creatixchu
f2f9700de2
Dislike and a bare /feedback open the Session's feedback dialog, which collects one of seven fixed categories and an optional description and records through the messageFeedback put or the new sessionFeedback Remote; Like records at once. A recorded rating shows the filled glyph and every submission is acknowledged by a toast. feedback/record and MessageFeedbackItem carry the optional category; the note popover, its layout scenario, and the clearNote/clear verbs are removed. ui-commands gains the action command kind the /feedback decoration runs as. Closes #3515
description, kind
| description | kind |
|---|---|
| Permission preset surfaces for the Web GUI: the General-settings default row and the /permission picker for the current session; for users and maintainers of permission policy. | package-reference |
@deepseek-ai/dsh-client-ui-permission-presets
English | 中文
Summary
Use this package to choose Web GUI permission presets for future sessions or switch the current session. The General settings row changes only the default for sessions created later, while the /permission picker changes only the current session and marks its active preset. Built-in presets use localized labels; explicit host labels remain unchanged, and unknown kebab-case names appear in title case. Full access always requires explicit risk acknowledgement. Both surfaces confirm changes only after the host pushes the resulting permission state.
Table of Contents
- Use this package
- Understand the implementation
- Further Exploration
- Model Experience
- Known Limitations and Deferred Work
- Dev Note
Use this package
Mount this plugin alongside the settings and commands packages; the permission row then appears in General settings, and the /permission picker replaces the bare command invocation. The current-session picker is available exactly while the projection key is present; a permission-less composition shows neither picker nor Settings row.
The picker
A pick submits the /permission <preset> command line. The argued path (/permission <preset> typed directly) still switches directly; the decoration replaces only the bare invocation. The built-in labels are Read Only, Workspace Write, and Full access in English and 仅可查看, 工作区内修改, and 完全权限 in Chinese; custom is display state, never a target.
The Settings row
The row derives its options from the host's dynamic defaultPreset enum, uses the same localized labels as the current-session picker, and writes one settings mutation. The value applies only when a later session is created; changing it never switches or rewrites the current session.
Understand the implementation
Implementation internals — click to expand
The General row reads the explicitly exposed permission Settings descriptor through ctx.settingsScope and writes one settings.mutate path operation with the descriptor revision; its observable rides the slot system's hooks compartment, so the renderer owns React hook binding, and a push invalidation refetches the descriptor. The value is read only when a later session is created. The current-session surface is a popupSelect decoration hung on the host /permission command (ctx.commandUi.decorate): the host command keeps its slash-menu row, argued path, and durable lifecycle logging, while the decoration replaces only the bare invocation with the picker. Options and the active mark read the session's permissions projection — the same host-computed select the composer chip renders. The full-access option carries a confirmation payload the shared popup shell renders as the in-page risk gate.
Further Exploration
Read these pages when the permission surface is not enough. They move from the browser surfaces to the host policy and the command shell.
- dsh-permission-presets — the host-side permission preset policy these surfaces write.
- ui-commands — the popupSelect shell the
/permissiondecoration registers into. - ui-conversation — the composer chip that renders the same permissions projection.
- Client package map — adjacent browser UI packages.
Model Experience
Indirectly, through the permission facts its two surfaces write: the Settings row causes a future session to start with whole-value knob events, while the /permission picker appends the same facts when it switches the current session; those events select the sandbox mode and approval policy later tool calls resolve.
KV Cache effect
No direct invalidation; the knob consumers own any request-prefix changes.
Known Limitations and Deferred Work
These limits define the current permission surfaces. They are current package constraints, not a general policy comparison or a task backlog.
- The Settings row is Web-only — non-Web clients may still switch the current session through
/permission, but do not receive this browser contribution. - Preset descriptions come from the host — localized built-in labels may therefore appear beside a description written in another language.
Dev Note
Working context for maintainers — click to expand
None.
Runtime invariant: No companion is published. The command and slot contribution lifecycles are proven by the HMR-safety spec, while the browser-only Settings controller owns no host events or cross-plugin mutable state.