dsh-perm-gate 2.1.0 → 2.6.1

package/lib/client.js

@@ -16,10 +16,11 @@ window.__ModuleLoader__.load({
 			"card.description": "独立审批档位：与只读 / 完全权限 / 白名单平行，在会话权限下拉中显示为「自动审查」。前端只暴露一个开关；后台四个审批策略可组合、由此处设置决定，仍对 P0 硬拒绝保持 fail-closed。",
 			"card.permissive": "启用自动审查档位",
 			"card.permissiveHint": "关闭时门禁行为与此前完全一致。",
+			"card.scopeNote": "档位作用域：本门禁仅在会话权限档位为 %scope 时生效。其他档位下整个门禁停用（含 P0 硬拒绝），由所选档位自身的策略接管；停用时会写入一条 stand-down 事件，并在输入框上方常驻一条提示条。",
 			"card.strategies": "后台审批策略（至少一个生效；可组合）",
 			"card.strategy.trustAutoAllow": "trustAutoAllow — 作用域内安全操作自动放行，危险/未知转 ask（中间档基线）",
 			"card.strategy.alwaysConfirm": "alwaysConfirm — 一律逐次 ask；审批面板「允许控件」含两个扩展按钮：「本会话重复允许该类」（会话语限次 grant）与「允许所有类型」（命令词持久迁入 rulesFile 白名单）",
-			"card.strategy.llmAssist": "llmAssist — 自定义 LLM 按风险分级裁决：safe 自动放行；deletion/credential/remote/system/bulk 硬风险自动拒绝；neutral 进入确认学习；失败/超时回退人工",
+			"card.strategy.llmAssist": "llmAssist — 自定义 LLM 按风险分级裁决：safe 自动放行；deletion/credential/remote/system/bulk 硬风险维持人工确认（分类器永不拒绝，只负责升级判断）；neutral 进入确认学习；失败/超时回退人工",
 			"card.strategy.trustEscalation": "trustEscalation — 沙箱升级免确认：本门禁已放行的调用，其工具内部发起的沙箱提权（shell / pwsh / edit 的 sandbox_permissions）由门禁直接批准，不再弹窗",
 			"card.strategy.trustEscalationHint": "沙箱提权审批发生在 tools/pre-execute 之后、工具体内部，门禁原本看不到它，因此「LLM 判安全已自动放行」的调用仍会弹窗要求你批准提权。开启后，仅对门禁确实放行过的那一次调用（按 callId 精确匹配）免确认，其余一律照旧走人工；目标模式非 workspace-write / danger-full-access 或理由无法识别时同样回退人工。关闭后提权保持人工把关。",
 			"card.readonly": "只读",
@@ -86,6 +87,13 @@ window.__ModuleLoader__.load({
 			"card.llmPresetChoose": "选择预置…",
 			"card.llmPresetPublic": "公共 API 预置",
 			"card.llmPresetHost": "DSH 模型组（选择后自动切换为会话模式）",
+			"card.networkEnabled": "网络拦截（networkEnabled）",
+			"card.networkEnabledHint": "开启后启动本地代理拦截子进程出站连接，按规则放行/阻断。关闭则零行为变更。",
+			"card.watch": "规则热重载（watch）",
+			"card.watchHint": "开启后自动监听规则文件变更并即时生效，无需手动 reload。",
+			"card.networkRebindNote": "切换后立即生效（自动重绑，无需重载插件）。",
+			"card.networkInjectEnv": "注入代理环境变量（networkInjectEnv）",
+			"card.networkInjectEnvHint": "开启后为子进程写入 HTTP(S)_PROXY / ALL_PROXY（并清空 NO_PROXY）。关闭则只启动监听、不改变任何进程环境。",
 			"card.healthStale": "宿主路由不可用（404）——node 半区仍是旧版本，请完全重启 dsh（而非仅刷新页面）后重试。",
 			"card.healthTest": "健康测试",
 			"card.healthRunning": "测试中…",
@@ -95,6 +103,7 @@ window.__ModuleLoader__.load({
 			"history.tag.manualApproved": "人工通过",
 			"history.tag.manualRejected": "人工拒绝",
 			"history.tag.manualCancelled": "人工取消",
+			"history.tag.standDown": "门禁停用",
 			"history.learnedProgress": "学习 %n/%t",
 			"history.snapshots": "diff 快照",
 			"history.clearSession": "仅清本会话",
@@ -117,7 +126,41 @@ window.__ModuleLoader__.load({
 			"history.diffChipTitle": "查看该文件改动对比",
 			"history.diffStats": "+%a / -%r 行变更 · %c 行未变",
 			"history.diffGone": "（文件当前已不存在）",
-			"history.diffHidden": "%n 行未修改"
+			"history.diffHidden": "%n 行未修改",
+			"card.dryRun": "规则测试",
+			"card.dryRunHint": "用当前生效的规则判定一次调用，不执行任何工具、不写入任何规则。改规则前先在这里验一遍。",
+			"card.dryRunTool": "工具名",
+			"card.dryRunCommand": "命令 / 参数",
+			"card.dryRunCommandPlaceholder": "git push --force origin main",
+			"card.dryRunTest": "测试",
+			"card.dryRunRunning": "判定中…",
+			"card.dryRunEmpty": "尚未测试。填入工具名与命令，点「测试」查看会怎么裁决。",
+			"card.dryRunVerdict": "裁决",
+			"card.dryRunAllow": "放行",
+			"card.dryRunAsk": "人工确认",
+			"card.dryRunDeny": "拒绝",
+			"card.dryRunRule": "命中规则",
+			"card.dryRunRuleNone": "无规则命中，走 defaultAction：%d",
+			"card.dryRunDimensions": "约束维度",
+			"card.dryRunReason": "原因",
+			"card.dryRunNote": "「命中规则」来自规则层。若裁决由更早的硬拒绝或关键词黑名单产生，则不会有规则序号——那种情况下列出的维度仅供参考。",
+			"card.dryRunNoRules": "（当前加载了 0 条规则：检查 rulesFile 路径）",
+			"card.dryRunFail": "测试失败：",
+			"card.dryRunStale": "路由不存在（插件未重启？）",
+			"card.rules": "权限 YAML",
+			"card.rulesHint": "门禁此刻实际加载的规则文件原文。只读——这里改不了任何东西。要改规则，用下面的白名单，或直接编辑该文件。",
+			"card.rulesRefresh": "刷新",
+			"card.rulesLoading": "读取中…",
+			"card.rulesPath": "文件",
+			"card.rulesNone": "未配置规则文件",
+			"card.rulesCounts": "规则",
+			"card.rulesDefault": "defaultAction",
+			"card.rulesStats": "%b 字节 · %l 行",
+			"card.rulesMissing": "文件不存在。门禁会退到内置默认。",
+			"card.rulesTruncated": "文件过大，仅显示前 512 KB。",
+			"card.rulesError": "加载失败：",
+			"card.rulesStale": "路由不存在（插件未重启？）",
+			"card.rulesNote": "此处只读：面板无法修改该文件，白名单段是唯一会写入它的地方。"
 		};
 		/** English dictionary (keys mirror zh). */
 		const en = {
@@ -125,10 +168,11 @@ window.__ModuleLoader__.load({
 			"card.description": "Independent approval tier, parallel to read-only / full-access / whitelist, shown as 自动审查 in the session permission picker. The front-end exposes a single switch; the four backend approval strategies are combinable via this panel and still fail-closed against P0 hard-deny.",
 			"card.permissive": "Enable the 自动审查 tier",
 			"card.permissiveHint": "When off, the gate behaves exactly as before.",
+			"card.scopeNote": "Preset scope: this gate only acts while the session permission preset is %scope. Under any other preset the whole gate stands down — P0 hard-deny included — and the selected preset's own policy takes over. A stand-down records one event and leaves a sticky strip above the input.",
 			"card.strategies": "Backend approval strategies (at least one effective; combinable)",
 			"card.strategy.trustAutoAllow": "trustAutoAllow — safe in-scope ops auto-allow; dangerous/unknown ask (baseline middle tier)",
 			"card.strategy.alwaysConfirm": "alwaysConfirm — every crossing asks; the approval \"allow controls\" get two extended buttons: \"repeat-allow this type this session\" (bounded session grant) and \"allow every occurrence\" (persist the command word into the rulesFile whitelist)",
-			"card.strategy.llmAssist": "llmAssist — a custom LLM grades risk: safe auto-allows; deletion/credential/remote/system/bulk hard risks auto-deny; neutral enters confirm-learning; failure/timeout falls back to the human",
+			"card.strategy.llmAssist": "llmAssist — a custom LLM grades risk: safe auto-allows; deletion/credential/remote/system/bulk hard risks keep the human ask (the classifier never denies — it only escalates); neutral enters confirm-learning; failure/timeout falls back to the human",
 			"card.strategy.trustEscalation": "trustEscalation — sandbox escalation without a prompt: for a call this gate already allowed, the sandbox widening a shell / pwsh / edit tool raises from inside itself is approved here instead of asking you",
 			"card.strategy.trustEscalationHint": "A sandbox escalation is asked from inside the tool body, after tools/pre-execute, so the gate never saw it — a call the LLM graded safe and the gate auto-allowed still prompted you to approve the widening. With this on, only the exact call the gate allowed (matched by callId) skips the prompt; everything else goes to the human as before, as does any unrecognized reason or a target other than workspace-write / danger-full-access. Turn it off to keep widening human-gated.",
 			"card.readonly": "Read-only",
@@ -195,6 +239,13 @@ window.__ModuleLoader__.load({
 			"card.llmPresetChoose": "Pick a preset…",
 			"card.llmPresetPublic": "Public API presets",
 			"card.llmPresetHost": "DSH model groups (selecting one switches to the session receiver)",
+			"card.networkEnabled": "Network interception (networkEnabled)",
+			"card.networkEnabledHint": "When on, starts a local proxy that intercepts outbound subprocess connections and applies allow/deny rules. Off = zero behavior change.",
+			"card.watch": "Rule hot-reload (watch)",
+			"card.watchHint": "When on, automatically watches rule files for changes and applies them instantly without manual reload.",
+			"card.networkRebindNote": "Takes effect immediately — the proxy rebinds automatically, no plugin reload needed.",
+			"card.networkInjectEnv": "Inject proxy environment (networkInjectEnv)",
+			"card.networkInjectEnvHint": "Writes HTTP(S)_PROXY / ALL_PROXY for subprocesses (and clears NO_PROXY). Off = the listener runs but no process environment is changed.",
 			"card.healthStale": "Host route unavailable (404) — the node half is still an old build; fully restart dsh (not just the browser page) and retry.",
 			"card.healthTest": "Health test",
 			"card.healthRunning": "Testing…",
@@ -204,6 +255,7 @@ window.__ModuleLoader__.load({
 			"history.tag.manualApproved": "Approved",
 			"history.tag.manualRejected": "Rejected",
 			"history.tag.manualCancelled": "Cancelled",
+			"history.tag.standDown": "Gate off",
 			"history.learnedProgress": "learned %n/%t",
 			"history.snapshots": "diff snapshots",
 			"history.clearSession": "Clear this session",
@@ -226,7 +278,41 @@ window.__ModuleLoader__.load({
 			"history.diffChipTitle": "View this file’s change comparison",
 			"history.diffStats": "+%a / -%r lines changed · %c unchanged",
 			"history.diffGone": " (file no longer exists)",
-			"history.diffHidden": "%n unmodified lines"
+			"history.diffHidden": "%n unmodified lines",
+			"card.dryRun": "Rule test",
+			"card.dryRunHint": "Judge one call against the rules in force. Runs no tool and writes no rule — check a rule here before you change it.",
+			"card.dryRunTool": "Tool",
+			"card.dryRunCommand": "Command / arguments",
+			"card.dryRunCommandPlaceholder": "git push --force origin main",
+			"card.dryRunTest": "Test",
+			"card.dryRunRunning": "Judging…",
+			"card.dryRunEmpty": "Nothing tested yet. Fill in a tool and command, then press Test to see how it would be judged.",
+			"card.dryRunVerdict": "Verdict",
+			"card.dryRunAllow": "allow",
+			"card.dryRunAsk": "ask",
+			"card.dryRunDeny": "deny",
+			"card.dryRunRule": "Matched rule",
+			"card.dryRunRuleNone": "no rule matched; defaultAction: %d",
+			"card.dryRunDimensions": "Dimensions",
+			"card.dryRunReason": "Reason",
+			"card.dryRunNote": "\"Matched rule\" comes from the rule layer. When the verdict was produced by an earlier hard-deny or by the keyword blacklist there is no rule index — the dimensions listed are then informational only.",
+			"card.dryRunNoRules": "(0 rules loaded — check the rulesFile path)",
+			"card.dryRunFail": "Test failed: ",
+			"card.dryRunStale": "route missing (plugin not restarted?)",
+			"card.rules": "Permissions YAML",
+			"card.rulesHint": "The rules file the gate is loading right now, verbatim. Read-only — nothing here can change it. To change rules, use the allowlist below or edit the file directly.",
+			"card.rulesRefresh": "Refresh",
+			"card.rulesLoading": "Reading…",
+			"card.rulesPath": "File",
+			"card.rulesNone": "no rules file configured",
+			"card.rulesCounts": "Rules",
+			"card.rulesDefault": "defaultAction",
+			"card.rulesStats": "%b bytes · %l lines",
+			"card.rulesMissing": "The file does not exist. The gate falls back to its built-in defaults.",
+			"card.rulesTruncated": "File is large; showing the first 512 KB only.",
+			"card.rulesError": "Load failed: ",
+			"card.rulesStale": "route missing (plugin not restarted?)",
+			"card.rulesNote": "Read-only: this panel cannot modify the file. The allowlist section is the only place that writes to it."
 		};
 		//#endregion
 		//#region src/deny-defaults.ts
@@ -295,6 +381,19 @@ window.__ModuleLoader__.load({
 			}
 		];
 		//#endregion
+		//#region src/preset.ts
+		/**
+		* Presets in which the gate is active. It owns both 自动审查 tiers — the plain
+		* one (file sandbox kept) and the full-access one (sandbox restriction lifted,
+		* same approval behaviour) — so a user can have the gate without inheriting a
+		* sandbox that breaks `git` / Cygwin tools. `'*'` makes it global (every
+		* preset, including the hard-deny layer).
+		*
+		* Lives in this dependency-free module (not `config.ts`) so the browser half can
+		* render the scope without pulling schemastery into the client bundle.
+		*/
+		const DEFAULT_GATE_PRESETS = ["permissive", "permissive-full"];
+		//#endregion
 		//#region src/client/sediment.tsx
 		/**
 		* Learning-sediment management section — the settings-card face of verdict
@@ -545,6 +644,67 @@ window.__ModuleLoader__.load({
 			const [bulkOpen, setBulkOpen] = (0, react.useState)(false);
 			const [healthBusy, setHealthBusy] = (0, react.useState)(false);
 			const [healthResult, setHealthResult] = (0, react.useState)(null);
+			const [dryTool, setDryTool] = (0, react.useState)("shell");
+			const [dryCommand, setDryCommand] = (0, react.useState)("");
+			const [dryBusy, setDryBusy] = (0, react.useState)(false);
+			const [dryReport, setDryReport] = (0, react.useState)(null);
+			const [dryError, setDryError] = (0, react.useState)(null);
+			const runDryRunTest = () => {
+				const tool = dryTool.trim() === "" ? "shell" : dryTool.trim();
+				const command = dryCommand.trim();
+				setDryBusy(true);
+				setDryError(null);
+				setDryReport(null);
+				fetch("/api/dsh-perm-gate/dry-run", {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify({
+						tool,
+						args: command === "" ? {} : { command }
+					})
+				}).then(async (r) => {
+					const text = await r.text();
+					if (r.status === 404) throw new Error(t("card.dryRunStale"));
+					try {
+						return JSON.parse(text);
+					} catch {
+						throw new Error(text.trim().slice(0, 120) !== "" ? text.trim().slice(0, 120) : `HTTP ${r.status}`);
+					}
+				}).then((res) => {
+					if (res.ok === true && res.result !== void 0) setDryReport(res.result);
+					else setDryError(res.error ?? t("card.dryRunFail"));
+				}).catch((e) => {
+					setDryError(String(e?.message ?? e));
+				}).finally(() => {
+					setDryBusy(false);
+				});
+			};
+			const [rulesBody, setRulesBody] = (0, react.useState)(null);
+			const [rulesBusy, setRulesBusy] = (0, react.useState)(false);
+			const [rulesError, setRulesError] = (0, react.useState)(null);
+			const loadRules = () => {
+				setRulesBusy(true);
+				setRulesError(null);
+				fetch("/api/dsh-perm-gate/rules", { headers: { "cache-control": "no-cache" } }).then(async (r) => {
+					const text = await r.text();
+					if (r.status === 404) throw new Error(t("card.rulesStale"));
+					try {
+						return JSON.parse(text);
+					} catch {
+						throw new Error(text.trim().slice(0, 120) !== "" ? text.trim().slice(0, 120) : `HTTP ${r.status}`);
+					}
+				}).then((res) => {
+					if (res.ok === true && res.result !== void 0) setRulesBody(res.result);
+					else setRulesError(res.error ?? t("card.rulesError"));
+				}).catch((e) => {
+					setRulesError(String(e?.message ?? e));
+				}).finally(() => {
+					setRulesBusy(false);
+				});
+			};
+			(0, react.useEffect)(() => {
+				loadRules();
+			}, []);
 			const receiverSource = (value.classifierSource ?? "custom") === "host" ? "host" : "custom";
 			const [receiverInfo, setReceiverInfo] = (0, react.useState)(null);
 			const [receiverNonce, setReceiverNonce] = (0, react.useState)(0);
@@ -682,6 +842,10 @@ window.__ModuleLoader__.load({
 							style: hintStyle,
 							children: t("card.permissiveHint")
 						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: hintStyle,
+							children: t("card.scopeNote").replace("%scope", ((value.gatePresets ?? []).length > 0 ? value.gatePresets : [...DEFAULT_GATE_PRESETS]).join(" / "))
+						}),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 							style: sectionStyle,
 							children: [
@@ -1101,6 +1265,325 @@ window.__ModuleLoader__.load({
 								}) : null
 							]
 						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: labelStyle,
+									children: t("card.dryRun")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.dryRunHint")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										flexWrap: "wrap",
+										gap: "8px",
+										alignItems: "flex-end",
+										margin: "6px 0"
+									},
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+											style: {
+												display: "flex",
+												flexDirection: "column",
+												gap: "4px",
+												flex: "0 0 120px"
+											},
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.dryRunTool")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+												type: "text",
+												value: dryTool,
+												disabled: readonly,
+												placeholder: "shell",
+												onChange: (e) => {
+													setDryTool(e.target.value);
+												},
+												onKeyDown: (e) => {
+													if (e.key === "Enter") runDryRunTest();
+												},
+												style: controlStyle
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+											style: {
+												display: "flex",
+												flexDirection: "column",
+												gap: "4px",
+												flex: "1 1 260px",
+												minWidth: 0
+											},
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.dryRunCommand")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+												type: "text",
+												value: dryCommand,
+												disabled: readonly,
+												placeholder: t("card.dryRunCommandPlaceholder"),
+												onChange: (e) => {
+													setDryCommand(e.target.value);
+												},
+												onKeyDown: (e) => {
+													if (e.key === "Enter") runDryRunTest();
+												},
+												style: controlStyle
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											disabled: readonly || dryBusy,
+											onClick: runDryRunTest,
+											style: {
+												...controlStyle,
+												flex: "0 0 auto",
+												cursor: readonly || dryBusy ? "default" : "pointer"
+											},
+											children: dryBusy ? t("card.dryRunRunning") : t("card.dryRunTest")
+										})
+									]
+								}),
+								dryError !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+									style: {
+										...hintStyle,
+										color: "var(--dsw-alias-label-error, #c0392b)"
+									},
+									children: [t("card.dryRunFail"), dryError]
+								}),
+								dryReport === null ? dryError === null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.dryRunEmpty")
+								}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										flexDirection: "column",
+										gap: "4px",
+										padding: "8px 10px",
+										borderRadius: "6px",
+										border: "1px solid var(--dsw-alias-border-l2)",
+										background: "var(--dsw-alias-bg-surface, transparent)",
+										fontSize: "12px",
+										lineHeight: "18px"
+									},
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											style: {
+												display: "flex",
+												alignItems: "center",
+												gap: "8px"
+											},
+											children: [
+												/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													style: fieldLabelStyle,
+													children: t("card.dryRunVerdict")
+												}),
+												(() => {
+													const verdict = dryReport.verdict ?? "ask";
+													const colour = verdict === "deny" ? "var(--dsw-alias-label-error, #c0392b)" : verdict === "allow" ? "var(--dsw-alias-label-success, #2e7d32)" : "var(--dsw-alias-label-warning, #b26a00)";
+													const text = verdict === "deny" ? t("card.dryRunDeny") : verdict === "allow" ? t("card.dryRunAllow") : t("card.dryRunAsk");
+													return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", {
+														style: { color: colour },
+														children: text
+													});
+												})(),
+												(dryReport.ruleCount ?? 0) === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													style: { color: "var(--dsw-alias-label-secondary, inherit)" },
+													children: t("card.dryRunNoRules")
+												})
+											]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											style: {
+												display: "flex",
+												gap: "8px",
+												overflowWrap: "anywhere"
+											},
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.dryRunRule")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+												style: {
+													font: "500 12px/18px var(--ds-font-family-code, monospace)",
+													color: "var(--dsw-alias-label-primary)"
+												},
+												children: dryReport.ruleLayer?.ruleIndex === void 0 ? t("card.dryRunRuleNone").replace("%d", dryReport.defaultAction ?? "ask") : `#${dryReport.ruleLayer.ruleIndex} (${dryReport.ruleLayer.action ?? "?"})`
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											style: {
+												display: "flex",
+												gap: "8px",
+												overflowWrap: "anywhere"
+											},
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.dryRunDimensions")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+												style: {
+													font: "500 12px/18px var(--ds-font-family-code, monospace)",
+													color: "var(--dsw-alias-label-primary)"
+												},
+												children: (dryReport.ruleLayer?.matchedDimensions ?? []).length === 0 ? "—" : (dryReport.ruleLayer?.matchedDimensions ?? []).join(", ")
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											style: {
+												display: "flex",
+												gap: "8px",
+												overflowWrap: "anywhere"
+											},
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.dryRunReason")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: { color: "var(--dsw-alias-label-secondary, inherit)" },
+												children: dryReport.reason ?? ""
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+											style: {
+												...hintStyle,
+												margin: 0
+											},
+											children: t("card.dryRunNote")
+										})
+									]
+								})
+							]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										alignItems: "center",
+										justifyContent: "space-between",
+										gap: "8px"
+									},
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										style: labelStyle,
+										children: t("card.rules")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										disabled: rulesBusy,
+										onClick: loadRules,
+										style: {
+											...controlStyle,
+											flex: "0 0 auto",
+											cursor: rulesBusy ? "default" : "pointer"
+										},
+										children: rulesBusy ? t("card.rulesLoading") : t("card.rulesRefresh")
+									})]
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.rulesHint")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										gap: "8px",
+										overflowWrap: "anywhere",
+										marginTop: "6px"
+									},
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: fieldLabelStyle,
+										children: t("card.rulesPath")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+										style: {
+											font: "500 12px/18px var(--ds-font-family-code, monospace)",
+											color: "var(--dsw-alias-label-primary)"
+										},
+										children: rulesBody?.path !== void 0 && rulesBody.path !== "" ? rulesBody.path : t("card.rulesNone")
+									})]
+								}),
+								rulesError !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+									style: {
+										...hintStyle,
+										color: "var(--dsw-alias-label-error, #c0392b)"
+									},
+									children: [t("card.rulesError"), rulesError]
+								}),
+								rulesBody !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+										style: {
+											display: "flex",
+											flexWrap: "wrap",
+											gap: "12px",
+											marginTop: "4px"
+										},
+										children: [
+											/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+												style: fieldLabelStyle,
+												children: [t("card.rulesCounts"), " "]
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+												style: {
+													font: "500 12px/18px var(--ds-font-family-code, monospace)",
+													color: "var(--dsw-alias-label-primary)"
+												},
+												children: `deny ${rulesBody.counts?.deny ?? 0} · allow ${rulesBody.counts?.allow ?? 0} · ask ${rulesBody.counts?.ask ?? 0}`
+											})] }),
+											rulesBody.defaultAction !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+												style: fieldLabelStyle,
+												children: [t("card.rulesDefault"), " "]
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+												style: {
+													font: "500 12px/18px var(--ds-font-family-code, monospace)",
+													color: "var(--dsw-alias-label-primary)"
+												},
+												children: rulesBody.defaultAction
+											})] }),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.rulesStats").replace("%b", String(rulesBody.bytes ?? 0)).replace("%l", String(rulesBody.lines ?? 0))
+											})
+										]
+									}),
+									rulesBody.error !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										style: {
+											...hintStyle,
+											color: "var(--dsw-alias-label-error, #c0392b)"
+										},
+										children: rulesBody.error
+									}),
+									rulesBody.exists === false && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										style: hintStyle,
+										children: t("card.rulesMissing")
+									}),
+									rulesBody.truncated === true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										style: hintStyle,
+										children: t("card.rulesTruncated")
+									}),
+									(rulesBody.raw ?? "") !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+										style: {
+											margin: "6px 0 0",
+											padding: "8px 10px",
+											maxHeight: "260px",
+											overflow: "auto",
+											borderRadius: "6px",
+											border: "1px solid var(--dsw-alias-border-l2)",
+											background: "var(--dsw-alias-bg-surface, transparent)",
+											font: "500 12px/18px var(--ds-font-family-code, monospace)",
+											color: "var(--dsw-alias-label-primary)",
+											whiteSpace: "pre"
+										},
+										children: rulesBody.raw
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										style: {
+											...hintStyle,
+											margin: 0
+										},
+										children: t("card.rulesNote")
+									})
+								] })
+							]
+						}),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 							style: sectionStyle,
 							children: [
@@ -1404,6 +1887,106 @@ window.__ModuleLoader__.load({
 								}) : null
 							]
 						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: labelStyle,
+									children: t("card.networkEnabled")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.networkEnabledHint")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										alignItems: "center",
+										gap: "8px",
+										marginTop: "6px"
+									},
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "checkbox",
+										checked: value.networkEnabled === true,
+										disabled: readonly,
+										onChange: (event) => {
+											scope.set("networkEnabled", event.currentTarget.checked);
+										}
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: { fontSize: "13px" },
+										children: value.networkEnabled === true ? "ON" : "OFF"
+									})]
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.networkRebindNote")
+								})
+							]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: labelStyle,
+									children: t("card.networkInjectEnv")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.networkInjectEnvHint")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										alignItems: "center",
+										gap: "8px",
+										marginTop: "6px"
+									},
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "checkbox",
+										checked: value.networkInjectEnv !== false,
+										disabled: readonly,
+										onChange: (event) => {
+											scope.set("networkInjectEnv", event.currentTarget.checked);
+										}
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: { fontSize: "13px" },
+										children: value.networkInjectEnv !== false ? "ON" : "OFF"
+									})]
+								})
+							]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: labelStyle,
+									children: t("card.watch")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.watchHint")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										alignItems: "center",
+										gap: "8px",
+										marginTop: "6px"
+									},
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "checkbox",
+										checked: value.watch !== false,
+										disabled: readonly,
+										onChange: (event) => {
+											scope.set("watch", event.currentTarget.checked);
+										}
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: { fontSize: "13px" },
+										children: value.watch !== false ? "ON" : "OFF"
+									})]
+								})
+							]
+						}),
 						!snapshot.writable && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: {
 								margin: "8px 0 0",
@@ -1480,6 +2063,12 @@ window.__ModuleLoader__.load({
 					tag: "CANCELLED",
 					sticky: false
 				};
+				case "stand-down": return {
+					color: "var(--dsw-alias-state-warn-label, #b9770e)",
+					bg: "var(--dsw-alias-state-warn-tertiary, rgba(185,119,14,0.14))",
+					tag: "GATE OFF",
+					sticky: true
+				};
 				default: return {
 					color: "var(--dsw-alias-state-success-primary, #1e8449)",
 					bg: "var(--dsw-alias-state-success-tertiary, rgba(30,132,73,0.08))",
@@ -1509,7 +2098,9 @@ window.__ModuleLoader__.load({
 			"human-approved": "人工通过",
 			"human-rejected": "人工拒绝",
 			"human-cancelled": "人工取消",
-			"no-approval-channel": "无审批通道"
+			"no-approval-channel": "无审批通道",
+			"preset-passthrough": "审批策略 never · 已放行",
+			"stand-down": "门禁停用"
 		};
 		/** Compact wall-clock rendering of an ISO timestamp. */
 		function clockTime(iso) {
@@ -1765,7 +2356,8 @@ window.__ModuleLoader__.load({
 			learned: "history.tag.learned",
 			"manual-approved": "history.tag.manualApproved",
 			"manual-rejected": "history.tag.manualRejected",
-			"manual-cancelled": "history.tag.manualCancelled"
+			"manual-cancelled": "history.tag.manualCancelled",
+			"stand-down": "history.tag.standDown"
 		};
 		/** The file name alone (chips show the basename, like the reference page). */
 		function basename(p) {