@deepseek-ai/dsh-client-ui-commands 0.1.0-rc.7 → 0.1.0-rc.8

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/client/ui-commands/README.md
-README.md: 67110ffd8c1ad11e56ca9293a9064c66dd08c81d
-README.zh.md: 40fe21850dd289d2a5c91bd88d4f22c087731b80
+README.md: 2140495a44110d5e4b33e4cc8f539959752ac185
+README.zh.md: afa47cd18505b9afbd3e867d131e9796db598895

package/README.md

@@ -8,6 +8,8 @@ Client command API (`ctx.commandUi`): the session-keyed command-directory cache,
 
 `CommandDirectory` (`src/client/directory.ts`) is the one wire-derived cache, keyed by session. Ordinary sessions fetch through `command.list({sessionId})`, and the source's scope-birth `warm` hook prewarms the session's entry. Catalog-addressed continuable children resolve an empty command directory locally: `command.list` is Agent-bound, so prewarming it would activate a child merely to view persisted history. Entries are soft-invalidated by the forwarded `commands/change` owner event (old snapshots serve while the repull flies) and by forwarded `agent-preset/selected` for that one session (recomposing an agent registers nothing, so the registry-wide signal never fires for it), hard-invalidated by `connection/reset`, and epoch-guarded so a superseded pull can never overwrite a newer one. `matchSpace` answers synchronously from this cache only; `matchEnter` strong-waits it on the SubmitAttempt signal and rejects on warmup failure — a `/` line is never silently downgraded to a plain prompt.
 
+`matchEnter` also enforces the submission envelope: when the composer submits with image attachments, only a host command declaring `input.images` proceeds (its claim carries `images: true` and its submit forwards the serialized payloads to `command.execute`); every other command route — contribution popup, decorated popup, non-declaring claim, bare detached execute — throws the localized `notice.imagesUnsupported` refusal, which the input machine publishes as one error notice and the composer renders as a transient Toast banner with the draft and images retained. An image-carrying submit whose host handler answers an error result maps to an error outcome so the composer keeps the images; imageless submits keep the plain success mapping because the durable flow node owns the outcome rendering.
+
 After `command.execute` returns a matched command result, this browser emits local `command/executed(sessionId, name, result)`. Other clients receive the durable command nodes through the Host event stream but never this acknowledgment, so a browser-only side effect can select successful results from the client that submitted the command without treating Session replay as an action request. Listener failures are logged and contained one by one; they cannot change the already-admitted command result or prevent later listeners from running.
 
 Menu queries fuzzy-match ordered, case-insensitive subsequences of command names. Prefixes rank first; separator boundaries, adjacent characters, and shorter gaps rank the remaining matches, with directory and contribution order breaking ties. This affects discovery only: space and Enter still require an exact command name. Rationale: [Web slash-command fuzzy discovery](../../../.agents/notes/implemented/feature/2026-08-04-web-slash-command-fuzzy-discovery.md).

package/README.zh.md

@@ -8,6 +8,8 @@
 
 `CommandDirectory`（`src/client/directory.ts`）是唯一的 wire 派生缓存，以会话为 key。普通会话通过 `command.list({sessionId})` 拉取，source 的 scope 出生 `warm` 钩子会预热该会话的缓存项。由目录寻址的可继续子代理会在客户端解析为空命令目录：`command.list` 绑定 Agent，若预热它，就会仅因查看持久化历史而激活子代理。缓存项由转发的 owner 事件 `commands/change` 软失效（重拉在途期间旧快照继续服务），也由转发的 `agent-preset/selected` 对该会话单独软失效（重组 agent 不产生任何注册，注册表级信号不会为它触发），由 `connection/reset` 硬失效，并以 epoch 把关，被取代的旧拉取永远无法覆盖更新的结果。`matchSpace` 只凭该缓存同步应答；`matchEnter` 在 SubmitAttempt 信号上强等缓存，预热失败即拒绝——`/` 开头的一行绝不会被静默降级为普通提示词。
 
+`matchEnter` 还强制执行提交信封：composer 携带图片附件提交时，只有声明了 `input.images` 的宿主命令继续（其 claim 携带 `images: true`，其 submit 把序列化载荷转交 `command.execute`）；其余每条命令路径——contribution 弹窗、decoration 弹窗、未声明的 claim、bare 分离执行——都会抛出本地化的 `notice.imagesUnsupported` 拒绝，输入状态机发布一条错误通知，composer 以瞬态 Toast 横幅呈现它，草稿与图片原样保留。带图提交若宿主处理器返回错误结果，则映射为错误 outcome，composer 保留图片；不带图的提交维持原有的一律成功映射，因为结果呈现由持久化 flow 节点负责。
+
 `command.execute` 返回已匹配的命令结果后，当前浏览器会发布本地 `command/executed(sessionId, name, result)`。其他客户端只会通过 Host 事件流收到持久命令节点，不会收到这条确认，因此浏览器专属副作用可以筛选由实际提交命令的客户端收到的成功结果，而不会把 Session 回放当成操作请求。监听器失败会逐项记录并隔离，不会改变已经准入的命令结果，也不会阻止后续监听器运行。
 
 菜单查询会按顺序且不区分大小写地模糊匹配命令名的子序列。前缀排名最高；其余匹配项按分隔符边界优先、相邻字符优先、间隔越短越优先的规则排序，若仍同分，则以目录顺序和贡献项顺序打破平局。此行为只影响命令发现：space 和 Enter 仍要求命令名精确匹配。原理：[Web 斜杠命令模糊发现](../../../.agents/notes/implemented/feature/2026-08-04-web-slash-command-fuzzy-discovery.md)。

package/lib/client.js

@@ -500,12 +500,17 @@ window.__ModuleLoader__.load({
 				decorations: /* @__PURE__ */ new Map(),
 				popups: /* @__PURE__ */ new Map()
 			};
+			/** `command`-namespace translator (composer refusal notices). */
+			t;
 			/**
 			* @param ctx - owning root context (plugin fiber; the service registers
 			* itself as `command` and follows that fiber's lifetime).
 			*/
 			constructor(ctx) {
 				super(ctx, "commandUi");
+				const locale = ctx.get("locale");
+				if (locale === void 0) throw new Error("ui-commands: locale service unavailable");
+				this.t = locale.bind("command");
 				this.directory = new CommandDirectory(async (sessionId) => {
 					if (this.sessions().subagentAddress(sessionId) !== void 0) return [];
 					const result = await ctx.remote.commands.list(sessionId);
@@ -520,7 +525,7 @@ window.__ModuleLoader__.load({
 					candidates: (session, req) => this.candidates(session, req),
 					onPick: (pick) => this.dispatch(pick),
 					matchSpace: (session, token) => this.matchSpace(session, token),
-					matchEnter: (session, line, signal) => this.matchEnter(session, line, signal),
+					matchEnter: (session, line, signal, envelope) => this.matchEnter(session, line, signal, envelope),
 					warm: (session) => {
 						this.directory.warm(session.sessionId);
 					}
@@ -687,8 +692,14 @@ window.__ModuleLoader__.load({
 			* warmup failure rejects — never a silent downgrade). Contributions and
 			* bare host commands act on the bare token only; leadingInput claims
 			* args-tolerant.
+			*
+			* Envelope policy: an enter submission carrying images resolves only
+			* through a command declaring image acceptance. Every other command route —
+			* popup, non-accepting claim, bare detached execute — throws the refusal
+			* so the machine surfaces one composer notice and the draft and images
+			* stay in place; nothing executes and nothing is dropped.
 			*/
-			async matchEnter(session, line, signal) {
+			async matchEnter(session, line, signal, envelope) {
 				const trimmed = line.trim();
 				if (!trimmed.startsWith("/")) return void 0;
 				const ws = trimmed.search(/\s/);
@@ -696,9 +707,13 @@ window.__ModuleLoader__.load({
 				const bare = ws === -1;
 				const name = token.slice(1);
 				if (name === "") return void 0;
+				const refuseImages = () => {
+					throw new Error(this.t("notice.imagesUnsupported", { command: name }));
+				};
 				const contribution = this.live.contributions.get(name);
 				if (contribution !== void 0 && contribution.available(session)) {
 					if (!bare) return void 0;
+					if (envelope.images > 0) refuseImages();
 					this.openPopup(name, contribution.ui, session, {
 						via: "enter",
 						token
@@ -711,6 +726,7 @@ window.__ModuleLoader__.load({
 				if (bare) {
 					const decoration = this.live.decorations.get(name);
 					if (decoration !== void 0 && decoration.available(session)) {
+						if (envelope.images > 0) refuseImages();
 						this.openPopup(name, decoration.ui, session, {
 							via: "enter",
 							token
@@ -718,8 +734,12 @@ window.__ModuleLoader__.load({
 						return "handled";
 					}
 				}
-				if (desc.input !== void 0) return { claim: this.leadingClaim(desc, session) };
+				if (desc.input !== void 0) {
+					if (envelope.images > 0 && desc.input.images !== true) refuseImages();
+					return { claim: this.leadingClaim(desc, session) };
+				}
 				if (!bare) return void 0;
+				if (envelope.images > 0) refuseImages();
 				this.consumeVia(session.sessionId, {
 					via: "enter",
 					token
@@ -739,7 +759,8 @@ window.__ModuleLoader__.load({
 				return {
 					token,
 					...desc.input !== void 0 ? { hint: desc.input.hint } : {},
-					submit: (args, _actx) => this.execute(session, token + args)
+					...desc.input?.images === true ? { images: true } : {},
+					submit: (args, _actx, images) => this.execute(session, token + args, images)
 				};
 			}
 			/**
@@ -749,16 +770,22 @@ window.__ModuleLoader__.load({
 			* plain success regardless of its handler outcome, because the host
 			* executor durably logged the lifecycle (`command/run`/`command/done`) and
 			* the outcome renders as a persistent flow node — the composer never
-			* echoes it. Transport failures throw.
+			* echoes it. A handler error result reports an error outcome so the
+			* composer keeps the submission (draft and images) for correction.
+			* Transport failures throw.
 			*/
-			async execute(session, line) {
-				const result = await this.ctx.remote.commands.execute(session.sessionId, line);
+			async execute(session, line, images = []) {
+				const result = await this.ctx.remote.commands.execute(session.sessionId, line, images);
 				if (!result.ok) throw new Error(`command.execute failed: ${result.error.code}: ${result.error.message}`);
 				if (result.value === void 0) return {
 					kind: "error",
 					text: `unknown or malformed command: ${line}`
 				};
 				this.notifyExecuted(session.sessionId, submittedCommandName(line), result.value.result);
+				if (images.length > 0 && result.value.result.kind === "error") return {
+					kind: "error",
+					text: result.value.result.text
+				};
 				return { kind: "success" };
 			}
 			/** Publish the local acknowledgment without letting an observer change command admission. */
@@ -855,18 +882,18 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var PopupSelectView_module_css_default = {
-			"rowActive": "mufS8W_rowActive",
-			"label": "mufS8W_label",
-			"search": "mufS8W_search",
+			"card": "mufS8W_card",
+			"check": "mufS8W_check",
+			"detail": "mufS8W_detail",
 			"error": "mufS8W_error",
 			"errorText": "mufS8W_errorText",
-			"check": "mufS8W_check",
+			"label": "mufS8W_label",
 			"retry": "mufS8W_retry",
 			"row": "mufS8W_row",
-			"card": "mufS8W_card",
-			"viewport": "mufS8W_viewport",
-			"detail": "mufS8W_detail",
-			"status": "mufS8W_status"
+			"rowActive": "mufS8W_rowActive",
+			"search": "mufS8W_search",
+			"status": "mufS8W_status",
+			"viewport": "mufS8W_viewport"
 		};
 		//#endregion
 		//#region lib/types/client/PopupSelectView.js
@@ -1047,7 +1074,8 @@ window.__ModuleLoader__.load({
 			"status.applying": "正在应用…",
 			"status.empty": "无选项",
 			"overlay.aria": "/{command} 选项",
-			"listbox.aria": "/{command} 匹配项"
+			"listbox.aria": "/{command} 匹配项",
+			"notice.imagesUnsupported": "/{command} 不接受图片附件，请先移除图片"
 		};
 		/** English dictionary, checked complete against the zh key set. */
 		const en = {
@@ -1057,7 +1085,8 @@ window.__ModuleLoader__.load({
 			"status.applying": "Applying…",
 			"status.empty": "No options",
 			"overlay.aria": "/{command} options",
-			"listbox.aria": "/{command} matches"
+			"listbox.aria": "/{command} matches",
+			"notice.imagesUnsupported": "/{command} does not accept image attachments; remove them first"
 		};
 		//#endregion
 		//#region lib/types/client/index.js

package/lib/types/client/locales.d.ts

@@ -8,6 +8,7 @@ export declare const zh: {
     'status.empty': string;
     'overlay.aria': string;
     'listbox.aria': string;
+    'notice.imagesUnsupported': string;
 };
 /** The command namespace key union. */
 export type CommandKey = keyof typeof zh;
@@ -20,5 +21,6 @@ export declare const en: {
     'status.empty': string;
     'overlay.aria': string;
     'listbox.aria': string;
+    'notice.imagesUnsupported': string;
 };
 //# sourceMappingURL=locales.d.ts.map

package/lib/types/client/service.d.ts

@@ -33,6 +33,8 @@ export declare class CommandUiRuntime extends Service implements CommandUiContra
     static inject: string[];
     private readonly directory;
     private readonly live;
+    /** `command`-namespace translator (composer refusal notices). */
+    private readonly t;
     /**
      * @param ctx - owning root context (plugin fiber; the service registers
      * itself as `command` and follows that fiber's lifetime).
@@ -81,6 +83,12 @@ export declare class CommandUiRuntime extends Service implements CommandUiContra
      * warmup failure rejects — never a silent downgrade). Contributions and
      * bare host commands act on the bare token only; leadingInput claims
      * args-tolerant.
+     *
+     * Envelope policy: an enter submission carrying images resolves only
+     * through a command declaring image acceptance. Every other command route —
+     * popup, non-accepting claim, bare detached execute — throws the refusal
+     * so the machine surfaces one composer notice and the draft and images
+     * stay in place; nothing executes and nothing is dropped.
      */
     private matchEnter;
     /** Open the session's popup for one contribution or decoration (menu pick / bare enter). */
@@ -94,7 +102,9 @@ export declare class CommandUiRuntime extends Service implements CommandUiContra
      * plain success regardless of its handler outcome, because the host
      * executor durably logged the lifecycle (`command/run`/`command/done`) and
      * the outcome renders as a persistent flow node — the composer never
-     * echoes it. Transport failures throw.
+     * echoes it. A handler error result reports an error outcome so the
+     * composer keeps the submission (draft and images) for correction.
+     * Transport failures throw.
      */
     private execute;
     /** Publish the local acknowledgment without letting an observer change command admission. */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-client-ui-commands",
   "description": "Client command surface: global directory cache, '/' source, three command UI kinds, popupSelect registry",
-  "version": "0.1.0-rc.7",
+  "version": "0.1.0-rc.8",
   "publishConfig": {
     "access": "public"
   },
@@ -46,33 +46,30 @@
     "clsx": "^2.0.0"
   },
   "peerDependencies": {
-    "react": "^18.2.0",
-    "@deepseek-ai/dsh-api-remotes": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-runtime": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.7",
-    "@deepseek-ai/cordis": "^4.0.1"
+    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-api-remotes": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-runtime": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-commands": "^0.1.0-rc.8",
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.8"
   },
   "devDependencies": {
     "@types/react": "~18.3.1",
     "react": "^18.2.0",
-    "@deepseek-ai/dsh-api-remotes": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-connection": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-runtime": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-test-runtime": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.7",
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.7"
+    "@deepseek-ai/dsh-api-remotes": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-connection": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-runtime": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-test-runtime": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-commands": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.8",
+    "@deepseek-ai/cordis": "^4.0.1"
   },
   "files": [
     "lib/index.js",