dsh-permission-rules 0.5.0 → 0.5.2

package/lib/index.js

@@ -3280,18 +3280,21 @@ async function apply(ctx, config) {
 }
 /**
 * Whether a `@deepseek-ai/dsh-session` version line predates the
-* `ignorable` envelope-marker surface: the `0.1.0-rc.6` line and earlier
-* silently drop the marker from `Session.append` options, so audit events
-* written by those builds land unmarked and break resume on stricter
-* hosts. Non-matching (post-rc.6, stable, or unresolvable) versions are
-* treated as possibly-marker-aware and verified by the append probe.
+* `ignorable` envelope-marker surface: every released rc line through
+* `0.1.0-rc.7` silently drops the marker from `Session.append` options
+* (the stamping fix exists on harness master only — no release carries it
+* yet), so audit events written by those builds land unmarked and break
+* resume on stricter hosts. Extend the bound when a new rc line ships that
+* still drops the marker. Non-matching (later rc, stable, or unresolvable)
+* versions are treated as possibly-marker-aware and verified by the
+* append probe.
 * @param version - the installed peer version string.
-* @returns true for the known-unmarked rc.1–rc.6 lines.
+* @returns true for the known-unmarked rc.1–rc.7 lines.
 */
 function isUnmarkedHostVersion(version) {
 	const match = /^0\.1\.0-rc\.(\d+)$/.exec(version.trim());
 	if (match === null) return false;
-	return Number(match[1]) <= 6;
+	return Number(match[1]) <= 7;
 }
 /**
 * Identity candidates for the `agents` match dimension, derived from the

package/lib/types/client/remote.d.ts

@@ -8,7 +8,7 @@
  * @module dsh-permission-rules/client/remote
  */
 import type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol';
-import type { PermissionRulesSnapshot, RulesReadResult, RulesReloadResult, RulesSaveResult } from '../wire.ts';
+import type { PermissionRulesSnapshot, RulesReadResult, RulesReloadResult, RulesSaveResult } from '../wire.js';
 declare module '@deepseek-ai/dsh-typert-protocol' {
     interface TypertRemoteNamespace$permissionRules {
         /** Read the network-policy snapshot (mode, counters, recent blocks, editable rule sources). */

package/lib/types/client/section.d.ts

@@ -9,8 +9,8 @@
  * @module dsh-permission-rules/client/section
  */
 import type { ReactElement } from 'react';
-import type { PermissionRulesLocaleKey } from './locales.ts';
-import type { PermissionRulesSnapshot, RulesReadResult, RulesReloadResult, RulesSaveResult } from '../wire.ts';
+import type { PermissionRulesLocaleKey } from './locales.js';
+import type { PermissionRulesSnapshot, RulesReadResult, RulesReloadResult, RulesSaveResult } from '../wire.js';
 /** Functions the registration injects (wired to the Remote namespace in `./index.ts`). */
 export interface PermissionRulesSectionInjected {
     /** Read the network-policy snapshot. */

package/lib/types/config.d.ts

@@ -6,9 +6,9 @@
  * @module dsh-permission-rules/config
  */
 import z from '@deepseek-ai/schemastery';
-import type { PatternMode } from './rules.ts';
-import type { NetworkMode, UnlistedAction } from './network.ts';
-import type { UiLanguage } from './prose.ts';
+import type { PatternMode } from './rules.js';
+import type { NetworkMode, UnlistedAction } from './network.js';
+import type { UiLanguage } from './prose.js';
 /** What happens when a discovered rule file exists but cannot be parsed or compiled. */
 export type BadFilePolicy = 'fail' | 'ignore-with-warning';
 /** Which decisions are audit-logged: every call, or only rule hits. */

package/lib/types/index.d.ts

@@ -15,15 +15,15 @@
  * `name`/`inject`/`Config`/`apply`).
  * @module dsh-permission-rules
  */
-import { apply } from './runtime.ts';
+import { apply } from './runtime.js';
 export declare const name = "permission-rules";
 export declare const inject: string[];
 export { apply };
-export { PermissionRulesRuntime, isUnmarkedHostVersion } from './runtime.ts';
-export * from './config.ts';
-export * from './events.ts';
-export * from './rules.ts';
-export * from './glob.ts';
-export * from './network.ts';
-export * from './proxy.ts';
+export { PermissionRulesRuntime, isUnmarkedHostVersion } from './runtime.js';
+export * from './config.js';
+export * from './events.js';
+export * from './rules.js';
+export * from './glob.js';
+export * from './network.js';
+export * from './proxy.js';
 //# sourceMappingURL=index.d.ts.map

package/lib/types/network.d.ts

@@ -6,8 +6,8 @@
  * process state — unit-testable and replayable.
  * @module dsh-permission-rules/network
  */
-import type { CompiledRule, CompiledRuleset, NetworkTarget } from './rules.ts';
-import type { MatchContext } from './rules.ts';
+import type { CompiledRule, CompiledRuleset, NetworkTarget } from './rules.js';
+import type { MatchContext } from './rules.js';
 /** The three network policy modes. */
 export type NetworkMode = 'deny-all' | 'whitelist' | 'allow-all';
 /** Closed mode list for runtime normalization of untrusted values. */

package/lib/types/proxy.d.ts

@@ -15,8 +15,8 @@
  * @module dsh-permission-rules/proxy
  */
 import type { CallId } from '@deepseek-ai/dsh-llm';
-import type { NetworkDecision, NetworkMode } from './network.ts';
-import type { NetworkTarget, SchemeName } from './rules.ts';
+import type { NetworkDecision, NetworkMode } from './network.js';
+import type { NetworkTarget, SchemeName } from './rules.js';
 /** Proxy environment variable names the injector sets/restores (uppercase + lowercase for mixed-ecosystem CLIs). */
 export declare const PROXY_ENV_NAMES: readonly string[];
 /** NO_PROXY names cleared (or preserved) by the injector. */

package/lib/types/remote-service.d.ts

@@ -9,8 +9,8 @@
  */
 import type { Context } from '@deepseek-ai/cordis';
 import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
-import type { PermissionRulesRuntime } from './runtime.ts';
-import type { PermissionRulesSnapshot, RulesReadResult, RulesReloadResult, RulesSaveResult } from './wire.ts';
+import type { PermissionRulesRuntime } from './runtime.js';
+import type { PermissionRulesSnapshot, RulesReadResult, RulesReloadResult, RulesSaveResult } from './wire.js';
 declare module '@deepseek-ai/cordis' {
     interface Context {
         /** Settings-page snapshot + rule-editor bridge (this package). */

package/lib/types/runtime.d.ts

@@ -13,11 +13,11 @@
 import type { Context } from '@deepseek-ai/cordis';
 import type { CommandInvocation, CommandResult } from '@deepseek-ai/dsh-commands';
 import type { PreToolDecision, ToolExecution } from '@deepseek-ai/dsh-tools';
-import type { Config, ResolvedConfig } from './config.ts';
-import type { CompiledRuleset, RuleHit } from './rules.ts';
-import type { NetworkMode } from './network.ts';
-import type { NetworkBlockRecord } from './proxy.ts';
-import type { DecisionOutcome } from './events.ts';
+import type { Config, ResolvedConfig } from './config.js';
+import type { CompiledRuleset, RuleHit } from './rules.js';
+import type { NetworkMode } from './network.js';
+import type { NetworkBlockRecord } from './proxy.js';
+import type { DecisionOutcome } from './events.js';
 export declare const name = "permission-rules";
 /** Services required before the plugin mounts. */
 export declare const inject: string[];
@@ -381,13 +381,16 @@ export declare class PermissionRulesRuntime {
 export declare function apply(ctx: Context, config: Config): Promise<void>;
 /**
  * Whether a `@deepseek-ai/dsh-session` version line predates the
- * `ignorable` envelope-marker surface: the `0.1.0-rc.6` line and earlier
- * silently drop the marker from `Session.append` options, so audit events
- * written by those builds land unmarked and break resume on stricter
- * hosts. Non-matching (post-rc.6, stable, or unresolvable) versions are
- * treated as possibly-marker-aware and verified by the append probe.
+ * `ignorable` envelope-marker surface: every released rc line through
+ * `0.1.0-rc.7` silently drops the marker from `Session.append` options
+ * (the stamping fix exists on harness master only — no release carries it
+ * yet), so audit events written by those builds land unmarked and break
+ * resume on stricter hosts. Extend the bound when a new rc line ships that
+ * still drops the marker. Non-matching (later rc, stable, or unresolvable)
+ * versions are treated as possibly-marker-aware and verified by the
+ * append probe.
  * @param version - the installed peer version string.
- * @returns true for the known-unmarked rc.1–rc.6 lines.
+ * @returns true for the known-unmarked rc.1–rc.7 lines.
  */
 export declare function isUnmarkedHostVersion(version: string): boolean;
 export {};

package/lib/types/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAEjF,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE5E,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEzD,OAAO,KAAK,EAAkB,eAAe,EAA+B,OAAO,EAAE,MAAM,YAAY,CAAA;AAIvG,OAAO,KAAK,EAAiC,WAAW,EAAE,MAAM,cAAc,CAAA;AAE9E,OAAO,KAAK,EAAE,kBAAkB,EAAoB,MAAM,YAAY,CAAA;AAItE,OAAO,KAAK,EAAiD,eAAe,EAAE,MAAM,aAAa,CAAA;AAEjG,eAAO,MAAM,IAAI,qBAAqB,CAAA;AAEtC,kDAAkD;AAClD,eAAO,MAAM,MAAM,UAAwB,CAAA;AAE3C,iDAAiD;AACjD,UAAU,WAAW;IACnB,wDAAwD;IACxD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,wFAAwF;IACxF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;IAClC,iGAAiG;IACjG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAA;CACvB;AAuBD;;;GAGG;AACH,qBAAa,sBAAsB;IA0B/B,OAAO,CAAC,QAAQ,CAAC,GAAG;IAzBtB,0FAA0F;IAC1F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IAEvD,6GAA6G;IAC7G,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;IAE3D,0CAA0C;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmD;IAE1E,iIAAiI;IACjI,OAAO,CAAC,YAAY,CAAqD;IAEzE,mGAAmG;IACnG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAE5D,iEAAiE;IACjE,OAAO,CAAC,YAAY,CAA0B;IAE9C,6EAA6E;IAC7E,OAAO,CAAC,UAAU,CAA0B;IAE5C,6GAA6G;IAC7G,OAAO,CAAC,YAAY,CAAsB;gBAGvB,GAAG,EAAE,OAAO,EAC7B,MAAM,EAAE,cAAc;IAKxB,gFAAgF;IAChF,IAAI,MAAM,IAAI,cAAc,CAE3B;IAED,+FAA+F;IAC/F,eAAe,CAAC,MAAM,EAAE,MAAM,cAAc,GAAG,IAAI;IAInD,sDAAsD;IACtD,OAAO,CAAC,cAAc;IAUtB;;;;;;;;OAQG;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAkBrC,8DAA8D;IAC9D,OAAO,CAAC,eAAe;IASvB;;;;;;;OAOG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW;IAiB9B;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ;IAKhB;;;;;;;;;OASG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW;IA0BlC;;;;;;OAMG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAoBzB;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAIpB;;;;;;;;;;;;;;;;;OAiBG;IACG,UAAU,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;IAmCrG;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAQvB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,UAAQ,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI;IAgCvJ,gHAAgH;IAChH,OAAO,CAAC,gBAAgB;IAWxB,wGAAwG;IACxG,OAAO,CAAC,WAAW;IAMnB;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE;IAS1G;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IASzB,sEAAsE;IACtE,OAAO,CAAC,WAAW;IAQnB,iFAAiF;IACjF,OAAO,CAAC,SAAS;IAIjB,gDAAgD;IAChD,WAAW,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI;IAItC,mGAAmG;IACnG,OAAO,CAAC,gBAAgB;IAkBxB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAmCzB;;;;;;;;OAQG;IACG,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAiCzC;;;;;OAKG;IACG,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ7C,0EAA0E;IAC1E,eAAe,IAAI;QACjB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;QACzB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;QAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,WAAW,CAAA;QAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;QACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;QAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAA;KAC/C;IAkBD;;;;;OAKG;IACH,gBAAgB,IAAI,SAAS,MAAM,EAAE;IAYrC,0EAA0E;IAC1E,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAY3F,0GAA0G;IAC1G,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAO7C,8EAA8E;IAC9E,SAAS,IAAI,IAAI;IAIjB;;;;;;OAMG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;IA4B5F,sHAAsH;IACtH,OAAO,CAAC,WAAW;IASnB,0FAA0F;IAC1F,OAAO,CAAC,qBAAqB;IAM7B;;;;;;;;;OASG;IACH,OAAO,CAAC,UAAU,EAAE,iBAAiB,GAAG,aAAa;IA4DrD;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,WAAW;IA0DnB,mHAAmH;IACnH,OAAO,CAAC,aAAa;IAMrB,gFAAgF;IAChF,OAAO,CAAC,gBAAgB;IAiBxB,8FAA8F;IAC9F,OAAO,CAAC,cAAc;IAmBtB;;;;;;OAMG;IACH,uBAAuB,IAAI,IAAI;IAa/B,0EAA0E;IAC1E,OAAO,CAAC,iBAAiB;IAUzB,+EAA+E;IAC/E,OAAO,CAAC,WAAW;IAmCnB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,cAAc;IAetB;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAyC5B,qHAAqH;IACrH,OAAO,CAAC,kBAAkB;IAU1B,8FAA8F;IAC9F,OAAO,CAAC,aAAa;IAarB;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAYnB,4DAA4D;IAC5D,kBAAkB,IAAI,MAAM;IAI5B,sEAAsE;IACtE,kBAAkB,IAAI,MAAM;IAI5B;;;;;OAKG;IACH,OAAO,CAAC,cAAc;CAevB;AAED;;;;;GAKG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BvE;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAI9D"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAEjF,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE5E,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEzD,OAAO,KAAK,EAAkB,eAAe,EAA+B,OAAO,EAAE,MAAM,YAAY,CAAA;AAIvG,OAAO,KAAK,EAAiC,WAAW,EAAE,MAAM,cAAc,CAAA;AAE9E,OAAO,KAAK,EAAE,kBAAkB,EAAoB,MAAM,YAAY,CAAA;AAItE,OAAO,KAAK,EAAiD,eAAe,EAAE,MAAM,aAAa,CAAA;AAEjG,eAAO,MAAM,IAAI,qBAAqB,CAAA;AAEtC,kDAAkD;AAClD,eAAO,MAAM,MAAM,UAAwB,CAAA;AAE3C,iDAAiD;AACjD,UAAU,WAAW;IACnB,wDAAwD;IACxD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,wFAAwF;IACxF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;IAClC,iGAAiG;IACjG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAA;CACvB;AAuBD;;;GAGG;AACH,qBAAa,sBAAsB;IA0B/B,OAAO,CAAC,QAAQ,CAAC,GAAG;IAzBtB,0FAA0F;IAC1F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IAEvD,6GAA6G;IAC7G,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;IAE3D,0CAA0C;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmD;IAE1E,iIAAiI;IACjI,OAAO,CAAC,YAAY,CAAqD;IAEzE,mGAAmG;IACnG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAE5D,iEAAiE;IACjE,OAAO,CAAC,YAAY,CAA0B;IAE9C,6EAA6E;IAC7E,OAAO,CAAC,UAAU,CAA0B;IAE5C,6GAA6G;IAC7G,OAAO,CAAC,YAAY,CAAsB;gBAGvB,GAAG,EAAE,OAAO,EAC7B,MAAM,EAAE,cAAc;IAKxB,gFAAgF;IAChF,IAAI,MAAM,IAAI,cAAc,CAE3B;IAED,+FAA+F;IAC/F,eAAe,CAAC,MAAM,EAAE,MAAM,cAAc,GAAG,IAAI;IAInD,sDAAsD;IACtD,OAAO,CAAC,cAAc;IAUtB;;;;;;;;OAQG;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAkBrC,8DAA8D;IAC9D,OAAO,CAAC,eAAe;IASvB;;;;;;;OAOG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW;IAiB9B;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ;IAKhB;;;;;;;;;OASG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW;IA0BlC;;;;;;OAMG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAoBzB;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAIpB;;;;;;;;;;;;;;;;;OAiBG;IACG,UAAU,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;IAmCrG;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAQvB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,UAAQ,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI;IAgCvJ,gHAAgH;IAChH,OAAO,CAAC,gBAAgB;IAWxB,wGAAwG;IACxG,OAAO,CAAC,WAAW;IAMnB;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE;IAS1G;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IASzB,sEAAsE;IACtE,OAAO,CAAC,WAAW;IAQnB,iFAAiF;IACjF,OAAO,CAAC,SAAS;IAIjB,gDAAgD;IAChD,WAAW,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI;IAItC,mGAAmG;IACnG,OAAO,CAAC,gBAAgB;IAkBxB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAmCzB;;;;;;;;OAQG;IACG,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAiCzC;;;;;OAKG;IACG,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ7C,0EAA0E;IAC1E,eAAe,IAAI;QACjB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;QACzB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;QAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,WAAW,CAAA;QAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;QACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;QAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAA;KAC/C;IAkBD;;;;;OAKG;IACH,gBAAgB,IAAI,SAAS,MAAM,EAAE;IAYrC,0EAA0E;IAC1E,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAY3F,0GAA0G;IAC1G,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAO7C,8EAA8E;IAC9E,SAAS,IAAI,IAAI;IAIjB;;;;;;OAMG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;IA4B5F,sHAAsH;IACtH,OAAO,CAAC,WAAW;IASnB,0FAA0F;IAC1F,OAAO,CAAC,qBAAqB;IAM7B;;;;;;;;;OASG;IACH,OAAO,CAAC,UAAU,EAAE,iBAAiB,GAAG,aAAa;IA4DrD;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,WAAW;IA0DnB,mHAAmH;IACnH,OAAO,CAAC,aAAa;IAMrB,gFAAgF;IAChF,OAAO,CAAC,gBAAgB;IAiBxB,8FAA8F;IAC9F,OAAO,CAAC,cAAc;IAmBtB;;;;;;OAMG;IACH,uBAAuB,IAAI,IAAI;IAa/B,0EAA0E;IAC1E,OAAO,CAAC,iBAAiB;IAUzB,+EAA+E;IAC/E,OAAO,CAAC,WAAW;IAmCnB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,cAAc;IAetB;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAyC5B,qHAAqH;IACrH,OAAO,CAAC,kBAAkB;IAU1B,8FAA8F;IAC9F,OAAO,CAAC,aAAa;IAarB;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAYnB,4DAA4D;IAC5D,kBAAkB,IAAI,MAAM;IAI5B,sEAAsE;IACtE,kBAAkB,IAAI,MAAM;IAI5B;;;;;OAKG;IACH,OAAO,CAAC,cAAc;CAevB;AAED;;;;;GAKG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BvE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAI9D"}

package/lib/types/settings.d.ts

@@ -13,8 +13,8 @@
  * @module dsh-permission-rules/settings
  */
 import type { Context } from '@deepseek-ai/cordis';
-import type { Config as PluginConfig } from './config.ts';
-import type { PermissionRulesRuntime } from './runtime.ts';
+import type { Config as PluginConfig } from './config.js';
+import type { PermissionRulesRuntime } from './runtime.js';
 /** The settings namespace this plugin owns (kebab-case, per the provider contract). */
 export declare const SETTINGS_NAMESPACE = "permission-rules";
 /**

package/package.json

@@ -1,178 +1,182 @@
-{
-  "name": "dsh-permission-rules",
-  "version": "0.5.0",
-  "description": "Declarative Claude Code-style permission rules plus a Codex-style process-level network policy for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), workspace-path, and network-target (domain/ip/port/scheme) matching on the tools/pre-execute waterfall, a built-in local HTTP/CONNECT proxy governing shell subprocess traffic, three network modes mapped onto the official sandbox presets, full session-log audit, HMR rule reload, and a settings page with a rule editor, block counters, and recent interception lists.",
-  "private": false,
-  "type": "module",
-  "main": "./lib/index.js",
-  "types": "./lib/types/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./lib/types/index.d.ts",
-      "default": "./lib/index.js"
-    },
-    "./typert": {
-      "types": "./lib/types/typert.host.d.ts",
-      "default": "./lib/typert.host.js"
-    },
-    "./client": {
-      "types": "./lib/types/client/index.d.ts",
-      "default": "./lib/client.js"
-    },
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "lib",
-    "src",
-    "cordis.patch.yml",
-    "docs",
-    "scripts/repair-session-logs.mjs",
-    "README.md",
-    "README.zh.md",
-    "README.es.md",
-    "README.pt.md",
-    "README.hi.md",
-    "CHANGELOG.md",
-    "LICENSE"
-  ],
-  "sideEffects": false,
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "platform": "web",
-      "inject": [
-        "@deepseek-ai/dsh-client-connection",
-        "@deepseek-ai/dsh-client-runtime",
-        "@deepseek-ai/dsh-client-locale",
-        "@deepseek-ai/dsh-client-ui-settings"
-      ]
-    }
-  },
-  "dshWorkshop": {
-    "schema": "omdsh-workshop-package/v1",
-    "type": "plugin",
-    "integration": {
-      "protocol": "harness-profile",
-      "artifact": "cordis.patch.yml"
-    },
-    "install": {
-      "mode": "transactional",
-      "adapter": "profile-bundle",
-      "failurePolicy": "generation-rollback",
-      "touchesCurrentBeforeActivation": false
-    },
-    "lifecycle": {
-      "activation": "restart-profile",
-      "dispose": "supported"
-    },
-    "permissions": [
-      "files:read",
-      "files:watch",
-      "files:write",
-      "session:append",
-      "network:outbound"
-    ],
-    "compatibility": {
-      "dshVersions": [
-        "0.1.0-rc.5",
-        "0.1.0-rc.6"
-      ]
-    },
-    "capability": {
-      "id": "rules",
-      "kind": "command",
-      "invocation": "/rules",
-      "expected": "lists the active permission rules with their source files"
-    },
-    "evidence": {
-      "install": null,
-      "failureIsolation": null,
-      "hotReload": null,
-      "remove": null
-    }
-  },
-  "keywords": [
-    "dsh",
-    "dsh-plugin",
-    "deepseek-harness",
-    "permission",
-    "policy",
-    "allow-deny-ask",
-    "approval",
-    "safety",
-    "network",
-    "network-policy",
-    "proxy"
-  ],
-  "author": "dsh-permission-rules contributors",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/PerryLink/dsh-permission-rules.git"
-  },
-  "homepage": "https://github.com/PerryLink/dsh-permission-rules#readme",
-  "bugs": {
-    "url": "https://github.com/PerryLink/dsh-permission-rules/issues"
-  },
-  "engines": {
-    "node": "^22.19.0 || >=24.0.0"
-  },
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-commands": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-session": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-tools": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.0-rc.6",
-    "@deepseek-ai/schemastery": "^3.18.0",
-    "react": "^18.2.0"
-  },
-  "dependencies": {
-    "@types/react": "18.3.31",
-    "chokidar": "^5.0.0",
-    "tsdown": "^0.22.14",
-    "typescript": "^5.9.0",
-    "yaml": "^2.8.0",
-    "zod": "^4.4.3"
-  },
-  "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-connection": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-locale": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-runtime": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-commands": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-session": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-subagent": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-tools": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.0-rc.6",
-    "@deepseek-ai/dsh-user-approval": "0.1.0-rc.6",
-    "@deepseek-ai/schemastery": "^3.18.0",
-    "@eslint/js": "^10.0.1",
-    "@types/node": "^22.19.0",
-    "@vitest/coverage-v8": "^3.2.0",
-    "dsh-auto-review": "file:vendor/dsh-auto-review-0.4.0.tgz",
-    "eslint": "^10.8.1",
-    "globals": "^17.11.0",
-    "react": "18.3.1",
-    "react-dom": "18.3.1",
-    "typescript-eslint": "^8.67.0",
-    "vitest": "^3.2.0"
-  },
-  "scripts": {
-    "build": "node scripts/prepare.mjs",
-    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json --noEmit",
-    "lint": "eslint src test scripts",
-    "test": "vitest run",
-    "test:coverage": "vitest run --coverage",
-    "pack:check": "node scripts/prepare.mjs && pnpm pack",
-    "prepare": "node scripts/prepare.mjs"
-  },
-  "packageManager": "pnpm@11.7.0",
-  "license": "Apache-2.0"
-}
+{
+  "name": "dsh-permission-rules",
+  "version": "0.5.2",
+  "description": "Declarative Claude Code-style permission rules plus a Codex-style process-level network policy for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), workspace-path, and network-target (domain/ip/port/scheme) matching on the tools/pre-execute waterfall, a built-in local HTTP/CONNECT proxy governing shell subprocess traffic, three network modes mapped onto the official sandbox presets, full session-log audit, HMR rule reload, and a settings page with a rule editor, block counters, and recent interception lists.",
+  "private": false,
+  "type": "module",
+  "main": "./lib/index.js",
+  "types": "./lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./typert": {
+      "types": "./lib/types/typert.host.d.ts",
+      "default": "./lib/typert.host.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "src",
+    "cordis.patch.yml",
+    "docs",
+    "scripts/repair-session-logs.mjs",
+    "README.md",
+    "README.zh.md",
+    "README.es.md",
+    "README.pt.md",
+    "README.hi.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-settings"
+      ]
+    }
+  },
+  "dshWorkshop": {
+    "schema": "omdsh-workshop-package/v1",
+    "type": "plugin",
+    "integration": {
+      "protocol": "harness-profile",
+      "artifact": "cordis.patch.yml"
+    },
+    "install": {
+      "mode": "transactional",
+      "adapter": "profile-bundle",
+      "failurePolicy": "generation-rollback",
+      "touchesCurrentBeforeActivation": false
+    },
+    "lifecycle": {
+      "activation": "restart-profile",
+      "dispose": "supported"
+    },
+    "permissions": [
+      "files:read",
+      "files:watch",
+      "files:write",
+      "session:append",
+      "network:outbound"
+    ],
+    "compatibility": {
+      "dshVersions": [
+        "0.1.0-rc.5",
+        "0.1.0-rc.7",
+        "0.1.0-rc.7"
+      ]
+    },
+    "capability": {
+      "id": "rules",
+      "kind": "command",
+      "invocation": "/rules",
+      "expected": "lists the active permission rules with their source files"
+    },
+    "evidence": {
+      "install": null,
+      "failureIsolation": null,
+      "hotReload": null,
+      "remove": null
+    }
+  },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "permission",
+    "policy",
+    "allow-deny-ask",
+    "approval",
+    "safety",
+    "network",
+    "network-policy",
+    "proxy"
+  ],
+  "author": "dsh-permission-rules contributors",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/PerryLink/dsh-permission-rules.git"
+  },
+  "homepage": "https://github.com/PerryLink/dsh-permission-rules#readme",
+  "bugs": {
+    "url": "https://github.com/PerryLink/dsh-permission-rules/issues"
+  },
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-agent": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-commands": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-llm": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-session": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-tools": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.0-rc.7",
+    "@deepseek-ai/schemastery": "^3.18.0",
+    "react": "^18.2.0"
+  },
+  "dependencies": {
+    "@types/react": "18.3.31",
+    "chokidar": "^5.0.0",
+    "tsdown": "^0.22.14",
+    "typescript": "^5.9.0",
+    "yaml": "^2.8.0",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/cordis-plugin-loader": "1.0.2",
+    "@deepseek-ai/dsh-agent": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-client-connection": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-client-locale": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-client-runtime": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-commands": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-llm": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-session": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-subagent": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-tools": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-user-approval": "0.1.0-rc.7",
+    "@deepseek-ai/schemastery": "^3.18.0",
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^22.19.0",
+    "@vitest/coverage-v8": "^3.2.0",
+    "dsh-auto-review": "file:vendor/dsh-auto-review-0.5.1.tgz",
+    "eslint": "^10.8.1",
+    "globals": "^17.11.0",
+    "react": "18.3.1",
+    "react-dom": "18.3.1",
+    "typescript-eslint": "^8.67.0",
+    "vitest": "^3.2.0"
+  },
+  "scripts": {
+    "build": "node scripts/prepare.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json --noEmit",
+    "lint": "eslint src test scripts",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "check:readmes": "node scripts/check-readme-sync.mjs",
+    "verify:self-contained": "node scripts/verify-self-contained.mjs",
+    "pack:check": "node scripts/prepare.mjs && pnpm pack",
+    "prepare": "node scripts/prepare.mjs"
+  },
+  "packageManager": "pnpm@11.7.0",
+  "license": "Apache-2.0"
+}

package/scripts/repair-session-logs.mjs

@@ -24,8 +24,10 @@
  *
  * `--home` defaults to `$env:DSH_HOME/sessions` or `~/.dsh/sessions`.
  * The default target set is the log-only audit vocabulary owned by the
- * dsh-permission-rules / dsh-auto-review plugins; only types you understand
- * to be reconstruction-safe may be added via `--types`.
+ * dsh-permission-rules / dsh-auto-review plugins (all five `autoReview/*`
+ * event types — `state`, `verdict`, `circuit`, `override`, `rejection`);
+ * only types you understand to be reconstruction-safe may be added via
+ * `--types`.
  */
 
 import { constants, zstdCompressSync, zstdDecompressSync } from 'node:zlib'
@@ -40,6 +42,9 @@ const DEFAULT_TARGET_TYPES = [
   'permissionRules/decision',
   'autoReview/verdict',
   'autoReview/state',
+  'autoReview/circuit',
+  'autoReview/override',
+  'autoReview/rejection',
 ]
 
 /** Row types that are storage records, never session events (leave untouched). */

package/src/client/index.ts

@@ -32,7 +32,7 @@ export const inject = ['slots', 'locale', 'remote']
 
 /** The locale registry face (structural; the real `ctx.locale` satisfies it). */
 interface LocaleLike {
-  register(namespace: string, dictionaries: { en: Record<string, string>; zh: Record<string, string> }): void
+  register(namespace: string, dictionaries: { en: Record<string, string>; zh: Record<string, string> }): () => void
   bind(namespace: string): (key: PermissionRulesLocaleKey, vars?: Record<string, string | number>) => string
 }
 
@@ -58,10 +58,10 @@ export async function apply(ctx: Context): Promise<void> {
   const slots = ctx.get('slots') as SlotsLike | undefined
   if (locale === undefined || remote === undefined || slots === undefined) return
 
-  ctx.effect(() => {
-    locale.register(NS, { zh, en })
-    return () => {}
-  })
+  // locale.register returns the only unregister disposer and throws on a
+  // duplicate namespace: ride this fiber's effect so unload/reload cycles
+  // can re-register the dictionaries.
+  ctx.effect(() => locale.register(NS, { zh, en }), 'dsh-permission-rules: dictionaries')
 
   // $mount registers the 'remote.permissionRules' namespace service and owns
   // its removal for this fiber's lifetime.