dsh-yolo-mode 0.4.0 → 0.5.0-beta.0

package/CHANGELOG.md

@@ -2,6 +2,47 @@
 
 本项目遵循 [Semantic Versioning](https://semver.org/)。
 
+## [Unreleased]
+
+### 兼容：DSH 0.1.2-alpha.4
+
+- **peerDependencies 升级**：`dsh-llm` / `dsh-timeout` / `dsh-settings` /
+  `dsh-client-connection` / `dsh-client-ui-slots` / `dsh-client-locale` →
+  `^0.1.2-alpha.4`；`dsh-client-runtime` / `dsh-host-apiproxy` →
+  `^0.1.1-rc.2`（alpha 期未重发，最高仅到 `0.1.1-rc.2`）；`@deepseek-ai/schemastery`
+  保持 `^3.18.1`。旧 `^0.1.0-rc.6` 预发布区间按 semver 预发布元组规则不会匹配
+  `0.1.2-alpha.4`，会把插件钉死在 rc.8。
+- **settings 类服务迁移（lib/settings.js + lib/remote.js）**：alpha.4 删除
+  `installSettingsSection` / `settingsNamespace` 函数导出，`ctx.settings` 变为
+  `SettingsProvider` 类服务（默认导出）。命名空间改为纯 kebab-case 字符串字面量
+  `yolo-mode`（原品牌函数 `settingsNamespace('yolo-mode')` 的产物即同字符串）；
+  分区接线改为 `settings.installSection(ctx, ns, schema, entry, hooks)`，
+  钩子（`setSource` / `onChange` / `validate`）语义不变。`SettingsConflictError`、
+  `settings.mutate` / `describe` / `writable` 均保留，桥接层仅去除品牌调用。
+- **真实-Cordis 探针**：新增 `test/probe.test.mjs`，在真实
+  `@deepseek-ai/cordis` Context 上挂载插件本体（内存 `SettingsProvider` +
+  假 llm + sandboxPolicy stub），覆盖：激活与命名空间注册、取消、透明委托
+  （非升权 / 沙箱模式门 / includeSubagents）、`yolo` 预设确定性放行、裁判
+  allow（真实 dsh-llm 组装）、settings 用户层更新即时生效。
+- **devDependencies**：新增 `@deepseek-ai/cordis ^4.0.2`、`dsh-llm` /
+  `dsh-timeout` / `dsh-settings`（alpha.4）、`@deepseek-ai/schemastery`，
+  供 `npm test`（`node --test`）直接运行。
+
+## [0.5.0] - 2026-08-28
+
+### 新增
+
+- **决策表翻页**：状态弹窗的最近决策表改为分页展示（每页 5 条，倒序），新增「上一页 / 下一页」+ 页码指示（多页时显示）；刷新导致列表长度跨页边界时自动回到第一页。
+- **打开审计日志**：弹窗新增「打开日志」按钮，客户端经新 RPC 端点 `openLogFile` 请求宿主，用 OS 默认应用打开审计 JSONL（macOS `open` / Windows `cmd start` / Linux `xdg-open`）；文件尚不存在返回 `log-not-found`，UI 显示友好提示（含解析出的日志路径）。
+- **statusView 携带 auditFile**：生效审计日志路径随 statusView 返回（与主条目 `audit()` 同一解析规则），弹窗展示路径（按钮 title + 说明行）。
+- **lib/audit.js 新模块**：审计日志路径解析（`resolveAuditFile` / `defaultAuditFile` / `auditFileExists`）与 OS 打开（`openFileWithDefaultApp` / `openerCommandFor`）抽为独立宿主模块；主条目 `audit()` 与桥接 `openLogFile` 端点共用同一解析规则，杜绝路径不一致。
+
+### 测试
+
+- 新增 `test/audit.test.mjs`（路径解析 / 存在性 / 三平台打开命令）与 `test/state.test.mjs`（statusView 载荷装配含 auditFile）。
+- `test/remote-bridge.test.mjs` 增 `openLogFile` 端点用例：文件存在 → 注入 openFile 收到解析路径；不存在 → `log-not-found` 且不调用 openFile；端点常量。
+- `test/client.test.mjs` 增 `YoloStore.openLogFile` 转发用例与 Popup 分页渲染用例（20 条 → 5 条/页、翻页器、打开日志按钮与成功提示）。
+
 ## [0.4.0] - 2026-08-14
 
 ### 新增

package/README.md

@@ -6,6 +6,8 @@
 
 [![npm version](https://img.shields.io/npm/v/dsh-yolo-mode)](https://www.npmjs.com/package/dsh-yolo-mode)
 [![license](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+[![DeepSeek Harness](https://img.shields.io/badge/DeepSeek%20Harness-0.1.0--rc.6-blue)](https://github.com/deepseek-ai/deepseek-harness)
+[![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 
 ---
 
@@ -16,7 +18,7 @@
 - **自定义层级**：`levels` 支持逐目标模式、逐工具（`tools.<toolName>`）的 `allow / judge / delegate / deny` 策略，及 `error` / `unsure` 回退。
 - **每预设默认提示词**：`judge.systemPrompt` 留空时按预设自动选用对应裁判提示词（strict 最保守、permissive 宽松、custom 按层级表）。
 - **图形化配置**：设置面板「YOLO 审批」页在线修改预设 / 生效模式 / 裁判模型（下拉选择）/ 层级表，保存即生效；输入栏状态 chip + 决策统计面板。
-- **完整审计**：每次裁决落 JSONL 日志，含工具、目标模式、当前模式、理由、决策与结果。
+- **完整审计**：每次裁决落 JSONL 日志，含工具、目标模式、当前模式、理由、决策与结果；状态弹窗一键「打开日志」用系统默认应用查看。
 - **fail-closed**：超时、非法输出、模型不可用、并发溢出等一切异常路径都回退为「拒绝」或「转人工」。
 
 ## 安装
@@ -31,26 +33,35 @@ dsh plugin --profile web add dsh-yolo-mode
 dsh plugin --profile web add <项目绝对路径>
 ```
 
-### 2. 追加两行到 profile patch
+### 2.（可选）覆盖插件配置
 
-编辑 `$DSH_HOME/profiles/web/cordis.patch.yml`，追加两个 `insert` 元素（主条目 + 设置桥接条目）：
+`dsh plugin add` 会通过插件包自带的 `cordis.patch.yml` 自动挂载 `yolo-mode` 与
+`yolo-mode-bridge` 两个入口，**不需要**再手动 `insert`。需要调整配置时，在
+`$DSH_HOME/profiles/web/cordis.patch.yml` 里按 id 覆盖主条目即可：
 
 ```yaml
-- insert:
-    - id: yolo-mode
-      name: dsh-yolo-mode
-      config:
-        preset: balanced
-        judge:
-          provider: <provider>
-          model: <model>
-- insert:
-    - id: yolo-mode-bridge
-      name: dsh-yolo-mode/bridge
+- id: yolo-mode
+  name: dsh-yolo-mode
+  config:
+    preset: balanced
+    judge:
+      provider: <provider>
+      model: <model>
 ```
 
+> 注意：不要再用 `- insert:` 添加 `yolo-mode` / `yolo-mode-bridge`，否则启动会报
+> `duplicate loader entry id: yolo-mode`。
+
 重启 DSH 并刷新浏览器后生效。
 
+### 安装注意事项
+
+- 推荐直接 `dsh plugin --profile web add dsh-yolo-mode`（npm 发布版已包含构建产物，
+  peer 依赖由 DSH 的 `$DSH_HOME/profiles/node_modules` fallback 提供，开箱即用）。
+- 本地 `link:` 开发时，checkout 需位于 `$DSH_HOME/profiles/` 下（或仓库自带
+  node_modules），否则 `@deepseek-ai/*` peer 依赖会因 Node 按真实路径解析而报
+  `ERR_MODULE_NOT_FOUND`。
+
 ## 配置
 
 插件行 `config` 全字段可选，未填按默认值：
@@ -107,7 +118,8 @@ levels:
 
 ## 界面
 
-- **输入栏 chip**：显示 `YOLO <preset>`，点击弹出统计面板（总审批 / 放行 / 拒绝 / 转人工 + 最近 20 条决策）。
+- **输入栏 chip**：显示 `YOLO <preset>`，点击弹出统计面板（总审批 / 放行 / 拒绝 / 转人工 + 最近决策表，每页 5 条，带上一页 / 下一页翻页）。
+- **打开日志**：弹窗右上「打开日志」按钮用系统默认应用打开审计 JSONL（`auditFile` 配置或默认 `%TEMP%/dsh-yolo/judge.log`）；文件尚不存在时提示暂无记录。
 - **设置页**：「YOLO 审批」页在线修改预设、生效沙箱模式、裁判模型（provider / model 下拉，取自 Harness 模型配置）、层级表（JSON）；切换预设时自动预填充该预设的默认提示词与层级表。
 
 ## 安全

package/cordis.patch.yml

@@ -0,0 +1,12 @@
+# dsh-yolo-mode bundle patch.
+#
+# Adds the plugin's two entries: the main entry and the settings bridge that
+# exposes the `yolo-mode` settings namespace to the Web UI.
+# Install: dsh plugin --profile <name> add dsh-yolo-mode
+# Restart `dsh --profile <name>` after installing.
+- insert:
+    - id: yolo-mode
+      name: dsh-yolo-mode
+- insert:
+    - id: yolo-mode-bridge
+      name: dsh-yolo-mode/bridge

package/lib/audit.js

@@ -0,0 +1,116 @@
+/**
+ * dsh-yolo-mode —— 审计日志文件解析与打开（lib/audit.js）
+ *
+ * 审计 JSONL 路径的唯一解析来源：主条目（lib/index.js 的 audit()）与桥接条目
+ * （openLogFile 端点）都必须落到同一个文件，否则「打开日志」会指向错误位置。
+ * 规则（design.md §8/§11.1，README 配置表 auditFile）：
+ *   - 配置显式给出非空 `auditFile` → 用配置值；
+ *   - 否则回落默认 `%TEMP%/dsh-yolo/judge.log`（os.tmpdir()，宿主真实临时目录）。
+ *
+ * `openFileWithDefaultApp` 用 OS 默认应用打开文件（fire-and-forget）：
+ *   - darwin → `open <file>`
+ *   - win32  → `cmd /c start "" "<file>"`（引号包实参，兼容含空格路径）
+ *   - 其余   → `xdg-open <file>`
+ * 启动失败（如 xdg-open 缺失）经 child 'error' 事件返回 { ok:false }，
+ * 绝不抛出（打开失败不致命，UI 只提示）。
+ *
+ * 纯函数层（resolveAuditFile / auditFileExists / openerCommandFor）无副作用，
+ * 可在普通 node 环境单测。
+ *
+ * @module lib/audit.js
+ */
+import os from 'node:os';
+import path from 'node:path';
+import fs from 'node:fs';
+import { spawn } from 'node:child_process';
+
+/** 默认审计日志路径：`%TEMP%/dsh-yolo/judge.log`（design.md §8；每次调用取当前 tmpdir）。 */
+export function defaultAuditFile() {
+  return path.join(os.tmpdir(), 'dsh-yolo', 'judge.log');
+}
+
+/**
+ * 解析生效的审计日志路径：显式非空 `auditFile` 优先（返回值去除首尾空白），
+ * 否则回落默认。
+ * @param {object|undefined} cfg 配置字形（view.value / effectiveConfig）
+ * @returns {string} 绝对或配置给定的审计日志路径
+ */
+export function resolveAuditFile(cfg) {
+  const configured =
+    cfg && typeof cfg === 'object' && typeof cfg.auditFile === 'string' ? cfg.auditFile.trim() : '';
+  return configured !== '' ? configured : defaultAuditFile();
+}
+
+/**
+ * 审计日志文件是否已存在（尚无裁决时不创建、不弹错误对话框）。
+ * @param {string} file
+ * @returns {boolean}
+ */
+export function auditFileExists(file) {
+  try {
+    return fs.existsSync(file);
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * 按平台挑选「默认应用打开」命令（纯函数，可注入 platform 单测）。
+ * @param {string} file 目标文件路径
+ * @param {string} [platform] process.platform 值；缺省取当前进程
+ * @returns {{command: string, args: string[]}}
+ */
+export function openerCommandFor(file, platform = process.platform) {
+  const target = String(file);
+  if (platform === 'darwin') return { command: 'open', args: [target] };
+  if (platform === 'win32') {
+    // cmd 的 start 把首个带引号实参当作窗口标题；用 "" 占位，文件实参整体包引号。
+    return { command: 'cmd', args: ['/c', 'start', '""', '"' + target.replace(/"/g, '\\"') + '"'] };
+  }
+  return { command: 'xdg-open', args: [target] };
+}
+
+/**
+ * 用 OS 默认应用打开文件（detached + unref 的 fire-and-forget）。
+ * @param {string} file
+ * @returns {Promise<{ok:true, value:{path:string}} | {ok:false, error:{code:string, message:string, details:object}}>}
+ */
+export function openFileWithDefaultApp(file) {
+  return new Promise((resolve) => {
+    const { command, args } = openerCommandFor(file);
+    let settled = false;
+    const settle = (result) => {
+      if (settled) return;
+      settled = true;
+      resolve(result);
+    };
+    let child;
+    try {
+      child = spawn(command, args, { detached: true, stdio: 'ignore' });
+    } catch (err) {
+      settle({
+        ok: false,
+        error: {
+          code: 'open-failed',
+          message: 'failed to launch ' + command + ': ' + String(err && err.message ? err.message : err),
+          details: { path: file },
+        },
+      });
+      return;
+    }
+    child.once('error', (err) => {
+      settle({
+        ok: false,
+        error: {
+          code: 'open-failed',
+          message: 'failed to launch ' + command + ': ' + (err && err.message ? err.message : String(err)),
+          details: { path: file },
+        },
+      });
+    });
+    child.once('spawn', () => {
+      child.unref();
+      settle({ ok: true, value: { path: file } });
+    });
+  });
+}

package/lib/client/index.js

@@ -5,7 +5,6 @@ window.__ModuleLoader__.load({
 		var exports = module.exports;
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 		let react = require("react");
-		let _deepseek_ai_dsh_client_web_react = require("@deepseek-ai/dsh-client-web-react");
 		//#region src/client/locales.js
 		/**
 		* Bilingual dictionaries for the YOLO mode `settings.yoloMode` namespace.
@@ -55,6 +54,15 @@ window.__ModuleLoader__.load({
 			statsDelegated: "Delegated",
 			refresh: "Refresh",
 			close: "Close",
+			openLog: "Open log",
+			openLogBusy: "Opening…",
+			openLogOk: "Log opened",
+			openLogFail: "Could not open log",
+			logNotFound: "The log file does not exist yet (no decisions recorded).",
+			logPath: "Log file",
+			pagePrev: "‹ Prev",
+			pageNext: "Next ›",
+			pageOf: "Page {current} / {total}",
 			tableTime: "Time",
 			tableTool: "Tool",
 			tableTarget: "Target",
@@ -104,6 +112,15 @@ window.__ModuleLoader__.load({
 			statsDelegated: "转人工",
 			refresh: "刷新",
 			close: "关闭",
+			openLog: "打开日志",
+			openLogBusy: "打开中…",
+			openLogOk: "日志已打开",
+			openLogFail: "无法打开日志",
+			logNotFound: "日志文件尚不存在（还没有裁决记录）。",
+			logPath: "日志文件",
+			pagePrev: "‹ 上一页",
+			pageNext: "下一页 ›",
+			pageOf: "第 {current} / {total} 页",
 			tableTime: "时间",
 			tableTool: "工具",
 			tableTarget: "目标模式",
@@ -228,15 +245,16 @@ window.__ModuleLoader__.load({
 		* invalidations (settings/document-updated, connection/reset) refresh the page.
 		*
 		* The store is a bare observable (implements subscribe/getSnapshot) so it can
-		* be bound directly by `bindSnapshotSelector` (dsh-client-web-react); the
-		* popup open/closed flag is also held here so the chip and the overlay share
-		* one source of truth.
+		* be bound directly by `bindSnapshotSelector` (see ./bind.js); the popup
+		* open/closed flag is also held here so the chip and the overlay share one
+		* source of truth.
 		*/
 		/** Channel + endpoints under the plugin's self-published bridge. */
 		const YOLO_RPC_CHANNEL = "/yolo-mode";
 		const YOLO_RPC_VIEW = "settingsView";
 		const YOLO_RPC_STATUS = "statusView";
 		const YOLO_RPC_MUTATE = "settingsMutate";
+		const YOLO_RPC_OPEN_LOG = "openLogFile";
 		/** Initial snapshot returned by a freshly constructed store. */
 		function initialYoloState() {
 			return {
@@ -436,6 +454,15 @@ window.__ModuleLoader__.load({
 					code
 				};
 			}
+			/**
+			* Ask the host to open the audit JSONL log file with the OS default
+			* application. The host resolves the effective path (view.value.auditFile or
+			* the tmp default) and returns { ok: true, value: { path } } on success, or
+			* { ok: false, error: { code: 'log-not-found' | 'open-failed', … } }.
+			*/
+			async openLogFile() {
+				return this._call(YOLO_RPC_OPEN_LOG, {});
+			}
 			/** Rebase the revision from a freshly loaded view without a full load. */
 			adoptRevision(freshRevision) {
 				this.set(adoptRevision({
@@ -1043,8 +1070,14 @@ window.__ModuleLoader__.load({
 		/**
 		* YOLO mode status popup (slot `shell.overlay`). Renders null while the store's
 		* open flag is false; otherwise a stats card plus the recent decisions table
-		* (≤20, newest first) and a refresh button.
+		* (paged, PAGE_SIZE per page, newest first), an "open audit log" button, and a
+		* refresh button.
+		*
+		* Guard/hook split mirrors SettingsSection: the outer component validates the
+		* slot inject face, the inner component owns all hooks unconditionally.
 		*/
+		/** Rows per page of the recent-decisions table. */
+		const PAGE_SIZE = 5;
 		const popupStyle = {
 			position: "absolute",
 			top: 56,
@@ -1069,6 +1102,11 @@ window.__ModuleLoader__.load({
 			alignItems: "center",
 			justifyContent: "space-between"
 		};
+		const headerButtons = {
+			display: "flex",
+			alignItems: "center",
+			gap: 8
+		};
 		const statGrid = {
 			display: "grid",
 			gridTemplateColumns: "repeat(4, 1fr)",
@@ -1123,6 +1161,36 @@ window.__ModuleLoader__.load({
 			fontSize: 12,
 			cursor: "pointer"
 		};
+		const secondaryButton = {
+			backgroundColor: "#ffffff",
+			color: "#374151",
+			border: "1px solid #cbd5e1",
+			borderRadius: 6,
+			padding: "5px 12px",
+			fontSize: 12,
+			cursor: "pointer"
+		};
+		const pagerButton = {
+			backgroundColor: "#ffffff",
+			color: "#2563eb",
+			border: "1px solid #cbd5e1",
+			borderRadius: 6,
+			padding: "3px 10px",
+			fontSize: 12,
+			cursor: "pointer"
+		};
+		const pagerButtonDisabled = {
+			opacity: .4,
+			cursor: "not-allowed"
+		};
+		const captionStyle = {
+			margin: 0,
+			color: "#6b7280",
+			fontSize: 11,
+			lineHeight: "16px"
+		};
+		const logResultOk = { color: "#16a34a" };
+		const logResultErr = { color: "#dc2626" };
 		/** Truncate long reason text for display. */
 		function truncate(text, max) {
 			if (typeof text !== "string") return "";
@@ -1136,19 +1204,82 @@ window.__ModuleLoader__.load({
 			const useSnapshot = props.useSnapshot;
 			const t = props.t;
 			if (store === void 0 || useSnapshot === void 0 || t === void 0) return null;
+			return ReactPopup({
+				store,
+				useSnapshot,
+				t
+			});
+		}
+		function ReactPopup({ store, useSnapshot, t }) {
 			const state = useSnapshot((s) => s);
+			const [page, setPage] = (0, react.useState)(0);
+			const [logResult, setLogResult] = (0, react.useState)(void 0);
+			const [logBusy, setLogBusy] = (0, react.useState)(false);
+			const statusInfo = state.statusInfo && typeof state.statusInfo === "object" ? state.statusInfo : {};
+			const recent = Array.isArray(statusInfo.recent) ? statusInfo.recent : [];
+			const totalPages = Math.max(1, Math.ceil(recent.length / PAGE_SIZE));
+			(0, react.useEffect)(() => {
+				setPage(0);
+			}, [totalPages]);
+			(0, react.useEffect)(() => {
+				if (!logResult || !logResult.ok) return;
+				const timer = setTimeout(() => setLogResult(void 0), 4e3);
+				return () => clearTimeout(timer);
+			}, [logResult]);
 			if (!state.open) return null;
 			const info = state.statusInfo;
 			const stats = info && info.stats ? info.stats : {};
-			const recent = info && Array.isArray(info.recent) ? info.recent.slice(0, 20) : [];
-			return (0, react.createElement)("div", { style: popupStyle }, (0, react.createElement)("div", { style: headerStyle }, (0, react.createElement)("strong", {}, t("chip")), (0, react.createElement)("button", {
+			const auditFile = typeof statusInfo.auditFile === "string" && statusInfo.auditFile !== "" ? statusInfo.auditFile : void 0;
+			const safePage = Math.min(page, totalPages - 1);
+			const pageRows = recent.slice(safePage * PAGE_SIZE, (safePage + 1) * PAGE_SIZE);
+			const openLog = async () => {
+				setLogBusy(true);
+				setLogResult(void 0);
+				try {
+					setLogResult(await store.openLogFile());
+				} catch (err) {
+					setLogResult({
+						ok: false,
+						error: {
+							code: "internal",
+							message: err && err.message ? String(err.message) : String(err)
+						}
+					});
+				} finally {
+					setLogBusy(false);
+				}
+			};
+			return (0, react.createElement)("div", { style: popupStyle }, (0, react.createElement)("div", { style: headerStyle }, (0, react.createElement)("strong", {}, t("chip")), (0, react.createElement)("div", { style: headerButtons }, (0, react.createElement)("button", {
+				style: logBusy ? Object.assign({}, secondaryButton, { opacity: .6 }) : secondaryButton,
+				onClick: () => void openLog(),
+				title: auditFile !== void 0 ? auditFile : void 0
+			}, logBusy ? t("openLogBusy") : t("openLog")), (0, react.createElement)("button", {
 				style: primaryButton,
 				onClick: () => void store.load()
-			}, t("refresh"))), (0, react.createElement)("div", { style: statGrid }, statCellOf(t, "statsTotal", stats.total), statCellOf(t, "statsAllowed", stats.allowed), statCellOf(t, "statsRejected", stats.rejected), statCellOf(t, "statsDelegated", stats.delegated)), recent.length === 0 ? (0, react.createElement)("p", { style: {
+			}, t("refresh")))), logResult !== void 0 ? (0, react.createElement)("p", { style: Object.assign({}, captionStyle, logResult.ok ? logResultOk : logResultErr) }, logResult.ok ? t("openLogOk") + (logResult.value && logResult.value.path ? ": " + logResult.value.path : "") : logMessage(t, logResult.error)) : auditFile !== void 0 ? (0, react.createElement)("p", { style: captionStyle }, t("logPath") + ": " + auditFile) : null, (0, react.createElement)("div", { style: statGrid }, statCellOf(t, "statsTotal", stats.total), statCellOf(t, "statsAllowed", stats.allowed), statCellOf(t, "statsRejected", stats.rejected), statCellOf(t, "statsDelegated", stats.delegated)), recent.length === 0 ? (0, react.createElement)("p", { style: {
 				color: "#6b7280",
 				fontSize: 12,
 				margin: 0
-			} }, t("recentEmpty")) : (0, react.createElement)("table", { style: tableStyle }, (0, react.createElement)("thead", {}, (0, react.createElement)("tr", {}, (0, react.createElement)("th", { style: thStyle }, t("tableTime")), (0, react.createElement)("th", { style: thStyle }, t("tableTool")), (0, react.createElement)("th", { style: thStyle }, t("tableTarget")), (0, react.createElement)("th", { style: thStyle }, t("tableDecision")), (0, react.createElement)("th", { style: thStyle }, t("tableOutcome")), (0, react.createElement)("th", { style: thStyle }, t("tableReason")))), (0, react.createElement)("tbody", {}, recent.map((row, idx) => tableRow(t, row, idx)))), (0, react.createElement)("div", { style: {
+			} }, t("recentEmpty")) : (0, react.createElement)("table", { style: tableStyle }, (0, react.createElement)("thead", {}, (0, react.createElement)("tr", {}, (0, react.createElement)("th", { style: thStyle }, t("tableTime")), (0, react.createElement)("th", { style: thStyle }, t("tableTool")), (0, react.createElement)("th", { style: thStyle }, t("tableTarget")), (0, react.createElement)("th", { style: thStyle }, t("tableDecision")), (0, react.createElement)("th", { style: thStyle }, t("tableOutcome")), (0, react.createElement)("th", { style: thStyle }, t("tableReason")))), (0, react.createElement)("tbody", {}, pageRows.map((row, idx) => tableRow(t, row, safePage * PAGE_SIZE + idx)))), totalPages > 1 ? (0, react.createElement)("div", { style: {
+				display: "flex",
+				alignItems: "center",
+				justifyContent: "flex-end",
+				gap: 8
+			} }, (0, react.createElement)("button", {
+				style: Object.assign({}, pagerButton, safePage === 0 ? pagerButtonDisabled : {}),
+				disabled: safePage === 0,
+				onClick: () => setPage(safePage - 1)
+			}, t("pagePrev")), (0, react.createElement)("span", { style: {
+				fontSize: 12,
+				color: "#374151"
+			} }, t("pageOf", {
+				current: String(safePage + 1),
+				total: String(totalPages)
+			})), (0, react.createElement)("button", {
+				style: Object.assign({}, pagerButton, safePage >= totalPages - 1 ? pagerButtonDisabled : {}),
+				disabled: safePage >= totalPages - 1,
+				onClick: () => setPage(safePage + 1)
+			}, t("pageNext"))) : null, (0, react.createElement)("div", { style: {
 				display: "flex",
 				justifyContent: "flex-end"
 			} }, (0, react.createElement)("button", {
@@ -1156,6 +1287,13 @@ window.__ModuleLoader__.load({
 				onClick: () => store.togglePopup()
 			}, t("close"))));
 		}
+		/** User-facing message for a failed open-log attempt (by error code). */
+		function logMessage(t, error) {
+			const code = error && typeof error === "object" && typeof error.code === "string" ? error.code : void 0;
+			const detail = error && typeof error === "object" && typeof error.message === "string" ? error.message : void 0;
+			if (code === "log-not-found") return t("logNotFound") + (detail ? ": " + detail : "");
+			return t("openLogFail") + (detail ? ": " + detail : "");
+		}
 		function statCellOf(t, key, value) {
 			return (0, react.createElement)("div", { style: statCell }, (0, react.createElement)("div", { style: statValue }, value === void 0 || value === null ? "–" : String(value)), (0, react.createElement)("div", { style: statLabel }, t(key)));
 		}
@@ -1172,6 +1310,33 @@ window.__ModuleLoader__.load({
 			return "–";
 		}
 		//#endregion
+		//#region src/client/bind.js
+		/**
+		* uSES bridge: turns any bare observable snapshot source into a selector hook.
+		*
+		* DSH rc8 removed the `@deepseek-ai/dsh-client-web-react` package (its client
+		* store-binding helpers were folded into the core slot kit). This is a local
+		* copy of the same `bindSnapshotSelector` contract, implemented against the
+		* `react` seed provided by the DSH client module table, so the plugin keeps
+		* working on rc8+ without an extra runtime dependency.
+		*/
+		/**
+		* Bind a bare observable source (subscribe/getSnapshot) to a selector hook.
+		* The selector is applied to the snapshot on every render; identity stores can
+		* simply pass `(s) => s`.
+		*
+		* @param store - snapshot source (must implement subscribe/getSnapshot).
+		* @returns the selector hook.
+		*/
+		function bindSnapshotSelector(store) {
+			const subscribe = (listener) => store.subscribe(listener);
+			const getSnapshot = () => store.getSnapshot();
+			return function useSelector(selector) {
+				const select = selector ?? ((state) => state);
+				return (0, react.useSyncExternalStore)(subscribe, () => select(getSnapshot()));
+			};
+		}
+		//#endregion
 		//#region src/client/index.js
 		/**
 		* YOLO mode — browser half (DSH client plugin).
@@ -1211,7 +1376,7 @@ window.__ModuleLoader__.load({
 				rpc: connection.rpc,
 				llm: connection.api ? connection.api.llm : null
 			});
-			const useSnapshot = (0, _deepseek_ai_dsh_client_web_react.bindSnapshotSelector)(store);
+			const useSnapshot = bindSnapshotSelector(store);
 			ctx.effect(() => {
 				const refresh = (ns) => {
 					if (ns !== void 0 && ns !== "yolo-mode") return;

package/lib/index.js

@@ -18,7 +18,6 @@
  *
  * 纯 JavaScript（ESM），宿主代码仅 import node: 内置与同包 peer。
  */
-import os from 'node:os';
 import path from 'node:path';
 import fs from 'node:fs';
 
@@ -31,6 +30,7 @@ import {
 import { createJudge, defaultJudgePromptFor } from './judge.js';
 import { installYoloSettings, validateYoloSettings, pruneEmpty } from './settings.js';
 import { recordDecision, sessionOrigin } from './state.js';
+import { resolveAuditFile } from './audit.js';
 
 export const name = 'dsh-yolo-mode';
 
@@ -105,10 +105,7 @@ export function apply(ctx, rawConfig) {
     return normalizeConfig(pruneEmpty(raw));
   }
 
-  const auditFile = () => {
-    const cfg = effectiveConfig();
-    return cfg.auditFile ? cfg.auditFile : path.join(os.tmpdir(), 'dsh-yolo', 'judge.log');
-  };
+  const auditFile = () => resolveAuditFile(effectiveConfig());
 
   let dirEnsured = false;
 

package/lib/remote.js

@@ -16,21 +16,28 @@
  *   - dispatch 抛错       → 500（headersSent 则 destroy）
  * 响应一律 `RpcResult` 信封（{ rpcId, result: { ok, value|error } }）。
  *
- * 三个端点：
+ * 四个端点：
  *   settingsView   → { writable, view }
  *   settingsMutate → 应用带 expectedRevision 乐观锁的路径 op，返回新 redacted view；
  *                    冲突 → settings-conflict（含 expected/actual），其余拒绝 → settings-rejected。
  *   statusView     → getStatusPayload()（本插件扩展；不触碰 settings）。
+ *   openLogFile    → 解析生效审计日志路径（view.value.auditFile || 默认 tmp 路径），
+ *                    存在则用 OS 默认应用打开；不存在 → log-not-found。
+ *                    （本插件扩展；打开实现可注入，缺省 lib/audit.js openFileWithDefaultApp）
  *
+/**
  * 纯映射 / 线信封辅助在顶部（无 cordis），可在普通 node 环境单测。
  *
+ * DSH 0.1.2-alpha.4 兼容：dsh-settings 的 `settingsNamespace()` 品牌函数已
+ * 删除，命名空间为纯 kebab-case 字符串字面量（`yolo-mode`）；`mutate` /
+ * `describe` / `writable` 仍为 `SettingsProvider` 实例方法，
+ * `SettingsConflictError` 导出保留（code 'SETTINGS_CONFLICT'）。
+ *
  * @module lib/remote.js
  */
-import {
-  SettingsConflictError,
-  settingsNamespace,
-} from '@deepseek-ai/dsh-settings';
+import { SettingsConflictError } from '@deepseek-ai/dsh-settings';
 import { YOLO_SETTINGS_NAMESPACE } from './settings.js';
+import { resolveAuditFile, auditFileExists, openFileWithDefaultApp } from './audit.js';
 
 /** 桥接通道绝对前缀路由（design.md §12.4）。 */
 export const YOLO_RPC_CHANNEL = '/yolo-mode';
@@ -40,6 +47,8 @@ export const YOLO_RPC_VIEW = 'settingsView';
 export const YOLO_RPC_MUTATE = 'settingsMutate';
 /** statusView 端点（本插件扩展）。 */
 export const YOLO_RPC_STATUS = 'statusView';
+/** openLogFile 端点（本插件扩展）：用 OS 默认应用打开审计 JSONL 日志。 */
+export const YOLO_RPC_OPEN_LOG = 'openLogFile';
 
 /** 顶层校验失败时宿主用的固定 rpcId（镜像 invalidEnvelopeResponse）。 */
 export const INVALID_REQUEST_RPC_ID = 'invalid-request';
@@ -238,6 +247,8 @@ function yoloConflict(conflict) {
 /**
  * 对 settings seam 执行一次路径 op 变更并映射为 RpcResult（携带新 redacted view，
  * 或 settings-conflict / settings-rejected 错误）。纯函数可注入 mutate/describe 测试。
+ * alpha.4 起命名空间为纯 kebab-case 字符串（`settingsNamespace()` 品牌已删除），
+ * `ns` 原样透传给 SettingsProvider.mutate（其内部按 `^[a-z][a-z0-9-]*$` 校验）。
  * @param {Function} mutate settings.mutate 绑定
  * @param {Function} describe settings.describe 绑定
  * @param {string} ns 命名空间字符串
@@ -246,9 +257,8 @@ function yoloConflict(conflict) {
  * @returns {Promise<{ok:boolean, value?:object, error?:object}>}
  */
 export async function yoloMutate(mutate, describe, ns, ops, expectedRevision) {
-  const branded = settingsNamespace(ns);
   try {
-    await mutate(branded, ops, expectedRevision);
+    await mutate(ns, ops, expectedRevision);
   } catch (error) {
     if (error instanceof SettingsConflictError) {
       return { ok: false, error: yoloConflict(error) };
@@ -256,7 +266,7 @@ export async function yoloMutate(mutate, describe, ns, ops, expectedRevision) {
     return { ok: false, error: yoloRejected(ns, error) };
   }
   const descriptor = describe({ redactSecrets: true }).find(
-    (candidate) => candidate.ns === branded,
+    (candidate) => candidate.ns === ns,
   );
   if (descriptor === undefined) {
     return {
@@ -333,15 +343,42 @@ function sendJson(res, status, payload) {
   res.end(JSON.stringify(payload));
 }
 
+/**
+ * openLogFile 端点：从 settings 的 yolo-mode resolved view 解析生效审计日志路径
+ * （resolveAuditFile 与主条目 audit() 同一规则），文件不存在 → log-not-found；
+ * 存在则交给注入的 openFile（默认 OS 默认应用打开）。
+ * @param {object} settings settings 服务对象
+ * @param {(file: string) => Promise<{ok:boolean, value?:object, error?:object}>} openFile
+ * @returns {Promise<{ok:boolean, value?:object, error?:object}>}
+ */
+async function openAuditLogEndpoint(settings, openFile) {
+  const view = pickYoloNamespaceView(settings.describe({ redactSecrets: true }));
+  const value = view && view.value && typeof view.value === 'object' ? view.value : {};
+  const file = resolveAuditFile(value);
+  if (!auditFileExists(file)) {
+    return {
+      ok: false,
+      error: {
+        code: 'log-not-found',
+        message: 'audit log file does not exist yet: ' + file,
+        details: { path: file },
+      },
+    };
+  }
+  return openFile(file);
+}
+
 /**
  * 分派一个已校验端点。未知端点抛错（由调用方兜底为 500）。
  * @param {object} settings settings 服务对象
  * @param {() => object} getStatusPayload statusView 载荷装配（由桥接条目注入）
  * @param {string} endpoint
  * @param {unknown} payload
+ * @param {(file: string) => Promise<{ok:boolean, value?:object, error?:object}>} [openFile]
+ *   openLogFile 端点的打开实现（测试注入 fake；缺省 OS 默认应用打开）
  * @returns {Promise<{ok:boolean, value?:unknown, error?:object}>}
  */
-async function dispatchYoloEndpoint(settings, getStatusPayload, endpoint, payload) {
+async function dispatchYoloEndpoint(settings, getStatusPayload, endpoint, payload, openFile) {
   if (endpoint === YOLO_RPC_VIEW) {
     return {
       ok: true,
@@ -354,6 +391,9 @@ async function dispatchYoloEndpoint(settings, getStatusPayload, endpoint, payloa
   if (endpoint === YOLO_RPC_STATUS) {
     return { ok: true, value: getStatusPayload() };
   }
+  if (endpoint === YOLO_RPC_OPEN_LOG) {
+    return openAuditLogEndpoint(settings, openFile ?? openFileWithDefaultApp);
+  }
   if (endpoint === YOLO_RPC_MUTATE) {
     const request = payload ?? null;
     if (request === null || typeof request !== 'object' || request.ns !== String(YOLO_SETTINGS_NAMESPACE)) {
@@ -384,9 +424,11 @@ async function dispatchYoloEndpoint(settings, getStatusPayload, endpoint, payloa
  * @param {() => object} getStatusPayload statusView 载荷装配（由桥接条目注入）
  * @param {import('node:http').IncomingMessage} req
  * @param {import('node:http').ServerResponse} res
+ * @param {(file: string) => Promise<{ok:boolean, value?:object, error?:object}>} [openFile]
+ *   openLogFile 端点的打开实现（测试注入 fake；缺省 OS 默认应用打开）
  * @returns {Promise<void>}
  */
-export async function handleYoloBridgeRequest(settings, getStatusPayload, req, res) {
+export async function handleYoloBridgeRequest(settings, getStatusPayload, req, res, openFile) {
   const rawUrl = typeof req.url === 'string' ? req.url : '/';
   const hostHeader = req.headers.host;
 
@@ -448,7 +490,7 @@ export async function handleYoloBridgeRequest(settings, getStatusPayload, req, r
     return;
   }
   // 分派。
-  const result = await dispatchYoloEndpoint(settings, getStatusPayload, endpoint, envelope.payload);
+  const result = await dispatchYoloEndpoint(settings, getStatusPayload, endpoint, envelope.payload, openFile);
   sendJson(res, 200, buildServerResponse(envelope.rpcId, result));
 }
 

package/lib/settings.js

@@ -6,20 +6,24 @@
  * ./policy.js 的 `normalizeConfig`（fail-loud 抛错即拒绝写入）。
  *
  * 分层层（design.md §12.3）：插件行 config 作为 settings 的 `base` 层，
- * 用户文档写在上层；`installYoloSettings` 走 `installSettingsSection` 的
- * 可选-settings 消费者接线，部署无 settings 服务时打 debug 日志跳过（零侵入）。
+ * 用户文档写在上层；`installYoloSettings` 走 `SettingsProvider.installSection`
+ * 的可选-settings 消费者接线，部署无 settings 服务时打 debug 日志跳过（零侵入）。
+ *
+ * DSH 0.1.2-alpha.4 兼容：dsh-settings 改为类服务——默认导出 `SettingsProvider`，
+ * `installSettingsSection` / `settingsNamespace` 函数导出已删除；命名空间改为
+ * 纯 kebab-case 字符串字面量（模板校验 `^[a-z][a-z0-9-]*$`），消费接线改为
+ * `ctx.settings.installSection(owner, ns, schema, entry, hooks)`。
  *
  * 纯 JavaScript（ESM），宿主代码仅 import node: 内置与同包 peer
  * （@deepseek-ai/dsh-settings、@deepseek-ai/schemastery）。
  *
  * @module lib/settings.js
  */
-import { installSettingsSection, settingsNamespace } from '@deepseek-ai/dsh-settings';
 import z from '@deepseek-ai/schemastery';
 import { normalizeConfig } from './policy.js';
 
 /** settings 命名空间：`yolo-mode`（与插件行 id 一致，纯小写 kebab-case）。 */
-export const YOLO_SETTINGS_NAMESPACE = settingsNamespace('yolo-mode');
+export const YOLO_SETTINGS_NAMESPACE = 'yolo-mode';
 
 /** 预设枚举（与 ./policy.js PRSESTS 保持一致，供 union schema 使用）。 */
 const PRESETS = ['off', 'strict', 'balanced', 'permissive', 'yolo', 'custom'];
@@ -92,11 +96,12 @@ export function validateYoloSettings(value) {
  *   { setSource, onChange, validate? }
  */
 export function installYoloSettings(ctx, entry, hooks) {
-  if (ctx.get('settings') === undefined) {
+  const settings = ctx.get('settings');
+  if (settings === undefined) {
     ctx.logger.debug(
       '[yolo-mode] no settings service mounted; using composition config and skipping settings section registration',
     );
     return;
   }
-  installSettingsSection(ctx, YOLO_SETTINGS_NAMESPACE, YoloSettingsSchema, entry, hooks);
+  settings.installSection(ctx, YOLO_SETTINGS_NAMESPACE, YoloSettingsSchema, entry, hooks);
 }

package/lib/state.js

@@ -15,6 +15,7 @@
  */
 import { PRESETS, defaultLevelsFor } from './policy.js'
 import { defaultJudgePromptFor } from './judge.js'
+import { resolveAuditFile } from './audit.js'
 
 /** recent 环形缓冲上限（design.md §11.1/12.4，≤20）。 */
 export const RECENT_CAP = 20;
@@ -75,9 +76,9 @@ export function recordDecision(entry) {
 
 /**
  * 以浅拷贝装配 statusView 载荷（design.md §12.4）。
- * @param {object} cfg 含 { preset, judge?: { provider?, model? } } 的配置字形
+ * @param {object} cfg 含 { preset, judge?: { provider?, model? }, auditFile? } 的配置字形
  *   （主条目传 effectiveConfig()；桥接条目传 settings.describe 推导的 view 字形）
- * @returns {{preset:string, judgeConfigured:boolean, presetDefaults:object, stats:object, recent:Array<object>}}
+ * @returns {{preset:string, judgeConfigured:boolean, presetDefaults:object, stats:object, recent:Array<object>, auditFile:string}}
  */
 export function getStatusPayload(cfg) {
   const c = cfg && typeof cfg === 'object' ? cfg : {};
@@ -88,5 +89,8 @@ export function getStatusPayload(cfg) {
     presetDefaults,
     stats: { ...stats },
     recent: recent.map((r) => ({ ...r })),
+    // 生效的审计日志路径（resolveAuditFile 与主条目 audit() 同一解析规则），
+    // 供客户端「打开日志」按钮展示/复用。
+    auditFile: resolveAuditFile(c),
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-yolo-mode",
-  "version": "0.4.0",
+  "version": "0.5.0-beta.0",
   "description": "dsh-yolo-mode —— DeepSeek Harness 双面包插件：当会话处于可写沙箱模式且审批策略为 ask 时，用大模型自动裁决沙箱升权申请，支持内置预设与自定义权限层级，并提供宿主 settings + 自发布设置桥（/yolo-mode）与 Web 客户端 UI。",
   "type": "module",
   "main": "lib/index.js",
@@ -12,7 +12,8 @@
   },
   "files": [
     "lib",
-    "CHANGELOG.md"
+    "CHANGELOG.md",
+    "cordis.patch.yml"
   ],
   "repository": {
     "type": "git",
@@ -40,19 +41,23 @@
   "peerDependencies": {
     "react": "^18.2.0",
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-timeout": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-host-apiproxy": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-runtime": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-connection": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.6",
-    "@deepseek-ai/dsh-client-web-react": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-llm": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-timeout": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-settings": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-host-apiproxy": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-runtime": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-connection": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-client-locale": "^0.1.2-alpha.4",
     "@deepseek-ai/schemastery": "^3.18.1"
   },
   "devDependencies": {
-    "rolldown": "^1.2.4"
+    "rolldown": "^1.2.4",
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-llm": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-timeout": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-settings": "^0.1.2-alpha.4",
+    "@deepseek-ai/schemastery": "^3.18.1"
   },
   "scripts": {
     "build": "node scripts/build-client.mjs",
@@ -60,6 +65,9 @@
     "test": "node --test"
   },
   "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
     "client": {
       "platform": "web",
       "inject": [