dsh-permission-rules 0.7.10 → 0.7.12

package/CHANGELOG.md

@@ -515,7 +515,16 @@ All notable changes to dsh-permission-rules are recorded here, newest first.
 - Rename the four translated READMEs to `README-<lang>.md`. npm selects the package-page readme as the first markdown file matching its `{README,README.*}` glob (`@npmcli/package-json`, publish path), and that glob order puts `README.<lang>.md` ahead of `README.md` — so npm was serving the Simplified-Chinese file for this package too (measured on 15/15 sampled packages of the family). The new names sit outside the glob, so the English source is served again. No content changed apart from the language-switcher link each translation holds to its siblings, and the repo readme gate still passes. Takes effect with the next release; an already-published version cannot gain a corrected readme retroactively.
 - Pin the `@deepseek-ai/dsh-*` dev/test dependencies to the published `0.1.5-rc.2` line and record `0.1.5-rc.2` in `dshWorkshop.compatibility.dshVersions`; the monthly Compat workflow now runs against `0.1.5-rc.2`. The peer range `>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0` is unchanged, so no supported host line is dropped.
 
-## [Unreleased]
+## v0.7.12 - 2026-10-05
+
+Adds the versioned five-language **interoperability declaration** to the READMEs: the plugin records, against DSH `0.2.0-rc.2`, every injection point it owns and why none of them collide with another plugin — no tool-name, service-key, slot, HTTP-route, patch-layer or global-mutation overlap, and, for each ordering-sensitive event it listens on, that the listener delegates through `next()` so a shared waterfall chain is never short-circuited. Verified by `dsh-plugin-doctor` K10-K14 (checkset `R0-R8+K1-K14+D0-D3,D9+CC1-CC5/3`). Documentation only; no behaviour change.
+
+## v0.7.11 - 2026-10-05
+
+### Fixed
+
+- An unreadable peer version now fails closed. `peerVersion()` resolves the pinned peer's `package.json` through `createRequire`; inside a profile install that lookup throws `MODULE_NOT_FOUND`, so the runtime saw `null` and the guard `version !== null && isUnmarkedHostVersion(version)` skipped the unmarked-host check entirely. Every process start then landed one unmarked audit row, and each unmarked row is what makes a session unresumable on stricter harness builds. Both call sites -- the decision path and `auditNetworkBlock` -- now read `version === null || isUnmarkedHostVersion(version)`, matching the sibling defend and auto-review plugins, and `test/audit-support.spec.ts` gains the null-version case it was missing (the sibling auto-review spec has one; this repo and defend did not).
+- Residual, by design: a STABLE `0.2.x` host is still classified as possibly-marker-aware, so the append probe still runs once there -- a restored marker surface is adopted without a new plugin release.
 
 ## v0.7.10 - 2026-10-04
 

package/LICENSE

@@ -186,7 +186,7 @@
       same "printed page" as the copyright notice for easier
       identification within third-party archives.
 
-   Copyright 2026 dsh-permission-rules contributors
+   Copyright 2026 PerryLink
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

package/README-es.md

@@ -230,6 +230,25 @@ node scripts/check-readme-sync.mjs   # five-language README sync gate (also in C
 
 Consulta [VERIFICATION.md](VERIFICATION.md) para el registro de verificación end-to-end sin cabeza.
 
+## Interoperability with other DSH plugins
+
+Verificado contra **DSH `0.2.0-rc.2`** (el runtime para el que se publica este README) y el conjunto de plugins con más estrellas sondeado el 2026-10-05.
+
+Este plugin **no interfiere** con otros plugins, incluidos los de más estrellas:
+
+- **Sin colisión de nombres de herramienta.** Todas las herramientas llevan espacio de nombres; ninguna ocupa un nombre desnudo ya perteneciente a una herramienta incluida u otro plugin.
+- **Sin colisión de clave de servicio.** Solo provee `permissionRules`, `permissionRulesRuntime`; esa clave no es una costura incluida ni la provee ningún plugin de más estrellas.
+- **Sin colisión de slot.** No registra ninguna clave de slot de cliente, así que no disputa un asiento `shadows-shipped-ui`.
+- **Sin colisión de ruta HTTP.** No registra ningún prefijo `webServer`.
+- **Sin colisión en la capa de patch.** El patch del bundle solo hace `insert` de su propia fila; nunca sobrescribe el `config` de una fila incluida.
+- **Sin mutación global.** No parchea prototipos, ni reescribe `process.env`, ni reemplaza el dispatcher global de fetch.
+
+**Los listeners de eventos compartidos no interfieren por construcción.** Observa los eventos sensibles al orden `tools/post-execute`, `tools/pre-execute` con `ctx.on()` — el registro de difusión de Cordis, donde cada listener se ejecuta y ninguno puede dejar sin turno a otro. **Todos los listeners aquí delegan por `next()`**, así que la cadena nunca se cortocircuita:
+  - `tools/post-execute` — also used by `cc-safety-net` (1576★).
+  - `tools/pre-execute` — also used by `cc-safety-net` (1576★).
+
+Evidencia estática: `dsh-plugin-doctor` K10–K13 dan `pass` en todas las comprobaciones de este repositorio.
+
 ## Topics
 
 `dsh`, `dsh-plugin`, `deepseek-harness`, `permission`, `policy`, `allow-deny-ask`, `approval`, `safety`, `network`, `network-policy`, `proxy`

package/README-hi.md

@@ -232,6 +232,25 @@ node scripts/check-readme-sync.mjs   # five-language README sync gate (also in C
 
 हेडलेस एंड-टू-एंड सत्यापन रिकॉर्ड के लिए [VERIFICATION.md](VERIFICATION.md) देखें।
 
+## Interoperability with other DSH plugins
+
+**DSH `0.2.0-rc.2`** (वह रनटाइम जिसके लिए यह README प्रकाशित है) और 2026-10-05 को सर्वे किए गए उच्च-स्टार प्लगइन सेट के विरुद्ध सत्यापित।
+
+यह प्लगइन अन्य प्लगइनों में **हस्तक्षेप नहीं करता**, उन उच्च-स्टार प्लगइनों सहित जो व्यापक रूप से इंस्टॉल हैं:
+
+- **कोई टूल-नाम टकराव नहीं।** सभी टूल नेमस्पेस युक्त हैं; कोई भी ऐसा नंगा नाम नहीं लेता जो पहले से किसी अंतर्निहित टूल या अन्य प्लगइन का हो।
+- **कोई सर्विस-की टकराव नहीं।** यह केवल `permissionRules`, `permissionRulesRuntime` प्रदान करता है; यह key न अंतर्निहित सीम है और न किसी सर्वे किए गए उच्च-स्टार प्लगइन द्वारा प्रदान की जाती है।
+- **कोई स्लॉट टकराव नहीं।** यह कोई क्लाइंट slot key पंजीकृत नहीं करता, इसलिए `shadows-shipped-ui` सीट के लिए प्रतिस्पर्धा नहीं करता।
+- **कोई HTTP रूट टकराव नहीं।** यह कोई `webServer` प्रीफ़िक्स पंजीकृत नहीं करता।
+- **कोई patch-लेयर टकराव नहीं।** बंडल patch केवल अपनी पंक्ति `insert` करता है; कभी किसी अंतर्निहित पंक्ति का `config` ओवरराइड नहीं करता।
+- **कोई वैश्विक परिवर्तन नहीं।** यह प्रोटोटाइप नहीं बदलता, `process.env` नहीं लिखता, और वैश्विक fetch dispatcher प्रतिस्थापित नहीं करता।
+
+**साझा ईवेंट लिसनर रचना से ही अहस्तक्षेपी हैं।** यह क्रम-संवेदनशील ईवेंट `tools/post-execute`, `tools/pre-execute` को `ctx.on()` से देखता है — Cordis का **ब्रॉडकास्ट** पंजीकरण, जहाँ हर लिसनर चलता है और कोई किसी दूसरे को वंचित नहीं कर सकता। **यहाँ प्रत्येक लिसनर `next()` से डेलिगेट करता है**, इसलिए श्रृंखला कभी शॉर्ट-सर्किट नहीं होती:
+  - `tools/post-execute` — also used by `cc-safety-net` (1576★).
+  - `tools/pre-execute` — also used by `cc-safety-net` (1576★).
+
+स्थैतिक प्रमाण: इस रिपॉज़िटरी पर `dsh-plugin-doctor` के K10–K13 सभी `pass` हैं।
+
 ## Topics
 
 `dsh`, `dsh-plugin`, `deepseek-harness`, `permission`, `policy`, `allow-deny-ask`, `approval`, `safety`, `network`, `network-policy`, `proxy`

package/README-pt.md

@@ -230,6 +230,25 @@ node scripts/check-readme-sync.mjs   # five-language README sync gate (also in C
 
 Consulte [VERIFICATION.md](VERIFICATION.md) para o registro de verificação end-to-end sem cabeça.
 
+## Interoperability with other DSH plugins
+
+Verificado contra **DSH `0.2.0-rc.2`** (o runtime para o qual este README é publicado) e o conjunto de plugins com mais estrelas pesquisado em 2026-10-05.
+
+Este plugin **não interfere** em outros plugins, incluindo os de mais estrelas:
+
+- **Sem colisão de nome de ferramenta.** Todas as ferramentas têm namespace; nenhuma ocupa um nome puro já pertencente a uma ferramenta embutida ou a outro plugin.
+- **Sem colisão de chave de serviço.** Fornece apenas `permissionRules`, `permissionRulesRuntime`; essa chave não é uma costura embutida nem é fornecida por nenhum plugin de mais estrelas.
+- **Sem colisão de slot.** Não registra nenhuma chave de slot de cliente, então não disputa um assento `shadows-shipped-ui`.
+- **Sem colisão de rota HTTP.** Não registra nenhum prefixo `webServer`.
+- **Sem colisão na camada de patch.** O patch do bundle apenas faz `insert` da própria linha; nunca sobrescreve o `config` de uma linha embutida.
+- **Sem mutação global.** Não altera protótipos, não reescreve `process.env` nem substitui o dispatcher global de fetch.
+
+**Listeners de eventos compartilhados não interferem por construção.** Observa os eventos sensíveis à ordem `tools/post-execute`, `tools/pre-execute` com `ctx.on()` — o registro de difusão do Cordis, onde cada listener executa e nenhum pode privar outro do turno. **Todos os listeners aqui delegam via `next()`**, então a cadeia nunca é curto-circuitada:
+  - `tools/post-execute` — also used by `cc-safety-net` (1576★).
+  - `tools/pre-execute` — also used by `cc-safety-net` (1576★).
+
+Evidência estática: `dsh-plugin-doctor` K10–K13 retornam `pass` em todas as verificações deste repositório.
+
 ## Topics
 
 `dsh`, `dsh-plugin`, `deepseek-harness`, `permission`, `policy`, `allow-deny-ask`, `approval`, `safety`, `network`, `network-policy`, `proxy`

package/README-zh.md

@@ -230,6 +230,25 @@ node scripts/check-readme-sync.mjs   # five-language README sync gate (also in C
 
 无头端到端验证记录见 [VERIFICATION.md](VERIFICATION.md)。
 
+## Interoperability with other DSH plugins
+
+已对照 **DSH `0.2.0-rc.2`**（本 README 面向的运行时）与 2026-10-05 实测的高星插件集验证。
+
+本插件**不干扰**其他插件，包括广泛安装的高星插件：
+
+- **无工具名冲突。** 所有工具都带命名空间，不占用任何已被内置工具或其他插件持有的裸名。
+- **无服务键冲突。** 只提供 `permissionRules`, `permissionRulesRuntime`；该键既不是内置 seam，也没有被任何已调研的高星插件提供。
+- **无 slot 冲突。** 不注册客户端 slot key，因此不参与 `shadows-shipped-ui` 座位争抢。
+- **无 HTTP 路由冲突。** 不注册任何 `webServer` 前缀。
+- **无 patch 层冲突。** 组合包 patch 只 `insert` 自己那一行，从不覆写内置行的 `config`。
+- **无全局改写。** 不改原型、不改写 `process.env`、不替换全局 fetch dispatcher。
+
+**共享事件监听器在构造上就不互相干扰。** 它用 `ctx.on()` 监听顺序敏感事件 `tools/post-execute`, `tools/pre-execute` —— Cordis 的**广播**语义：每个监听器都会运行，任何一个都无法饿死其他监听器。**此处每个监听器都通过 `next()` 委托**，因此链条绝不会被短路；改写作用在 `next()` 产出的值上，而不是用它顶替返回：
+  - `tools/post-execute` — also used by `cc-safety-net` (1576★).
+  - `tools/pre-execute` — also used by `cc-safety-net` (1576★).
+
+静态证据：`dsh-plugin-doctor` 的 K10–K13 在本仓全部为 `pass`。
+
 ## Topics
 
 `dsh`, `dsh-plugin`, `deepseek-harness`, `permission`, `policy`, `allow-deny-ask`, `approval`, `safety`, `network`, `network-policy`, `proxy`

package/README.md

@@ -232,6 +232,25 @@ node scripts/check-readme-sync.mjs   # five-language README sync gate (also in C
 
 See [VERIFICATION.md](VERIFICATION.md) for the headless end-to-end verification record.
 
+## Interoperability with other DSH plugins
+
+Verified against **DSH `0.2.0-rc.2`** (the runtime this README ships for) and the high-star plugin set surveyed on 2026-10-05.
+
+This plugin **does not interfere** with other plugins, including the widely installed high-star ones:
+
+- **No tool-name collision.** Every tool is namespaced; no bare name owned by a shipped tool or another plugin is registered.
+- **No service-key collision.** It provides `permissionRules`, `permissionRulesRuntime`; those keys are not a built-in seam and are not provided by any surveyed high-star plugin.
+- **No slot collision.** It registers no client slot key, so it cannot contend for a `shadows-shipped-ui` seat.
+- **No HTTP route collision.** It registers no `webServer` prefix.
+- **No patch-layer collision.** The bundle patch only `insert`s its own row; it never overrides a built-in row's `config`.
+- **No global mutation.** It does not patch prototypes, rewrite `process.env`, or replace the global fetch dispatcher.
+
+**Shared event listeners are non-interfering by construction.** It observes the ordering-sensitive events `tools/post-execute`, `tools/pre-execute` with `ctx.on()` — Cordis's broadcast registration, where every listener runs and none can starve another. **Every listener here delegates through `next()`**, so the chain is never short-circuited, and a mutation is applied to the value `next()` produced rather than returned in its place:
+  - `tools/post-execute` — also used by `cc-safety-net` (1576★).
+  - `tools/pre-execute` — also used by `cc-safety-net` (1576★).
+
+Static evidence: `dsh-plugin-doctor` K10–K13 report `pass` for every check on this repository.
+
 ## Topics
 
 `dsh`, `dsh-plugin`, `deepseek-harness`, `permission`, `policy`, `allow-deny-ask`, `approval`, `safety`, `network`, `network-policy`, `proxy`

package/lib/index.js

@@ -3555,7 +3555,7 @@ var PermissionRulesRuntime = class {
 		if (this.auditSupport === "unsupported") return;
 		if (this.auditSupport === "unknown" && !this.config.allowUnmarkedAudit) {
 			const version = this.peerVersion();
-			if (version !== null && isUnmarkedHostVersion(version)) {
+			if (version === null || isUnmarkedHostVersion(version)) {
 				this.auditSupport = "unsupported";
 				this.warnUnmarkedAuditHost();
 				return;
@@ -3740,7 +3740,7 @@ var PermissionRulesRuntime = class {
 		if (agent === void 0 || this.auditSupport === "unsupported") return;
 		if (this.auditSupport === "unknown" && !this.config.allowUnmarkedAudit) {
 			const version = this.peerVersion();
-			if (version !== null && isUnmarkedHostVersion(version)) {
+			if (version === null || isUnmarkedHostVersion(version)) {
 				this.auditSupport = "unsupported";
 				this.warnUnmarkedAuditHost();
 				return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-permission-rules",
-  "version": "0.7.10",
+  "version": "0.7.12",
   "description": "Declarative Claude Code-style permission rules plus a Codex-style process-level network policy for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), workspace-path, and network-target (domain/ip/port/scheme) matching on the tools/pre-execute waterfall, a built-in local HTTP/CONNECT proxy governing shell subprocess traffic, three network modes mapped onto the official sandbox presets, full session-log audit, HMR rule reload, and a settings page with a rule editor, block counters, and recent interception lists.",
   "private": false,
   "type": "module",

package/src/runtime.ts

@@ -523,7 +523,7 @@ export class PermissionRulesRuntime {
     if (this.auditSupport === 'unsupported') return
     if (this.auditSupport === 'unknown' && !this.config.allowUnmarkedAudit) {
       const version = this.peerVersion()
-      if (version !== null && isUnmarkedHostVersion(version)) {
+      if (version === null || isUnmarkedHostVersion(version)) {
         this.auditSupport = 'unsupported'
         this.warnUnmarkedAuditHost()
         return
@@ -705,7 +705,7 @@ export class PermissionRulesRuntime {
     if (agent === undefined || this.auditSupport === 'unsupported') return
     if (this.auditSupport === 'unknown' && !this.config.allowUnmarkedAudit) {
       const version = this.peerVersion()
-      if (version !== null && isUnmarkedHostVersion(version)) {
+      if (version === null || isUnmarkedHostVersion(version)) {
         this.auditSupport = 'unsupported'
         this.warnUnmarkedAuditHost()
         return