dsh-perm-gate 2.1.0 → 2.1.2

package/lib/agent-identity.js

@@ -0,0 +1,95 @@
+/**
+ * Agent identity extraction for the `agents` rule dimension.
+ *
+ * Given a tool execution context, produces zero or more identity candidates
+ * that the `agents` dimension can match against. Candidates are produced
+ * in priority order: most-specific first.
+ *
+ * Identity model:
+ *   - `main`          — the primary (top-level) agent session
+ *   - `subagent`      — a delegated child agent (parentAuthorized present)
+ *   - `preset:<name>` — running under a named permission preset
+ *
+ * When no identity can be determined, an empty array is returned and the
+ * `agents` dimension in rules fail-closes (no match → rule skipped).
+ */
+/**
+ * Extract agent identity candidates from a tool execution context.
+ *
+ * Returns a deduplicated list of identity strings. The `agents` rule
+ * dimension matches if ANY candidate matches ANY entry in the rule's
+ * `agents` list.
+ *
+ * @returns candidates in priority order, e.g. `['preset:permissive', 'subagent']`
+ *          or `['main']`. Empty array = undecidable → agents rules fail-close.
+ */
+export function extractAgentCandidates(exec) {
+    const candidates = [];
+    // 1. Preset name — most specific identity.
+    const preset = presetFromEvents(exec);
+    if (preset !== undefined) {
+        candidates.push(`preset:${preset}`);
+    }
+    // 2. Main vs subagent — determined by parentAuthorized presence.
+    if (exec.parentAuthorized !== undefined) {
+        // parentAuthorized is present → this is a child/subagent.
+        candidates.push('subagent');
+    }
+    else {
+        // parentAuthorized absent → assume main agent.
+        candidates.push('main');
+    }
+    return candidates;
+}
+/**
+ * Derive the current permission preset name from the session event log.
+ *
+ * The event log is append-only; the last `preset-switch` or `tier-select`
+ * event carries the current preset. Returns undefined when the log is
+ * unavailable or no preset event exists.
+ */
+function presetFromEvents(exec) {
+    const events = eventsOf(exec);
+    if (events === undefined)
+        return undefined;
+    // Walk backwards to find the most recent preset/tier event.
+    for (let i = events.length - 1; i >= 0; i--) {
+        const ev = events[i];
+        if (typeof ev !== 'object' || ev === null)
+            continue;
+        const rec = ev;
+        const type = rec.type ?? rec.kind;
+        if (typeof type !== 'string')
+            continue;
+        if (type === 'preset-switch' || type === 'tier-select') {
+            const value = rec.preset ?? rec.tier ?? rec.value;
+            if (typeof value === 'string' && value !== '')
+                return value;
+        }
+    }
+    return undefined;
+}
+/**
+ * Read the session event log from a ToolExecutionLike, handling both
+ * DSH 0.1.1 (plain array) and 0.1.2+ (function accessors) shapes.
+ */
+function eventsOf(exec) {
+    const session = exec.agent?.session;
+    if (session === undefined)
+        return undefined;
+    if (typeof session.snapshotEvents === 'function') {
+        try {
+            return session.snapshotEvents();
+        }
+        catch { /* ignore */ }
+    }
+    if (typeof session.ownEvents === 'function') {
+        try {
+            return session.ownEvents();
+        }
+        catch { /* ignore */ }
+    }
+    if (Array.isArray(session.events))
+        return session.events;
+    return undefined;
+}

package/lib/client.js

@@ -86,6 +86,13 @@ window.__ModuleLoader__.load({
 			"card.llmPresetChoose": "选择预置…",
 			"card.llmPresetPublic": "公共 API 预置",
 			"card.llmPresetHost": "DSH 模型组（选择后自动切换为会话模式）",
+			"card.networkEnabled": "网络拦截（networkEnabled）",
+			"card.networkEnabledHint": "开启后启动本地代理拦截子进程出站连接，按规则放行/阻断。关闭则零行为变更。",
+			"card.watch": "规则热重载（watch）",
+			"card.watchHint": "开启后自动监听规则文件变更并即时生效，无需手动 reload。",
+			"card.networkRebindNote": "切换后立即生效（自动重绑，无需重载插件）。",
+			"card.networkInjectEnv": "注入代理环境变量（networkInjectEnv）",
+			"card.networkInjectEnvHint": "开启后为子进程写入 HTTP(S)_PROXY / ALL_PROXY（并清空 NO_PROXY）。关闭则只启动监听、不改变任何进程环境。",
 			"card.healthStale": "宿主路由不可用（404）——node 半区仍是旧版本，请完全重启 dsh（而非仅刷新页面）后重试。",
 			"card.healthTest": "健康测试",
 			"card.healthRunning": "测试中…",
@@ -195,6 +202,13 @@ window.__ModuleLoader__.load({
 			"card.llmPresetChoose": "Pick a preset…",
 			"card.llmPresetPublic": "Public API presets",
 			"card.llmPresetHost": "DSH model groups (selecting one switches to the session receiver)",
+			"card.networkEnabled": "Network interception (networkEnabled)",
+			"card.networkEnabledHint": "When on, starts a local proxy that intercepts outbound subprocess connections and applies allow/deny rules. Off = zero behavior change.",
+			"card.watch": "Rule hot-reload (watch)",
+			"card.watchHint": "When on, automatically watches rule files for changes and applies them instantly without manual reload.",
+			"card.networkRebindNote": "Takes effect immediately — the proxy rebinds automatically, no plugin reload needed.",
+			"card.networkInjectEnv": "Inject proxy environment (networkInjectEnv)",
+			"card.networkInjectEnvHint": "Writes HTTP(S)_PROXY / ALL_PROXY for subprocesses (and clears NO_PROXY). Off = the listener runs but no process environment is changed.",
 			"card.healthStale": "Host route unavailable (404) — the node half is still an old build; fully restart dsh (not just the browser page) and retry.",
 			"card.healthTest": "Health test",
 			"card.healthRunning": "Testing…",
@@ -1404,6 +1418,106 @@ window.__ModuleLoader__.load({
 								}) : null
 							]
 						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: labelStyle,
+									children: t("card.networkEnabled")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.networkEnabledHint")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										alignItems: "center",
+										gap: "8px",
+										marginTop: "6px"
+									},
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "checkbox",
+										checked: value.networkEnabled === true,
+										disabled: readonly,
+										onChange: (event) => {
+											scope.set("networkEnabled", event.currentTarget.checked);
+										}
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: { fontSize: "13px" },
+										children: value.networkEnabled === true ? "ON" : "OFF"
+									})]
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.networkRebindNote")
+								})
+							]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: labelStyle,
+									children: t("card.networkInjectEnv")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.networkInjectEnvHint")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										alignItems: "center",
+										gap: "8px",
+										marginTop: "6px"
+									},
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "checkbox",
+										checked: value.networkInjectEnv !== false,
+										disabled: readonly,
+										onChange: (event) => {
+											scope.set("networkInjectEnv", event.currentTarget.checked);
+										}
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: { fontSize: "13px" },
+										children: value.networkInjectEnv !== false ? "ON" : "OFF"
+									})]
+								})
+							]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: labelStyle,
+									children: t("card.watch")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.watchHint")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										alignItems: "center",
+										gap: "8px",
+										marginTop: "6px"
+									},
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "checkbox",
+										checked: value.watch !== false,
+										disabled: readonly,
+										onChange: (event) => {
+											scope.set("watch", event.currentTarget.checked);
+										}
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: { fontSize: "13px" },
+										children: value.watch !== false ? "ON" : "OFF"
+									})]
+								})
+							]
+						}),
 						!snapshot.writable && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: {
 								margin: "8px 0 0",