@askdkc/dsh-cli 0.11.3

package/lib/types/utils/semver.js

@@ -0,0 +1,24 @@
+/**
+ * Minimal semver `>=` comparison used when terminal capabilities depend on
+ * `TERM_PROGRAM_VERSION`.
+ * @param a - First version string (optional `v` prefix and pre-release suffix tolerated).
+ * @param b - Second version string.
+ * @returns True when `a` is greater than or equal to `b`.
+ */
+export function gte(a, b) {
+    const pa = parts(a);
+    const pb = parts(b);
+    for (let i = 0; i < 3; i += 1) {
+        if (pa[i] !== pb[i])
+            return pa[i] > pb[i];
+    }
+    return true;
+}
+function parts(version) {
+    const [major = 0, minor = 0, patch = 0] = version
+        .replace(/^v/, '')
+        .split('-')[0]
+        .split('.')
+        .map(part => Number.parseInt(part, 10) || 0);
+    return [major, minor, patch];
+}

package/lib/types/utils/shellQuote.d.ts

@@ -0,0 +1,14 @@
+/** cmd.exe joins spawn arguments with spaces; quote anything that could split. */
+export declare function shellQuote(args: readonly string[]): string[];
+/** Escape a command path for a cmd.exe line: caret-escape metacharacters. */
+export declare function cmdEscapeCommand(command: string): string;
+/**
+ * Escape one argument for a cmd.exe line. Backslashes before a quote (or at
+ * the end, where our own closing quote will land) are doubled and the quote
+ * backslash-escaped so the target's argv parse keeps them literal; the whole
+ * argument is then quoted and every cmd metacharacter caret-escaped — twice
+ * when the command is a node_modules/.bin shim (those re-invoke node and
+ * parse the line a second time).
+ */
+export declare function cmdEscapeArgument(arg: string, doubleEscapeMetaChars?: boolean): string;
+//# sourceMappingURL=shellQuote.d.ts.map

package/lib/types/utils/shellQuote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellQuote.d.ts","sourceRoot":"","sources":["../../../src/utils/shellQuote.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,wBAAgB,UAAU,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAE5D;AAeD,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,qBAAqB,UAAQ,GAAG,MAAM,CAUpF"}

package/lib/types/utils/shellQuote.js

@@ -0,0 +1,39 @@
+/** cmd.exe joins spawn arguments with spaces; quote anything that could split. */
+export function shellQuote(args) {
+    return args.map(arg => (/[ \t"^&|<>()]/.test(arg) ? `"${arg.replace(/"/g, '""')}"` : arg));
+}
+/**
+ * cmd.exe metacharacter escaping, vendored from cross-spawn@7
+ * (lib/util/escape.js, MIT © André Cruz et al.) — the ecosystem-standard
+ * answer to "run a .cmd/.bat through cmd.exe without the shell mangling
+ * paths that contain spaces, quotes, or metacharacters". See
+ * http://www.robvanderwoude.com/escapechars.php and https://qntm.org/cmd.
+ *
+ * The backslash/quote patterns use cross-spawn's post-CVE-2024-21538 forms
+ * (lookahead + backreference instead of a greedy star) so a pathological
+ * run of backslashes cannot hang the regex engine.
+ */
+const CMD_META_CHARS = /([()\][%!^"`<>&|;, *?])/g;
+/** Escape a command path for a cmd.exe line: caret-escape metacharacters. */
+export function cmdEscapeCommand(command) {
+    return command.replace(CMD_META_CHARS, '^$1');
+}
+/**
+ * Escape one argument for a cmd.exe line. Backslashes before a quote (or at
+ * the end, where our own closing quote will land) are doubled and the quote
+ * backslash-escaped so the target's argv parse keeps them literal; the whole
+ * argument is then quoted and every cmd metacharacter caret-escaped — twice
+ * when the command is a node_modules/.bin shim (those re-invoke node and
+ * parse the line a second time).
+ */
+export function cmdEscapeArgument(arg, doubleEscapeMetaChars = false) {
+    let out = `${arg}`;
+    out = out.replace(/(?=(\\+?)?)\1"/g, '$1$1\\"');
+    out = out.replace(/(?=(\\+?)?)\1$/, '$1$1');
+    out = `"${out}"`;
+    out = out.replace(CMD_META_CHARS, '^$1');
+    if (doubleEscapeMetaChars) {
+        out = out.replace(CMD_META_CHARS, '^$1');
+    }
+    return out;
+}

package/lib/types/utils/sliceAnsi.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Slice a string containing ANSI escape codes.
+ *
+ * Unlike the slice-ansi package, this properly handles OSC 8 hyperlink
+ * sequences because @alcalzone/ansi-tokenize tokenizes them correctly.
+ * @param str - The ANSI string to slice.
+ * @param start - Start offset in display cells.
+ * @param end - End offset in display cells; defaults to the end of `str`.
+ * @returns The sliced string with its ANSI styling preserved.
+ */
+export default function sliceAnsi(str: string, start: number, end?: number): string;
+//# sourceMappingURL=sliceAnsi.d.ts.map

package/lib/types/utils/sliceAnsi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sliceAnsi.d.ts","sourceRoot":"","sources":["../../../src/utils/sliceAnsi.ts"],"names":[],"mappings":"AAmBA;;;;;;;;;GASG;AACH,MAAM,CAAC,OAAO,UAAU,SAAS,CAC/B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,GAAG,CAAC,EAAE,MAAM,GACX,MAAM,CA8DR"}

package/lib/types/utils/sliceAnsi.js

@@ -0,0 +1,79 @@
+import { ansiCodesToString, reduceAnsiCodes, tokenize, undoAnsiCodes, } from '@alcalzone/ansi-tokenize';
+import { stringWidth } from '../ink/stringWidth.js';
+// A code is an "end code" if its code equals its endCode (e.g., hyperlink close)
+function isEndCode(code) {
+    return code.code === code.endCode;
+}
+// Filter to only include "start codes" (not end codes)
+function filterStartCodes(codes) {
+    return codes.filter(c => !isEndCode(c));
+}
+/**
+ * Slice a string containing ANSI escape codes.
+ *
+ * Unlike the slice-ansi package, this properly handles OSC 8 hyperlink
+ * sequences because @alcalzone/ansi-tokenize tokenizes them correctly.
+ * @param str - The ANSI string to slice.
+ * @param start - Start offset in display cells.
+ * @param end - End offset in display cells; defaults to the end of `str`.
+ * @returns The sliced string with its ANSI styling preserved.
+ */
+export default function sliceAnsi(str, start, end) {
+    // Don't pass `end` to tokenize — it counts code units, not display cells,
+    // so it drops tokens early for text with zero-width combining marks.
+    const tokens = tokenize(str);
+    let activeCodes = [];
+    let position = 0;
+    let result = '';
+    let include = false;
+    for (const token of tokens) {
+        // Advance by display width, not code units. Combining marks (Devanagari
+        // matras, virama, diacritics) are width 0 — counting them via .length
+        // advanced position past `end` early and truncated the slice. Callers
+        // pass start/end in display cells (via stringWidth), so position must
+        // track the same units.
+        const width = token.type === 'ansi' || token.type === 'control' ? 0 : token.fullWidth ? 2 : stringWidth(token.value);
+        // Break AFTER trailing zero-width marks — a combining mark attaches to
+        // the preceding base char, so "भा" (भ + ा, 1 display cell) sliced at
+        // end=1 must include the ा. Breaking on position >= end BEFORE the
+        // zero-width check would drop it and render भ bare. ANSI codes are
+        // width 0 but must NOT be included past end (they open new style runs
+        // that leak into the undo sequence), so gate on char type too. The
+        // !include guard ensures empty slices (start===end) stay empty even
+        // when the string starts with a zero-width char (BOM, ZWJ).
+        if (end !== undefined && position >= end) {
+            if (token.type === 'ansi' || width > 0 || !include)
+                break;
+        }
+        if (token.type === 'ansi') {
+            activeCodes.push(token);
+            if (include) {
+                // Emit all ANSI codes during the slice
+                result += token.code;
+            }
+        }
+        else {
+            if (!include && position >= start) {
+                // Skip leading zero-width marks at the start boundary — they belong
+                // to the preceding base char in the left half. Without this, the
+                // mark appears in BOTH halves: left+right ≠ original. Only applies
+                // when start > 0 (otherwise there's no preceding char to own it).
+                if (start > 0 && width === 0)
+                    continue;
+                include = true;
+                // Reduce and filter to only active start codes
+                activeCodes = filterStartCodes(reduceAnsiCodes(activeCodes));
+                result = ansiCodesToString(activeCodes);
+            }
+            if (include) {
+                // Control codes carry `code` (not `value`); keep them byte-for-byte.
+                result += token.type === 'control' ? token.code : token.value;
+            }
+            position += width;
+        }
+    }
+    // Only undo start codes that are still active
+    const activeStartCodes = filterStartCodes(reduceAnsiCodes(activeCodes));
+    result += ansiCodesToString(undoAnsiCodes(activeStartCodes));
+    return result;
+}

package/lib/types/utils/truncateMiddle.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Shorten `text` to at most `maxWidth` terminal cells by replacing its
+ * middle with `…`, keeping the head and the tail. A path keeps its root and
+ * its file name; a file name keeps its stem's start and its extension.
+ * Widths are display cells (CJK wide characters count as two), never
+ * string lengths.
+ */
+export declare function truncateMiddle(text: string, maxWidth: number): string;
+//# sourceMappingURL=truncateMiddle.d.ts.map

package/lib/types/utils/truncateMiddle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"truncateMiddle.d.ts","sourceRoot":"","sources":["../../../src/utils/truncateMiddle.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAcrE"}

package/lib/types/utils/truncateMiddle.js

@@ -0,0 +1,28 @@
+import { stringWidth } from '../ink/stringWidth.js';
+import { truncateToWidth } from '../ink/truncateToWidth.js';
+/**
+ * Shorten `text` to at most `maxWidth` terminal cells by replacing its
+ * middle with `…`, keeping the head and the tail. A path keeps its root and
+ * its file name; a file name keeps its stem's start and its extension.
+ * Widths are display cells (CJK wide characters count as two), never
+ * string lengths.
+ */
+export function truncateMiddle(text, maxWidth) {
+    if (maxWidth <= 0)
+        return '';
+    if (stringWidth(text) <= maxWidth)
+        return text;
+    if (maxWidth === 1)
+        return '…';
+    const tailBudget = Math.floor((maxWidth - 1) / 2);
+    const headBudget = maxWidth - 1 - tailBudget;
+    const chars = Array.from(text);
+    let tail = '';
+    for (let index = chars.length - 1; index >= 0; index -= 1) {
+        const next = chars[index] + tail;
+        if (stringWidth(next) > tailBudget)
+            break;
+        tail = next;
+    }
+    return `${truncateToWidth(text, headBudget)}…${tail}`;
+}

package/lib/types/utils/urlGuard.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Security gate for URLs that leave the TUI via a click action.
+ *
+ * Link targets originate from model output (prompt injection can shape
+ * them), plugin-rendered text, and file contents. Handing an arbitrary
+ * scheme to the OS handler (`xdg-open` / `open` / cmd `start`) lets that
+ * content launch registered protocol handlers — `ssh:`, custom IM
+ * handlers, anything installed. Only http(s) and the TUI's own file
+ * link forms may reach the OS; everything else is dropped here.
+ */
+export type OpenTargetClassification = {
+    kind: 'file-actions';
+    path: string;
+} | {
+    kind: 'external';
+} | {
+    kind: 'rejected';
+};
+/**
+ * Classify a clicked link target. Mirrors the previous handleOpenTarget
+ * dispatch order (dsh-file: and file: keep going through the file-action
+ * menu), with the final fall-through narrowed from "open anything" to
+ * "open http(s) only".
+ * @param url - the clicked link target.
+ * @returns the action the click handler should take.
+ */
+export declare function classifyOpenTarget(url: string): OpenTargetClassification;
+//# sourceMappingURL=urlGuard.d.ts.map

package/lib/types/utils/urlGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"urlGuard.d.ts","sourceRoot":"","sources":["../../../src/utils/urlGuard.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,MAAM,wBAAwB,GAChC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAA;AAIxB;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,CAOxE"}

package/lib/types/utils/urlGuard.js

@@ -0,0 +1,21 @@
+import { fileUrlToPath, parseFileLinkUrl } from './fileTarget.js';
+const EXTERNAL_SCHEME = /^https?:\/\//i;
+/**
+ * Classify a clicked link target. Mirrors the previous handleOpenTarget
+ * dispatch order (dsh-file: and file: keep going through the file-action
+ * menu), with the final fall-through narrowed from "open anything" to
+ * "open http(s) only".
+ * @param url - the clicked link target.
+ * @returns the action the click handler should take.
+ */
+export function classifyOpenTarget(url) {
+    const fileLink = parseFileLinkUrl(url);
+    if (fileLink !== undefined)
+        return { kind: 'file-actions', path: fileLink };
+    const filePath = fileUrlToPath(url);
+    if (filePath !== undefined)
+        return { kind: 'file-actions', path: filePath };
+    if (EXTERNAL_SCHEME.test(url))
+        return { kind: 'external' };
+    return { kind: 'rejected' };
+}

package/lib/types/utils/workspaceRoot.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Session working-directory resolution (issue #96, bug 2).
+ *
+ * The bare `process.cwd()` default made `@` file completion, mention
+ * expansion, and the statusline all relative to wherever `dsh` happened to
+ * be launched — launching from a repo SUBDIRECTORY listed that subdirectory
+ * instead of the repository the user is working in. The default now walks
+ * up from the launch directory to the nearest git worktree root (the
+ * workspace a coding agent is expected to operate on, Codex-style), falling
+ * back to the launch directory itself outside any worktree. An explicit
+ * cordis.yml `cwd` always wins.
+ */
+/**
+ * Resolve the session cwd: an explicit `configured` value wins (resolved
+ * against the launch directory); otherwise the nearest ancestor of `start`
+ * containing a `.git` entry — a DIRECTORY for a plain clone, a FILE for a
+ * linked worktree or submodule — and `start` itself when no worktree
+ * encloses it.
+ */
+export declare function resolveSessionCwd(configured: string | undefined, start?: string): string;
+//# sourceMappingURL=workspaceRoot.d.ts.map

package/lib/types/utils/workspaceRoot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceRoot.d.ts","sourceRoot":"","sources":["../../../src/utils/workspaceRoot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,KAAK,GAAE,MAAsB,GAC5B,MAAM,CAGR"}

package/lib/types/utils/workspaceRoot.js

@@ -0,0 +1,47 @@
+/**
+ * Session working-directory resolution (issue #96, bug 2).
+ *
+ * The bare `process.cwd()` default made `@` file completion, mention
+ * expansion, and the statusline all relative to wherever `dsh` happened to
+ * be launched — launching from a repo SUBDIRECTORY listed that subdirectory
+ * instead of the repository the user is working in. The default now walks
+ * up from the launch directory to the nearest git worktree root (the
+ * workspace a coding agent is expected to operate on, Codex-style), falling
+ * back to the launch directory itself outside any worktree. An explicit
+ * cordis.yml `cwd` always wins.
+ */
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+/**
+ * Resolve the session cwd: an explicit `configured` value wins (resolved
+ * against the launch directory); otherwise the nearest ancestor of `start`
+ * containing a `.git` entry — a DIRECTORY for a plain clone, a FILE for a
+ * linked worktree or submodule — and `start` itself when no worktree
+ * encloses it.
+ */
+export function resolveSessionCwd(configured, start = process.cwd()) {
+    if (configured !== undefined && configured !== '')
+        return resolve(configured);
+    return gitWorktreeRoot(start) ?? start;
+}
+/** Nearest ancestor of `start` (itself included) that is a git worktree root. */
+function gitWorktreeRoot(start) {
+    let dir = resolve(start);
+    const home = homedir();
+    for (;;) {
+        // Dotfiles guard: a ~/.git (dotfiles management repo) must NOT promote
+        // the whole home directory to the workspace — /resume would list every
+        // session ever recorded under $HOME and @ completion would widen just
+        // as far. Stop the climb at home entirely: a worktree above $HOME is
+        // never a sensible session root either (review leftover).
+        if (dir === home)
+            return undefined;
+        if (existsSync(join(dir, '.git')))
+            return dir;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return undefined;
+        dir = parent;
+    }
+}

package/lib/types/working-activity.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Re-export of the `dsh-working-activity` plugin under this package's own
+ * name, so the bundle patch layer can mount the working-activity row as
+ * `dsh-cli/working-activity` instead of the bare package name.
+ *
+ * The dsh Loader resolves row names from the *profile* directory
+ * (`~/.dsh/profiles/<name>/`): only the profile's direct dependencies are
+ * linked into its node_modules. npm's flat layout also hoists transitive
+ * dependencies there, but pnpm's isolated layout never does — so the bare
+ * `dsh-working-activity` name (a transitive dependency of dsh-cli) fails
+ * with ERR_MODULE_NOT_FOUND at boot and the loader disposes the whole app,
+ * exiting the TUI before any UI appears (issue #60). Mounting through this
+ * subpath keeps resolution anchored at dsh-cli itself — always a direct
+ * profile dependency — and from its real location `dsh-working-activity`
+ * resolves under every package-manager layout.
+ *
+ * `publish` is forced off at this mount point: the TUI reads its working
+ * line from the plugin's `workingActivity` session projection and never
+ * wants activity/status snapshots in the session log — they make the shared
+ * JSONL unreadable for Web (issue #153). A stale global-launcher patch
+ * (≤0.6.x, resolved anchor-first by the dsh CLI) still carries
+ * `publish: true` on this row, which re-enabled the pollution even on an
+ * up-to-date profile install. A local `apply` shadows the star re-export, so
+ * the row config can never turn publishing back on; a log-replaying
+ * consumer mounts the bare package instead.
+ * @module dsh-cli/working-activity
+ */
+import { apply as mountedApply } from 'dsh-working-activity';
+export * from 'dsh-working-activity';
+type MountedContext = Parameters<typeof mountedApply>[0];
+export declare const apply: (ctx: MountedContext, config?: Parameters<typeof mountedApply>[1]) => void;
+//# sourceMappingURL=working-activity.d.ts.map

package/lib/types/working-activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"working-activity.d.ts","sourceRoot":"","sources":["../../src/working-activity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,KAAK,IAAI,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAG5D,cAAc,sBAAsB,CAAA;AAIpC,KAAK,cAAc,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;AAExD,eAAO,MAAM,KAAK,GAAI,KAAK,cAAc,EAAE,SAAQ,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAM,KAAG,IAO5F,CAAA"}

package/lib/types/working-activity.js

@@ -0,0 +1,38 @@
+/**
+ * Re-export of the `dsh-working-activity` plugin under this package's own
+ * name, so the bundle patch layer can mount the working-activity row as
+ * `dsh-cli/working-activity` instead of the bare package name.
+ *
+ * The dsh Loader resolves row names from the *profile* directory
+ * (`~/.dsh/profiles/<name>/`): only the profile's direct dependencies are
+ * linked into its node_modules. npm's flat layout also hoists transitive
+ * dependencies there, but pnpm's isolated layout never does — so the bare
+ * `dsh-working-activity` name (a transitive dependency of dsh-cli) fails
+ * with ERR_MODULE_NOT_FOUND at boot and the loader disposes the whole app,
+ * exiting the TUI before any UI appears (issue #60). Mounting through this
+ * subpath keeps resolution anchored at dsh-cli itself — always a direct
+ * profile dependency — and from its real location `dsh-working-activity`
+ * resolves under every package-manager layout.
+ *
+ * `publish` is forced off at this mount point: the TUI reads its working
+ * line from the plugin's `workingActivity` session projection and never
+ * wants activity/status snapshots in the session log — they make the shared
+ * JSONL unreadable for Web (issue #153). A stale global-launcher patch
+ * (≤0.6.x, resolved anchor-first by the dsh CLI) still carries
+ * `publish: true` on this row, which re-enabled the pollution even on an
+ * up-to-date profile install. A local `apply` shadows the star re-export, so
+ * the row config can never turn publishing back on; a log-replaying
+ * consumer mounts the bare package instead.
+ * @module dsh-cli/working-activity
+ */
+import { apply as mountedApply } from 'dsh-working-activity';
+import { mergeActivityPreferences, readActivityConfig } from './activityPrefs.js';
+export * from 'dsh-working-activity';
+export const apply = (ctx, config = {}) => {
+    // The user's own file (~/.dsh-tui/working-activity.json — what /activity
+    // and the settings panel write) folds in under the row: an explicit row
+    // value wins, otherwise the file's feature switches, phrases, tok-per-sec
+    // and work reminder reach the plugin, as they did when the line was folded
+    // in-process.
+    mountedApply(ctx, { ...mergeActivityPreferences(config, readActivityConfig()), publish: false });
+};

package/lib/types/workspaces.d.ts

@@ -0,0 +1,5 @@
+export { name, WORKSPACE_PROVIDER_TIMEOUT_MS, TuiWorkspaceRuntime, createLocalWorkspaceRuntime, localWorkspaceUri, parseLocalWorkspaceReference, listRegistryWorkspaces, removeRegistryWorkspace, } from './dsh-adapter/workspaces.js';
+export type { TuiWorkspaceKind, TuiWorkspaceTarget, TuiWorkspaceChoice, TuiWorkspaceCommandResult, TuiWorkspaceCommand, TuiCommandShell, TuiWorkspaceProvider, } from './dsh-adapter/workspaces.js';
+export type { TuiWorkspaceEntry } from './adapter/ports/channel-workspace.js';
+export { default } from './dsh-adapter/workspaces.js';
+//# sourceMappingURL=workspaces.d.ts.map

package/lib/types/workspaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../src/workspaces.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,IAAI,EACJ,6BAA6B,EAC7B,mBAAmB,EACnB,2BAA2B,EAC3B,iBAAiB,EACjB,4BAA4B,EAC5B,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,6BAA6B,CAAA;AACpC,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,mBAAmB,EACnB,eAAe,EACf,oBAAoB,GACrB,MAAM,6BAA6B,CAAA;AACpC,YAAY,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA"}

package/lib/types/workspaces.js

@@ -0,0 +1,4 @@
+// Re-export shim: the Cordis-backed implementation lives behind the adapter
+// boundary so UI consumers never import official @deepseek-ai/* packages.
+export { name, WORKSPACE_PROVIDER_TIMEOUT_MS, TuiWorkspaceRuntime, createLocalWorkspaceRuntime, localWorkspaceUri, parseLocalWorkspaceReference, listRegistryWorkspaces, removeRegistryWorkspace, } from './dsh-adapter/workspaces.js';
+export { default } from './dsh-adapter/workspaces.js';

package/node_modules/@askdkc/dsh-auth/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ccch1mneyyy
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/node_modules/@askdkc/dsh-auth/README.ja.md

@@ -0,0 +1,164 @@
+# @askdkc/dsh-auth
+
+[English](README.md) | 日本語
+
+> [dsh-TUI](https://github.com/ccch1mneyyy/dsh-TUI) と
+> [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 向けのプロバイダー認証
+
+**ChatGPT、Claude、SuperGrok、OpenCode Zen/Go、OrcaRouter、OpenRouter、
+Nous Portal、Infron** をモデルの提供元として利用できます。プロバイダーに応じて
+OAuth、デバイスコード、API キーで認証します。dsh 本体のソース修正は不要です。
+このプラグインは DeepSeek Harness のターミナル UI である
+[dsh-TUI](https://github.com/ccch1mneyyy/dsh-TUI) とともに開発され、dsh-TUI に同梱されています。
+任意の dsh プロファイルへ単独でインストールすることもできます。
+
+```
+dsh-tui → /provider → Provider authentication → sign in
+          /auth login openai-codex                     ← the plugin command
+          /model → OpenAI Codex → gpt-5.6-sol          ← routes & models
+```
+
+**現状は実験段階です。** カタログの OAuth フローには
+[pi-ai](https://www.npmjs.com/package/@earendil-works/pi-ai) に同梱された実装を使います。
+デバイスコード認証とループバック・コールバックを使う認証も含まれます。
+このプラグインが担うのは、認証情報の保存、トークンの自動更新、
+アダプターの登録、`userQuestions` を通したログイン画面です。
+TUI と Web クライアントで使えます。対話画面のないホストでは明示的に拒否します。
+
+## インストール
+
+**dsh-TUI と一緒に使う場合** — 追加作業は不要です。dsh-auth は dsh-tui パッケージに
+依存関係として同梱されています。dsh-tui を更新すると、`/provider` のウィザードに
+プロバイダー認証の項目が追加されます。
+
+**任意の dsh プロファイルへ単独でインストールする場合：**
+
+```sh
+dsh plugin --profile <name> add @askdkc/dsh-auth
+```
+
+インストール後にホストを再起動してください。`/` に `auth` コマンドが表示され、
+各モデル選択画面にはログイン済みプロバイダーのカタログが追加されます。
+モデルの表示は認証情報の有無で制御されます（後述）。
+
+## 主な機能
+
+- pi-ai のカタログにあるプロバイダーを `llm` レジストリのルートとして登録します：
+  `openai-codex`、`anthropic`、`xai`、`opencode`、`opencode-go`、`openrouter`。
+  **モデル選択画面に表示されるのは、そのプロバイダーにログインした後だけです。**
+  ログインするとカタログが現れ、ログアウトすると消えます。
+  セッションに保存済みのモデル ID は、どちらの状態でも解決できます。
+- Provider オブジェクトは、インストール済みの `dsh-llm-pi-ai` が使う
+  **同じ pi-ai 依存関係**から読み込みます。これにより、rc 版や alpha 版のホストでも
+  対応する pi-ai のバージョンを使え、別々のパッケージインスタンス間で
+  Provider オブジェクトを受け渡さずに済みます。
+- `/auth login [provider]` で選んだ認証方法を対話的に実行します。
+  認証 URL は**ブラウザーで自動的に開きます**。URL は数百文字と長く、
+  手でコピーすると折り返しによって `redirect_uri` が壊れるためです。
+  待機画面には *Copy authorization link*、*Open browser again*、
+  *Cancel sign-in* も表示されます。デバイスコード認証では検証ページを開き、
+  短いコードをコピー対象にします。OpenAI Codex ではデバイスコード認証も選べます。
+  localhost:1455 のコールバックを必要としないため、ヘッドレス環境や
+  制限のある環境ではこの方法が最も確実です。
+- OpenCode Zen/Go は API キーに対応します。OpenRouter では pi-ai の OAuth PKCE
+  フローか API キーの手入力を選べます。`orcarouter`、`nous`、`infron` は
+  Chat Completions を使います。各プロバイダーの `/models` 一覧に
+  コンテキスト容量と価格のメタデータがなければ、モデルは選択できません。
+  `nous` はデバイスコード OAuth に加え、明示的に選択する手入力の Bearer トークン
+  互換経路にも対応します。後者は実際の Nous アカウントでは未検証です。
+- 保存済みのアクセストークンは、リクエスト前に自動更新されます。
+  更新は認証情報ストアのロックでプロバイダーごとに直列化されるため、
+  並行するリクエストが更新済みトークンを重複して更新することはありません。
+- `/auth status` と `/auth logout <provider>` を使えます。`ctx.dshAuth` サービスも
+  UI 向けに同じ API を公開しており、dsh-tui の `/provider` ウィザードと
+  `/login` はこのサービスを利用します。
+
+## 使い方
+
+```
+/auth                          # status: which providers are signed in
+/auth login                    # pick a provider interactively
+/auth login openai-codex       # ChatGPT (Plus/Pro)
+/auth login anthropic          # Claude (Pro/Max)
+/auth login xai                # SuperGrok / X Premium
+/auth login opencode           # OpenCode Zen API key
+/auth login opencode-go        # OpenCode Go API key
+/auth login orcarouter         # OrcaRouter API key
+/auth login openrouter         # OAuth PKCE or API key
+/auth login nous               # device code or manual Bearer
+/auth login infron             # Infron API key
+/auth logout anthropic
+```
+
+未ログインのプロバイダーにモデルを要求すると、`/auth login <provider>` の案内を添えて
+明示的に失敗します。
+
+## 設定
+
+```yaml
+- id: dsh-auth
+  name: '@askdkc/dsh-auth'
+  config:
+    providers: [openai-codex, anthropic, xai, opencode, opencode-go, orcarouter, openrouter, nous, infron]
+    nous:
+      clientId: hermes-cli
+    # credentialsFile: /secure/path/credentials.json
+```
+
+- `credentialsFile` の既定値は `$DSH_HOME/dsh-auth/credentials.json`
+  （`~/.dsh/dsh-auth/credentials.json`）です。`DSH_AUTH_CREDENTIALS` 環境変数で
+  変更できます。ディレクトリは `0700`、ファイルは `0600` で作成します
+  （Windows では可能な範囲で適用）。書き込みは毎回、一時ファイルを作ってから
+  rename で置き換えるため、更新はアトミックです。
+- `opencode-zen`、`hermes`、`infron.ai` は、それぞれ `opencode`、
+  `nous`、`infron` の別名です。認証情報は正規の ID で保存します。
+- Nous のクライアント ID の既定値は `hermes-cli` です。Nous が第三者による
+  この ID の再利用を認めるとは限りません。独自の ID がある環境では
+  `nous.clientId` を設定してください。
+- 同じプロバイダーを別のアダプター群がすでに使っている場合
+  （`llm-pi-ai` の設定プロファイルなど）、レジストリはそのルートの登録を拒否します。
+  プラグインは拒否をログに記録し、残りのルートを登録します。
+  1 つのプロバイダーには 1 つのアダプターを割り当ててください。
+
+## セキュリティ上の注意
+
+- 認証情報ファイルには**API キーと長期有効の更新トークン**が保存されます。
+  内容をログやステータス画面に出すことはありません
+  （`/auth status` に表示するのは有効期限の情報だけです）。
+  ファイルが壊れている場合は、上書きせず明示的に失敗します。
+- dsh-TUI は API キーの入力をマスクし、質問への回答の要約からも伏せます。
+- 対話画面が登録されていない環境ではログインを拒否します。
+  ブラウザーや GUI があるとは仮定しません。リモート環境やヘッドレス環境では
+  明確なエラーを返します（エコシステム仕様のリモート決定性規則 TUI-RUN-001）。
+- サブスクリプション認証と API キーによるアクセスは別の製品です。
+  ChatGPT Codex と Claude Pro/Max は各サブスクリプションのバックエンドを使い、
+  新しい API キーのルートは各サービスの API バックエンドを使います。
+
+## 開発
+
+```sh
+pnpm install
+pnpm verify     # build + headless smoke (credential store, refresh
+                # serialization, prompt bridging, gating, service api)
+```
+
+smoke テストは cordis や Harness を起動せずに、純粋なモジュールを直接検査します。
+実際のログインを通す E2E 確認には対話可能なホスト（dsh-tui）が必要で、
+リリースごとに手動で検証します。このプラグインは
+[dsh-TUI リポジトリ](https://github.com/ccch1mneyyy/dsh-TUI) の
+`dsh-auth/` サブモジュールとして開発され、このリポジトリにも反映されます。
+
+## ロードマップ
+
+- **M2** *（実装済み）* — dsh-tui との連携：`/provider` の OAuth 項目、
+  `/login` のアカウント欄、最近使ったモデルを固定表示するグループを備えた
+  2 階層の `/model` 選択画面。
+- **M3** — `dsh-ecosystem-spec` への準拠（マニフェストの検証、
+  受け入れテスト用の fixture）、残る pi-ai の OAuth プロバイダー
+  （GitHub Copilot、Kimi）への対応、コミュニティ一覧への登録。
+- **M4** — Gemini：独自の Google デバイスコード認証フロー。
+  pi-ai には実装がないため、この部分だけ独自に実装する予定です。
+
+## ライセンス
+
+MIT