@askdkc/dsh-cli 0.11.3

package/lib/types/oauth.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Re-export of the `@askdkc/dsh-auth` plugin under this
+ * package's own name, so the bundle patch layer can mount the auth row as
+ * `dsh-cli/oauth` instead of the bare package name —
+ * the same anchor the working-activity row uses (#60): the dsh Loader
+ * resolves row names from the *profile* directory, where only the profile's
+ * direct dependencies are linked, and pnpm's isolated layout never hoists a
+ * transitive dependency there. Mounting through this subpath keeps plugin
+ * resolution anchored at dsh-cli itself, always a
+ * direct profile dependency, under every package-manager layout.
+ *
+ * @module dsh-cli/oauth
+ */
+export * from '@askdkc/dsh-auth';
+//# sourceMappingURL=oauth.d.ts.map

package/lib/types/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,cAAc,kBAAkB,CAAA"}

package/lib/types/oauth.js

@@ -0,0 +1,14 @@
+/**
+ * Re-export of the `@askdkc/dsh-auth` plugin under this
+ * package's own name, so the bundle patch layer can mount the auth row as
+ * `dsh-cli/oauth` instead of the bare package name —
+ * the same anchor the working-activity row uses (#60): the dsh Loader
+ * resolves row names from the *profile* directory, where only the profile's
+ * direct dependencies are linked, and pnpm's isolated layout never hoists a
+ * transitive dependency there. Mounting through this subpath keeps plugin
+ * resolution anchored at dsh-cli itself, always a
+ * direct profile dependency, under every package-manager layout.
+ *
+ * @module dsh-cli/oauth
+ */
+export * from '@askdkc/dsh-auth';

package/lib/types/plugin-host.d.ts

@@ -0,0 +1,14 @@
+export { name, apply } from './dsh-adapter/plugin-host.js';
+export type { TuiPluginHost, HostGrantFacade } from './dsh-adapter/plugin-host.js';
+export type { HostContract, HostDescriptor, ContractCoordinate, ContractRef, NegotiationDecision, PermissionEntry, PermissionRegistry } from './adapter/standard/types.js';
+export type { TuiPluginStorage, PluginStorageErrorCode, TuiPluginStorageRuntime } from './dsh-adapter/plugin-storage.js';
+export { PluginStorageError, STORAGE_KEY_MAX_LENGTH, STORAGE_MAX_BYTES, STORAGE_MAX_KEYS } from './dsh-adapter/plugin-storage.js';
+export { OBSERVE_CALLBACK_QUEUE_LIMIT, OBSERVE_CALLBACK_TIMEOUT_MS, OBSERVE_CONTENT_MAX_CHARS, OBSERVE_ID_MAX_CHARS, OBSERVE_IMAGE_BASE64_MAX_CHARS, OBSERVE_IMAGE_MAX_BYTES, OBSERVE_SCOPE_MAX_CHARS, OBSERVE_SUMMARY_CELLS, } from './dsh-adapter/message-observer.js';
+export type { MessagesObserveContentBlock, MessagesObserveEnvelope, MessagesObserveListener, MessagesObservePayload, TuiMessageObserverRuntime, } from './dsh-adapter/message-observer.js';
+export type { LedgerEntry, LedgerOperation, LedgerResult, TuiEffectLedgerRuntime } from './dsh-adapter/effect-ledger.js';
+export { COMMAND_ERROR_CODES, hasCommandErrorCode, mapCommandError, withCommandErrorMapping, } from './dsh-adapter/command-errors.js';
+export type { CommandErrorCode, CodedCommandError } from './dsh-adapter/command-errors.js';
+export { DECISION_EVENT_PERMISSIONS, } from './dsh-adapter/decision-guard.js';
+export { DECISION_HANDLER_TIMEOUT_MS, DECISION_TOTAL_TIMEOUT_MS, } from './dsh-adapter/extension-events.js';
+export { DECISION_EVENTS_COORDINATE, TUI_EXTENSION_API_VERSION, TUI_DECISION_EVENT_NAMES, TUI_EXTENSION_PERMISSION_NAMES, } from './adapter/standard/tui-extension.js';
+//# sourceMappingURL=plugin-host.d.ts.map

package/lib/types/plugin-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-host.d.ts","sourceRoot":"","sources":["../../src/plugin-host.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AAC1D,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AAClF,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,WAAW,EAAE,mBAAmB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAC1K,YAAY,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AACxH,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAIjI,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,yBAAyB,EACzB,oBAAoB,EACpB,8BAA8B,EAC9B,uBAAuB,EACvB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,mCAAmC,CAAA;AAC1C,YAAY,EACV,2BAA2B,EAC3B,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,mCAAmC,CAAA;AAE1C,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AACxH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,uBAAuB,GACxB,MAAM,iCAAiC,CAAA;AACxC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAK1F,OAAO,EACL,0BAA0B,GAC3B,MAAM,iCAAiC,CAAA;AACxC,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,qCAAqC,CAAA"}

package/lib/types/plugin-host.js

@@ -0,0 +1,19 @@
+// P6 canonical public plugin-host surface.
+//
+// Keep the Cordis-backed implementation behind the adapter boundary: plugin
+// authors receive protocol types and mediated service contracts, while
+// loader-only admission, host ingress, mutable stores and attribution
+// registries remain adapter-internal. Type-only runtime exports still load
+// the adapter declarations so Context augmentation is available.
+export { name, apply } from './dsh-adapter/plugin-host.js';
+export { PluginStorageError, STORAGE_KEY_MAX_LENGTH, STORAGE_MAX_BYTES, STORAGE_MAX_KEYS } from './dsh-adapter/plugin-storage.js';
+// The host-only message ingress accessor stays in the adapter module. Plugin
+// authors receive the broker's subscribe surface and envelope vocabulary only.
+export { OBSERVE_CALLBACK_QUEUE_LIMIT, OBSERVE_CALLBACK_TIMEOUT_MS, OBSERVE_CONTENT_MAX_CHARS, OBSERVE_ID_MAX_CHARS, OBSERVE_IMAGE_BASE64_MAX_CHARS, OBSERVE_IMAGE_MAX_BYTES, OBSERVE_SCOPE_MAX_CHARS, OBSERVE_SUMMARY_CELLS, } from './dsh-adapter/message-observer.js';
+export { COMMAND_ERROR_CODES, hasCommandErrorCode, mapCommandError, withCommandErrorMapping, } from './dsh-adapter/command-errors.js';
+// Command attribution and decision registration are host-internal. Exposing
+// these functions would let a plugin inspect or rewrite another plugin's
+// checkpoint, or install an unmediated handler.
+export { DECISION_EVENT_PERMISSIONS, } from './dsh-adapter/decision-guard.js';
+export { DECISION_HANDLER_TIMEOUT_MS, DECISION_TOTAL_TIMEOUT_MS, } from './dsh-adapter/extension-events.js';
+export { DECISION_EVENTS_COORDINATE, TUI_EXTENSION_API_VERSION, TUI_DECISION_EVENT_NAMES, TUI_EXTENSION_PERMISSION_NAMES, } from './adapter/standard/tui-extension.js';

package/lib/types/presetPrefs.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Persisted agent-preset preference (`/preset` picker choice), kept at
+ * `~/.dsh-tui/agent-preset.json` (`preset` key) so the choice survives
+ * restarts — same pattern as working-activity.json. The file is best-effort:
+ * a missing/corrupt file or an id the roster no longer supplies simply falls
+ * back to the roster default (`standard`). An explicit `preset` key in
+ * cordis.yml wins over this preference (deployment choice over runtime
+ * preference, matching activityFrames).
+ */
+/** Parse the value exactly as stored. Preset aliases are roster-dependent:
+ * legacy rc.2 ships `code`, while the 0.1.2 line ships `ptc`, so this file
+ * cannot safely canonicalize either name before the active roster has been queried. */
+export declare function parsePresetPref(text: string): string | undefined;
+/**
+ * The persisted preset id, or undefined when unset or invalid.
+ * @param dir - Prefs directory (injectable for tests).
+ * @returns The persisted preset id, if any.
+ */
+export declare function readPresetPref(dir?: string): string | undefined;
+/**
+ * Persist the chosen preset id (best effort).
+ * @param preset - Preset id to persist.
+ * @param dir - Prefs directory (injectable for tests).
+ * @returns True when the file was written, false on failure.
+ */
+export declare function writePresetPref(preset: string, dir?: string): boolean;
+/** Rewrite a stored alias only after the active roster resolved its concrete
+ * id. No-op for an exact match, an absent preference, or rosterless startup. */
+export declare function migratePresetPref(requested: string | undefined, resolved: string | undefined, dir?: string): boolean;
+//# sourceMappingURL=presetPrefs.d.ts.map

package/lib/types/presetPrefs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presetPrefs.d.ts","sourceRoot":"","sources":["../../src/presetPrefs.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAWH;;uFAEuF;AACvF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAShE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAkB,GAAG,MAAM,GAAG,SAAS,CAM1E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,MAAkB,GAAG,OAAO,CAQhF;AAED;gFACgF;AAChF,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,GAAG,GAAE,MAAkB,GACtB,OAAO,CAIT"}

package/lib/types/presetPrefs.js

@@ -0,0 +1,66 @@
+/**
+ * Persisted agent-preset preference (`/preset` picker choice), kept at
+ * `~/.dsh-tui/agent-preset.json` (`preset` key) so the choice survives
+ * restarts — same pattern as working-activity.json. The file is best-effort:
+ * a missing/corrupt file or an id the roster no longer supplies simply falls
+ * back to the roster default (`standard`). An explicit `preset` key in
+ * cordis.yml wins over this preference (deployment choice over runtime
+ * preference, matching activityFrames).
+ */
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { DATA_DIR } from './utils/paths.js';
+const PREFS_DIR = DATA_DIR;
+/** Ids a preset directory may use (dsh-agent-presets' own boundary). */
+const PRESET_ID = /^[a-z0-9][a-z0-9-]*$/;
+/** Parse the value exactly as stored. Preset aliases are roster-dependent:
+ * legacy rc.2 ships `code`, while the 0.1.2 line ships `ptc`, so this file
+ * cannot safely canonicalize either name before the active roster has been queried. */
+export function parsePresetPref(text) {
+    try {
+        const parsed = JSON.parse(text);
+        if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed))
+            return undefined;
+        const preset = parsed.preset;
+        return typeof preset === 'string' && PRESET_ID.test(preset) ? preset : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The persisted preset id, or undefined when unset or invalid.
+ * @param dir - Prefs directory (injectable for tests).
+ * @returns The persisted preset id, if any.
+ */
+export function readPresetPref(dir = PREFS_DIR) {
+    try {
+        return parsePresetPref(readFileSync(join(dir, 'agent-preset.json'), 'utf8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Persist the chosen preset id (best effort).
+ * @param preset - Preset id to persist.
+ * @param dir - Prefs directory (injectable for tests).
+ * @returns True when the file was written, false on failure.
+ */
+export function writePresetPref(preset, dir = PREFS_DIR) {
+    try {
+        mkdirSync(dir, { recursive: true });
+        writeFileSync(join(dir, 'agent-preset.json'), JSON.stringify({ preset }, null, 2));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Rewrite a stored alias only after the active roster resolved its concrete
+ * id. No-op for an exact match, an absent preference, or rosterless startup. */
+export function migratePresetPref(requested, resolved, dir = PREFS_DIR) {
+    return requested === undefined || resolved === undefined || requested === resolved
+        ? true
+        : writePresetPref(resolved, dir);
+}

package/lib/types/reload.d.ts

@@ -0,0 +1,109 @@
+/**
+ * `/reload` planning — the pi-style soft reload: re-read the TUI's persisted
+ * preference files (`~/.dsh-tui/{theme,lang,agent-preset,model,
+ * working-activity}.json`) and decide what to re-apply live, honoring the
+ * same boot-time precedence every picker does:
+ *
+ *   - theme:    DSH_TUI_THEME wins; else theme.json.
+ *   - lang:     DSH_TUI_LANG > settings `dsh-tui.lang` (folded in by the
+ *               caller as `langOverriddenBySettings`) > cordis.yml `lang`
+ *               > lang.json.
+ *   - preset:   cordis.yml `preset` wins; else agent-preset.json.
+ *   - model:    a COMPLETE cordis.yml provider/model pair wins whole
+ *               (issue #67 — never merge halves); else model.json.
+ *   - activity: cordis.yml `activityFrames` wins; else
+ *               working-activity.json.
+ *
+ * Settings-namespace values (settings.yaml user layer) are deliberately NOT
+ * re-read here: the dsh-tui namespace applies live through its settings
+ * watch and hot-reloads its document through the platform's file watcher,
+ * so /reload only needs the five boot-only pref files. What no reload can
+ * re-read (cordis.yml root config, frozen fullscreen layout, newly built
+ * code) is the job of `/restart`.
+ *
+ * Pure and injectable so scripts/verify-reload.ts can exercise every branch
+ * without a UI or a file system.
+ */
+import type { Lang } from './i18n.js';
+import type { ModelPref } from './modelPrefs.js';
+import type { ModelRoute } from './modelRoute.js';
+/** The five boot-only preference surfaces /reload re-reads. */
+export type ReloadKind = 'theme' | 'lang' | 'preset' | 'model' | 'activity';
+export type ReloadSkipReason = 
+/** A launch-time environment variable pins the value (DSH_TUI_THEME / DSH_TUI_LANG). */
+'env-wins'
+/** cordis.yml or the settings user layer pins the value; the pref must not override it. */
+ | 'config-wins'
+/** The pref file is missing or unparsable. */
+ | 'invalid';
+/** One live change /reload applies. Kind `model` carries the route halves. */
+export interface ReloadApply {
+    kind: ReloadKind;
+    /** The live value before this reload. */
+    from: string;
+    /** The value the pref file now names. */
+    to: string;
+    /** Present for kind `model`: the full route halves to switch to. */
+    route?: ModelRoute;
+}
+/** A pref /reload did not apply, and why. */
+export interface ReloadSkip {
+    kind: ReloadKind;
+    reason: ReloadSkipReason;
+}
+/** What one /reload run decided, before any side effects. */
+export interface ReloadPlan {
+    /** Apply these in order (theme → lang → preset → model → activity). */
+    apply: ReloadApply[];
+    /** Pref files whose value already matches the live state. */
+    unchanged: ReloadKind[];
+    /** Pref files not applied, and why. */
+    skipped: ReloadSkip[];
+}
+/** Everything the planner needs — caller reads the files and live values. */
+export interface ReloadInput {
+    /** DSH_TUI_THEME, when it holds a valid theme name. */
+    envTheme?: string;
+    /** DSH_TUI_LANG, when it holds a valid language. */
+    envLang?: string;
+    /** Fresh readThemePref(). */
+    themePref?: string;
+    /** The live theme name (ThemeProvider state). */
+    currentTheme: string;
+    /** Fresh readLangPref(). */
+    langPref?: Lang;
+    /** The live UI language. */
+    currentLang: Lang;
+    /** True when the settings user layer (settings.yaml `dsh-tui.lang`) pins a language. */
+    langOverriddenBySettings: boolean;
+    /** cordis.yml's raw `lang` key, when set. */
+    configuredLang?: string;
+    /** cordis.yml's explicit `preset` key, when set. */
+    configuredPreset?: string;
+    /** Fresh readPresetPref(). */
+    presetPref?: string;
+    /** The live preset id (channel.agentPreset; undefined = roster default). */
+    currentPreset?: string;
+    /** cordis.yml's raw `provider`/`model` keys, when set. */
+    configuredModel?: {
+        provider?: string;
+        model?: string;
+    };
+    /** Fresh readModelPref(). */
+    modelPref?: ModelPref;
+    /** The live route (channel provider/model). */
+    currentModel?: ModelRoute;
+    /** cordis.yml's explicit `activityFrames` key, when set. */
+    configuredActivity?: string;
+    /** Fresh readActivityFrames(). */
+    activityPref?: string;
+    /** The live activity preset (channel.activityFrames). */
+    currentActivity?: string;
+}
+/**
+ * Decide what one /reload applies. Pure: returns the plan, never touches
+ * the UI or the channel. The caller executes `apply` in order and renders
+ * the report.
+ */
+export declare function planReload(input: ReloadInput): ReloadPlan;
+//# sourceMappingURL=reload.d.ts.map

package/lib/types/reload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reload.d.ts","sourceRoot":"","sources":["../../src/reload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAGjD,+DAA+D;AAC/D,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAA;AAE3E,MAAM,MAAM,gBAAgB;AAC1B,wFAAwF;AACtF,UAAU;AACZ,2FAA2F;GACzF,aAAa;AACf,8CAA8C;GAC5C,SAAS,CAAA;AAEb,8EAA8E;AAC9E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,UAAU,CAAA;IAChB,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAA;IACZ,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAA;IACV,oEAAoE;IACpE,KAAK,CAAC,EAAE,UAAU,CAAA;CACnB;AAED,6CAA6C;AAC7C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAA;IAChB,MAAM,EAAE,gBAAgB,CAAA;CACzB;AAED,6DAA6D;AAC7D,MAAM,WAAW,UAAU;IACzB,uEAAuE;IACvE,KAAK,EAAE,WAAW,EAAE,CAAA;IACpB,6DAA6D;IAC7D,SAAS,EAAE,UAAU,EAAE,CAAA;IACvB,uCAAuC;IACvC,OAAO,EAAE,UAAU,EAAE,CAAA;CACtB;AAED,6EAA6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAA;IACpB,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,IAAI,CAAA;IACf,4BAA4B;IAC5B,WAAW,EAAE,IAAI,CAAA;IACjB,wFAAwF;IACxF,wBAAwB,EAAE,OAAO,CAAA;IACjC,6CAA6C;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,oDAAoD;IACpD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,0DAA0D;IAC1D,eAAe,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACvD,6BAA6B;IAC7B,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,UAAU,CAAA;IACzB,4DAA4D;IAC5D,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,kCAAkC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yDAAyD;IACzD,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,UAAU,CA6EzD"}

package/lib/types/reload.js

@@ -0,0 +1,118 @@
+/**
+ * `/reload` planning — the pi-style soft reload: re-read the TUI's persisted
+ * preference files (`~/.dsh-tui/{theme,lang,agent-preset,model,
+ * working-activity}.json`) and decide what to re-apply live, honoring the
+ * same boot-time precedence every picker does:
+ *
+ *   - theme:    DSH_TUI_THEME wins; else theme.json.
+ *   - lang:     DSH_TUI_LANG > settings `dsh-tui.lang` (folded in by the
+ *               caller as `langOverriddenBySettings`) > cordis.yml `lang`
+ *               > lang.json.
+ *   - preset:   cordis.yml `preset` wins; else agent-preset.json.
+ *   - model:    a COMPLETE cordis.yml provider/model pair wins whole
+ *               (issue #67 — never merge halves); else model.json.
+ *   - activity: cordis.yml `activityFrames` wins; else
+ *               working-activity.json.
+ *
+ * Settings-namespace values (settings.yaml user layer) are deliberately NOT
+ * re-read here: the dsh-tui namespace applies live through its settings
+ * watch and hot-reloads its document through the platform's file watcher,
+ * so /reload only needs the five boot-only pref files. What no reload can
+ * re-read (cordis.yml root config, frozen fullscreen layout, newly built
+ * code) is the job of `/restart`.
+ *
+ * Pure and injectable so scripts/verify-reload.ts can exercise every branch
+ * without a UI or a file system.
+ */
+import { explicitModelRoute } from './modelRoute.js';
+/**
+ * Decide what one /reload applies. Pure: returns the plan, never touches
+ * the UI or the channel. The caller executes `apply` in order and renders
+ * the report.
+ */
+export function planReload(input) {
+    const apply = [];
+    const unchanged = [];
+    const skipped = [];
+    // Theme: env override wins at launch; else the persisted choice.
+    if (input.envTheme !== undefined) {
+        skipped.push({ kind: 'theme', reason: 'env-wins' });
+    }
+    else if (input.themePref === undefined) {
+        skipped.push({ kind: 'theme', reason: 'invalid' });
+    }
+    else if (input.themePref === input.currentTheme) {
+        unchanged.push('theme');
+    }
+    else {
+        apply.push({ kind: 'theme', from: input.currentTheme, to: input.themePref });
+    }
+    // Language: env, then the settings user layer, then cordis.yml, then the
+    // persisted choice — mirror the boot precedence in plugin.apply.
+    if (input.envLang !== undefined) {
+        skipped.push({ kind: 'lang', reason: 'env-wins' });
+    }
+    else if (input.langOverriddenBySettings || input.configuredLang !== undefined) {
+        skipped.push({ kind: 'lang', reason: 'config-wins' });
+    }
+    else if (input.langPref === undefined) {
+        skipped.push({ kind: 'lang', reason: 'invalid' });
+    }
+    else if (input.langPref === input.currentLang) {
+        unchanged.push('lang');
+    }
+    else {
+        apply.push({ kind: 'lang', from: input.currentLang, to: input.langPref });
+    }
+    // Preset: cordis.yml's static choice wins; else the persisted one.
+    if (input.configuredPreset !== undefined) {
+        skipped.push({ kind: 'preset', reason: 'config-wins' });
+    }
+    else if (input.presetPref === undefined) {
+        skipped.push({ kind: 'preset', reason: 'invalid' });
+    }
+    else if (input.presetPref === input.currentPreset) {
+        unchanged.push('preset');
+    }
+    else {
+        apply.push({ kind: 'preset', from: input.currentPreset ?? '—', to: input.presetPref });
+    }
+    // Model route: the atomic rule (issue #67) — a complete cordis.yml pair
+    // wins whole; a half-pinned config never merges with the pref's other half.
+    // (Normalize to an object: callers may pass undefined when no route is pinned.)
+    if (explicitModelRoute(input.configuredModel ?? {}) !== undefined) {
+        skipped.push({ kind: 'model', reason: 'config-wins' });
+    }
+    else if (input.modelPref === undefined) {
+        skipped.push({ kind: 'model', reason: 'invalid' });
+    }
+    else if (input.currentModel !== undefined
+        && input.currentModel.provider === input.modelPref.provider
+        && input.currentModel.model === input.modelPref.model) {
+        unchanged.push('model');
+    }
+    else {
+        apply.push({
+            kind: 'model',
+            from: input.currentModel === undefined
+                ? '—'
+                : `${input.currentModel.provider}/${input.currentModel.model}`,
+            to: `${input.modelPref.provider}/${input.modelPref.model}`,
+            route: { provider: input.modelPref.provider, model: input.modelPref.model },
+        });
+    }
+    // Working-activity indicator: cordis.yml's static choice wins.
+    if (input.configuredActivity !== undefined) {
+        skipped.push({ kind: 'activity', reason: 'config-wins' });
+    }
+    else if (input.activityPref === undefined) {
+        skipped.push({ kind: 'activity', reason: 'invalid' });
+    }
+    else if (input.activityPref === input.currentActivity) {
+        unchanged.push('activity');
+    }
+    else {
+        apply.push({ kind: 'activity', from: input.currentActivity ?? 'moon8', to: input.activityPref });
+    }
+    return { apply, unchanged, skipped };
+}

package/lib/types/scenes.d.ts

@@ -0,0 +1,4 @@
+export { name, TuiSceneRuntime } from './dsh-adapter/scenes.js';
+export type { TuiSceneProps, TuiSceneDescriptor } from './dsh-adapter/scenes.js';
+export { default } from './dsh-adapter/scenes.js';
+//# sourceMappingURL=scenes.d.ts.map

package/lib/types/scenes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenes.d.ts","sourceRoot":"","sources":["../../src/scenes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC/D,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAChF,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA"}

package/lib/types/scenes.js

@@ -0,0 +1,4 @@
+// Re-export shim: the Cordis-backed implementation lives behind the adapter
+// boundary so UI consumers never import official @deepseek-ai/* packages.
+export { name, TuiSceneRuntime } from './dsh-adapter/scenes.js';
+export { default } from './dsh-adapter/scenes.js';

package/lib/types/screens/Chat.d.ts

@@ -0,0 +1,82 @@
+import React from 'react';
+import type { ChannelUi as Channel } from '../adapter/channel/ui-policy.js';
+import type { QuestionStore } from '../dsh-adapter/questions.js';
+import { TuiDialogStore } from '../dsh-adapter/dialogs.js';
+import { TuiStatusStore } from '../dsh-adapter/status.js';
+import { ActivityStore } from '../dsh-adapter/activity-store.js';
+import type { TuiShortcutHost } from '../dsh-adapter/shortcuts.js';
+import type { TuiThemeHost } from '../dsh-adapter/themes.js';
+import { ApprovalStore } from '../dsh-adapter/approvals.js';
+import { type PromptController } from '../components/PromptInput.js';
+import type { InjectController } from '../dsh-adapter/inject-channel.js';
+export declare function Chat({ channel, questionStore, approvalStore, extensionDialogs, extensionStatus, activityStore, extensionShortcuts, themeHost, onExit, onUpdate, onRestart, fullscreen, trajectorySeen: trajectorySeenProp, injectControllerRef, promptControllerRef: promptControllerRefProp, renderScene, openHomeOnBoot, }: {
+    channel: Channel;
+    renderScene?: (id: string, channel: Channel) => React.ReactNode;
+    questionStore: QuestionStore;
+    /**
+     * The approval seam's UI store. Optional: hosts without an approval
+     * channel (headless scripts, older embeds) render Chat without it and
+     * simply never see an approval panel — the question panel keeps its seat.
+     */
+    approvalStore?: ApprovalStore;
+    /**
+     * The managed plugin dialog queue (tuiDialogs service's store). Optional
+     * for the same hosts as approvalStore; absent, plugin dialog requests
+     * park unanswered (their `timeoutMs` is the plugin's guard).
+     */
+    extensionDialogs?: TuiDialogStore;
+    /** Plugin text and bounded rich status contributions. */
+    extensionStatus?: TuiStatusStore;
+    /** Session-scoped activity values published by the working-activity plugin. */
+    activityStore?: ActivityStore;
+    /** Host-only keyboard shortcut dispatch path. */
+    extensionShortcuts?: TuiShortcutHost;
+    /** Optional runtime theme host; static JSON themes work without it. */
+    themeHost?: TuiThemeHost;
+    onExit: () => void;
+    /** Update the installed package and restart the current TUI process. */
+    onUpdate?: () => void;
+    /** Restart the current TUI process and resume this session (no update). */
+    onRestart?: () => void;
+    /**
+     * True when the host already wrapped this tree in `<AlternateScreen>`
+     * (`fullscreen: true`). Both full-screen surfaces need this — the trajectory
+     * scene and the session browser: entering the alt
+     * screen a second time is harmless, but the inner unmount's DEC 1049 exit
+     * would drop the whole app back to the main screen.
+     */
+    fullscreen?: boolean;
+    /**
+     * Whether the trajectory has been opened before on this machine.
+     *
+     * A prop rather than a filesystem read inside the component: a render
+     * initializer touching disk is the wrong layer, and hosts that already know
+     * (or tests that need determinism) can simply say. Falls back to the
+     * persisted flag when the host does not supply one.
+     */
+    trajectorySeen?: boolean;
+    /**
+     * External injection controller (dsh-adapter/inject-channel.ts). When the
+     * host runs the injection socket, Chat publishes `{ append, submit }` into
+     * this ref every render so the adapter-owned socket drives the prompt input
+     * without reaching into React state directly. Absent for hosts that do not
+     * open the channel (headless scripts, bare embeds).
+     */
+    injectControllerRef?: React.RefObject<InjectController | null>;
+    /**
+     * Show the workspace home screen as this session's first frame.
+     *
+     * A prop rather than a filesystem read inside the component: the host knows
+     * whether this launch was an ordinary one (no `--resume`, no workspace
+     * target) and whether the home screen has already been shown on this
+     * installation, and tests need it deterministic.
+     */
+    openHomeOnBoot?: boolean;
+    /**
+     * The composer's live controller, published every render. Exposed as a prop
+     * so a regression can read the draft the composer HOLDS — the ownership
+     * question (does a screen swap lose it?) is about state, not about pixels.
+     */
+    promptControllerRef?: React.RefObject<PromptController | null>;
+}): React.JSX.Element | null;
+//# sourceMappingURL=Chat.d.ts.map

package/lib/types/screens/Chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Chat.d.ts","sourceRoot":"","sources":["../../../src/screens/Chat.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAA;AA2BzB,OAAO,KAAK,EAAE,SAAS,IAAI,OAAO,EAAE,MAAM,iCAAiC,CAAA;AAE3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAwB,MAAM,0BAA0B,CAAA;AAC/E,OAAO,EAAE,aAAa,EAAe,MAAM,kCAAkC,CAAA;AAE7E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAG5D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAkB3D,OAAO,EAAe,KAAK,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAEjF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AA2NxE,wBAAgB,IAAI,CAAC,EACnB,OAAO,EACP,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,SAAS,EACT,MAAM,EACN,QAAQ,EACR,SAAS,EACT,UAAkB,EAClB,cAAc,EAAE,kBAAkB,EAClC,mBAAmB,EACnB,mBAAmB,EAAE,uBAAuB,EAC5C,WAAW,EACX,cAAc,GACf,EAAE;IACD,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,KAAK,CAAC,SAAS,CAAA;IAC/D,aAAa,EAAE,aAAa,CAAA;IAC5B;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,cAAc,CAAA;IACjC,yDAAyD;IACzD,eAAe,CAAC,EAAE,cAAc,CAAA;IAChC,+EAA+E;IAC/E,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,iDAAiD;IACjD,kBAAkB,CAAC,EAAE,eAAe,CAAA;IACpC,uEAAuE;IACvE,SAAS,CAAC,EAAE,YAAY,CAAA;IACxB,MAAM,EAAE,MAAM,IAAI,CAAA;IAClB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;IACtB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IAC9D;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;CAC/D,4BAg+IA"}