n  /** Switch the session's auto-review on/off (`/auto-review on|off`); resolves with the command result text. */\n  setEnabled: (enabled: boolean) => Promise<string>\n}\n\n/** Full component props assembled by the session-header slot renderer. */\nexport type ReviewPanelProps =\n  PropsRuntime<'conversation.session.header.actions'>\n  & PropsLocale<typeof NS>\n  & InjectFace<ReviewPanelInjected>\n\n/** Compact verdict-row badge label for the panel. */\nfunction verdictBadge(\n  value: AutoReviewProjection | undefined,\n  t: ReviewPanelProps['t'],\n): ReactNode {\n  if (value === undefined) return t('unavailable')\n  const fallback = (kind: string): string => t('fallbackLabel').replace('{kind}', kind)\n  const labels = {\n    allow: t('decisionAllow'),\n    deny: t('decisionDeny'),\n    fallback,\n    escalation: t('escalationLabel'),\n  }\n  return value.recent.map(verdict => presentVerdict(verdict, labels)).map(row => (\n    <div key={row.reviewId} data-dsh-auto-review-verdict>\n      <span data-dsh-auto-review-muted>{row.toolName}</span>\n      <span data-dsh-auto-review={`tone-${row.tone}`}>{row.label}</span>\n      <span data-dsh-auto-review-muted>{row.detail}</span>\n    </div>\n  ))\n}\n\n/**\n * Render the review panel action.\n * @param props - framework kit (sessionId, useProjection), locale, and the approve face.\n * @returns the header button with its popover.\n */\nexport function ReviewPanel({ useProjection, approve, setEnabled, t }: ReviewPanelProps): ReactNode {\n  const value = useProjection('autoReview')\n  const [open, setOpen] = useState(false)\n  const [notice, setNotice] = useState<string | null>(null)\n  const anchor = useRef<HTMLDivElement | null>(null)\n  const toggle = (): void => setOpen(previous => !previous)\n  const runApprove = async (n: number): Promise<void> => {\n    try {\n      const text = await approve(n)\n      setNotice(t('approveResult').replace('{text}', text))\n    } catch (error: unknown) {\n      setNotice(t('approveFailed').replace('{text}', error instanceof Error ? error.message : String(error)))\n    }\n  }\n  const runSwitch = async (enabled: boolean): Promise<void> => {\n    try {\n      const text = await setEnabled(enabled)\n      setNotice(t('switchedResult').replace('{text}', text))\n    } catch (error: unknown) {\n      setNotice(t('switchFailed').replace('{text}', error instanceof Error ? error.message : String(error)))\n    }\n  }\n  return (\n    <div data-dsh-auto-review ref={anchor}>\n      <button type=\"button\" data-dsh-auto-review-button onClick={toggle}>\n        {t('label')}\n      </button>\n      {open && (\n        <div data-dsh-auto-review-panel>\n          <div data-dsh-auto-review-title>{t('title')}</div>\n          {value === undefined\n            ? <div data-dsh-auto-review-muted>{t('unavailable')}</div>\n            : (\n              <div>\n                <div data-dsh-auto-review-row>\n                  <span>{t('state')}</span>\n                  <span>{value.enabled ? t('stateOn') : t('stateOff')}</span>\n                </div>\n                <div data-dsh-auto-review-row>\n                  <span>{t('enable')} / {t('disable')}</span>\n                  <span>\n                    <button\n                      type=\"button\"\n                      data-dsh-auto-review-switch\n                      disabled={value.enabled}\n                      onClick={() => void runSwitch(true)}\n                    >\n                      {t('enable')}\n                    </button>\n                    <button\n                      type=\"button\"\n                      data-dsh-auto-review-switch\n                      disabled={!value.enabled}\n                      onClick={() => void runSwitch(false)}\n                    >\n                      {t('disable')}\n                    </button>\n                  </span>\n                </div>\n                <div data-dsh-auto-review-row>\n                  <span>{t('verdicts')}</span>\n                  <span>{value.verdictsUsed}</span>\n                </div>\n                <div data-dsh-auto-review-row>\n                  <span>{t('failures')}</span>\n                  <span>{value.failuresUsed}</span>\n                </div>\n                <div data-dsh-auto-review-row>\n                  <span>{t('allTime')}</span>\n                  <span>\n                    {value.allows} {t('allows')} · {value.denies} {t('denies')} · {value.fallbacks} {t('fallbacks')} · {value.neverRejects} {t('neverRejects')} · {t('avg')} {value.avgDurationMs} {t('ms')}\n                  </span>\n                </div>\n                {value.circuit !== null && (\n                  <div data-dsh-auto-review-circuit>\n                    {t('circuit')} — {t('circuitDetail')\n                      .replace('{kind}', value.circuit.trip.kind)\n                      .replace('{count}', String(value.circuit.trip.count))\n                      .replace('{action}', value.circuit.action)}\n                  </div>\n                )}\n                {value.recentDenies.length > 0 && (\n                  <div data-dsh-auto-review-section>\n                    <div data-dsh-auto-review-title>{t('denyList')}</div>\n                    {value.recentDenies.map((deny, index) => (\n                      <div key={deny.reviewId} data-dsh-auto-review-row>\n                        <span data-dsh-auto-review-muted>{deny.toolName}</span>\n                        <button type=\"button\" data-dsh-auto-review-approve onClick={() => void runApprove(index + 1)}>\n                          {t('approve')} #{index + 1}\n                        </button>\n                      </div>\n                    ))}\n                  </div>\n                )}\n                <div data-dsh-auto-review-section>\n                  <div data-dsh-auto-review-title>{t('recent')}</div>\n                  {value.recent.length === 0 ? <div data-dsh-auto-review-muted>{t('empty')}</div> : verdictBadge(value, t)}\n                </div>\n              </div>\n            )}\n          {notice !== null && <div data-dsh-auto-review-muted>{notice}</div>}\n        </div>\n      )}\n    </div>\n  )\n}\n","/**\n * Copy dictionaries for the auto-review session-header panel (en/zh — the\n * harness locale registry accepts these two UI language codes today).\n * @module dsh-auto-review/client/locales\n */\n\n/** Simplified Chinese dictionary and key source of truth. */\nexport const zh = {\n  label: 'AI 审查',\n  title: 'AI 自动审查',\n  state: '状态',\n  stateOn: '已开启',\n  stateOff: '已关闭',\n  enable: '开启',\n  disable: '关闭',\n  verdicts: '本回合 AI 裁决',\n  failures: '本回合失败',\n  allTime: '累计',\n  allows: '放行',\n  denies: '拒绝',\n  fallbacks: '失败',\n  neverRejects: '硬禁用拒绝',\n  avg: '平均耗时',\n  circuit: '拒绝熔断器已触发',\n  circuitDetail: '触发类型：{kind}，计数 {count}，动作 {action}',\n  empty: '本会话暂无 AI 审查裁决。',\n  recent: '最近裁决',\n  denyList: '可批准的重试',\n  approve: '批准重试',\n  approveResult: '已授权：{text}',\n  approveFailed: '批准失败：{text}',\n  switchedResult: '已切换：{text}',\n  switchFailed: '切换失败：{text}',\n  unavailable: '审查面板不可用（宿主未提供会话投影能力）。',\n  decisionAllow: '放行',\n  decisionDeny: '拒绝',\n  fallbackLabel: '失败（{kind}）',\n  escalationLabel: '风险策略升级',\n  riskLow: '低风险',\n  riskMedium: '中风险',\n  riskHigh: '高风险',\n  ms: 'ms',\n} satisfies Record<string, string>\n\n/** Auto-review panel locale key union. */\nexport type ReviewPanelLocaleKey = keyof typeof zh\n\n/** English dictionary checked against the Chinese key set. */\nexport const en: Record<ReviewPanelLocaleKey, string> = {\n  label: 'AI Review',\n  title: 'AI Auto-Review',\n  state: 'State',\n  stateOn: 'ON',\n  stateOff: 'OFF',\n  enable: 'Enable',\n  disable: 'Disable',\n  verdicts: 'AI verdicts this turn',\n  failures: 'Failures this turn',\n  allTime: 'All-time',\n  allows: 'allows',\n  denies: 'denies',\n  fallbacks: 'fallbacks',\n  neverRejects: 'never rejects',\n  avg: 'avg',\n  circuit: 'Rejection circuit breaker tripped',\n  circuitDetail: '{kind}: {count} denials, action {action}',\n  empty: 'No AI review verdicts in this session yet.',\n  recent: 'Recent verdicts',\n  denyList: 'Approvable retries',\n  approve: 'Approve retry',\n  approveResult: 'Authorized: {text}',\n  approveFailed: 'Approve failed: {text}',\n  switchedResult: 'Switched: {text}',\n  switchFailed: 'Switch failed: {text}',\n  unavailable: 'The review panel is unavailable (the host does not provide the session-projection capability).',\n  decisionAllow: 'allow',\n  decisionDeny: 'deny',\n  fallbackLabel: 'fallback ({kind})',\n  escalationLabel: 'risk-policy escalation',\n  riskLow: 'low risk',\n  riskMedium: 'medium risk',\n  riskHigh: 'high risk',\n  ms: 'ms',\n}\n\n/** Dictionary namespace owned by this plugin. */\nexport const NS = 'autoReviewPanel'\n","/**\n * Scoped stylesheet for the review panel. Standalone bundles cannot use the\n * in-repo CSS-module pipeline, so the panel injects one `<style>` element\n * whose selectors are all scoped under `[data-dsh-auto-review]`.\n * @module dsh-auto-review/client/styles\n */\n\nconst STYLE_ID = 'dsh-auto-review-panel-styles'\n\nconst CSS = `\n[data-dsh-auto-review] {\n  --ar-allow: var(--dsw-color-success, #16a34a);\n  --ar-deny: var(--dsw-color-danger, #dc2626);\n  --ar-fallback: var(--dsw-color-warning, #d97706);\n  --ar-escalation: var(--dsw-color-warning, #d97706);\n  --ar-border: var(--dsw-color-border, rgba(128, 128, 128, 0.3));\n  --ar-bg: var(--dsw-color-surface, #ffffff);\n  --ar-fg: var(--dsw-color-text, #1f2328);\n  --ar-muted: var(--dsw-color-text-muted, #6b7280);\n  font-family: inherit;\n  color: var(--ar-fg);\n}\n[data-dsh-auto-review-panel] {\n  position: absolute;\n  z-index: 40;\n  min-width: 320px;\n  max-width: 420px;\n  max-height: 70vh;\n  overflow-y: auto;\n  background: var(--ar-bg);\n  border: 1px solid var(--ar-border);\n  border-radius: 8px;\n  box-shadow: 0 8px 24px rgba(0, 0, 0, 0.18);\n  padding: 12px;\n  font-size: 12px;\n  line-height: 1.5;\n}\n[data-dsh-auto-review-button] {\n  display: inline-flex;\n  align-items: center;\n  gap: 4px;\n  cursor: pointer;\n  background: transparent;\n  border: 1px solid var(--ar-border);\n  border-radius: 6px;\n  padding: 3px 8px;\n  font-size: 12px;\n  color: var(--ar-fg);\n}\n[data-dsh-auto-review-button]:hover {\n  background: rgba(128, 128, 128, 0.12);\n}\n[data-dsh-auto-review-section] {\n  margin: 8px 0;\n  border-top: 1px solid var(--ar-border);\n  padding-top: 8px;\n}\n[data-dsh-auto-review-title] {\n  font-weight: 600;\n  margin-bottom: 6px;\n}\n[data-dsh-auto-review-row] {\n  display: flex;\n  justify-content: space-between;\n  gap: 8px;\n  padding: 2px 0;\n  align-items: baseline;\n}\n[data-dsh-auto-review-muted] {\n  color: var(--ar-muted);\n}\n[data-dsh-auto-review-verdict] {\n  display: flex;\n  justify-content: space-between;\n  gap: 8px;\n  padding: 3px 0;\n  border-bottom: 1px dashed var(--ar-border);\n}\n[data-dsh-auto-review-tone-allow] { color: var(--ar-allow); }\n[data-dsh-auto-review-tone-deny] { color: var(--ar-deny); }\n[data-dsh-auto-review-tone-fallback] { color: var(--ar-fallback); }\n[data-dsh-auto-review-tone-escalation] { color: var(--ar-escalation); }\n[data-dsh-auto-review-approve] {\n  cursor: pointer;\n  border: 1px solid var(--ar-border);\n  border-radius: 4px;\n  background: transparent;\n  color: var(--ar-fg);\n  padding: 1px 6px;\n  font-size: 11px;\n}\n[data-dsh-auto-review-approve]:hover {\n  background: rgba(128, 128, 128, 0.12);\n}\n[data-dsh-auto-review-switch] {\n  cursor: pointer;\n  border: 1px solid var(--ar-border);\n  border-radius: 4px;\n  background: transparent;\n  color: var(--ar-fg);\n  padding: 1px 6px;\n  font-size: 11px;\n}\n[data-dsh-auto-review-switch] + [data-dsh-auto-review-switch] {\n  margin-left: 4px;\n}\n[data-dsh-auto-review-switch]:hover:not(:disabled) {\n  background: rgba(128, 128, 128, 0.12);\n}\n[data-dsh-auto-review-approve]:disabled,\n[data-dsh-auto-review-switch]:disabled {\n  opacity: 0.45;\n  cursor: default;\n}\n[data-dsh-auto-review-circuit] {\n  color: var(--ar-deny);\n  font-weight: 600;\n}\n`\n\n/** Install the scoped stylesheet once per plugin fiber. */\nexport function installPanelStyles(): () => void {\n  if (document.getElementById(STYLE_ID) !== null) return () => undefined\n  const element = document.createElement('style')\n  element.id = STYLE_ID\n  element.textContent = CSS\n  document.head.appendChild(element)\n  return () => {\n    element.remove()\n  }\n}\n","/**\n * `dsh-auto-review`, browser half: registers the locale dictionaries, the\n * scoped stylesheet, and the session-header review panel action. All data\n * arrives through the `autoReview` session projection; the approve buttons\n * execute the `/auto-review approve [n]` command through the commands\n * Remote namespace.\n *\n * @module dsh-auto-review/client\n */\n\nimport type { ClientContext, SessionId } from '@deepseek-ai/dsh-client-runtime/client'\nimport type {} from '@deepseek-ai/dsh-client-locale/client'\n// Type-only: pulls the 'conversation.session.header.actions' SlotMap\n// declaration into this program so the registration typechecks.\nimport type {} from '@deepseek-ai/dsh-client-ui-conversation/client'\n// Type-only: merges the commands namespace onto ctx.remote.\nimport type {} from '@deepseek-ai/dsh-api-remotes/client'\nimport type {} from '../projection-types.ts'\nimport { ReviewPanel, type ReviewPanelInjected } from './ReviewPanel.tsx'\nimport { en, NS, zh, type ReviewPanelLocaleKey } from './locales.ts'\nimport { installPanelStyles } from './styles.ts'\n\ndeclare module '@deepseek-ai/dsh-client-ui-slots' {\n  interface LocaleNamespaceMap {\n    /** Review panel copy. */\n    'autoReviewPanel': ReviewPanelLocaleKey\n  }\n}\n\nexport type { ReviewPanelProps, ReviewPanelInjected } from './ReviewPanel.tsx'\nexport type { ReviewPanelLocaleKey } from './locales.ts'\nexport { presentVerdict, type PresentedVerdict, type VerdictTone } from './present.ts'\n\n/** Plugin name: matches the package name, the graph row id, and the bundle id. */\nexport const name = 'dsh-auto-review'\n\n/** Services the panel reads; `remote.commands` is mounted by the api-remotes client. */\nexport const inject = ['slots', 'locale', 'remote', 'remote.commands']\n\n/**\n * The structural shape of the api-remotes `commands` Remote namespace the\n * panel needs. Declared locally because the ambient namespace merge onto\n * `TypertClientRemote` is assembled from several generated modules and can\n * resolve to a different physical copy under strict package managers —\n * the runtime contract is what this client depends on, so the type is\n * pinned to it explicitly (rc.6 and rc.7 both serve this shape).\n */\ninterface CommandsRemote {\n  readonly execute: (\n    agentId: SessionId,\n    line: string,\n    images?: readonly unknown[],\n  ) => Promise<\n    | { ok: false; error: { code: string; message: string } }\n    | { ok: true; value?: { result?: { kind?: string; text?: string } } }\n  >\n}\n\n/**\n * Browser plugin body: dictionaries, the scoped stylesheet, and the\n * session-header action registration.\n * @param ctx - client root context.\n */\nexport function apply(ctx: ClientContext): void {\n  ctx.effect(() => ctx.locale.register(NS, { zh, en }), 'dsh-auto-review: dictionaries')\n  ctx.effect(() => installPanelStyles(), 'dsh-auto-review: stylesheet')\n  ctx.slots.inject(\n    'conversation.session.header.actions',\n    () => ctx.slots.register({\n      name: 'conversation.session.header.actions',\n      id: 'auto-review',\n      order: 40,\n      locale: NS,\n      inject: (sessionId: SessionId): ReviewPanelInjected => {\n        const remote = ctx.remote as unknown as { commands: CommandsRemote }\n        const executeCommand = async (line: string): Promise<string> => {\n          const result = await remote.commands.execute(sessionId, line, [])\n          if (!result.ok) throw new Error(`${result.error.code}: ${result.error.message}`)\n          if (result.value === undefined) throw new Error('unknown command: /auto-review')\n          const command = result.value.result\n          if (command === undefined) throw new Error('/auto-review produced no command result')\n          const text = command.text ?? ''\n          return command.kind === 'success' ? text : `${command.kind}: ${text}`\n        }\n        return {\n          approve: async (n: number): Promise<string> => executeCommand(`/auto-review approve ${n}`),\n          setEnabled: async (enabled: boolean): Promise<string> => executeCommand(`/auto-review ${enabled ? 'on' : 'off'}`),\n        }\n      },\n    }, ReviewPanel),\n  )\n}\n"],"mappings":";;;;;;;;;;EAsBA,SAAgB,eACd,SACA,QAMkB;GAClB,IAAI,QAAQ,aAAa,KAAA,GACvB,OAAO;IACL,UAAU,QAAQ;IAClB,UAAU,QAAQ;IAClB,OAAO,OAAO,SAAS,QAAQ,QAAQ;IACvC,QAAQ,GAAG,QAAQ,WAAW;IAC9B,MAAM;GACR;GAEF,IAAI,QAAQ,eAAe,eACzB,OAAO;IACL,UAAU,QAAQ;IAClB,UAAU,QAAQ;IAClB,OAAO,OAAO;IACd,QAAQ,QAAQ,UAAU;IAC1B,MAAM;GACR;GAEF,MAAM,QAAQ,QAAQ,aAAa,SAAS,OAAO,OAAO,OAAO;GACjE,OAAO;IACL,UAAU,QAAQ;IAClB,UAAU,QAAQ;IAClB;IACA,QAAQ,QAAQ,UAAU,GAAG,QAAQ,WAAW;IAChD,MAAM,QAAQ,aAAa,SAAS,SAAS;GAC/C;EACF;;;;;;;;;;;;;;ECzBA,SAAS,aACP,OACA,GACW;GACX,IAAI,UAAU,KAAA,GAAW,OAAO,EAAE,aAAa;GAC/C,MAAM,YAAY,SAAyB,EAAE,eAAe,CAAC,CAAC,QAAQ,UAAU,IAAI;GACpF,MAAM,SAAS;IACb,OAAO,EAAE,eAAe;IACxB,MAAM,EAAE,cAAc;IACtB;IACA,YAAY,EAAE,iBAAiB;GACjC;GACA,OAAO,MAAM,OAAO,KAAI,YAAW,eAAe,SAAS,MAAM,CAAC,CAAC,CAAC,KAAI,QACtE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAwB,gCAAA;IAAxB,UAAA;KACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,8BAAA;MAA4B,UAAA,IAAI;KAAe,CAAA;KACrD,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,wBAAsB,QAAQ,IAAI;MAAS,UAAA,IAAI;KAAY,CAAA;KACjE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAM,8BAAA;MAA4B,UAAA,IAAI;KAAa,CAAA;IAChD;GAJK,GAAA,IAAI,QAIT,CACN;EACH;;;;;;EAOA,SAAgB,YAAY,EAAE,eAAe,SAAS,YAAY,KAAkC;GAClG,MAAM,QAAQ,cAAc,YAAY;GACxC,MAAM,CAAC,MAAM,YAAA,GAAWA,MAAAA,SAAAA,CAAS,KAAK;GACtC,MAAM,CAAC,QAAQ,cAAA,GAAaA,MAAAA,SAAAA,CAAwB,IAAI;GACxD,MAAM,UAAA,GAASC,MAAAA,OAAAA,CAA8B,IAAI;GACjD,MAAM,eAAqB,SAAQ,aAAY,CAAC,QAAQ;GACxD,MAAM,aAAa,OAAO,MAA6B;IACrD,IAAI;KACF,MAAM,OAAO,MAAM,QAAQ,CAAC;KAC5B,UAAU,EAAE,eAAe,CAAC,CAAC,QAAQ,UAAU,IAAI,CAAC;IACtD,SAAS,OAAgB;KACvB,UAAU,EAAE,eAAe,CAAC,CAAC,QAAQ,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,CAAC;IACxG;GACF;GACA,MAAM,YAAY,OAAO,YAAoC;IAC3D,IAAI;KACF,MAAM,OAAO,MAAM,WAAW,OAAO;KACrC,UAAU,EAAE,gBAAgB,CAAC,CAAC,QAAQ,UAAU,IAAI,CAAC;IACvD,SAAS,OAAgB;KACvB,UAAU,EAAE,cAAc,CAAC,CAAC,QAAQ,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,CAAC;IACvG;GACF;GACA,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;IAAK,wBAAA;IAAqB,KAAK;IAA/B,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;KAAQ,MAAK;KAAS,+BAAA;KAA4B,SAAS;KACxD,UAAA,EAAE,OAAO;IACJ,CAAA,GACP,QACC,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;KAAK,8BAAA;KAAL,UAAA;MACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,8BAAA;OAA4B,UAAA,EAAE,OAAO;MAAO,CAAA;MAChD,UAAU,KAAA,IACP,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,8BAAA;OAA4B,UAAA,EAAE,aAAa;MAAO,CAAA,IAEvD,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD,EAAA,UAAA;OACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,4BAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,OAAO,EAAQ,CAAA,GACxB,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,MAAM,UAAU,EAAE,SAAS,IAAI,EAAE,UAAU,EAAQ,CAAA,CACvD;;OACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,4BAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD,EAAA,UAAA;SAAO,EAAE,QAAQ;SAAE;SAAI,EAAE,SAAS;QAAQ,EAAA,CAAA,GAC1C,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD,EAAA,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,+BAAA;SACA,UAAU,MAAM;SAChB,eAAe,KAAK,UAAU,IAAI;SAEjC,UAAA,EAAE,QAAQ;QACL,CAAA,GACR,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;SACE,MAAK;SACL,+BAAA;SACA,UAAU,CAAC,MAAM;SACjB,eAAe,KAAK,UAAU,KAAK;SAElC,UAAA,EAAE,SAAS;QACN,CAAA,CACJ,EAAA,CAAA,CACH;;OACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,4BAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,UAAU,EAAQ,CAAA,GAC3B,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,MAAM,aAAmB,CAAA,CAC7B;;OACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,4BAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,UAAU,EAAQ,CAAA,GAC3B,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,MAAM,aAAmB,CAAA,CAC7B;;OACL,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,4BAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD,EAAA,UAAO,EAAE,SAAS,EAAQ,CAAA,GAC1B,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD,EAAA,UAAA;SACG,MAAM;SAAO;SAAE,EAAE,QAAQ;SAAE;SAAI,MAAM;SAAO;SAAE,EAAE,QAAQ;SAAE;SAAI,MAAM;SAAU;SAAE,EAAE,WAAW;SAAE;SAAI,MAAM;SAAa;SAAE,EAAE,cAAc;SAAE;SAAI,EAAE,KAAK;SAAE;SAAE,MAAM;SAAc;SAAE,EAAE,IAAI;QAClL,EAAA,CAAA,CACH;;OACJ,MAAM,YAAY,QACjB,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,gCAAA;QAAL,UAAA;SACG,EAAE,SAAS;SAAE;SAAI,EAAE,eAAe,CAAC,CACjC,QAAQ,UAAU,MAAM,QAAQ,KAAK,IAAI,CAAC,CAC1C,QAAQ,WAAW,OAAO,MAAM,QAAQ,KAAK,KAAK,CAAC,CAAC,CACpD,QAAQ,YAAY,MAAM,QAAQ,MAAM;QACxC;;OAEN,MAAM,aAAa,SAAS,KAC3B,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,gCAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;SAAK,8BAAA;SAA4B,UAAA,EAAE,UAAU;QAAO,CAAA,GACnD,MAAM,aAAa,KAAK,MAAM,UAC7B,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;SAAyB,4BAAA;SAAzB,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;UAAM,8BAAA;UAA4B,UAAA,KAAK;SAAe,CAAA,GACtD,iBAAA,GAAA,kBAAA,KAAA,CAAC,UAAD;UAAQ,MAAK;UAAS,gCAAA;UAA6B,eAAe,KAAK,WAAW,QAAQ,CAAC;UAA3F,UAAA;WACG,EAAE,SAAS;WAAE;WAAG,QAAQ;UACnB;SACL,CAAA,CAAA;QALK,GAAA,KAAK,QAKV,CACN,CACE;;OAEP,iBAAA,GAAA,kBAAA,KAAA,CAAC,OAAD;QAAK,gCAAA;QAAL,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;SAAK,8BAAA;SAA4B,UAAA,EAAE,QAAQ;QAAO,CAAA,GACjD,MAAM,OAAO,WAAW,IAAI,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;SAAK,8BAAA;SAA4B,UAAA,EAAE,OAAO;QAAO,CAAA,IAAI,aAAa,OAAO,CAAC,CACpG;;MACF,EAAA,CAAA;MAER,WAAW,QAAQ,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;OAAK,8BAAA;OAA4B,UAAA;MAAY,CAAA;KAC9D;IAEJ,CAAA,CAAA;;EAET;;;;;;;;;EC5JA,MAAa,KAAK;GAChB,OAAO;GACP,OAAO;GACP,OAAO;GACP,SAAS;GACT,UAAU;GACV,QAAQ;GACR,SAAS;GACT,UAAU;GACV,UAAU;GACV,SAAS;GACT,QAAQ;GACR,QAAQ;GACR,WAAW;GACX,cAAc;GACd,KAAK;GACL,SAAS;GACT,eAAe;GACf,OAAO;GACP,QAAQ;GACR,UAAU;GACV,SAAS;GACT,eAAe;GACf,eAAe;GACf,gBAAgB;GAChB,cAAc;GACd,aAAa;GACb,eAAe;GACf,cAAc;GACd,eAAe;GACf,iBAAiB;GACjB,SAAS;GACT,YAAY;GACZ,UAAU;GACV,IAAI;EACN;;EAMA,MAAa,KAA2C;GACtD,OAAO;GACP,OAAO;GACP,OAAO;GACP,SAAS;GACT,UAAU;GACV,QAAQ;GACR,SAAS;GACT,UAAU;GACV,UAAU;GACV,SAAS;GACT,QAAQ;GACR,QAAQ;GACR,WAAW;GACX,cAAc;GACd,KAAK;GACL,SAAS;GACT,eAAe;GACf,OAAO;GACP,QAAQ;GACR,UAAU;GACV,SAAS;GACT,eAAe;GACf,eAAe;GACf,gBAAgB;GAChB,cAAc;GACd,aAAa;GACb,eAAe;GACf,cAAc;GACd,eAAe;GACf,iBAAiB;GACjB,SAAS;GACT,YAAY;GACZ,UAAU;GACV,IAAI;EACN;;EAGA,MAAa,KAAK;;;;;;;;;EC/ElB,MAAM,WAAW;EAEjB,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgHZ,SAAgB,qBAAiC;GAC/C,IAAI,SAAS,eAAe,QAAQ,MAAM,MAAM,aAAa,KAAA;GAC7D,MAAM,UAAU,SAAS,cAAc,OAAO;GAC9C,QAAQ,KAAK;GACb,QAAQ,cAAc;GACtB,SAAS,KAAK,YAAY,OAAO;GACjC,aAAa;IACX,QAAQ,OAAO;GACjB;EACF;;;;EChGA,MAAa,OAAO;;EAGpB,MAAa,SAAS;GAAC;GAAS;GAAU;GAAU;EAAiB;;;;;;EA0BrE,SAAgB,MAAM,KAA0B;GAC9C,IAAI,aAAa,IAAI,OAAO,SAAS,IAAI;IAAE;IAAI;GAAG,CAAC,GAAG,+BAA+B;GACrF,IAAI,aAAa,mBAAmB,GAAG,6BAA6B;GACpE,IAAI,MAAM,OACR,6CACM,IAAI,MAAM,SAAS;IACvB,MAAM;IACN,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,SAAS,cAA8C;KACrD,MAAM,SAAS,IAAI;KACnB,MAAM,iBAAiB,OAAO,SAAkC;MAC9D,MAAM,SAAS,MAAM,OAAO,SAAS,QAAQ,WAAW,MAAM,CAAC,CAAC;MAChE,IAAI,CAAC,OAAO,IAAI,MAAM,IAAI,MAAM,GAAG,OAAO,MAAM,KAAK,IAAI,OAAO,MAAM,SAAS;MAC/E,IAAI,OAAO,UAAU,KAAA,GAAW,MAAM,IAAI,MAAM,+BAA+B;MAC/E,MAAM,UAAU,OAAO,MAAM;MAC7B,IAAI,YAAY,KAAA,GAAW,MAAM,IAAI,MAAM,yCAAyC;MACpF,MAAM,OAAO,QAAQ,QAAQ;MAC7B,OAAO,QAAQ,SAAS,YAAY,OAAO,GAAG,QAAQ,KAAK,IAAI;KACjE;KACA,OAAO;MACL,SAAS,OAAO,MAA+B,eAAe,wBAAwB,GAAG;MACzF,YAAY,OAAO,YAAsC,eAAe,gBAAgB,UAAU,OAAO,OAAO;KAClH;IACF;GACF,GAAG,WAAW,CAChB;EACF"}

package/lib/index.js

@@ -35,7 +35,7 @@ function isMarkedAuditEvent(result) {
 /**
 * Whether a `@deepseek-ai/dsh-session` version line predates the
 * `ignorable` envelope-marker surface: every released rc line through
-* `0.1.0-rc.7` silently drops the marker from `Session.append` options
+* `0.1.1-rc.2` silently drops the marker from `Session.append` options
 * (the stamping fix exists on harness master only — no release carries it
 * yet), so audit events written by those builds land unmarked and break
 * resume on stricter hosts. Extend the bound when a new rc line ships that
@@ -43,12 +43,15 @@ function isMarkedAuditEvent(result) {
 * versions are treated as possibly-marker-aware and verified by the append
 * probe.
 * @param version - the installed peer version string.
-* @returns true for the known-unmarked rc.1–rc.7 lines.
+* @returns true for the known-unmarked `0.1.0-rc.1–rc.8` and
+*   `0.1.1-rc.1–rc.2` lines.
 */
 function isUnmarkedHostVersion(version) {
-	const match = /^0\.1\.0-rc\.(\d+)$/.exec(version.trim());
+	const match = /^0\.1\.(\d+)-rc\.(\d+)$/.exec(version.trim());
 	if (match === null) return false;
-	return Number(match[1]) <= 7;
+	const minor = Number(match[1]);
+	const rc = Number(match[2]);
+	return minor === 0 && rc <= 8 || minor === 1 && rc <= 2;
 }
 /**
 * The installed `@deepseek-ai/dsh-session` version, or `null` when
@@ -4538,6 +4541,22 @@ function viewAutoReview(state) {
 		recentDenies: state.recentDenies
 	};
 }
+/** Strict state schema — validates the persisted fold state before it seeds a fold. */
+const AUTO_REVIEW_STATE_SCHEMA = object({
+	enabled: boolean(),
+	turnOpen: boolean(),
+	verdictsUsed: number().int().nonnegative(),
+	failuresUsed: number().int().nonnegative(),
+	allows: number().int().nonnegative(),
+	denies: number().int().nonnegative(),
+	fallbacks: number().int().nonnegative(),
+	neverRejects: number().int().nonnegative(),
+	durationSum: number().int().nonnegative(),
+	decided: number().int().nonnegative(),
+	circuit: CIRCUIT_VIEW_SCHEMA,
+	recent: array(VERDICT_VIEW_SCHEMA),
+	recentDenies: array(DENY_VIEW_SCHEMA)
+});
 /**
 * Build the registered unit for one mount. The unit's initial `enabled` is
 * the mount's resolved `enableByDefault` (the pure `init` cannot see plugin
@@ -4551,10 +4570,13 @@ function viewAutoReview(state) {
 function makeAutoReviewProjection(enabledByDefault) {
 	return {
 		key: "autoReview",
-		schema: AUTO_REVIEW_PROJECTION_SCHEMA,
+		stateSchema: AUTO_REVIEW_STATE_SCHEMA,
 		init: () => initAutoReviewProjection(enabledByDefault),
 		apply: applyAutoReview,
-		view: viewAutoReview,
+		wire: {
+			viewSchema: AUTO_REVIEW_PROJECTION_SCHEMA,
+			view: viewAutoReview
+		},
 		stateVersion: 2
 	};
 }
@@ -5567,4 +5589,4 @@ const inject = [
 	"tools"
 ];
 //#endregion
-export { AUTO_REVIEW_FALLBACKS, AUTO_REVIEW_PROJECTION_SCHEMA, AutoReviewCircuitId, AutoReviewRejectionId, AutoReviewRuntime, AutoReviewVerdictId, CIRCUIT_MARKER, CIRCUIT_MARKER_PATTERN, Config, DEFAULT_DENY_GUIDANCE, DENY_MARKER, DENY_MARKER_PATTERN, FALLBACK_MARKER, FALLBACK_MARKER_PATTERN, NEVER_MARKER, NEVER_MARKER_PATTERN, RISK_ORDER, VERDICT_SCHEMA, activeOverride, apply, applyAutoReview, autoReviewFailuresInOpenTurn, autoReviewsInOpenTurn, buildContextSection, buildReviewPrompt, circuitInOpenTurn, circuitResultText, consecutiveDeniesInOpenTurn, correlateApprovalId, deniesInRecentVerdicts, denyResultText, effectiveAutoReviewState, fallbackResultText, findPresentedCall, initAutoReviewProjection, inject, isDenial, isReviewFailure, lastDeniedVerdicts, makeAutoReviewProjection, name, neverResultText, newCircuitId, newRejectionId, newVerdictId, openTurnVerdicts, parseVerdict, plainCircuitResultText, plainDenyResultText, plainFallbackResultText, plainNeverResultText, renderCallContext, resolveConfig, reviewStats, riskExceeds, runReview, sanitizeArguments, sanitizedArgumentsText, truncate, viewAutoReview };
+export { AUTO_REVIEW_FALLBACKS, AUTO_REVIEW_PROJECTION_SCHEMA, AUTO_REVIEW_STATE_SCHEMA, AutoReviewCircuitId, AutoReviewRejectionId, AutoReviewRuntime, AutoReviewVerdictId, CIRCUIT_MARKER, CIRCUIT_MARKER_PATTERN, Config, DEFAULT_DENY_GUIDANCE, DENY_MARKER, DENY_MARKER_PATTERN, FALLBACK_MARKER, FALLBACK_MARKER_PATTERN, NEVER_MARKER, NEVER_MARKER_PATTERN, RISK_ORDER, VERDICT_SCHEMA, activeOverride, apply, applyAutoReview, autoReviewFailuresInOpenTurn, autoReviewsInOpenTurn, buildContextSection, buildReviewPrompt, circuitInOpenTurn, circuitResultText, consecutiveDeniesInOpenTurn, correlateApprovalId, deniesInRecentVerdicts, denyResultText, effectiveAutoReviewState, fallbackResultText, findPresentedCall, initAutoReviewProjection, inject, isDenial, isReviewFailure, lastDeniedVerdicts, makeAutoReviewProjection, name, neverResultText, newCircuitId, newRejectionId, newVerdictId, openTurnVerdicts, parseVerdict, plainCircuitResultText, plainDenyResultText, plainFallbackResultText, plainNeverResultText, renderCallContext, resolveConfig, reviewStats, riskExceeds, runReview, sanitizeArguments, sanitizedArgumentsText, truncate, viewAutoReview };

package/lib/types/audit.d.ts

@@ -28,7 +28,7 @@ export declare function isMarkedAuditEvent(result: unknown): boolean;
 /**
  * Whether a `@deepseek-ai/dsh-session` version line predates the
  * `ignorable` envelope-marker surface: every released rc line through
- * `0.1.0-rc.7` silently drops the marker from `Session.append` options
+ * `0.1.1-rc.2` silently drops the marker from `Session.append` options
  * (the stamping fix exists on harness master only — no release carries it
  * yet), so audit events written by those builds land unmarked and break
  * resume on stricter hosts. Extend the bound when a new rc line ships that
@@ -36,7 +36,8 @@ export declare function isMarkedAuditEvent(result: unknown): boolean;
  * versions are treated as possibly-marker-aware and verified by the append
  * probe.
  * @param version - the installed peer version string.
- * @returns true for the known-unmarked rc.1–rc.7 lines.
+ * @returns true for the known-unmarked `0.1.0-rc.1–rc.8` and
+ *   `0.1.1-rc.1–rc.2` lines.
  */
 export declare function isUnmarkedHostVersion(version: string): boolean;
 /**

package/lib/types/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,sGAAsG;AACtG,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,CAAA;AAElE;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAE3D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAI9D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAOlD"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,sGAAsG;AACtG,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,CAAA;AAElE;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAE3D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAM9D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAOlD"}

package/lib/types/audit.js

@@ -29,7 +29,7 @@ export function isMarkedAuditEvent(result) {
 /**
  * Whether a `@deepseek-ai/dsh-session` version line predates the
  * `ignorable` envelope-marker surface: every released rc line through
- * `0.1.0-rc.7` silently drops the marker from `Session.append` options
+ * `0.1.1-rc.2` silently drops the marker from `Session.append` options
  * (the stamping fix exists on harness master only — no release carries it
  * yet), so audit events written by those builds land unmarked and break
  * resume on stricter hosts. Extend the bound when a new rc line ships that
@@ -37,13 +37,16 @@ export function isMarkedAuditEvent(result) {
  * versions are treated as possibly-marker-aware and verified by the append
  * probe.
  * @param version - the installed peer version string.
- * @returns true for the known-unmarked rc.1–rc.7 lines.
+ * @returns true for the known-unmarked `0.1.0-rc.1–rc.8` and
+ *   `0.1.1-rc.1–rc.2` lines.
  */
 export function isUnmarkedHostVersion(version) {
-    const match = /^0\.1\.0-rc\.(\d+)$/.exec(version.trim());
+    const match = /^0\.1\.(\d+)-rc\.(\d+)$/.exec(version.trim());
     if (match === null)
         return false;
-    return Number(match[1]) <= 7;
+    const minor = Number(match[1]);
+    const rc = Number(match[2]);
+    return (minor === 0 && rc <= 8) || (minor === 1 && rc <= 2);
 }
 /**
  * The installed `@deepseek-ai/dsh-session` version, or `null` when

package/lib/types/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAK3C;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe;IAChD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAK,MAAkC,CAAC,SAAS,KAAK,IAAI,CAAA;AAChH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IACxD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAChC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,uCAAuC,CAA0B,CAAA;QAC5G,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAK3C;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe;IAChD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAK,MAAkC,CAAC,SAAS,KAAK,IAAI,CAAA;AAChH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IAC5D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9B,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3B,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,uCAAuC,CAA0B,CAAA;QAC5G,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/types/client/index.js

@@ -31,7 +31,7 @@ export function apply(ctx) {
         inject: (sessionId) => {
             const remote = ctx.remote;
             const executeCommand = async (line) => {
-                const result = await remote.commands.execute(sessionId, line);
+                const result = await remote.commands.execute(sessionId, line, []);
                 if (!result.ok)
                     throw new Error(`${result.error.code}: ${result.error.message}`);
                 if (result.value === undefined)

package/lib/types/client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH,OAAO,EAAE,WAAW,EAA4B,MAAM,kBAAmB,CAAA;AACzE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAA6B,MAAM,cAAc,CAAA;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAWhD,OAAO,EAAE,cAAc,EAA2C,MAAM,cAAc,CAAA;AAEtF,kFAAkF;AAClF,MAAM,CAAC,MAAM,IAAI,GAAG,iBAAiB,CAAA;AAErC,wFAAwF;AACxF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAA;AAqBtE;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,GAAkB;IACtC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,+BAA+B,CAAC,CAAA;IACtF,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,EAAE,6BAA6B,CAAC,CAAA;IACrE,GAAG,CAAC,KAAK,CAAC,MAAM,CACd,qCAAqC,EACrC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;QACvB,IAAI,EAAE,qCAAqC;QAC3C,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,CAAC,SAAoB,EAAuB,EAAE;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAiD,CAAA;YACpE,MAAM,cAAc,GAAG,KAAK,EAAE,IAAY,EAAmB,EAAE;gBAC7D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;gBAC7D,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBAChF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;gBAChF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAA;gBACnC,IAAI,OAAO,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;gBACrF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAA;gBAC/B,OAAO,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAA;YACvE,CAAC,CAAA;YACD,OAAO;gBACL,OAAO,EAAE,KAAK,EAAE,CAAS,EAAmB,EAAE,CAAC,cAAc,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBAC1F,UAAU,EAAE,KAAK,EAAE,OAAgB,EAAmB,EAAE,CAAC,cAAc,CAAC,gBAAgB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;aAClH,CAAA;QACH,CAAC;KACF,EAAE,WAAW,CAAC,CAChB,CAAA;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH,OAAO,EAAE,WAAW,EAA4B,MAAM,kBAAmB,CAAA;AACzE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAA6B,MAAM,cAAc,CAAA;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAWhD,OAAO,EAAE,cAAc,EAA2C,MAAM,cAAc,CAAA;AAEtF,kFAAkF;AAClF,MAAM,CAAC,MAAM,IAAI,GAAG,iBAAiB,CAAA;AAErC,wFAAwF;AACxF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAA;AAqBtE;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,GAAkB;IACtC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,+BAA+B,CAAC,CAAA;IACtF,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,EAAE,6BAA6B,CAAC,CAAA;IACrE,GAAG,CAAC,KAAK,CAAC,MAAM,CACd,qCAAqC,EACrC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;QACvB,IAAI,EAAE,qCAAqC;QAC3C,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,CAAC,SAAoB,EAAuB,EAAE;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAiD,CAAA;YACpE,MAAM,cAAc,GAAG,KAAK,EAAE,IAAY,EAAmB,EAAE;gBAC7D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;gBACjE,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBAChF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;gBAChF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAA;gBACnC,IAAI,OAAO,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;gBACrF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAA;gBAC/B,OAAO,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAA;YACvE,CAAC,CAAA;YACD,OAAO;gBACL,OAAO,EAAE,KAAK,EAAE,CAAS,EAAmB,EAAE,CAAC,cAAc,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBAC1F,UAAU,EAAE,KAAK,EAAE,OAAgB,EAAmB,EAAE,CAAC,cAAc,CAAC,gBAAgB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;aAClH,CAAA;QACH,CAAC;KACF,EAAE,WAAW,CAAC,CAChB,CAAA;AACH,CAAC"}

package/lib/types/projection-types.d.ts

@@ -53,9 +53,33 @@ export interface AutoReviewProjection {
     /** The last 5 denials, newest first (approve candidates; index 0 = approve 1). */
     readonly recentDenies: readonly AutoReviewDenyView[];
 }
+/**
+ * The host fold state behind the `autoReview` projection unit — plain JSON
+ * (the persisted-cache precondition). It carries the internal counters the
+ * wire value derives `avgDurationMs` from (`durationSum`/`decided`) and the
+ * open-turn gate (`turnOpen`) that the client never needs.
+ */
+export interface AutoReviewProjectionState {
+    readonly enabled: boolean;
+    readonly turnOpen: boolean;
+    readonly verdictsUsed: number;
+    readonly failuresUsed: number;
+    readonly allows: number;
+    readonly denies: number;
+    readonly fallbacks: number;
+    readonly neverRejects: number;
+    readonly durationSum: number;
+    readonly decided: number;
+    readonly circuit: AutoReviewProjection['circuit'];
+    readonly recent: readonly AutoReviewVerdictView[];
+    readonly recentDenies: readonly AutoReviewDenyView[];
+}
 declare module '@deepseek-ai/dsh-session-projection/types' {
     interface SessionProjectionMap {
         autoReview: AutoReviewProjection;
     }
+    interface SessionProjectionStateMap {
+        autoReview: AutoReviewProjectionState;
+    }
 }
 //# sourceMappingURL=projection-types.d.ts.map

package/lib/types/projection-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projection-types.d.ts","sourceRoot":"","sources":["../../src/projection-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,4CAA4C;AAC5C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAA;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,kGAAkG;IAClG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,iDAAiD;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,kDAAkD;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,gDAAgD;IAChD,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,YAAY,CAAA;QACrD,QAAQ,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,QAAQ,CAAC;YAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;QAClF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAC1B,GAAG,IAAI,CAAA;IACR,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAA;IACjD,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAA;CACrD;AAED,OAAO,QAAQ,2CAA2C,CAAC;IACzD,UAAU,oBAAoB;QAC5B,UAAU,EAAE,oBAAoB,CAAA;KACjC;CACF"}
+{"version":3,"file":"projection-types.d.ts","sourceRoot":"","sources":["../../src/projection-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,4CAA4C;AAC5C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAA;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,kGAAkG;IAClG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,iDAAiD;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,kDAAkD;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,gDAAgD;IAChD,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,YAAY,CAAA;QACrD,QAAQ,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,QAAQ,CAAC;YAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;QAClF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAC1B,GAAG,IAAI,CAAA;IACR,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAA;IACjD,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAA;CACrD;AAED;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAA;IACjD,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAA;IACjD,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAA;CACrD;AAED,OAAO,QAAQ,2CAA2C,CAAC;IACzD,UAAU,oBAAoB;QAC5B,UAAU,EAAE,oBAAoB,CAAA;KACjC;IACD,UAAU,yBAAyB;QACjC,UAAU,EAAE,yBAAyB,CAAA;KACtC;CACF"}

package/lib/types/projection.d.ts

@@ -9,7 +9,7 @@
 import { z } from 'zod';
 import type { ProjectionDefinition } from '@deepseek-ai/dsh-session-projection';
 import type { SessionEvent } from '@deepseek-ai/dsh-session';
-import type { AutoReviewDenyView, AutoReviewProjection, AutoReviewVerdictView } from './projection-types.js';
+import type { AutoReviewProjection, AutoReviewProjectionState } from './projection-types.js';
 /** Strict wire schema — validates the `view` output before it leaves the host. */
 export declare const AUTO_REVIEW_PROJECTION_SCHEMA: z.ZodObject<{
     enabled: z.ZodBoolean;
@@ -46,22 +46,6 @@ export declare const AUTO_REVIEW_PROJECTION_SCHEMA: z.ZodObject<{
         reason: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
-/** The fold's plain-JSON state (the persisted-cache precondition). */
-export interface AutoReviewProjectionState {
-    readonly enabled: boolean;
-    readonly turnOpen: boolean;
-    readonly verdictsUsed: number;
-    readonly failuresUsed: number;
-    readonly allows: number;
-    readonly denies: number;
-    readonly fallbacks: number;
-    readonly neverRejects: number;
-    readonly durationSum: number;
-    readonly decided: number;
-    readonly circuit: AutoReviewProjection['circuit'];
-    readonly recent: readonly AutoReviewVerdictView[];
-    readonly recentDenies: readonly AutoReviewDenyView[];
-}
 /**
  * State for the empty log. `enabled` starts at the resolved
  * `enableByDefault` — the projection cannot know the plugin config on its
@@ -79,6 +63,52 @@ export declare function initAutoReviewProjection(enabledByDefault: boolean): Aut
 export declare function applyAutoReview(state: AutoReviewProjectionState, event: SessionEvent): AutoReviewProjectionState;
 /** State → wire payload (the read-side projection). */
 export declare function viewAutoReview(state: AutoReviewProjectionState): AutoReviewProjection;
+/** Strict state schema — validates the persisted fold state before it seeds a fold. */
+export declare const AUTO_REVIEW_STATE_SCHEMA: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    turnOpen: z.ZodBoolean;
+    verdictsUsed: z.ZodNumber;
+    failuresUsed: z.ZodNumber;
+    allows: z.ZodNumber;
+    denies: z.ZodNumber;
+    fallbacks: z.ZodNumber;
+    neverRejects: z.ZodNumber;
+    durationSum: z.ZodNumber;
+    decided: z.ZodNumber;
+    circuit: z.ZodNullable<z.ZodObject<{
+        action: z.ZodUnion<readonly [z.ZodLiteral<"delegate">, z.ZodLiteral<"reject">, z.ZodLiteral<"abort-turn">]>;
+        trip: z.ZodObject<{
+            kind: z.ZodUnion<readonly [z.ZodLiteral<"consecutive">, z.ZodLiteral<"window">]>;
+            count: z.ZodNumber;
+        }, z.core.$strip>;
+        toolName: z.ZodString;
+    }, z.core.$strip>>;
+    recent: z.ZodArray<z.ZodObject<{
+        reviewId: z.ZodString;
+        toolName: z.ZodString;
+        at: z.ZodNumber;
+        durationMs: z.ZodNumber;
+        decision: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"allow">, z.ZodLiteral<"deny">]>>;
+        riskLevel: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"low">, z.ZodLiteral<"medium">, z.ZodLiteral<"high">]>>;
+        escalation: z.ZodOptional<z.ZodLiteral<"risk-policy">>;
+        fallback: z.ZodOptional<z.ZodString>;
+        outcome: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"allowed-once">, z.ZodLiteral<"rejected">, z.ZodLiteral<"cancelled">, z.ZodLiteral<"unavailable">]>>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    recentDenies: z.ZodArray<z.ZodObject<{
+        reviewId: z.ZodString;
+        toolName: z.ZodString;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/**
+ * The register-ready client-visible unit shape: the rc2 `register` overload
+ * requires `wire` to be PRESENT for a `SessionProjectionMap` key (the plain
+ * `ProjectionDefinition` keeps `wire` optional for host-only units).
+ */
+type AutoReviewProjectionUnit = Omit<ProjectionDefinition<'autoReview', AutoReviewProjectionState>, 'wire'> & {
+    wire: NonNullable<ProjectionDefinition<'autoReview', AutoReviewProjectionState>['wire']>;
+};
 /**
  * Build the registered unit for one mount. The unit's initial `enabled` is
  * the mount's resolved `enableByDefault` (the pure `init` cannot see plugin
@@ -89,5 +119,6 @@ export declare function viewAutoReview(state: AutoReviewProjectionState): AutoRe
  * @param enabledByDefault - the resolved `enableByDefault` config value.
  * @returns the projection unit for `ctx.sessionProjections.register`.
  */
-export declare function makeAutoReviewProjection(enabledByDefault: boolean): ProjectionDefinition<'autoReview', AutoReviewProjectionState>;
+export declare function makeAutoReviewProjection(enabledByDefault: boolean): AutoReviewProjectionUnit;
+export {};
 //# sourceMappingURL=projection.d.ts.map

package/lib/types/projection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../src/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAmB,MAAM,0BAA0B,CAAA;AAC7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAmC5G,kFAAkF;AAClF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAYxC,CAAA;AAEF,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAA;IACjD,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAA;IACjD,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAA;CACrD;AAKD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,gBAAgB,EAAE,OAAO,GAAG,yBAAyB,CAgB7F;AA6BD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,YAAY,GAAG,yBAAyB,CAyChH;AAED,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,KAAK,EAAE,yBAAyB,GAAG,oBAAoB,CAcrF;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,gBAAgB,EAAE,OAAO,GAAG,oBAAoB,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAajI"}
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../src/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAmB,MAAM,0BAA0B,CAAA;AAC7E,OAAO,KAAK,EAAsB,oBAAoB,EAAE,yBAAyB,EAAyB,MAAM,uBAAuB,CAAA;AAmCvI,kFAAkF;AAClF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAYxC,CAAA;AAKF;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,gBAAgB,EAAE,OAAO,GAAG,yBAAyB,CAgB7F;AA6BD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,YAAY,GAAG,yBAAyB,CAyChH;AAED,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,KAAK,EAAE,yBAAyB,GAAG,oBAAoB,CAcrF;AAED,uFAAuF;AACvF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAcnC,CAAA;AAEF;;;;GAIG;AACH,KAAK,wBAAwB,GAAG,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,yBAAyB,CAAC,EAAE,MAAM,CAAC,GAAG;IAC5G,IAAI,EAAE,WAAW,CAAC,oBAAoB,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;CACzF,CAAA;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,gBAAgB,EAAE,OAAO,GAAG,wBAAwB,CAgB5F"}

package/lib/types/projection.js

@@ -170,6 +170,22 @@ export function viewAutoReview(state) {
         recentDenies: state.recentDenies,
     };
 }
+/** Strict state schema — validates the persisted fold state before it seeds a fold. */
+export const AUTO_REVIEW_STATE_SCHEMA = z.object({
+    enabled: z.boolean(),
+    turnOpen: z.boolean(),
+    verdictsUsed: z.number().int().nonnegative(),
+    failuresUsed: z.number().int().nonnegative(),
+    allows: z.number().int().nonnegative(),
+    denies: z.number().int().nonnegative(),
+    fallbacks: z.number().int().nonnegative(),
+    neverRejects: z.number().int().nonnegative(),
+    durationSum: z.number().int().nonnegative(),
+    decided: z.number().int().nonnegative(),
+    circuit: CIRCUIT_VIEW_SCHEMA,
+    recent: z.array(VERDICT_VIEW_SCHEMA),
+    recentDenies: z.array(DENY_VIEW_SCHEMA),
+});
 /**
  * Build the registered unit for one mount. The unit's initial `enabled` is
  * the mount's resolved `enableByDefault` (the pure `init` cannot see plugin
@@ -185,10 +201,13 @@ export function makeAutoReviewProjection(enabledByDefault) {
         key: 'autoReview',
         // zod v4's `.optional()` output carries `| undefined`, which exact-optional
         // property types reject; the runtime validation is what matters on the wire.
-        schema: AUTO_REVIEW_PROJECTION_SCHEMA,
+        stateSchema: AUTO_REVIEW_STATE_SCHEMA,
         init: () => initAutoReviewProjection(enabledByDefault),
         apply: applyAutoReview,
-        view: viewAutoReview,
+        wire: {
+            viewSchema: AUTO_REVIEW_PROJECTION_SCHEMA,
+            view: viewAutoReview,
+        },
         // v2: `init.enabled` follows `enableByDefault` (was hardcoded true) and the
         // wire gained the cumulative `neverRejects` counter.
         stateVersion: 2,

package/lib/types/projection.js.map

@@ -1 +1 @@
-{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAKvB,+CAA+C;AAC/C,MAAM,UAAU,GAAG,CAAC,CAAA;AACpB,oDAAoD;AACpD,MAAM,UAAU,GAAG,CAAC,CAAA;AAEpB,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzF,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjI,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAA;AAEF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC,QAAQ,EAAE,CAAA;AAEb,kFAAkF;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,OAAO,EAAE,mBAAmB;IAC5B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACxC,CAAC,CAAA;AAsBF;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,gBAAyB;IAChE,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,CAAC;QACf,YAAY,EAAE,CAAC;QACf,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,CAAC;QACZ,YAAY,EAAE,CAAC;QACf,WAAW,EAAE,CAAC;QACd,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,EAAE;QACV,YAAY,EAAE,EAAE;KACjB,CAAA;AACH,CAAC;AAED,0CAA0C;AAC1C,SAAS,WAAW,CAAC,IAA2C,EAAE,EAAU;IAC1E,MAAM,IAAI,GAAmC;QAC3C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,EAAE;QACF,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAA;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC9D,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;IACjE,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;IACpE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC9D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IACxD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,2CAA2C;AAC3C,SAAS,QAAQ,CAAC,IAA2C;IAC3D,MAAM,IAAI,GAAgC;QACxC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAA;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IACxD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAgC,EAAE,KAAmB;IACnF,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,YAAY;YACf,OAAO,KAAK,CAAC,QAAQ;gBACnB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QACnF,KAAK,UAAU;YACb,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;QAC/D,KAAK,kBAAkB;YACrB,OAAO,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAA;QACjG,KAAK,oBAAoB;YACvB,OAAO;gBACL,GAAG,KAAK;gBACR,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;aAC7F,CAAA;QACH,KAAK,sBAAsB;YACzB,OAAO,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,CAAA;QAC3D,KAAK,oBAAoB,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAA;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW,CAAA;YAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,KAAK,aAAa,CAAA;YAC5E,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YACzC,OAAO;gBACL,GAAG,KAAK;gBACR,YAAY,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY;gBACtF,YAAY,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY;gBACrF,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzD,SAAS,EAAE,KAAK,CAAC,SAAS,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,WAAW,EAAE,KAAK,CAAC,WAAW,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjE,OAAO,EAAE,KAAK,CAAC,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;gBACnD,YAAY,EAAE,MAAM;oBAClB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;oBAC9D,CAAC,CAAC,KAAK,CAAC,YAAY;aACvB,CAAA;QACH,CAAC;QACD;YACE,OAAO,KAAK,CAAA;IAChB,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,cAAc,CAAC,KAAgC;IAC7D,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC;QACtF,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,gBAAyB;IAChE,OAAO;QACL,GAAG,EAAE,YAAY;QACjB,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,EAAE,6BAAmH;QAC3H,IAAI,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC;QACtD,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,cAAc;QACpB,4EAA4E;QAC5E,qDAAqD;QACrD,YAAY,EAAE,CAAC;KAChB,CAAA;AACH,CAAC"}
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAKvB,+CAA+C;AAC/C,MAAM,UAAU,GAAG,CAAC,CAAA;AACpB,oDAAoD;AACpD,MAAM,UAAU,GAAG,CAAC,CAAA;AAEpB,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzF,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjI,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAA;AAEF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC,QAAQ,EAAE,CAAA;AAEb,kFAAkF;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,OAAO,EAAE,mBAAmB;IAC5B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACxC,CAAC,CAAA;AAKF;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,gBAAyB;IAChE,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,CAAC;QACf,YAAY,EAAE,CAAC;QACf,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,CAAC;QACZ,YAAY,EAAE,CAAC;QACf,WAAW,EAAE,CAAC;QACd,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,EAAE;QACV,YAAY,EAAE,EAAE;KACjB,CAAA;AACH,CAAC;AAED,0CAA0C;AAC1C,SAAS,WAAW,CAAC,IAA2C,EAAE,EAAU;IAC1E,MAAM,IAAI,GAAmC;QAC3C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,EAAE;QACF,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAA;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC9D,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;IACjE,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;IACpE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC9D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IACxD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,2CAA2C;AAC3C,SAAS,QAAQ,CAAC,IAA2C;IAC3D,MAAM,IAAI,GAAgC;QACxC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAA;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IACxD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAgC,EAAE,KAAmB;IACnF,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,YAAY;YACf,OAAO,KAAK,CAAC,QAAQ;gBACnB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QACnF,KAAK,UAAU;YACb,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;QAC/D,KAAK,kBAAkB;YACrB,OAAO,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAA;QACjG,KAAK,oBAAoB;YACvB,OAAO;gBACL,GAAG,KAAK;gBACR,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;aAC7F,CAAA;QACH,KAAK,sBAAsB;YACzB,OAAO,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,CAAA;QAC3D,KAAK,oBAAoB,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAA;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW,CAAA;YAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,KAAK,aAAa,CAAA;YAC5E,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YACzC,OAAO;gBACL,GAAG,KAAK;gBACR,YAAY,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY;gBACtF,YAAY,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY;gBACrF,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzD,SAAS,EAAE,KAAK,CAAC,SAAS,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,WAAW,EAAE,KAAK,CAAC,WAAW,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjE,OAAO,EAAE,KAAK,CAAC,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;gBACnD,YAAY,EAAE,MAAM;oBAClB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;oBAC9D,CAAC,CAAC,KAAK,CAAC,YAAY;aACvB,CAAA;QACH,CAAC;QACD;YACE,OAAO,KAAK,CAAA;IAChB,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,cAAc,CAAC,KAAgC;IAC7D,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC;QACtF,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAA;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,OAAO,EAAE,mBAAmB;IAC5B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACxC,CAAC,CAAA;AAWF;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,gBAAyB;IAChE,OAAO;QACL,GAAG,EAAE,YAAY;QACjB,4EAA4E;QAC5E,6EAA6E;QAC7E,WAAW,EAAE,wBAAmH;QAChI,IAAI,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC;QACtD,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE;YACJ,UAAU,EAAE,6BAA4I;YACxJ,IAAI,EAAE,cAAc;SACrB;QACD,4EAA4E;QAC5E,qDAAqD;QACrD,YAAY,EAAE,CAAC;KAChB,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-auto-review",
-  "version": "0.5.2",
+  "version": "0.5.4",
   "description": "Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent decides allow/deny on the approval answerer chain, with fail-closed fallback and full session-log audit.",
   "private": false,
   "author": {
@@ -101,7 +101,7 @@
     ],
     "compatibility": {
       "dshVersions": [
-        "0.1.0-rc.7"
+        "0.1.1-rc.2"
       ]
     },
     "capability": {
@@ -134,35 +134,35 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-brand": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-commands": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-invariants": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-session": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-session-projection": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-subagent": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-tools": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-user-approval": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-agent": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-brand": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-commands": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-invariants": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-llm": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-session": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-session-projection": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-subagent": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-tools": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-user-approval": ">=0.1.0-rc.8 <0.2.0",
     "@deepseek-ai/schemastery": "^3.18.0"
   },
   "dependencies": {
-    "@deepseek-ai/dsh-agent-spine-demo": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-app-boot": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-credentials-local": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-fs-observation-policy": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-fs-sandbox": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-home-paths": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-llm-deepseek": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-sandbox-local": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-settings-file": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-subagent-fork-in-process": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-subprocess-local": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-tool-fs": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-tool-fs-search": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-agent-spine-demo": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-app-boot": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-fs-observation-policy": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-fs-sandbox": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm-deepseek": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-settings-file": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-subagent-fork-in-process": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tool-fs": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tool-fs-search": "0.1.1-rc.2",
     "tsdown": "^0.22.14",
     "typescript": "^7.0.2",
     "yaml": "^2.8.2",
@@ -172,22 +172,22 @@
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/cordis-plugin-include": "1.0.6",
     "@deepseek-ai/cordis-plugin-loader": "1.0.2",
-    "@deepseek-ai/dsh-agent": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-api-remotes": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-brand": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-connection": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-locale": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-runtime": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-commands": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-invariants": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-session": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-session-projection": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-subagent": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-tools": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-user-approval": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-agent": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-api-remotes": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-brand": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-connection": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-commands": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-invariants": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-subagent": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.1-rc.2",
     "@deepseek-ai/schemastery": "^3.18.0",
     "@types/node": "^26.2.0",
     "@types/react": "18.3.31",
@@ -198,6 +198,7 @@
     "react-dom": "18.3.1",
     "vitest": "^4.1.10"
   },
+  "license": "Apache-2.0",
   "scripts": {
     "build": "node scripts/prepare.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json --noEmit",
@@ -205,9 +206,6 @@
     "test:coverage": "vitest run --coverage",
     "lint": "oxlint",
     "check:readmes": "node scripts/check-readme-sync.mjs",
-    "prepare": "node scripts/prepare.mjs",
-    "verify:self-contained": "node scripts/verify-self-contained.mjs",
-    "prepublishOnly": "pnpm run typecheck && pnpm test && pnpm run build && pnpm run verify:self-contained"
-  },
-  "license": "Apache-2.0"
-}
+    "verify:self-contained": "node scripts/verify-self-contained.mjs"
+  }
+}

package/src/audit.ts

@@ -35,7 +35,7 @@ export function isMarkedAuditEvent(result: unknown): boolean {
 /**
  * Whether a `@deepseek-ai/dsh-session` version line predates the
  * `ignorable` envelope-marker surface: every released rc line through
- * `0.1.0-rc.7` silently drops the marker from `Session.append` options
+ * `0.1.1-rc.2` silently drops the marker from `Session.append` options
  * (the stamping fix exists on harness master only — no release carries it
  * yet), so audit events written by those builds land unmarked and break
  * resume on stricter hosts. Extend the bound when a new rc line ships that
@@ -43,12 +43,15 @@ export function isMarkedAuditEvent(result: unknown): boolean {
  * versions are treated as possibly-marker-aware and verified by the append
  * probe.
  * @param version - the installed peer version string.
- * @returns true for the known-unmarked rc.1–rc.7 lines.
+ * @returns true for the known-unmarked `0.1.0-rc.1–rc.8` and
+ *   `0.1.1-rc.1–rc.2` lines.
  */
 export function isUnmarkedHostVersion(version: string): boolean {
-  const match = /^0\.1\.0-rc\.(\d+)$/.exec(version.trim())
+  const match = /^0\.1\.(\d+)-rc\.(\d+)$/.exec(version.trim())
   if (match === null) return false
-  return Number(match[1]) <= 7
+  const minor = Number(match[1])
+  const rc = Number(match[2])
+  return (minor === 0 && rc <= 8) || (minor === 1 && rc <= 2)
 }
 
 /**

package/src/client/index.ts

@@ -49,7 +49,7 @@ interface CommandsRemote {
   readonly execute: (
     agentId: SessionId,
     line: string,
-    signal?: AbortSignal,
+    images?: readonly unknown[],
   ) => Promise<
     | { ok: false; error: { code: string; message: string } }
     | { ok: true; value?: { result?: { kind?: string; text?: string } } }
@@ -74,7 +74,7 @@ export function apply(ctx: ClientContext): void {
       inject: (sessionId: SessionId): ReviewPanelInjected => {
         const remote = ctx.remote as unknown as { commands: CommandsRemote }
         const executeCommand = async (line: string): Promise<string> => {
-          const result = await remote.commands.execute(sessionId, line)
+          const result = await remote.commands.execute(sessionId, line, [])
           if (!result.ok) throw new Error(`${result.error.code}: ${result.error.message}`)
           if (result.value === undefined) throw new Error('unknown command: /auto-review')
           const command = result.value.result

package/src/projection-types.ts

@@ -54,8 +54,33 @@ export interface AutoReviewProjection {
   readonly recentDenies: readonly AutoReviewDenyView[]
 }
 
+/**
+ * The host fold state behind the `autoReview` projection unit — plain JSON
+ * (the persisted-cache precondition). It carries the internal counters the
+ * wire value derives `avgDurationMs` from (`durationSum`/`decided`) and the
+ * open-turn gate (`turnOpen`) that the client never needs.
+ */
+export interface AutoReviewProjectionState {
+  readonly enabled: boolean
+  readonly turnOpen: boolean
+  readonly verdictsUsed: number
+  readonly failuresUsed: number
+  readonly allows: number
+  readonly denies: number
+  readonly fallbacks: number
+  readonly neverRejects: number
+  readonly durationSum: number
+  readonly decided: number
+  readonly circuit: AutoReviewProjection['circuit']
+  readonly recent: readonly AutoReviewVerdictView[]
+  readonly recentDenies: readonly AutoReviewDenyView[]
+}
+
 declare module '@deepseek-ai/dsh-session-projection/types' {
   interface SessionProjectionMap {
     autoReview: AutoReviewProjection
   }
+  interface SessionProjectionStateMap {
+    autoReview: AutoReviewProjectionState
+  }
 }

package/src/projection.ts

@@ -10,7 +10,7 @@
 import { z } from 'zod'
 import type { ProjectionDefinition } from '@deepseek-ai/dsh-session-projection'
 import type { SessionEvent, SessionEventMap } from '@deepseek-ai/dsh-session'
-import type { AutoReviewDenyView, AutoReviewProjection, AutoReviewVerdictView } from './projection-types.ts'
+import type { AutoReviewDenyView, AutoReviewProjection, AutoReviewProjectionState, AutoReviewVerdictView } from './projection-types.ts'
 
 /** How many verdict rows the panel carries. */
 const RECENT_CAP = 8
@@ -60,23 +60,6 @@ export const AUTO_REVIEW_PROJECTION_SCHEMA = z.object({
   recentDenies: z.array(DENY_VIEW_SCHEMA),
 })
 
-/** The fold's plain-JSON state (the persisted-cache precondition). */
-export interface AutoReviewProjectionState {
-  readonly enabled: boolean
-  readonly turnOpen: boolean
-  readonly verdictsUsed: number
-  readonly failuresUsed: number
-  readonly allows: number
-  readonly denies: number
-  readonly fallbacks: number
-  readonly neverRejects: number
-  readonly durationSum: number
-  readonly decided: number
-  readonly circuit: AutoReviewProjection['circuit']
-  readonly recent: readonly AutoReviewVerdictView[]
-  readonly recentDenies: readonly AutoReviewDenyView[]
-}
-
 /** Drop `readonly` from a view type so a fold can fill optional fields conditionally. */
 type Mutable<T> = { -readonly [K in keyof T]: T[K] }
 
@@ -198,6 +181,32 @@ export function viewAutoReview(state: AutoReviewProjectionState): AutoReviewProj
   }
 }
 
+/** Strict state schema — validates the persisted fold state before it seeds a fold. */
+export const AUTO_REVIEW_STATE_SCHEMA = z.object({
+  enabled: z.boolean(),
+  turnOpen: z.boolean(),
+  verdictsUsed: z.number().int().nonnegative(),
+  failuresUsed: z.number().int().nonnegative(),
+  allows: z.number().int().nonnegative(),
+  denies: z.number().int().nonnegative(),
+  fallbacks: z.number().int().nonnegative(),
+  neverRejects: z.number().int().nonnegative(),
+  durationSum: z.number().int().nonnegative(),
+  decided: z.number().int().nonnegative(),
+  circuit: CIRCUIT_VIEW_SCHEMA,
+  recent: z.array(VERDICT_VIEW_SCHEMA),
+  recentDenies: z.array(DENY_VIEW_SCHEMA),
+})
+
+/**
+ * The register-ready client-visible unit shape: the rc2 `register` overload
+ * requires `wire` to be PRESENT for a `SessionProjectionMap` key (the plain
+ * `ProjectionDefinition` keeps `wire` optional for host-only units).
+ */
+type AutoReviewProjectionUnit = Omit<ProjectionDefinition<'autoReview', AutoReviewProjectionState>, 'wire'> & {
+  wire: NonNullable<ProjectionDefinition<'autoReview', AutoReviewProjectionState>['wire']>
+}
+
 /**
  * Build the registered unit for one mount. The unit's initial `enabled` is
  * the mount's resolved `enableByDefault` (the pure `init` cannot see plugin
@@ -208,15 +217,18 @@ export function viewAutoReview(state: AutoReviewProjectionState): AutoReviewProj
  * @param enabledByDefault - the resolved `enableByDefault` config value.
  * @returns the projection unit for `ctx.sessionProjections.register`.
  */
-export function makeAutoReviewProjection(enabledByDefault: boolean): ProjectionDefinition<'autoReview', AutoReviewProjectionState> {
+export function makeAutoReviewProjection(enabledByDefault: boolean): AutoReviewProjectionUnit {
   return {
     key: 'autoReview',
     // zod v4's `.optional()` output carries `| undefined`, which exact-optional
     // property types reject; the runtime validation is what matters on the wire.
-    schema: AUTO_REVIEW_PROJECTION_SCHEMA as unknown as ProjectionDefinition<'autoReview', AutoReviewProjectionState>['schema'],
+    stateSchema: AUTO_REVIEW_STATE_SCHEMA as unknown as ProjectionDefinition<'autoReview', AutoReviewProjectionState>['stateSchema'],
     init: () => initAutoReviewProjection(enabledByDefault),
     apply: applyAutoReview,
-    view: viewAutoReview,
+    wire: {
+      viewSchema: AUTO_REVIEW_PROJECTION_SCHEMA as unknown as NonNullable<ProjectionDefinition<'autoReview', AutoReviewProjectionState>['wire']>['viewSchema'],
+      view: viewAutoReview,
+    },
     // v2: `init.enabled` follows `enableByDefault` (was hardcoded true) and the
     // wire gained the cumulative `neverRejects` counter.
     stateVersion: 2,