@deepseek-ai/dsh-client-ui-permission-presets

---

description: "Permission preset surfaces for the Web GUI: the General-settings default row and the /permission picker for the current session; for users and maintainers of permission policy." kind: "package-reference"

@deepseek-ai/dsh-client-ui-permission-presets

English | 中文

Summary

Use this package to choose Web GUI permission presets for future sessions or switch the current session. The General settings row changes only the default for sessions created later, while the /permission picker changes only the current session and marks its active preset. Built-in presets use localized labels; explicit host labels remain unchanged, and unknown kebab-case names appear in title case. Full access always requires explicit risk acknowledgement. Both surfaces confirm changes only after the host pushes the resulting permission state.

Table of Contents

• Use this package
• Understand the implementation
• Further Exploration
• Model Experience
• Known Limitations and Deferred Work
• Dev Note

---

Use this package

Mount this plugin alongside the settings and commands packages; the permission row then appears in General settings, and the /permission picker replaces the bare command invocation. The current-session picker is available exactly while the projection key is present; a permission-less composition shows neither picker nor Settings row.

The picker

A pick submits the /permission command line. The argued path (/permission typed directly) still switches directly; the decoration replaces only the bare invocation. The built-in labels are Read Only, Workspace Write, and Full access in English and 仅可查看, 工作区内修改, and 完全权限 in Chinese; custom is display state, never a target.

The Settings row

The row derives its options from the host's dynamic defaultPreset enum, uses the same localized labels as the current-session picker, and writes one settings mutation. The value applies only when a later session is created; changing it never switches or rewrites the current session.

---

Understand the implementation

Implementation internals — click to expand

The General row reads the explicitly exposed permission Settings descriptor through ctx.settingsScope and writes one settings.mutate path operation with the descriptor revision; its observable rides the slot system's hooks compartment, so the renderer owns React hook binding, and a push invalidation refetches the descriptor. The value is read only when a later session is created. The current-session surface is a popupSelect decoration hung on the host /permission command (ctx.commandUi.decorate): the host command keeps its slash-menu row, argued path, and durable lifecycle logging, while the decoration replaces only the bare invocation with the picker. Options and the active mark read the session's permissions projection — the same host-computed select the composer chip renders. The full-access option carries a confirmation payload the shared popup shell renders as the in-page risk gate.

---

Further Exploration

Read these pages when the permission surface is not enough. They move from the browser surfaces to the host policy and the command shell.

• dsh-permission-presets — the host-side permission preset policy these surfaces write.
• ui-commands — the popupSelect shell the /permission decoration registers into.
• ui-conversation — the composer chip that renders the same permissions projection.
• Client package map — adjacent browser UI packages.

---

Model Experience

Indirectly, through the permission facts its two surfaces write: the Settings row causes a future session to start with whole-value knob events, while the /permission picker appends the same facts when it switches the current session; those events select the sandbox mode and approval policy later tool calls resolve.

KV Cache effect

No direct invalidation; the knob consumers own any request-prefix changes.

Known Limitations and Deferred Work

These limits define the current permission surfaces. They are current package constraints, not a general policy comparison or a task backlog.

• The Settings row is Web-only — non-Web clients may still switch the current session through /permission, but do not receive this browser contribution.
• Preset descriptions come from the host — localized built-in labels may therefore appear beside a description written in another language.

Dev Note

Working context for maintainers — click to expand

None.

Runtime invariant: No companion is published. The command and slot contribution lifecycles are proven by the HMR-safety spec, while the browser-only Settings controller owns no host events or cross-plugin mutable state.