@deepseek-harness-tui/dsh-tui 0.10.0 → 0.10.2

package/lib/types/dsh-adapter/plugin-storage.js

@@ -32,15 +32,20 @@
  *   cleanup rule); later calls on a closed handle fail STORAGE_UNAVAILABLE.
  * - privacyClass: sensitive — keys AND values are never logged.
  */
-import { mkdirSync, readFileSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, rmdirSync, unlinkSync } from 'node:fs';
 import { join } from 'node:path';
 import { writeFileAtomic, withFileLock } from '@deepseek-ai/dsh-atomic-write';
 import { Service } from '@deepseek-ai/cordis';
-import { validateDeleteInput, validateGetInput, validateSetInput, validateGetOutput, validateSetOutput, validateDeleteOutput, } from '@dsh-std/storage';
+import { validateDeleteInput, validateGetInput, validateSetInput, validateGetOutput, validateSetOutput, validateDeleteOutput, } from '../adapter/standard/protocols.js';
 import { DATA_DIR } from '../utils/paths.js';
+import { assertCapabilityShadowPolicy, } from '../adapter/kernel/runtime.js';
+import { adapterRuntimeFor } from '../adapter/kernel/runtime-context.js';
 import { activationContext, assertCallerContext, bindCallerEffect, compositionRoot, concreteService } from './host-access.js';
+import { registerStorageLiveProbe } from '../adapter/kernel/host-probe-access.js';
 import { declaresPermission, requireComponentIdentity, requiresContract } from './component-identity.js';
-import { readGrantStore } from './grants.js';
+import { readGrantStore } from '../adapter/standard/grants.js';
+import { getHostGrantStore } from './host-grants.js';
 /** Quota: max distinct keys per namespace. */
 export const STORAGE_MAX_KEYS = 256;
 /** Quota: max serialized file size per namespace (bytes). */
@@ -216,11 +221,17 @@ export class TuiPluginStorageRuntime extends Service {
         storageStates.set(this, {
             hostContext: compositionRoot(ctx),
             grantsOption: options.grants,
-            fallbackGrants: readGrantStore(),
+            fallbackGrants: readGrantStore(undefined, undefined, adapterRuntimeFor(ctx)),
             ledgerOption: options.ledger,
+            runtime: adapterRuntimeFor(ctx),
             namespaces: new Map(),
             dir: options.dir ?? join(DATA_DIR, PLUGIN_STORAGE_DIR),
         });
+        // Host-only live probe runner. The method is a private ECMAScript member;
+        // plugin-visible Cordis proxies and public types never see a
+        // `probeReversible` entry. Only the internal host-probe accessor (with the
+        // host token) can invoke it.
+        registerStorageLiveProbe(this, () => this.#runReversibleProbe());
     }
     /** Grants: the plugin-host row's store when mounted, else a private read.
      *  Resolved PER CALL — sibling services mounted later by the same apply()
@@ -228,13 +239,106 @@ export class TuiPluginStorageRuntime extends Service {
      *  would silently stick to the fallback. */
     grants() {
         const state = storageStateFor(this);
-        return state.grantsOption ?? state.hostContext.get('tuiPluginHost')?.grants ?? state.fallbackGrants;
+        return state.grantsOption ?? getHostGrantStore(state.hostContext.get('tuiPluginHost')) ?? state.fallbackGrants;
     }
     /** Optional observability; a bare mount (tests) simply records nothing. */
     ledger() {
         const state = storageStateFor(this);
         return state.ledgerOption ?? state.hostContext.get('tuiEffectLedger');
     }
+    /**
+     * Host-internal read-only diagnostic probe. Never opens a namespace, never
+     * writes to disk; it only confirms the mounted storage runtime is reachable.
+     */
+    probeDiagnostic() {
+        assertCapabilityShadowPolicy('host.storage.probe', storageStateFor(this).runtime.mode, storageStateFor(this).runtime.slices);
+        const state = storageStateFor(this);
+        return Object.freeze({
+            service: 'tuiPluginStorage',
+            ok: true,
+            dir: state.dir,
+        });
+    }
+    /**
+     * Host-internal reversible live probe.
+     *
+     * This runs through the same production storage handle path as plugin
+     * storage (`#openInternal`), using a random temporary namespace. It writes a
+     * tiny JSON document, reads it back, deletes it, and guarantees the file is
+     * removed in a `finally`. The probe deliberately bypasses only the
+     * caller-facing grant/lifecycle bookkeeping; key validation, exact-JSON
+     * validation, quota checks and namespace I/O are the production code.
+     *
+     * Side-effect boundary: the probe file and in-process namespace entry are
+     * removed before this method returns; the storage directory itself is
+     * retained. In passive/replay shadow the capability guard denies this before
+     * any file operation.
+     *
+     * This is an ECMAScript private method. It is reachable only through the
+     * host-only probe accessor registered in the constructor.
+     */
+    async #runReversibleProbe() {
+        assertCapabilityShadowPolicy('host.storage.liveProbe', storageStateFor(this).runtime.mode, storageStateFor(this).runtime.slices);
+        const state = storageStateFor(this);
+        const tempNamespace = `__dsh_tui_live_probe_${randomUUID().replace(/-/g, '')}`;
+        const file = join(state.dir, `${storageFileName(tempNamespace)}.json`);
+        const operations = [];
+        const identity = {
+            componentId: tempNamespace,
+            activationId: tempNamespace,
+            version: '0.0.0',
+            facet: 'host',
+            manifest: { id: tempNamespace },
+            projection: { id: tempNamespace },
+        };
+        const handle = concreteService(this).#openInternal(state.hostContext, identity, tempNamespace, {
+            enforceGrants: false,
+            bindLifecycle: false,
+            recordLedger: false,
+        });
+        const dirExisted = existsSync(state.dir);
+        try {
+            await handle.set({ key: 'probe', value: { ok: true } });
+            operations.push('write');
+            const read = await handle.get({ key: 'probe' });
+            const parsed = read.value;
+            if (parsed?.ok !== true)
+                throw new Error('temporary storage probe document did not round-trip through the production handle');
+            operations.push('read');
+            const deleted = await handle.delete({ key: 'probe' });
+            if (!deleted.deleted)
+                throw new Error('temporary storage probe key was not deleted through the production handle');
+            operations.push('delete');
+            return Object.freeze({
+                service: 'tuiPluginStorage',
+                ok: true,
+                operations: Object.freeze(operations),
+                tempNamespace,
+            });
+        }
+        catch (error) {
+            throw new PluginStorageError('STORAGE_UNAVAILABLE', `storage reversible probe failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        finally {
+            state.namespaces.delete(tempNamespace);
+            try {
+                unlinkSync(file);
+            }
+            catch {
+                // Cleanup is best-effort; the file is namespaced by a fresh UUID and
+                // cannot be confused with a real plugin namespace.
+            }
+            if (!dirExisted) {
+                try {
+                    if (existsSync(state.dir))
+                        rmdirSync(state.dir);
+                }
+                catch {
+                    // The probe must not remove a non-empty pre-existing user directory.
+                }
+            }
+        }
+    }
     /**
      * Open the caller's private namespace. Identity = the PASSED context's
      * verified Component identity (no way to name another plugin). The handle
@@ -242,6 +346,7 @@ export class TuiPluginStorageRuntime extends Service {
      * disposer); data is retained (contract cleanup rule).
      */
     open(pluginCtx) {
+        assertCapabilityShadowPolicy('host.storage.open', storageStateFor(this).runtime.mode, storageStateFor(this).runtime.slices);
         const caller = activationContext(pluginCtx);
         if (caller === undefined)
             throw new PluginStorageError('STORAGE_UNAVAILABLE', 'storage.local.open requires a live activation context');
@@ -251,13 +356,40 @@ export class TuiPluginStorageRuntime extends Service {
         if (!requiresContract(identity, 'storage.dsh/v1alpha1', 'LocalStorage')) {
             throw new PluginStorageError('PERMISSION_NOT_GRANTED', 'storage.local requires the storage.dsh/v1alpha1#LocalStorage contract in the admitted manifest');
         }
-        const plugin = identity.componentId;
+        // Cordis hands the service out through a Proxy, so `this` is not branded:
+        // unwrap to the concrete instance before calling the `#private` member
+        // (same pattern as message-observer's `#registerSubscription`).
+        return concreteService(this).#openInternal(caller, identity, identity.componentId, {
+            enforceGrants: true,
+            bindLifecycle: true,
+            recordLedger: true,
+        });
+    }
+    /**
+     * Internal production storage-path implementation shared by the public
+     * `open()` surface and the reversible live probe. The probe passes a
+     * synthetic temporary identity and disables only the caller-facing
+     * authorization/lifecycle bookkeeping; all key validation, exact-JSON
+     * validation, namespace file handling, quota checks and read/write/delete
+     * operations are exactly the production handle code.
+     *
+     * A true `#private` member, not TS `private`: the latter still compiles to a
+     * prototype method, so a plugin holding `ctx.tuiPluginStorage` could call it
+     * through `as any` with `enforceGrants: false` and a forged namespace and
+     * read another component's storage with no grant, ledger entry or unload
+     * cleanup. Only the two in-class call sites above may reach it.
+     */
+    #openInternal(caller, identity, plugin, options) {
+        const state = storageStateFor(this);
+        const runtime = state.runtime;
         let namespace = state.namespaces.get(plugin);
         if (namespace === undefined) {
             namespace = { chain: Promise.resolve() };
             state.namespaces.set(plugin, namespace);
         }
-        this.ledger()?.record({ operation: 'create', resource: { kind: 'storage-namespace', id: plugin }, result: 'applied' }, caller);
+        if (options.recordLedger) {
+            this.ledger()?.record({ operation: 'create', resource: { kind: 'storage-namespace', id: plugin }, result: 'applied' }, caller);
+        }
         // `closed` is PER HANDLE, not per namespace: unloading one fiber must not
         // kill another handle opened on the same namespace. Close on unload;
         // idempotent (a double-close stays harmless by design).
@@ -266,9 +398,12 @@ export class TuiPluginStorageRuntime extends Service {
             if (closed)
                 return;
             closed = true;
-            this.ledger()?.record({ operation: 'release', resource: { kind: 'storage-namespace', id: plugin }, result: 'applied' }, caller);
+            if (options.recordLedger) {
+                this.ledger()?.record({ operation: 'release', resource: { kind: 'storage-namespace', id: plugin }, result: 'applied' }, caller);
+            }
         };
-        bindCallerEffect(caller, close);
+        if (options.bindLifecycle)
+            bindCallerEffect(caller, close);
         const file = join(state.dir, `${storageFileName(plugin)}.json`);
         const grants = () => this.grants();
         const ledger = () => this.ledger();
@@ -311,8 +446,9 @@ export class TuiPluginStorageRuntime extends Service {
             return table;
         };
         const requireGrant = (permission) => {
-            if (!declaresPermission(identity, permission, plugin)
-                || !grants().allows({ componentId: identity.componentId, activationId: identity.activationId }, permission, plugin)) {
+            if (options.enforceGrants
+                && (!declaresPermission(identity, permission, plugin)
+                    || !grants().allows({ componentId: identity.componentId, activationId: identity.activationId }, permission, plugin))) {
                 ledger()?.record({
                     operation: 'bind',
                     resource: { kind: 'permission', id: permission },
@@ -332,6 +468,7 @@ export class TuiPluginStorageRuntime extends Service {
         };
         return {
             get: (input) => enqueue(async () => {
+                assertCapabilityShadowPolicy('host.storage.read', runtime.mode, runtime.slices);
                 validateStorageInput('get', input);
                 const key = input.key;
                 assertKey(key);
@@ -347,6 +484,7 @@ export class TuiPluginStorageRuntime extends Service {
                 return output;
             }),
             set: (input) => enqueue(async () => {
+                assertCapabilityShadowPolicy('host.storage.write', runtime.mode, runtime.slices);
                 validateStorageInput('set', input);
                 const key = input.key;
                 const value = input.value;
@@ -373,6 +511,7 @@ export class TuiPluginStorageRuntime extends Service {
                 });
             }),
             delete: (input) => enqueue(async () => {
+                assertCapabilityShadowPolicy('host.storage.write', runtime.mode, runtime.slices);
                 validateStorageInput('delete', input);
                 const key = input.key;
                 assertKey(key);

package/lib/types/dsh-adapter/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/plugin.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAe,MAAM,wBAAwB,CAAA;AAGhE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAGlD,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AA8CnC,OAAO,EAAE,MAAM,EAAkC,MAAM,UAAU,CAAA;AAgCjE;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,CAcxF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,yBAAyB,GAAG,eAAe,CAAA;AAErF,wBAAgB,kBAAkB,CAChC,WAAW,UAAgC,EAC3C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,WAAW,CASb;AAED,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkgDvE;AAkID;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IAAE,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;CAAE,GAAG;IACjF,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;IACrC,YAAY,EAAE,MAAM,IAAI,CAAA;CACzB,CAcA;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,KAAK,GAAG,SAAS,CAAA;IAC5B,YAAY,EAAE,KAAK,CAAA;CACpB,GAAG,OAAO,CAQV;AAgBD;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,MAAM,CAAC,CAAC,GAAG,SAAS,EACxD,UAAU,EAAE,OAAO,EACnB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,IAAI,EAAE,MAAM,IAAI,GACf,OAAO,CAAC,IAAI,CAAC,CAmFf"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/plugin.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAe,MAAM,wBAAwB,CAAA;AAGhE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAGlD,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAmDnC,OAAO,EAAE,MAAM,EAAkC,MAAM,UAAU,CAAA;AAgCjE;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,CAcxF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,yBAAyB,GAAG,eAAe,CAAA;AAErF,wBAAgB,kBAAkB,CAChC,WAAW,UAAgC,EAC3C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,WAAW,CASb;AAED,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgiDvE;AAoID;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IAAE,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;CAAE,GAAG;IACjF,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;IACrC,YAAY,EAAE,MAAM,IAAI,CAAA;CACzB,CAcA;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,KAAK,GAAG,SAAS,CAAA;IAC5B,YAAY,EAAE,KAAK,CAAA;CACpB,GAAG,OAAO,CAQV;AAgBD;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,MAAM,CAAC,CAAC,GAAG,SAAS,EACxD,UAAU,EAAE,OAAO,EACnB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,IAAI,EAAE,MAAM,IAAI,GACf,OAAO,CAAC,IAAI,CAAC,CAmFf"}

package/lib/types/dsh-adapter/plugin.js

@@ -5,13 +5,18 @@ import UserQuestionService from '@deepseek-ai/dsh-user-questions';
 import * as toolAskUser from '@deepseek-ai/dsh-tool-ask-user';
 import Schema from '@deepseek-ai/schemastery';
 import { createChannel } from './channel.js';
+import { createChannelSceneOutlet } from './channel-scene-outlet.js';
+import { mountChannelUi } from './channel-ui.js';
+import { bindChannelCommands } from './channel/commands.js';
+import { registerTuiChannel } from '../adapter/channel/host-registry.js';
 import { createChildStderrReporter, installChildStderrGuard } from './childStderr.js';
 import { removeClipboardImageDir } from '../utils/clipboard.js';
 import { logForDebugging } from '../utils/debug.js';
 import { isEnvTruthy } from '../utils/envUtils.js';
-import { QuestionStore } from './questions.js';
+import { QuestionStore, bindQuestionStore } from './questions.js';
 import { prepareQuestionAnswerer } from './questions-answerer.js';
-import { ApprovalStore } from './approvals.js';
+import { adapterRuntimeFor } from '../adapter/kernel/runtime-context.js';
+import { ApprovalStore, bindApprovalStore } from './approvals.js';
 import { registerPromptDebug } from './promptDebug.js';
 import { readActivityFrames } from '../activityPrefs.js';
 import { commitFullscreenFactoryMigration, planFullscreenFactoryMigration, readAppliedMigrations } from '../migrationPrefs.js';
@@ -40,7 +45,7 @@ import { getHostThemes } from './themes.js';
 import { attachSessionToWorkspace } from './workspace.js';
 import { createLocalWorkspaceRuntime, getHostWorkspaceRuntime } from './workspaces.js';
 import { getHostSettingsSections, getLocalSettingsSectionsHost } from './settings-sections.js';
-import { withHostRootCapability } from './host-access.js';
+import { compositionRoot, withHostRootCapability } from './host-access.js';
 import { render, ThemeProvider, AlternateScreen } from '../ui.js';
 import { PageMargin } from '../components/PageMargin.js';
 import instances from '../ink/instances.js';
@@ -256,7 +261,8 @@ export async function apply(ctx, config) {
         const presetId = context.agent === undefined ? undefined : runningPresetOf(context.agent.session);
         return filterMinimalPresetTools(assembled, presetId);
     });
-    const questionStore = new QuestionStore();
+    const questionStore = new QuestionStore(adapterRuntimeFor(ctx));
+    bindQuestionStore(ctx, questionStore);
     // One store, one teardown effect on both API lines. The compatibility
     // adapter binds either registration to this Cordis fiber; this separate
     // effect rejects asks still parked in the UI during teardown.
@@ -407,7 +413,7 @@ export async function apply(ctx, config) {
     // validated startup resolution, on resume the route the target session's
     // own records carry (a complete cordis.yml pin wins over them).
     const displayRoute = createdRoute ?? startupRoute;
-    const channel = createChannel(ctx, agent, {
+    const rawChannel = createChannel(ctx, agent, {
         model: displayRoute.model,
         // A RESUMED session keeps its persisted header cwd (issue #96 review):
         // pre-upgrade sessions recorded the launch directory, and re-resolving
@@ -453,6 +459,32 @@ export async function apply(ctx, config) {
         statusBar: config.statusBar,
         handle,
     });
+    // Register the live Channel for the adapter Kernel. The Channel driver
+    // resolves it lazily from the composition root, so this can be called after
+    // the plugin-host Kernel started without requiring a re-mount.
+    // Normalize to the composition root: the Kernel and its Channel driver
+    // query the registry through the root context, never through this plugin's
+    // child activation context.
+    const unregisterTuiChannel = registerTuiChannel(compositionRoot(ctx), rawChannel);
+    ctx.effect(() => () => { unregisterTuiChannel(); });
+    const pluginHost = ctx.get('tuiPluginHost');
+    const adapterRuntime = adapterRuntimeFor(ctx);
+    const uiMount = mountChannelUi(ctx, rawChannel, pluginHost, adapterRuntime.mode);
+    const channel = uiMount.channel;
+    bindChannelCommands(rawChannel, channel);
+    const shadow = adapterRuntime.mode === 'passive-shadow' || adapterRuntime.mode === 'replay-shadow';
+    // Bootstrap notices/prompts are deliberately dropped in observational mode;
+    // interactive commands retain rejection semantics through the UI capability.
+    const notifyChannel = (text, options) => {
+        if (shadow)
+            return () => undefined;
+        return channel.notify(text, options);
+    };
+    const submitChannel = text => {
+        if (!shadow)
+            channel.submit(text);
+    };
+    ctx.effect(() => () => { uiMount.dispose(); });
     // Root page-margin store: the PageMargin inset box sits ABOVE Chat, so
     // the channel version bump (which re-renders everything below Chat)
     // cannot drive it. Seed the store from config before the tree mounts;
@@ -462,9 +494,10 @@ export async function apply(ctx, config) {
     // already sanitized/rate-limited the delivery, the sink only forwards.
     // Without the extensions row (tuiToast absent) plugin toasts are dropped
     // by the runtime itself — same soft-degrade contract as the other seams.
+    // Delivery uses the same owner-bound UI capability as all renderer actions.
     const toastStore = getHostToastStore(ctx.get('tuiToast'));
     toastStore?.setSink(delivery => {
-        channel.notify(delivery.text, { color: delivery.color, timeoutMs: delivery.timeoutMs });
+        notifyChannel(delivery.text, { color: delivery.color, timeoutMs: delivery.timeoutMs });
     });
     if (questionAnswererRegistration.kind === 'waterfall') {
         // Ownership follows the mutable channel; registration cleanup belongs to
@@ -575,9 +608,12 @@ export async function apply(ctx, config) {
             shortcuts: Schema.object(Object.fromEntries(SHORTCUT_ACTIONS.map(action => [action.id, Schema.string().required(false)]))).required(false),
         }));
         const applyLayout = (value) => {
-            channel.setDiffLayout(value.diffLayout ?? config.diffLayout ?? 'auto');
+            if (!shadow)
+                channel.setDiffLayout(value.diffLayout ?? config.diffLayout ?? 'auto');
         };
         const applyWhale = (value) => {
+            if (shadow)
+                return;
             channel.setWhale(value.whale ?? true);
         };
         /** Apply the idle-whale-behavior setting: live-toggle the channel flag. */
@@ -585,6 +621,8 @@ export async function apply(ctx, config) {
             channel.setWhaleIdle(value.whaleIdle ?? true);
         };
         const applyMinimal = (value) => {
+            if (shadow)
+                return;
             channel.setMinimal(value.minimal ?? false);
         };
         // Renderer settings are resolved before mount; later edits wait for restart.
@@ -610,6 +648,8 @@ export async function apply(ctx, config) {
         // Display preferences ride the same namespace: /settings writes them
         // live and future render consumers observe the channel version bump.
         const applyDisplay = (value) => {
+            if (shadow)
+                return;
             channel.setThinkingFold(value.thinkingFold ?? config.thinkingFold ?? 'preview');
             channel.setToolBackground(normalizeToolBackground(value.toolBackground ?? config.toolBackground));
             channel.setScrollGutter(normalizeScrollGutter(value.scrollGutter ?? config.scrollGutter));
@@ -685,7 +725,7 @@ export async function apply(ctx, config) {
             unset: () => settingsCtx.settings.mutate(tuiSettingsNs, [{ op: 'unset', path: ['fullscreen'] }]),
         });
         if (fullscreenMigration === 'unset') {
-            channel.notify(t('settings-fullscreen-migrated'), { color: 'warning' });
+            notifyChannel(t('settings-fullscreen-migrated'), { color: 'warning' });
         }
         const { fullscreen: staleFullscreen, ...migratedSettings } = bootSettings;
         apply(fullscreenMigration === 'unset' ? migratedSettings : bootSettings);
@@ -693,7 +733,7 @@ export async function apply(ctx, config) {
         scope.watch(next => {
             apply(next);
             if (typeof next.fullscreen === 'boolean' && next.fullscreen !== bootedFullscreen) {
-                channel.notify(t('settings-fullscreen-restart'), { color: 'warning' });
+                notifyChannel(t('settings-fullscreen-restart'), { color: 'warning' });
             }
             const terminalImages = next.terminalImages ?? config.terminalImages ?? true;
             if (terminalImages !== lastTerminalImages && terminalImages !== bootedTerminalImages) {
@@ -813,7 +853,7 @@ export async function apply(ctx, config) {
     // channel.ts reads through the same fallback, so both sides meet in the
     // same registry either way.
     {
-        const settingsSections = getHostSettingsSections(ctx.get('tuiSettingsSections')) ?? getLocalSettingsSectionsHost();
+        const settingsSections = getHostSettingsSections(ctx.get('tuiSettingsSections')) ?? getLocalSettingsSectionsHost(ctx);
         const unregister = settingsSections.register({
             ns: 'dsh-tui',
             title: 'dsh-tui',
@@ -1228,13 +1268,13 @@ export async function apply(ctx, config) {
     // DSH approval seam: the permission layer asks ApprovalService.request(),
     // which dispatches an `approval/request` waterfall. With no answerer the
     // chain falls through to the fail-closed 'unavailable', so register this
-    // TUI as the interactive answerer for EVERY agent in this process — the
-    // attached session's asks and any background (agent view) session's asks
-    // alike, so an unattended session surfaces as "needs input" instead of
-    // failing closed. One ask is shown at a time, whichever agent asked.
-    // Guarded on the service being mounted — a bare composition without the
-    // dsh-base approval row has nothing to answer into.
-    const approvalStore = new ApprovalStore();
+    // TUI as the interactive answerer for the agent it owns; requests for
+    // other agents delegate down the chain (next()). Guarded on the service
+    // being mounted — a bare composition without the dsh-base approval row
+    // has nothing to answer into. channel.agentId tracks agent swaps
+    // (/new, /resume, rewind), so ownership is re-evaluated per request.
+    const approvalStore = new ApprovalStore(adapterRuntimeFor(ctx));
+    bindApprovalStore(ctx, approvalStore);
     if (ctx.get('approval') !== undefined) {
         ctx.on('approval/request', (req, next) => approvalStore.park(req).catch(() => next()));
         // Badge-flip push (P-4): React does not know the session log appended —
@@ -1244,12 +1284,12 @@ export async function apply(ctx, config) {
         // event type), and its internal log-length memo skips appends from any
         // session other than the active ask's, so no agent filtering is needed
         // here. The firehose fires post-commit, after the event entered
-        // the live session log, so the recheck sees the settled result.
-        ctx.on('session/event', (_session, event) => approvalStore.noteSessionEvent(event));
+        // session.events, so the recheck sees the settled result.
+        ctx.on('session/event', (session, event) => approvalStore.noteSessionEvent(session.id, event));
         ctx.effect(() => () => approvalStore.settleAll('cancelled'));
     }
     // The agent view reads parked ask ids for its "needs input" state.
-    channel.bindApprovalStore(approvalStore);
+    rawChannel.bindApprovalStore(approvalStore);
     const herdr = attachHerdrIntegration({
         channel,
         questions: questionStore,
@@ -1269,14 +1309,14 @@ export async function apply(ctx, config) {
     const cmdlineArgs = cmdline?.get?.() ?? cmdline?.args;
     const initialPrompt = initialPromptFromCmdlineArgs(cmdlineArgs);
     if (initialPrompt)
-        channel.submit(initialPrompt);
+        submitChannel(initialPrompt);
     // Attach the stderr reporter to the live channel and flush anything a
     // startup-spawned server produced while the channel didn't exist yet.
-    notifyStderr = (text, options) => channel.notify(text, options);
+    notifyStderr = (text, options) => notifyChannel(text, options);
     // The question-seat alert was raised before the channel existed; flush it
     // now so it lands as an in-UI notice, not only in the log file.
     if (questionSeatNotice !== undefined) {
-        channel.notify(questionSeatNotice, { color: 'error' });
+        notifyChannel(questionSeatNotice, { color: 'error' });
         questionSeatNotice = undefined;
     }
     for (const [text, options] of stderrBacklog.splice(0)) {
@@ -1391,6 +1431,7 @@ export async function apply(ctx, config) {
     await settingsReady;
     const chat = React.createElement(Chat, {
         channel,
+        renderScene: createChannelSceneOutlet(() => rawChannel.pluginScene),
         questionStore,
         approvalStore,
         injectControllerRef,
@@ -1412,7 +1453,7 @@ export async function apply(ctx, config) {
                 return;
             restartRequested = true;
             logRestartEvent('command: /restart accepted');
-            channel.notify(t('restart-starting'));
+            notifyChannel(t('restart-starting'));
             handleExit();
         },
         // Only a `dsh --profile <name>` launch has a profile installation for
@@ -1428,11 +1469,11 @@ export async function apply(ctx, config) {
                 if (exited || updateRequested)
                     return;
                 if (target.kind === 'latest') {
-                    channel.notify(t('update-already-latest', { current: target.current }), { color: 'warning' });
+                    notifyChannel(t('update-already-latest', { current: target.current }), { color: 'warning' });
                     return;
                 }
                 if (target.kind === 'unknown') {
-                    channel.notify(t('update-check-failed'));
+                    notifyChannel(t('update-check-failed'));
                 }
                 else {
                     // 0.7.0/0.7.1 hard-inject tuiWorkspaces at the code level; under
@@ -1441,22 +1482,22 @@ export async function apply(ctx, config) {
                     // "pending (waiting for service: tuiWorkspaces)"). A stale mirror
                     // pinning /update onto that range must be refused, not installed.
                     if (isBootDeadlockTarget(target.latest)) {
-                        channel.notify(t('update-refused-deadlock', {
+                        notifyChannel(t('update-refused-deadlock', {
                             latest: target.latest,
                             authoritative: target.authoritative ?? target.latest,
                         }), { color: 'warning' });
                         return;
                     }
                     if (target.authoritative !== undefined) {
-                        channel.notify(t('update-mirror-lag', { latest: target.latest, authoritative: target.authoritative }));
+                        notifyChannel(t('update-mirror-lag', { latest: target.latest, authoritative: target.authoritative }));
                     }
                     updateTargetVersion = target.latest;
                 }
                 if (isStandaloneRuntime()) {
-                    channel.notify(t('update-standalone-starting'));
+                    notifyChannel(t('update-standalone-starting'));
                 }
                 else {
-                    channel.notify(t('update-starting'));
+                    notifyChannel(t('update-starting'));
                 }
                 updateRequested = true;
                 handleExit();
@@ -1528,7 +1569,7 @@ export async function apply(ctx, config) {
         const suffix = update.isStandalone && update.checksumUrl === undefined
             ? ` ${t('update-standalone-no-checksum')}`
             : '';
-        channel.notify(`${t(key, { current: update.current, latest: update.latest })}${suffix}`, { color: 'warning', timeoutMs: 12000 });
+        notifyChannel(`${t(key, { current: update.current, latest: update.latest })}${suffix}`, { color: 'warning', timeoutMs: 12000 });
     });
     // If the surrounding tree goes down (reload, teardown), unmount the UI —
     // but flag it as teardown first so the settling waitUntilExit does not
@@ -1541,7 +1582,7 @@ export async function apply(ctx, config) {
     ctx.effect(() => () => {
         logMouseDebug('apply teardown');
         funnel.markTeardown();
-        channel.releaseContributions();
+        rawChannel.releaseContributions();
         instance?.unmount();
     });
     // The TUI is the front door: when the user unmounts it (Ctrl+C), dispose
@@ -1626,7 +1667,7 @@ async function resolveAgent(ctx, requestedSessionId, configuredRoute, startupRou
             const reason = error instanceof Error ? error.message : String(error);
             throw new Error(`dsh-tui: cannot resume session "${requestedSessionId}": ${reason} — ` +
                 'the stored log is unreadable or corrupt; no fresh session was started instead. ' +
-                'Drop --resume to start fresh, or repair the session log first.');
+                'Drop --resume to start fresh, or repair the session log first.', { cause: error });
         }
     }
     const sessionId = SessionId(randomUUID());
@@ -1658,7 +1699,7 @@ async function resolveAgent(ctx, requestedSessionId, configuredRoute, startupRou
         // Fail loud with the reason on stderr — a dead TUI with no message is
         // the worst outcome for a misconfigured leaf (unknown provider/model).
         const message = error instanceof Error ? error.message : String(error);
-        throw new Error(`dsh-tui: failed to create agent (provider=${route.provider}, model=${route.model}): ${message}`);
+        throw new Error(`dsh-tui: failed to create agent (provider=${route.provider}, model=${route.model}): ${message}`, { cause: error });
     });
     return { agent: created.agent, handle: created, agentPreset: composed.agentPreset, route };
 }

package/lib/types/dsh-adapter/plugins-info.d.ts

@@ -22,8 +22,8 @@
  * every derived line passes cleanScalarText before it reaches the
  * transcript.
  */
-import type { GrantStore } from './grants.js';
-import type { HostDescriptorBuild } from './host-descriptor.js';
+import type { GrantStore } from '../adapter/standard/grants.js';
+import type { HostDescriptorBuild } from '../adapter/standard/descriptor.js';
 /** How many plugins the matrix shows before an overflow note. */
 export declare const PLUGINS_MATRIX_MAX_ROWS = 20;
 /** How many ledger records the tail section shows. */

package/lib/types/dsh-adapter/plugins-info.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugins-info.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/plugins-info.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAYH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAK/D,iEAAiE;AACjE,eAAO,MAAM,uBAAuB,KAAK,CAAA;AACzC,sDAAsD;AACtD,eAAO,MAAM,mBAAmB,IAAI,CAAA;AAIpC,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,MAAM,EAAE,UAAU,CAAA;IAClB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,mBAAmB,CAAA;IAC1B,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAoKD,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,MAAM,EAAE,CAsF9E"}
+{"version":3,"file":"plugins-info.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/plugins-info.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAWH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAI5E,iEAAiE;AACjE,eAAO,MAAM,uBAAuB,KAAK,CAAA;AACzC,sDAAsD;AACtD,eAAO,MAAM,mBAAmB,IAAI,CAAA;AAIpC,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,MAAM,EAAE,UAAU,CAAA;IAClB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,mBAAmB,CAAA;IAC1B,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AA2KD,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,MAAM,EAAE,CAsF9E"}

package/lib/types/dsh-adapter/plugins-info.js

@@ -24,14 +24,12 @@
  */
 import { existsSync, readdirSync, readFileSync } from 'node:fs';
 import { join, resolve } from 'node:path';
-import { parseManifest, projectManifest } from '@dsh-std/manifest';
+import { parseManifest, projectManifest } from '../adapter/standard/protocols.js';
 import { DATA_DIR } from '../utils/paths.js';
 import { t } from '../i18n.js';
-import { loadSpecData } from '../plugin-spec/registry.js';
-import { createContractIndex, validatePlugin } from '../plugin-spec/validate.js';
-import { negotiate } from '../plugin-spec/negotiate.js';
+import { loadSpecData } from '../adapter/standard/registry.js';
+import { createContractIndex, validatePlugin, negotiate } from '../adapter/standard/admission.js';
 import { cleanScalarText } from './sanitize.js';
-import { buildHostDescriptor } from './host-descriptor.js';
 import { PLUGIN_STORAGE_DIR } from './plugin-storage.js';
 import { EFFECT_LEDGER_FILE } from './effect-ledger.js';
 /** How many plugins the matrix shows before an overflow note. */
@@ -150,7 +148,14 @@ function checkManifestLines(pathArg, deps) {
         lines.push(t('plugins-check-invalid', { err: cell(error instanceof Error ? error.message : String(error)) }));
         return lines;
     }
-    const host = deps.host ?? buildHostDescriptor({ generationId: 'plugins-check' });
+    // No live host: do NOT fall back to a full advertised surface. The check
+    // stays static (validation only) and explicitly reports host-unavailable /
+    // non-live instead of participating in protocol support negotiation.
+    const host = deps.host;
+    if (host === undefined) {
+        lines.push(t('plugins-check-host-unavailable'));
+        return lines;
+    }
     const granted = manifest.permissions
         .map(request => ({
         name: request.name,

package/lib/types/dsh-adapter/presets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/presets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AACpE,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAUtE,kEAAkE;AAClE,MAAM,WAAW,iBAAiB;IAChC,kFAAkF;IAClF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAA;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAmBhG;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkB5G;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGpE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAkB/G;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc,CAM/G;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;IAAE,GAAG,EAAE,OAAO,CAAA;CAAE,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAKpG"}
+{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/presets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AACpE,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAWtE,kEAAkE;AAClE,MAAM,WAAW,iBAAiB;IAChC,kFAAkF;IAClF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAA;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAmBhG;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAW5G;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGpE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAW/G;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc,CAM/G;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;IAAE,GAAG,EAAE,OAAO,CAAA;CAAE,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAKpG"}

package/lib/types/dsh-adapter/presets.js

@@ -17,6 +17,7 @@
  */
 import { recordedModelRoute } from '../modelRoute.js';
 import { snapshotLiveSessionEvents } from './compat/liveSession.js';
+import { readPersistedSession } from './compat/persistence.js';
 import { resolveCompatiblePreset, resolveRecordedPreset, rosterOf, } from './preset-resolution.js';
 const ASK_USER_TOOL = 'ask_user_question';
 /**
@@ -67,7 +68,7 @@ export async function resolvePersistedPreset(ctx, sessionId) {
     if (persistence === undefined)
         return undefined;
     try {
-        const { meta, events } = await persistence.load(sessionId);
+        const { meta, events } = await readPersistedSession(persistence, sessionId);
         return resolveRecordedPreset({ header: meta, events });
     }
     catch {
@@ -109,7 +110,7 @@ export async function resolvePersistedRoute(ctx, sessionId) {
     if (persistence === undefined)
         return undefined;
     try {
-        const { events } = await persistence.load(sessionId);
+        const { events } = await readPersistedSession(persistence, sessionId);
         return recordedModelRoute(events);
     }
     catch {