dsh-perm-gate 2.1.2 → 4.0.0

package/lib/client.js

@@ -16,10 +16,11 @@ window.__ModuleLoader__.load({
 			"card.description": "独立审批档位：与只读 / 完全权限 / 白名单平行，在会话权限下拉中显示为「自动审查」。前端只暴露一个开关；后台四个审批策略可组合、由此处设置决定，仍对 P0 硬拒绝保持 fail-closed。",
 			"card.permissive": "启用自动审查档位",
 			"card.permissiveHint": "关闭时门禁行为与此前完全一致。",
+			"card.scopeNote": "档位作用域：本门禁仅在会话权限档位为 %scope 时生效。其他档位下整个门禁停用（含 P0 硬拒绝），由所选档位自身的策略接管；停用时会写入一条 stand-down 事件，并在输入框上方常驻一条提示条。",
 			"card.strategies": "后台审批策略（至少一个生效；可组合）",
 			"card.strategy.trustAutoAllow": "trustAutoAllow — 作用域内安全操作自动放行，危险/未知转 ask（中间档基线）",
 			"card.strategy.alwaysConfirm": "alwaysConfirm — 一律逐次 ask；审批面板「允许控件」含两个扩展按钮：「本会话重复允许该类」（会话语限次 grant）与「允许所有类型」（命令词持久迁入 rulesFile 白名单）",
-			"card.strategy.llmAssist": "llmAssist — 自定义 LLM 按风险分级裁决：safe 自动放行；deletion/credential/remote/system/bulk 硬风险自动拒绝；neutral 进入确认学习；失败/超时回退人工",
+			"card.strategy.llmAssist": "llmAssist — 自定义 LLM 按风险分级裁决：safe 自动放行；deletion/credential/remote/system/bulk 硬风险维持人工确认（分类器永不拒绝，只负责升级判断）；neutral 进入确认学习；失败/超时回退人工",
 			"card.strategy.trustEscalation": "trustEscalation — 沙箱升级免确认：本门禁已放行的调用，其工具内部发起的沙箱提权（shell / pwsh / edit 的 sandbox_permissions）由门禁直接批准，不再弹窗",
 			"card.strategy.trustEscalationHint": "沙箱提权审批发生在 tools/pre-execute 之后、工具体内部，门禁原本看不到它，因此「LLM 判安全已自动放行」的调用仍会弹窗要求你批准提权。开启后，仅对门禁确实放行过的那一次调用（按 callId 精确匹配）免确认，其余一律照旧走人工；目标模式非 workspace-write / danger-full-access 或理由无法识别时同样回退人工。关闭后提权保持人工把关。",
 			"card.readonly": "只读",
@@ -88,8 +89,6 @@ window.__ModuleLoader__.load({
 			"card.llmPresetHost": "DSH 模型组（选择后自动切换为会话模式）",
 			"card.networkEnabled": "网络拦截（networkEnabled）",
 			"card.networkEnabledHint": "开启后启动本地代理拦截子进程出站连接，按规则放行/阻断。关闭则零行为变更。",
-			"card.watch": "规则热重载（watch）",
-			"card.watchHint": "开启后自动监听规则文件变更并即时生效，无需手动 reload。",
 			"card.networkRebindNote": "切换后立即生效（自动重绑，无需重载插件）。",
 			"card.networkInjectEnv": "注入代理环境变量（networkInjectEnv）",
 			"card.networkInjectEnvHint": "开启后为子进程写入 HTTP(S)_PROXY / ALL_PROXY（并清空 NO_PROXY）。关闭则只启动监听、不改变任何进程环境。",
@@ -102,6 +101,7 @@ window.__ModuleLoader__.load({
 			"history.tag.manualApproved": "人工通过",
 			"history.tag.manualRejected": "人工拒绝",
 			"history.tag.manualCancelled": "人工取消",
+			"history.tag.standDown": "门禁停用",
 			"history.learnedProgress": "学习 %n/%t",
 			"history.snapshots": "diff 快照",
 			"history.clearSession": "仅清本会话",
@@ -124,7 +124,41 @@ window.__ModuleLoader__.load({
 			"history.diffChipTitle": "查看该文件改动对比",
 			"history.diffStats": "+%a / -%r 行变更 · %c 行未变",
 			"history.diffGone": "（文件当前已不存在）",
-			"history.diffHidden": "%n 行未修改"
+			"history.diffHidden": "%n 行未修改",
+			"card.dryRun": "规则测试",
+			"card.dryRunHint": "用当前生效的规则判定一次调用，不执行任何工具、不写入任何规则。改规则前先在这里验一遍。",
+			"card.dryRunTool": "工具名",
+			"card.dryRunCommand": "命令 / 参数",
+			"card.dryRunCommandPlaceholder": "git push --force origin main",
+			"card.dryRunTest": "测试",
+			"card.dryRunRunning": "判定中…",
+			"card.dryRunEmpty": "尚未测试。填入工具名与命令，点「测试」查看会怎么裁决。",
+			"card.dryRunVerdict": "裁决",
+			"card.dryRunAllow": "放行",
+			"card.dryRunAsk": "人工确认",
+			"card.dryRunDeny": "拒绝",
+			"card.dryRunRule": "命中规则",
+			"card.dryRunRuleNone": "无规则命中，走 defaultAction：%d",
+			"card.dryRunDimensions": "约束维度",
+			"card.dryRunReason": "原因",
+			"card.dryRunNote": "「命中规则」来自规则层。若裁决由更早的硬拒绝或关键词黑名单产生，则不会有规则序号——那种情况下列出的维度仅供参考。",
+			"card.dryRunNoRules": "（当前加载了 0 条规则：检查 rulesFile 路径）",
+			"card.dryRunFail": "测试失败：",
+			"card.dryRunStale": "路由不存在（插件未重启？）",
+			"card.rules": "权限 YAML",
+			"card.rulesHint": "门禁此刻实际加载的规则文件原文。只读——这里改不了任何东西。要改规则，用下面的白名单，或直接编辑该文件。",
+			"card.rulesRefresh": "刷新",
+			"card.rulesLoading": "读取中…",
+			"card.rulesPath": "文件",
+			"card.rulesNone": "未配置规则文件",
+			"card.rulesCounts": "规则",
+			"card.rulesDefault": "defaultAction",
+			"card.rulesStats": "%b 字节 · %l 行",
+			"card.rulesMissing": "文件不存在。门禁会退到内置默认。",
+			"card.rulesTruncated": "文件过大，仅显示前 512 KB。",
+			"card.rulesError": "加载失败：",
+			"card.rulesStale": "路由不存在（插件未重启？）",
+			"card.rulesNote": "此处只读：面板无法修改该文件，白名单段是唯一会写入它的地方。"
 		};
 		/** English dictionary (keys mirror zh). */
 		const en = {
@@ -132,10 +166,11 @@ window.__ModuleLoader__.load({
 			"card.description": "Independent approval tier, parallel to read-only / full-access / whitelist, shown as 自动审查 in the session permission picker. The front-end exposes a single switch; the four backend approval strategies are combinable via this panel and still fail-closed against P0 hard-deny.",
 			"card.permissive": "Enable the 自动审查 tier",
 			"card.permissiveHint": "When off, the gate behaves exactly as before.",
+			"card.scopeNote": "Preset scope: this gate only acts while the session permission preset is %scope. Under any other preset the whole gate stands down — P0 hard-deny included — and the selected preset's own policy takes over. A stand-down records one event and leaves a sticky strip above the input.",
 			"card.strategies": "Backend approval strategies (at least one effective; combinable)",
 			"card.strategy.trustAutoAllow": "trustAutoAllow — safe in-scope ops auto-allow; dangerous/unknown ask (baseline middle tier)",
 			"card.strategy.alwaysConfirm": "alwaysConfirm — every crossing asks; the approval \"allow controls\" get two extended buttons: \"repeat-allow this type this session\" (bounded session grant) and \"allow every occurrence\" (persist the command word into the rulesFile whitelist)",
-			"card.strategy.llmAssist": "llmAssist — a custom LLM grades risk: safe auto-allows; deletion/credential/remote/system/bulk hard risks auto-deny; neutral enters confirm-learning; failure/timeout falls back to the human",
+			"card.strategy.llmAssist": "llmAssist — a custom LLM grades risk: safe auto-allows; deletion/credential/remote/system/bulk hard risks keep the human ask (the classifier never denies — it only escalates); neutral enters confirm-learning; failure/timeout falls back to the human",
 			"card.strategy.trustEscalation": "trustEscalation — sandbox escalation without a prompt: for a call this gate already allowed, the sandbox widening a shell / pwsh / edit tool raises from inside itself is approved here instead of asking you",
 			"card.strategy.trustEscalationHint": "A sandbox escalation is asked from inside the tool body, after tools/pre-execute, so the gate never saw it — a call the LLM graded safe and the gate auto-allowed still prompted you to approve the widening. With this on, only the exact call the gate allowed (matched by callId) skips the prompt; everything else goes to the human as before, as does any unrecognized reason or a target other than workspace-write / danger-full-access. Turn it off to keep widening human-gated.",
 			"card.readonly": "Read-only",
@@ -204,8 +239,6 @@ window.__ModuleLoader__.load({
 			"card.llmPresetHost": "DSH model groups (selecting one switches to the session receiver)",
 			"card.networkEnabled": "Network interception (networkEnabled)",
 			"card.networkEnabledHint": "When on, starts a local proxy that intercepts outbound subprocess connections and applies allow/deny rules. Off = zero behavior change.",
-			"card.watch": "Rule hot-reload (watch)",
-			"card.watchHint": "When on, automatically watches rule files for changes and applies them instantly without manual reload.",
 			"card.networkRebindNote": "Takes effect immediately — the proxy rebinds automatically, no plugin reload needed.",
 			"card.networkInjectEnv": "Inject proxy environment (networkInjectEnv)",
 			"card.networkInjectEnvHint": "Writes HTTP(S)_PROXY / ALL_PROXY for subprocesses (and clears NO_PROXY). Off = the listener runs but no process environment is changed.",
@@ -218,6 +251,7 @@ window.__ModuleLoader__.load({
 			"history.tag.manualApproved": "Approved",
 			"history.tag.manualRejected": "Rejected",
 			"history.tag.manualCancelled": "Cancelled",
+			"history.tag.standDown": "Gate off",
 			"history.learnedProgress": "learned %n/%t",
 			"history.snapshots": "diff snapshots",
 			"history.clearSession": "Clear this session",
@@ -240,7 +274,41 @@ window.__ModuleLoader__.load({
 			"history.diffChipTitle": "View this file’s change comparison",
 			"history.diffStats": "+%a / -%r lines changed · %c unchanged",
 			"history.diffGone": " (file no longer exists)",
-			"history.diffHidden": "%n unmodified lines"
+			"history.diffHidden": "%n unmodified lines",
+			"card.dryRun": "Rule test",
+			"card.dryRunHint": "Judge one call against the rules in force. Runs no tool and writes no rule — check a rule here before you change it.",
+			"card.dryRunTool": "Tool",
+			"card.dryRunCommand": "Command / arguments",
+			"card.dryRunCommandPlaceholder": "git push --force origin main",
+			"card.dryRunTest": "Test",
+			"card.dryRunRunning": "Judging…",
+			"card.dryRunEmpty": "Nothing tested yet. Fill in a tool and command, then press Test to see how it would be judged.",
+			"card.dryRunVerdict": "Verdict",
+			"card.dryRunAllow": "allow",
+			"card.dryRunAsk": "ask",
+			"card.dryRunDeny": "deny",
+			"card.dryRunRule": "Matched rule",
+			"card.dryRunRuleNone": "no rule matched; defaultAction: %d",
+			"card.dryRunDimensions": "Dimensions",
+			"card.dryRunReason": "Reason",
+			"card.dryRunNote": "\"Matched rule\" comes from the rule layer. When the verdict was produced by an earlier hard-deny or by the keyword blacklist there is no rule index — the dimensions listed are then informational only.",
+			"card.dryRunNoRules": "(0 rules loaded — check the rulesFile path)",
+			"card.dryRunFail": "Test failed: ",
+			"card.dryRunStale": "route missing (plugin not restarted?)",
+			"card.rules": "Permissions YAML",
+			"card.rulesHint": "The rules file the gate is loading right now, verbatim. Read-only — nothing here can change it. To change rules, use the allowlist below or edit the file directly.",
+			"card.rulesRefresh": "Refresh",
+			"card.rulesLoading": "Reading…",
+			"card.rulesPath": "File",
+			"card.rulesNone": "no rules file configured",
+			"card.rulesCounts": "Rules",
+			"card.rulesDefault": "defaultAction",
+			"card.rulesStats": "%b bytes · %l lines",
+			"card.rulesMissing": "The file does not exist. The gate falls back to its built-in defaults.",
+			"card.rulesTruncated": "File is large; showing the first 512 KB only.",
+			"card.rulesError": "Load failed: ",
+			"card.rulesStale": "route missing (plugin not restarted?)",
+			"card.rulesNote": "Read-only: this panel cannot modify the file. The allowlist section is the only place that writes to it."
 		};
 		//#endregion
 		//#region src/deny-defaults.ts
@@ -309,6 +377,19 @@ window.__ModuleLoader__.load({
 			}
 		];
 		//#endregion
+		//#region src/preset.ts
+		/**
+		* Presets in which the gate is active. It owns both 自动审查 tiers — the plain
+		* one (file sandbox kept) and the full-access one (sandbox restriction lifted,
+		* same approval behaviour) — so a user can have the gate without inheriting a
+		* sandbox that breaks `git` / Cygwin tools. `'*'` makes it global (every
+		* preset, including the hard-deny layer).
+		*
+		* Lives in this dependency-free module (not `config.ts`) so the browser half can
+		* render the scope without pulling schemastery into the client bundle.
+		*/
+		const DEFAULT_GATE_PRESETS = ["permissive", "permissive-full"];
+		//#endregion
 		//#region src/client/sediment.tsx
 		/**
 		* Learning-sediment management section — the settings-card face of verdict
@@ -320,7 +401,6 @@ window.__ModuleLoader__.load({
 		* learning.json store the gate reads); actions POST back. Best-effort: a
 		* missing route renders the empty state, never an error.
 		*/
-		const POLL_MS$2 = 5e3;
 		const itemStyle = {
 			display: "flex",
 			alignItems: "center",
@@ -350,6 +430,8 @@ window.__ModuleLoader__.load({
 		};
 		function SedimentSection({ t }) {
 			const [body, setBody] = (0, react.useState)(null);
+			/** Latest loader, so a mutation can refresh the list without owning the fetch. */
+			const reloadRef = (0, react.useRef)(() => {});
 			(0, react.useEffect)(() => {
 				let alive = true;
 				const load = () => {
@@ -359,11 +441,18 @@ window.__ModuleLoader__.load({
 						if (alive) setBody({});
 					});
 				};
+				reloadRef.current = load;
 				load();
-				const timer = setInterval(load, POLL_MS$2);
+				const onVisible = () => {
+					if (document.visibilityState === "visible") load();
+				};
+				window.addEventListener("focus", onVisible);
+				document.addEventListener("visibilitychange", onVisible);
 				return () => {
 					alive = false;
-					clearInterval(timer);
+					reloadRef.current = () => {};
+					window.removeEventListener("focus", onVisible);
+					document.removeEventListener("visibilitychange", onVisible);
 				};
 			}, []);
 			const post = (payload) => {
@@ -371,6 +460,8 @@ window.__ModuleLoader__.load({
 					method: "POST",
 					headers: { "content-type": "application/json" },
 					body: JSON.stringify(payload)
+				}).then(() => {
+					reloadRef.current();
 				}).catch(() => {});
 			};
 			const threshold = body?.threshold ?? 3;
@@ -559,6 +650,67 @@ window.__ModuleLoader__.load({
 			const [bulkOpen, setBulkOpen] = (0, react.useState)(false);
 			const [healthBusy, setHealthBusy] = (0, react.useState)(false);
 			const [healthResult, setHealthResult] = (0, react.useState)(null);
+			const [dryTool, setDryTool] = (0, react.useState)("shell");
+			const [dryCommand, setDryCommand] = (0, react.useState)("");
+			const [dryBusy, setDryBusy] = (0, react.useState)(false);
+			const [dryReport, setDryReport] = (0, react.useState)(null);
+			const [dryError, setDryError] = (0, react.useState)(null);
+			const runDryRunTest = () => {
+				const tool = dryTool.trim() === "" ? "shell" : dryTool.trim();
+				const command = dryCommand.trim();
+				setDryBusy(true);
+				setDryError(null);
+				setDryReport(null);
+				fetch("/api/dsh-perm-gate/dry-run", {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify({
+						tool,
+						args: command === "" ? {} : { command }
+					})
+				}).then(async (r) => {
+					const text = await r.text();
+					if (r.status === 404) throw new Error(t("card.dryRunStale"));
+					try {
+						return JSON.parse(text);
+					} catch {
+						throw new Error(text.trim().slice(0, 120) !== "" ? text.trim().slice(0, 120) : `HTTP ${r.status}`);
+					}
+				}).then((res) => {
+					if (res.ok === true && res.result !== void 0) setDryReport(res.result);
+					else setDryError(res.error ?? t("card.dryRunFail"));
+				}).catch((e) => {
+					setDryError(String(e?.message ?? e));
+				}).finally(() => {
+					setDryBusy(false);
+				});
+			};
+			const [rulesBody, setRulesBody] = (0, react.useState)(null);
+			const [rulesBusy, setRulesBusy] = (0, react.useState)(false);
+			const [rulesError, setRulesError] = (0, react.useState)(null);
+			const loadRules = () => {
+				setRulesBusy(true);
+				setRulesError(null);
+				fetch("/api/dsh-perm-gate/rules", { headers: { "cache-control": "no-cache" } }).then(async (r) => {
+					const text = await r.text();
+					if (r.status === 404) throw new Error(t("card.rulesStale"));
+					try {
+						return JSON.parse(text);
+					} catch {
+						throw new Error(text.trim().slice(0, 120) !== "" ? text.trim().slice(0, 120) : `HTTP ${r.status}`);
+					}
+				}).then((res) => {
+					if (res.ok === true && res.result !== void 0) setRulesBody(res.result);
+					else setRulesError(res.error ?? t("card.rulesError"));
+				}).catch((e) => {
+					setRulesError(String(e?.message ?? e));
+				}).finally(() => {
+					setRulesBusy(false);
+				});
+			};
+			(0, react.useEffect)(() => {
+				loadRules();
+			}, []);
 			const receiverSource = (value.classifierSource ?? "custom") === "host" ? "host" : "custom";
 			const [receiverInfo, setReceiverInfo] = (0, react.useState)(null);
 			const [receiverNonce, setReceiverNonce] = (0, react.useState)(0);
@@ -696,6 +848,10 @@ window.__ModuleLoader__.load({
 							style: hintStyle,
 							children: t("card.permissiveHint")
 						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: hintStyle,
+							children: t("card.scopeNote").replace("%scope", ((value.gatePresets ?? []).length > 0 ? value.gatePresets : [...DEFAULT_GATE_PRESETS]).join(" / "))
+						}),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 							style: sectionStyle,
 							children: [
@@ -1115,6 +1271,325 @@ window.__ModuleLoader__.load({
 								}) : null
 							]
 						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: labelStyle,
+									children: t("card.dryRun")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.dryRunHint")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										flexWrap: "wrap",
+										gap: "8px",
+										alignItems: "flex-end",
+										margin: "6px 0"
+									},
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+											style: {
+												display: "flex",
+												flexDirection: "column",
+												gap: "4px",
+												flex: "0 0 120px"
+											},
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.dryRunTool")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+												type: "text",
+												value: dryTool,
+												disabled: readonly,
+												placeholder: "shell",
+												onChange: (e) => {
+													setDryTool(e.target.value);
+												},
+												onKeyDown: (e) => {
+													if (e.key === "Enter") runDryRunTest();
+												},
+												style: controlStyle
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+											style: {
+												display: "flex",
+												flexDirection: "column",
+												gap: "4px",
+												flex: "1 1 260px",
+												minWidth: 0
+											},
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.dryRunCommand")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+												type: "text",
+												value: dryCommand,
+												disabled: readonly,
+												placeholder: t("card.dryRunCommandPlaceholder"),
+												onChange: (e) => {
+													setDryCommand(e.target.value);
+												},
+												onKeyDown: (e) => {
+													if (e.key === "Enter") runDryRunTest();
+												},
+												style: controlStyle
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											disabled: readonly || dryBusy,
+											onClick: runDryRunTest,
+											style: {
+												...controlStyle,
+												flex: "0 0 auto",
+												cursor: readonly || dryBusy ? "default" : "pointer"
+											},
+											children: dryBusy ? t("card.dryRunRunning") : t("card.dryRunTest")
+										})
+									]
+								}),
+								dryError !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+									style: {
+										...hintStyle,
+										color: "var(--dsw-alias-label-error, #c0392b)"
+									},
+									children: [t("card.dryRunFail"), dryError]
+								}),
+								dryReport === null ? dryError === null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.dryRunEmpty")
+								}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										flexDirection: "column",
+										gap: "4px",
+										padding: "8px 10px",
+										borderRadius: "6px",
+										border: "1px solid var(--dsw-alias-border-l2)",
+										background: "var(--dsw-alias-bg-surface, transparent)",
+										fontSize: "12px",
+										lineHeight: "18px"
+									},
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											style: {
+												display: "flex",
+												alignItems: "center",
+												gap: "8px"
+											},
+											children: [
+												/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													style: fieldLabelStyle,
+													children: t("card.dryRunVerdict")
+												}),
+												(() => {
+													const verdict = dryReport.verdict ?? "ask";
+													const colour = verdict === "deny" ? "var(--dsw-alias-label-error, #c0392b)" : verdict === "allow" ? "var(--dsw-alias-label-success, #2e7d32)" : "var(--dsw-alias-label-warning, #b26a00)";
+													const text = verdict === "deny" ? t("card.dryRunDeny") : verdict === "allow" ? t("card.dryRunAllow") : t("card.dryRunAsk");
+													return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", {
+														style: { color: colour },
+														children: text
+													});
+												})(),
+												(dryReport.ruleCount ?? 0) === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													style: { color: "var(--dsw-alias-label-secondary, inherit)" },
+													children: t("card.dryRunNoRules")
+												})
+											]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											style: {
+												display: "flex",
+												gap: "8px",
+												overflowWrap: "anywhere"
+											},
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.dryRunRule")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+												style: {
+													font: "500 12px/18px var(--ds-font-family-code, monospace)",
+													color: "var(--dsw-alias-label-primary)"
+												},
+												children: dryReport.ruleLayer?.ruleIndex === void 0 ? t("card.dryRunRuleNone").replace("%d", dryReport.defaultAction ?? "ask") : `#${dryReport.ruleLayer.ruleIndex} (${dryReport.ruleLayer.action ?? "?"})`
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											style: {
+												display: "flex",
+												gap: "8px",
+												overflowWrap: "anywhere"
+											},
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.dryRunDimensions")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+												style: {
+													font: "500 12px/18px var(--ds-font-family-code, monospace)",
+													color: "var(--dsw-alias-label-primary)"
+												},
+												children: (dryReport.ruleLayer?.matchedDimensions ?? []).length === 0 ? "—" : (dryReport.ruleLayer?.matchedDimensions ?? []).join(", ")
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											style: {
+												display: "flex",
+												gap: "8px",
+												overflowWrap: "anywhere"
+											},
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.dryRunReason")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: { color: "var(--dsw-alias-label-secondary, inherit)" },
+												children: dryReport.reason ?? ""
+											})]
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+											style: {
+												...hintStyle,
+												margin: 0
+											},
+											children: t("card.dryRunNote")
+										})
+									]
+								})
+							]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										alignItems: "center",
+										justifyContent: "space-between",
+										gap: "8px"
+									},
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										style: labelStyle,
+										children: t("card.rules")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										disabled: rulesBusy,
+										onClick: loadRules,
+										style: {
+											...controlStyle,
+											flex: "0 0 auto",
+											cursor: rulesBusy ? "default" : "pointer"
+										},
+										children: rulesBusy ? t("card.rulesLoading") : t("card.rulesRefresh")
+									})]
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.rulesHint")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										gap: "8px",
+										overflowWrap: "anywhere",
+										marginTop: "6px"
+									},
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: fieldLabelStyle,
+										children: t("card.rulesPath")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+										style: {
+											font: "500 12px/18px var(--ds-font-family-code, monospace)",
+											color: "var(--dsw-alias-label-primary)"
+										},
+										children: rulesBody?.path !== void 0 && rulesBody.path !== "" ? rulesBody.path : t("card.rulesNone")
+									})]
+								}),
+								rulesError !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+									style: {
+										...hintStyle,
+										color: "var(--dsw-alias-label-error, #c0392b)"
+									},
+									children: [t("card.rulesError"), rulesError]
+								}),
+								rulesBody !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+										style: {
+											display: "flex",
+											flexWrap: "wrap",
+											gap: "12px",
+											marginTop: "4px"
+										},
+										children: [
+											/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+												style: fieldLabelStyle,
+												children: [t("card.rulesCounts"), " "]
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+												style: {
+													font: "500 12px/18px var(--ds-font-family-code, monospace)",
+													color: "var(--dsw-alias-label-primary)"
+												},
+												children: `deny ${rulesBody.counts?.deny ?? 0} · allow ${rulesBody.counts?.allow ?? 0} · ask ${rulesBody.counts?.ask ?? 0}`
+											})] }),
+											rulesBody.defaultAction !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+												style: fieldLabelStyle,
+												children: [t("card.rulesDefault"), " "]
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+												style: {
+													font: "500 12px/18px var(--ds-font-family-code, monospace)",
+													color: "var(--dsw-alias-label-primary)"
+												},
+												children: rulesBody.defaultAction
+											})] }),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: fieldLabelStyle,
+												children: t("card.rulesStats").replace("%b", String(rulesBody.bytes ?? 0)).replace("%l", String(rulesBody.lines ?? 0))
+											})
+										]
+									}),
+									rulesBody.error !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										style: {
+											...hintStyle,
+											color: "var(--dsw-alias-label-error, #c0392b)"
+										},
+										children: rulesBody.error
+									}),
+									rulesBody.exists === false && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										style: hintStyle,
+										children: t("card.rulesMissing")
+									}),
+									rulesBody.truncated === true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										style: hintStyle,
+										children: t("card.rulesTruncated")
+									}),
+									(rulesBody.raw ?? "") !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+										style: {
+											margin: "6px 0 0",
+											padding: "8px 10px",
+											maxHeight: "260px",
+											overflow: "auto",
+											borderRadius: "6px",
+											border: "1px solid var(--dsw-alias-border-l2)",
+											background: "var(--dsw-alias-bg-surface, transparent)",
+											font: "500 12px/18px var(--ds-font-family-code, monospace)",
+											color: "var(--dsw-alias-label-primary)",
+											whiteSpace: "pre"
+										},
+										children: rulesBody.raw
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										style: {
+											...hintStyle,
+											margin: 0
+										},
+										children: t("card.rulesNote")
+									})
+								] })
+							]
+						}),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 							style: sectionStyle,
 							children: [
@@ -1454,7 +1929,7 @@ window.__ModuleLoader__.load({
 								})
 							]
 						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+						value.networkEnabled === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 							style: sectionStyle,
 							children: [
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
@@ -1485,39 +1960,7 @@ window.__ModuleLoader__.load({
 									})]
 								})
 							]
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
-							style: sectionStyle,
-							children: [
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-									style: labelStyle,
-									children: t("card.watch")
-								}),
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-									style: hintStyle,
-									children: t("card.watchHint")
-								}),
-								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									style: {
-										display: "flex",
-										alignItems: "center",
-										gap: "8px",
-										marginTop: "6px"
-									},
-									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-										type: "checkbox",
-										checked: value.watch !== false,
-										disabled: readonly,
-										onChange: (event) => {
-											scope.set("watch", event.currentTarget.checked);
-										}
-									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										style: { fontSize: "13px" },
-										children: value.watch !== false ? "ON" : "OFF"
-									})]
-								})
-							]
-						}),
+						}) : null,
 						!snapshot.writable && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: {
 								margin: "8px 0 0",
@@ -1540,6 +1983,95 @@ window.__ModuleLoader__.load({
 			const body = await res.json();
 			return Array.isArray(body.events) ? body.events : [];
 		}
+		/** The host's push route (see src/events.ts); the browser half prefers it to polling. */
+		const STREAM_ROUTE = "/api/dsh-perm-gate/stream";
+		/** Stream attempts before the route is written off as unsupported and polling takes over. */
+		const STREAM_RETRIES = 3;
+		const STREAM_RETRY_MS = 3e3;
+		/**
+		* Degraded path only: a host predating the stream route still gets a servable
+		* strip. Deliberately slower than the old 2 s tick — it now also pauses while
+		* the tab is hidden, so a backgrounded page costs nothing.
+		*/
+		const FALLBACK_POLL_MS = 5e3;
+		/**
+		* Follow one session's decision feed until the returned close is called.
+		*
+		* Prefers the host's `text/event-stream` route, which pushes each decision as
+		* the gate appends it — no timer, no repeated re-read of the event log. When
+		* the stream is unavailable (an older host, a proxy that buffers it) this
+		* degrades to polling the JSON route, gated on page visibility.
+		*
+		* @param sessionId - the session whose decisions to follow.
+		* @param getSince - cursor supplier, read at connect and on every fallback poll.
+		* @param onBatch - receives the backlog, then live batches.
+		* @returns the close: ends the stream and any fallback timer.
+		*/
+		function followEvents(sessionId, getSince, onBatch) {
+			let closed = false;
+			let source = null;
+			let pollTimer = null;
+			let retries = 0;
+			let polls = 0;
+			const stopPolling = () => {
+				if (pollTimer === null) return;
+				clearInterval(pollTimer);
+				pollTimer = null;
+			};
+			const poll = () => {
+				if (closed) return;
+				if (typeof document !== "undefined" && document.visibilityState === "hidden") return;
+				const backlog = polls === 0;
+				polls += 1;
+				fetchEvents(sessionId, getSince()).then((events) => {
+					if (!closed) onBatch({
+						events,
+						backlog
+					});
+				}).catch(() => {});
+			};
+			const startPolling = () => {
+				if (closed || pollTimer !== null) return;
+				polls = 0;
+				poll();
+				pollTimer = setInterval(poll, FALLBACK_POLL_MS);
+			};
+			const connect = () => {
+				if (closed) return;
+				const query = `?sessionId=${encodeURIComponent(sessionId)}&since=${getSince()}`;
+				const next = new EventSource(`${STREAM_ROUTE}${query}`);
+				source = next;
+				next.onopen = () => {
+					retries = 0;
+					stopPolling();
+				};
+				next.onmessage = (message) => {
+					try {
+						const body = JSON.parse(message.data);
+						if (Array.isArray(body.events)) onBatch({
+							events: body.events,
+							backlog: body.backlog === true
+						});
+					} catch {}
+				};
+				next.onerror = () => {
+					if (source === next) source = null;
+					next.close();
+					if (closed) return;
+					retries += 1;
+					startPolling();
+					if (retries <= STREAM_RETRIES) setTimeout(connect, STREAM_RETRY_MS);
+				};
+			};
+			if (typeof EventSource === "undefined") startPolling();
+			else connect();
+			return () => {
+				closed = true;
+				source?.close();
+				source = null;
+				stopPolling();
+			};
+		}
 		/** Resolve the current session id from slot props (top level, nested, or hook). */
 		function resolveSessionId(props) {
 			const direct = props?.sessionId;
@@ -1594,6 +2126,12 @@ window.__ModuleLoader__.load({
 					tag: "CANCELLED",
 					sticky: false
 				};
+				case "stand-down": return {
+					color: "var(--dsw-alias-state-warn-label, #b9770e)",
+					bg: "var(--dsw-alias-state-warn-tertiary, rgba(185,119,14,0.14))",
+					tag: "GATE OFF",
+					sticky: true
+				};
 				default: return {
 					color: "var(--dsw-alias-state-success-primary, #1e8449)",
 					bg: "var(--dsw-alias-state-success-tertiary, rgba(30,132,73,0.08))",
@@ -1623,7 +2161,9 @@ window.__ModuleLoader__.load({
 			"human-approved": "人工通过",
 			"human-rejected": "人工拒绝",
 			"human-cancelled": "人工取消",
-			"no-approval-channel": "无审批通道"
+			"no-approval-channel": "无审批通道",
+			"preset-passthrough": "审批策略 never · 已放行",
+			"stand-down": "门禁停用"
 		};
 		/** Compact wall-clock rendering of an ISO timestamp. */
 		function clockTime(iso) {
@@ -1718,15 +2258,15 @@ window.__ModuleLoader__.load({
 		* dsh-perm-gate (a simplified version of the review-feed pattern demonstrated
 		* by dsh-approval-gate).
 		*
-		* Polls the host's `GET /api/dsh-perm-gate/events?sessionId=&since=` feed every
-		* 2 s and shows the latest decision above the conversation input: auto-allows
-		* (green) and denies (red) auto-dismiss after a few seconds; an ask (amber)
-		* stays until the next event because it needs the human's attention.
+		* Follows the host's decision feed (`GET /api/dsh-perm-gate/stream`, an SSE
+		* push; see `followEvents` for the older-host polling fallback) and shows the
+		* latest decision above the conversation input: auto-allows (green) and denies
+		* (red) auto-dismiss after a few seconds; an ask (amber) stays until the next
+		* event because it needs the human's attention.
 		*
 		* Everything is best-effort: no session id, a missing route, or any fetch
 		* failure simply means "render nothing". No @deepseek-ai value imports.
 		*/
-		const POLL_MS$1 = 2e3;
 		const AUTO_HIDE_MS = 4e3;
 		/** Localized tag for a manual terminal state; other kinds keep their short tag. */
 		function manualTagKey(kind) {
@@ -1747,35 +2287,27 @@ window.__ModuleLoader__.load({
 				setNotice(null);
 				if (sessionId === null) return;
 				let alive = true;
-				let timer = null;
-				const startPolling = () => {
-					if (!alive) return;
-					timer = setInterval(() => {
-						fetchEvents(sessionId, sinceRef.current).then((events) => {
-							if (!alive || events.length === 0) return;
-							const last = events[events.length - 1];
-							if (last === void 0 || last.id <= shownIdRef.current) return;
-							shownIdRef.current = last.id;
-							sinceRef.current = last.id;
-							setNotice(last);
-							if (hideTimerRef.current !== null) clearTimeout(hideTimerRef.current);
-							if (!presentation(last.kind).sticky) hideTimerRef.current = setTimeout(() => {
-								setNotice(null);
-							}, AUTO_HIDE_MS);
-						}).catch(() => {});
-					}, POLL_MS$1);
-				};
-				fetchEvents(sessionId, 0).then((events) => {
-					if (!alive) return;
-					if (events.length > 0) {
-						sinceRef.current = events[events.length - 1]?.id ?? 0;
+				const onBatch = (batch) => {
+					if (!alive || batch.events.length === 0) return;
+					const last = batch.events[batch.events.length - 1];
+					if (last === void 0) return;
+					if (last.id > sinceRef.current) sinceRef.current = last.id;
+					if (batch.backlog) {
 						shownIdRef.current = sinceRef.current;
+						return;
 					}
-					startPolling();
-				}).catch(startPolling);
+					if (last.id <= shownIdRef.current) return;
+					shownIdRef.current = last.id;
+					setNotice(last);
+					if (hideTimerRef.current !== null) clearTimeout(hideTimerRef.current);
+					if (!presentation(last.kind).sticky) hideTimerRef.current = setTimeout(() => {
+						setNotice(null);
+					}, AUTO_HIDE_MS);
+				};
+				const close = followEvents(sessionId, () => sinceRef.current, onBatch);
 				return () => {
 					alive = false;
-					if (timer !== null) clearInterval(timer);
+					close();
 					if (hideTimerRef.current !== null) clearTimeout(hideTimerRef.current);
 				};
 			}, [sessionId]);
@@ -1858,7 +2390,8 @@ window.__ModuleLoader__.load({
 		* Approval-history view — the `conversation.view` face of dsh-perm-gate,
 		* following the session-scoped review-page pattern demonstrated by
 		* dsh-approval-gate: a timeline of every gate decision in the current
-		* conversation, newest first, refreshed by polling.
+		* conversation, newest first, loaded once and then extended by the host's push
+		* feed (see `followEvents`).
 		*
 		* Beyond the decision timeline this view owns the review data plane: a snapshot
 		* inventory bar (with session/all clearing), per-event file chips, and a diff
@@ -1870,7 +2403,6 @@ window.__ModuleLoader__.load({
 		* routes. Everything is best-effort: no session id or any fetch failure renders
 		* the empty / error state. No @deepseek-ai value imports.
 		*/
-		const POLL_MS = 5e3;
 		/** Tag text per event kind, keyed into the plugin dictionary. */
 		const TAG_KEYS = {
 			auto: "history.tag.auto",
@@ -1879,7 +2411,8 @@ window.__ModuleLoader__.load({
 			learned: "history.tag.learned",
 			"manual-approved": "history.tag.manualApproved",
 			"manual-rejected": "history.tag.manualRejected",
-			"manual-cancelled": "history.tag.manualCancelled"
+			"manual-cancelled": "history.tag.manualCancelled",
+			"stand-down": "history.tag.standDown"
 		};
 		/** The file name alone (chips show the basename, like the reference page). */
 		function basename(p) {
@@ -2283,29 +2816,47 @@ window.__ModuleLoader__.load({
 				setEvents(null);
 				setError(null);
 				setStats(null);
+				if (sessionId === null) {
+					setEvents([]);
+					return;
+				}
 				let alive = true;
-				const load = () => {
+				let cursor = 0;
+				let closeStream = null;
+				fetchSnapshotStats(sessionId).then((next) => {
+					if (alive) setStats(next);
+				});
+				/**
+				* Decisions landing after the initial load. Both the stream's pushes and the
+				* fallback's ticks carry only events past the cursor, so they merge the same
+				* way; a batch is also the point where the snapshot inventory can have grown.
+				*/
+				const onBatch = (batch) => {
+					if (!alive || batch.events.length === 0) return;
+					for (const ev of batch.events) if (ev.id > cursor) cursor = ev.id;
+					setEvents((current) => {
+						const known = new Set((current ?? []).map((ev) => ev.id));
+						const added = batch.events.filter((ev) => !known.has(ev.id));
+						return added.length === 0 ? current : [...added, ...current ?? []].sort((a, b) => b.id - a.id);
+					});
+					setError(null);
 					fetchSnapshotStats(sessionId).then((next) => {
 						if (alive) setStats(next);
 					});
-					if (sessionId === null) {
-						setEvents([]);
-						return;
-					}
-					fetchEvents(sessionId, 0).then((loaded) => {
-						if (!alive) return;
-						setEvents([...loaded].sort((a, b) => b.id - a.id));
-						setError(null);
-					}).catch((e) => {
-						if (!alive) return;
-						setError(String(e?.message ?? e));
-					});
 				};
-				load();
-				const timer = setInterval(load, POLL_MS);
+				fetchEvents(sessionId, 0).then((loaded) => {
+					if (!alive) return;
+					setEvents([...loaded].sort((a, b) => b.id - a.id));
+					setError(null);
+					cursor = loaded.reduce((max, ev) => ev.id > max ? ev.id : max, 0);
+				}).catch((e) => {
+					if (alive) setError(String(e?.message ?? e));
+				}).finally(() => {
+					if (alive) closeStream = followEvents(sessionId, () => cursor, onBatch);
+				});
 				return () => {
 					alive = false;
-					clearInterval(timer);
+					closeStream?.();
 				};
 			}, [sessionId]);
 			/** Whether one event has a snapshot covering this file (chip is clickable). */