dsh-perm-gate 4.2.0-beta.5 → 4.2.0-beta.6

package/dsh.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "dsh-perm-gate",
   "name": "dsh-perm-gate",
-  "version": "4.2.0-beta.5",
+  "version": "4.2.0-beta.6",
   "description": {
     "en": "Deterministic-first, fail-closed permission gate for DeepSeek Harness 0.1.2+: a P0 hard-deny -> P1 precise session grant -> P2 static allow/deny rule chain -> P3 optional LLM classifier -> P4 ask pipeline over the tools/pre-execute waterfall, with a standalone CLI dry-run evaluator and an auditable decision log. It only vetoes with deny/ask and always delegates otherwise, and unknown or malformed rules fail loud instead of silently standing the gate down.",
     "zh": "面向 DeepSeek Harness 0.1.2+ 的确定性优先、失败即拒的权限闸门：在 tools/pre-execute 瀑布上串起 P0 硬拒绝 → P1 精确会话授权 → P2 静态 allow/deny 规则链 → P3 可选 LLM 语义分类 → P4 ask，并附带独立 CLI 干跑评估器与可审计的决策日志。只以 deny/ask 否决、其余一律放行，规则未知或非法时直接报错，绝不静默失效。"

package/lib/allowlist.d.ts

@@ -46,8 +46,10 @@ export declare function listAllowCommands(rulesFile: string): string[];
 export declare function replaceAllowCommands(rulesFile: string, patterns: readonly string[], reason?: string): boolean;
 /**
  * Parse the rules file into a plain document — the seed for the first
- * settings-backed allowlist write, so migrating a file-defined document into
- * the entry's `rules` config field cannot drop its deny/ask sections.
- * Returns `{}` when the file is absent or unreadable.
+ * settings-backed allowlist write and the activation-time rules seed, so
+ * migrating a file-defined document into the entry's `rules` config field
+ * cannot drop its deny/ask sections. The file's optional `permissions:`
+ * wrapper is unwrapped (the config field stores the bare form). Returns `{}`
+ * when the file is absent or unreadable.
  */
 export declare function readRulesFileDoc(rulesFile: string): unknown;

package/lib/allowlist.js

@@ -199,16 +199,23 @@ function readFileSafe(p) {
 }
 /**
  * Parse the rules file into a plain document — the seed for the first
- * settings-backed allowlist write, so migrating a file-defined document into
- * the entry's `rules` config field cannot drop its deny/ask sections.
- * Returns `{}` when the file is absent or unreadable.
+ * settings-backed allowlist write and the activation-time rules seed, so
+ * migrating a file-defined document into the entry's `rules` config field
+ * cannot drop its deny/ask sections. The file's optional `permissions:`
+ * wrapper is unwrapped (the config field stores the bare form). Returns `{}`
+ * when the file is absent or unreadable.
  */
 export function readRulesFileDoc(rulesFile) {
     const text = readFileSafe(rulesFile);
     if (text === '')
         return {};
     try {
-        return parse(text) ?? {};
+        const root = parse(text);
+        if (root !== null && typeof root === 'object' && !Array.isArray(root)
+            && root['permissions'] !== null && typeof root['permissions'] === 'object') {
+            return root['permissions'];
+        }
+        return root ?? {};
     }
     catch {
         return {};

package/lib/config.d.ts

@@ -277,14 +277,17 @@ export interface RulesConfig {
     readonly deny?: unknown[];
     readonly allow?: unknown[];
     readonly ask?: unknown[];
+    /** Activation-time seed marker (see RulesSchema). */
+    readonly initialized?: boolean;
 }
 /** Settings namespace for rules (separate from the main perm-gate namespace). */
 export declare const RULES_NAMESPACE = "dsh-perm-gate-rules";
 /**
  * Whether a settings-sourced rules document carries a REAL configuration —
- * entries or a non-default `defaultAction`. A namespace still holding bare
- * schema defaults is "not configured" and must not shadow the rules file
- * (the dual-source contract: settings first, file fallback).
+ * entries, a non-default `defaultAction`, or the `initialized` marker the
+ * activation-time seed writes after populating an empty document. A namespace
+ * still holding bare schema defaults is "not configured" and must not shadow
+ * the rules file (the dual-source contract: settings first, file fallback).
  */
 export declare function isRulesConfigured(value: unknown): boolean;
 /**

package/lib/config.js

@@ -113,19 +113,26 @@ export const RulesSchema = z.object({
     deny: z.array(RuleEntrySchema).default([]),
     allow: z.array(RuleEntrySchema).default([]),
     ask: z.array(RuleEntrySchema).default([]),
+    // Activation-time seed marker: the gate writes `true` the first time it
+    // populates an empty document (file migration or bare starter), so the
+    // seeded namespace becomes the rules source instead of shadowing nothing.
+    initialized: z.boolean().default(false),
 });
 /** Settings namespace for rules (separate from the main perm-gate namespace). */
 export const RULES_NAMESPACE = 'dsh-perm-gate-rules';
 /**
  * Whether a settings-sourced rules document carries a REAL configuration —
- * entries or a non-default `defaultAction`. A namespace still holding bare
- * schema defaults is "not configured" and must not shadow the rules file
- * (the dual-source contract: settings first, file fallback).
+ * entries, a non-default `defaultAction`, or the `initialized` marker the
+ * activation-time seed writes after populating an empty document. A namespace
+ * still holding bare schema defaults is "not configured" and must not shadow
+ * the rules file (the dual-source contract: settings first, file fallback).
  */
 export function isRulesConfigured(value) {
     if (typeof value !== 'object' || value === null || Array.isArray(value))
         return false;
     const doc = value;
+    if (doc.initialized === true)
+        return true;
     if (doc.defaultAction !== undefined && doc.defaultAction !== 'ask')
         return true;
     for (const key of ['deny', 'allow', 'ask']) {

package/lib/index.js

@@ -188,7 +188,19 @@ export function apply(ctx, config = {}) {
     const ENTRY_ID = 'dsh-perm-gate';
     const settingsRef = {};
     ctx.inject(['settings'], (child) => {
-        settingsRef.svc = child.settings;
+        const svc = child.settings;
+        settingsRef.svc = svc;
+        // Activation-time seed: a never-configured `rules` field is populated once
+        // — from the rules file when one exists (implicit migration), otherwise a
+        // bare starter document — and marked `initialized`, so the panel shows a
+        // live rules document from the first boot instead of a missing-file
+        // fallback. The field watcher below picks the seed up via reload.
+        if (svc !== undefined && readRulesDocument() === undefined) {
+            const seed = { ...readRulesFileDoc(rulesFilePath), initialized: true };
+            void svc.update(ENTRY_ID, { rules: seed }).catch((e) => {
+                console.warn('[dsh-perm-gate] rules seed write failed:', e);
+            });
+        }
     });
     const settingsWrite = (write) => {
         const svc = settingsRef.svc;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-perm-gate",
-  "version": "4.2.0-beta.5",
+  "version": "4.2.0-beta.6",
   "publishConfig": {
     "tag": "dsh-0.1.7"
   },