dsh-permission-rules 0.4.2 → 0.5.2

package/src/settings.ts

@@ -0,0 +1,74 @@
+/**
+ * Host-side settings-namespace wiring: registers the whole plugin config
+ * as the `permission-rules` settings section (editable from the Web
+ * settings surface, loopback-only), keeps the runtime's config source
+ * pointed at the resolved section, and rebinds the network proxy when a
+ * bind/env-relevant knob changes live. On hosts without a settings
+ * service (the rc.6 line) nothing registers and the composition entry
+ * keeps serving the config — the plugin stays fully functional.
+ *
+ * The registration uses only structural interfaces: `@deepseek-ai/
+ * dsh-settings` is not an rc.6 peer, so importing it would hard-fail
+ * older hosts; the real service satisfies these shapes.
+ * @module dsh-permission-rules/settings
+ */
+
+import type { Context } from '@deepseek-ai/cordis'
+import type z from '@deepseek-ai/schemastery'
+import { Config, resolveConfig } from './config.ts'
+import type { Config as PluginConfig, ResolvedConfig } from './config.ts'
+import type { PermissionRulesRuntime } from './runtime.ts'
+
+/** The settings namespace this plugin owns (kebab-case, per the provider contract). */
+export const SETTINGS_NAMESPACE = 'permission-rules'
+
+/** The owner-facing scope the real settings service hands back. */
+interface SettingsScopeLike<T> {
+  get(): T
+  watch(callback: (next: T, prev: T) => void | Promise<void>): () => void
+}
+
+/** The structural settings-provider shape the real `ctx.settings` satisfies. */
+interface SettingsProviderLike {
+  register<T>(ns: string, schema: z<T>, options?: {
+    base?: Partial<T>
+    expose?: boolean
+    applies?: string
+    validate?: (value: T) => void
+  }): SettingsScopeLike<T>
+}
+
+/**
+ * Register the settings section and bind the runtime's live config
+ * source. Runs only where a settings service is composed.
+ * @param ctx - the plugin context.
+ * @param runtime - the runtime whose config source follows the section.
+ * @param entry - the composition entry config (the section's `base` layer).
+ */
+export function attachSettingsSection(ctx: Context, runtime: PermissionRulesRuntime, entry: PluginConfig): void {
+  ctx.inject(['settings'], (scope) => {
+    const settings = scope.get('settings') as SettingsProviderLike | undefined
+    if (settings === undefined) return
+    const registration = settings.register<PluginConfig>(SETTINGS_NAMESPACE, Config as z<PluginConfig>, {
+      base: entry,
+      expose: true,
+      applies: 'live',
+      validate: (value: PluginConfig) => {
+        // Schemastery already enforced the closed enums; this re-runs the
+        // numeric-bounds checks so an out-of-range stored value is refused
+        // at write time instead of disabling the owner later.
+        resolveConfig(value)
+      },
+    })
+    runtime.setConfigSource(() => resolveConfig(registration.get()))
+    registration.watch((next, prev) => {
+      const nextConfig = resolveConfig(next) as ResolvedConfig
+      const prevConfig = resolveConfig(prev) as ResolvedConfig
+      const rebind = nextConfig.network.proxyPort !== prevConfig.network.proxyPort
+        || nextConfig.network.proxyBind !== prevConfig.network.proxyBind
+        || nextConfig.network.injectEnv !== prevConfig.network.injectEnv
+        || nextConfig.network.noProxy !== prevConfig.network.noProxy
+      if (rebind) void runtime.onNetworkConfigChanged()
+    })
+  })
+}

package/src/typert.host.ts

@@ -0,0 +1,25 @@
+/**
+ * The hand-written Typert HOST manifest for `dsh-permission-rules`,
+ * exported as `./typert` so the harness's typert-loader registers the
+ * `permissionRules` settings-page invocations automatically when this
+ * plugin mounts. Same shape as a generator output (validated by the
+ * loader): package face, empty model and schemas, and the canonical
+ * invocation list shared with the client Remote contribution
+ * (`src/wire.ts`).
+ * @module dsh-permission-rules/typert
+ */
+
+import { PERMISSION_RULES_INVOCATIONS } from './wire.ts'
+
+/** Host Typert manifest (validated by `@deepseek-ai/dsh-typert-loader`). */
+export const TYPERT = Object.freeze({
+  package: 'dsh-permission-rules',
+  face: 'host',
+  schemas: Object.freeze([]),
+  invocations: PERMISSION_RULES_INVOCATIONS,
+  model: Object.freeze({
+    services: Object.freeze([]),
+    events: Object.freeze([]),
+    objects: Object.freeze([]),
+  }),
+})

package/src/wire.ts

@@ -0,0 +1,239 @@
+/**
+ * The settings-page wire vocabulary: the snapshot/rule-editor types served
+ * over the `permissionRules` Typert Remote namespace, their zod v4
+ * validation schemas (the strict codec both Typert faces carry), and the
+ * invocation descriptors shared verbatim by the host `./typert` manifest
+ * and the client Remote contribution. One canonical source for both faces
+ * keeps the host and client codecs from ever drifting apart.
+ * @module dsh-permission-rules/wire
+ */
+
+import { z } from 'zod'
+import type { InvocationDescriptor } from '@deepseek-ai/dsh-typert-protocol'
+
+/** The three network policy modes (wire vocabulary). */
+export type NetworkModeWire = 'deny-all' | 'whitelist' | 'allow-all'
+
+/** One recent proxy-layer block, sanitized for display. */
+export interface NetworkBlockView {
+  /** Epoch ms of the block. */
+  time: number
+  /** Attributed shell tool (`bash`/`pwsh`) or `subprocess`. */
+  tool: string
+  /** Whether an in-flight shell execution could be named. */
+  attributed: boolean
+  /** Blocked target host. */
+  domain: string
+  scheme: 'http' | 'https' | null
+  port: number | null
+  action: 'deny' | 'ask'
+  mode: NetworkModeWire
+  /** Whether a rule (true) or the mode default (false) blocked the target. */
+  matched: boolean
+  source: string
+  ruleIndex: number | null
+  reason: string | null
+}
+
+/** One rule file the editor may read/write (a known rule source only). */
+export interface RuleSourceView {
+  path: string
+  exists: boolean
+  /** The workspace the source belongs to, or null for the deployment fallback. */
+  cwd: string | null
+}
+
+/** The complete settings-page snapshot served by `permissionRules/networkStatus`. */
+export interface PermissionRulesSnapshot {
+  enabled: boolean
+  mode: NetworkModeWire
+  /** The configured mode knob (`auto` or an explicit mode). */
+  configuredMode: 'auto' | NetworkModeWire
+  /** The sandbox preset `auto` mapped from, or null. */
+  sandboxMode: string | null
+  proxyPort: number
+  proxyActive: boolean
+  denied: number
+  askBlocked: number
+  recent: readonly NetworkBlockView[]
+  sources: readonly RuleSourceView[]
+}
+
+/** Strict wire schema for {@link PermissionRulesSnapshot}. */
+export const PERMISSION_RULES_SNAPSHOT_SCHEMA = z.object({
+  enabled: z.boolean(),
+  mode: z.union([z.literal('deny-all'), z.literal('whitelist'), z.literal('allow-all')]),
+  configuredMode: z.union([z.literal('auto'), z.literal('deny-all'), z.literal('whitelist'), z.literal('allow-all')]),
+  sandboxMode: z.string().nullable(),
+  proxyPort: z.number().int(),
+  proxyActive: z.boolean(),
+  denied: z.number().int(),
+  askBlocked: z.number().int(),
+  recent: z.array(z.object({
+    time: z.number().int(),
+    tool: z.string(),
+    attributed: z.boolean(),
+    domain: z.string(),
+    scheme: z.union([z.literal('http'), z.literal('https'), z.null()]),
+    port: z.number().int().nullable(),
+    action: z.union([z.literal('deny'), z.literal('ask')]),
+    mode: z.union([z.literal('deny-all'), z.literal('whitelist'), z.literal('allow-all')]),
+    matched: z.boolean(),
+    source: z.string(),
+    ruleIndex: z.number().int().nullable(),
+    reason: z.string().nullable(),
+  })),
+  sources: z.array(z.object({
+    path: z.string(),
+    exists: z.boolean(),
+    cwd: z.string().nullable(),
+  })),
+})
+
+/** Result of `permissionRules/rulesRead`. */
+export interface RulesReadResult {
+  path: string
+  exists: boolean
+  text: string
+  error: string | null
+}
+
+/** Strict wire schema for {@link RulesReadResult}. */
+export const RULES_READ_SCHEMA = z.object({
+  path: z.string(),
+  exists: z.boolean(),
+  text: z.string(),
+  error: z.string().nullable(),
+})
+
+/** Result of `permissionRules/rulesSave`. */
+export interface RulesSaveResult {
+  ok: boolean
+  error: string | null
+  reloaded: number | null
+}
+
+/** Strict wire schema for {@link RulesSaveResult}. */
+export const RULES_SAVE_SCHEMA = z.object({
+  ok: z.boolean(),
+  error: z.string().nullable(),
+  reloaded: z.number().int().nullable(),
+})
+
+/** Result of `permissionRules/reload`. */
+export interface RulesReloadResult {
+  ok: boolean
+  error: string | null
+}
+
+/** Strict wire schema for {@link RulesReloadResult}. */
+export const RULES_RELOAD_SCHEMA = z.object({
+  ok: z.boolean(),
+  error: z.string().nullable(),
+})
+
+/** The `permissionRules/networkStatus` invocation descriptor (no parameters). */
+export const NETWORK_STATUS_DESCRIPTOR = Object.freeze({
+  id: 'dsh-permission-rules#permissionRules/networkStatus',
+  service: 'permissionRules',
+  namespace: 'permissionRules',
+  method: 'networkStatus',
+  invocation: Object.freeze({ kind: 'direct' }),
+  parameters: Object.freeze([]),
+  result: Object.freeze({
+    mode: 'strict',
+    typeSymbol: 'dsh-permission-rules/types#PermissionRulesSnapshot',
+    schema: PERMISSION_RULES_SNAPSHOT_SCHEMA,
+  }),
+  sourceLocation: Object.freeze({ file: 'src/wire.ts', line: 1, column: 1 }),
+} as const) satisfies InvocationDescriptor
+
+/** The `permissionRules/rulesRead` invocation descriptor. */
+export const RULES_READ_DESCRIPTOR = Object.freeze({
+  id: 'dsh-permission-rules#permissionRules/rulesRead',
+  service: 'permissionRules',
+  namespace: 'permissionRules',
+  method: 'rulesRead',
+  invocation: Object.freeze({ kind: 'direct' }),
+  parameters: Object.freeze([Object.freeze({
+    name: 'path',
+    wire: 'path',
+    source: 'json',
+    codec: Object.freeze({
+      mode: 'strict',
+      typeSymbol: 'dsh-permission-rules/types#RulesReadRequestPath',
+      schema: z.string(),
+    }),
+  } satisfies InvocationDescriptor['parameters'][number])]),
+  result: Object.freeze({
+    mode: 'strict',
+    typeSymbol: 'dsh-permission-rules/types#RulesReadResult',
+    schema: RULES_READ_SCHEMA,
+  }),
+  sourceLocation: Object.freeze({ file: 'src/wire.ts', line: 1, column: 1 }),
+} as const) satisfies InvocationDescriptor
+
+/** The `permissionRules/rulesSave` invocation descriptor. */
+export const RULES_SAVE_DESCRIPTOR = Object.freeze({
+  id: 'dsh-permission-rules#permissionRules/rulesSave',
+  service: 'permissionRules',
+  namespace: 'permissionRules',
+  method: 'rulesSave',
+  invocation: Object.freeze({ kind: 'direct' }),
+  parameters: Object.freeze([
+    Object.freeze({
+      name: 'path',
+      wire: 'path',
+      source: 'json',
+      codec: Object.freeze({
+        mode: 'strict',
+        typeSymbol: 'dsh-permission-rules/types#RulesSaveRequestPath',
+        schema: z.string(),
+      }),
+    } satisfies InvocationDescriptor['parameters'][number]),
+    Object.freeze({
+      name: 'text',
+      wire: 'text',
+      source: 'json',
+      codec: Object.freeze({
+        mode: 'strict',
+        typeSymbol: 'dsh-permission-rules/types#RulesSaveRequestText',
+        schema: z.string(),
+      }),
+    } satisfies InvocationDescriptor['parameters'][number]),
+  ]),
+  result: Object.freeze({
+    mode: 'strict',
+    typeSymbol: 'dsh-permission-rules/types#RulesSaveResult',
+    schema: RULES_SAVE_SCHEMA,
+  }),
+  sourceLocation: Object.freeze({ file: 'src/wire.ts', line: 1, column: 1 }),
+} as const) satisfies InvocationDescriptor
+
+/** The `permissionRules/reload` invocation descriptor (no parameters). */
+export const RULES_RELOAD_DESCRIPTOR = Object.freeze({
+  id: 'dsh-permission-rules#permissionRules/reload',
+  service: 'permissionRules',
+  namespace: 'permissionRules',
+  method: 'reload',
+  invocation: Object.freeze({ kind: 'direct' }),
+  parameters: Object.freeze([]),
+  result: Object.freeze({
+    mode: 'strict',
+    typeSymbol: 'dsh-permission-rules/types#RulesReloadResult',
+    schema: RULES_RELOAD_SCHEMA,
+  }),
+  sourceLocation: Object.freeze({ file: 'src/wire.ts', line: 1, column: 1 }),
+} as const) satisfies InvocationDescriptor
+
+/**
+ * The canonical invocation list both Typert faces register — the host
+ * manifest and the client contribution share these exact descriptor
+ * objects, so the two wire codecs can never drift apart.
+ */
+export const PERMISSION_RULES_INVOCATIONS = Object.freeze([
+  NETWORK_STATUS_DESCRIPTOR,
+  RULES_READ_DESCRIPTOR,
+  RULES_SAVE_DESCRIPTOR,
+  RULES_RELOAD_DESCRIPTOR,
+])

package/lib/types/config.js

@@ -1,99 +0,0 @@
-/**
- * Config schema and resolution for `dsh-permission-rules`. Every tunable is
- * a validated {@link Config} field changeable from cordis.yml; the
- * resolution step validates the numeric bounds and compiles nothing — rule
- * files are external documents resolved per session cwd at load time.
- * @module dsh-permission-rules/config
- */
-import { isAbsolute } from 'node:path';
-import z from '@deepseek-ai/schemastery';
-/** Schemastery schema: the loader validates and fills defaults before `apply`. */
-export const Config = z.object({
-    rulesFile: z.string().default('.dsh/rules.yaml'),
-    fallbackPath: z.string(),
-    badFilePolicy: z.union(['fail', 'ignore-with-warning']).default('fail'),
-    maxRules: z.number().default(256),
-    maxCachedWorkspaces: z.number().default(512),
-    patternMode: z.union(['glob', 'regex']).default('glob'),
-    watch: z.boolean().default(true),
-    watchStabilityThresholdMs: z.number().default(200),
-    language: z.union(['en', 'zh', 'es', 'pt', 'hi']).default('en'),
-    caseInsensitivePaths: z.boolean().default(process.platform === 'win32'),
-    audit: z.union(['all', 'hits']).default('all'),
-    searchUp: z.boolean().default(false),
-    maxGlobStars: z.number().default(2),
-    enforce: z.boolean().default(true),
-    allowUnmarkedAudit: z.boolean().default(false),
-});
-/**
- * Validate raw values and fill explicit defaults. A `maxRules`,
- * `maxCachedWorkspaces`, or `maxGlobStars` that is not a positive safe
- * integer, a non-positive stability window, `searchUp` combined with an
- * absolute `rulesFile`, a value outside a closed enum, or a non-boolean
- * flag throws here — misconfiguration fails loud at mount even when the
- * plugin is mounted without the Schemastery loader.
- * @param config - raw (possibly partial) plugin config.
- * @returns the fully resolved config.
- */
-export function resolveConfig(config = {}) {
-    const rulesFile = config.rulesFile ?? '.dsh/rules.yaml';
-    const searchUp = config.searchUp ?? false;
-    if (searchUp && isAbsolute(rulesFile)) {
-        throw new TypeError(`searchUp cannot be combined with an absolute rulesFile (${JSON.stringify(rulesFile)}): parent-directory walking needs a relative file name`);
-    }
-    const maxRules = config.maxRules ?? 256;
-    if (!Number.isSafeInteger(maxRules) || maxRules <= 0) {
-        throw new TypeError(`maxRules must be a positive safe integer, got ${String(config.maxRules)}`);
-    }
-    const watchStabilityThresholdMs = config.watchStabilityThresholdMs ?? 200;
-    if (!Number.isSafeInteger(watchStabilityThresholdMs) || watchStabilityThresholdMs < 0) {
-        throw new TypeError(`watchStabilityThresholdMs must be a non-negative safe integer, got ${String(config.watchStabilityThresholdMs)}`);
-    }
-    const maxCachedWorkspaces = config.maxCachedWorkspaces ?? 512;
-    if (!Number.isSafeInteger(maxCachedWorkspaces) || maxCachedWorkspaces <= 0) {
-        throw new TypeError(`maxCachedWorkspaces must be a positive safe integer, got ${String(config.maxCachedWorkspaces)}`);
-    }
-    const maxGlobStars = config.maxGlobStars ?? 2;
-    if (!Number.isSafeInteger(maxGlobStars) || maxGlobStars <= 0) {
-        throw new TypeError(`maxGlobStars must be a positive safe integer, got ${String(config.maxGlobStars)}`);
-    }
-    assertEnum('badFilePolicy', config.badFilePolicy ?? 'fail', ['fail', 'ignore-with-warning']);
-    assertEnum('patternMode', config.patternMode ?? 'glob', ['glob', 'regex']);
-    assertEnum('language', config.language ?? 'en', ['en', 'zh', 'es', 'pt', 'hi']);
-    assertEnum('audit', config.audit ?? 'all', ['all', 'hits']);
-    assertBoolean('watch', config.watch ?? true);
-    assertBoolean('searchUp', searchUp);
-    assertBoolean('caseInsensitivePaths', config.caseInsensitivePaths ?? process.platform === 'win32');
-    assertBoolean('enforce', config.enforce ?? true);
-    assertBoolean('allowUnmarkedAudit', config.allowUnmarkedAudit ?? false);
-    return {
-        rulesFile,
-        fallbackPath: config.fallbackPath,
-        badFilePolicy: config.badFilePolicy ?? 'fail',
-        maxRules,
-        maxCachedWorkspaces,
-        patternMode: config.patternMode ?? 'glob',
-        watch: config.watch ?? true,
-        watchStabilityThresholdMs,
-        language: config.language ?? 'en',
-        caseInsensitivePaths: config.caseInsensitivePaths ?? process.platform === 'win32',
-        audit: config.audit ?? 'all',
-        searchUp,
-        maxGlobStars,
-        enforce: config.enforce ?? true,
-        allowUnmarkedAudit: config.allowUnmarkedAudit ?? false,
-    };
-}
-/** Throw unless `key` is one of `allowed` (TypeScript's closed enums are not runtime checks). */
-function assertEnum(key, value, allowed) {
-    if (!allowed.includes(value)) {
-        throw new TypeError(`${key} must be one of ${allowed.map(item => JSON.stringify(item)).join(' | ')}, got ${JSON.stringify(value)}`);
-    }
-}
-/** Throw unless `key` is a boolean (plain-JS mounts bypass the Schemastery coercion). */
-function assertBoolean(key, value) {
-    if (typeof value !== 'boolean') {
-        throw new TypeError(`${key} must be a boolean, got ${typeof value}`);
-    }
-}
-//# sourceMappingURL=config.js.map

package/lib/types/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAyFxC,kFAAkF;AAClF,MAAM,CAAC,MAAM,MAAM,GAAc,CAAC,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAU,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAChF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACjC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAC5C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,CAAU,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxE,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IACvE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,MAAM,CAAU,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACvD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC/C,CAAC,CAAA;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,iBAAiB,CAAA;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAA;IACzC,IAAI,QAAQ,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,SAAS,CAAC,2DAA2D,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,wDAAwD,CAAC,CAAA;IACnK,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,GAAG,CAAA;IACvC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,iDAAiD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IACjG,CAAC;IACD,MAAM,yBAAyB,GAAG,MAAM,CAAC,yBAAyB,IAAI,GAAG,CAAA;IACzE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,yBAAyB,CAAC,IAAI,yBAAyB,GAAG,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,SAAS,CAAC,sEAAsE,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAA;IACvI,CAAC;IACD,MAAM,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,IAAI,GAAG,CAAA;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,IAAI,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,SAAS,CAAC,4DAA4D,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;IACvH,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,SAAS,CAAC,qDAAqD,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IACzG,CAAC;IACD,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,IAAI,MAAM,EAAE,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAA;IAC5F,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAC1E,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;IAC/E,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;IAC3D,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAA;IAC5C,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IACnC,aAAa,CAAC,sBAAsB,EAAE,MAAM,CAAC,oBAAoB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAA;IAClG,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,CAAA;IAChD,aAAa,CAAC,oBAAoB,EAAE,MAAM,CAAC,kBAAkB,IAAI,KAAK,CAAC,CAAA;IACvE,OAAO;QACL,SAAS;QACT,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,MAAM;QAC7C,QAAQ;QACR,mBAAmB;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM;QACzC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;QAC3B,yBAAyB;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QACjC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QACjF,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;QAC5B,QAAQ;QACR,YAAY;QACZ,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,KAAK;KACvD,CAAA;AACH,CAAC;AAED,iGAAiG;AACjG,SAAS,UAAU,CAAmB,GAAW,EAAE,KAAa,EAAE,OAAqB;IACrF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,GAAG,GAAG,mBAAmB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACrI,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,SAAS,aAAa,CAAC,GAAW,EAAE,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,GAAG,GAAG,2BAA2B,OAAO,KAAK,EAAE,CAAC,CAAA;IACtE,CAAC;AACH,CAAC"}

package/lib/types/events.js

@@ -1,44 +0,0 @@
-/**
- * Durable session vocabulary for `dsh-permission-rules`: the
- * `permissionRules/decision` audit event, appended for every hit AND every
- * passthrough. Log-only — it never enters the model transcript; the only
- * model-visible plugin content is the deny/ask reason the tools registry
- * materializes into the denied tool result, which carries the same
- * `callId`, keeping model-visible ⟺ logged reconstructable.
- *
- * `outcome` records the FINAL pre-execute decision: on a deny/ask hit it
- * equals `action` (the plugin short-circuits); on an allow hit or a
- * passthrough it carries the downstream listeners' decision, so the audit
- * never claims a call was allowed when a later listener denied it.
- *
- * Under `enforce: false` (dry-run mode) the plugin matches but NEVER
- * short-circuits: the record keeps the WOULD-BE `action` and marks
- * `dryRun: true`, while `outcome` carries what actually happened
- * downstream — an auditable "what would the policy have done" trail.
- *
- * The event is appended with the envelope's `ignorable: true` marker (see
- * {@link AuditAppend}). Harness builds that honor the marker (post-rc.6)
- * stamp it on the envelope and skip unknown ignorable records when loading,
- * so the audit can never refuse a session. Builds whose `Session.append`
- * predates the marker — the `0.1.0-rc.6` line — silently DROP the options
- * bag: the event then lands UNMARKED and makes the session unresumable on
- * hosts with required-on-read semantics (`SessionFormatUnsupportedError`).
- * The runtime detects this at first use (peer version pre-check plus a
- * probe of the appended envelope) and disables session-log audit on such
- * hosts with a one-time warning; `allowUnmarkedAudit: true` opts back in,
- * and `scripts/repair-session-logs.mjs` repairs already-polluted logs.
- * @module dsh-permission-rules/events
- */
-/**
- * Whether an `append` call actually honored the `ignorable` marker: the
- * logged event returned by the host carries `ignorable === true` on
- * marker-aware builds and nothing on pre-marker builds. `false` (or any
- * non-event return) means the host dropped the marker and the event landed
- * unmarked — the runtime then degrades instead of polluting further logs.
- * @param result - the return value of the audit append.
- * @returns true only when the marker is present on the returned envelope.
- */
-export function isMarkedAuditEvent(result) {
-    return typeof result === 'object' && result !== null && result.ignorable === true;
-}
-//# sourceMappingURL=events.js.map

package/lib/types/events.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAoEH;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe;IAChD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAK,MAAkC,CAAC,SAAS,KAAK,IAAI,CAAA;AAChH,CAAC"}