@chatcode/chatcode-cli 3.0.3 → 3.0.4-rc.2

package/lib/{themes-BCly4_y9.js → themes-Ce97Zsri.js}

@@ -1,12 +1,12 @@
-import { c as parseCombo, i as comboMatchesStrict, r as canonicalCombo, s as fixedReservedCombos, u as reservedActionCombos } from "./keymap-CRUxM_qn.js";
-import { a as compositionRoot, i as bindCallerEffect, n as activationFiber, o as concreteService, r as assertCallerContext, s as requirePluginCaller, t as activationContext } from "./host-access-DeCjoRQP.js";
-import { n as componentIdentityOf } from "./component-identity-DPdJglJO.js";
-import { S as DATA_DIR, f as cleanRenderText, p as cleanScalarText } from "./extension-events-Be9LWvHD.js";
+import { c as parseCombo, i as comboMatchesStrict, r as canonicalCombo, s as fixedReservedCombos, u as reservedActionCombos } from "./keymap-CIoVICBI.js";
+import { a as compositionRoot, i as bindCallerEffect, n as activationFiber, o as concreteService, r as assertCallerContext, s as requirePluginCaller, t as activationContext } from "./host-access-B0CRAwsX.js";
+import { n as componentIdentityOf } from "./component-identity-DFJD_d-P.js";
+import { S as DATA_DIR, f as cleanRenderText, p as cleanScalarText } from "./extension-events-qXmhzmHo.js";
 import { readFileSync, readdirSync } from "node:fs";
 import { join } from "node:path";
-import { KNOWN_SESSION_EVENT_TYPES } from "@deepseek-ai/dsh-session";
 import { Context, Service } from "@deepseek-ai/cordis";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/dialogs.js
+import { KNOWN_SESSION_EVENT_TYPES } from "@deepseek-ai/dsh-session";
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/dialogs.js
 /**
 * Managed plugin dialogs — the pi `ctx.ui.select/confirm/input` seam for
 * ChatCode CLI TUI. Plugins hand the HOST a declarative request; the TUI renders the
@@ -279,7 +279,7 @@ function getHostDialogStore(runtime) {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/status.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/status.js
 /**
 * Keyed status-line contributions — pi's `ctx.ui.setStatus(key, text)`.
 * Each plugin owns a key; setting text shows it, setting undefined clears
@@ -503,7 +503,7 @@ function getHostStatusStore(runtime) {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/shortcuts.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/shortcuts.js
 /**
 * Plugin keyboard shortcuts — pi's `pi.registerShortcut`. A plugin binds a
 * combo (`ctrl+shift+p`, `alt+k`, …) to a handler; the chat screen matches
@@ -704,7 +704,7 @@ function getHostShortcuts(runtime) {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/renderers.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/renderers.js
 /**
 * Custom session-entry renderers — pi's `pi.registerMessageRenderer`. A
 * plugin that appends its own log-only session events (`session.append(
@@ -876,7 +876,7 @@ function getHostRenderers(runtime) {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/toast.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/toast.js
 /**
 * Plugin-facing transient notifications — a fire-and-forget toast shown on
 * the host's existing notification surface (the same toasts the channel
@@ -1011,7 +1011,7 @@ function getHostToastStore(runtime) {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/theme.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/theme.js
 /**
 * dsh-tui color themes — ChatCode CLI terminal family.
 *
@@ -1486,7 +1486,7 @@ function getActiveTheme() {
 	return getTheme(activeThemeName);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/customTheme.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/customTheme.js
 /**
 * User-defined color themes for dsh-tui.
 *
@@ -1716,7 +1716,7 @@ function indexCustomThemeNames() {
 	nameIndexed = true;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/themes.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/themes.js
 /**
 * Cordis-backed runtime theme contributions.
 *

package/lib/tui-compat-command-trees.js

@@ -1,2 +1,2 @@
-import { r as name, t as TuiCommandTreeRuntime } from "./command-trees-Dvq4C7a4.js";
+import { r as name, t as TuiCommandTreeRuntime } from "./command-trees-Dc17MYfV.js";
 export { TuiCommandTreeRuntime, TuiCommandTreeRuntime as default, name };

package/lib/tui-compat-extensions.js

@@ -1,9 +1,9 @@
-import { a as normalizeCancelDecision, c as installDecisionGuard, n as DECISION_TOTAL_TIMEOUT_MS, o as DECISION_EVENT_PERMISSIONS, t as DECISION_HANDLER_TIMEOUT_MS, x as readGrantStore } from "./extension-events-Be9LWvHD.js";
-import { A as TuiDialogRuntime, C as matchShortcut, D as getHostStatusStore, E as TuiStatusStore, O as DIALOG_DEFAULT_TIMEOUT_MS, T as TuiStatusRuntime, _ as TuiToastRuntime, j as TuiDialogStore, k as INPUT_CELLS, t as TuiThemeRuntime, w as parseShortcutCombo, x as TuiShortcutRuntime, y as TuiRendererRuntime } from "./themes-BCly4_y9.js";
+import { a as normalizeCancelDecision, c as installDecisionGuard, n as DECISION_TOTAL_TIMEOUT_MS, o as DECISION_EVENT_PERMISSIONS, t as DECISION_HANDLER_TIMEOUT_MS, x as readGrantStore } from "./extension-events-qXmhzmHo.js";
+import { A as TuiDialogRuntime, C as matchShortcut, D as getHostStatusStore, E as TuiStatusStore, O as DIALOG_DEFAULT_TIMEOUT_MS, T as TuiStatusRuntime, _ as TuiToastRuntime, j as TuiDialogStore, k as INPUT_CELLS, t as TuiThemeRuntime, w as parseShortcutCombo, x as TuiShortcutRuntime, y as TuiRendererRuntime } from "./themes-Ce97Zsri.js";
 import { appendFileSync, mkdirSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/extensions.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/extensions.js
 /**
 * The dsh-tui-extensions row: mounts every plugin-facing UI seam service in
 * one cordis plugin (one profile row, one patch-surface entry — see issue

package/lib/tui-compat-plugin-host.js

@@ -1,10 +1,10 @@
-import { a as compositionRoot, i as bindCallerEffect, n as activationFiber, o as concreteService, r as assertCallerContext, t as activationContext } from "./host-access-DeCjoRQP.js";
-import { c as requiresDecisionEvents, o as requireComponentIdentity, r as declaresCommand, s as requiresContract, t as bindComponentIdentity } from "./component-identity-DPdJglJO.js";
-import { B as createAdmissionCatalog, F as verifyRegistry, I as DECISION_EVENTS_COORDINATE, J as parseManifest, L as TUI_DECISION_EVENT_NAMES, M as loadSpecData, P as verifyContractProfiles, R as TUI_EXTENSION_API_VERSION, Y as projectManifest, c as installDecisionGuard, l as registerDecisionHandler, n as DECISION_TOTAL_TIMEOUT_MS, o as DECISION_EVENT_PERMISSIONS, s as decisionHandlerMetadataOf, t as DECISION_HANDLER_TIMEOUT_MS, u as withDecisionRegistration, x as readGrantStore, z as TUI_EXTENSION_PERMISSION_NAMES } from "./extension-events-Be9LWvHD.js";
-import { A as validatePlugin, C as TuiPluginStorageRuntime, D as buildHostDescriptor, E as HOST_SUPPORTED_CONTRACTS, O as negotiate, S as STORAGE_MAX_KEYS, T as TuiEffectLedgerRuntime, b as STORAGE_KEY_MAX_LENGTH, c as OBSERVE_CALLBACK_QUEUE_LIMIT, d as OBSERVE_ID_MAX_CHARS, f as OBSERVE_IMAGE_BASE64_MAX_CHARS, g as TuiMessageObserverRuntime, h as OBSERVE_SUMMARY_CELLS, i as withCommandErrorMapping, k as createContractIndex, l as OBSERVE_CALLBACK_TIMEOUT_MS, m as OBSERVE_SCOPE_MAX_CHARS, n as hasCommandErrorCode, o as stampCommandOwner, p as OBSERVE_IMAGE_MAX_BYTES, r as mapCommandError, s as unstampCommandOwner, t as COMMAND_ERROR_CODES, u as OBSERVE_CONTENT_MAX_CHARS, x as STORAGE_MAX_BYTES, y as PluginStorageError } from "./command-errors-CBJRI2gy.js";
+import { a as compositionRoot, i as bindCallerEffect, n as activationFiber, o as concreteService, r as assertCallerContext, t as activationContext } from "./host-access-B0CRAwsX.js";
+import { c as requiresDecisionEvents, o as requireComponentIdentity, r as declaresCommand, s as requiresContract, t as bindComponentIdentity } from "./component-identity-DFJD_d-P.js";
+import { B as createAdmissionCatalog, F as verifyRegistry, I as DECISION_EVENTS_COORDINATE, J as parseManifest, L as TUI_DECISION_EVENT_NAMES, M as loadSpecData, P as verifyContractProfiles, R as TUI_EXTENSION_API_VERSION, Y as projectManifest, c as installDecisionGuard, l as registerDecisionHandler, n as DECISION_TOTAL_TIMEOUT_MS, o as DECISION_EVENT_PERMISSIONS, s as decisionHandlerMetadataOf, t as DECISION_HANDLER_TIMEOUT_MS, u as withDecisionRegistration, x as readGrantStore, z as TUI_EXTENSION_PERMISSION_NAMES } from "./extension-events-qXmhzmHo.js";
+import { A as validatePlugin, C as TuiPluginStorageRuntime, D as buildHostDescriptor, E as HOST_SUPPORTED_CONTRACTS, O as negotiate, S as STORAGE_MAX_KEYS, T as TuiEffectLedgerRuntime, b as STORAGE_KEY_MAX_LENGTH, c as OBSERVE_CALLBACK_QUEUE_LIMIT, d as OBSERVE_ID_MAX_CHARS, f as OBSERVE_IMAGE_BASE64_MAX_CHARS, g as TuiMessageObserverRuntime, h as OBSERVE_SUMMARY_CELLS, i as withCommandErrorMapping, k as createContractIndex, l as OBSERVE_CALLBACK_TIMEOUT_MS, m as OBSERVE_SCOPE_MAX_CHARS, n as hasCommandErrorCode, o as stampCommandOwner, p as OBSERVE_IMAGE_MAX_BYTES, r as mapCommandError, s as unstampCommandOwner, t as COMMAND_ERROR_CODES, u as OBSERVE_CONTENT_MAX_CHARS, x as STORAGE_MAX_BYTES, y as PluginStorageError } from "./command-errors-CScdshCl.js";
 import { randomUUID } from "node:crypto";
 import { Context, Service } from "@deepseek-ai/cordis";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/plugin-host.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/plugin-host.js
 /**
 * The dsh-tui-plugin-host row: the plugin-interop anchor every later
 * contract surface hangs off (storage.local, messages.observe, effect

package/lib/tui-compat-scenes.js

@@ -1,2 +1,2 @@
-import { r as name, t as TuiSceneRuntime } from "./scenes-D6jV1EEi.js";
+import { r as name, t as TuiSceneRuntime } from "./scenes-BRf-zMpF.js";
 export { TuiSceneRuntime, TuiSceneRuntime as default, name };

package/lib/tui-compat-settings-sections.js

@@ -1,2 +1,2 @@
-import { i as name, t as TuiSettingsSectionsRuntime } from "./settings-sections-DJQRNBo9.js";
+import { i as name, t as TuiSettingsSectionsRuntime } from "./settings-sections-4gMhveN_.js";
 export { TuiSettingsSectionsRuntime, TuiSettingsSectionsRuntime as default, name };

package/lib/tui-compat-working-activity.js

@@ -1,8 +1,8 @@
-import { c as t, o as ActivityTracker, s as setLangOverride, t as DEFAULT_PRESET } from "./frames-7PAg0Q9b.js";
+import { c as t, o as ActivityTracker, s as setLangOverride, t as DEFAULT_PRESET } from "./frames-B89znn_0.js";
 import { createRequire } from "node:module";
 import { realpathSync } from "node:fs";
 import z from "@deepseek-ai/schemastery";
-//#region ../../node_modules/.pnpm/dsh-working-activity@0.4.0_@deepseek-ai+cordis@vendor+cordis_@deepseek-ai+dsh-agent@pac_b3b3229b48344000684afed721112e96/node_modules/dsh-working-activity/lib/types/registration.js
+//#region ../../node_modules/.pnpm/dsh-working-activity@0.4.0_@deepseek-ai+cordis@vendor+cordis_@deepseek-ai+dsh-agent@pac_cc26372355f83f2cd8d6ec6474483321/node_modules/dsh-working-activity/lib/types/registration.js
 /**
 * Runtime registration of the `activity/status` session-event type.
 *
@@ -80,7 +80,7 @@ function registerSessionCopy(req, registered) {
 	} catch {}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/dsh-working-activity@0.4.0_@deepseek-ai+cordis@vendor+cordis_@deepseek-ai+dsh-agent@pac_b3b3229b48344000684afed721112e96/node_modules/dsh-working-activity/lib/types/index.js
+//#region ../../node_modules/.pnpm/dsh-working-activity@0.4.0_@deepseek-ai+cordis@vendor+cordis_@deepseek-ai+dsh-agent@pac_cc26372355f83f2cd8d6ec6474483321/node_modules/dsh-working-activity/lib/types/index.js
 /**
 * working-activity — a live "working line" for DeepSeek Harness agents.
 *
@@ -235,7 +235,7 @@ function apply$1(ctx, config = {}) {
 	}, "working-activity tick timer");
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/working-activity.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/working-activity.js
 /**
 * Re-export of the `dsh-working-activity` plugin under this package's own
 * name, so the bundle patch layer can mount the working-activity row as

package/lib/tui-compat-workspaces.js

@@ -1,2 +1,2 @@
-import { a as localWorkspaceUri, n as WORKSPACE_PROVIDER_TIMEOUT_MS, o as name, r as createLocalWorkspaceRuntime, s as parseLocalWorkspaceReference, t as TuiWorkspaceRuntime } from "./workspaces-Bb3kCAFb.js";
+import { a as localWorkspaceUri, n as WORKSPACE_PROVIDER_TIMEOUT_MS, o as name, r as createLocalWorkspaceRuntime, s as parseLocalWorkspaceReference, t as TuiWorkspaceRuntime } from "./workspaces-1xrm-e3V.js";
 export { TuiWorkspaceRuntime, TuiWorkspaceRuntime as default, WORKSPACE_PROVIDER_TIMEOUT_MS, createLocalWorkspaceRuntime, localWorkspaceUri, name, parseLocalWorkspaceReference };

package/lib/tui-compat.js

@@ -1,7 +1,7 @@
-import { _ as withLiveSettings, h as liveConfigValues, n as DEFAULT_STATUS_BAR, s as normalizePageMargin } from "./tuiDisplayPrefs-Dm_fULiR.js";
-import { t as SHORTCUT_ACTIONS } from "./keymap-CRUxM_qn.js";
+import { c as normalizePageMargin, g as liveConfigValues, n as createStatusBarSchema, v as withLiveSettings } from "./statusBarSettings-CnmdSHkO.js";
+import { t as SHORTCUT_ACTIONS } from "./keymap-CIoVICBI.js";
 import z from "@deepseek-ai/schemastery";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/force-production-react.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/force-production-react.js
 /**
 * React-reconciler selects its dev/production build at require time from
 * NODE_ENV; the dev build records one performance.measure() per render into
@@ -14,7 +14,7 @@ import z from "@deepseek-ai/schemastery";
 */
 process.env.NODE_ENV ??= "production";
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.16_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/index.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.19_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/index.js
 /**
 * dsh-tui plugin entry. The TUI implementation lives in `./plugin.tsx` (its
 * render path is JSX); this module owns the plugin surface (`name`/`inject`/
@@ -25,7 +25,7 @@ process.env.NODE_ENV ??= "production";
 */
 const name = "dsh-tui";
 const inject$1 = ["agents"];
-const Config = withLiveSettings(z.object({
+const Config$1 = withLiveSettings(z.object({
 	sessionId: z.string().required(false),
 	provider: z.string().required(false),
 	model: z.string().required(false),
@@ -62,26 +62,7 @@ const Config = withLiveSettings(z.object({
 	whale: z.boolean().default(true),
 	minimal: z.boolean().default(false),
 	recapOnOpen: z.boolean().default(true),
-	statusBar: z.object({
-		compact: z.boolean().default(DEFAULT_STATUS_BAR.compact),
-		tokenDashboard: z.boolean().default(DEFAULT_STATUS_BAR.tokenDashboard),
-		model: z.boolean().default(DEFAULT_STATUS_BAR.model),
-		thinking: z.boolean().default(DEFAULT_STATUS_BAR.thinking),
-		cwd: z.boolean().default(DEFAULT_STATUS_BAR.cwd),
-		contextUsage: z.boolean().default(DEFAULT_STATUS_BAR.contextUsage),
-		cache: z.boolean().default(DEFAULT_STATUS_BAR.cache),
-		tokens: z.boolean().default(DEFAULT_STATUS_BAR.tokens),
-		tps: z.boolean().default(DEFAULT_STATUS_BAR.tps),
-		gitBranch: z.boolean().default(DEFAULT_STATUS_BAR.gitBranch),
-		sessionTitle: z.boolean().default(DEFAULT_STATUS_BAR.sessionTitle),
-		sessionId: z.boolean().default(DEFAULT_STATUS_BAR.sessionId),
-		goal: z.boolean().default(DEFAULT_STATUS_BAR.goal),
-		mode: z.boolean().default(DEFAULT_STATUS_BAR.mode),
-		contextBar: z.boolean().default(DEFAULT_STATUS_BAR.contextBar),
-		activity: z.boolean().default(DEFAULT_STATUS_BAR.activity),
-		trajectory: z.boolean().default(DEFAULT_STATUS_BAR.trajectory),
-		shortcutHint: z.boolean().default(DEFAULT_STATUS_BAR.shortcutHint)
-	}).default({ ...DEFAULT_STATUS_BAR }),
+	statusBar: createStatusBarSchema(),
 	shortcuts: z.object(Object.fromEntries(SHORTCUT_ACTIONS.map((action) => [action.id, z.string().required(false)]))).required(false),
 	modes: z.array(z.object({
 		id: z.string(),
@@ -120,11 +101,13 @@ const Config = withLiveSettings(z.object({
 * @returns a promise settling when the TUI teardown completes.
 */
 async function apply(ctx, config) {
-	const { apply: ccTuiApply } = await import("./plugin-CDFSDE_y.js");
+	const { apply: ccTuiApply } = await import("./plugin-BKQsL2xn.js");
 	return ccTuiApply(ctx, liveConfigValues(config));
 }
 //#endregion
 //#region lib/types/tui-compat.js
+/** Validate the TUI's declared live fields using the launcher's own schema runtime. */
+const Config = new z(Config$1.toJSON());
 /** Wait for the shared model default before the TUI creates its first session. */
 const inject = [...inject$1, "agentDefaultModel"];
 //#endregion

package/lib/types/args.d.ts

@@ -34,6 +34,8 @@ interface ProfileInvocation {
     patches: string[];
     /** Everything after the launcher's own flags, verbatim, for injected app plugins. */
     args: string[];
+    /** Explicitly unrestricted file access and automatic tool approval for this process. */
+    dangerouslySkipPermissions?: true;
 }
 /** Print a composed profile tree and exit without booting. */
 interface DumpConfigInvocation {

package/lib/types/permission-bypass.d.ts

@@ -0,0 +1,16 @@
+/** Process-local permission overrides for explicitly unrestricted CLI launches. */
+import type { Context } from '@deepseek-ai/cordis';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        /** Process-local tool approval and sandbox override installed by the launcher. */
+        chatcodePermissionBypass?: true;
+    }
+}
+/**
+ * Allow tool approval requests and remove file confinement until this root is disposed.
+ * Session permission events and saved profile settings remain unchanged, including on resume.
+ * ApprovalService still records its asked/decided pair and honors cancellation.
+ * @param ctx - profile root, before application plugins mount.
+ */
+export declare function installPermissionBypass(ctx: Context): void;
+//# sourceMappingURL=permission-bypass.d.ts.map

package/lib/types/profile-boot.d.ts

@@ -14,6 +14,7 @@ import type { PatchOptions } from '@deepseek-ai/cordis-plugin-include';
 import { type ProfileContext, type Profile, type ProfileTemplate, type RuntimeResolution } from '@deepseek-ai/dsh-app-boot';
 import { type LaunchEnvironmentSnapshot } from '@deepseek-ai/dsh-launch-environment';
 import { type ProcessShutdown } from './process-shutdown.ts';
+import { type WebInstanceRegistration } from './web-instance.ts';
 /** Profile templates shipped by ChatCode CLI in addition to the upstream runtime profiles. */
 export declare const CHATCODE_PROFILE_TEMPLATES: Readonly<Record<string, ProfileTemplate>>;
 /** Exact compatibility bridge for ChatCode-owned releases qualified against this upstream runtime. */
@@ -55,6 +56,13 @@ export declare function preferEmbeddedRuntimeResolution(resolution: RuntimeResol
 export declare function restoreTrustedTuiLayer(profile: Profile, installAnchor?: string, runtimeVersion?: string): Profile;
 /** Resolve installed ChatCode product patches without changing persisted profiles. */
 export declare function chatCodeProfilePatchFiles(profile: string, installAnchor?: string): string[];
+/**
+ * Deduplicate overlay files shared by startup, YAML dumps, and schema dumps.
+ * @param files - product and command-line overlay paths, in application order.
+ * @returns absolute paths in first-occurrence order, preserving relative-resource bases;
+ * missing files remain in the result for the patch loader to diagnose.
+ */
+export declare function uniqueProfilePatchFiles(files: readonly string[]): string[];
 /** Root config filename inside a profile directory. */
 export declare const PROFILE_ROOT_FILENAME = "cordis.yml";
 /**
@@ -94,6 +102,10 @@ export interface ResolvedProfileRuntime {
 }
 /** Options for {@link runProfile}. */
 export interface RunProfileOptions {
+    /** Private Web registration supplied by the serialized public Web launcher. */
+    webInstance?: WebInstanceRegistration | undefined;
+    /** Unrestricted file access and automatic tool approval for this process only. */
+    dangerouslySkipPermissions?: boolean | undefined;
     /** This run's frozen environment snapshot, provided before any entry mounts. */
     environment: LaunchEnvironmentSnapshot;
     /** The profile name to boot. */

package/lib/types/tui-compat.d.ts

@@ -1,5 +1,9 @@
 /** Exact-version TUI bridge owned by the ChatCode launcher. */
 export * from '@deepseek-harness-tui/dsh-tui';
+import { Config as tuiConfig } from '@deepseek-harness-tui/dsh-tui';
+import Schema from '@deepseek-ai/schemastery';
+/** Validate the TUI's declared live fields using the launcher's own schema runtime. */
+export declare const Config: Schema<tuiConfig | NoInfer<Partial<tuiConfig>>, tuiConfig | NoInfer<Partial<tuiConfig>>, "plain">;
 /** Wait for the shared model default before the TUI creates its first session. */
 export declare const inject: string[];
 //# sourceMappingURL=tui-compat.d.ts.map

package/lib/types/web-browser.d.ts

@@ -0,0 +1,6 @@
+/** Open a verified instance URL with the OS browser launcher in a scrubbed Node child.
+ * @param url - authenticated loopback URL returned by the running Web instance.
+ * @returns after the browser launcher exits successfully; rejects without hiding the printed URL.
+ */
+export declare function openWebBrowser(url: string): Promise<void>;
+//# sourceMappingURL=web-browser.d.ts.map

package/lib/types/web-instance.d.ts

@@ -0,0 +1,42 @@
+import { Context } from '@deepseek-ai/cordis';
+import { type Branded } from '@deepseek-ai/dsh-brand';
+/** Process identity retained in the private file and verified control replies. */
+export type WebInstanceId = Branded<'ChatCodeWebInstanceId'>;
+/** A usage diagnostic already printed by the Web app's own argument parser. */
+export declare class WebUsageError extends Error {
+    readonly exitCode: number;
+    /** @param exitCode - exit status selected by the app argument parser. */
+    constructor(exitCode: number);
+}
+/** A registration whose lifetime belongs to this Web process, not a requesting TUI. */
+export interface WebInstanceRegistration {
+    path: string;
+    id: WebInstanceId;
+    secret: string;
+}
+/** Resolve the private instance record under the launcher's canonical home.
+ * @param home - absolute ChatCode CLI home.
+ * @returns the one default Web registration path.
+ */
+export declare function webInstancePath(home: string): string;
+/** Install authenticated local control routes and publish only after the profile is ready.
+ * @param ctx - root profile context, after the application tree has settled.
+ * @param registration - random process identity and private record path.
+ * @param stop - whole-profile shutdown, invoked only for authenticated explicit off requests.
+ * @returns after the initial registration has been written; returns without registering for help-only launches.
+ */
+export declare function registerWebInstance(ctx: Context, registration: WebInstanceRegistration, stop: () => void): Promise<void>;
+/** Operations used by the launcher; the first boot remains in the foreground. */
+export interface ManagedWebOptions {
+    home: string;
+    args: readonly string[];
+    start(registration: WebInstanceRegistration | undefined, args: readonly string[]): Promise<void>;
+    open(url: string): Promise<void>;
+    print(line: string): void;
+}
+/** Start once or reopen a verified existing instance; off waits for its listener to close.
+ * @param options - canonical home, app arguments, and launcher-owned boot/browser operations.
+ * @returns after boot, reuse, or an explicit stop has settled.
+ */
+export declare function runManagedWeb(options: ManagedWebOptions): Promise<void>;
+//# sourceMappingURL=web-instance.d.ts.map

package/lib/web-browser-Vcgfdsv_.js

@@ -0,0 +1,46 @@
+import { spawn } from "node:child_process";
+import { scrubbedParentEnv } from "@deepseek-ai/dsh-subprocess";
+//#region lib/types/web-browser.js
+/** Reopen an authenticated Web URL without inheriting project browser commands or secrets. */
+/** Open a verified instance URL with the OS browser launcher in a scrubbed Node child.
+* @param url - authenticated loopback URL returned by the running Web instance.
+* @returns after the browser launcher exits successfully; rejects without hiding the printed URL.
+*/
+async function openWebBrowser(url) {
+	const script = `
+    try {
+      const { default: open } = await import(${JSON.stringify(import.meta.resolve("open"))});
+      const launcher = await open(process.argv[1]);
+      if (process.platform === 'win32') {
+        const code = launcher.exitCode ?? await new Promise((resolve, reject) => {
+          launcher.ref();
+          launcher.once('error', reject);
+          launcher.once('close', resolve);
+        });
+        if (code !== 0) throw new Error('Browser launcher failed');
+      }
+      process.exitCode = 0;
+    } catch {
+      process.exitCode = 1;
+    }
+  `;
+	const child = spawn(process.execPath, [
+		"--input-type=module",
+		"--eval",
+		script,
+		url
+	], {
+		env: scrubbedParentEnv(),
+		stdio: "ignore",
+		windowsHide: true
+	});
+	await new Promise((resolve, reject) => {
+		child.once("error", reject);
+		child.once("close", (code) => {
+			if (code === 0) resolve();
+			else reject(/* @__PURE__ */ new Error("无法自动打开浏览器；请使用上方访问链接。"));
+		});
+	});
+}
+//#endregion
+export { openWebBrowser };

package/lib/web-instance-B0jec7cq.js

@@ -0,0 +1,2 @@
+import { r as runManagedWeb, t as WebUsageError } from "./web-instance-DbP7IHPv.js";
+export { WebUsageError, runManagedWeb };