dsh-perm-gate 4.0.0 → 4.1.0-beta.2

package/CHANGELOG.md

@@ -5,21 +5,6 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [3.0.0] - 2026-09-14
-
-### Changed
-
-- **This branch is the DSH 0.1.5 line: version series `3.x`, `engines.dsh`
-  `>=0.1.5-rc.1 <0.2.0-0`, npm dist-tag `dsh-0.1.5`.** It is a **packaging delta only** —
-  the code is `main`'s, aligned to `main@42dabae`; the major bump is the fence, so a `^2.x`
-  install never resolves `3.x` and vice versa.
-- `dsh.plugin.json` now carries the same version and range as `package.json` (it still said
-  `2.6.0` / `>=0.1.2-alpha.1`), and the README version reference follows.
-- **`3.x` is not on npm yet.** No `3.x` version and no `dsh-0.1.5` dist-tag have been
-  published, so `dsh-perm-gate@dsh-0.1.5` does not resolve; until the release is cut, a
-  `0.1.5-rc.x` host installs this branch directly
-  (`github:drscrewdriver/dsh-perm-gate#sync/0.1.5-from-main`) or takes `@latest`.
-
 ## [2.6.0] - 2026-09-17
 
 ### Added

package/INSTALL.ja.md

@@ -12,31 +12,30 @@
 - [日本語 changelog](./CHANGELOG.ja.md)
 - [한국어 changelog](./CHANGELOG.ko.md)
 
-`dsh-perm-gate` バージョン **3.0.0**。判定チェーン、ルールファイル形式、自动审查
+`dsh-perm-gate` バージョン **2.4.1**。判定チェーン、ルールファイル形式、自动审查
 ティアについては [日本語 README](./README.ja.md) を参照してください。
 
 ## 必要条件
 
 - [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) がインストール済みであること。
-- Node.js **>= 24**（`package.json` の `engines` を参照）。
+- Node.js **>= 20**（`package.json` の `engines` を参照）。
 - `dsh` CLI が `PATH` に存在すること。
 - インストール先の profile。ブラウザ側は `web` profile 向けにのみビルドされます
   （`package.json` の `dsh.client.platform = "web"`）。
 
-## DSH のバージョンに合うラインを選ぶ
+## DSH のバージョンに合う tag を選ぶ
 
-2 つの長期ブランチが 2 つの DSH ラインを担当します：`main`（2.x）と
-`sync/0.1.5-from-main`（3.x、DSH 0.1.5 のパッケージング変体 —— `compat/0.1.5` は
-同じコードツリーを指します）。
+単一ビルドが DSH 両ラインをカバーするため、どちらの tag を選んでも動作するコードが
+インストールされます —— tag を残しておくのは、あなたがピン留めするバージョンが
+各ラインで意味を持つようにするためです。
 
 | DSH のバージョン | インストール方法 |
 |-----------------|-----------------|
-| `0.1.2-alpha.1` – `0.1.5-rc.0` | `dsh plugin --profile web add dsh-perm-gate`（tag `latest`、2.x ライン） |
-| `0.1.5-rc.1` 以上 | `dsh plugin --profile web add github:drscrewdriver/dsh-perm-gate#sync/0.1.5-from-main`（3.x ライン；npm の dist-tag は未公開 —— `@latest` は同じコードの 2.x パッケージングをインストールします） |
+| `0.1.2-alpha.1` 以上（`0.1.5-rc.2` を含む） | `dsh plugin --profile web add dsh-perm-gate`（tag `latest`） |
 | `0.1.1-rc.2` まで | `dsh plugin --profile web add dsh-perm-gate@legacy` |
 
-DSH は `engines.dsh` を強制しないため、tag と ref は選択メカニズムであり、互換性
-ゲートそのものではありません。ラインと tag の公開レイアウトについては
+DSH は `engines.dsh` を強制しないため、tag が選択メカニズムであり、互換性ゲート
+そのものではありません。単一ビルドが両ラインをカバーする理由と tag の公開方法については、
 [RELEASING.md](./RELEASING.md) を参照してください。
 
 ## 公式 CLI でインストール
@@ -73,11 +72,6 @@ profile の `cordis.yml` にプラグインを追加します：
     defaultAction: ask              # allow | ask | deny
 ```
 
-ルール本体は `dsh-perm-gate-rules` settings 名前空間に保存され、変更のたびにゲートが
-その場で再コンパイルされます。上記の YAML ファイルは任意です。名前空間が未設定の間
-だけ読み込まれ、プラグインが最初にルールを書き込む際（許可リストの承認、または設定
-UI での編集）にファイルのルールが自動的に取り込まれます。
-
 まずは [examples/permissions.example.yaml](./examples/permissions.example.yaml)
 から始め、profile を再読込してください。
 

package/INSTALL.ko.md

@@ -12,32 +12,31 @@
 - [日本語 changelog](./CHANGELOG.ja.md)
 - [한국어 changelog](./CHANGELOG.ko.md)
 
-`dsh-perm-gate` 버전 **3.0.0**. 결정 체인, 규칙 파일 형식, 自动审查 티어는
+`dsh-perm-gate` 버전 **2.4.1**. 결정 체인, 규칙 파일 형식, 自动审查 티어는
 [한국어 README](./README.ko.md)를 참고하세요.
 
 ## 요구 사항
 
 - [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)가 설치되어 있어야 합니다.
-- Node.js **>= 24** (`package.json`의 `engines` 참고).
+- Node.js **>= 20** (`package.json`의 `engines` 참고).
 - `dsh` CLI가 `PATH`에 있어야 합니다.
 - 설치할 profile. 브라우저 절반은 `web` profile용으로만 빌드됩니다
   (`package.json`의 `dsh.client.platform = "web"`).
 
-## DSH 버전에 맞는 라인 선택
+## DSH 버전에 맞는 tag 선택
 
-두 개의 장기 브랜치가 두 DSH 라인을 담당합니다: `main`(2.x)과
-`sync/0.1.5-from-main`(3.x, DSH 0.1.5 패키징 변형 —— `compat/0.1.5`는 같은 코드
-트리를 가리킵니다).
+단일 빌드는 두 DSH 라인을 모두 커버하므로, 어느 tag를 골라도 작동하는 코드가
+설치됩니다 —— tag를 유지하는 이유는 당신이 고정하는 버전이 각 라인에서 의미 있게
+유지되도록 하기 위함입니다.
 
 | DSH 버전 | 설치 방법 |
 |----------|-----------|
-| `0.1.2-alpha.1` – `0.1.5-rc.0` | `dsh plugin --profile web add dsh-perm-gate` (tag `latest`, 2.x 라인) |
-| `0.1.5-rc.1` 이상 | `dsh plugin --profile web add github:drscrewdriver/dsh-perm-gate#sync/0.1.5-from-main` (3.x 라인; npm dist-tag 미게시 —— `@latest`는 동일 코드의 2.x 패키징을 설치) |
+| `0.1.2-alpha.1` 이상 (`0.1.5-rc.2` 포함) | `dsh plugin --profile web add dsh-perm-gate` (tag `latest`) |
 | `0.1.1-rc.2` 이하 | `dsh plugin --profile web add dsh-perm-gate@legacy` |
 
-DSH는 `engines.dsh`를 강제하지 않으므로, tag과 ref은 선택 메커니즘이지 호환성
-게이트가 아닙니다. 라인과 tag 게시 레이아웃은 [RELEASING.md](./RELEASING.md)를
-참고하세요.
+DSH는 `engines.dsh`를 강제하지 않으므로, tag는 선택 메커니즘이지 호환성 게이트가
+아닙니다. 단일 아티팩트가 두 라인을 커버하는 이유와 tag가 게시되는 방식에 대해서는
+[RELEASING.md](./RELEASING.md)를 참고하세요.
 
 ## 공식 CLI로 설치
 
@@ -74,11 +73,6 @@ profile의 `cordis.yml`에 플러그인을 추가합니다:
     defaultAction: ask              # allow | ask | deny
 ```
 
-규칙 본체는 `dsh-perm-gate-rules` settings 네임스페이스에 저장되며, 변경 시마다
-게이트가 그 자리에서 다시 컴파일됩니다. 위의 YAML 파일은 선택 사항입니다.
-네임스페이스가 설정되지 않은 동안에만 읽히며, 플러그인이 처음으로 규칙을 쓸 때(허용
-목록 승인 또는 설정 UI에서의 편집) 파일의 규칙이 자동으로 흡수됩니다.
-
 [examples/permissions.example.yaml](./examples/permissions.example.yaml)에서 시작한 뒤
 profile을 다시 불러오세요.
 

package/INSTALL.md

@@ -12,32 +12,30 @@
 - [日本語 changelog](./CHANGELOG.ja.md)
 - [한국어 changelog](./CHANGELOG.ko.md)
 
-`dsh-perm-gate` version **3.0.0**. Continue with the [README](./README.md) for the
+`dsh-perm-gate` version **2.4.1**. Continue with the [README](./README.md) for the
 decision chain, the rules file format and the 自动审查 tier.
 
 ## Requirements
 
 - An existing [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) installation.
-- Node.js **>= 24** (see `engines` in `package.json`).
+- Node.js **>= 20** (see `engines` in `package.json`).
 - The `dsh` CLI on your `PATH`.
 - A profile to install into — the browser half only ships for the `web` profile
   (`dsh.client.platform = "web"` in `package.json`).
 
-## Pick the line for your DSH version
+## Pick the tag for your DSH version
 
-Two long-lived branches serve two DSH lines: `main` (2.x) and
-`sync/0.1.5-from-main` (3.x, the DSH 0.1.5 packaging variant — `compat/0.1.5`
-points at the same tree).
+One build serves both DSH lines, so either tag installs working code — the tag
+exists so a version you pin stays meaningful per line.
 
 | Your DSH | Install |
 |----------|---------|
-| `0.1.2-alpha.1` – `0.1.5-rc.0` | `dsh plugin --profile web add dsh-perm-gate` (tag `latest`, the 2.x line) |
-| `0.1.5-rc.1` or newer | `dsh plugin --profile web add github:drscrewdriver/dsh-perm-gate#sync/0.1.5-from-main` (the 3.x line; no npm dist-tag yet — `@latest` installs the same code with 2.x packaging) |
+| `0.1.2-alpha.1` or newer (incl. `0.1.5-rc.2`) | `dsh plugin --profile web add dsh-perm-gate` (tag `latest`) |
 | up to `0.1.1-rc.2` | `dsh plugin --profile web add dsh-perm-gate@legacy` |
 
-DSH does not enforce `engines.dsh`, so tags and refs are the selection mechanism
-rather than a compatibility gate. See [RELEASING.md](./RELEASING.md) for how the
-lines and tags are laid out.
+DSH does not enforce `engines.dsh`, so the tags are the selection mechanism rather
+than a compatibility gate. See [RELEASING.md](./RELEASING.md) for why one artifact
+covers both lines and how the tags are published.
 
 ## Install with the official CLI
 
@@ -75,12 +73,6 @@ Add the plugin to your profile's `cordis.yml`:
     gatePresets: [permissive]       # tiers where the gate is active at all (default)
 ```
 
-Rules are stored in the `dsh-perm-gate-rules` settings namespace, and every
-change recompiles the gate in place. The YAML file above is optional: it is only
-read while the namespace is untouched, and the first rules write from the plugin
-(an allowlist approval, or an edit in the settings UI) absorbs the file's rules
-automatically.
-
 Start from [examples/permissions.example.yaml](./examples/permissions.example.yaml),
 then reload the profile.
 

package/INSTALL.zh.md

@@ -12,30 +12,29 @@
 - [日本語 changelog](./CHANGELOG.ja.md)
 - [한국어 changelog](./CHANGELOG.ko.md)
 
-`dsh-perm-gate` 版本 **3.0.0**。裁决链、规则文件格式与自动审查档位请见
+`dsh-perm-gate` 版本 **2.4.1**。裁决链、规则文件格式与自动审查档位请见
 [中文 README](./README.zh.md)。
 
 ## 前置条件
 
 - 已安装 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)。
-- Node.js **>= 24**（见 `package.json` 的 `engines`）。
+- Node.js **>= 20**（见 `package.json` 的 `engines`）。
 - `dsh` CLI 已在 `PATH` 中。
 - 需要一个目标 profile —— 浏览器端只为 `web` profile 构建（`package.json`
   里 `dsh.client.platform = "web"`）。
 
-## 按你的 DSH 版本选择安装线
+## 按你的 DSH 版本选择 tag
 
-两条长期分支分别服务两条 DSH 线：`main`（2.x）与 `sync/0.1.5-from-main`
-（3.x，DSH 0.1.5 打包变体 —— `compat/0.1.5` 指向同一棵代码树）。
+单一构建同时覆盖两条 DSH 线，所以任一 tag 安装的代码都能工作 —— 保留 tag
+是为了让你锁定的版本在每条线上都有意义。
 
 | 你的 DSH | 安装方式 |
 |----------|----------|
-| `0.1.2-alpha.1` – `0.1.5-rc.0` | `dsh plugin --profile web add dsh-perm-gate`（tag `latest`，2.x 线） |
-| `0.1.5-rc.1` 或更高 | `dsh plugin --profile web add github:drscrewdriver/dsh-perm-gate#sync/0.1.5-from-main`（3.x 线；npm 尚无对应 dist-tag —— `@latest` 安装的是相同代码的 2.x 打包） |
+| `0.1.2-alpha.1` 或更高（含 `0.1.5-rc.2`） | `dsh plugin --profile web add dsh-perm-gate`（tag `latest`） |
 | 不高于 `0.1.1-rc.2` | `dsh plugin --profile web add dsh-perm-gate@legacy` |
 
-DSH 不强制 `engines.dsh`，因此 tag 与 ref 是选择机制而非兼容性关卡。
-各线与 tag 的发布布局详见 [RELEASING.md](./RELEASING.md)。
+DSH 不强制 `engines.dsh`，因此 tag 是选择机制而非兼容性关卡。
+详见 [RELEASING.md](./RELEASING.md) 了解为何单一制品覆盖两条线以及 tag 的发布方式。
 
 ## 用官方 CLI 安装
 
@@ -71,10 +70,6 @@ dsh plugin --profile web add .
     defaultAction: ask              # allow | ask | deny
 ```
 
-规则本体存储在 `dsh-perm-gate-rules` settings 命名空间中，每次变更都会就地重编译
-闸门。上面的 YAML 文件是可选的：只有命名空间未被配置时才会读取它，插件发起的首次
-规则写入（白名单批准或设置界面编辑）会自动收编文件中的规则。
-
 可从 [examples/permissions.example.yaml](./examples/permissions.example.yaml) 起步，
 然后重载 profile。
 

package/README.md

@@ -42,7 +42,7 @@
 > **private** method of the user-approval service on both, so it is read behind a
 > `typeof` probe and degrades to “policy unknown” when absent or throwing.
 
-Version **3.0.0** — see the [Changelog](./CHANGELOG.md).
+Version **2.6.0** — see the [Changelog](./CHANGELOG.md).
 
 A single, self-sufficient, deterministic-first, fail-closed permission gate for DeepSeek Harness.
 

package/dsh.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "dsh-perm-gate",
   "name": "dsh-perm-gate",
-  "version": "3.0.0",
+  "version": "2.6.0",
   "description": {
     "en": "Deterministic-first, fail-closed permission gate for DeepSeek Harness 0.1.2+: a P0 hard-deny -> P1 precise session grant -> P2 static allow/deny rule chain -> P3 optional LLM classifier -> P4 ask pipeline over the tools/pre-execute waterfall, with a standalone CLI dry-run evaluator and an auditable decision log. It only vetoes with deny/ask and always delegates otherwise, and unknown or malformed rules fail loud instead of silently standing the gate down.",
     "zh": "面向 DeepSeek Harness 0.1.2+ 的确定性优先、失败即拒的权限闸门：在 tools/pre-execute 瀑布上串起 P0 硬拒绝 → P1 精确会话授权 → P2 静态 allow/deny 规则链 → P3 可选 LLM 语义分类 → P4 ask，并附带独立 CLI 干跑评估器与可审计的决策日志。只以 deny/ask 否决、其余一律放行，规则未知或非法时直接报错，绝不静默失效。"
@@ -13,7 +13,7 @@
   },
   "license": "MIT",
   "engines": {
-    "dsh": ">=0.1.5-rc.1 <0.2.0-0"
+    "dsh": ">=0.1.2-alpha.1"
   },
   "components": {
     "host": "lib/index.js",

package/lib/client.js

@@ -89,6 +89,8 @@ window.__ModuleLoader__.load({
 			"card.llmPresetHost": "DSH 模型组（选择后自动切换为会话模式）",
 			"card.networkEnabled": "网络拦截（networkEnabled）",
 			"card.networkEnabledHint": "开启后启动本地代理拦截子进程出站连接，按规则放行/阻断。关闭则零行为变更。",
+			"card.watch": "规则热重载（watch）",
+			"card.watchHint": "开启后自动监听规则文件变更并即时生效，无需手动 reload。",
 			"card.networkRebindNote": "切换后立即生效（自动重绑，无需重载插件）。",
 			"card.networkInjectEnv": "注入代理环境变量（networkInjectEnv）",
 			"card.networkInjectEnvHint": "开启后为子进程写入 HTTP(S)_PROXY / ALL_PROXY（并清空 NO_PROXY）。关闭则只启动监听、不改变任何进程环境。",
@@ -145,20 +147,20 @@ window.__ModuleLoader__.load({
 			"card.dryRunNoRules": "（当前加载了 0 条规则：检查 rulesFile 路径）",
 			"card.dryRunFail": "测试失败：",
 			"card.dryRunStale": "路由不存在（插件未重启？）",
-			"card.rules": "权限 YAML",
-			"card.rulesHint": "门禁此刻实际加载的规则文件原文。只读——这里改不了任何东西。要改规则，用下面的白名单，或直接编辑该文件。",
+			"card.rules": "Settings 内置规则",
+			"card.rulesHint": "门禁此刻实际加载的规则（来自 settings 命名空间 dsh-perm-gate-rules）。只读——这里改不了任何东西。要改规则，用下面的白名单，或在 settings.yaml 中编辑。",
 			"card.rulesRefresh": "刷新",
 			"card.rulesLoading": "读取中…",
-			"card.rulesPath": "文件",
-			"card.rulesNone": "未配置规则文件",
+			"card.rulesPath": "来源",
+			"card.rulesNone": "未配置规则",
 			"card.rulesCounts": "规则",
 			"card.rulesDefault": "defaultAction",
 			"card.rulesStats": "%b 字节 · %l 行",
-			"card.rulesMissing": "文件不存在。门禁会退到内置默认。",
-			"card.rulesTruncated": "文件过大，仅显示前 512 KB。",
+			"card.rulesMissing": "规则不存在。门禁会退到内置默认。",
+			"card.rulesTruncated": "规则过大，仅显示前 512 KB。",
 			"card.rulesError": "加载失败：",
 			"card.rulesStale": "路由不存在（插件未重启？）",
-			"card.rulesNote": "此处只读：面板无法修改该文件，白名单段是唯一会写入它的地方。"
+			"card.rulesNote": "此处只读：面板无法修改规则，白名单段是唯一会写入 settings 的地方。"
 		};
 		/** English dictionary (keys mirror zh). */
 		const en = {
@@ -239,6 +241,8 @@ window.__ModuleLoader__.load({
 			"card.llmPresetHost": "DSH model groups (selecting one switches to the session receiver)",
 			"card.networkEnabled": "Network interception (networkEnabled)",
 			"card.networkEnabledHint": "When on, starts a local proxy that intercepts outbound subprocess connections and applies allow/deny rules. Off = zero behavior change.",
+			"card.watch": "Rule hot-reload (watch)",
+			"card.watchHint": "When on, automatically watches rule files for changes and applies them instantly without manual reload.",
 			"card.networkRebindNote": "Takes effect immediately — the proxy rebinds automatically, no plugin reload needed.",
 			"card.networkInjectEnv": "Inject proxy environment (networkInjectEnv)",
 			"card.networkInjectEnvHint": "Writes HTTP(S)_PROXY / ALL_PROXY for subprocesses (and clears NO_PROXY). Off = the listener runs but no process environment is changed.",
@@ -295,20 +299,20 @@ window.__ModuleLoader__.load({
 			"card.dryRunNoRules": "(0 rules loaded — check the rulesFile path)",
 			"card.dryRunFail": "Test failed: ",
 			"card.dryRunStale": "route missing (plugin not restarted?)",
-			"card.rules": "Permissions YAML",
-			"card.rulesHint": "The rules file the gate is loading right now, verbatim. Read-only — nothing here can change it. To change rules, use the allowlist below or edit the file directly.",
+			"card.rules": "Settings Built-in Rules",
+			"card.rulesHint": "The rules the gate is loading right now (from the dsh-perm-gate-rules settings namespace). Read-only — nothing here can change them. To change rules, use the allowlist below or edit settings.yaml.",
 			"card.rulesRefresh": "Refresh",
 			"card.rulesLoading": "Reading…",
-			"card.rulesPath": "File",
-			"card.rulesNone": "no rules file configured",
+			"card.rulesPath": "Source",
+			"card.rulesNone": "no rules configured",
 			"card.rulesCounts": "Rules",
 			"card.rulesDefault": "defaultAction",
 			"card.rulesStats": "%b bytes · %l lines",
-			"card.rulesMissing": "The file does not exist. The gate falls back to its built-in defaults.",
-			"card.rulesTruncated": "File is large; showing the first 512 KB only.",
+			"card.rulesMissing": "Rules not found. The gate falls back to its built-in defaults.",
+			"card.rulesTruncated": "Rules are large; showing the first 512 KB only.",
 			"card.rulesError": "Load failed: ",
 			"card.rulesStale": "route missing (plugin not restarted?)",
-			"card.rulesNote": "Read-only: this panel cannot modify the file. The allowlist section is the only place that writes to it."
+			"card.rulesNote": "Read-only: this panel cannot modify the rules. The allowlist section is the only place that writes to settings."
 		};
 		//#endregion
 		//#region src/deny-defaults.ts
@@ -1929,7 +1933,7 @@ window.__ModuleLoader__.load({
 								})
 							]
 						}),
-						value.networkEnabled === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 							style: sectionStyle,
 							children: [
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
@@ -1960,7 +1964,39 @@ window.__ModuleLoader__.load({
 									})]
 								})
 							]
-						}) : null,
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+							style: sectionStyle,
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: labelStyle,
+									children: t("card.watch")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: hintStyle,
+									children: t("card.watchHint")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									style: {
+										display: "flex",
+										alignItems: "center",
+										gap: "8px",
+										marginTop: "6px"
+									},
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "checkbox",
+										checked: value.watch !== false,
+										disabled: readonly,
+										onChange: (event) => {
+											scope.set("watch", event.currentTarget.checked);
+										}
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										style: { fontSize: "13px" },
+										children: value.watch !== false ? "ON" : "OFF"
+									})]
+								})
+							]
+						}),
 						!snapshot.writable && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: {
 								margin: "8px 0 0",