@chatcode/chatcode-cli 3.0.0 → 3.0.2-rc.1

package/README.i18n.yaml

@@ -18,5 +18,5 @@
   en: 3a40ddc44e55f79c
   zh: 8d3949132e1ef93c
 /chatcode-chatcode-cli/development:
-  en: 835cdf421f50f315
-  zh: 31a2ea78d8b72c9c
+  en: 2100d3a8a51988dd
+  zh: 40141b0f0fb96a89

package/README.md

@@ -71,7 +71,7 @@ Production runs require built package and frontend artifacts. From the repositor
 
 The published CLI directly pins every Harness runtime package referenced by the base/Web bundles and every required peer of its bundled ChatCode plugins. Keep those entries on the same Harness release when publishing: npm's global installer does not preserve pnpm workspace peer unification, and otherwise may hoist an older ABI beside the current runtime.
 
-The npm artifact carries fork-owned packages under `runtime/node_modules` and lists them in `runtime/manifest.json`. Profile startup includes that complete list when resolving presets and plugins, including packages absent from the slim npm dependency list. The launcher resolves embedded packages in memory for both ESM and CommonJS, including imports from external plugins. Startup does not modify the installation directory, so a root-owned installation can be launched by an ordinary user with read access; the user still needs a writable ChatCode CLI home. CLI and Web share the [startup model preference](../../packages/core/agent-default-model/README.md); already running frontends do not switch each other's model.
+The npm artifact carries fork-owned JavaScript packages under `runtime/node_modules` and lists them in `runtime/manifest.json`. Platform-specific `node-addon-system` binaries remain exact-version optional npm dependencies, selected for the installation host; they are excluded from the embedded runtime. It also carries the TUI admission registry under `lib/dsh-ecosystem-spec`, where command authorization reads its permission defaults before applying the user's grants file. Profile startup includes the complete runtime package list when resolving presets and plugins, including packages absent from the slim npm dependency list. The launcher resolves embedded packages in memory for both ESM and CommonJS, including imports from external plugins. Startup does not modify the installation directory, so a root-owned installation can be launched by an ordinary user with read access; the user still needs a writable ChatCode CLI home. CLI and Web share the [startup model preference](../../packages/core/agent-default-model/README.md); already running frontends do not switch each other's model.
 
 The `@chatcode/chatcode-cli/profile-boot` export provides the shared profile lifecycle to the Desktop host. A resolved application profile supplies its own installation anchor for runtime package resolution while retaining the ChatCode CLI home patch, proxy environment, telemetry switch, patch reload, and bounded shutdown.
 

package/README.zh.md

@@ -71,7 +71,7 @@ profile 目录包含一个 `package.json`，其中记录树外插件依赖，以
 
 发布版 CLI 会直接固定 base/Web 组合包实际引用的所有 Harness 运行时包，以及随附 ChatCode 插件的全部必需 peer。发布时必须让这些依赖保持在同一个 Harness 版本：npm 全局安装不会保留 pnpm workspace 对 peer 的统一解析，否则可能把旧 ABI 提升到顶层并与当前运行时混用。
 
-npm 产物把分支自有包放在 `runtime/node_modules`，并通过 `runtime/manifest.json` 列出它们。Profile 启动解析预设和插件时使用这份完整列表，包括精简 npm 依赖列表中没有的包。启动器在内存中统一解析内嵌包的 ESM 与 CommonJS 导入，也覆盖外部插件的导入。启动不会修改安装目录，因此普通用户只需对 root 安装的目录具有读取权限；用户自己的 ChatCode CLI home 仍须可写。CLI 与 Web 共用[启动模型偏好](../../packages/core/agent-default-model/README.zh.md)；已运行的两端不会互相切换模型。
+npm 产物把分支自有的 JavaScript 包放在 `runtime/node_modules`，并通过 `runtime/manifest.json` 列出它们。各平台的 `node-addon-system` 二进制使用固定版本的 npm 可选依赖，由安装器按目标机器的平台选择，不加入内嵌 runtime。产物还在 `lib/dsh-ecosystem-spec` 中携带 TUI 准入注册表；命令授权先从该目录读取权限默认值，再应用用户的授权文件。Profile 启动解析预设和插件时使用完整的运行时包列表，包括精简 npm 依赖列表中没有的包。启动器在内存中统一解析内嵌包的 ESM 与 CommonJS 导入，也覆盖外部插件的导入。启动不会修改安装目录，因此普通用户只需对 root 安装的目录具有读取权限；用户自己的 ChatCode CLI home 仍须可写。CLI 与 Web 共用[启动模型偏好](../../packages/core/agent-default-model/README.zh.md)；已运行的两端不会互相切换模型。
 
 `@chatcode/chatcode-cli/profile-boot` 导出向 Desktop Host 提供共享 profile 生命周期。已解析的应用 profile 为运行时包解析指定自己的安装锚点，同时沿用 ChatCode CLI home patch、代理环境、遥测开关、patch 热重载和有界关闭。
 

package/lib/{command-errors-BCYv4XyX.js → command-errors-CIYn1nnW.js}

@@ -1,12 +1,12 @@
-import { a as compositionRoot, i as bindCallerEffect, o as concreteService, r as assertCallerContext, t as activationContext } from "./host-access-BtgVRb0u.js";
-import { a as declaresPermission, d as normalizePermissionScope, i as declaresObserverScope, m as scopeCovers, n as componentIdentityOf, o as requireComponentIdentity, p as rawScopeCovers, s as requiresContract, u as INTERCEPT_PERMISSIONS } from "./component-identity-D46gUHyM.js";
-import { B as createAdmissionCatalog, G as validateSetInput, H as validateDeleteOutput, K as validateSetOutput, L as TUI_DECISION_EVENT_NAMES, M as loadSpecData, N as registryEntries, P as verifyContractProfiles, S as DATA_DIR, U as validateGetInput, V as validateDeleteInput, W as validateGetOutput, X as defineProtocolDeclaration, Y as projectManifest, j as digestFile, p as cleanScalarText, q as validateMessageEvent, x as readGrantStore } from "./extension-events-CBuXbK4l.js";
+import { a as compositionRoot, i as bindCallerEffect, o as concreteService, r as assertCallerContext, t as activationContext } from "./host-access-CmD27uhQ.js";
+import { a as declaresPermission, d as normalizePermissionScope, i as declaresObserverScope, m as scopeCovers, n as componentIdentityOf, o as requireComponentIdentity, p as rawScopeCovers, s as requiresContract, u as INTERCEPT_PERMISSIONS } from "./component-identity-CnmIKHEF.js";
+import { B as createAdmissionCatalog, G as validateSetInput, H as validateDeleteOutput, K as validateSetOutput, L as TUI_DECISION_EVENT_NAMES, M as loadSpecData, N as registryEntries, P as verifyContractProfiles, S as DATA_DIR, U as validateGetInput, V as validateDeleteInput, W as validateGetOutput, X as defineProtocolDeclaration, Y as projectManifest, j as digestFile, p as cleanScalarText, q as validateMessageEvent, x as readGrantStore } from "./extension-events-DciGPKJa.js";
 import { appendFileSync, mkdirSync, readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { dirname, join } from "node:path";
 import { Service } from "@deepseek-ai/cordis";
 import { withFileLock, writeFileAtomic } from "@deepseek-ai/dsh-atomic-write";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.8_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/validate.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/validate.js
 /** Semantic validation layered on the official manifest parser/projection. */
 const coordinateKey$1 = (coordinate) => `${coordinate.apiVersion}#${coordinate.kind}`;
 const groupOf = (apiVersion) => apiVersion.split("/")[0] ?? "";
@@ -124,7 +124,7 @@ function validateHost(index, host) {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.8_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/negotiate.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/negotiate.js
 /** Five-state admission decision using dsh-std projection and ProtocolCatalog. */
 const coordinateKey = (ref) => `${ref.apiVersion}#${ref.kind}`;
 function negotiate(index, manifest, host, grants = []) {
@@ -197,7 +197,7 @@ function negotiate(index, manifest, host, grants = []) {
 	} : { decision: "compatible" };
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.8_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/schema-check.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/schema-check.js
 /**
 * 零依赖 JSON Schema 校验器——上游 `conformance/tests/run.js` 的 check()
 * 的保真 TS 移植。刻意只实现 vendored schemas 用到的子集：本地 $ref、
@@ -301,7 +301,7 @@ function check(value, schema, rootSchema = schema, where = "$") {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.8_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/host-descriptor.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/host-descriptor.js
 /** Build the current ChatCode CLI TUI Host Descriptor from the pinned admission profile. */
 const HOST_SUPPORTED_CONTRACTS = Object.freeze([
 	{
@@ -453,7 +453,7 @@ function buildHostDescriptor(options) {
 	});
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.8_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/effect-ledger.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/effect-ledger.js
 /**
 * Effect ledger (C-060): an append-only JSONL journal of plugin-visible
 * effects at `~/.chatcode-cli/tui/effect-ledger.jsonl`, mounted by the
@@ -645,7 +645,7 @@ function resumeSequence(file) {
 	return max + 1;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.8_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/plugin-storage.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/plugin-storage.js
 /**
 * storage.local contract surface (C-040, `storage.dsh/v1alpha1#LocalStorage`):
 * per-plugin private persistence, mounted by the dsh-tui-plugin-host row as
@@ -986,7 +986,7 @@ var TuiPluginStorageRuntime = class extends Service {
 	}
 };
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.8_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/message-observer.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/message-observer.js
 /**
 * messages.observe contract surface (C-042,
 * `messages.dsh/v1alpha1#MessageObserver`): the host event broker, mounted
@@ -1494,7 +1494,7 @@ function observerStateFor(runtime) {
 	return state;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.8_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/command-attribution.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/command-attribution.js
 /**
 * Command ownership attribution — the data source for the C-041 invoke
 * checkpoint's per-owner grant decision.
@@ -1572,7 +1572,7 @@ function commandOwner(ctx, definition) {
 	return ownerMaps.get(key)?.get(handler);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.8_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/command-errors.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/command-errors.js
 /**
 * commands contract error-code alignment (C-041,
 * `commands.dsh/v1alpha1#Command`): the official `dsh-commands` runtime

package/lib/{command-trees-CwZW1MG9.js → command-trees-8o99Bws7.js}

@@ -1,6 +1,6 @@
-import { a as compositionRoot, i as bindCallerEffect, n as activationFiber, o as concreteService, s as requirePluginCaller } from "./host-access-BtgVRb0u.js";
+import { a as compositionRoot, i as bindCallerEffect, n as activationFiber, o as concreteService, s as requirePluginCaller } from "./host-access-CmD27uhQ.js";
 import { Service } from "@deepseek-ai/cordis";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.8_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/command-trees.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/command-trees.js
 /** Provider-neutral subcommand completion registry for terminal front doors. */
 const name = "dsh-tui-command-trees";
 /** Small host-only registry; command execution remains owned by dsh-commands. */

package/lib/{component-identity-D46gUHyM.js → component-identity-CnmIKHEF.js}

@@ -1,6 +1,6 @@
-import { i as bindCallerEffect, n as activationFiber } from "./host-access-BtgVRb0u.js";
+import { i as bindCallerEffect, n as activationFiber } from "./host-access-CmD27uhQ.js";
 import { randomUUID } from "node:crypto";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.8_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/permission-scope.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/permission-scope.js
 /** Permission scope normalization shared by admission and runtime checks. */
 const STORAGE_PERMISSIONS = new Set(["storage.local.read", "storage.local.write"]);
 const INTERCEPT_PERMISSIONS = new Set([
@@ -76,7 +76,7 @@ function rawScopeCovers(permission, declared, actual, componentId) {
 	return normalizedDeclared !== void 0 && normalizedActual !== void 0 && permissionScopeCovers(permission, normalizedDeclared, normalizedActual);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.8_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/component-identity.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.9_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/component-identity.js
 /** Verified Component identity bound to one Cordis activation owner. */
 var ComponentIdentityError = class extends Error {
 	code;

package/lib/dsh-ecosystem-spec/protocols/profile-definitions.d.ts

@@ -0,0 +1,13 @@
+import type { ApiReference, ProtocolCatalog, ProtocolDefinition } from '@dsh-std/core'
+export { registerTuiContributionExtensions } from './tui-contributions.js'
+export * from './tui-channel.js'
+
+export const DECISION_EVENTS: Readonly<ApiReference & {
+  apiVersion: 'tui.dsh/v1alpha1'
+  kind: 'DecisionEvents'
+}>
+
+export const decisionEventsDefinition: ProtocolDefinition
+export const profileDefinitions: readonly ProtocolDefinition[]
+
+export function registerProfileProtocols(catalog: ProtocolCatalog): () => void

package/lib/dsh-ecosystem-spec/protocols/profile-definitions.js

@@ -0,0 +1,59 @@
+/** dsh-TUI private protocol definitions evaluated by @dsh-std/core. */
+
+export { registerTuiContributionExtensions } from './tui-contributions.js'
+export * from './tui-channel.js'
+import { tuiChannelDefinition } from './tui-channel.js'
+
+export const DECISION_EVENTS = Object.freeze({
+  apiVersion: 'tui.dsh/v1alpha1',
+  kind: 'DecisionEvents',
+})
+
+function featureSupport(value, label) {
+  if (value === undefined) return Object.freeze({ features: Object.freeze([]) })
+  if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+    throw new TypeError(`${label} support spec must be an object`)
+  }
+  const unknown = Object.keys(value).filter(key => key !== 'features' && !key.startsWith('x-'))
+  if (unknown.length > 0) throw new TypeError(`${label} support spec contains unknown field ${JSON.stringify(unknown[0])}`)
+  if (value.features !== undefined && (!Array.isArray(value.features)
+    || value.features.some(feature => typeof feature !== 'string' || feature.trim() === ''))) {
+    throw new TypeError(`${label} support spec.features must be an array of non-empty strings`)
+  }
+  return Object.freeze({ features: Object.freeze([...(value.features ?? [])].sort()) })
+}
+
+function providerDefinition(reference, label) {
+  return Object.freeze({
+    ...reference,
+    validateRequirement(value) {
+      if (value !== undefined) throw new TypeError(`${label} requirement does not accept spec in manifest v0.15`)
+      return undefined
+    },
+    validateSupport(value) { return featureSupport(value, label) },
+    negotiate(input) {
+      const providers = [...new Set(input.supports.map(row => row.participant))].sort()
+      const issues = input.requirements.flatMap(row => providers.length === 0
+        ? [{
+            code: row.requirement.optional === true ? 'optional-support-missing' : 'required-support-missing',
+            severity: row.requirement.optional === true ? 'warning' : 'error',
+            participant: row.participant,
+            message: `${label} has no provider in this negotiation scope`,
+          }]
+        : [])
+      return { agreement: Object.freeze({ providers: Object.freeze(providers) }), issues: Object.freeze(issues) }
+    },
+  })
+}
+
+export const decisionEventsDefinition = providerDefinition(DECISION_EVENTS, 'DecisionEvents')
+
+export const profileDefinitions = Object.freeze([
+  decisionEventsDefinition,
+  tuiChannelDefinition,
+])
+
+export function registerProfileProtocols(catalog) {
+  const disposers = profileDefinitions.map(definition => catalog.register(definition))
+  return () => { for (const dispose of disposers.reverse()) dispose() }
+}

package/lib/dsh-ecosystem-spec/protocols/tui-channel-http.d.ts

@@ -0,0 +1,15 @@
+export const TUI_CHANNEL_HTTP_API_VERSION: 'tui.dsh/v1alpha1'
+export const TUI_CHANNEL_HTTP_KIND: 'ChannelEndpoint'
+export const TUI_CHANNEL_HTTP_HEALTH_PATH: '/dsh-tui/v1/health'
+export const TUI_CHANNEL_HTTP_DESCRIPTOR_PATH: '/dsh-tui/v1/endpoint'
+export const TUI_CHANNEL_HTTP_WEBSOCKET_PATH: '/dsh-tui/v1/connection'
+
+export interface TuiChannelEndpointDescriptor {
+  readonly apiVersion: typeof TUI_CHANNEL_HTTP_API_VERSION
+  readonly kind: typeof TUI_CHANNEL_HTTP_KIND
+  readonly origin: string
+  readonly connection: typeof TUI_CHANNEL_HTTP_WEBSOCKET_PATH
+}
+
+export function createTuiChannelEndpointDescriptor(origin: string): TuiChannelEndpointDescriptor
+export function validateTuiChannelEndpointDescriptor(value: unknown): TuiChannelEndpointDescriptor

package/lib/dsh-ecosystem-spec/protocols/tui-channel-http.js

@@ -0,0 +1,32 @@
+export const TUI_CHANNEL_HTTP_API_VERSION = 'tui.dsh/v1alpha1'
+export const TUI_CHANNEL_HTTP_KIND = 'ChannelEndpoint'
+export const TUI_CHANNEL_HTTP_HEALTH_PATH = '/dsh-tui/v1/health'
+export const TUI_CHANNEL_HTTP_DESCRIPTOR_PATH = '/dsh-tui/v1/endpoint'
+export const TUI_CHANNEL_HTTP_WEBSOCKET_PATH = '/dsh-tui/v1/connection'
+
+export function createTuiChannelEndpointDescriptor(origin) {
+  const normalized = new URL(origin)
+  if (normalized.protocol !== 'http:' && normalized.protocol !== 'https:') {
+    throw new TypeError('TUI Channel endpoint origin must use http or https')
+  }
+  normalized.pathname = '/'
+  normalized.search = ''
+  normalized.hash = ''
+  return Object.freeze({
+    apiVersion: TUI_CHANNEL_HTTP_API_VERSION,
+    kind: TUI_CHANNEL_HTTP_KIND,
+    origin: normalized.toString().replace(/\/$/u, ''),
+    connection: TUI_CHANNEL_HTTP_WEBSOCKET_PATH,
+  })
+}
+
+export function validateTuiChannelEndpointDescriptor(value) {
+  if (typeof value !== 'object' || value === null || Array.isArray(value)) throw new TypeError('TUI Channel endpoint descriptor must be an object')
+  if (value.apiVersion !== TUI_CHANNEL_HTTP_API_VERSION || value.kind !== TUI_CHANNEL_HTTP_KIND) {
+    throw new TypeError('TUI Channel endpoint descriptor version or kind is unsupported')
+  }
+  if (typeof value.origin !== 'string') throw new TypeError('TUI Channel endpoint origin must be a string')
+  createTuiChannelEndpointDescriptor(value.origin)
+  if (value.connection !== TUI_CHANNEL_HTTP_WEBSOCKET_PATH) throw new TypeError('TUI Channel endpoint connection path is unsupported')
+  return value
+}

package/lib/dsh-ecosystem-spec/protocols/tui-channel.d.ts

@@ -0,0 +1,59 @@
+import type { ApiReference, ProtocolDefinition } from '@dsh-std/core'
+
+export type JsonValue = null | boolean | number | string | readonly JsonValue[] | { readonly [key: string]: JsonValue }
+
+export const TUI_CHANNEL: Readonly<ApiReference & {
+  apiVersion: 'tui.dsh/v1alpha1'
+  kind: 'Channel'
+}>
+export const TUI_CHANNEL_WIRE_REVISION: 6
+export const TUI_CHANNEL_FEATURES: readonly string[]
+
+export interface TuiChannelRequirementSpec {
+  readonly wireRevision: number
+  readonly features: readonly string[]
+}
+export interface TuiChannelSupportSpec extends TuiChannelRequirementSpec {}
+
+export interface TuiChannelSnapshot {
+  readonly wireRevision: number
+  readonly channelId: string
+  readonly version: number
+  readonly state: Readonly<Record<string, JsonValue>>
+}
+
+export interface TuiChannelWorkspaceFlowChoice {
+  readonly id: string
+  readonly label: string
+  readonly description?: string
+  readonly badge?: string
+  readonly action: string
+  readonly input?: {
+    readonly action: string
+    readonly initialValue?: string
+    readonly placeholder?: string
+  }
+}
+
+export type TuiChannelWorkspaceFlowResult =
+  | { readonly kind: 'target'; readonly target: import('./tui-contributions.js').WorkspaceTarget }
+  | { readonly kind: 'choices'; readonly title: string; readonly choices: readonly TuiChannelWorkspaceFlowChoice[] }
+
+export type TuiChannelInput =
+  | { readonly operation: 'open'; readonly value: { readonly workspace?: string; readonly sessionId?: string; readonly options?: JsonValue } }
+  | { readonly operation: 'subscribe'; readonly value: { readonly channelId: string; readonly afterVersion: number } }
+  | { readonly operation: 'invoke'; readonly value: { readonly channelId: string; readonly method: string; readonly arguments: readonly JsonValue[] } }
+  | { readonly operation: 'close'; readonly value: { readonly channelId: string } }
+
+export interface TuiChannelInvokeOutput {
+  readonly value: JsonValue
+  readonly valueDefined?: boolean
+  readonly snapshot?: TuiChannelSnapshot
+}
+
+export const tuiChannelDefinition: ProtocolDefinition
+export function validateTuiChannelRequirement(value: unknown): TuiChannelRequirementSpec
+export function validateTuiChannelSupport(value: unknown): TuiChannelSupportSpec
+export function validateTuiChannelInput(operation: string, value: unknown): object
+export function validateTuiChannelSnapshot(value: unknown): TuiChannelSnapshot
+export function validateTuiChannelOutput(operation: string, value: unknown): object

package/lib/dsh-ecosystem-spec/protocols/tui-channel.js

@@ -0,0 +1,166 @@
+import { defineCapabilityProtocol } from '@dsh-std/connection'
+
+export const TUI_CHANNEL = Object.freeze({
+  apiVersion: 'tui.dsh/v1alpha1',
+  kind: 'Channel',
+})
+
+export const TUI_CHANNEL_WIRE_REVISION = 6
+
+export const TUI_CHANNEL_FEATURES = Object.freeze([
+  'commands',
+  'credentials',
+  'diagnostics',
+  'files',
+  'models',
+  'modes',
+  'presets',
+  'presentation',
+  'provider-setup',
+  'scenes',
+  'session-history',
+  'session-input',
+  'session-lifecycle',
+  'session-state',
+  'settings',
+  'skills',
+  'subagents',
+  'trace',
+  'workspaces',
+])
+
+export const tuiChannelDefinition = defineCapabilityProtocol({
+  ...TUI_CHANNEL,
+  validateRequirement: validateTuiChannelRequirement,
+  validateSupport: validateTuiChannelSupport,
+})
+
+export function validateTuiChannelRequirement(value) {
+  const spec = exactRecord(value, ['wireRevision', 'features'], 'Channel requirement')
+  const wireRevision = positiveInteger(spec.wireRevision, 'Channel requirement.wireRevision')
+  const features = featureList(spec.features, 'Channel requirement.features')
+  return Object.freeze({ wireRevision, features })
+}
+
+export function validateTuiChannelSupport(value) {
+  const spec = exactRecord(value, ['wireRevision', 'features'], 'Channel support')
+  const wireRevision = positiveInteger(spec.wireRevision, 'Channel support.wireRevision')
+  const features = featureList(spec.features, 'Channel support.features')
+  return Object.freeze({ wireRevision, features })
+}
+
+export function validateTuiChannelInput(operation, value) {
+  switch (operation) {
+    case 'open': {
+      const input = exactRecord(value, ['workspace', 'sessionId', 'options'], 'Channel.open input')
+      optionalString(input.workspace, 'Channel.open input.workspace')
+      optionalString(input.sessionId, 'Channel.open input.sessionId')
+      if (input.options !== undefined) jsonValue(input.options, 'Channel.open input.options', new Set())
+      return input
+    }
+    case 'subscribe': {
+      const input = exactRecord(value, ['channelId', 'afterVersion'], 'Channel.subscribe input')
+      nonEmpty(input.channelId, 'Channel.subscribe input.channelId')
+      nonNegativeInteger(input.afterVersion, 'Channel.subscribe input.afterVersion')
+      return input
+    }
+    case 'invoke': {
+      const input = exactRecord(value, ['channelId', 'method', 'arguments'], 'Channel.invoke input')
+      nonEmpty(input.channelId, 'Channel.invoke input.channelId')
+      nonEmpty(input.method, 'Channel.invoke input.method')
+      if (!Array.isArray(input.arguments)) throw new TypeError('Channel.invoke input.arguments must be an array')
+      jsonValue(input.arguments, 'Channel.invoke input.arguments', new Set())
+      return input
+    }
+    case 'close': {
+      const input = exactRecord(value, ['channelId'], 'Channel.close input')
+      nonEmpty(input.channelId, 'Channel.close input.channelId')
+      return input
+    }
+    default:
+      throw new TypeError(`Channel operation ${JSON.stringify(operation)} is not defined`)
+  }
+}
+
+export function validateTuiChannelSnapshot(value) {
+  const snapshot = exactRecord(value, ['wireRevision', 'channelId', 'version', 'state'], 'Channel snapshot')
+  positiveInteger(snapshot.wireRevision, 'Channel snapshot.wireRevision')
+  nonEmpty(snapshot.channelId, 'Channel snapshot.channelId')
+  nonNegativeInteger(snapshot.version, 'Channel snapshot.version')
+  const state = exactRecord(snapshot.state, Object.keys(snapshot.state ?? {}), 'Channel snapshot.state')
+  jsonValue(state, 'Channel snapshot.state', new Set())
+  return snapshot
+}
+
+export function validateTuiChannelOutput(operation, value) {
+  if (operation === 'open' || operation === 'subscribe') return validateTuiChannelSnapshot(value)
+  if (operation === 'invoke') {
+    const output = exactRecord(value, ['value', 'valueDefined', 'snapshot'], 'Channel.invoke output')
+    jsonValue(output.value, 'Channel.invoke output.value', new Set())
+    if (output.valueDefined !== undefined && typeof output.valueDefined !== 'boolean') {
+      throw new TypeError('Channel.invoke output.valueDefined must be boolean')
+    }
+    if (output.snapshot !== undefined) validateTuiChannelSnapshot(output.snapshot)
+    return output
+  }
+  if (operation === 'close') {
+    const output = exactRecord(value, ['closed'], 'Channel.close output')
+    if (output.closed !== true) throw new TypeError('Channel.close output.closed must be true')
+    return output
+  }
+  throw new TypeError(`Channel operation ${JSON.stringify(operation)} is not defined`)
+}
+
+function exactRecord(value, allowed, label) {
+  if (typeof value !== 'object' || value === null || Array.isArray(value)) throw new TypeError(`${label} must be an object`)
+  const unknown = Object.keys(value).filter(key => !allowed.includes(key) && !key.startsWith('x-'))
+  if (unknown.length > 0) throw new TypeError(`${label} contains unknown field ${JSON.stringify(unknown[0])}`)
+  return value
+}
+
+function featureList(value, label) {
+  if (!Array.isArray(value) || value.length === 0) throw new TypeError(`${label} must be a non-empty array`)
+  const features = value.map((feature, index) => {
+    nonEmpty(feature, `${label}[${index}]`)
+    return feature
+  })
+  if (new Set(features).size !== features.length) throw new TypeError(`${label} contains duplicates`)
+  return Object.freeze([...features].sort())
+}
+
+function positiveInteger(value, label) {
+  if (!Number.isSafeInteger(value) || value < 1) throw new TypeError(`${label} must be a positive integer`)
+  return value
+}
+
+function nonNegativeInteger(value, label) {
+  if (!Number.isSafeInteger(value) || value < 0) throw new TypeError(`${label} must be a non-negative integer`)
+  return value
+}
+
+function nonEmpty(value, label) {
+  if (typeof value !== 'string' || value.trim() === '') throw new TypeError(`${label} must be a non-empty string`)
+}
+
+function optionalString(value, label) {
+  if (value !== undefined) nonEmpty(value, label)
+}
+
+function jsonValue(value, label, ancestors) {
+  if (value === null || typeof value === 'boolean' || typeof value === 'string') return
+  if (typeof value === 'number') {
+    if (!Number.isFinite(value)) throw new TypeError(`${label} must contain only finite numbers`)
+    return
+  }
+  if (typeof value !== 'object') throw new TypeError(`${label} must be a JSON value`)
+  if (ancestors.has(value)) throw new TypeError(`${label} must not contain cycles`)
+  ancestors.add(value)
+  if (Array.isArray(value)) {
+    for (const [index, item] of value.entries()) jsonValue(item, `${label}[${index}]`, ancestors)
+  } else {
+    const prototype = Object.getPrototypeOf(value)
+    if (prototype !== Object.prototype && prototype !== null) throw new TypeError(`${label} must contain only plain objects`)
+    for (const [key, item] of Object.entries(value)) jsonValue(item, `${label}.${key}`, ancestors)
+  }
+  ancestors.delete(value)
+}

package/lib/dsh-ecosystem-spec/protocols/tui-contributions.d.ts

@@ -0,0 +1,42 @@
+import type { ApiReference } from '@dsh-std/core'
+import type { ManifestDefinitionCatalog, ManifestObjectDefinition } from '@dsh-std/manifest'
+
+export const API_VERSION: 'tui.dsh/v1alpha1'
+export const SETTINGS_SECTION: Readonly<ApiReference & { kind: 'SettingsSection' }>
+export const SCENE: Readonly<ApiReference & { kind: 'Scene' }>
+
+export type LocalizedText = Readonly<Record<string, string>>
+export type SettingsFieldKind = 'text' | 'number' | 'boolean' | 'select'
+export interface SettingsFieldOption { readonly value: string; readonly label: string; readonly titles?: LocalizedText }
+export interface SettingsFieldSpec {
+  readonly path: readonly string[]
+  readonly label: string
+  readonly titles?: LocalizedText
+  readonly hint?: string
+  readonly hintTitles?: LocalizedText
+  readonly kind: SettingsFieldKind
+  readonly options?: readonly SettingsFieldOption[]
+  readonly placeholder?: string
+  readonly secretRef?: string
+}
+export interface SettingsSectionSpec {
+  readonly namespace: string
+  readonly title: string
+  readonly titles?: LocalizedText
+  readonly fields: readonly SettingsFieldSpec[]
+}
+export interface SettingsSectionHandler {}
+
+export interface SceneSpec { readonly title?: string; readonly titles?: LocalizedText }
+export interface SceneHandler<Props = unknown, Result = unknown> {
+  readonly component: (props: Props) => Result
+}
+
+export const settingsSectionExtensionDefinition: ManifestObjectDefinition
+export const sceneExtensionDefinition: ManifestObjectDefinition
+export const contributionExtensionDefinitions: readonly ManifestObjectDefinition[]
+export function validateSettingsSectionSpec(value: unknown): Readonly<SettingsSectionSpec>
+export function validateSceneSpec(value: unknown): Readonly<SceneSpec>
+export function registerTuiContributionExtensions(catalog: ManifestDefinitionCatalog): () => void
+export function assertSettingsSectionHandler(value: unknown): asserts value is SettingsSectionHandler
+export function assertSceneHandler(value: unknown): asserts value is SceneHandler