Function deserialize

deserialize(json: string): AclState
Deserialize ACL state from a JSON string.

Pure function — no I/O. Returns a valid AclState or a fresh permissive state if the input is invalid.
Parameters
- json: string
  JSON string to parse
Returns AclState
Parsed AclState, or fresh permissive state on parse failure
Example
```
const json = localStorage.getItem('napplet:acl') ?? '';
const state = deserialize(json);
```
- Defined in mutations.ts:239