@chatcode/chatcode-cli 3.0.4-rc.4 → 3.0.4-rc.7

package/README.i18n.yaml

@@ -12,11 +12,11 @@
   en: 57439d3d02b1c963
   zh: 5f86d52b4790a834
 /chatcode-chatcode-cli/profiles:
-  en: 36405fc361505950
-  zh: f6d1a6c77032276d
+  en: f2b855f935bb43d3
+  zh: 58cbf85ca552847c
 /chatcode-chatcode-cli/optional-overlays:
   en: 3a40ddc44e55f79c
   zh: 8d3949132e1ef93c
 /chatcode-chatcode-cli/development:
-  en: 8342d41b1add62e9
-  zh: 1104c5e8b258224d
+  en: a7c062a01d9dad87
+  zh: dbc20c96c2b13d35

package/README.md

@@ -62,7 +62,9 @@ A profile directory holds a `package.json` (out-of-tree plugin dependencies plus
 Installation and profile startup enforce declared DSH peer ranges against the same runtime version shown by `dsh --version`. Incompatible plugins require an explicitly acknowledged exact-version exemption. The [plugin manager's compatibility reference](../../packages/boot/plugin-manager/README.md#version-compatibility-and-exemptions) documents `version-exemptions`, `allow-version`, `revoke-version`, persistence, and risks.
 
 The tree composes over an empty root:
+
 - each bundle's patch in `dsh.profile.bundles` order
+- then launcher-owned product defaults, including the Web sidebar mount
 - then the profile's `cordis.patch.yml`, then the home-level `$CHATCODE_CLI_HOME/cordis.patch.yml`
 - then `--patch` overlays
 
@@ -80,7 +82,7 @@ The legacy-data startup reminder checks only the top-level entries of the old ho
 
 Set `CHATCODE_CLI_STARTUP_TRACE=1` to print phase and plugin activation durations to stderr for either `cco` or `cco web`. A `begin` line without a matching duration identifies unfinished work. Tracing is off by default and records labels and elapsed times, not environment values or plugin configuration.
 
-Product and command-line overlays that resolve to the same physical file are applied once, retaining the first path and its relative-resource base. Distinct overlays retain their order and override precedence. Source launches ignore embedded-runtime staging left by packaging and resolve the live workspace packages.
+Product defaults and command-line overlays that resolve to the same physical file are applied once at the default layer, retaining the first path and its relative-resource base. Distinct command-line overlays retain their order and override precedence. Sidebar settings save into the profile patch above the product mount and survive restart; restoring defaults removes that override. Source launches ignore embedded-runtime staging left by packaging and resolve the live workspace packages.
 
 The [CLI behavior reference](reference/README.md) owns exact layer precedence, flags, shutdown behavior, deployment defaults, and source execution. The [startup and reload failure table](../../packages/boot/app-boot/README.md#startup-and-reload-failures) compares optional and required plugin failures with configuration HMR.
 
@@ -94,7 +96,7 @@ Production runs require built package and frontend artifacts. From the repositor
 
 Run `pnpm exec vitest run apps/cli/tests/chatcode-rate-limit.spec.ts apps/cli/tests/permission-bypass.spec.ts` from the repository root to check retry and launch-permission behavior. The retry tests mount the installed `dsh-llm-chatcode-config` plugin through its public package entry and use fixture responses for catalog and model HTTP requests.
 
-The TUI bridge validates its declared live fields with the launcher's schema runtime, including volatile metadata emitted by older TUI schema versions. This keeps settings editable without replacing the running session.
+The TUI bridge validates its declared live fields with the launcher's schema runtime, including volatile metadata emitted by older TUI schema versions. This keeps settings editable without replacing the running session. The launcher also normalizes the pinned sidebar's legacy schema before activation, preserving its package identity and browser module while live edits update running values.
 
 The published CLI directly pins every Harness runtime package referenced by the base/Web bundles and every required peer of its bundled ChatCode plugins. Keep those entries on the same Harness release when publishing: npm's global installer does not preserve pnpm workspace peer unification, and otherwise may hoist an older ABI beside the current runtime.
 

package/README.zh.md

@@ -62,7 +62,9 @@ profile 目录包含一个 `package.json`，其中记录树外插件依赖，以
 安装和 profile 启动会按声明的 DSH peer 范围，检查与 `dsh --version` 显示值相同的运行时版本。不兼容插件需要用户明确确认精确版本豁免。[插件管理器的兼容性参考](../../packages/boot/plugin-manager/README.zh.md#version-compatibility-and-exemptions)说明 `version-exemptions`、`allow-version`、`revoke-version`、持久化规则与风险。
 
 配置树以空根为起点，依次叠加以下配置层：
+
 - `dsh.profile.bundles` 中各组合包的 patch
+- 然后是启动器持有的产品默认配置，包括 Web 侧边栏挂载
 - profile 自身的 `cordis.patch.yml`，然后是 home 级的 `$CHATCODE_CLI_HOME/cordis.patch.yml`
 - `--patch` 指定的覆盖层
 
@@ -80,7 +82,7 @@ TUI 等待共用默认模型服务就绪后才创建首个会话。ChatCode 模
 
 设置 `CHATCODE_CLI_STARTUP_TRACE=1`，即可在运行 `cco` 或 `cco web` 时向 stderr 输出启动阶段与插件激活耗时。只有 `begin` 而没有对应耗时的条目表示尚未完成的工作。默认不启用诊断；日志只记录标签与耗时，不记录环境变量值或插件配置。
 
-产品覆盖层与命令行覆盖层如果解析到同一个物理文件，只应用一次，并保留首个路径及其相对资源解析基准。不同文件的覆盖层保留原有顺序与覆盖优先级。源码启动忽略打包留下的内嵌运行时暂存文件，解析当前工作区中的包。
+产品默认配置与命令行覆盖层如果解析到同一个物理文件，只在默认配置层应用一次，并保留首个路径及其相对资源解析基准。其他命令行覆盖层保留原有顺序与覆盖优先级。侧边栏设置写入优先于产品挂载的 profile patch，并在重启后保留；恢复默认值会移除该覆盖项。源码启动忽略打包留下的内嵌运行时暂存文件，解析当前工作区中的包。
 
 层的确切优先级、flag、关闭行为、部署默认值和源码执行方式，以 [CLI 行为参考](reference/README.zh.md)为准。[启动与重载失败表](../../packages/boot/app-boot/README.zh.md#startup-and-reload-failures)对比 optional、required 插件启动失败与配置 HMR 的行为。
 
@@ -94,7 +96,7 @@ TUI 等待共用默认模型服务就绪后才创建首个会话。ChatCode 模
 
 在仓库根目录运行 `pnpm exec vitest run apps/cli/tests/chatcode-rate-limit.spec.ts apps/cli/tests/permission-bypass.spec.ts`，检查重试与启动权限行为。重试测试通过公开包入口挂载已安装的 `dsh-llm-chatcode-config` 插件，并为目录与模型 HTTP 请求提供 fixture 响应。
 
-TUI 适配层使用启动器自身的 schema 运行时校验其声明的动态配置字段，包括旧版 TUI schema 输出的 volatile 元数据，从而保持设置可编辑且不替换正在运行的会话。
+TUI 适配层使用启动器自身的 schema 运行时校验其声明的动态配置字段，包括旧版 TUI schema 输出的 volatile 元数据，从而保持设置可编辑且不替换正在运行的会话。启动器也在激活前规范化固定版本侧边栏的旧 schema，保留其包标识与浏览器模块，使实时编辑更新运行中的值。
 
 发布版 CLI 会直接固定 base/Web 组合包实际引用的所有 Harness 运行时包，以及随附 ChatCode 插件的全部必需 peer。发布时必须让这些依赖保持在同一个 Harness 版本：npm 全局安装不会保留 pnpm workspace 对 peer 的统一解析，否则可能把旧 ABI 提升到顶层并与当前运行时混用。
 

package/lib/bin.js

@@ -327,17 +327,17 @@ async function runCli() {
 			break;
 		}
 		case "plugin": {
-			const { runPlugin } = await import("./plugin-eJjD6r12.js");
+			const { runPlugin } = await import("./plugin-BZdazFXS.js");
 			process.exit(await runPlugin(invocation.profile, invocation.args));
 			break;
 		}
 		case "dump-config": {
-			const { runDumpConfig } = await import("./dump-config-CyopmD85.js");
+			const { runDumpConfig } = await import("./dump-config-CDixiJNt.js");
 			runDumpConfig(invocation.profile, invocation.defaultOnly, invocation.patches, invocation.fromDefaultProfile);
 			break;
 		}
 		case "dump-config-schema": {
-			const { runDumpConfigSchema } = await import("./dump-config-schema-DM0fb6Ns.js");
+			const { runDumpConfigSchema } = await import("./dump-config-schema-BlO-eZ-J.js");
 			await runDumpConfigSchema(invocation.profile, invocation.patches, invocation.fromDefaultProfile);
 			break;
 		}

package/lib/{command-errors-BJ_ZWzUU.js → command-errors-Ca64Lgba.js}

@@ -1,12 +1,12 @@
-import { a as compositionRoot, i as bindCallerEffect, o as concreteService, r as assertCallerContext, t as activationContext } from "./host-access-CMg6rsWt.js";
-import { a as declaresPermission, d as normalizePermissionScope, i as declaresObserverScope, m as scopeCovers, n as componentIdentityOf, o as requireComponentIdentity, p as rawScopeCovers, s as requiresContract, u as INTERCEPT_PERMISSIONS } from "./component-identity-Jb1DYjke.js";
-import { B as createAdmissionCatalog, G as validateSetInput, H as validateDeleteOutput, K as validateSetOutput, L as TUI_DECISION_EVENT_NAMES, M as loadSpecData, N as registryEntries, P as verifyContractProfiles, S as DATA_DIR, U as validateGetInput, V as validateDeleteInput, W as validateGetOutput, X as defineProtocolDeclaration, Y as projectManifest, j as digestFile, p as cleanScalarText, q as validateMessageEvent, x as readGrantStore } from "./extension-events-DKX4LXOd.js";
+import { a as compositionRoot, i as bindCallerEffect, o as concreteService, r as assertCallerContext, t as activationContext } from "./host-access-CLbyAGT5.js";
+import { a as declaresPermission, d as normalizePermissionScope, i as declaresObserverScope, m as scopeCovers, n as componentIdentityOf, o as requireComponentIdentity, p as rawScopeCovers, s as requiresContract, u as INTERCEPT_PERMISSIONS } from "./component-identity-6aEut5Yt.js";
+import { B as createAdmissionCatalog, G as validateSetInput, H as validateDeleteOutput, K as validateSetOutput, L as TUI_DECISION_EVENT_NAMES, M as loadSpecData, N as registryEntries, P as verifyContractProfiles, S as DATA_DIR, U as validateGetInput, V as validateDeleteInput, W as validateGetOutput, X as defineProtocolDeclaration, Y as projectManifest, j as digestFile, p as cleanScalarText, q as validateMessageEvent, x as readGrantStore } from "./extension-events-C7MUpqVE.js";
 import { appendFileSync, mkdirSync, readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { dirname, join } from "node:path";
 import { Service } from "@deepseek-ai/cordis";
 import { withFileLock, writeFileAtomic } from "@deepseek-ai/dsh-atomic-write";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/validate.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/validate.js
 /** Semantic validation layered on the official manifest parser/projection. */
 const coordinateKey$1 = (coordinate) => `${coordinate.apiVersion}#${coordinate.kind}`;
 const groupOf = (apiVersion) => apiVersion.split("/")[0] ?? "";
@@ -124,7 +124,7 @@ function validateHost(index, host) {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/negotiate.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/negotiate.js
 /** Five-state admission decision using dsh-std projection and ProtocolCatalog. */
 const coordinateKey = (ref) => `${ref.apiVersion}#${ref.kind}`;
 function negotiate(index, manifest, host, grants = []) {
@@ -197,7 +197,7 @@ function negotiate(index, manifest, host, grants = []) {
 	} : { decision: "compatible" };
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/schema-check.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/schema-check.js
 /**
 * 零依赖 JSON Schema 校验器——上游 `conformance/tests/run.js` 的 check()
 * 的保真 TS 移植。刻意只实现 vendored schemas 用到的子集：本地 $ref、
@@ -301,7 +301,7 @@ function check(value, schema, rootSchema = schema, where = "$") {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/host-descriptor.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/host-descriptor.js
 /** Build the current ChatCode CLI TUI Host Descriptor from the pinned admission profile. */
 const HOST_SUPPORTED_CONTRACTS = Object.freeze([
 	{
@@ -453,7 +453,7 @@ function buildHostDescriptor(options) {
 	});
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/effect-ledger.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/effect-ledger.js
 /**
 * Effect ledger (C-060): an append-only JSONL journal of plugin-visible
 * effects at `~/.chatcode-cli/tui/effect-ledger.jsonl`, mounted by the
@@ -645,7 +645,7 @@ function resumeSequence(file) {
 	return max + 1;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/plugin-storage.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/plugin-storage.js
 /**
 * storage.local contract surface (C-040, `storage.dsh/v1alpha1#LocalStorage`):
 * per-plugin private persistence, mounted by the dsh-tui-plugin-host row as
@@ -986,7 +986,7 @@ var TuiPluginStorageRuntime = class extends Service {
 	}
 };
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/message-observer.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/message-observer.js
 /**
 * messages.observe contract surface (C-042,
 * `messages.dsh/v1alpha1#MessageObserver`): the host event broker, mounted
@@ -1494,7 +1494,7 @@ function observerStateFor(runtime) {
 	return state;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/command-attribution.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/command-attribution.js
 /**
 * Command ownership attribution — the data source for the C-041 invoke
 * checkpoint's per-owner grant decision.
@@ -1572,7 +1572,7 @@ function commandOwner(ctx, definition) {
 	return ownerMaps.get(key)?.get(handler);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/command-errors.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/command-errors.js
 /**
 * commands contract error-code alignment (C-041,
 * `commands.dsh/v1alpha1#Command`): the official `dsh-commands` runtime

package/lib/{command-trees-C9b7-bci.js → command-trees-CVc4Xu_z.js}

@@ -1,6 +1,6 @@
-import { a as compositionRoot, i as bindCallerEffect, n as activationFiber, o as concreteService, s as requirePluginCaller } from "./host-access-CMg6rsWt.js";
+import { a as compositionRoot, i as bindCallerEffect, n as activationFiber, o as concreteService, s as requirePluginCaller } from "./host-access-CLbyAGT5.js";
 import { Service } from "@deepseek-ai/cordis";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/command-trees.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/command-trees.js
 /** Provider-neutral subcommand completion registry for terminal front doors. */
 const name = "dsh-tui-command-trees";
 /** Small host-only registry; command execution remains owned by dsh-commands. */

package/lib/{component-identity-Jb1DYjke.js → component-identity-6aEut5Yt.js}

@@ -1,6 +1,6 @@
-import { i as bindCallerEffect, n as activationFiber } from "./host-access-CMg6rsWt.js";
+import { i as bindCallerEffect, n as activationFiber } from "./host-access-CLbyAGT5.js";
 import { randomUUID } from "node:crypto";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/permission-scope.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/permission-scope.js
 /** Permission scope normalization shared by admission and runtime checks. */
 const STORAGE_PERMISSIONS = new Set(["storage.local.read", "storage.local.write"]);
 const INTERCEPT_PERMISSIONS = new Set([
@@ -76,7 +76,7 @@ function rawScopeCovers(permission, declared, actual, componentId) {
 	return normalizedDeclared !== void 0 && normalizedActual !== void 0 && permissionScopeCovers(permission, normalizedDeclared, normalizedActual);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/component-identity.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/component-identity.js
 /** Verified Component identity bound to one Cordis activation owner. */
 var ComponentIdentityError = class extends Error {
 	code;

package/lib/dump-config-CDixiJNt.js

@@ -0,0 +1,2 @@
+import { n as runDumpConfig } from "./dump-config-ZzrfvtnX.js";
+export { runDumpConfig };

package/lib/{dump-config-BcH-VYuv.js → dump-config-ZzrfvtnX.js}

@@ -1,4 +1,4 @@
-import { a as chatCodeProfilePatchFiles, f as prepareProfile, g as uniqueProfilePatchFiles, i as PROFILE_ROOT_FILENAME, s as homePatchPath } from "./profile-boot-BNQry1NM.js";
+import { c as homePatchPath, i as PROFILE_ROOT_FILENAME, o as chatCodeProfilePatchLayers, p as prepareProfile } from "./profile-boot-B0aEEQIR.js";
 import { existsSync } from "node:fs";
 import { loadOptionalPatches, loadOverlayPatches, renderConfigDump, resolveHomePatchConfigs } from "@deepseek-ai/dsh-app-boot";
 import { join } from "node:path";
@@ -7,7 +7,7 @@ import { join } from "node:path";
 * Config-dump entry for `dsh --profile <name> --dump-config`: compose the
 * profile's patch layers through the include plugin's patch algorithm without
 * booting or evaluating `!!js`, with one source layer per bundle, the
-* profile and home patch files, ChatCode product overlays, and each `--patch`
+* ChatCode product defaults, profile and home patch files, and each `--patch`
 * overlay.
 * @module @deepseek-ai/dsh/dump-config
 */
@@ -28,8 +28,8 @@ function runDumpConfig(profile, defaultOnly, patches, fromDefaultProfile) {
 	process.stdout.write(renderConfigDump(NAME, join(loaded.dir, PROFILE_ROOT_FILENAME), layers));
 }
 /**
-* Read dump layers in bundle, profile, home, then argv order without composing them.
-* @param profileName - the profile name used to select ChatCode product overlays.
+* Read dump layers in bundle, product defaults, profile, home, then argv order without composing them.
+* @param profileName - the profile name used to select ChatCode product defaults.
 * @param loaded - prepared profile and parsed bundle and profile patches.
 * @param defaultOnly - omit profile, home, and argv layers without reading their files.
 * @param patches - overlay paths relative to the invoking directory, in argv order.
@@ -41,6 +41,11 @@ function collectConfigDumpLayers(profileName, loaded, defaultOnly, patches) {
 		patches: layer.patches
 	}));
 	if (!defaultOnly) {
+		const files = chatCodeProfilePatchLayers(profileName, patches);
+		for (const absolute of files.defaults) layers.push({
+			label: absolute,
+			patches: loadOverlayPatches(NAME, absolute)
+		});
 		if (existsSync(loaded.patchPath)) layers.push({
 			label: loaded.patchPath,
 			patches: loaded.patches
@@ -51,8 +56,7 @@ function collectConfigDumpLayers(profileName, loaded, defaultOnly, patches) {
 			label: homePatchFile,
 			patches: resolveHomePatchConfigs(NAME, layers.flatMap((layer) => layer.patches), homePatches)
 		});
-		const productPatches = chatCodeProfilePatchFiles(profileName);
-		for (const absolute of uniqueProfilePatchFiles([...productPatches, ...patches])) layers.push({
+		for (const absolute of files.overlays) layers.push({
 			label: absolute,
 			patches: loadOverlayPatches(NAME, absolute)
 		});

package/lib/{dump-config-schema-DM0fb6Ns.js → dump-config-schema-BlO-eZ-J.js}

@@ -1,5 +1,5 @@
-import { f as prepareProfile, r as INSTALL_ANCHOR } from "./profile-boot-BNQry1NM.js";
-import { t as collectConfigDumpLayers } from "./dump-config-BcH-VYuv.js";
+import { p as prepareProfile, r as INSTALL_ANCHOR } from "./profile-boot-B0aEEQIR.js";
+import { t as collectConfigDumpLayers } from "./dump-config-ZzrfvtnX.js";
 import { generateConfigSchema } from "@deepseek-ai/dsh-app-boot";
 //#region lib/types/dump-config-schema.js
 /**

package/lib/{extension-events-DKX4LXOd.js → extension-events-C7MUpqVE.js}

@@ -1,12 +1,12 @@
 import { i as __toESM, t as __commonJSMin } from "./rolldown-runtime-2rV9d50f.js";
-import { a as compositionRoot, i as bindCallerEffect } from "./host-access-CMg6rsWt.js";
-import { c as requiresDecisionEvents, d as normalizePermissionScope, f as permissionScopeCovers, l as INTERCEPT_EVENT_SCOPE_BY_PERMISSION, n as componentIdentityOf } from "./component-identity-Jb1DYjke.js";
+import { a as compositionRoot, i as bindCallerEffect } from "./host-access-CLbyAGT5.js";
+import { c as requiresDecisionEvents, d as normalizePermissionScope, f as permissionScopeCovers, l as INTERCEPT_EVENT_SCOPE_BY_PERMISSION, n as componentIdentityOf } from "./component-identity-6aEut5Yt.js";
 import { existsSync, readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { homedir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { createHash } from "node:crypto";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/core/lib/index.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/core/lib/index.js
 function protocolKey(reference) {
 	return `${reference.apiVersion}\0${reference.kind}`;
 }
@@ -408,7 +408,7 @@ function comparePrerelease(left, right) {
 	return 0;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/manifest/lib/index.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/manifest/lib/index.js
 const COMPONENT_API_VERSION = "manifest.dsh/internal/v1alpha1";
 const COMMUNITY_PERMISSION_API_VERSION = "community.dsh/v1alpha1";
 const COMMUNITY_PERMISSION_KIND = "Permission";
@@ -1012,7 +1012,7 @@ function canonical(value) {
 	return JSON.stringify(value) ?? "null";
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/connection/lib/resolve-3X6ausgz.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/connection/lib/resolve-3X6ausgz.js
 /** Reusable RPC-shaped protocol definition. Domain packages opt into these semantics explicitly. */
 function defineCapabilityProtocol(options) {
 	const definition = {
@@ -1068,7 +1068,7 @@ function isConnectionPolicy(value) {
 	return typeof value === "object" && value !== null && typeof value.endpointByParticipant === "object" && value.endpointByParticipant !== null;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/presentation/lib/callback.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/presentation/lib/callback.js
 const EXTERNAL_REDIRECT_KIND = "ExternalRedirect";
 const emptySpec$3 = (value) => {
 	if (value !== void 0) throw new TypeError("ExternalRedirect does not accept spec in v1alpha1");
@@ -1084,7 +1084,7 @@ Object.freeze({
 	kind: EXTERNAL_REDIRECT_KIND
 });
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/presentation/lib/index.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/presentation/lib/index.js
 const API_VERSION$3 = "presentation.dsh/v1alpha1";
 const OPEN_EXTERNAL_KIND = "OpenExternal";
 const COPY_TEXT_KIND = "CopyText";
@@ -1261,7 +1261,7 @@ function deepFreeze(value) {
 	return value;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/command/lib/index.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/command/lib/index.js
 const API_VERSION$2 = "commands.dsh/v1alpha1";
 const KIND$2 = "Command";
 const RUNTIME_KIND = "CommandRuntime";
@@ -1455,7 +1455,7 @@ function exact(value, allowed, label) {
 	if (unknown.length > 0) throw new TypeError(`${label} contains unknown field ${JSON.stringify(unknown[0])}`);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/messages/lib/index.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/messages/lib/index.js
 const API_VERSION$1 = "messages.dsh/v1alpha1";
 const KIND$1 = "MessageObserver";
 const EVENT_TYPE = "messages.observe";
@@ -1588,7 +1588,7 @@ function record(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/storage/lib/index.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/node_modules/@dsh-std/storage/lib/index.js
 const API_VERSION = "storage.dsh/v1alpha1";
 const KIND = "LocalStorage";
 const protocol = Object.freeze({
@@ -1687,7 +1687,7 @@ function key(value, label) {
 	if (typeof value !== "string" || value.length === 0) throw new TypeError(`${label} must be a non-empty string`);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/dsh-ecosystem-spec/protocols/tui-channel.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/dsh-ecosystem-spec/protocols/tui-channel.js
 const TUI_CHANNEL = Object.freeze({
 	apiVersion: "tui.dsh/v1alpha1",
 	kind: "Channel"
@@ -1759,7 +1759,7 @@ function nonEmpty(value, label) {
 	if (typeof value !== "string" || value.trim() === "") throw new TypeError(`${label} must be a non-empty string`);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/tui-extension.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/tui-extension.js
 /** ChatCode CLI TUI private protocol registration on the shared dsh-std catalog. */
 const TUI_EXTENSION_API_VERSION = "tui.dsh/v1alpha1";
 const DECISION_EVENTS_COORDINATE = Object.freeze({
@@ -1828,7 +1828,7 @@ function createAdmissionCatalog() {
 	};
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/registry.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/plugin-spec/registry.js
 /** Load and verify the pinned ChatCode CLI TUI admission profile. */
 const REGISTRY_FILE = join("registry", "registry-0.15.json");
 const EXPECTED_PROFILE_VERSION = "tui-admission/0.15";
@@ -2043,7 +2043,7 @@ function verifyContractProfiles(data) {
 	return failures;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/utils/paths.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/utils/paths.js
 const CHATCODE_CLI_HOME_ENV = "CHATCODE_CLI_HOME";
 const LEGACY_DSH_HOME_ENV = "DSH_HOME";
 const CHATCODE_CLI_TUI_ENV_PREFIX = "CHATCODE_CLI_TUI_";
@@ -2145,7 +2145,7 @@ function detectLegacyEnv(env = process.env) {
 	return Object.keys(RENAMED_ENV).filter((name) => env[name] !== void 0);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/grants.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/grants.js
 /** Live, scoped plugin grant evaluation. */
 const EXTENSION_GRANTS_FILE = "extension-grants.json";
 function parseRule(value) {
@@ -3020,7 +3020,7 @@ function stripAnsi(string) {
 	return string.replace(regex, "");
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/utils/intl.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/utils/intl.js
 let graphemeSegmenter;
 /**
 * Memoized `Intl.Segmenter` with grapheme granularity, used by the ported Ink
@@ -3031,7 +3031,7 @@ function getGraphemeSegmenter() {
 	return graphemeSegmenter ??= new Intl.Segmenter("en", { granularity: "grapheme" });
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/ink/stringWidth.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/ink/stringWidth.js
 const EMOJI_REGEX = (0, import_emoji_regex.default)();
 /**
 * Fallback JavaScript implementation of stringWidth when Bun.stringWidth is not available.
@@ -3253,7 +3253,7 @@ const BUN_STRING_WIDTH_OPTS = { ambiguousIsNarrow: true };
 */
 const stringWidth = bunStringWidth ? (str) => bunStringWidth(str, BUN_STRING_WIDTH_OPTS) : stringWidthJavaScript;
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/sanitize.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/sanitize.js
 /**
 * The render-path sanitization contract for plugin-supplied text — the
 * single implementation behind every managed-UI seam (dialogs, status line,
@@ -3312,7 +3312,7 @@ function flattenInline(value) {
 	return value.replace(/[\x00-\x1f\x7f-\x9f]/g, " ");
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/decision-guard.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/decision-guard.js
 /**
 * RFC 0005 D-7 enforcement: subscribing to an intercept-class (decision)
 * event requires an explicit host-side grant — default deny.
@@ -3564,7 +3564,7 @@ function installDecisionGuard(ctx, grants) {
 	});
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/extension-events.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/extension-events.js
 /**
 * Decision-point events the TUI fires on the cordis bus so plugins can
 * intercept, cancel, or customize interactive flows — the `session_before_*`

package/lib/headless-compat.js

@@ -1,7 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { readFile } from "node:fs/promises";
+import Schema from "@deepseek-ai/schemastery";
 import { brandString } from "@deepseek-ai/dsh-brand";
-import z from "@deepseek-ai/schemastery";
 import * as upstreamRunner from "@deepseek-ai/dsh-headless";
 import { installModelSelection } from "@deepseek-ai/dsh-agent";
 import { ReasoningEffortId, createUserMessage } from "@deepseek-ai/dsh-llm";
@@ -47,36 +47,36 @@ const internals = {
 * @module @chatcode/chatcode-cli-test/headless-compat/options
 */
 /** Runtime schema for profile overlays that configure the legacy print row directly. */
-const LegacyPrintOptionsSchema = z.object({
-	print: z.boolean(),
-	stdin: z.boolean(),
-	outputFormat: z.union([
+const LegacyPrintOptionsSchema = Schema.object({
+	print: Schema.boolean(),
+	stdin: Schema.boolean(),
+	outputFormat: Schema.union([
 		"text",
 		"json",
 		"stream-json"
 	]),
-	inputFormat: z.union(["text", "stream-json"]),
-	verbose: z.boolean(),
-	replayUserMessages: z.boolean(),
-	includePartialMessages: z.boolean(),
-	model: z.string(),
-	effort: z.string(),
-	allowedTools: z.array(z.string()).default(void 0),
-	availableTools: z.array(z.string()).default(void 0),
-	disallowedTools: z.array(z.string()).default(void 0),
-	systemPrompt: z.string(),
-	systemPromptFile: z.string(),
-	appendSystemPrompt: z.string(),
-	appendSystemPromptFile: z.string(),
-	permissionMode: z.string(),
-	dangerouslySkipPermissions: z.boolean(),
-	continueSession: z.boolean(),
-	resume: z.string(),
-	forkSession: z.boolean(),
-	sessionPersistence: z.boolean(),
-	maxTurns: z.number(),
-	maxBudgetUsd: z.number(),
-	jsonSchema: z.string()
+	inputFormat: Schema.union(["text", "stream-json"]),
+	verbose: Schema.boolean(),
+	replayUserMessages: Schema.boolean(),
+	includePartialMessages: Schema.boolean(),
+	model: Schema.string(),
+	effort: Schema.string(),
+	allowedTools: Schema.array(Schema.string()).default(void 0),
+	availableTools: Schema.array(Schema.string()).default(void 0),
+	disallowedTools: Schema.array(Schema.string()).default(void 0),
+	systemPrompt: Schema.string(),
+	systemPromptFile: Schema.string(),
+	appendSystemPrompt: Schema.string(),
+	appendSystemPromptFile: Schema.string(),
+	permissionMode: Schema.string(),
+	dangerouslySkipPermissions: Schema.boolean(),
+	continueSession: Schema.boolean(),
+	resume: Schema.string(),
+	forkSession: Schema.boolean(),
+	sessionPersistence: Schema.boolean(),
+	maxTurns: Schema.number(),
+	maxBudgetUsd: Schema.number(),
+	jsonSchema: Schema.string()
 });
 //#endregion
 //#region lib/types/headless-compat-protocol.js
@@ -744,10 +744,10 @@ const inject = [
 	"agents",
 	"sessions"
 ];
-const Config = z.object({
-	task: z.string(),
-	sessionId: z.string(),
-	json: z.boolean(),
+const Config = Schema.object({
+	task: Schema.string(),
+	sessionId: Schema.string(),
+	json: Schema.boolean(),
 	legacy: LegacyPrintOptionsSchema.default(void 0)
 });
 /** Aggregate the last assistant text and turn outcome in one owned interval. */

package/lib/{host-access-CMg6rsWt.js → host-access-CLbyAGT5.js}

@@ -1,6 +1,6 @@
 import { Context, Fiber } from "@deepseek-ai/cordis";
 import { AsyncLocalStorage } from "node:async_hooks";
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/host-access.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/dsh-adapter/host-access.js
 /**
 * Recover the concrete Cordis service for host-only adapters.
 *

package/lib/{keymap-CrC4pSNH.js → keymap-82JwLLHe.js}

@@ -1,4 +1,4 @@
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/utils/modifiers.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/utils/modifiers.js
 /**
 * Cross-platform modifier-key helpers. Windows/Linux muscle memory uses
 * Ctrl+<key>; on macOS the same action maps to Cmd+<key>. Terminals deliver
@@ -39,7 +39,7 @@ function isPlainReturnInput(input, key) {
 	return /^[\r\n]+$/u.test(input) && !key.ctrl && !key.meta && !key.shift && !key.super;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.20_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/utils/keymap.js
+//#region ../../node_modules/.pnpm/@chatcode+cco-tui@0.10.0-rc.21_08ea48c8555976e562c6368d51cb542b/node_modules/@chatcode/cco-tui/lib/types/utils/keymap.js
 /**
 * Built-in keyboard-shortcut keymap: the shared combo grammar, the action
 * registry, and the live override cache behind `/settings` customization.

package/lib/{plugin-eJjD6r12.js → plugin-BZdazFXS.js}

@@ -1,4 +1,4 @@
-import { r as INSTALL_ANCHOR, t as CHATCODE_PROFILE_TEMPLATES } from "./profile-boot-BNQry1NM.js";
+import { r as INSTALL_ANCHOR, t as CHATCODE_PROFILE_TEMPLATES } from "./profile-boot-B0aEEQIR.js";
 import { existsSync } from "node:fs";
 import { DEFAULT_PROFILE_BUNDLES, initProfile, readProfileCompatibility, resolveProfileDir } from "@deepseek-ai/dsh-app-boot";
 import { join } from "node:path";