dsh-perm-gate 0.2.0

package/lib/client.js

@@ -0,0 +1,859 @@
+window.__ModuleLoader__.load({
+	id: "dsh-perm-gate",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		let react = require("react");
+		let react_jsx_runtime = require("react/jsx-runtime");
+		//#region src/client/locales.ts
+		/** `dsh-perm-gate` client dictionaries (zh / en / ja / ko). */
+		/** Dictionary namespace owned by this plugin. */
+		const NS = "dsh-perm-gate";
+		/** Simplified Chinese dictionary (the key-set source of truth). */
+		const zh = {
+			"card.title": "Permissive 审批档",
+			"card.description": "独立审批模式档位：与只读 / 完全权限 / 白名单平行。前端只暴露一个开关；后台三个审批策略可组合、由此处设置决定，仍对 P0 硬拒绝保持 fail-closed。",
+			"card.permissive": "启用 Permissive 档位",
+			"card.permissiveHint": "关闭时门禁行为与此前完全一致。",
+			"card.strategies": "后台审批策略（至少一个生效；可组合）",
+			"card.strategy.trustAutoAllow": "trustAutoAllow — 作用域内安全操作自动放行，危险/未知转 ask（中间档基线）",
+			"card.strategy.alwaysConfirm": "alwaysConfirm — 一律逐次 ask；审批面板「允许控件」含两个扩展按钮：「本会话重复允许该类」（会话语限次 grant）与「允许所有类型」（命令词持久迁入 rulesFile 白名单）",
+			"card.strategy.llmAssist": "llmAssist — 自定义 LLM 按风险分级裁决：safe 自动放行；deletion/credential/remote/system/bulk 硬风险永远转人工；neutral 进入确认学习；失败/超时回退人工",
+			"card.readonly": "只读",
+			"card.unavailable": "设置命名空间不可用：请确认 dsh-perm-gate 已装配进 profile。",
+			"card.llmReceiver": "llmAssist 接收 LLM（OpenAI 兼容，可用自定义 API）",
+			"card.llmEndpoint": "Endpoint（BaseURL，如 https://api.openai.com/v1）",
+			"card.llmModel": "Model（模型 id，如 deepseek-chat）",
+			"card.llmKey": "API Key（保密）",
+			"card.llmKeyHidden": "未设置 · 首次输入后以 * 显示",
+			"card.llmKeyMasked": "已设置 · 输入新值覆盖",
+			"card.llmKeyOverwrite": "已设置保密值，输入新值并失焦即可覆盖。",
+			"card.llmKeyClear": "清除",
+			"card.allowlist": "白名单（allow，rulesFile 同步）",
+			"card.allowlistHint": "一行一个命令模式，换行即一个元素；保存后写入 rulesFile 的 allow 段并重载（Ctrl/Cmd+Enter 保存）。",
+			"card.allowlistSave": "保存白名单",
+			"card.riskLearning": "riskLearning — 裁决学习：neutral 风险操作经人工确认并执行后计数，满阈值且操作指纹一致时自动放行",
+			"card.riskLearningHint": "学习状态为插件自有数据（$DSH_HOME/perm-gate/learning.json），不写入你的 YAML 规则文件；不同目标永不复用放行。默认关闭。",
+			"card.riskThreshold": "自动放行所需人工确认次数（1–10）",
+			"notice.label": "权限门禁动态"
+		};
+		/** English dictionary (keys mirror zh). */
+		const en = {
+			"card.title": "Permissive approval tier",
+			"card.description": "Independent approval mode tier, parallel to read-only / full-access / whitelist. The front-end exposes a single switch; the three backend approval strategies are combinable via this panel and still fail-closed against P0 hard-deny.",
+			"card.permissive": "Enable Permissive tier",
+			"card.permissiveHint": "When off, the gate behaves exactly as before.",
+			"card.strategies": "Backend approval strategies (at least one effective; combinable)",
+			"card.strategy.trustAutoAllow": "trustAutoAllow — safe in-scope ops auto-allow; dangerous/unknown ask (baseline middle tier)",
+			"card.strategy.alwaysConfirm": "alwaysConfirm — every crossing asks; the approval \"allow controls\" get two extended buttons: \"repeat-allow this type this session\" (bounded session grant) and \"allow every occurrence\" (persist the command word into the rulesFile whitelist)",
+			"card.strategy.llmAssist": "llmAssist — a custom LLM grades risk: safe auto-allows; deletion/credential/remote/system/bulk hard risks always ask; neutral enters confirm-learning; failure/timeout falls back to the human",
+			"card.readonly": "Read-only",
+			"card.unavailable": "Settings namespace unavailable: make sure dsh-perm-gate is assembled into this profile.",
+			"card.llmReceiver": "llmAssist receiving LLM (OpenAI-compatible; any custom API)",
+			"card.llmEndpoint": "Endpoint (BaseURL, e.g. https://api.openai.com/v1)",
+			"card.llmModel": "Model (model id, e.g. deepseek-chat)",
+			"card.llmKey": "API Key (secret)",
+			"card.llmKeyHidden": "Unset · shown as * after first entry",
+			"card.llmKeyMasked": "Set · type a new value to overwrite",
+			"card.llmKeyOverwrite": "A secret is stored; type a new value and blur to overwrite it.",
+			"card.llmKeyClear": "Clear",
+			"card.allowlist": "Whitelist (allow, synced to rulesFile)",
+			"card.allowlistHint": "One command pattern per line (a newline is one element). Saving writes the rulesFile allow section and reloads (Ctrl/Cmd+Enter to save).",
+			"card.allowlistSave": "Save whitelist",
+			"card.riskLearning": "riskLearning — verdict learning: neutral-risk asks that the human approves and that execute count up; the same operation auto-allows at threshold with a matching fingerprint",
+			"card.riskLearningHint": "Learning state is plugin-owned ($DSH_HOME/perm-gate/learning.json) and never written into your YAML rules; a different target never reuses authority. Off by default.",
+			"card.riskThreshold": "Human confirmations required before auto-allow (1–10)",
+			"notice.label": "Permission gate activity"
+		};
+		//#endregion
+		//#region src/client/card.tsx
+		/**
+		* Permissive settings card — the `settings.plugin.item` face of dsh-perm-gate.
+		*
+		* The card binds the `dsh-perm-gate` settings namespace through the
+		* `settingsScope` cordis service and renders its fields: the single front switch
+		* (`permissive`) plus the three combinable backend strategies
+		* (`trustAutoAllow` / `alwaysConfirm` / `llmAssist`). Every change commits
+		* immediately through the scope (no staged form); the host reads the namespace
+		* live, so a committed change applies to the next tool call without a restart.
+		*
+		* Kept dependency-free beyond react: the scope is subscribed with
+		* `useSyncExternalStore`, and the controls are plain HTML.
+		*/
+		const rowStyle = {
+			display: "flex",
+			alignItems: "center",
+			justifyContent: "space-between",
+			gap: "12px",
+			padding: "6px 0",
+			fontSize: "13px",
+			lineHeight: "20px"
+		};
+		const labelStyle = {
+			margin: 0,
+			color: "var(--dsw-alias-label-primary)"
+		};
+		const hintStyle = {
+			margin: "4px 0 0",
+			fontSize: "12px",
+			lineHeight: "18px",
+			color: "var(--dsw-alias-label-tertiary)"
+		};
+		const sectionStyle = {
+			marginTop: "12px",
+			paddingTop: "10px",
+			borderTop: "1px solid var(--dsw-alias-border-l2)"
+		};
+		const controlStyle = {
+			background: "var(--dsw-alias-bg-surface, #fff)",
+			color: "var(--dsw-alias-label-primary)",
+			border: "1px solid var(--dsw-alias-border-l2)",
+			borderRadius: "4px",
+			padding: "3px 8px",
+			fontSize: "13px"
+		};
+		const fieldStyle = {
+			display: "flex",
+			flexDirection: "column",
+			gap: "4px"
+		};
+		const fieldLabelStyle = {
+			margin: 0,
+			fontSize: "12px",
+			lineHeight: "18px",
+			color: "var(--dsw-alias-label-tertiary)"
+		};
+		/**
+		* The card body, wrapped in a disclosure shell like every peer settings card:
+		* a header (name + description + chevron) toggling the body, collapsed by
+		* default so the plugin tab stays a tidy list of drawers.
+		*/
+		function PermissiveCard({ t, scope }) {
+			const [open, setOpen] = (0, react.useState)(false);
+			const [apiKeyDraft, setApiKeyDraft] = (0, react.useState)("");
+			const [allowText, setAllowText] = (0, react.useState)("");
+			const [allowDirty, setAllowDirty] = (0, react.useState)(false);
+			const snapshot = (0, react.useSyncExternalStore)((listener) => scope.subscribe(listener), () => scope.getSnapshot());
+			const unavailable = snapshot.status === "unavailable";
+			const readonly = unavailable || !snapshot.writable;
+			const value = snapshot.value ?? {};
+			const strategies = value.permissiveStrategies ?? {};
+			const hasApiKey = typeof value.classifierApiKey === "string" && value.classifierApiKey !== "";
+			const effective = value.permissive === true;
+			const commitApiKey = () => {
+				const next = apiKeyDraft.trim();
+				if (next === "") return;
+				scope.set("classifierApiKey", next);
+				setApiKeyDraft("");
+			};
+			const clearApiKey = () => {
+				scope.unset("classifierApiKey");
+				setApiKeyDraft("");
+			};
+			const allowlistShown = allowDirty ? allowText : (value.allowlist ?? []).join("\n");
+			const commitAllowlist = () => {
+				const lines = allowlistShown.split("\n").map((s) => s.trim()).filter((s) => s.length > 0);
+				scope.set("allowlist", lines);
+				setAllowDirty(false);
+			};
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				style: {
+					border: "1px solid var(--dsw-alias-border-l2, rgba(127,127,127,0.35))",
+					background: "var(--dsw-alias-bg-layer-3, rgba(127,127,127,0.05))",
+					borderRadius: "12px",
+					transition: "border-color 0.16s, background 0.16s"
+				},
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+					type: "button",
+					"aria-expanded": open,
+					style: {
+						appearance: "none",
+						width: "100%",
+						font: "inherit",
+						color: "inherit",
+						textAlign: "left",
+						cursor: "pointer",
+						background: "none",
+						border: 0,
+						borderRadius: "12px",
+						display: "flex",
+						alignItems: "center",
+						gap: "12px",
+						padding: "14px 16px"
+					},
+					onClick: () => {
+						setOpen((current) => !current);
+					},
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+						style: {
+							flex: "1 1 0%",
+							minWidth: 0
+						},
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							style: {
+								fontSize: "14px",
+								fontWeight: 600,
+								color: "var(--dsw-alias-label-primary)"
+							},
+							children: t("card.title")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							style: {
+								color: "var(--dsw-alias-label-tertiary, rgba(127,127,127,0.8))",
+								fontSize: "13px",
+								lineHeight: 1.5
+							},
+							children: t("card.description")
+						})]
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("svg", {
+						width: "16",
+						height: "16",
+						viewBox: "0 0 16 16",
+						"aria-hidden": true,
+						style: {
+							color: "var(--dsw-alias-label-tertiary, rgba(127,127,127,0.8))",
+							flex: "0 0 auto",
+							transition: "transform 0.16s",
+							transform: open ? "rotate(180deg)" : "none"
+						},
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("path", {
+							d: "M4 6l4 4 4-4",
+							fill: "none",
+							stroke: "currentColor",
+							strokeWidth: "1.5",
+							strokeLinecap: "round",
+							strokeLinejoin: "round"
+						})
+					})]
+				}), open ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					style: { padding: "12px 16px" },
+					children: unavailable ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						style: {
+							fontSize: "13px",
+							color: "var(--dsw-alias-label-tertiary)"
+						},
+						children: t("card.unavailable")
+					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: rowStyle,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+								htmlFor: "plugin-config-perm-gate-permissive",
+								style: labelStyle,
+								children: t("card.permissive")
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								id: "plugin-config-perm-gate-permissive",
+								type: "checkbox",
+								checked: effective,
+								disabled: readonly,
+								onChange: (event) => {
+									scope.set("permissive", event.currentTarget.checked);
+								}
+							})]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: hintStyle,
+							children: t("card.permissiveHint")
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: labelStyle,
+									children: t("card.strategies")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: rowStyle,
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+										htmlFor: "plugin-config-perm-gate-trust",
+										style: { fontSize: "12px" },
+										children: t("card.strategy.trustAutoAllow")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										id: "plugin-config-perm-gate-trust",
+										type: "checkbox",
+										checked: strategies.trustAutoAllow ?? true,
+										disabled: readonly || !effective,
+										onChange: (event) => {
+											scope.set("permissiveStrategies", {
+												...strategies,
+												trustAutoAllow: event.currentTarget.checked
+											});
+										}
+									})]
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: rowStyle,
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+										htmlFor: "plugin-config-perm-gate-confirm",
+										style: { fontSize: "12px" },
+										children: t("card.strategy.alwaysConfirm")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										id: "plugin-config-perm-gate-confirm",
+										type: "checkbox",
+										checked: strategies.alwaysConfirm ?? false,
+										disabled: readonly || !effective,
+										onChange: (event) => {
+											scope.set("permissiveStrategies", {
+												...strategies,
+												alwaysConfirm: event.currentTarget.checked
+											});
+										}
+									})]
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: rowStyle,
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+										htmlFor: "plugin-config-perm-gate-llm",
+										style: { fontSize: "12px" },
+										children: t("card.strategy.llmAssist")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										id: "plugin-config-perm-gate-llm",
+										type: "checkbox",
+										checked: strategies.llmAssist ?? false,
+										disabled: readonly || !effective,
+										onChange: (event) => {
+											scope.set("permissiveStrategies", {
+												...strategies,
+												llmAssist: event.currentTarget.checked
+											});
+										}
+									})]
+								}),
+								strategies.llmAssist === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+									style: sectionStyle,
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+											style: labelStyle,
+											children: t("card.llmReceiver")
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+											style: fieldStyle,
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.llmEndpoint")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+												type: "text",
+												value: value.classifierEndpoint ?? "",
+												disabled: readonly,
+												placeholder: "https://api.openai.com/v1",
+												style: controlStyle,
+												onChange: (event) => {
+													scope.set("classifierEndpoint", event.currentTarget.value);
+												},
+												onBlur: (event) => {
+													if (event.currentTarget.value.trim() === "") scope.unset("classifierEndpoint");
+												}
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+											style: fieldStyle,
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.llmModel")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+												type: "text",
+												value: value.classifierModel ?? "",
+												disabled: readonly,
+												placeholder: "deepseek-chat",
+												style: controlStyle,
+												onChange: (event) => {
+													scope.set("classifierModel", event.currentTarget.value);
+												},
+												onBlur: (event) => {
+													if (event.currentTarget.value.trim() === "") scope.unset("classifierModel");
+												}
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+											style: fieldStyle,
+											children: [
+												/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													style: fieldLabelStyle,
+													children: t("card.llmKey")
+												}),
+												/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+													style: {
+														display: "flex",
+														gap: "6px"
+													},
+													children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+														type: "password",
+														autoComplete: "off",
+														spellCheck: false,
+														value: apiKeyDraft,
+														disabled: readonly,
+														placeholder: hasApiKey ? t("card.llmKeyMasked") : t("card.llmKeyHidden"),
+														style: {
+															...controlStyle,
+															flex: "1 1 0%"
+														},
+														onChange: (event) => setApiKeyDraft(event.currentTarget.value),
+														onBlur: commitApiKey,
+														onKeyDown: (event) => {
+															if (event.key === "Enter") event.currentTarget.blur();
+														}
+													}), hasApiKey ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+														type: "button",
+														disabled: readonly,
+														onClick: clearApiKey,
+														style: controlStyle,
+														children: t("card.llmKeyClear")
+													}) : null]
+												}),
+												hasApiKey && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													style: hintStyle,
+													children: t("card.llmKeyOverwrite")
+												})
+											]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											style: rowStyle,
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+												htmlFor: "plugin-config-perm-gate-risk-learning",
+												style: { fontSize: "12px" },
+												children: t("card.riskLearning")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+												id: "plugin-config-perm-gate-risk-learning",
+												type: "checkbox",
+												checked: value.riskLearning ?? false,
+												disabled: readonly || !effective,
+												onChange: (event) => {
+													scope.set("riskLearning", event.currentTarget.checked);
+												}
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+											style: hintStyle,
+											children: t("card.riskLearningHint")
+										}),
+										value.riskLearning === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+											style: fieldStyle,
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.riskThreshold")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+												id: "plugin-config-perm-gate-risk-threshold",
+												type: "number",
+												min: 1,
+												max: 10,
+												value: value.riskThreshold ?? 3,
+												disabled: readonly || !effective,
+												style: {
+													...controlStyle,
+													width: "96px"
+												},
+												onChange: (event) => {
+													const n = Number.parseInt(event.currentTarget.value, 10);
+													if (Number.isFinite(n) && n >= 1 && n <= 10) scope.set("riskThreshold", n);
+												}
+											})]
+										}) : null
+									]
+								}) : null
+							]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: labelStyle,
+									children: t("card.allowlist")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.allowlistHint")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("textarea", {
+									id: "plugin-config-perm-gate-allowlist",
+									value: allowlistShown,
+									disabled: readonly,
+									rows: 6,
+									spellCheck: false,
+									style: {
+										...controlStyle,
+										width: "100%",
+										boxSizing: "border-box",
+										resize: "vertical",
+										fontFamily: "var(--ds-font-family-code, monospace)",
+										whiteSpace: "pre"
+									},
+									onChange: (event) => {
+										setAllowDirty(true);
+										setAllowText(event.currentTarget.value);
+									},
+									onKeyDown: (event) => {
+										if (event.key === "Enter" && (event.metaKey || event.ctrlKey)) commitAllowlist();
+									}
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+									style: {
+										display: "flex",
+										justifyContent: "flex-end",
+										marginTop: "6px"
+									},
+									children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										disabled: readonly || !allowDirty,
+										onClick: commitAllowlist,
+										style: {
+											...controlStyle,
+											cursor: readonly || !allowDirty ? "default" : "pointer",
+											opacity: readonly || !allowDirty ? .5 : 1
+										},
+										children: t("card.allowlistSave")
+									})
+								})
+							]
+						}),
+						!snapshot.writable && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: {
+								margin: "8px 0 0",
+								fontSize: "12px",
+								color: "var(--dsw-alias-label-tertiary)"
+							},
+							children: t("card.readonly")
+						})
+					] })
+				}) : null]
+			});
+		}
+		//#endregion
+		//#region src/client/permission-icon.ts
+		/**
+		* Permission-picker icon decoration for the Permissive tier.
+		*
+		* dsh-auto-mode injects a shield glyph onto its "Auto" permission menu item
+		* via a `data-*` attribute + a CSS mask. This module does the same for the
+		* "Permissive" preset so the two approval tiers look consistent in the
+		* dropdown. It only annotates the item; the preset itself comes from
+		* `cordis.patch.yml` (the `permission.config.presets` table).
+		*
+		* Pure DOM + CSS, no @deepseek-ai value imports (client bundle purity).
+		*/
+		const PLUGIN_ID = "dsh-perm-gate";
+		const ICON_ATTRIBUTE = "data-dsh-perm-gate-icon";
+		/** Labels of the Permissive preset item, current + future localized variants. */
+		const PERMISSIVE_LABELS = /* @__PURE__ */ new Set([
+			"Permissive",
+			"Permissive 审批档",
+			"Permissive 审批档位"
+		]);
+		/** Same shield glyph as dsh-auto-mode so the two approval tiers match visually. */
+		const ICON_SVG = "<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 16 16\"><path d=\"M8.21.9l6.58 2.47v3.64c0 4.99-3.74 7.2-6.58 8.29C5.36 14.21 1.62 12 1.62 7.01V3.37L8.21.9Z\" fill=\"none\" stroke=\"black\" stroke-width=\"1.32\" stroke-linejoin=\"round\"/><path d=\"M8.75 3.65 5.95 8.2h2.08l-.78 4.15 2.82-4.9H8.12l.63-3.8Z\" fill=\"black\"/></svg>";
+		function iconStyles() {
+			const mask = `url("data:image/svg+xml,${encodeURIComponent(ICON_SVG)}")`;
+			return `
+[${ICON_ATTRIBUTE}]::before {
+  content: "";
+  display: inline-block;
+  flex: 0 0 auto;
+  width: 16px;
+  height: 16px;
+  background-color: var(--dsw-alias-label-tertiary, currentColor);
+  -webkit-mask-image: ${mask};
+  mask-image: ${mask};
+  -webkit-mask-position: center;
+  mask-position: center;
+  -webkit-mask-repeat: no-repeat;
+  mask-repeat: no-repeat;
+  -webkit-mask-size: contain;
+  mask-size: contain;
+}
+[${ICON_ATTRIBUTE}='trigger']::before {
+  width: 14px;
+  height: 14px;
+  margin-right: 6px;
+}
+`;
+		}
+		/** The permission dropdown menu (lists the permission presets as menuitems). */
+		function isPermissionMenu(menu) {
+			return menu.matches("[role=\"menu\"]") && Array.from(menu.querySelectorAll("button[role=\"menuitem\"]")).length >= 4;
+		}
+		/** Whether one menuitem is the Permissive preset. */
+		function isPermissiveMenuItem(element) {
+			if (!element.matches("button[role=\"menuitem\"]")) return false;
+			const label = (element.textContent ?? "").replace(/\s+/g, " ").trim();
+			if (!PERMISSIVE_LABELS.has(label)) return false;
+			return element.closest("[role=\"menu\"]") !== null;
+		}
+		/** The collapsed permission-picker trigger (opens the presets menu). */
+		function isPermissionTrigger(element) {
+			return element.matches("button[aria-haspopup=\"menu\"]") && PERMISSIVE_LABELS.has((element.textContent ?? "").replace(/\s+/g, " ").trim());
+		}
+		/**
+		* Annotate the Permissive permission menuitems with the icon attribute, plus
+		* the collapsed picker trigger when its label names the Permissive preset.
+		* Unknown DOM shapes simply never match, so decoration stays conservative.
+		*/
+		function decorate(document) {
+			for (const marked of document.querySelectorAll(`[${ICON_ATTRIBUTE}]`)) if (!isPermissiveMenuItem(marked) && !isPermissionTrigger(marked)) marked.removeAttribute(ICON_ATTRIBUTE);
+			for (const menu of document.querySelectorAll("[role=\"menu\"]")) {
+				if (!isPermissionMenu(menu)) continue;
+				for (const item of menu.querySelectorAll("button[role=\"menuitem\"]")) if (isPermissiveMenuItem(item)) item.setAttribute(ICON_ATTRIBUTE, "menu");
+			}
+			for (const trigger of document.querySelectorAll("button[aria-haspopup=\"menu\"]")) if (isPermissionTrigger(trigger)) trigger.setAttribute(ICON_ATTRIBUTE, "trigger");
+		}
+		/** Install the Permissive tile icon into the permission picker; returns the disposer. */
+		function installPermissivePermissionIcon(document) {
+			for (const existing of document.querySelectorAll("style[data-plugin]")) if (existing.getAttribute("data-plugin") === PLUGIN_ID) existing.remove();
+			const style = document.createElement("style");
+			style.dataset.plugin = PLUGIN_ID;
+			style.dataset.pluginCss = `${PLUGIN_ID}/permission-icon`;
+			style.textContent = iconStyles();
+			document.head.appendChild(style);
+			let active = true;
+			let queued = false;
+			const scan = () => {
+				if (!active || queued) return;
+				queued = true;
+				queueMicrotask(() => {
+					queued = false;
+					if (active) decorate(document);
+				});
+			};
+			decorate(document);
+			const observer = new MutationObserver(scan);
+			observer.observe(document.documentElement, {
+				childList: true,
+				characterData: true,
+				subtree: true
+			});
+			return () => {
+				active = false;
+				observer.disconnect();
+				for (const marked of document.querySelectorAll(`[${ICON_ATTRIBUTE}]`)) marked.removeAttribute(ICON_ATTRIBUTE);
+				style.remove();
+			};
+		}
+		//#endregion
+		//#region src/client/notice.tsx
+		/**
+		* Gate decision notice strip — the `conversation.input.dock` face of
+		* dsh-perm-gate (a simplified version of the review-feed pattern demonstrated
+		* by dsh-approval-gate).
+		*
+		* Polls the host's `GET /api/dsh-perm-gate/events?sessionId=&since=` feed every
+		* 2 s and shows the latest decision above the conversation input: auto-allows
+		* (green) and denies (red) auto-dismiss after a few seconds; an ask (amber)
+		* stays until the next event because it needs the human's attention.
+		*
+		* Everything is best-effort: no session id, a missing route, or any fetch
+		* failure simply means "render nothing". No @deepseek-ai value imports.
+		*/
+		const POLL_MS = 2e3;
+		const AUTO_HIDE_MS = 4e3;
+		async function fetchEvents(sessionId, since) {
+			const query = `/api/dsh-perm-gate/events?sessionId=${encodeURIComponent(sessionId)}${since > 0 ? `&since=${since}` : ""}`;
+			const res = await fetch(query, { headers: { "cache-control": "no-cache" } });
+			if (!res.ok) throw new Error(`HTTP ${res.status}`);
+			const body = await res.json();
+			return Array.isArray(body.events) ? body.events : [];
+		}
+		/** Resolve the current session id from the slot props; null when unavailable. */
+		function resolveSessionId(props) {
+			const direct = props?.sessionId;
+			if (typeof direct === "string" && direct !== "") return direct;
+			try {
+				if (typeof props?.useSessions === "function") {
+					const state = props.useSessions((s) => s);
+					if (typeof state?.current === "string" && state.current !== "") return state.current;
+				}
+			} catch {}
+			return null;
+		}
+		/** Presentation per event kind: accent color, tag, and whether it auto-dismisses. */
+		function presentation(kind) {
+			switch (kind) {
+				case "deny": return {
+					color: "var(--dsw-alias-state-error-primary, #c0392b)",
+					bg: "var(--dsw-alias-interactive-bg-hover-danger, rgba(192,57,43,0.08))",
+					tag: "DENY",
+					sticky: false
+				};
+				case "ask": return {
+					color: "var(--dsw-alias-state-warn-label, #b9770e)",
+					bg: "var(--dsw-alias-state-warn-tertiary, rgba(185,119,14,0.08))",
+					tag: "ASK",
+					sticky: true
+				};
+				case "learned": return {
+					color: "var(--dsw-alias-state-success-primary, #1e8449)",
+					bg: "var(--dsw-alias-state-success-tertiary, rgba(30,132,73,0.08))",
+					tag: "LEARNED",
+					sticky: false
+				};
+				default: return {
+					color: "var(--dsw-alias-state-success-primary, #1e8449)",
+					bg: "var(--dsw-alias-state-success-tertiary, rgba(30,132,73,0.08))",
+					tag: "ALLOW",
+					sticky: false
+				};
+			}
+		}
+		function NoticeStrip({ slotsProps }) {
+			const sessionId = resolveSessionId(slotsProps);
+			const [notice, setNotice] = (0, react.useState)(null);
+			const sinceRef = (0, react.useRef)(0);
+			const shownIdRef = (0, react.useRef)(0);
+			const hideTimerRef = (0, react.useRef)(null);
+			(0, react.useEffect)(() => {
+				sinceRef.current = 0;
+				shownIdRef.current = 0;
+				setNotice(null);
+				if (sessionId === null) return;
+				let alive = true;
+				let timer = null;
+				const startPolling = () => {
+					if (!alive) return;
+					timer = setInterval(() => {
+						fetchEvents(sessionId, sinceRef.current).then((events) => {
+							if (!alive || events.length === 0) return;
+							const last = events[events.length - 1];
+							if (last === void 0 || last.id <= shownIdRef.current) return;
+							shownIdRef.current = last.id;
+							sinceRef.current = last.id;
+							setNotice(last);
+							if (hideTimerRef.current !== null) clearTimeout(hideTimerRef.current);
+							if (!presentation(last.kind).sticky) hideTimerRef.current = setTimeout(() => {
+								setNotice(null);
+							}, AUTO_HIDE_MS);
+						}).catch(() => {});
+					}, POLL_MS);
+				};
+				fetchEvents(sessionId, 0).then((events) => {
+					if (!alive) return;
+					if (events.length > 0) {
+						sinceRef.current = events[events.length - 1]?.id ?? 0;
+						shownIdRef.current = sinceRef.current;
+					}
+					startPolling();
+				}).catch(startPolling);
+				return () => {
+					alive = false;
+					if (timer !== null) clearInterval(timer);
+					if (hideTimerRef.current !== null) clearTimeout(hideTimerRef.current);
+				};
+			}, [sessionId]);
+			if (notice === null) return null;
+			const style = presentation(notice.kind);
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				role: "status",
+				style: {
+					boxSizing: "border-box",
+					display: "flex",
+					alignItems: "center",
+					gap: "8px",
+					margin: "0 auto 6px",
+					maxWidth: "720px",
+					border: `1px solid ${style.color}`,
+					background: style.bg,
+					borderRadius: "10px",
+					padding: "5px 10px"
+				},
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						style: {
+							flex: "0 0 auto",
+							fontSize: "11px",
+							lineHeight: "18px",
+							padding: "0 8px",
+							borderRadius: "9px",
+							color: style.color,
+							fontWeight: 600
+						},
+						children: style.tag
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+						style: {
+							flex: "1 1 auto",
+							minWidth: 0,
+							overflow: "hidden",
+							textOverflow: "ellipsis",
+							whiteSpace: "nowrap",
+							fontSize: "12px",
+							color: "var(--dsw-alias-label-secondary, inherit)"
+						},
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+								style: {
+									font: "500 12px/18px var(--ds-font-family-code, monospace)",
+									color: "var(--dsw-alias-label-primary, inherit)"
+								},
+								children: notice.tool
+							}),
+							" — ",
+							notice.reason
+						]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						"aria-label": "dismiss",
+						onClick: () => {
+							setNotice(null);
+						},
+						style: {
+							flex: "0 0 auto",
+							width: "22px",
+							height: "22px",
+							border: "none",
+							borderRadius: "999px",
+							background: "transparent",
+							color: "var(--dsw-alias-label-tertiary, inherit)",
+							cursor: "pointer"
+						},
+						children: "×"
+					})
+				]
+			});
+		}
+		//#endregion
+		//#region src/client/index.ts
+		/** The settings namespace the host half registers (kept in lockstep with src/index.ts). */
+		const PERMISSIVE_NS = "dsh-perm-gate";
+		/** Services required by the browser half. */
+		const inject = [
+			"slots",
+			"locale",
+			"settingsScope"
+		];
+		/**
+		* Client plugin body: dictionaries plus the settings page registration.
+		* @param ctx - client root context.
+		*/
+		function apply(ctx) {
+			ctx.effect(() => ctx.locale.register(NS, {
+				zh,
+				en
+			}), "dsh-perm-gate: dictionaries");
+			ctx.effect(() => installPermissivePermissionIcon(globalThis.document), "dsh-perm-gate: permission icon");
+			ctx.slots.inject("conversation.input.dock", function* () {
+				yield ctx.slots.register({
+					name: "conversation.input.dock",
+					id: "dsh-perm-gate.notice",
+					order: 30,
+					label: () => t("notice.label"),
+					locale: NS
+				}, NoticeStrip);
+			});
+			const t = ctx.locale.bind(NS);
+			ctx.slots.inject("settings.plugins.tab", function* () {
+				yield ctx.slots.register({
+					name: "settings.plugins.tab",
+					id: PERMISSIVE_NS,
+					order: 50,
+					label: () => t("card.title"),
+					locale: NS,
+					inject: () => {
+						return { scope: ctx.settingsScope.bind({ namespace: PERMISSIVE_NS }) };
+					}
+				}, PermissiveCard);
+			});
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});
+
+//# sourceMappingURL=client.js.map