dsh-output-styles 0.4.3 → 0.5.0

package/CHANGELOG.md

@@ -4,6 +4,30 @@ All notable changes to this project are documented in this file. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and the
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.5.0] - 2026-08-23
+
+### Added
+
+- **`/export --save <path>`**: the export command now writes the rendered
+  document to a workspace path, gated by the user-approval service and the fs
+  service. `/export [md|markdown|html] [--renderer=<id>] [--save <path>]` — the
+  no-argument behavior is unchanged (the document is returned as output text);
+  `--save` writes only after `ctx.get('approval')` grants `allowed-once`
+  (fail-closed when the service is absent, rejects, cancels, or throws), uses
+  `ctx.get('fs')` for the actual write (fail-loud with a structured error when
+  absent), and passes the document through `sanitizeText` before writing.
+  `md` is accepted as a Markdown alias. `@deepseek-ai/dsh-fs` and
+  `@deepseek-ai/dsh-user-approval` are declared as optional peer dependencies.
+
+### Changed
+
+- **Standards alignment**: `package.json` declares `packageManager` (`pnpm@11.7.0`,
+  matching CI and the lockfile), and the `cordis.patch.yml` reference comment
+  now lists the two renderer-protocol config keys (`rules`, `enableExport`)
+  added in 0.4.0. No runtime behavior changes.
+- Five READMEs: `/export --save` reference, the `fs:write` workshop permission,
+  and the test count refreshed to 127.
+
 ## [0.4.3] - 2026-08-22
 
 ### Changed

package/README.es.md

@@ -40,7 +40,7 @@
 - **Paridad Claude Code** — `keep-coding-instructions`, `force-for-plugin` (alias `force`), compatibilidad JSON `outputStyles`, directorios `stylesDir` por capas, recarga en caliente y fallback del proyecto sobre la costura de settings de DSH.
 - **Registro de renderers (`output.render.*`)** — `ctx.outputRenderers` permite a cualquier plugin registrar un presenter puro, aplicado a través de la cascada `output.render/before`; renderers integrados `concise` y `step-by-step`.
 - **Reglas por sesión/por herramienta** — `rules: [{ match: { tool: 'bash' }, style: 'concise' }]` nombran el renderer para solicitudes coincidentes; editables mediante la sección de settings `output-style-rules`.
-- **`/export`** — renderiza la sesión actual a Markdown o HTML saneado a través de la tubería de render; cada render conserva el texto original junto al renderizado.
+- **`/export`** — renderiza la sesión actual a Markdown o HTML saneado a través de la tubería de render; `--save <path>` escribe el documento saneado en esa ruta de workspace tras la aprobación del usuario. Cada render conserva el texto original junto al renderizado.
 
 ## Quick start
 
@@ -111,14 +111,14 @@ Todos los parámetros son campos Schemastery `Config` (modificables desde cordis
 | `includeBuiltins` | `true` | Incluir los `styles/` del paquete como capa de menor prioridad |
 | `watchStyles` | `true` | Recargar la librería cuando un archivo de estilo cambia en disco |
 | `rules` | `[]` | Reglas de render por sesión/herramienta: `[{ match: { tool?, contentType?, session? }, style, priority? }]` |
-| `enableExport` | `true` | Registrar el comando `/export` (exportación de sesión Markdown/HTML, consciente del renderer) |
+| `enableExport` | `true` | Registrar el comando `/export` (exportación de sesión Markdown/HTML, consciente del renderer; `--save` escribe con aprobación) |
 
 ## Tools & surfaces
 
 | Surface | Kind | Notes |
 |---|---|---|
 | `/style` | command | Lista estilos, cambia o restaura el valor por defecto del proyecto |
-| `/export` | command | Renderiza la sesión actual a Markdown o HTML saneado |
+| `/export` | command | Renderiza la sesión actual a Markdown o HTML saneado; `--save` escribe con aprobación |
 | `output_style` | storage domain | Elección de estilo por sesión, indexada por sessionId |
 | `systemPrompt.section()` | contribution | Inyecta el cuerpo del estilo actual en cada ensamblado |
 | `output.render.*` | renderer registry | `ctx.outputRenderers` + la cascada `output.render/before` |
@@ -135,8 +135,10 @@ Todos los parámetros son campos Schemastery `Config` (modificables desde cordis
 | `/style off` | Restaura el valor por defecto del proyecto (default de settings, luego `defaultStyle`) |
 | `/style nope` | `error: unknown output style "nope" (available: …)` |
 | `/export` | Renderiza la sesión actual a Markdown a través de la pipeline de render |
+| `/export md` | Renderiza a Markdown (`md` es la forma abreviada de `markdown`) |
 | `/export html` | Renderiza a HTML saneado |
 | `/export --renderer=concise` | Renderiza forzando un renderer (reglas omitidas) |
+| `/export md --save report.md` | Renderiza y luego escribe el documento saneado en `report.md` tras la aprobación |
 
 ## Style library
 
@@ -182,7 +184,7 @@ Filtrado contra el ecosistema DSH antes del desarrollo (instantánea 2026-08): n
 
 ## Permissions & data
 
-- **Permissions**: el manifiesto de workshop declara `fs:read`, `fs:watch`, `storage:read`, `storage:write` y `settings:read`.
+- **Permissions**: el manifiesto de workshop declara `fs:read`, `fs:write`, `fs:watch`, `storage:read`, `storage:write` y `settings:read`.
 - **Data**: la elección de estilo vive en el dominio de almacenamiento `output_style` (indexada por sessionId); no se persiste otro estado, sin solicitudes de red.
 - **Session log**: el nombre del estilo viene de `command/run`, el texto exacto inyectado de `request/header`; el marcador de procedencia `{ kind: 'plugin', plugin: 'dsh-output-styles' }` viaja en el registro del dominio.
 
@@ -191,6 +193,7 @@ Filtrado contra el ecosistema DSH antes del desarrollo (instantánea 2026-08): n
 - **Solo servicios públicos.** Contribuye `systemPrompt`, comandos, almacenamiento y settings; sin cambios en engine / agent-loop / apiproxy / UI oficial.
 - **Visible para el modelo ⟺ registrado.** Todo lo que el modelo ve es reconstruible desde el registro de sesión — sin un nuevo tipo de evento de sesión, sin cambios en el agent-loop.
 - **Original siempre conservado.** Cada render (y `/export`) conserva el texto original junto al renderizado; para la exportación HTML se usa HTML saneado.
+- **Escrituras en disco controladas.** `/export --save` escribe solo después de que el servicio de aprobación lo conceda, y el contenido escrito pasa primero por la función pura `sanitizeText`; sin un servicio de aprobación o fs no escribe nada (fail-closed).
 
 ## Known limitations
 
@@ -203,7 +206,7 @@ Filtrado contra el ecosistema DSH antes del desarrollo (instantánea 2026-08): n
 ```sh
 pnpm install
 pnpm run typecheck   # ambos proyectos tsc
-pnpm test            # vitest — 107 tests
+pnpm test            # vitest — 127 tests
 pnpm run verify      # typecheck + tests + self-contained (la puerta de prepublishOnly)
 pnpm run build       # artefactos lib/ (bundles host + client)
 pnpm pack            # tarball para dsh plugin add

package/README.hi.md

@@ -40,7 +40,7 @@
 - **Claude Code समानता** — `keep-coding-instructions`, `force-for-plugin` (उपनाम `force`), `outputStyles` JSON संगतता, स्तरित `stylesDir` निर्देशिकाएँ, हॉट रीलोड और DSH settings सीम पर परियोजना-डिफ़ॉल्ट फ़ॉलबैक।
 - **रेंडरर रजिस्ट्री (`output.render.*`)** — `ctx.outputRenderers` किसी भी प्लगइन को एक शुद्ध presenter पंजीकृत करने देता है, जो `output.render/before` वॉटरफ़ॉल से लागू होता है; अंतर्निहित रेंडरर `concise` और `step-by-step`।
 - **प्रति-सत्र/प्रति-टूल नियम** — `rules: [{ match: { tool: 'bash' }, style: 'concise' }]` मिलान वाले अनुरोधों के लिए रेंडरर नामित करते हैं; `output-style-rules` settings अनुभाग से संपादन-योग्य।
-- **`/export`** — रेंडर पाइपलाइन से वर्तमान सत्र को Markdown या सैनिटाइज़्ड HTML में प्रस्तुत करता है; हर रेंडर मूल पाठ को रेंडर किए गए के साथ रखता है।
+- **`/export`** — रेंडर पाइपलाइन से वर्तमान सत्र को Markdown या सैनिटाइज़्ड HTML में प्रस्तुत करता है; `--save <path>` उपयोगकर्ता की स्वीकृति के बाद सैनिटाइज़्ड दस्तावेज़ को उस workspace पथ पर लिखता है। हर रेंडर मूल पाठ को रेंडर किए गए के साथ रखता है।
 
 ## Quick start
 
@@ -111,14 +111,14 @@ flowchart LR
 | `includeBuiltins` | `true` | पैकेज के अंतर्निहित `styles/` को निम्नतम-प्राथमिकता परत के रूप में शामिल करें |
 | `watchStyles` | `true` | डिस्क पर शैली फ़ाइल बदलने पर पुस्तकालय फिर से लोड करें |
 | `rules` | `[]` | प्रति-सत्र/प्रति-टूल रेंडर नियम: `[{ match: { tool?, contentType?, session? }, style, priority? }]` |
-| `enableExport` | `true` | `/export` कमांड पंजीकृत करें (Markdown/HTML सत्र निर्यात, रेंडरर-जागरूक) |
+| `enableExport` | `true` | `/export` कमांड पंजीकृत करें (Markdown/HTML सत्र निर्यात, रेंडरर-जागरूक; `--save` स्वीकृति से लिखता है) |
 
 ## Tools & surfaces
 
 | Surface | Kind | Notes |
 |---|---|---|
 | `/style` | command | शैलियाँ सूचीबद्ध करें, बदलें या परियोजना डिफ़ॉल्ट बहाल करें |
-| `/export` | command | वर्तमान सत्र को Markdown या सैनिटाइज़्ड HTML में प्रस्तुत करें |
+| `/export` | command | वर्तमान सत्र को Markdown या सैनिटाइज़्ड HTML में प्रस्तुत करें; `--save` स्वीकृति से लिखता है |
 | `output_style` | storage domain | sessionId से अनुक्रमित सत्र-स्कोप्ड शैली चयन |
 | `systemPrompt.section()` | contribution | हर संयोजन पर वर्तमान शैली का मुख्य भाग इंजेक्ट करता है |
 | `output.render.*` | renderer registry | `ctx.outputRenderers` + `output.render/before` वॉटरफ़ॉल |
@@ -135,8 +135,10 @@ flowchart LR
 | `/style off` | परियोजना डिफ़ॉल्ट बहाल करें (settings डिफ़ॉल्ट, फिर `defaultStyle`) |
 | `/style nope` | `error: unknown output style "nope" (available: …)` |
 | `/export` | रेंडर पाइपलाइन से वर्तमान सत्र को Markdown में प्रस्तुत करें |
+| `/export md` | Markdown में प्रस्तुत करें (`md`, `markdown` का संक्षिप्त रूप है) |
 | `/export html` | सैनिटाइज़्ड HTML में प्रस्तुत करें |
 | `/export --renderer=concise` | एक रेंडरर बाध्य करके प्रस्तुत करें (नियम छोड़े गए) |
+| `/export md --save report.md` | प्रस्तुत करें, फिर स्वीकृति के बाद सैनिटाइज़्ड दस्तावेज़ को `report.md` में लिखें |
 
 ## Style library
 
@@ -182,7 +184,7 @@ flowchart LR
 
 ## Permissions & data
 
-- **Permissions**: workshop मैनिफ़ेस्ट `fs:read`, `fs:watch`, `storage:read`, `storage:write` और `settings:read` घोषित करता है।
+- **Permissions**: workshop मैनिफ़ेस्ट `fs:read`, `fs:write`, `fs:watch`, `storage:read`, `storage:write` और `settings:read` घोषित करता है।
 - **Data**: शैली चयन `output_style` स्टोरेज डोमेन में रहता है (sessionId से अनुक्रमित); कोई अन्य स्थिति स्थायी नहीं, कोई नेटवर्क अनुरोध नहीं।
 - **Session log**: शैली नाम `command/run` से आता है, सटीक इंजेक्ट किया गया पाठ `request/header` से; स्रोत मार्कर `{ kind: 'plugin', plugin: 'dsh-output-styles' }` डोमेन रिकॉर्ड में चलता है।
 
@@ -191,6 +193,7 @@ flowchart LR
 - **केवल सार्वजनिक सेवाएँ।** `systemPrompt`, कमांड, स्टोरेज और settings योगदान करता है; engine / agent-loop / apiproxy / आधिकारिक UI में कोई बदलाव नहीं।
 - **मॉडल-दृश्य ⟺ लॉग किया गया।** मॉडल जो देखता है वह सब सत्र लॉग से पुनर्निर्माण-योग्य है — कोई नया सत्र घटना प्रकार नहीं, कोई agent-loop बदलाव नहीं।
 - **मूल हमेशा रखा गया।** हर रेंडर (और `/export`) मूल पाठ को रेंडर किए गए के साथ रखता है; HTML निर्यात के लिए सैनिटाइज़्ड HTML उपयोग होता है।
+- **डिस्क लेखन गेटेड।** `/export --save` केवल स्वीकृति सेवा की अनुमति के बाद लिखता है, और लिखा गया कंटेंट पहले `sanitizeText` शुद्ध फ़ंक्शन से गुज़रता है; स्वीकृति या fs सेवा के बिना कुछ भी नहीं लिखा जाता (fail-closed)।
 
 ## Known limitations
 
@@ -203,7 +206,7 @@ flowchart LR
 ```sh
 pnpm install
 pnpm run typecheck   # दोनों tsc परियोजनाएँ
-pnpm test            # vitest — 107 tests
+pnpm test            # vitest — 127 tests
 pnpm run verify      # typecheck + tests + self-contained (prepublishOnly द्वार)
 pnpm run build       # lib/ कलाकृतियाँ (host + client बंडल)
 pnpm pack            # dsh plugin add के लिए tarball

package/README.md

@@ -41,7 +41,7 @@
 - **Claude Code parity** — `keep-coding-instructions`, `force-for-plugin` (`force` alias), `outputStyles` JSON compatibility, layered `stylesDir` directories, hot reload, and project-default fallback over the DSH settings seam.
 - **Renderer registry (`output.render.*`)** — `ctx.outputRenderers` lets any plugin register a pure presenter, applied through the `output.render/before` waterfall; built-in renderers `concise` and `step-by-step`.
 - **Per-session/per-tool rules** — `rules: [{ match: { tool: 'bash' }, style: 'concise' }]` name the renderer for matching requests; editable through the `output-style-rules` settings section.
-- **`/export`** — render the current session to Markdown or sanitized HTML through the render pipeline; every render keeps the original text beside the rendered one.
+- **`/export`** — render the current session to Markdown or sanitized HTML through the render pipeline; `--save <path>` writes the sanitized document to that workspace path after user approval. Every render keeps the original text beside the rendered one.
 
 ## Quick start
 
@@ -112,14 +112,14 @@ All tunables are Schemastery `Config` fields (changeable from cordis.yml). Inval
 | `includeBuiltins` | `true` | Include the package's bundled `styles/` as the lowest-priority layer |
 | `watchStyles` | `true` | Reload the library when a style file changes on disk |
 | `rules` | `[]` | Per-session/per-tool render rules: `[{ match: { tool?, contentType?, session? }, style, priority? }]` |
-| `enableExport` | `true` | Register the `/export` command (Markdown/HTML session export, renderer-aware) |
+| `enableExport` | `true` | Register the `/export` command (Markdown/HTML session export, renderer-aware; `--save` writes with approval) |
 
 ## Tools & surfaces
 
 | Surface | Kind | Notes |
 |---|---|---|
 | `/style` | command | List styles, switch, or restore the project default |
-| `/export` | command | Render the current session to Markdown or sanitized HTML |
+| `/export` | command | Render the current session to Markdown or sanitized HTML; `--save` writes with approval |
 | `output_style` | storage domain | Session-scoped style choice, keyed by sessionId |
 | `systemPrompt.section()` | contribution | Injects the current style body at every assembly |
 | `output.render.*` | renderer registry | `ctx.outputRenderers` + the `output.render/before` waterfall |
@@ -136,8 +136,10 @@ All tunables are Schemastery `Config` fields (changeable from cordis.yml). Inval
 | `/style off` | Restore the project default (settings default, then `defaultStyle`) |
 | `/style nope` | `error: unknown output style "nope" (available: …)` |
 | `/export` | Render the current session to Markdown through the renderer pipeline |
+| `/export md` | Render to Markdown (`md` is the shorthand for `markdown`) |
 | `/export html` | Render to sanitized HTML |
 | `/export --renderer=concise` | Render with one renderer forced (rules bypassed) |
+| `/export md --save report.md` | Render, then write the sanitized document to `report.md` after approval |
 
 ## Style library
 
@@ -183,7 +185,7 @@ Screened against the DSH ecosystem before development (2026-08 snapshot): no `st
 
 ## Permissions & data
 
-- **Permissions**: declares `fs:read`, `fs:watch`, `storage:read`, `storage:write`, and `settings:read` in its workshop manifest.
+- **Permissions**: declares `fs:read`, `fs:write`, `fs:watch`, `storage:read`, `storage:write`, and `settings:read` in its workshop manifest.
 - **Data**: the style choice lives in the `output_style` storage domain (keyed by sessionId); no other state is persisted, no network requests.
 - **Session log**: the style name comes from `command/run`, the exact injected text from `request/header`; the provenance marker `{ kind: 'plugin', plugin: 'dsh-output-styles' }` rides in the domain record.
 
@@ -192,6 +194,7 @@ Screened against the DSH ecosystem before development (2026-08 snapshot): no `st
 - **Public services only.** Contributes `systemPrompt`, commands, storage, and settings; no engine / agent-loop / apiproxy / official-UI changes.
 - **Model-visible ⟺ logged.** Everything the model sees is reconstructable from the session log — no new session event type, no agent-loop changes.
 - **Original always kept.** Every render (and `/export`) keeps the original text beside the rendered one; sanitized HTML is used for HTML export.
+- **Disk writes gated.** `/export --save` writes only after the approval service grants it, and the written content passes through the `sanitizeText` pure function first; without an approval or fs service it writes nothing (fail-closed).
 
 ## Known limitations
 
@@ -204,7 +207,7 @@ Screened against the DSH ecosystem before development (2026-08 snapshot): no `st
 ```sh
 pnpm install
 pnpm run typecheck   # both tsc projects
-pnpm test            # vitest — 107 tests
+pnpm test            # vitest — 127 tests
 pnpm run verify      # typecheck + tests + self-contained (the prepublishOnly gate)
 pnpm run build       # lib/ artifacts (host + client bundles)
 pnpm pack            # tarball for dsh plugin add

package/README.pt.md

@@ -40,7 +40,7 @@ O `dsh-output-styles` é o equivalente do `outputStyles` do Claude Code para o D
 - **Paridade Claude Code** — `keep-coding-instructions`, `force-for-plugin` (alias `force`), compatibilidade JSON `outputStyles`, diretórios `stylesDir` em camadas, recarga a quente e fallback do projeto sobre a costura de settings do DSH.
 - **Registro de renderers (`output.render.*`)** — `ctx.outputRenderers` permite a qualquer plugin registrar um presenter puro, aplicado pela cascata `output.render/before`; renderers integrados `concise` e `step-by-step`.
 - **Regras por sessão/por ferramenta** — `rules: [{ match: { tool: 'bash' }, style: 'concise' }]` nomeiam o renderer para solicitações coincidentes; editáveis pela seção de settings `output-style-rules`.
-- **`/export`** — renderiza a sessão atual para Markdown ou HTML saneado pela pipeline de render; cada render mantém o texto original ao lado do renderizado.
+- **`/export`** — renderiza a sessão atual para Markdown ou HTML saneado pela pipeline de render; `--save <path>` escreve o documento saneado nessa rota de workspace após aprovação do usuário. Cada render mantém o texto original ao lado do renderizado.
 
 ## Quick start
 
@@ -111,14 +111,14 @@ Todos os parâmetros são campos Schemastery `Config` (alteráveis pelo cordis.y
 | `includeBuiltins` | `true` | Incluir os `styles/` do pacote como camada de menor prioridade |
 | `watchStyles` | `true` | Recarregar a biblioteca quando um arquivo de estilo muda em disco |
 | `rules` | `[]` | Regras de render por sessão/ferramenta: `[{ match: { tool?, contentType?, session? }, style, priority? }]` |
-| `enableExport` | `true` | Registrar o comando `/export` (exportação de sessão Markdown/HTML, ciente do renderer) |
+| `enableExport` | `true` | Registrar o comando `/export` (exportação de sessão Markdown/HTML, ciente do renderer; `--save` escreve com aprovação) |
 
 ## Tools & surfaces
 
 | Surface | Kind | Notes |
 |---|---|---|
 | `/style` | command | Lista estilos, alterna ou restaura o padrão do projeto |
-| `/export` | command | Renderiza a sessão atual para Markdown ou HTML saneado |
+| `/export` | command | Renderiza a sessão atual para Markdown ou HTML saneado; `--save` escreve com aprovação |
 | `output_style` | storage domain | Escolha de estilo por sessão, indexada por sessionId |
 | `systemPrompt.section()` | contribution | Injeta o corpo do estilo atual a cada montagem |
 | `output.render.*` | renderer registry | `ctx.outputRenderers` + a cascata `output.render/before` |
@@ -135,8 +135,10 @@ Todos os parâmetros são campos Schemastery `Config` (alteráveis pelo cordis.y
 | `/style off` | Restaura o padrão do projeto (default de settings, depois `defaultStyle`) |
 | `/style nope` | `error: unknown output style "nope" (available: …)` |
 | `/export` | Renderiza a sessão atual para Markdown pela pipeline de render |
+| `/export md` | Renderiza para Markdown (`md` é a forma abreviada de `markdown`) |
 | `/export html` | Renderiza para HTML saneado |
 | `/export --renderer=concise` | Renderiza forçando um renderer (regras ignoradas) |
+| `/export md --save report.md` | Renderiza e então escreve o documento saneado em `report.md` após aprovação |
 
 ## Style library
 
@@ -182,7 +184,7 @@ Filtrado contra o ecossistema DSH antes do desenvolvimento (instantânea 2026-08
 
 ## Permissions & data
 
-- **Permissions**: o manifesto de workshop declara `fs:read`, `fs:watch`, `storage:read`, `storage:write` e `settings:read`.
+- **Permissions**: o manifesto de workshop declara `fs:read`, `fs:write`, `fs:watch`, `storage:read`, `storage:write` e `settings:read`.
 - **Data**: a escolha de estilo vive no domínio de armazenamento `output_style` (indexada por sessionId); nenhum outro estado é persistido, sem solicitações de rede.
 - **Session log**: o nome do estilo vem de `command/run`, o texto exato injetado de `request/header`; o marcador de procedência `{ kind: 'plugin', plugin: 'dsh-output-styles' }` viaja no registro do domínio.
 
@@ -191,6 +193,7 @@ Filtrado contra o ecossistema DSH antes do desenvolvimento (instantânea 2026-08
 - **Somente serviços públicos.** Contribui `systemPrompt`, comandos, armazenamento e settings; sem alterações em engine / agent-loop / apiproxy / UI oficial.
 - **Visível para o modelo ⟺ registrado.** Tudo o que o modelo vê é reconstruível a partir do log de sessão — sem novo tipo de evento de sessão, sem alterações no agent-loop.
 - **Original sempre conservado.** Cada render (e `/export`) mantém o texto original ao lado do renderizado; a exportação HTML usa HTML saneado.
+- **Escritas em disco controladas.** `/export --save` escreve somente após o serviço de aprovação conceder, e o conteúdo escrito passa primeiro pela função pura `sanitizeText`; sem um serviço de aprovação ou fs, nada é escrito (fail-closed).
 
 ## Known limitations
 
@@ -203,7 +206,7 @@ Filtrado contra o ecossistema DSH antes do desenvolvimento (instantânea 2026-08
 ```sh
 pnpm install
 pnpm run typecheck   # ambos os projetos tsc
-pnpm test            # vitest — 107 tests
+pnpm test            # vitest — 127 tests
 pnpm run verify      # typecheck + tests + self-contained (a porta de prepublishOnly)
 pnpm run build       # artefatos lib/ (bundles host + client)
 pnpm pack            # tarball para dsh plugin add

package/README.zh.md

@@ -40,7 +40,7 @@
 - **Claude Code 对齐** —— `keep-coding-instructions`、`force-for-plugin`（别名 `force`）、`outputStyles` JSON 兼容、分层 `stylesDir` 目录、热重载，以及通过 DSH settings 接缝的项目默认回退。
 - **渲染器注册表（`output.render.*`）** —— `ctx.outputRenderers` 允许任意插件注册纯 presenter，经 `output.render/before` waterfall 应用；内置渲染器 `concise` 与 `step-by-step`。
 - **按会话/按工具规则** —— `rules: [{ match: { tool: 'bash' }, style: 'concise' }]` 为匹配请求指定渲染器；可通过 `output-style-rules` 设置区编辑。
-- **`/export`** —— 经渲染管线把当前会话导出为 Markdown 或净化 HTML；每次渲染都保留原文与渲染结果并列。
+- **`/export`** —— 经渲染管线把当前会话导出为 Markdown 或净化 HTML；`--save <path>` 经用户审批后把净化文档写入该工作区路径。每次渲染都保留原文与渲染结果并列。
 
 ## Quick start
 
@@ -111,14 +111,14 @@ flowchart LR
 | `includeBuiltins` | `true` | 将包内置 `styles/` 作为最低优先级层 |
 | `watchStyles` | `true` | 风格文件在磁盘上变化时重载库 |
 | `rules` | `[]` | 按会话/按工具渲染规则：`[{ match: { tool?, contentType?, session? }, style, priority? }]` |
-| `enableExport` | `true` | 注册 `/export` 命令（Markdown/HTML 会话导出，感知渲染器） |
+| `enableExport` | `true` | 注册 `/export` 命令（Markdown/HTML 会话导出，感知渲染器；`--save` 经审批写入） |
 
 ## Tools & surfaces
 
 | Surface | Kind | Notes |
 |---|---|---|
 | `/style` | command | 列出风格、切换或恢复项目默认 |
-| `/export` | command | 把当前会话渲染为 Markdown 或净化 HTML |
+| `/export` | command | 把当前会话渲染为 Markdown 或净化 HTML；`--save` 经审批写入 |
 | `output_style` | storage domain | 按 sessionId 隔离的会话级风格选择 |
 | `systemPrompt.section()` | contribution | 在每次组装时注入当前风格正文 |
 | `output.render.*` | renderer registry | `ctx.outputRenderers` + `output.render/before` waterfall |
@@ -135,8 +135,10 @@ flowchart LR
 | `/style off` | 恢复项目默认（settings 默认，其次 `defaultStyle`） |
 | `/style nope` | `error: unknown output style "nope" (available: …)` |
 | `/export` | 经渲染管线把当前会话渲染为 Markdown |
+| `/export md` | 渲染为 Markdown（`md` 是 `markdown` 的简写） |
 | `/export html` | 渲染为净化 HTML |
 | `/export --renderer=concise` | 强制指定一个渲染器渲染（跳过规则） |
+| `/export md --save report.md` | 渲染后经审批把净化文档写入 `report.md` |
 
 ## Style library
 
@@ -182,7 +184,7 @@ flowchart LR
 
 ## Permissions & data
 
-- **Permissions**：workshop 清单声明 `fs:read`、`fs:watch`、`storage:read`、`storage:write` 与 `settings:read`。
+- **Permissions**：workshop 清单声明 `fs:read`、`fs:write`、`fs:watch`、`storage:read`、`storage:write` 与 `settings:read`。
 - **Data**：风格选择存于 `output_style` 存储域（按 sessionId 隔离）；不持久化其他状态，无网络请求。
 - **Session log**：风格名来自 `command/run`，精确注入文本来自 `request/header`；来源标记 `{ kind: 'plugin', plugin: 'dsh-output-styles' }` 随域记录携带。
 
@@ -191,6 +193,7 @@ flowchart LR
 - **仅公开服务。** 贡献 `systemPrompt`、命令、存储与 settings；不改 engine / agent-loop / apiproxy / 官方 UI。
 - **模型可见 ⟺ 已记录。** 模型所见的一切都能从会话日志重建 —— 无新增会话事件类型、无 agent-loop 改动。
 - **始终保留原文。** 每次渲染（含 `/export`）都保留原文与渲染结果并列；HTML 导出使用净化 HTML。
+- **写盘有门禁。** `/export --save` 仅在审批服务放行后写入，且写入内容先经 `sanitizeText` 纯函数净化；缺少审批或 fs 服务时一律不写入（fail-closed）。
 
 ## Known limitations
 
@@ -203,7 +206,7 @@ flowchart LR
 ```sh
 pnpm install
 pnpm run typecheck   # 两个 tsc 项目
-pnpm test            # vitest —— 107 个测试
+pnpm test            # vitest —— 127 个测试
 pnpm run verify      # typecheck + tests + self-contained（prepublishOnly 门禁）
 pnpm run build       # lib/ 产物（host + client 包）
 pnpm pack            # 供 dsh plugin add 的 tarball

package/cordis.patch.yml

@@ -31,6 +31,11 @@
       #   truncationMarker: "\n\n[style truncated]"
       #   includeBuiltins: true
       #   watchStyles: true
+      #   rules: []                  # per-session/per-tool render rules
+      #                              # [{ match: { tool?, contentType?, session? }, style, priority? }]
+      #   enableExport: true         # register the /export command
+      #                              # (md|html; --save <path> writes the
+      #                              # sanitized document after approval)
 
     # Optional invariant companion (envelope-level checks). Only for profiles
     # that DISABLE the main row above: the main plugin already registers

package/docs/renderer-protocol.md

@@ -132,3 +132,13 @@ export function apply(ctx: Context): void {
 const result = await ctx.outputRenderers.renderText(rawText, { tool: 'sql', contentType: 'text' })
 // { original, rendered, rendererId, changed } — log both halves wherever you surface it.
 ```
+
+## Export to disk
+
+`/export` returns the rendered document as command output text. `/export
+[md|markdown|html] [--renderer=<id>] --save <path>` additionally writes the
+document to a workspace path: the document passes through the `sanitizeText`
+pure function first, then the write is gated by the approval service
+(`ctx.get('approval')`, fail-closed when absent) and performed by the fs
+service (`ctx.get('fs')`, fail-loud when absent). The render pipeline itself is
+unchanged — the same presenters and rule table apply before either output.

package/docs/renderer-protocol.zh.md

@@ -123,3 +123,11 @@ export function apply(ctx: Context): void {
 const result = await ctx.outputRenderers.renderText(rawText, { tool: 'sql', contentType: 'text' })
 // { original, rendered, rendererId, changed } —— 在任何展示它的地方把两半都记下来。
 ```
+
+## 导出到磁盘
+
+`/export` 把渲染后的文档作为命令输出文本返回。`/export [md|markdown|html]
+[--renderer=<id>] --save <path>` 另外把文档写入工作区路径：文档先经 `sanitizeText`
+纯函数净化，随后写入由审批服务（`ctx.get('approval')`，缺失则 fail-closed）把关、由
+fs 服务（`ctx.get('fs')`，缺失则大声失败）执行。渲染流水线本身不变——两种输出之前都应用
+同样的 presenter 与规则表。

package/lib/index.js

@@ -794,12 +794,12 @@ async function apply(ctx, config) {
 		commandCtx.commands.register({
 			name: "export",
 			description: "Export this session as Markdown or HTML (renderer-aware)",
-			input: { hint: "[markdown|html] [--renderer=<id>]" },
-			handler: async ({ agent, rawInput }) => {
+			input: { hint: "[markdown|html] [--renderer=<id>] [--save <path>]" },
+			handler: async ({ agent, rawInput, signal }) => {
 				const input = parseExportInput(rawInput);
 				if (input.kind === "error") return {
 					kind: "error",
-					text: "usage: /export [markdown|html] [--renderer=<id>]"
+					text: "usage: /export [markdown|html] [--renderer=<id>] [--save <path>]"
 				};
 				const lines = conversationLines(agent.session.events);
 				const rules = input.renderer === void 0 ? [...effectiveRules] : [{
@@ -807,28 +807,57 @@ async function apply(ctx, config) {
 					style: input.renderer,
 					priority: 0
 				}];
+				const document = renderExport(renderers, lines, input.format, rules);
+				if (input.save === void 0) return {
+					kind: "success",
+					text: document.text
+				};
+				const saved = await saveExportFile(ctx.get("fs"), ctx.get("approval"), agent, input.save, sanitizeText(document.text), signal);
+				if (saved.kind === "error") return {
+					kind: "error",
+					text: saved.text
+				};
 				return {
 					kind: "success",
-					text: renderExport(renderers, lines, input.format, rules).text
+					text: `saved ${input.format} export to ${saved.path}`
 				};
 			}
 		});
 	});
 }
-/** Parse `/export [markdown|html] [--renderer=<id>]` from the raw command input. */
+/** Parse `/export [markdown|html] [--renderer=<id>] [--save <path>]` from the raw command input. */
 function parseExportInput(rawInput) {
 	const raw = String(rawInput ?? "").trim();
 	const parts = raw === "" ? [] : raw.split(/\s+/);
 	let format = "markdown";
 	let renderer;
-	for (const part of parts) {
-		if (part === "markdown" || part === "html") {
-			format = part;
+	let save;
+	for (let index = 0; index < parts.length; index += 1) {
+		const part = parts[index];
+		if (part === void 0) continue;
+		if (part === "markdown" || part === "md") {
+			format = "markdown";
+			continue;
+		}
+		if (part === "html") {
+			format = "html";
+			continue;
+		}
+		const rendererMatch = /^--renderer=([a-z0-9][a-z0-9-]*)$/.exec(part);
+		if (rendererMatch !== null) {
+			renderer = rendererMatch[1];
 			continue;
 		}
-		const match = /^--renderer=([a-z0-9][a-z0-9-]*)$/.exec(part);
-		if (match !== null) {
-			renderer = match[1];
+		const saveInline = /^--save=(.+)$/.exec(part);
+		if (saveInline !== null) {
+			save = saveInline[1];
+			continue;
+		}
+		if (part === "--save") {
+			const next = parts[index + 1];
+			if (next === void 0 || next === "") return { kind: "error" };
+			save = next;
+			index += 1;
 			continue;
 		}
 		return { kind: "error" };
@@ -836,7 +865,69 @@ function parseExportInput(rawInput) {
 	return {
 		kind: "ok",
 		format,
-		...renderer === void 0 ? {} : { renderer }
+		...renderer === void 0 ? {} : { renderer },
+		...save === void 0 ? {} : { save }
+	};
+}
+/**
+* Write one rendered export document to a workspace path after user approval.
+* Fail-closed: a missing approval service, a rejected/cancelled/unavailable
+* decision, or a throwing approval channel all deny the write; a missing fs
+* service fails loudly with a structured error. The caller already sanitized
+* `content` before this write.
+* @param fs - the fs service (`ctx.get('fs')`), or undefined when none is composed.
+* @param approval - the approval service (`ctx.get('approval')`), or undefined when none is composed.
+* @param agent - the agent whose session the export belongs to (routes the approval).
+* @param path - the workspace path to write.
+* @param content - the sanitized document text.
+* @param signal - the command's abort signal, forwarded to approval and resolve.
+* @returns the written path, or a structured failure.
+*/
+async function saveExportFile(fs, approval, agent, path, content, signal) {
+	if (approval === void 0) return {
+		kind: "error",
+		code: "approval-unavailable",
+		text: "dsh-output-styles: /export --save requires an approval service (compose @deepseek-ai/dsh-user-approval); nothing was written"
+	};
+	let outcome;
+	try {
+		outcome = await approval.request({
+			agent,
+			toolName: "export",
+			reason: `write the exported document to ${path}`,
+			...signal === void 0 ? {} : { signal }
+		});
+	} catch {
+		outcome = "unavailable";
+	}
+	switch (outcome) {
+		case "allowed-once": break;
+		case "rejected": return {
+			kind: "error",
+			code: "approval-denied",
+			text: "dsh-output-styles: /export --save was rejected; nothing was written"
+		};
+		case "cancelled": return {
+			kind: "error",
+			code: "approval-cancelled",
+			text: "dsh-output-styles: /export --save was cancelled; nothing was written"
+		};
+		default: return {
+			kind: "error",
+			code: "approval-unavailable",
+			text: "dsh-output-styles: /export --save approval is unavailable; nothing was written"
+		};
+	}
+	if (fs === void 0) return {
+		kind: "error",
+		code: "fs-unavailable",
+		text: "dsh-output-styles: /export --save requires an fs service (compose @deepseek-ai/dsh-fs); nothing was written"
+	};
+	const target = await fs.resolve(path, signal === void 0 ? void 0 : { signal });
+	await fs.writeText(target, content);
+	return {
+		kind: "written",
+		path
 	};
 }
 //#endregion

package/lib/types/runtime.d.ts

@@ -146,10 +146,56 @@ type ExportInput = {
     kind: 'ok';
     format: 'markdown' | 'html';
     renderer?: string;
+    save?: string;
 } | {
     kind: 'error';
 };
-/** Parse `/export [markdown|html] [--renderer=<id>]` from the raw command input. */
+/** Parse `/export [markdown|html] [--renderer=<id>] [--save <path>]` from the raw command input. */
 export declare function parseExportInput(rawInput: unknown): ExportInput;
+/** Approval outcome vocabulary, structural (mirrors the approval seam without importing it). */
+type ApprovalOutcome = 'allowed-once' | 'rejected' | 'cancelled' | 'unavailable';
+/** Structural slice of the DSH filesystem service the save path uses. */
+export interface ExportFileSystem {
+    resolve(path: string, opts?: {
+        cwd?: string;
+        signal?: AbortSignal;
+    }): Promise<unknown>;
+    writeText(target: unknown, content: string): Promise<unknown>;
+}
+/** Structural slice of the DSH approval service the save path uses. */
+export interface ExportApproval {
+    request(request: {
+        agent: unknown;
+        toolName: string;
+        reason: string;
+        signal?: AbortSignal;
+    }): Promise<ApprovalOutcome>;
+}
+/** Error codes of the `/export --save` path; each is a stable machine-readable label. */
+export type ExportSaveErrorCode = 'fs-unavailable' | 'approval-unavailable' | 'approval-denied' | 'approval-cancelled';
+/** Result of a `/export --save` attempt: the written path or a structured failure. */
+export type ExportSaveResult = {
+    readonly kind: 'written';
+    readonly path: string;
+} | {
+    readonly kind: 'error';
+    readonly code: ExportSaveErrorCode;
+    readonly text: string;
+};
+/**
+ * Write one rendered export document to a workspace path after user approval.
+ * Fail-closed: a missing approval service, a rejected/cancelled/unavailable
+ * decision, or a throwing approval channel all deny the write; a missing fs
+ * service fails loudly with a structured error. The caller already sanitized
+ * `content` before this write.
+ * @param fs - the fs service (`ctx.get('fs')`), or undefined when none is composed.
+ * @param approval - the approval service (`ctx.get('approval')`), or undefined when none is composed.
+ * @param agent - the agent whose session the export belongs to (routes the approval).
+ * @param path - the workspace path to write.
+ * @param content - the sanitized document text.
+ * @param signal - the command's abort signal, forwarded to approval and resolve.
+ * @returns the written path, or a structured failure.
+ */
+export declare function saveExportFile(fs: ExportFileSystem | undefined, approval: ExportApproval | undefined, agent: unknown, path: string, content: string, signal?: AbortSignal): Promise<ExportSaveResult>;
 export {};
 //# sourceMappingURL=runtime.d.ts.map

package/lib/types/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAKlE,OAAO,KAAK,EAAE,MAAM,EAA2B,MAAM,iCAAiC,CAAA;AAGtF,OAAO,EAAiB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAA;AAExD,OAAO,EAAmC,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAEtF,OAAO,EAAE,mBAAmB,EAAgE,KAAK,cAAc,EAA2B,MAAM,YAAY,CAAA;AAI5J,kGAAkG;AAClG,eAAO,MAAM,kBAAkB,QAAwD,CAAA;AAEvF,mFAAmF;AACnF,eAAO,MAAM,kBAAkB,2BAA2B,CAAA;AAQ1D;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAqB3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IApBzB,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,WAAW,CAAyB;IAE5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,OAAO,CAAC,cAAc,CAAc;IAEpC,2DAA2D;IAC3D,IAAI,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAE7C;IAED;;;;OAIG;gBAEgB,MAAM,EAAE,MAAM,CAAC,OAAO,mBAAmB,CAAC,EAC3D,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EACxC,OAAO,EAAE;QACP,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;QAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;KAClC;IAWH,qDAAqD;IACrD,IAAI,KAAK,IAAI,SAAS,MAAM,EAAE,CAE7B;IAED,4EAA4E;IAC5E,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,IAAI;IAKtD;;;;OAIG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,IAAI;IAI1C;;;;OAIG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAI1C;;;;OAIG;IACH,YAAY,CAAC,SAAS,EAAE,SAAS,GAAG,cAAc,GAAG,SAAS;IAI9D;;;;;;;OAOG;IACH,cAAc,CAAC,SAAS,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS;IAO7D;;;;OAIG;IACH,WAAW,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM;IAIzC;;;;;;OAMG;IACH,UAAU,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM;IAOxC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM;IAUtC;;;;;OAKG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAItC;;;;;;OAMG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3D;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B;AAmBD;;;;;;;;;GASG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkRvE;AAED,mCAAmC;AACnC,KAAK,WAAW,GAAG;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAA;AAErG,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,WAAW,CAkB/D"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAKlE,OAAO,KAAK,EAAE,MAAM,EAA2B,MAAM,iCAAiC,CAAA;AAGtF,OAAO,EAAiB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAA;AAExD,OAAO,EAAmC,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAEtF,OAAO,EAAE,mBAAmB,EAAgE,KAAK,cAAc,EAA2B,MAAM,YAAY,CAAA;AAI5J,kGAAkG;AAClG,eAAO,MAAM,kBAAkB,QAAwD,CAAA;AAEvF,mFAAmF;AACnF,eAAO,MAAM,kBAAkB,2BAA2B,CAAA;AAQ1D;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAqB3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IApBzB,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,WAAW,CAAyB;IAE5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,OAAO,CAAC,cAAc,CAAc;IAEpC,2DAA2D;IAC3D,IAAI,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAE7C;IAED;;;;OAIG;gBAEgB,MAAM,EAAE,MAAM,CAAC,OAAO,mBAAmB,CAAC,EAC3D,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EACxC,OAAO,EAAE;QACP,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;QAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;KAClC;IAWH,qDAAqD;IACrD,IAAI,KAAK,IAAI,SAAS,MAAM,EAAE,CAE7B;IAED,4EAA4E;IAC5E,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,IAAI;IAKtD;;;;OAIG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,IAAI;IAI1C;;;;OAIG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAI1C;;;;OAIG;IACH,YAAY,CAAC,SAAS,EAAE,SAAS,GAAG,cAAc,GAAG,SAAS;IAI9D;;;;;;;OAOG;IACH,cAAc,CAAC,SAAS,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS;IAO7D;;;;OAIG;IACH,WAAW,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM;IAIzC;;;;;;OAMG;IACH,UAAU,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM;IAOxC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM;IAUtC;;;;;OAKG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAItC;;;;;;OAMG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3D;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B;AAmBD;;;;;;;;;GASG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoSvE;AAED,mCAAmC;AACnC,KAAK,WAAW,GAAG;IACjB,IAAI,EAAE,IAAI,CAAA;IACV,MAAM,EAAE,UAAU,GAAG,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAA;AAErB,oGAAoG;AACpG,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,WAAW,CA0C/D;AAED,gGAAgG;AAChG,KAAK,eAAe,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAA;AAEhF,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtF,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC9D;AAED,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CACvH;AAED,yFAAyF;AACzF,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG,sBAAsB,GAAG,iBAAiB,GAAG,oBAAoB,CAAA;AAEtH,sFAAsF;AACtF,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzF;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,gBAAgB,GAAG,SAAS,EAChC,QAAQ,EAAE,cAAc,GAAG,SAAS,EACpC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,gBAAgB,CAAC,CAoD3B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-output-styles",
-  "version": "0.4.3",
+  "version": "0.5.0",
   "description": "Claude Code outputStyles-equivalent runtime output-style switching for DeepSeek Harness",
   "type": "module",
   "sideEffects": false,
@@ -17,6 +17,7 @@
   "publishConfig": {
     "access": "public"
   },
+  "packageManager": "pnpm@11.7.0",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"
   },
@@ -99,6 +100,7 @@
     },
     "permissions": [
       "fs:read",
+      "fs:write",
       "fs:watch",
       "storage:read",
       "storage:write",
@@ -131,13 +133,21 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-fs": ">=0.1.0-rc.8 <0.2.0",
     "@deepseek-ai/dsh-session": ">=0.1.0-rc.8 <0.2.0",
     "@deepseek-ai/dsh-session-projection": ">=0.1.1-rc.2 <0.2.0",
     "@deepseek-ai/dsh-settings": ">=0.1.0-rc.8 <0.2.0",
     "@deepseek-ai/dsh-storage-domain": ">=0.1.0-rc.8 <0.2.0",
+    "@deepseek-ai/dsh-user-approval": ">=0.1.0-rc.8 <0.2.0",
     "@deepseek-ai/schemastery": "^3.18.1"
   },
   "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-fs": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-user-approval": {
+      "optional": true
+    },
     "@deepseek-ai/dsh-settings": {
       "optional": true
     },

package/src/runtime.ts

@@ -25,7 +25,7 @@ import { loadStyleLibrary, truncateStyle, type OutputStyle } from './style-libra
 import { applyStyleEvent, EMPTY_STYLE_STATE, parseStyleInput, STYLE_COMMAND, type StyleFoldState } from './style-command.ts'
 import { OUTPUT_STYLE_DOMAIN, STYLE_SOURCE, styleFoldStateSchema, styleSelectionViewSchema, type StyleSelection, type StyleSelectionView } from './types.ts'
 import { BUILTIN_RENDERERS, RendererRegistry, type OutputRenderer, type RenderContext, type RenderedText, type StyleRule } from './renderers.ts'
-import { conversationLines, renderExport } from './export.ts'
+import { conversationLines, renderExport, sanitizeText } from './export.ts'
 
 /** Bundled style-library directory (package `styles/`), the lowest-priority `stylesDir` entry. */
 export const DEFAULT_STYLES_DIR = fileURLToPath(new URL('../styles/', import.meta.url))
@@ -507,23 +507,41 @@ export async function apply(ctx: Context, config: Config): Promise<void> {
   // Markdown or sanitized HTML through the renderer pipeline. The document
   // itself is the visible artifact; the original lines are the session log
   // the export was projected from — rendered and original stay reconstructable.
+  // `--save <path>` additionally writes the sanitized document to that
+  // workspace path, gated by the approval service and the fs service (both
+  // optional; a missing approval service denies the write, a missing fs
+  // service fails loudly).
   if (resolved.enableExport) {
     ctx.inject(['commands'], (commandCtx) => {
       commandCtx.commands.register({
         name: 'export',
         description: 'Export this session as Markdown or HTML (renderer-aware)',
-        input: { hint: '[markdown|html] [--renderer=<id>]' },
-        handler: async ({ agent, rawInput }) => {
+        input: { hint: '[markdown|html] [--renderer=<id>] [--save <path>]' },
+        handler: async ({ agent, rawInput, signal }) => {
           const input = parseExportInput(rawInput)
           if (input.kind === 'error') {
-            return { kind: 'error', text: 'usage: /export [markdown|html] [--renderer=<id>]' }
+            return { kind: 'error', text: 'usage: /export [markdown|html] [--renderer=<id>] [--save <path>]' }
           }
           const lines = conversationLines(agent.session.events)
           const rules: StyleRule[] = input.renderer === undefined
             ? [...effectiveRules]
             : [{ match: {}, style: input.renderer, priority: 0 }]
           const document = renderExport(renderers, lines, input.format, rules)
-          return { kind: 'success', text: document.text }
+          if (input.save === undefined) {
+            return { kind: 'success', text: document.text }
+          }
+          // The disk path sanitizes the rendered document before writing and
+          // writes only after the approval service grants it.
+          const saved = await saveExportFile(
+            ctx.get('fs') as ExportFileSystem | undefined,
+            ctx.get('approval') as ExportApproval | undefined,
+            agent,
+            input.save,
+            sanitizeText(document.text),
+            signal,
+          )
+          if (saved.kind === 'error') return { kind: 'error', text: saved.text }
+          return { kind: 'success', text: `saved ${input.format} export to ${saved.path}` }
         },
       })
     })
@@ -531,25 +549,151 @@ export async function apply(ctx: Context, config: Config): Promise<void> {
 }
 
 /** Parsed `/export` invocation. */
-type ExportInput = { kind: 'ok'; format: 'markdown' | 'html'; renderer?: string } | { kind: 'error' }
-
-/** Parse `/export [markdown|html] [--renderer=<id>]` from the raw command input. */
+type ExportInput = {
+  kind: 'ok'
+  format: 'markdown' | 'html'
+  renderer?: string
+  save?: string
+} | { kind: 'error' }
+
+/** Parse `/export [markdown|html] [--renderer=<id>] [--save <path>]` from the raw command input. */
 export function parseExportInput(rawInput: unknown): ExportInput {
   const raw = String(rawInput ?? '').trim()
   const parts = raw === '' ? [] : raw.split(/\s+/)
   let format: 'markdown' | 'html' = 'markdown'
   let renderer: string | undefined
-  for (const part of parts) {
-    if (part === 'markdown' || part === 'html') {
-      format = part
+  let save: string | undefined
+  for (let index = 0; index < parts.length; index += 1) {
+    const part = parts[index]
+    if (part === undefined) continue
+    if (part === 'markdown' || part === 'md') {
+      format = 'markdown'
+      continue
+    }
+    if (part === 'html') {
+      format = 'html'
+      continue
+    }
+    const rendererMatch = /^--renderer=([a-z0-9][a-z0-9-]*)$/.exec(part)
+    if (rendererMatch !== null) {
+      renderer = rendererMatch[1]
+      continue
+    }
+    const saveInline = /^--save=(.+)$/.exec(part)
+    if (saveInline !== null) {
+      save = saveInline[1]
       continue
     }
-    const match = /^--renderer=([a-z0-9][a-z0-9-]*)$/.exec(part)
-    if (match !== null) {
-      renderer = match[1]
+    if (part === '--save') {
+      const next = parts[index + 1]
+      if (next === undefined || next === '') return { kind: 'error' }
+      save = next
+      index += 1
       continue
     }
     return { kind: 'error' }
   }
-  return { kind: 'ok', format, ...renderer === undefined ? {} : { renderer } }
+  return {
+    kind: 'ok',
+    format,
+    ...renderer === undefined ? {} : { renderer },
+    ...save === undefined ? {} : { save },
+  }
+}
+
+/** Approval outcome vocabulary, structural (mirrors the approval seam without importing it). */
+type ApprovalOutcome = 'allowed-once' | 'rejected' | 'cancelled' | 'unavailable'
+
+/** Structural slice of the DSH filesystem service the save path uses. */
+export interface ExportFileSystem {
+  resolve(path: string, opts?: { cwd?: string; signal?: AbortSignal }): Promise<unknown>
+  writeText(target: unknown, content: string): Promise<unknown>
+}
+
+/** Structural slice of the DSH approval service the save path uses. */
+export interface ExportApproval {
+  request(request: { agent: unknown; toolName: string; reason: string; signal?: AbortSignal }): Promise<ApprovalOutcome>
+}
+
+/** Error codes of the `/export --save` path; each is a stable machine-readable label. */
+export type ExportSaveErrorCode = 'fs-unavailable' | 'approval-unavailable' | 'approval-denied' | 'approval-cancelled'
+
+/** Result of a `/export --save` attempt: the written path or a structured failure. */
+export type ExportSaveResult =
+  | { readonly kind: 'written'; readonly path: string }
+  | { readonly kind: 'error'; readonly code: ExportSaveErrorCode; readonly text: string }
+
+/**
+ * Write one rendered export document to a workspace path after user approval.
+ * Fail-closed: a missing approval service, a rejected/cancelled/unavailable
+ * decision, or a throwing approval channel all deny the write; a missing fs
+ * service fails loudly with a structured error. The caller already sanitized
+ * `content` before this write.
+ * @param fs - the fs service (`ctx.get('fs')`), or undefined when none is composed.
+ * @param approval - the approval service (`ctx.get('approval')`), or undefined when none is composed.
+ * @param agent - the agent whose session the export belongs to (routes the approval).
+ * @param path - the workspace path to write.
+ * @param content - the sanitized document text.
+ * @param signal - the command's abort signal, forwarded to approval and resolve.
+ * @returns the written path, or a structured failure.
+ */
+export async function saveExportFile(
+  fs: ExportFileSystem | undefined,
+  approval: ExportApproval | undefined,
+  agent: unknown,
+  path: string,
+  content: string,
+  signal?: AbortSignal,
+): Promise<ExportSaveResult> {
+  if (approval === undefined) {
+    return {
+      kind: 'error',
+      code: 'approval-unavailable',
+      text: 'dsh-output-styles: /export --save requires an approval service (compose @deepseek-ai/dsh-user-approval); nothing was written',
+    }
+  }
+  let outcome: ApprovalOutcome
+  try {
+    outcome = await approval.request({
+      agent,
+      toolName: 'export',
+      reason: `write the exported document to ${path}`,
+      ...signal === undefined ? {} : { signal },
+    })
+  } catch {
+    // An approval channel that cannot answer is an unanswerable ask: fail closed.
+    outcome = 'unavailable'
+  }
+  switch (outcome) {
+    case 'allowed-once': break
+    case 'rejected':
+      return {
+        kind: 'error',
+        code: 'approval-denied',
+        text: 'dsh-output-styles: /export --save was rejected; nothing was written',
+      }
+    case 'cancelled':
+      return {
+        kind: 'error',
+        code: 'approval-cancelled',
+        text: 'dsh-output-styles: /export --save was cancelled; nothing was written',
+      }
+    default:
+      // 'unavailable' plus any out-of-vocabulary answer fail closed (never write).
+      return {
+        kind: 'error',
+        code: 'approval-unavailable',
+        text: 'dsh-output-styles: /export --save approval is unavailable; nothing was written',
+      }
+  }
+  if (fs === undefined) {
+    return {
+      kind: 'error',
+      code: 'fs-unavailable',
+      text: 'dsh-output-styles: /export --save requires an fs service (compose @deepseek-ai/dsh-fs); nothing was written',
+    }
+  }
+  const target = await fs.resolve(path, signal === undefined ? undefined : { signal })
+  await fs.writeText(target, content)
+  return { kind: 'written', path }
 }