dsh-desktop-kit 2.7.7 → 2.7.8

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 2.7.8 (2026-11-12)
+
+- **Permissions UI.** Настройки → **Права**: эффективный preset DSH (`current`), sandbox/approval, каталог пресетов, жёсткие правила kit и защищённые пути. Страница read-only, без второго picker и без хранения approvals.
+- **Guardrails RPC.** `/api/dsh-guardrails/permissions`: `catalog/current/resolve/optionOf` + снимок политики; привязка к сессии и workspace.
+- **UI.** 390/768/1440: overflow 0, console 0, markup 0; скриншоты 1440/390.
+- **2.7.7** (staged) содержала MCP prompts; 2.7.8 включает и prompts, и Permissions UI.
+
 ## 2.7.7 (2026-11-12)
 
 - **MCP prompts.** Settings → MCP → **Prompts**: список промптов сервера, аргументы, запуск, результат и копирование. Новые RPC `prompts`/`prompt`; клиент поддерживает `prompts/list` и `prompts/get` с пагинацией.

package/README.md

@@ -4,17 +4,17 @@
 
 Набор из **16 плагинов и 30 навыков** для DeepSeek Harness 0.2.x: русский интерфейс, автопилот навыков, токен-лаборатория, студия навыков, память проектов, обмен памятью между машинами (GitHub и USB), guardrails, карта репозитория, чекпоинты, plan mode, browser QA, GitHub review, Claude Code-подобные hooks/agents/commands, перенос чатов и резервные копии профиля.
 
-![DSH Desktop Kit 2.7](https://unpkg.com/dsh-desktop-kit@2.7.4/docs/images/hero.png)
+![DSH Desktop Kit 2.7](https://unpkg.com/dsh-desktop-kit@2.7.8/docs/images/hero.png)
 
 ## MCP: подключения без JSON
 
 Настройки → **MCP**: пресеты GitHub, PostgreSQL и Filesystem, живые статусы, health, список tools и безопасное хранение токенов в `~/.dsh/mcp.secrets.json`. Промпты сервера открываются кнопкой **Prompts**: аргументы, запуск и копирование результата.
 
-![MCP Settings](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-mcp-manager/screenshots/settings-1440.png)
+![MCP Settings](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-mcp-manager/screenshots/settings-1440.png)
 
-![MCP на 390px](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-mcp-manager/screenshots/settings-390.png)
+![MCP на 390px](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-mcp-manager/screenshots/settings-390.png)
 
-![Добавление MCP-сервера](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-mcp-manager/screenshots/modal-390.png)
+![Добавление MCP-сервера](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-mcp-manager/screenshots/modal-390.png)
 
 ## Права и субагенты
 
@@ -23,9 +23,11 @@
 - **Approval** — штатная карточка DSH: Allow once / Always allow / Reject.
 - **`.dsh/`** создаётся автоматически: agents, commands, rules, hooks, verify, mcp, PROJECT.md.
 
-![Агенты проекта](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-agent-extensions/screenshots/agents-1440.png)
+![Агенты проекта](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-agent-extensions/screenshots/agents-1440.png)
 
-**v2.7.7** · MIT · проверено на DSH `0.2.1-rc.5` и `0.2.2-rc.1` (Windows 11) · без внешних зависимостей и телеметрии
+![Права и ограничения](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-guardrails/screenshots/permissions-1440.png)
+
+**v2.7.8** · MIT · проверено на DSH `0.2.1-rc.5` и `0.2.2-rc.1` (Windows 11) · без внешних зависимостей и телеметрии
 
 **План развития:** [docs/ROADMAP-3.0.md](docs/ROADMAP-3.0.md) — Memory Fabric, семантическое
 слияние, локальный индекс памяти, шифрованные переносы, Memory Hub и npm trusted publishing.
@@ -113,27 +115,27 @@
 - перед каждой синхронизацией проверяется, что репозиторий всё ещё приватный;
 - секреты и PII вычищаются, домашние пути заменяются токеном `%DSH_HOME%`; LLM не вызывается — **0 токенов**.
 
-![Настройки памяти проектов](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-memory-bridge/docs/images/settings-light.png)
+![Настройки памяти проектов](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-memory-bridge/docs/images/settings-light.png)
 
-![Конфликты досье](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-memory-bridge/docs/images/conflicts.png)
+![Конфликты досье](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-memory-bridge/docs/images/conflicts.png)
 
 ## Скриншоты
 
 ### Skills Studio: каталог, стоимость и редактор
 
-![Каталог навыков](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-gkb-ru-ui/screenshots/02-skills-1440-light.png)
+![Каталог навыков](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-gkb-ru-ui/screenshots/02-skills-1440-light.png)
 
-![Редактор навыка](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-gkb-ru-ui/screenshots/03-skills-editor-1440-light.png)
+![Редактор навыка](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-gkb-ru-ui/screenshots/03-skills-editor-1440-light.png)
 
 ### Token Lab: куда уходит контекст
 
-![Токен-лаборатория](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-token-lab/screenshots/01-token-lab-1440-light.png)
+![Токен-лаборатория](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-token-lab/screenshots/01-token-lab-1440-light.png)
 
 ### Тёмная тема и мобильный
 
-![Тёмная тема](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-gkb-ru-ui/screenshots/04-skills-1440-dark.png)
+![Тёмная тема](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-gkb-ru-ui/screenshots/04-skills-1440-dark.png)
 
-![Каталог навыков на 390 px](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-gkb-ru-ui/screenshots/05-skills-390-light.png)
+![Каталог навыков на 390 px](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-gkb-ru-ui/screenshots/05-skills-390-light.png)
 
 ## Окно-напоминание: пиковый тариф
 
@@ -143,11 +145,11 @@ DeepSeek включает двойной тариф в пиковые часы (
 - **в окне** — красная карточка: причина, границы окна в местном времени и UTC, живой отсчёт до конца и рекомендация, когда вернуться;
 - **после окна** — карточка исчезает; состояние всегда доступно через `window.__DSH_PEAK_GUARD__.state()`.
 
-![Окно-напоминание: светлая тема](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-peak-guard/screenshots/03-peak-card-1440-light.png)
+![Окно-напоминание: светлая тема](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-peak-guard/screenshots/03-peak-card-1440-light.png)
 
-![Окно-напоминание: тёмная тема](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-peak-guard/screenshots/04-peak-card-1440-dark.png)
+![Окно-напоминание: тёмная тема](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-peak-guard/screenshots/04-peak-card-1440-dark.png)
 
-![Окно-напоминание на 390 px](https://unpkg.com/dsh-desktop-kit@2.7.4/plugins/dsh-peak-guard/screenshots/05-peak-card-390-light.png)
+![Окно-напоминание на 390 px](https://unpkg.com/dsh-desktop-kit@2.7.8/plugins/dsh-peak-guard/screenshots/05-peak-card-390-light.png)
 
 Подробности и настройки — [plugins/dsh-peak-guard/README.md](plugins/dsh-peak-guard/README.md).
 

package/client.js

@@ -7530,7 +7530,220 @@ var(--dsw-alias-bg-layer-1,#fff);box-shadow:inset 0 1px 0 color-mix(in srgb,#fff
       return module.exports;
     })());
 
-    const __partNames = ["dsh-gkb-ru-ui","dsh-token-lab","dsh-peak-guard","dsh-session-move","dsh-profile-transfer","dsh-memory-bridge","dsh-mcp-manager","dsh-agent-extensions"];
+    /* ---- dsh-guardrails ---- */
+    __parts.push((function () {
+    var module = { exports: {} };
+    var exports = module.exports;
+    Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+    const React = require("react");
+    const h = React.createElement;
+    const useEffect = React.useEffect;
+    const useState = React.useState;
+
+    const CSS = `
+      .pr-root{--pr-line:var(--dsw-alias-border-l1,rgba(20,40,36,.13));--pr-soft:var(--dsw-alias-bg-layer-1,#f4f7f5);--pr-panel:var(--dsw-alias-bg-layer-2,#fff);--pr-text:var(--dsw-alias-label-primary,#17231f);--pr-muted:var(--dsw-alias-label-secondary,#61706b);--pr-accent:var(--dsw-alias-brand-primary,#0f766e);display:flex;flex-direction:column;gap:20px;max-width:1040px;min-width:0;color:var(--pr-text)}
+      .pr-head{display:flex;align-items:flex-end;justify-content:space-between;gap:20px;flex-wrap:wrap}
+      .pr-eyebrow{margin:0 0 6px;font-size:11px;font-weight:700;letter-spacing:.14em;text-transform:uppercase;color:var(--pr-accent)}
+      .pr-title{margin:0;font-size:clamp(24px,2.6vw,32px);line-height:1.1;letter-spacing:-.025em;font-weight:680}
+      .pr-sub{margin:8px 0 0;max-width:68ch;color:var(--pr-muted);font-size:14px;line-height:1.5}
+      .pr-mode{padding:20px;border:1px solid var(--pr-line);border-radius:18px;background:linear-gradient(145deg,var(--pr-panel),var(--pr-soft));min-width:0}
+      .pr-mode-top{display:flex;justify-content:space-between;align-items:flex-start;gap:12px;flex-wrap:wrap}
+      .pr-mode h3{margin:0;font-size:24px;line-height:1.1;letter-spacing:-.03em}
+      .pr-chips{display:flex;gap:6px;flex-wrap:wrap}
+      .pr-chip{padding:3px 8px;border:1px solid var(--pr-line);border-radius:999px;background:var(--pr-panel);font-size:10px;font-weight:700;letter-spacing:.06em;text-transform:uppercase;color:var(--pr-muted);white-space:nowrap}
+      .pr-chip.sandbox{color:#0f766e;border-color:rgba(15,118,110,.25);background:rgba(15,118,110,.07)}
+      .pr-chip.approval{color:#9a3412;border-color:rgba(154,52,18,.22);background:rgba(154,52,18,.06)}
+      .pr-mode p{margin:8px 0 0;color:var(--pr-muted);font-size:13px;line-height:1.5;max-width:70ch}
+      .pr-note{display:flex;gap:8px;align-items:flex-start;margin-top:14px;padding:10px 12px;border:1px solid rgba(15,118,110,.16);border-radius:10px;background:rgba(15,118,110,.05);color:var(--pr-muted);font-size:12px;line-height:1.45}
+      .pr-note b{color:var(--pr-text);font-weight:650}
+      .pr-stats{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px}
+      .pr-stat{padding:14px 16px;border:1px solid var(--pr-line);border-radius:14px;background:var(--pr-panel);min-width:0}
+      .pr-stat b{display:block;font-size:24px;line-height:1.1;letter-spacing:-.03em;font-variant-numeric:tabular-nums}
+      .pr-stat span{display:block;margin-top:5px;color:var(--pr-muted);font-size:11px;font-weight:650;letter-spacing:.07em;text-transform:uppercase}
+      .pr-section{display:flex;flex-direction:column;gap:10px;min-width:0}
+      .pr-section h3{margin:0;font-size:15px;letter-spacing:-.01em}
+      .pr-section .pr-hint{margin:0;color:var(--pr-muted);font-size:12px;line-height:1.45}
+      .pr-presets{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:8px}
+      .pr-preset{padding:12px;border:1px solid var(--pr-line);border-radius:12px;background:var(--pr-panel);min-width:0}
+      .pr-preset.active{border-color:rgba(15,118,110,.35);background:rgba(15,118,110,.06)}
+      .pr-preset b{display:flex;justify-content:space-between;gap:8px;font-size:13px;align-items:center}
+      .pr-preset span{display:block;margin-top:4px;color:var(--pr-muted);font-size:11.5px;line-height:1.4}
+      .pr-preset em{font-style:normal;color:var(--pr-accent);font-size:10px;font-weight:700;letter-spacing:.08em;text-transform:uppercase}
+      .pr-list{display:flex;flex-direction:column;border:1px solid var(--pr-line);border-radius:14px;overflow:hidden;background:var(--pr-panel)}
+      .pr-row{display:flex;gap:10px;align-items:baseline;padding:9px 12px;border-top:1px solid var(--pr-line);font-size:12px;line-height:1.4;min-width:0}
+      .pr-row:first-child{border-top:0}
+      .pr-sev{flex:none;width:46px;font-size:9.5px;font-weight:750;letter-spacing:.08em;text-transform:uppercase}
+      .pr-sev.deny{color:#9f1239}.pr-sev.ask{color:#9a3412}
+      .pr-row code{flex:none;color:var(--pr-text);font:inherit;font-weight:650;white-space:nowrap}
+      .pr-row span{color:var(--pr-muted);overflow:hidden;text-overflow:ellipsis;min-width:0}
+      .pr-path{padding:9px 12px;border-top:1px solid var(--pr-line);font-size:12px;line-height:1.45;min-width:0}
+      .pr-path:first-child{border-top:0}
+      .pr-path b{display:block;font-size:12px}
+      .pr-path code{display:block;margin-top:3px;color:var(--pr-muted);font:11.5px/1.4 ui-monospace,SFMono-Regular,Consolas,monospace;overflow-wrap:anywhere}
+      .pr-error{padding:8px 10px;border:1px solid rgba(159,18,57,.16);border-radius:9px;background:rgba(159,18,57,.06);color:#9f1239;font-size:12px;line-height:1.4}
+      .pr-loading{color:var(--pr-muted);font-size:13px;padding:18px 0}
+      .pr-empty{padding:18px;border:1px dashed var(--pr-line);border-radius:14px;color:var(--pr-muted);font-size:12.5px;line-height:1.5;background:linear-gradient(160deg,var(--pr-soft),transparent 75%)}
+      .pr-foot{display:flex;justify-content:space-between;gap:12px;flex-wrap:wrap;color:var(--pr-muted);font-size:11px;line-height:1.4}
+      @media(max-width:860px){.pr-presets{grid-template-columns:1fr 1fr}.pr-stats{grid-template-columns:1fr 1fr}}
+      @media(max-width:520px){.pr-presets{grid-template-columns:1fr}.pr-stats{grid-template-columns:repeat(3,minmax(0,1fr));gap:8px}.pr-stat{padding:10px 12px}.pr-stat b{font-size:20px}.pr-stat span{font-size:9px;letter-spacing:.04em}.pr-root{gap:16px}.pr-mode{padding:16px}.pr-note{flex-direction:column;gap:4px}.pr-row{display:flex;flex-wrap:wrap;gap:4px 8px}.pr-row code{white-space:normal;overflow-wrap:anywhere}.pr-row span{flex-basis:100%;padding-left:0}}
+    `;
+
+    const SEVERITY_ORDER = { deny: 0, ask: 1 };
+
+    function currentSessionSelector(state) {
+      try {
+        const sessions = Object.values(state.byId || {});
+        const main = sessions.find((session) => session && session.retainedBy && (session.retainedBy.mainView || 0) > 0);
+        if (main) return main.id;
+        const ids = Array.isArray(state.ids) ? state.ids : [];
+        return ids.length > 0 ? ids[ids.length - 1] : undefined;
+      } catch { return undefined; }
+    }
+
+    async function call(ctx, operation, payload) {
+      let signal;
+      try { signal = AbortSignal.timeout(30000); } catch { signal = undefined; }
+      const result = await ctx.connection.rpc.call("/api", `dsh-guardrails/${operation}`, payload ?? {}, signal);
+      if (!result || result.ok !== true) throw new Error(result?.error?.message || "Ошибка RPC");
+      return result.value;
+    }
+
+    function errorOf(value) { return value instanceof Error ? value.message : String(value); }
+
+    function SandboxChip({ value }) {
+      const labels = {
+        "read-only": "Read only",
+        "workspace-write": "Workspace write",
+        "danger-full-access": "Full access",
+      };
+      return h("span", { className: "pr-chip sandbox" }, labels[value] || value || "sandbox");
+    }
+
+    function PermissionsSection(props) {
+      const [state, setState] = useState({ loading: true, error: null, data: null });
+      const useSessions = props && props.useSessions;
+      const useWorkspaces = props && props.useWorkspaces;
+      const sessionId = useSessions ? useSessions(currentSessionSelector) : undefined;
+      const workspaceSnapshot = useWorkspaces ? useWorkspaces((snapshot) => snapshot) : undefined;
+      const workspaces = Array.isArray(workspaceSnapshot?.items) ? workspaceSnapshot.items : [];
+      const workspace = workspaces.find((item) => Array.isArray(item.sessionIds) && item.sessionIds.includes(sessionId))
+        ?? workspaces.find((item) => Array.isArray(item.sessionIds) && item.sessionIds.length > 0)
+        ?? workspaces[0];
+      const cwd = typeof workspace?.path === "string" ? workspace.path : undefined;
+
+      useEffect(() => {
+        let cancelled = false;
+        (async () => {
+          try {
+            const data = await call(window.__DSH_GUARDRAILS_CTX__, "permissions", { sessionId, cwd });
+            if (!cancelled) setState({ loading: false, error: null, data });
+          } catch (error) {
+            if (!cancelled) setState({ loading: false, error: errorOf(error), data: null });
+          }
+        })();
+        return () => { cancelled = true; };
+      }, [sessionId, cwd]);
+
+      const preset = state.data?.preset;
+      const guard = state.data?.guard;
+      const options = Array.isArray(preset?.catalog?.options) ? preset.catalog.options : [];
+      const rules = Array.isArray(guard?.rules)
+        ? [...guard.rules].sort((a, b) => (SEVERITY_ORDER[a.severity] ?? 9) - (SEVERITY_ORDER[b.severity] ?? 9))
+        : [];
+      const protectedPaths = Array.isArray(guard?.protectedPaths) ? guard.protectedPaths : [];
+      const current = preset?.current || "custom";
+      const spec = preset?.spec;
+      const option = preset?.option;
+      const title = option?.name || current;
+
+      return h("section", { className: "pr-root", "aria-label": "Права и ограничения" },
+        h("div", { className: "pr-head" },
+          h("div", null,
+            h("p", { className: "pr-eyebrow" }, "Guardrails · effective permissions"),
+            h("h2", { className: "pr-title" }, "Права"),
+            h("p", { className: "pr-sub" }, "Что разрешено в этом чате и что kit запрещает в любом режиме. Режим переключается штатным picker DSH в композере — здесь только прозрачный срез."),
+          ),
+        ),
+        state.error ? h("div", { className: "pr-error", role: "alert" }, state.error) : null,
+        state.loading ? h("div", { className: "pr-loading" }, "Читаем эффективные права…") : null,
+        !state.loading && state.data ? h(React.Fragment, null,
+          h("div", { className: "pr-mode" },
+            h("div", { className: "pr-mode-top" },
+              h("div", null,
+                h("h3", null, title),
+                h("p", null, option?.description || spec?.description || "Эффективный режим этого чата."),
+              ),
+              h("div", { className: "pr-chips" },
+                h(SandboxChip, { value: spec?.sandbox }),
+                h("span", { className: "pr-chip approval" }, spec?.approval === "never" ? "approval never" : "approval ask"),
+              ),
+            ),
+            h("div", { className: "pr-note" },
+              h("b", null, "Не второй picker."),
+              h("span", null, "Смена режима — только в DSH. Эта страница не меняет разрешения и не хранит approvals; каждая карточка подтверждения остаётся в чате."),
+            ),
+          ),
+          h("div", { className: "pr-stats" },
+            h("div", { className: "pr-stat" }, h("b", null, rules.length), h("span", null, "жёстких правил")),
+            h("div", { className: "pr-stat" }, h("b", null, protectedPaths.length), h("span", null, "защищённых путей")),
+            h("div", { className: "pr-stat" }, h("b", null, options.length), h("span", null, "пресетов DSH")),
+          ),
+          h("div", { className: "pr-section" },
+            h("h3", null, "Пресеты DSH"),
+            h("p", { className: "pr-hint" }, "Доступны в композере. Текущий выделен; kit не дублирует переключатель."),
+            h("div", { className: "pr-presets" }, options.map((item) => h("div", { key: item.value, className: `pr-preset${item.value === current ? " active" : ""}` },
+              h("b", null, h("span", null, item.name || item.value), item.value === current ? h("em", null, "сейчас") : null),
+              h("span", null, item.description || "Без описания"),
+            ))),
+          ),
+          h("div", { className: "pr-section" },
+            h("h3", null, "Жёсткие правила kit"),
+            h("p", { className: "pr-hint" }, "Действуют даже в Full access. Отключаются только политикой guardrails, не режимом DSH."),
+            rules.length > 0 ? h("div", { className: "pr-list" }, rules.map((rule) => h("div", { className: "pr-row", key: rule.id },
+              h("span", { className: `pr-sev ${rule.severity}` }, rule.severity),
+              h("code", null, rule.id),
+              h("span", { title: rule.description }, rule.description || ""),
+            ))) : h("div", { className: "pr-empty" }, "Правила отключены политикой guardrails."),
+          ),
+          h("div", { className: "pr-section" },
+            h("h3", null, "Защищённые пути"),
+            h("p", { className: "pr-hint" }, "Запись, редактирование и удаление этих путей отклоняются до выполнения."),
+            protectedPaths.length > 0 ? h("div", { className: "pr-list" }, protectedPaths.map((entry) => h("div", { className: "pr-path", key: entry.id },
+              h("b", null, entry.id),
+              h("code", null, `${entry.match} /${entry.pattern}/`),
+            ))) : h("div", { className: "pr-empty" }, "Защищённые пути отключены."),
+          ),
+        ) : null,
+        h("div", { className: "pr-foot" },
+          h("span", null, guard?.policyPath ? `Политика: ${guard.policyPath}` : "Политика guardrails"),
+          h("span", null, guard ? (guard.enabled ? "hooks активны" : "hooks отключены") : ""),
+        ),
+      );
+    }
+
+    function apply(ctx) {
+      window.__DSH_GUARDRAILS_CTX__ = ctx;
+      ctx.effect(() => {
+        const style = document.createElement("style");
+        style.id = "dsh-guardrails";
+        style.textContent = CSS;
+        document.head.appendChild(style);
+        return () => style.remove();
+      }, "guardrails: styles");
+      ctx.effect(() => ctx.slots.inject("settings.section", () => ctx.slots.register({
+        name: "settings.section",
+        id: "guardrails",
+        order: 35,
+        label: () => "Права",
+      }, PermissionsSection)), "guardrails: settings");
+    }
+
+    exports.apply = apply;
+    exports.inject = ["slots", "connection"];
+      return module.exports;
+    })());
+
+    const __partNames = ["dsh-gkb-ru-ui","dsh-token-lab","dsh-peak-guard","dsh-session-move","dsh-profile-transfer","dsh-memory-bridge","dsh-mcp-manager","dsh-agent-extensions","dsh-guardrails"];
     const __kitErrors = [];
     const __pushKitError = (label, error) => {
       const message = String(error && error.message ? error.message : error);
@@ -7538,7 +7751,7 @@ var(--dsw-alias-bg-layer-1,#fff);box-shadow:inset 0 1px 0 color-mix(in srgb,#fff
       if (__kitErrors.length <= 5) console.error("[dsh-desktop-kit] registration failed:", label, message);
     };
     try {
-      window.__DSH_DESKTOP_KIT__ = { version: "2.7.7", parts: __partNames, errors: __kitErrors, ready: false };
+      window.__DSH_DESKTOP_KIT__ = { version: "2.7.8", parts: __partNames, errors: __kitErrors, ready: false };
     } catch {}
     const __inject = [];
     for (const __part of __parts) {

package/docs/TEST-2.7.8.md

@@ -0,0 +1,29 @@
+# DSH Desktop Kit 2.7.8 — тест
+
+Дата: 2026-11-12.
+
+## Permissions UI
+
+- Настройки → **Права**.
+- RPC `/api/dsh-guardrails/permissions` — read-only.
+- `permissionPresets.catalog/current/resolve/optionOf` + `loadPolicy`.
+- Каталог пресетов, текущий режим, sandbox/approval, жёсткие правила, защищённые пути.
+- Смена режима не дублируется: только штатный picker DSH.
+
+## MCP prompts (из 2.7.7)
+
+- `prompts/list`, `prompts/get`, UI-модалка, `/mcp prompts`, `/mcp prompt`.
+
+## Проверки
+
+- `node tools/permissions-ui-tests.mjs` — OK.
+- `node tools/mcp-manager-tests.mjs` — OK.
+- `npm test` — exit 0.
+- `build:client` — 9 частей; `check:client` — OK.
+- browser_qa audit 390/768/1440 (Permissions): overflow 0, console 0, markup 0.
+- Скриншоты: `plugins/dsh-guardrails/screenshots/permissions-1440.png`, `permissions-390.png`.
+
+## Ограничения
+
+- История approvals не хранится: DSH показывает карточку в чате, kit её не дублирует.
+- OAuth и sampling MCP не реализованы.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-desktop-kit",
-  "version": "2.7.7",
+  "version": "2.7.8",
   "description": "DeepSeek Harness desktop kit 2.7: 16 plugins and 30 skills — self-applying skills, token lab, Skills Studio, project memory, GitHub and USB memory transfer, guardrails, repo map, checkpoints, plan mode, browser QA, GitHub review, Claude Code-like hooks/agents/commands, Russian UI, peak guard, chat move and profile transfer.",
   "keywords": [
     "deepseek-harness",
@@ -74,7 +74,7 @@
     "build:client": "node tools/build-client.mjs",
     "build:skills": "node tools/build-skill-manifest.mjs",
     "check:client": "node tools/check-client.mjs client.js",
-    "test": "node tools/smoke-tests.mjs && node tools/memory-tests.mjs && node tools/skills-sync-tests.mjs && node tools/kit-upgrade-tests.mjs && node plugins/dsh-profile-transfer/test/transfer.test.mjs && node --test plugins/dsh-memory-bridge/test/bridge.test.mjs plugins/dsh-memory-bridge/test/github.test.mjs plugins/dsh-memory-bridge/test/merge.test.mjs plugins/dsh-memory-bridge/test/user-specific.test.mjs && node tools/repo-map-tests.mjs && node tools/checkpoints-tests.mjs && node tools/plan-mode-tests.mjs && node tools/browser-qa-tests.mjs && node tools/ui-gate-tests.mjs && node tools/agent-extensions-tests.mjs && node tools/mcp-manager-tests.mjs && node tools/github-review-tests.mjs && node plugins/dsh-guardrails/tools/guardrails-tests.mjs",
+    "test": "node tools/smoke-tests.mjs && node tools/memory-tests.mjs && node tools/skills-sync-tests.mjs && node tools/kit-upgrade-tests.mjs && node plugins/dsh-profile-transfer/test/transfer.test.mjs && node --test plugins/dsh-memory-bridge/test/bridge.test.mjs plugins/dsh-memory-bridge/test/github.test.mjs plugins/dsh-memory-bridge/test/merge.test.mjs plugins/dsh-memory-bridge/test/user-specific.test.mjs && node tools/repo-map-tests.mjs && node tools/checkpoints-tests.mjs && node tools/plan-mode-tests.mjs && node tools/browser-qa-tests.mjs && node tools/ui-gate-tests.mjs && node tools/agent-extensions-tests.mjs && node tools/mcp-manager-tests.mjs && node tools/github-review-tests.mjs && node tools/permissions-ui-tests.mjs && node plugins/dsh-guardrails/tools/guardrails-tests.mjs",
     "skills:cost": "node tools/skill-cost.mjs",
     "skills:check": "node tools/skill-cost.mjs --check",
     "release": "node tools/release.mjs"

package/plugins/dsh-guardrails/README.md

@@ -19,6 +19,19 @@ bundled plugins. The kit passes no services to it beyond `tools`; the
 `fs/*` hooks are event-only, which is why no `fs` injection is declared
 (the shipped `dsh-fs-observation-policy` also injects nothing).
 
+## Permissions UI
+
+Настройки → **Права** — read-only срез эффективных разрешений:
+
+- текущий preset DSH (`current(session)`), sandbox и approval;
+- каталог всех пресетов с пометкой текущего;
+- жёсткие правила kit и защищённые пути;
+- явное предупреждение: смена режима — только штатным picker DSH, страница ничего не переключает и не хранит approvals.
+
+![Права](screenshots/permissions-1440.png)
+
+![Права на 390px](screenshots/permissions-390.png)
+
 ## Tool `guardrails`
 
 Read-only. The canonical value is lossless JSON; the rendered text is a

package/plugins/dsh-guardrails/client.js

@@ -0,0 +1,220 @@
+/**
+ * dsh-guardrails — Permissions settings page (read-only).
+ *
+ * The DSH permission picker remains the only way to change the mode. This page
+ * explains the effective preset and shows the kit's independent hard rules.
+ */
+window.__ModuleLoader__.load({
+  id: "dsh-guardrails",
+  factory: (require) => {
+    var module = { exports: {} };
+    var exports = module.exports;
+    Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+    const React = require("react");
+    const h = React.createElement;
+    const useEffect = React.useEffect;
+    const useState = React.useState;
+
+    const CSS = `
+      .pr-root{--pr-line:var(--dsw-alias-border-l1,rgba(20,40,36,.13));--pr-soft:var(--dsw-alias-bg-layer-1,#f4f7f5);--pr-panel:var(--dsw-alias-bg-layer-2,#fff);--pr-text:var(--dsw-alias-label-primary,#17231f);--pr-muted:var(--dsw-alias-label-secondary,#61706b);--pr-accent:var(--dsw-alias-brand-primary,#0f766e);display:flex;flex-direction:column;gap:20px;max-width:1040px;min-width:0;color:var(--pr-text)}
+      .pr-head{display:flex;align-items:flex-end;justify-content:space-between;gap:20px;flex-wrap:wrap}
+      .pr-eyebrow{margin:0 0 6px;font-size:11px;font-weight:700;letter-spacing:.14em;text-transform:uppercase;color:var(--pr-accent)}
+      .pr-title{margin:0;font-size:clamp(24px,2.6vw,32px);line-height:1.1;letter-spacing:-.025em;font-weight:680}
+      .pr-sub{margin:8px 0 0;max-width:68ch;color:var(--pr-muted);font-size:14px;line-height:1.5}
+      .pr-mode{padding:20px;border:1px solid var(--pr-line);border-radius:18px;background:linear-gradient(145deg,var(--pr-panel),var(--pr-soft));min-width:0}
+      .pr-mode-top{display:flex;justify-content:space-between;align-items:flex-start;gap:12px;flex-wrap:wrap}
+      .pr-mode h3{margin:0;font-size:24px;line-height:1.1;letter-spacing:-.03em}
+      .pr-chips{display:flex;gap:6px;flex-wrap:wrap}
+      .pr-chip{padding:3px 8px;border:1px solid var(--pr-line);border-radius:999px;background:var(--pr-panel);font-size:10px;font-weight:700;letter-spacing:.06em;text-transform:uppercase;color:var(--pr-muted);white-space:nowrap}
+      .pr-chip.sandbox{color:#0f766e;border-color:rgba(15,118,110,.25);background:rgba(15,118,110,.07)}
+      .pr-chip.approval{color:#9a3412;border-color:rgba(154,52,18,.22);background:rgba(154,52,18,.06)}
+      .pr-mode p{margin:8px 0 0;color:var(--pr-muted);font-size:13px;line-height:1.5;max-width:70ch}
+      .pr-note{display:flex;gap:8px;align-items:flex-start;margin-top:14px;padding:10px 12px;border:1px solid rgba(15,118,110,.16);border-radius:10px;background:rgba(15,118,110,.05);color:var(--pr-muted);font-size:12px;line-height:1.45}
+      .pr-note b{color:var(--pr-text);font-weight:650}
+      .pr-stats{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px}
+      .pr-stat{padding:14px 16px;border:1px solid var(--pr-line);border-radius:14px;background:var(--pr-panel);min-width:0}
+      .pr-stat b{display:block;font-size:24px;line-height:1.1;letter-spacing:-.03em;font-variant-numeric:tabular-nums}
+      .pr-stat span{display:block;margin-top:5px;color:var(--pr-muted);font-size:11px;font-weight:650;letter-spacing:.07em;text-transform:uppercase}
+      .pr-section{display:flex;flex-direction:column;gap:10px;min-width:0}
+      .pr-section h3{margin:0;font-size:15px;letter-spacing:-.01em}
+      .pr-section .pr-hint{margin:0;color:var(--pr-muted);font-size:12px;line-height:1.45}
+      .pr-presets{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:8px}
+      .pr-preset{padding:12px;border:1px solid var(--pr-line);border-radius:12px;background:var(--pr-panel);min-width:0}
+      .pr-preset.active{border-color:rgba(15,118,110,.35);background:rgba(15,118,110,.06)}
+      .pr-preset b{display:flex;justify-content:space-between;gap:8px;font-size:13px;align-items:center}
+      .pr-preset span{display:block;margin-top:4px;color:var(--pr-muted);font-size:11.5px;line-height:1.4}
+      .pr-preset em{font-style:normal;color:var(--pr-accent);font-size:10px;font-weight:700;letter-spacing:.08em;text-transform:uppercase}
+      .pr-list{display:flex;flex-direction:column;border:1px solid var(--pr-line);border-radius:14px;overflow:hidden;background:var(--pr-panel)}
+      .pr-row{display:flex;gap:10px;align-items:baseline;padding:9px 12px;border-top:1px solid var(--pr-line);font-size:12px;line-height:1.4;min-width:0}
+      .pr-row:first-child{border-top:0}
+      .pr-sev{flex:none;width:46px;font-size:9.5px;font-weight:750;letter-spacing:.08em;text-transform:uppercase}
+      .pr-sev.deny{color:#9f1239}.pr-sev.ask{color:#9a3412}
+      .pr-row code{flex:none;color:var(--pr-text);font:inherit;font-weight:650;white-space:nowrap}
+      .pr-row span{color:var(--pr-muted);overflow:hidden;text-overflow:ellipsis;min-width:0}
+      .pr-path{padding:9px 12px;border-top:1px solid var(--pr-line);font-size:12px;line-height:1.45;min-width:0}
+      .pr-path:first-child{border-top:0}
+      .pr-path b{display:block;font-size:12px}
+      .pr-path code{display:block;margin-top:3px;color:var(--pr-muted);font:11.5px/1.4 ui-monospace,SFMono-Regular,Consolas,monospace;overflow-wrap:anywhere}
+      .pr-error{padding:8px 10px;border:1px solid rgba(159,18,57,.16);border-radius:9px;background:rgba(159,18,57,.06);color:#9f1239;font-size:12px;line-height:1.4}
+      .pr-loading{color:var(--pr-muted);font-size:13px;padding:18px 0}
+      .pr-empty{padding:18px;border:1px dashed var(--pr-line);border-radius:14px;color:var(--pr-muted);font-size:12.5px;line-height:1.5;background:linear-gradient(160deg,var(--pr-soft),transparent 75%)}
+      .pr-foot{display:flex;justify-content:space-between;gap:12px;flex-wrap:wrap;color:var(--pr-muted);font-size:11px;line-height:1.4}
+      @media(max-width:860px){.pr-presets{grid-template-columns:1fr 1fr}.pr-stats{grid-template-columns:1fr 1fr}}
+      @media(max-width:520px){.pr-presets{grid-template-columns:1fr}.pr-stats{grid-template-columns:repeat(3,minmax(0,1fr));gap:8px}.pr-stat{padding:10px 12px}.pr-stat b{font-size:20px}.pr-stat span{font-size:9px;letter-spacing:.04em}.pr-root{gap:16px}.pr-mode{padding:16px}.pr-note{flex-direction:column;gap:4px}.pr-row{display:flex;flex-wrap:wrap;gap:4px 8px}.pr-row code{white-space:normal;overflow-wrap:anywhere}.pr-row span{flex-basis:100%;padding-left:0}}
+    `;
+
+    const SEVERITY_ORDER = { deny: 0, ask: 1 };
+
+    function currentSessionSelector(state) {
+      try {
+        const sessions = Object.values(state.byId || {});
+        const main = sessions.find((session) => session && session.retainedBy && (session.retainedBy.mainView || 0) > 0);
+        if (main) return main.id;
+        const ids = Array.isArray(state.ids) ? state.ids : [];
+        return ids.length > 0 ? ids[ids.length - 1] : undefined;
+      } catch { return undefined; }
+    }
+
+    async function call(ctx, operation, payload) {
+      let signal;
+      try { signal = AbortSignal.timeout(30000); } catch { signal = undefined; }
+      const result = await ctx.connection.rpc.call("/api", `dsh-guardrails/${operation}`, payload ?? {}, signal);
+      if (!result || result.ok !== true) throw new Error(result?.error?.message || "Ошибка RPC");
+      return result.value;
+    }
+
+    function errorOf(value) { return value instanceof Error ? value.message : String(value); }
+
+    function SandboxChip({ value }) {
+      const labels = {
+        "read-only": "Read only",
+        "workspace-write": "Workspace write",
+        "danger-full-access": "Full access",
+      };
+      return h("span", { className: "pr-chip sandbox" }, labels[value] || value || "sandbox");
+    }
+
+    function PermissionsSection(props) {
+      const [state, setState] = useState({ loading: true, error: null, data: null });
+      const useSessions = props && props.useSessions;
+      const useWorkspaces = props && props.useWorkspaces;
+      const sessionId = useSessions ? useSessions(currentSessionSelector) : undefined;
+      const workspaceSnapshot = useWorkspaces ? useWorkspaces((snapshot) => snapshot) : undefined;
+      const workspaces = Array.isArray(workspaceSnapshot?.items) ? workspaceSnapshot.items : [];
+      const workspace = workspaces.find((item) => Array.isArray(item.sessionIds) && item.sessionIds.includes(sessionId))
+        ?? workspaces.find((item) => Array.isArray(item.sessionIds) && item.sessionIds.length > 0)
+        ?? workspaces[0];
+      const cwd = typeof workspace?.path === "string" ? workspace.path : undefined;
+
+      useEffect(() => {
+        let cancelled = false;
+        (async () => {
+          try {
+            const data = await call(window.__DSH_GUARDRAILS_CTX__, "permissions", { sessionId, cwd });
+            if (!cancelled) setState({ loading: false, error: null, data });
+          } catch (error) {
+            if (!cancelled) setState({ loading: false, error: errorOf(error), data: null });
+          }
+        })();
+        return () => { cancelled = true; };
+      }, [sessionId, cwd]);
+
+      const preset = state.data?.preset;
+      const guard = state.data?.guard;
+      const options = Array.isArray(preset?.catalog?.options) ? preset.catalog.options : [];
+      const rules = Array.isArray(guard?.rules)
+        ? [...guard.rules].sort((a, b) => (SEVERITY_ORDER[a.severity] ?? 9) - (SEVERITY_ORDER[b.severity] ?? 9))
+        : [];
+      const protectedPaths = Array.isArray(guard?.protectedPaths) ? guard.protectedPaths : [];
+      const current = preset?.current || "custom";
+      const spec = preset?.spec;
+      const option = preset?.option;
+      const title = option?.name || current;
+
+      return h("section", { className: "pr-root", "aria-label": "Права и ограничения" },
+        h("div", { className: "pr-head" },
+          h("div", null,
+            h("p", { className: "pr-eyebrow" }, "Guardrails · effective permissions"),
+            h("h2", { className: "pr-title" }, "Права"),
+            h("p", { className: "pr-sub" }, "Что разрешено в этом чате и что kit запрещает в любом режиме. Режим переключается штатным picker DSH в композере — здесь только прозрачный срез."),
+          ),
+        ),
+        state.error ? h("div", { className: "pr-error", role: "alert" }, state.error) : null,
+        state.loading ? h("div", { className: "pr-loading" }, "Читаем эффективные права…") : null,
+        !state.loading && state.data ? h(React.Fragment, null,
+          h("div", { className: "pr-mode" },
+            h("div", { className: "pr-mode-top" },
+              h("div", null,
+                h("h3", null, title),
+                h("p", null, option?.description || spec?.description || "Эффективный режим этого чата."),
+              ),
+              h("div", { className: "pr-chips" },
+                h(SandboxChip, { value: spec?.sandbox }),
+                h("span", { className: "pr-chip approval" }, spec?.approval === "never" ? "approval never" : "approval ask"),
+              ),
+            ),
+            h("div", { className: "pr-note" },
+              h("b", null, "Не второй picker."),
+              h("span", null, "Смена режима — только в DSH. Эта страница не меняет разрешения и не хранит approvals; каждая карточка подтверждения остаётся в чате."),
+            ),
+          ),
+          h("div", { className: "pr-stats" },
+            h("div", { className: "pr-stat" }, h("b", null, rules.length), h("span", null, "жёстких правил")),
+            h("div", { className: "pr-stat" }, h("b", null, protectedPaths.length), h("span", null, "защищённых путей")),
+            h("div", { className: "pr-stat" }, h("b", null, options.length), h("span", null, "пресетов DSH")),
+          ),
+          h("div", { className: "pr-section" },
+            h("h3", null, "Пресеты DSH"),
+            h("p", { className: "pr-hint" }, "Доступны в композере. Текущий выделен; kit не дублирует переключатель."),
+            h("div", { className: "pr-presets" }, options.map((item) => h("div", { key: item.value, className: `pr-preset${item.value === current ? " active" : ""}` },
+              h("b", null, h("span", null, item.name || item.value), item.value === current ? h("em", null, "сейчас") : null),
+              h("span", null, item.description || "Без описания"),
+            ))),
+          ),
+          h("div", { className: "pr-section" },
+            h("h3", null, "Жёсткие правила kit"),
+            h("p", { className: "pr-hint" }, "Действуют даже в Full access. Отключаются только политикой guardrails, не режимом DSH."),
+            rules.length > 0 ? h("div", { className: "pr-list" }, rules.map((rule) => h("div", { className: "pr-row", key: rule.id },
+              h("span", { className: `pr-sev ${rule.severity}` }, rule.severity),
+              h("code", null, rule.id),
+              h("span", { title: rule.description }, rule.description || ""),
+            ))) : h("div", { className: "pr-empty" }, "Правила отключены политикой guardrails."),
+          ),
+          h("div", { className: "pr-section" },
+            h("h3", null, "Защищённые пути"),
+            h("p", { className: "pr-hint" }, "Запись, редактирование и удаление этих путей отклоняются до выполнения."),
+            protectedPaths.length > 0 ? h("div", { className: "pr-list" }, protectedPaths.map((entry) => h("div", { className: "pr-path", key: entry.id },
+              h("b", null, entry.id),
+              h("code", null, `${entry.match} /${entry.pattern}/`),
+            ))) : h("div", { className: "pr-empty" }, "Защищённые пути отключены."),
+          ),
+        ) : null,
+        h("div", { className: "pr-foot" },
+          h("span", null, guard?.policyPath ? `Политика: ${guard.policyPath}` : "Политика guardrails"),
+          h("span", null, guard ? (guard.enabled ? "hooks активны" : "hooks отключены") : ""),
+        ),
+      );
+    }
+
+    function apply(ctx) {
+      window.__DSH_GUARDRAILS_CTX__ = ctx;
+      ctx.effect(() => {
+        const style = document.createElement("style");
+        style.id = "dsh-guardrails";
+        style.textContent = CSS;
+        document.head.appendChild(style);
+        return () => style.remove();
+      }, "guardrails: styles");
+      ctx.effect(() => ctx.slots.inject("settings.section", () => ctx.slots.register({
+        name: "settings.section",
+        id: "guardrails",
+        order: 35,
+        label: () => "Права",
+      }, PermissionsSection)), "guardrails: settings");
+    }
+
+    exports.apply = apply;
+    exports.inject = ["slots", "connection"];
+    return module.exports;
+  },
+});

package/plugins/dsh-guardrails/index.js

@@ -21,6 +21,7 @@ import fs from "node:fs";
 import path from "node:path";
 
 import { createGuard, createHookState, registerHooks } from "./lib/hooks.js";
+import { registerPermissionsApi } from "./lib/api.js";
 import { resolveMode } from "./lib/modes.js";
 import {
   DEFAULT_COMMAND_RULES,
@@ -385,5 +386,10 @@ export function apply(ctx) {
   };
 
   ctx.tools.register(tool);
+  try {
+    ctx.inject(["connection"], (child) => registerPermissionsApi(child));
+  } catch (error) {
+    logger?.warn?.(`[guardrails] permissions UI skipped: ${messageOf(error)}`);
+  }
   logger?.info?.(`[guardrails] tool ready (policy: ${policyPath(env)})`);
 }

package/plugins/dsh-guardrails/lib/api.js

@@ -0,0 +1,103 @@
+/**
+ * Read-only Permissions RPC.
+ *
+ * DSH owns the permission picker and the approval card. This endpoint only
+ * reports the effective preset plus the kit's independent hard rules, so the
+ * Settings page never becomes a second source of truth.
+ */
+import { loadPolicy } from "./policy.js";
+
+export const RPC_NAMESPACE = "dsh-guardrails";
+const ROUTE_BASE = "/api/dsh-guardrails";
+
+function ok(rpcId, value) {
+  return Response.json({ type: "server-response", rpcId, result: { ok: true, value } });
+}
+
+function fail(rpcId, message) {
+  return Response.json({ type: "server-response", rpcId, result: { ok: false, error: { code: "guardrails/bad-request", message, details: {} } } });
+}
+
+async function envelope(request) {
+  const body = await request.json();
+  if (!body || body.type !== "client-request" || typeof body.rpcId !== "string" || typeof body.method !== "string") {
+    throw new Error("bad Connection envelope");
+  }
+  return { rpcId: body.rpcId, method: body.method, payload: body.payload ?? {} };
+}
+
+function liveSession(ctx, payload) {
+  const sessions = ctx.get?.("sessions");
+  if (payload?.sessionId) {
+    const direct = sessions?.get?.(payload.sessionId);
+    if (direct) return direct;
+  }
+  const live = typeof sessions?.list === "function" ? sessions.list() : [];
+  return live.length > 0 ? live[live.length - 1] : undefined;
+}
+
+function presetSnapshot(ctx, session) {
+  const service = ctx.get?.("permissionPresets");
+  if (!service) return { available: false, current: null, spec: null, option: null, catalog: { options: [], defaultPreset: null } };
+  let catalog = { options: [], defaultPreset: null };
+  try { catalog = service.catalog(); } catch { /* optional service */ }
+  let name = null;
+  try { name = session ? service.current(session) : null; } catch { name = null; }
+  let spec = null;
+  let option = null;
+  if (name) {
+    try { spec = service.resolve(name); } catch { spec = null; }
+    try { option = service.optionOf(name); } catch { option = null; }
+  }
+  return { available: true, current: name, spec, option, catalog };
+}
+
+function guardSnapshot(env) {
+  const loaded = loadPolicy({ env });
+  const rules = loaded.policy.rules
+    .filter((rule) => rule.enabled !== false)
+    .map((rule) => ({ id: rule.id, severity: rule.severity, description: rule.description }));
+  const protectedPaths = loaded.policy.protectedPaths
+    .filter((entry) => entry.enabled !== false)
+    .map((entry) => ({ id: entry.id, match: entry.match, pattern: entry.pattern, description: entry.description }));
+  return {
+    enabled: loaded.enabled,
+    killSwitch: loaded.killSwitch,
+    policyPath: loaded.path,
+    loadedFromFile: loaded.loadedFromFile,
+    error: loaded.error,
+    warnings: loaded.warnings,
+    rules,
+    protectedPaths,
+    hooks: loaded.policy.hooks,
+  };
+}
+
+export function registerPermissionsApi(ctx) {
+  const route = {
+    path: `${ROUTE_BASE}/permissions`,
+    methods: ["POST"],
+    requestBody: "buffered",
+    fetch: async (request) => {
+      let rpcId = "invalid-request";
+      try {
+        const value = await envelope(request);
+        rpcId = value.rpcId;
+        if (value.method !== `${RPC_NAMESPACE}/permissions`) throw new Error("endpoint/method mismatch");
+        const session = liveSession(ctx, value.payload);
+        const preset = presetSnapshot(ctx, session);
+        return ok(rpcId, {
+          project: session?.header?.cwd ?? null,
+          preset,
+          guard: guardSnapshot(process.env),
+        });
+      } catch (error) {
+        return fail(rpcId, error instanceof Error ? error.message : String(error));
+      }
+    },
+  };
+  ctx.effect(() => {
+    const dispose = ctx.connection.fetch.register(route);
+    return () => { try { void Promise.resolve(dispose()).catch(() => {}); } catch { /* unloading */ } };
+  }, "guardrails: permissions route");
+}

package/plugins/dsh-guardrails/package.json

@@ -7,11 +7,13 @@
   "main": "index.js",
   "exports": {
     ".": "./index.js",
+    "./client": "./client.js",
     "./lib": "./lib/scan.js",
     "./package.json": "./package.json"
   },
   "files": [
     "index.js",
+    "client.js",
     "lib/**",
     "tools/**",
     "cordis.patch.yml",