@agi-fans/oh-my-dsh 0.20.0 → 0.21.0

package/README.md

@@ -6,7 +6,7 @@
 
 **Into the Unknown**
 
-omdsh is a focused, keyboard-first DeepSeek coding agent built on the plugin architecture of [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) and inspired by the interaction quality of [oh-my-pi](https://github.com/can1357/oh-my-pi) and the original [Pi](https://github.com/earendil-works/pi) agent harness.
+omdsh is the terminal client for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness): a focused, keyboard-first DeepSeek coding agent built on its plugin architecture, with interaction quality inspired by [oh-my-pi](https://github.com/can1357/oh-my-pi) and the original [Pi](https://github.com/earendil-works/pi) agent harness.
 
 [![CI](https://github.com/agi-fans/oh-my-dsh/actions/workflows/ci.yml/badge.svg)](https://github.com/agi-fans/oh-my-dsh/actions/workflows/ci.yml) [![npm version](https://img.shields.io/npm/v/%40agi-fans%2Foh-my-dsh?style=flat-square&logo=npm)](https://www.npmjs.com/package/@agi-fans/oh-my-dsh) [![npm downloads](https://img.shields.io/npm/dm/%40agi-fans%2Foh-my-dsh?style=flat-square&logo=npm)](https://www.npmjs.com/package/@agi-fans/oh-my-dsh) [![Node.js ^22.19 or >=24](https://img.shields.io/badge/node-%5E22.19%20%7C%7C%20%3E%3D24-339933?style=flat-square&logo=node.js)](https://nodejs.org/) [![MIT License](https://img.shields.io/npm/l/%40agi-fans%2Foh-my-dsh?style=flat-square)](https://github.com/agi-fans/oh-my-dsh/blob/main/LICENSE)
 
@@ -14,22 +14,26 @@ omdsh is a focused, keyboard-first DeepSeek coding agent built on the plugin arc
 
 </div>
 
-[![Hello Oh My DSH — v0.19.0 terminal recording](https://raw.githubusercontent.com/agi-fans/oh-my-dsh/main/apps/site/public/screenshot.webp)](https://github.com/agi-fans/oh-my-dsh/blob/main/apps/site/public/hello-oh-my-dsh.mp4)
+[![omdsh terminal demo — one real DeepSeek account turn at 150×39](https://raw.githubusercontent.com/agi-fans/oh-my-dsh/main/apps/site/public/omdsh-demo-poster.png)](https://github.com/agi-fans/oh-my-dsh/blob/main/apps/site/public/omdsh-demo.mp4)
+
+A real Kaku recording at 150×39: one DeepSeek account turn reads a file, fixes it, runs it, and reports the verified result.
 
 ## Quick start
 
-Requirements: Node.js 22.19 or later in the 22.x line, or Node.js 24 or newer, plus a DeepSeek API key for live model turns.
+Requirements: Node.js 22.19 or later in the 22.x line, or Node.js 24 or newer, plus a DeepSeek account or API key for live model turns.
 
 ```sh
 npm install --global @agi-fans/oh-my-dsh
 omdsh
 ```
 
-Run `/login` once inside omdsh to validate and save your DeepSeek API key, then start a conversation. To try it without a global installation, run `npx @agi-fans/oh-my-dsh`.
+Run `/login` once inside omdsh to sign in with a DeepSeek account or save an API key, then start a conversation. To try it without a global installation, run `npx @agi-fans/oh-my-dsh`.
 
 ## Highlights
 
-- **Durable conversations:** search, pin, rename, and resume sessions in `/sessions`; rewind, retry, compact, and export complete transcripts as Markdown or standalone HTML.
+- **The terminal client for DeepSeek Harness:** a native-scrollback TUI with a docked composer, display-cell layout, and a keyboard path through every flow — built on the published plugin runtime, not a fork.
+- **Durable conversations:** search, pin, rename, and resume sessions in `/resume`; rewind, retry, compact, and export complete transcripts as Markdown or standalone HTML.
+- **DeepSeek-native auth:** sign in from `/login` through the browser or store a key; a DeepSeek account grant shared with DSH is reused, `/logout` signs it out, and web search/fetch use the same credential.
 - **Three real session controls:** choose a Harness Agent preset (Standard, PTC, Minimal, or Cordis), Workflow (Default or Plan), and Access (Read only, Workspace write, or Full access). Each Agent preset owns its tool exposure; PTC uses the generated TypeScript SDK automatically.
 - **Rich terminal input:** mention project files and other sessions with `@`, paste clipboard images, reuse persistent prompt history, edit multiline prompts externally, and retrieve queued follow-ups.
 - **Readable turns:** follow thinking, replies, and tool previews while the agent works. Completed work folds to a duration summary and the full final answer; `Ctrl+O` restores the process view. Scroll through either view, keep the current prompt pinned, and jump back to the latest message with `End`.
@@ -109,7 +113,7 @@ See the reproducible [TUI performance report](https://omdsh.agi.fans/docs/perfor
 
 ## Configuration
 
-Run `/login` to configure a provider. DeepSeek still opens the official key dashboard, validates the key, and prefers the stored credential over an inherited `DEEPSEEK_API_KEY`. When a mounted provider registers a Harness authorization flow, `/login` lists that flow and its methods and the terminal only renders the notices and prompts the flow asks for. The same command can also activate a catalog API-key provider or add a custom provider with its own id, base URL, protocol, and model ids. `/model` then lists every live route. `/logout` removes an omdsh-managed choice and, for DeepSeek, falls back to the environment when available.
+Run `/login` to configure a provider. DeepSeek opens the official key dashboard, validates the key, and stores it in the shared Harness credential store under `DEEPSEEK_API_KEY`; an environment-owned value is left untouched. A DeepSeek account can be signed in from `/login`: the TUI listens on a loopback callback for the browser flow and reuses any grant already established by DSH Web/Desktop. The account route (`deepseek-account`) then appears in `/model` beside the API-key route; sign-out is available from `/logout` or the same account prompt. When a mounted provider registers a Harness authorization flow, `/login` lists that flow and its methods and the terminal only renders the notices and prompts the flow asks for. The same command can also activate a catalog API-key provider or add a custom provider with its own id, base URL, protocol, and model ids. `/logout` removes only file-stored credentials and falls back to the environment when available.
 
 Model settings and the rest of the plugin config persist into the active Profile's Cordis patch, `$OMDSH_HOME/profiles/omdsh/cordis.patch.yml`; a `settings.yaml` left by an earlier release is imported once at startup and renamed to `settings.yaml.imported`. Use `/model favorite` and `/model unfavorite` to maintain a small local cycle list, then use `Ctrl+P`/`Alt+P` to move through it and `Ctrl+T` to change reasoning effort. Skills and MCP configuration are documented in [Skills and MCP](https://omdsh.agi.fans/docs/skills-and-mcp/).
 

package/config/cordis.yml

@@ -1,7 +1,8 @@
 # omdsh product bundle — one insert over an empty Profile root.
-# TUI coding agent over the DeepSeek Harness core runtime. No Host, no HTTP, no
-# browser layer: local executors, the executor-less agent spine, the DeepSeek
-# adapter, and the omdsh TUI seam (provider + interactive runner).
+# TUI coding agent over the DeepSeek Harness core runtime. No public Host or
+# browser layer: one loopback HTTP listener exists only to receive the DeepSeek
+# account OAuth callback. Local executors, the executor-less agent spine, the
+# DeepSeek adapter, and the omdsh TUI seam (provider + interactive runner).
 #
 # Model/provider rows read the CLI/environment overrides through the
 # harness's sanctioned dynamic-config mechanism (!!js under plugin config).
@@ -36,6 +37,14 @@
       # and omitting models keeps future adapter additions visible.
       maxTokens: 384000
 
+  # The account route shares the same transport but resolves only the DeepSeek
+  # account grant; it never falls back to an API key. Hosts that sign in through
+  # the shared credential store (DSH Web/Desktop) expose `deepseek-account` here.
+  - id: llm-deepseek-account
+    name: '@deepseek-ai/dsh-llm-deepseek-account'
+    config:
+      maxTokens: 384000
+
   - id: session
     name: '@deepseek-ai/dsh-session'
 
@@ -87,7 +96,7 @@
 
   # Model-facing session history: five read-only tools that let the agent find
   # work it did in an earlier session. Without them a model that solved
-  # something three sessions ago can only be told again, because `/sessions`
+  # something three sessions ago can only be told again, because `/resume`
   # and `/resume` are human affordances it cannot reach. Cross-session reads
   # are authorized only when the target session's cwd exactly matches the
   # caller's, so the model cannot read another workspace's history.
@@ -119,6 +128,14 @@
     config:
       backend: json
 
+  # Durable reminders. Delivery resolves its Session through the background
+  # controller below; a cold Session is resumed without touching the TUI.
+  - id: schedule
+    name: '@deepseek-ai/dsh-schedule'
+    config:
+      deliveryHistoryDays: 30
+      deliveryHistoryRecords: 200
+
   # Durable projection checkpoints — the piece that lets a cold session
   # answer its title without reading its log. Without it the `@` session
   # menu and the recent-session list can only label cold sessions by id.
@@ -177,6 +194,27 @@
   - id: authorization
     name: '@deepseek-ai/dsh-authorization'
 
+  # Move the retired product credential into the upstream DeepSeek slot before
+  # any model or web request reads it. Idempotent; no network.
+  - id: credential-migration
+    name: '@agi-fans/oh-my-dsh/credential-migration'
+
+  # Loopback-only callback host for the DeepSeek account browser sign-in. It
+  # binds 127.0.0.1 on an OS-assigned port and serves only the exact
+  # /oauth/callback route registered while an attempt is running.
+  - id: web-server
+    name: '@deepseek-ai/dsh-host-webserver'
+    config:
+      host: 127.0.0.1
+      port: 0
+
+  # DeepSeek account grant over the shared credential store. The browser
+  # callback needs a loopback webServer; this TUI host does not mount one yet,
+  # so the service reuses a grant established by DSH Web/Desktop and reports
+  # ACCOUNT_SIGN_IN_REQUIRED otherwise.
+  - id: deepseek-account
+    name: '@deepseek-ai/dsh-deepseek-account-platform'
+
   # Dormant multi-provider twin: zero extra picker routes until a `llm-pi-ai:`
   # settings section supplies profiles. /login writes those profiles; /model
   # lists whatever routes become live. Keep llm-deepseek as the official
@@ -202,14 +240,22 @@
     config:
       default: standard
 
+  # Background Session resolution for plugins that deliver without a client,
+  # currently Schedule. It exposes only `resolveAgent`; the visible Session is
+  # never activated or replaced.
+  - id: session-controller
+    name: '@agi-fans/oh-my-dsh/session-controller'
+
   - id: commands
     name: '@deepseek-ai/dsh-commands'
 
-  # `/feedback <text>` records one log-only `feedback/record` event: immediate,
-  # model-invisible, and no report leaves the machine. The Web feedback dialog
-  # behind the same service stays a host-plane surface omdsh does not mount.
-  - id: command-feedback
-    name: '@deepseek-ai/dsh-command-feedback'
+  # `/rate` stores one judgment per finalized assistant reply. The service owns
+  # the canonical Session events and compare-and-set versions; the TUI only
+  # renders the picker and never puts feedback into model context.
+  - id: message-feedback
+    name: '@deepseek-ai/dsh-message-feedback'
+    config:
+      maxNoteBytes: 8192
 
   - id: user-questions
     name: '@deepseek-ai/dsh-user-questions'
@@ -219,6 +265,11 @@
     config:
       policy: !!js "(process.env.OMDSH_PERMISSION_MODE || 'workspace-write') === 'danger-full-access' ? 'never' : 'ask'"
 
+  - id: approval-rules
+    name: '@agi-fans/dsh-tui/approval-rules'
+    config:
+      stateDir: !!js (process.env.OMDSH_HOME || process.env.DSH_HOME || process.env.HOME + '/.dsh') + '/omdsh/approval-rules'
+
   # Every session starts with one explicit access preset. The environment is a
   # deployment override; the TUI switches it later through the /permission picker.
   - id: sandbox
@@ -236,6 +287,12 @@
   - id: fs-observation-policy
     name: '@deepseek-ai/dsh-fs-observation-policy'
 
+  - id: file-recovery
+    name: '@agi-fans/dsh-tui/file-recovery-local'
+    config:
+      enabled: false
+      stateDir: !!js (process.env.OMDSH_HOME || process.env.DSH_HOME || process.env.HOME + '/.dsh') + '/omdsh/file-recovery'
+
   - id: subprocess
     name: '@deepseek-ai/dsh-subprocess-local'
 
@@ -337,12 +394,23 @@
     config:
       maxBytes: 65536
 
+  - id: working-directory
+    name: '@deepseek-ai/dsh-working-directory'
+
+  - id: tool-working-directory
+    name: '@deepseek-ai/dsh-tool-working-directory'
+
   - id: tool-skill
     name: '@deepseek-ai/dsh-tool-skill'
 
   - id: tool-jobs
     name: '@deepseek-ai/dsh-tool-jobs'
 
+  # Reminder management tools bind to the calling Session and disappear in
+  # minimal through its allow list; delegated children are refused by the tool.
+  - id: tool-schedule
+    name: '@deepseek-ai/dsh-tool-schedule'
+
   # Persistent, owner-scoped terminal sessions for interactive stdin and
   # cross-call state (REPLs, debuggers, a shell to return to). The one-shot
   # bash/pwsh tools remain the default for bounded commands.
@@ -437,6 +505,17 @@
   # overlay.
   - id: web
     name: '@deepseek-ai/dsh-web'
+    config:
+      # The DeepSeek API providers retrieve directly, so a local fake-IP resolver
+      # or an auxiliary Messages turn cannot block search and fetch. The older
+      # Messages search and local HTTP fetch stay mounted as selectable fallbacks.
+      searchProvider: deepseek-search-api
+      fetchProvider: deepseek-fetch-api
+
+  - id: web-deepseek-api
+    name: '@deepseek-ai/dsh-web-deepseek-api'
+    config:
+      apiKeyEnv: DEEPSEEK_API_KEY
 
   - id: web-search-deepseek
     name: '@deepseek-ai/dsh-web-search-deepseek'
@@ -512,6 +591,20 @@
   - id: subagent
     name: '@deepseek-ai/dsh-subagent'
 
+  - id: advisor
+    name: '@agi-fans/oh-my-dsh/advisor'
+
+  - id: tui-command-advisor
+    name: '@agi-fans/dsh-tui/command-advisor'
+
+  - id: btw
+    name: '@agi-fans/dsh-tui/btw'
+    config:
+      stateDir: !!js "(process.env.OMDSH_HOME || process.env.DSH_HOME || process.env.HOME + '/.dsh') + '/omdsh/btw'"
+
+  - id: tui-command-btw
+    name: '@agi-fans/dsh-tui/command-btw'
+
   - id: subagent-model-selection-settings
     name: '@deepseek-ai/dsh-tool-subagent/model-selection-settings'
 
@@ -536,10 +629,10 @@
   # transport: `spawn`/`fork` stay mounted and keep their parent-shared
   # features, which ACP cannot honour.
   #
-  # ACP advertises no start-time capabilities and implements no continuable
-  # runs, so `providerName: acp` must not be selected by a tool that needs
-  # `agentOptions`, `persona`, `toolFilter`, a numeric `maxDepth`, or
-  # `backgroundMode: continuable`.
+  # ACP advertises no parent-controlled start-time capabilities or follow-ups.
+  # Do not select `providerName: acp` for a tool that needs `agentOptions`,
+  # `persona`, `toolFilter`, or a numeric `maxDepth`. Local continuable
+  # children are managed by the subagent runtime.
   - id: subagent-acp
     name: '@deepseek-ai/dsh-subagent-acp'
     config:
@@ -554,8 +647,7 @@
       env:
         DSH_HOME: !!js (process.env.OMDSH_HOME || process.env.DSH_HOME || process.env.HOME + '/.dsh') + '/acp-child'
         OMDSH_HOME: !!js process.env.OMDSH_HOME || process.env.DSH_HOME || undefined
-        OMDSH_DEEPSEEK_API_KEY: !!js process.env.OMDSH_DEEPSEEK_API_KEY || undefined
-        DEEPSEEK_API_KEY: !!js process.env.DEEPSEEK_API_KEY || process.env.OMDSH_DEEPSEEK_API_KEY || undefined
+        DEEPSEEK_API_KEY: !!js process.env.DEEPSEEK_API_KEY || undefined
 
   - id: subagent-control
     name: '@deepseek-ai/dsh-tool-subagent-control'
@@ -568,25 +660,21 @@
     config:
       provider: spawn
       toolName: subagent
-      backgroundMode: continuable
 
   - id: tool-subagent-fork
     name: '@deepseek-ai/dsh-tool-subagent'
     config:
       provider: fork
       toolName: subagent_fork
-      backgroundMode: continuable
 
   # The isolated delegation tool. It is a second `dsh-tool-subagent` over the
   # out-of-process backend, so a caller chooses isolation per delegation
   # instead of trading the parent-shared features away globally.
   #
-  # Three settings are forced by ACP's absent capabilities, not preferences:
+  # ACP's absent capabilities constrain the isolated tool:
   #   - `maxDepth: provider-managed` — a numeric cap is refused because the
   #     provider cannot enforce recursion depth across a process boundary, and
   #     the child's own composition already bounds it.
-  #   - `backgroundMode: one-shot` — the published ACP provider implements no
-  #     `prepareContinuable`, so a continuable run is refused at mount.
   #   - no `agentOptions`/`persona`/`toolFilter` — all three are refused.
   # The consequence is user-visible: an isolated child cannot be steered or
   # followed up after dispatch. Use `subagent` when that matters.
@@ -595,7 +683,6 @@
     config:
       provider: acp
       toolName: subagent_isolated
-      backgroundMode: one-shot
       maxDepth: provider-managed
 
   # Workflow and Ralph, as the upstream base bundle mounts them.
@@ -610,10 +697,7 @@
     config:
       provider: spawn
 
-  # `toolName` is renamed because omdsh already owns a `/workflow` slash command
-  # that switches the Default/Plan workflow. The two live in different
-  # namespaces (tool vs command) and never collide at runtime, but a bare
-  # `workflow` entry in `/tools` would read as that command.
+  # Keep the explicit execution name stable for existing sessions and tool policies.
   - id: tool-workflow
     name: '@deepseek-ai/dsh-tool-workflow'
     config:
@@ -640,7 +724,7 @@
       model: !!js process.env.OMDSH_MODEL || 'deepseek-flash'
       # The settings overlay edits the Profile patch for optional features;
       # `disabled` is a Loader option the settings service cannot write, so
-      # this row carries the home whose patch the Features section owns.
+      # this row carries the home whose patch the Tools feature controls own.
       dshHome: !!js process.env.OMDSH_HOME || process.env.DSH_HOME || process.env.HOME + '/.dsh'
 
   - id: agent-behavior
@@ -652,9 +736,7 @@
   - id: tui-session-runtime
     name: '@agi-fans/dsh-tui/session-runtime'
     config:
-      # Product state this runtime owns: Session Library rows reused across
-      # launches (without them a cold process reads every stored log again) and
-      # the marker that upgrades stored sessions once per session format.
+      # Session Library rows reused across launches without rewriting old logs.
       stateDir: !!js "(process.env.OMDSH_HOME || process.env.DSH_HOME || process.env.HOME + '/.dsh') + '/omdsh'"
 
   - id: tui-human-interaction
@@ -663,6 +745,9 @@
   - id: tui-command-session
     name: '@agi-fans/dsh-tui/command-session'
 
+  - id: tui-command-worktree
+    name: '@agi-fans/dsh-tui/command-worktree'
+
   - id: tui-command-session-configuration
     name: '@agi-fans/dsh-tui/command-session-configuration'
 
@@ -696,6 +781,12 @@
   - id: tui-command-jobs
     name: '@agi-fans/dsh-tui/command-jobs'
 
+  - id: tui-command-rate
+    name: '@agi-fans/dsh-tui/command-rate'
+
+  - id: tui-command-schedule
+    name: '@agi-fans/dsh-tui/command-schedule'
+
   - id: tui-startup-notices
     name: '@agi-fans/dsh-tui/startup-notices'
 

package/config/presets/btw.patch.yml

@@ -0,0 +1,20 @@
+# Internal composition for durable side consultations, including after resume.
+- insert:
+    - id: preset-btw
+      name: '@deepseek-ai/dsh-agent-preset'
+      config:
+        id: btw
+        name: Side consultation
+        description: Answer from a fixed conversation snapshot without tools.
+        order: 100
+        plugins:
+          - id: persona
+            name: '@deepseek-ai/dsh-persona'
+            config:
+              prefix: >-
+                You are answering a separate side question about the copied conversation. Answer the current question briefly and directly using that context. Do not execute tasks, use tools, or ask follow-up questions. Your answer is independent advice and is not sent to the primary agent.{{omdsh_agent_behavior}}
+              complete: true
+              includeRuntimeContext: false
+
+          - id: policy
+            name: '@agi-fans/dsh-tui/btw-policy'

package/config/presets/code.patch.yml

@@ -17,7 +17,7 @@
             name: '@deepseek-ai/dsh-persona'
             config:
               prefix: >-
-                You are a coding agent powered by the {{model}} model. Your working directory is {{cwd}}. Prefer programmatic tool calling for multi-step operations when the generated tools SDK is available.
+                You are a coding agent powered by the {{model}} model. Prefer programmatic tool calling for multi-step operations when the generated tools SDK is available.
 
           # PTC presents the tool registry as a generated SDK over `run_code`, so the
           # general-purpose `workflow_run` tool would be a second model-authored
@@ -41,3 +41,8 @@
             name: '@deepseek-ai/dsh-agent-tool-presentation'
             config:
               mode: ptc
+
+          # Upstream Standard/Cordis/PTC presets carry a clock reading at least
+          # every ten minutes; the TUI process zone is the fallback display zone.
+          - id: time-context
+            name: '@deepseek-ai/dsh-time-context'

package/config/presets/cordis.patch.yml

@@ -17,7 +17,7 @@
             name: '@deepseek-ai/dsh-persona'
             config:
               prefix: |-
-                You are a coding agent powered by the {{model}} model, running on the DeepSeek Harness. Your working directory is {{cwd}}.
+                You are a coding agent powered by the {{model}} model, running on the DeepSeek Harness.
 
                 You can inspect the live Cordis runtime while authoring compositions and plugins. Host composition owns shared registries and backends; an Agent preset owns one session's tools, persona, prompt sections, and isolated services. Use cordis_inspect_list to discover providers, then cordis_inspect_query to read exact Service, Event, and Tool APIs. Use the development skills for composition and plugin authoring. The plugin_manager tool manages this profile; it requires full host access or explicit approval, and dependency scripts require separate approval.
 
@@ -34,3 +34,8 @@
 
           - id: tool-plugin-manager
             name: '@deepseek-ai/dsh-plugin-manager/tools'
+
+          # Upstream Standard/Cordis/PTC presets carry a clock reading at least
+          # every ten minutes; the TUI process zone is the fallback display zone.
+          - id: time-context
+            name: '@deepseek-ai/dsh-time-context'

package/config/presets/standard.patch.yml

@@ -17,4 +17,9 @@
             name: '@deepseek-ai/dsh-persona'
             config:
               prefix: >-
-                You are a coding agent powered by the {{model}} model. Your working directory is {{cwd}}.
+                You are a coding agent powered by the {{model}} model.
+
+          # Upstream Standard/Cordis/PTC presets carry a clock reading at least
+          # every ten minutes; the TUI process zone is the fallback display zone.
+          - id: time-context
+            name: '@deepseek-ai/dsh-time-context'

package/lib/advisor-launcher.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/advisor-launcher.js

@@ -0,0 +1,14 @@
+/** Preserve native stdio under a pre-established Harness process sandbox. */
+import { spawn } from 'node:child_process';
+const [program, ...args] = process.argv.slice(2);
+if (program === undefined)
+    process.exit(1);
+const child = spawn(program, args, { stdio: 'inherit', shell: false });
+child.on('error', () => { process.exitCode = 1; });
+child.on('exit', (code, signal) => {
+    if (signal !== null)
+        process.kill(process.pid, signal);
+    else
+        process.exitCode = code ?? 1;
+});
+//# sourceMappingURL=advisor-launcher.js.map

package/lib/advisor.d.ts

@@ -0,0 +1,34 @@
+/** Context-only native consultations owned by the Harness activation registry. */
+import { type Context, type Volatile } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+import type { TuiAdvisor, TuiSubagentActivity } from '@agi-fans/dsh-tui';
+export declare const name = "omdsh-advisor";
+export declare const inject: string[];
+export interface Config {
+    allowModelConsultations: Volatile<boolean>;
+}
+export declare const Config: z<Schemastery.ObjectS<NoInfer<{
+    allowModelConsultations: z<boolean, boolean, "volatile-defined">;
+}>>, Schemastery.ObjectT<NoInfer<{
+    allowModelConsultations: z<boolean, boolean, "volatile-defined">;
+}>>, "plain">;
+/** Extract a compact live inspection step from one native advisor JSON stream line. */
+export declare function parseAdviceActivity(provider: TuiAdvisor, line: string, state?: {
+    lastTool?: string | undefined;
+}): TuiSubagentActivity | undefined;
+/** Build a bounded read-only workspace snapshot when the caller did not supply explicit context. */
+export declare function workspaceContext(cwd: string, question?: string, signal?: AbortSignal): Promise<string>;
+/** Reject oversized input instead of silently discarding evidence. */
+export declare function advicePrompt(question: string, context?: string): string;
+/**
+ * Native restrictions supplement the outer filesystem sandbox.
+ *
+ * The outer `ctx.sandbox.confine` already enforces kernel-level read-only access
+ * outside the private scratch directory (`confined.enforcement === 'full'`).
+ * Codex must not spawn a nested macOS `sandbox-exec` (`sandbox_mode="danger-full-access"`
+ * disables its inner sandbox wrapper while the outer OS sandbox still blocks every
+ * write outside the scratch root). Claude Code enables only its read-only file
+ * inspection tools (`Read,Grep,Glob`) under `plan` permission mode.
+ */
+export declare function adviceArgv(provider: TuiAdvisor, argv: readonly string[]): string[];
+export declare function apply(ctx: Context, config: Config): void;