dsh-perm-gate 4.1.1 → 4.2.0-beta.1

package/dsh.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "dsh-perm-gate",
   "name": "dsh-perm-gate",
-  "version": "4.1.1",
+  "version": "2.6.0",
   "description": {
     "en": "Deterministic-first, fail-closed permission gate for DeepSeek Harness 0.1.2+: a P0 hard-deny -> P1 precise session grant -> P2 static allow/deny rule chain -> P3 optional LLM classifier -> P4 ask pipeline over the tools/pre-execute waterfall, with a standalone CLI dry-run evaluator and an auditable decision log. It only vetoes with deny/ask and always delegates otherwise, and unknown or malformed rules fail loud instead of silently standing the gate down.",
     "zh": "面向 DeepSeek Harness 0.1.2+ 的确定性优先、失败即拒的权限闸门：在 tools/pre-execute 瀑布上串起 P0 硬拒绝 → P1 精确会话授权 → P2 静态 allow/deny 规则链 → P3 可选 LLM 语义分类 → P4 ask，并附带独立 CLI 干跑评估器与可审计的决策日志。只以 deny/ask 否决、其余一律放行，规则未知或非法时直接报错，绝不静默失效。"
@@ -13,7 +13,7 @@
   },
   "license": "MIT",
   "engines": {
-    "dsh": ">=0.1.5-rc.1 <0.2.0-0"
+    "dsh": ">=0.1.2-alpha.1"
   },
   "components": {
     "host": "lib/index.js",

package/lib/client.js

@@ -148,7 +148,7 @@ window.__ModuleLoader__.load({
 			"card.dryRunFail": "测试失败：",
 			"card.dryRunStale": "路由不存在（插件未重启？）",
 			"card.rules": "Settings 内置规则",
-			"card.rulesHint": "门禁此刻实际加载的规则（来自 settings 命名空间 dsh-perm-gate-rules）。只读——这里改不了任何东西。要改规则，用下面的白名单，或在 settings.yaml 中编辑。",
+			"card.rulesHint": "门禁此刻实际加载的规则（来自 settings 命名空间 dsh-perm-gate-rules）。只读——这里改不了任何东西。要改规则，用下面的白名单，或在设置页中编辑。",
 			"card.rulesRefresh": "刷新",
 			"card.rulesLoading": "读取中…",
 			"card.rulesPath": "来源",
@@ -300,7 +300,7 @@ window.__ModuleLoader__.load({
 			"card.dryRunFail": "Test failed: ",
 			"card.dryRunStale": "route missing (plugin not restarted?)",
 			"card.rules": "Settings Built-in Rules",
-			"card.rulesHint": "The rules the gate is loading right now (from the dsh-perm-gate-rules settings namespace). Read-only — nothing here can change them. To change rules, use the allowlist below or edit settings.yaml.",
+			"card.rulesHint": "The rules the gate is loading right now (from the dsh-perm-gate-rules settings namespace). Read-only — nothing here can change them. To change rules, use the allowlist below or edit them on the settings page.",
 			"card.rulesRefresh": "Refresh",
 			"card.rulesLoading": "Reading…",
 			"card.rulesPath": "Source",
@@ -562,10 +562,10 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/card.tsx
 		/**
-		* Permissive settings card — the `settings.plugin.item` face of dsh-perm-gate.
+		* Permissive settings card — a `settings.plugins.tab` face of dsh-perm-gate.
 		*
-		* The card binds the `dsh-perm-gate` settings namespace through the
-		* `settingsScope` cordis service and renders its fields: the single front switch
+		* The card binds the plugin's profile entry (`dsh-perm-gate`) through the
+		* `configForms` cordis service and renders its fields: the single front switch
 		* (`permissive`) plus the three combinable backend strategies
 		* (`trustAutoAllow` / `alwaysConfirm` / `llmAssist`). Every change commits
 		* immediately through the scope (no staged form); the host reads the namespace
@@ -3150,13 +3150,13 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/client/index.ts
-		/** The settings namespace the host half registers (kept in lockstep with src/index.ts). */
+		/** The profile entry id of this plugin — the `configForms` key (kept in lockstep with cordis.patch.yml). */
 		const PERMISSIVE_NS = "dsh-perm-gate";
 		/** Services required by the browser half. */
 		const inject = [
 			"slots",
 			"locale",
-			"settingsScope"
+			"configForms"
 		];
 		/**
 		* Client plugin body: dictionaries plus the settings page registration.
@@ -3195,7 +3195,7 @@ window.__ModuleLoader__.load({
 					label: () => t("card.title"),
 					locale: NS,
 					inject: () => {
-						return { scope: ctx.settingsScope.bind({ namespace: PERMISSIVE_NS }) };
+						return { scope: ctx.configForms.get(PERMISSIVE_NS) };
 					}
 				}, PermissiveCard);
 			});