@deepseek-harness-tui/dsh-tui 0.10.0 → 0.10.2

package/lib/types/dsh-adapter/providerWizard.d.ts

@@ -1,23 +1,6 @@
-/**
- * `/provider` wizard — interactively adds, edits, or deletes an LLM
- * provider route at runtime.
- *
- * The wizard is a sequence of `QuestionStore` asks (the same panel the
- * model-facing `ask_user_question` tool uses), so it needs no UI state of
- * its own. All side effects go through {@link ProviderSetupHost}, which the
- * channel implements over the dsh settings/credentials/llm seams:
- *
- *   profile → settings `llm-pi-ai.providers.<route>` (dsh-llm-pi-ai watches
- *             the section and registers the route without a restart)
- *   key     → credentials store (`~/.dsh/.credentials.yaml`, 0600), named by
- *             the derived `<ROUTE>_API_KEY` env-style ref the profile's
- *             `apiKeyEnv` points at
- *
- * The module is React-free so `scripts/verify-provider-wizard.mjs` can drive
- * it headless with a stubbed host and scripted answers.
- */
+import type { ProviderSetupHost } from '../adapter/ports/channel-settings.js';
+export type { ProviderSetupHost, CatalogProviderCandidate, ConfiguredProvider, ProfilePathOp, OAuthSetupHost, OAuthProviderStatus, OAuthLoginResult } from '../adapter/ports/channel-settings.js';
 import { type AskUserQuestionAnswer, type AskUserQuestionRequest } from '@deepseek-ai/dsh-user-questions';
-import type { LlmDiscoveredModel } from '@deepseek-ai/dsh-llm';
 /** Route id rule shared with the dsh configuration surface (web Models page). */
 export declare const PROVIDER_ROUTE_ID: RegExp;
 /** Wire protocols dsh-llm-pi-ai can serve on a manually declared route. */
@@ -27,146 +10,6 @@ export declare const PROVIDER_PROTOCOLS: readonly ["openai-completions", "openai
  * convention so TUI- and web-added providers resolve the same key.
  */
 export declare function deriveKeyRef(route: string): string;
-/** One catalog route the mounted adapters offer for activation. */
-export interface CatalogProviderCandidate {
-    readonly provider: string;
-    readonly displayName: string;
-}
-/**
- * One user-added provider route read from the settings section. The parsed
- * fields drive the edit/delete picker rows, the catalog/custom split
- * (`isCatalog`) and the key-keep question (`ref` + `shadowed`).
- */
-export interface ConfiguredProvider {
-    readonly route: string;
-    /** Credential ref (profile.apiKeyEnv) when the profile names one. */
-    readonly ref: string;
-    /** Whether the process environment shadows the ref (env-provided key). */
-    readonly shadowed: boolean;
-    /**
-     * Whether the route belongs to the installed catalog — real membership
-     * as the llm adapter reports it, never inferred from the profile shape:
-     * a catalog profile may carry an explicit `api` override and still be a
-     * catalog route.
-     */
-    readonly isCatalog: boolean;
-    /** baseURL when the profile sets one. */
-    readonly baseURL?: string;
-    /** Explicit `api` override in the stored profile; catalog routes can
-     *  carry one too, so this alone does not classify the route. */
-    readonly api?: string;
-    /** Enabled model ids; undefined means the whole catalog stays served. */
-    readonly models?: readonly string[];
-    /**
-     * Raw `profile.models` entries (plain objects, in order) as stored. A
-     * targeted model-list rewrite reuses these for kept ids so fields the
-     * wizard never learned about (`input`, `compat`, …) survive the edit.
-     */
-    readonly modelEntries?: readonly Record<string, unknown>[];
-}
-/** One path op inside a provider profile, relative to the profile object. */
-export type ProfilePathOp = {
-    op: 'set';
-    path: readonly string[];
-    value: unknown;
-} | {
-    op: 'unset';
-    path: readonly string[];
-};
-/** One OAuth-capable provider a dsh-auth-style plugin mounts (masked state only). */
-export interface OAuthProviderStatus {
-    readonly provider: string;
-    readonly label: string;
-    readonly oauthLabel: string;
-    readonly loginLabel: string | undefined;
-    readonly signedIn: boolean;
-    readonly expiresAt: number | undefined;
-    readonly expired: boolean;
-}
-/** One successful OAuth login. */
-export interface OAuthLoginResult {
-    readonly provider: string;
-    readonly oauthLabel: string;
-    readonly expiresAt: number;
-}
-/**
- * The `ctx.dshAuth` api, structural so this tree never imports the plugin:
- * mounting dsh-auth (or anything exporting this shape) lights up the wizard's
- * OAuth branch; absent it, the wizard behaves exactly as before.
- */
-export interface OAuthSetupHost {
-    providers(): Promise<readonly OAuthProviderStatus[]>;
-    login(provider?: string, signal?: AbortSignal): Promise<OAuthLoginResult>;
-    logout(provider: string): Promise<boolean>;
-}
-/**
- * Runtime capabilities the wizard needs, implemented by the channel over
- * `ctx.settings` / `ctx.credentials` / `ctx.llm`. `undefined` from
- * `channel.providerSetup()` means the bare cordis.yml start (no dsh-base
- * services) and the command refuses to run.
- */
-export interface ProviderSetupHost {
-    /** Catalog routes activatable via the `llm-pi-ai` settings section. */
-    listCatalogProviders(): readonly CatalogProviderCandidate[];
-    /**
-     * The editable/deletable set: provider profiles the user layer itself
-     * carries. Profiles inherited from the composition base are deliberately
-     * absent — an unset only clears the user layer, so listing an inherited
-     * route would promise a delete that silently reverts to the base value.
-     */
-    listConfiguredProviders(): readonly ConfiguredProvider[];
-    /**
-     * Routes whose stored profile names `ref` as `apiKeyEnv` at ANY settings
-     * layer (user + inherited base), minus `exceptRoute`. Credential-impact
-     * decisions (delete cleanup, shared-key confirm) must go through this,
-     * never through {@link listConfiguredProviders}: that lists the user
-     * layer only (a deletable set), so a base provider or a composition-base
-     * route sharing the ref would be invisible and its key destroyed.
-     */
-    listRefUsers(ref: string, exceptRoute?: string): readonly string[];
-    /** Whether a profile (any layer) already exists for the route. */
-    routeExists(route: string): boolean;
-    /** Interrogate a draft endpoint; the draft key is never persisted. */
-    discoverModels(request: {
-        provider?: string;
-        baseURL?: string;
-        api?: string;
-        apiKey?: string;
-    }): Promise<readonly LlmDiscoveredModel[]>;
-    /** Whether the process environment already provides this ref (shadow). */
-    envShadows(ref: string): boolean;
-    /** The process-environment value for a shadowed ref; undefined when absent. */
-    envValue(ref: string): string | undefined;
-    /**
-     * Read the currently stored value for rollback purposes; undefined when no
-     * credential exists under the ref. Only called when {@link envShadows} is
-     * false, so the value comes from a writable/seeded store, never the env.
-     */
-    readCredential(ref: string): Promise<string | undefined>;
-    /** Persist the key under the ref; rejects when env-shadowed or invalid. */
-    writeCredential(ref: string, value: string): void | Promise<void>;
-    /** Best-effort rollback of a just-written credential. */
-    removeCredential(ref: string): void | Promise<void>;
-    /**
-     * Persist the provider profile under `llm-pi-ai.providers.<route>`;
-     * rejects when the adapter's validation deems it unserviceable. Used by
-     * the add flow, where a whole-profile write is the intent.
-     */
-    writeProfile(route: string, profile: Record<string, unknown>): Promise<void>;
-    /**
-     * Apply targeted path ops inside `llm-pi-ai.providers.<route>`. Edits go
-     * through here, never through {@link writeProfile}: replacing the whole
-     * object would silently drop every field the wizard does not model
-     * (`headers`, `timeoutMs`, `retryPolicy`, `displayName`, …). Paths are
-     * relative to the profile object, so `['baseURL']` patches exactly the
-     * one item the user picked; unknown fields stay untouched by omission.
-     */
-    mutateProfile(route: string, ops: readonly ProfilePathOp[]): Promise<void>;
-    /** Unset the profile under `llm-pi-ai.providers.<route>`. */
-    removeProfile(route: string): Promise<void>;
-    /** The OAuth sign-in surface; absent when no dsh-auth-style plugin is mounted. */
-    readonly oauth?: OAuthSetupHost;
-}
 export interface ProviderWizardDeps {
     readonly host: ProviderSetupHost;
     readonly ask: (request: AskUserQuestionRequest, options?: {

package/lib/types/dsh-adapter/providerWizard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providerWizard.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/providerWizard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAEL,KAAK,qBAAqB,EAE1B,KAAK,sBAAsB,EAC5B,MAAM,iCAAiC,CAAA;AACxC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAE9D,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,QAAoC,CAAA;AAElE,2EAA2E;AAC3E,eAAO,MAAM,kBAAkB,2EAIrB,CAAA;AAEV;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,mEAAmE;AACnE,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,qEAAqE;IACrE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,yCAAyC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB;oEACgE;IAChE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;CAC3D;AAED,6EAA6E;AAC7E,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACtD;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAA;AAE5C,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,kCAAkC;AAClC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,IAAI,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAA;IACpD,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACzE,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC3C;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,oBAAoB,IAAI,SAAS,wBAAwB,EAAE,CAAA;IAC3D;;;;;OAKG;IACH,uBAAuB,IAAI,SAAS,kBAAkB,EAAE,CAAA;IACxD;;;;;;;OAOG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAA;IAClE,kEAAkE;IAClE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;IACnC,sEAAsE;IACtE,cAAc,CAAC,OAAO,EAAE;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,GAAG,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAA;IAC1C,0EAA0E;IAC1E,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACzC;;;;OAIG;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IACxD,2EAA2E;IAC3E,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjE,yDAAyD;IACzD,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnD;;;;OAIG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5E;;;;;;;OAOG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1E,6DAA6D;IAC7D,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,kFAAkF;IAClF,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAA;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,GAAG,EAAE,CACZ,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,KAC3B,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,CACf,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KACtE,IAAI,CAAA;IACT,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,CAAA;IACrE,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC5E;AAED,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAA;AA4D3G;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,qBAAqB,CAAC,CA8BhC"}
+{"version":3,"file":"providerWizard.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/providerWizard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAsH,MAAM,sCAAsC,CAAA;AACjM,YAAY,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AAsBjM,OAAO,EAEL,KAAK,qBAAqB,EAE1B,KAAK,sBAAsB,EAC5B,MAAM,iCAAiC,CAAA;AAGxC,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,QAAoC,CAAA;AAElE,2EAA2E;AAC3E,eAAO,MAAM,kBAAkB,2EAIrB,CAAA;AAEV;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,GAAG,EAAE,CACZ,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,KAC3B,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,CACf,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KACtE,IAAI,CAAA;IACT,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,CAAA;IACrE,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC5E;AAED,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAA;AA4D3G;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,qBAAqB,CAAC,CA8BhC"}

package/lib/types/dsh-adapter/questions.d.ts

@@ -11,6 +11,8 @@
  * arrive one at a time in practice (the tool blocks until answered), but
  * concurrent asks from subagents are drained FIFO.
  */
+import { compositionRoot } from './host-access.js';
+import { type AdapterRuntimeOptions } from '../adapter/kernel/runtime.js';
 import { type AskUserQuestionAnswer, type AskUserQuestionItem, type AskUserQuestionRequest } from '@deepseek-ai/dsh-user-questions';
 /** One answered question as the panel submits it: selected option labels
  *  plus optional free-text (the dsh protocol's "Other" answer). */
@@ -45,6 +47,10 @@ export interface QuestionSummary {
     readonly title: string;
     readonly lines: readonly string[];
 }
+/** Host-only registration used by the TUI plugin bootstrap. */
+export declare function bindQuestionStore(ctx: Parameters<typeof compositionRoot>[0], store: QuestionStore): void;
+/** Host-only lookup used by the presentation Port bridge. */
+export declare function getQuestionStore(ctx: Parameters<typeof compositionRoot>[0]): QuestionStore | undefined;
 /**
  * Ask-user-question store: parks asks from the harness's user-interaction
  * seam, surfaces one question at a time to the TUI, and settles each ask
@@ -52,6 +58,8 @@ export interface QuestionSummary {
  * re-renders and answers via {@link QuestionStore.answerCurrent}.
  */
 export declare class QuestionStore {
+    private readonly runtime;
+    constructor(runtime?: AdapterRuntimeOptions);
     private readonly queue;
     private active;
     private readonly listeners;

package/lib/types/dsh-adapter/questions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"questions.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/questions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAEL,KAAK,qBAAqB,EAE1B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC5B,MAAM,iCAAiC,CAAA;AAExC;mEACmE;AACnE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,iBAAiB,CAAA;AAwB7C,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;IACtC,yCAAyC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,oCAAoC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,iEAAiE;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAA;IAC9B,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAClC;AAqDD;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;IAC9C,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAClD,OAAO,CAAC,QAAQ,CAAI;IACpB,yEAAyE;IACzE,OAAO,CAAC,SAAS,CAAwB;IACzC;;;OAGG;IACH,OAAO,CAAC,aAAa,CAAgC;IAErD;;;;OAIG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAO3C;;;OAGG;IACH,WAAW,IAAI,gBAAgB,GAAG,IAAI;IAItC;;;OAGG;IACH,aAAa,IAAI,eAAe,EAAE;IAMlC,OAAO,CAAC,IAAI;IAIZ,sEAAsE;IACtE,OAAO,CAAC,eAAe;IAwBvB;;;;;;;;;OASG;IACH,GAAG,CAAC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA+BnE,8CAA8C;IAC9C,OAAO,CAAC,SAAS;IAOjB;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,iBAAiB,GAAG,IAAI;IA2BjD;;;;OAIG;IACH,WAAW,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI;IAWxC,6DAA6D;IAC7D,aAAa,IAAI,IAAI;IAUrB,+DAA+D;IAC/D,SAAS,IAAI,IAAI;IASjB,wEAAwE;IACxE,OAAO,CAAC,MAAM;IAOd,yEAAyE;IACzE,OAAO,CAAC,IAAI;CAMb"}
+{"version":3,"file":"questions.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/questions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAEL,KAAK,qBAAqB,EAE1B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC5B,MAAM,iCAAiC,CAAA;AAExC;mEACmE;AACnE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,iBAAiB,CAAA;AAwB7C,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;IACtC,yCAAyC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,oCAAoC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,iEAAiE;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAA;IAC9B,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAClC;AAID,+DAA+D;AAC/D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAGxG;AAED,6DAA6D;AAC7D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,GAAG,SAAS,CAGtG;AAqDD;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;gBAEnC,OAAO,GAAE,qBAA+C;IAGpE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;IAC9C,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAClD,OAAO,CAAC,QAAQ,CAAI;IACpB,yEAAyE;IACzE,OAAO,CAAC,SAAS,CAAwB;IACzC;;;OAGG;IACH,OAAO,CAAC,aAAa,CAAgC;IAErD;;;;OAIG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAO3C;;;OAGG;IACH,WAAW,IAAI,gBAAgB,GAAG,IAAI;IAItC;;;OAGG;IACH,aAAa,IAAI,eAAe,EAAE;IAMlC,OAAO,CAAC,IAAI;IAIZ,sEAAsE;IACtE,OAAO,CAAC,eAAe;IAwBvB;;;;;;;;;OASG;IACH,GAAG,CAAC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAgCnE,8CAA8C;IAC9C,OAAO,CAAC,SAAS;IAOjB;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,iBAAiB,GAAG,IAAI;IA2BjD;;;;OAIG;IACH,WAAW,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI;IAWxC,6DAA6D;IAC7D,aAAa,IAAI,IAAI;IAUrB,+DAA+D;IAC/D,SAAS,IAAI,IAAI;IASjB,wEAAwE;IACxE,OAAO,CAAC,MAAM;IAOd,yEAAyE;IACzE,OAAO,CAAC,IAAI;CAMb"}

package/lib/types/dsh-adapter/questions.js

@@ -12,7 +12,20 @@
  * concurrent asks from subagents are drained FIFO.
  */
 import { t } from '../i18n.js';
+import { compositionRoot } from './host-access.js';
+import { assertCapabilityShadowPolicy, defaultAdapterRuntime, } from '../adapter/kernel/runtime.js';
 import { UserQuestionError, } from '@deepseek-ai/dsh-user-questions';
+const questionStores = new WeakMap();
+/** Host-only registration used by the TUI plugin bootstrap. */
+export function bindQuestionStore(ctx, store) {
+    const root = compositionRoot(ctx);
+    questionStores.set(root, store);
+}
+/** Host-only lookup used by the presentation Port bridge. */
+export function getQuestionStore(ctx) {
+    const root = compositionRoot(ctx);
+    return questionStores.get(root);
+}
 const ASK_ABORTED = 'ASK_ABORTED';
 /**
  * User-initiated cancel (Esc / Ctrl+C in the panel). dsh-plan-mode keys on
@@ -67,6 +80,10 @@ function buildSummary(pending) {
  * re-renders and answers via {@link QuestionStore.answerCurrent}.
  */
 export class QuestionStore {
+    runtime;
+    constructor(runtime = defaultAdapterRuntime()) {
+        this.runtime = runtime;
+    }
     queue = [];
     active;
     listeners = new Set();
@@ -144,6 +161,7 @@ export class QuestionStore {
      *   submits the batch, or rejecting when the ask is interrupted.
      */
     ask(request, options) {
+        assertCapabilityShadowPolicy('host.presentation.ask', this.runtime.mode, this.runtime.slices);
         return new Promise((resolve, reject) => {
             const pending = {
                 request,

package/lib/types/dsh-adapter/recap.d.ts

@@ -1,3 +1,4 @@
+export type { RecapOutcome } from '../adapter/ports/channel-catalog.js';
 /**
  * Session recap (`/recap`, pi-recap semantics): a single TOOL-LESS LLM
  * call that summarizes the session's RECENT activity into one line and
@@ -37,13 +38,4 @@ export declare function parseRecapResponse(raw: string): {
     summary: string;
     title?: string;
 };
-/** Outcome of one recap call, as surfaced on the Channel. */
-export interface RecapOutcome {
-    /** The one-line summary, or null when the call failed. */
-    summary: string | null;
-    /** Proposed session title, when the model offered one. */
-    title?: string;
-    /** Human-readable failure reason (llm missing, stream error, …). */
-    error?: string;
-}
 //# sourceMappingURL=recap.d.ts.map

package/lib/types/dsh-adapter/recap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recap.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/recap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAE5D,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB,OAAO,CAAA;AAkBtC;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAkCjG;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUxD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAyBnF;AAED,6DAA6D;AAC7D,MAAM,WAAW,YAAY;IAC3B,0DAA0D;IAC1D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf"}
+{"version":3,"file":"recap.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/recap.ts"],"names":[],"mappings":"AACA,YAAY,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAA;AACvE;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAE5D,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB,OAAO,CAAA;AAkBtC;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAkCjG;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUxD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAyBnF"}

package/lib/types/dsh-adapter/recap.js

@@ -1,17 +1,3 @@
-/**
- * Session recap (`/recap`, pi-recap semantics): a single TOOL-LESS LLM
- * call that summarizes the session's RECENT activity into one line and
- * proposes a short title. Unlike `/btw` it does not replay the full
- * derived history — the recent-activity excerpt below IS the payload, so
- * the call stays cheap and the recap is about the tail of the session,
- * which is exactly what a glance at a resumed/unknown session needs.
- *
- * The answer never enters the session log — it is pure UI state (the
- * RecapPanel in the Chat screen); applying the proposed title goes
- * through the normal `/rename` path (channel.renameSession).
- *
- * @module
- */
 /** Max chars of recent activity fed to the recap call. */
 export const RECAP_RECENT_CHARS = 6000;
 /** How many exchanges (user + assistant) the recap looks back. */

package/lib/types/dsh-adapter/renderers.d.ts

@@ -33,6 +33,7 @@ export type TuiEntryRenderer = (payload: unknown) => TuiEntryRenderResult | unde
 /** Host-only transcript projection path. Plugins can register a renderer but
  * cannot invoke an arbitrary registered renderer on demand. */
 export interface TuiRendererHost {
+    register(type: string, renderer: TuiEntryRenderer): () => void;
     render(type: string, payload: unknown): TuiEntryRenderResult | undefined;
 }
 declare module '@deepseek-ai/cordis' {

package/lib/types/dsh-adapter/renderers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"renderers.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/renderers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAKtD,sEAAsE;AACtE,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iDAAiD;IACjD,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CACzB;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,oBAAoB,GAAG,SAAS,CAAA;AAErF;+DAC+D;AAC/D,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,oBAAoB,GAAG,SAAS,CAAA;CACzE;AAsBD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,YAAY,EAAE,kBAAkB,CAAA;KACjC;CACF;AAED,gEAAgE;AAChE,qBAAa,kBAAmB,SAAQ,OAAO;gBACjC,GAAG,EAAE,OAAO;IAexB;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,IAAI;CA8DnF;AA4CD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,kBAAkB,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAOrG;AAED,eAAe,kBAAkB,CAAA"}
+{"version":3,"file":"renderers.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/renderers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAUtD,sEAAsE;AACtE,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iDAAiD;IACjD,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CACzB;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,oBAAoB,GAAG,SAAS,CAAA;AAErF;+DAC+D;AAC/D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,GAAG,MAAM,IAAI,CAAA;IAC9D,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,oBAAoB,GAAG,SAAS,CAAA;CACzE;AAsBD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,YAAY,EAAE,kBAAkB,CAAA;KACjC;CACF;AAED,gEAAgE;AAChE,qBAAa,kBAAmB,SAAQ,OAAO;gBACjC,GAAG,EAAE,OAAO;IAmCxB;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,IAAI;CA+DnF;AA6CD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,kBAAkB,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAOrG;AAED,eAAe,kBAAkB,CAAA"}

package/lib/types/dsh-adapter/renderers.js

@@ -25,6 +25,8 @@ import { Service } from '@deepseek-ai/cordis';
 import { KNOWN_SESSION_EVENT_TYPES } from '@deepseek-ai/dsh-session';
 import { cleanRenderText } from './sanitize.js';
 import { bindCallerEffect, compositionRoot, concreteService, requirePluginCaller } from './host-access.js';
+import { assertCapabilityShadowPolicy, } from '../adapter/kernel/runtime.js';
+import { adapterRuntimeFor } from '../adapter/kernel/runtime-context.js';
 const TYPE_PATTERN = /^[a-z][a-z0-9-]*\/[a-z][a-z0-9-]*$/u;
 /**
  * The built-in session-event vocabulary, FROZEN at module load. The live
@@ -53,8 +55,30 @@ export class TuiRendererRuntime extends Service {
             failedTypes: new Set(),
             host: undefined,
             logger: ctx.logger,
+            runtime: adapterRuntimeFor(ctx),
         };
-        const host = Object.freeze({ render: (type, payload) => renderEntry(runtime, type, payload) });
+        const host = Object.freeze({
+            register: (type, renderer) => {
+                const state = rendererStateFor(runtime);
+                let normalized;
+                try {
+                    normalized = String(type ?? '').trim().toLowerCase();
+                }
+                catch {
+                    return () => { };
+                }
+                if (!TYPE_PATTERN.test(normalized) || typeof renderer !== 'function' || state.renderers.has(normalized)) {
+                    return () => { };
+                }
+                state.renderers.set(normalized, renderer);
+                return () => {
+                    if (state.renderers.get(normalized) !== renderer)
+                        return;
+                    state.renderers.delete(normalized);
+                };
+            },
+            render: (type, payload) => renderEntry(runtime, type, payload),
+        });
         state.host = host;
         hostRenderers.set(runtime, state);
     }
@@ -66,6 +90,7 @@ export class TuiRendererRuntime extends Service {
      * pluginId — omitting it records `undeclared` (C-060).
      */
     register(type, renderer, identity) {
+        assertCapabilityShadowPolicy('host.renderers.register', rendererStateFor(this).runtime.mode, rendererStateFor(this).runtime.slices);
         let caller;
         try {
             caller = requirePluginCaller(this.ctx, 'tuiRenderers.register', this);

package/lib/types/dsh-adapter/scenes.d.ts

@@ -1,7 +1,7 @@
 /** Provider-neutral full-screen scene registry for terminal front doors. */
 import type React from 'react';
 import { Context, Service } from '@deepseek-ai/cordis';
-import type { Channel } from './channel.js';
+import type { ChannelUi as Channel } from '../adapter/channel/ui-policy.js';
 /**
  * Props every plugin scene receives. Both element creation and hooks must go
  * through the HOST's React, never the plugin's own copy:
@@ -40,6 +40,8 @@ export interface TuiSceneDescriptor {
 /** Host-only scene controls used by the channel; omitted from the plugin export. */
 export interface TuiSceneHost {
     readonly active: TuiSceneDescriptor | undefined;
+    register(descriptor: TuiSceneDescriptor): () => void;
+    list(): readonly TuiSceneDescriptor[];
     open(id: string): boolean;
     close(): void;
     subscribe(listener: () => void): () => void;

package/lib/types/dsh-adapter/scenes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scenes.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/scenes.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAE5E,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAI3C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,KAAK,EAAE,OAAO,KAAK,CAAA;IACnB,8DAA8D;IAC9D,EAAE,EAAE,cAAc,UAAU,CAAC,CAAA;IAC7B,uEAAuE;IACvE,OAAO,EAAE,OAAO,CAAA;IAChB,mEAAmE;IACnE,KAAK,IAAI,IAAI,CAAA;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAA;IACV,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC,CAAA;CAC9C;AAED,oFAAoF;AACpF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC/C,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;IACzB,KAAK,IAAI,IAAI,CAAA;IACb,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAA;CAC5C;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,SAAS,EAAE,eAAe,CAAA;KAC3B;CACF;AAED,eAAO,MAAM,IAAI,mBAAmB,CAAA;AAEpC;;;;;;;;GAQG;AACH,qBAAa,eAAgB,SAAQ,OAAO;gBAC9B,GAAG,EAAE,OAAO;IA6BxB;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,IAAI;IAiDxE;;;;OAIG;IACH,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAMzB,KAAK,IAAI,IAAI;IAMb,8DAA8D;IAC9D,IAAI,MAAM,IAAI,kBAAkB,GAAG,SAAS,CAO3C;IAED,4EAA4E;IAC5E,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;CAS5C;AAkED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAOlG;AAED,eAAe,eAAe,CAAA"}
+{"version":3,"file":"scenes.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/scenes.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAE5E,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,KAAK,EAAE,SAAS,IAAI,OAAO,EAAE,MAAM,iCAAiC,CAAA;AAS3E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,KAAK,EAAE,OAAO,KAAK,CAAA;IACnB,8DAA8D;IAC9D,EAAE,EAAE,cAAc,UAAU,CAAC,CAAA;IAC7B,uEAAuE;IACvE,OAAO,EAAE,OAAO,CAAA;IAChB,mEAAmE;IACnE,KAAK,IAAI,IAAI,CAAA;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAA;IACV,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC,CAAA;CAC9C;AAED,oFAAoF;AACpF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC/C,QAAQ,CAAC,UAAU,EAAE,kBAAkB,GAAG,MAAM,IAAI,CAAA;IACpD,IAAI,IAAI,SAAS,kBAAkB,EAAE,CAAA;IACrC,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;IACzB,KAAK,IAAI,IAAI,CAAA;IACb,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAA;CAC5C;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,SAAS,EAAE,eAAe,CAAA;KAC3B;CACF;AAED,eAAO,MAAM,IAAI,mBAAmB,CAAA;AAEpC;;;;;;;;GAQG;AACH,qBAAa,eAAgB,SAAQ,OAAO;gBAC9B,GAAG,EAAE,OAAO;IAkDxB;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,IAAI;IAkDxE;;;;OAIG;IACH,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAOzB,KAAK,IAAI,IAAI;IAOb,8DAA8D;IAC9D,IAAI,MAAM,IAAI,kBAAkB,GAAG,SAAS,CAQ3C;IAED,4EAA4E;IAC5E,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;CAU5C;AAmED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAOlG;AAED,eAAe,eAAe,CAAA"}

package/lib/types/dsh-adapter/scenes.js

@@ -2,6 +2,8 @@
 import { Service } from '@deepseek-ai/cordis';
 import { activationFiber, bindCallerEffect, compositionRoot, concreteService, requirePluginCaller } from './host-access.js';
 import { componentIdentityOf } from './component-identity.js';
+import { assertCapabilityShadowPolicy, } from '../adapter/kernel/runtime.js';
+import { adapterRuntimeFor } from '../adapter/kernel/runtime-context.js';
 export const name = 'dsh-tui-scenes';
 /**
  * Small host-only registry; command execution remains owned by dsh-commands.
@@ -24,11 +26,35 @@ export class TuiSceneRuntime extends Service {
             current: undefined,
             host: undefined,
             logger: ctx.logger,
+            runtime: adapterRuntimeFor(ctx),
         };
         state.host = Object.freeze({
             get active() {
                 return sceneStateFor(runtime).current;
             },
+            register(descriptor) {
+                const state = sceneStateFor(runtime);
+                const id = descriptor.id.trim().toLowerCase();
+                if (!/^[a-z][a-z0-9_-]*$/u.test(id))
+                    throw new TypeError(`invalid TUI scene id: ${descriptor.id}`);
+                if (state.scenes.has(id))
+                    throw new Error(`TUI scene "${id}" is already registered`);
+                const normalized = Object.freeze({ ...descriptor, id });
+                state.scenes.set(id, normalized);
+                return () => {
+                    if (state.scenes.get(id) !== normalized)
+                        return;
+                    state.scenes.delete(id);
+                    state.owners.delete(id);
+                    if (state.current === normalized) {
+                        state.current = undefined;
+                        notifyScenes(state);
+                    }
+                };
+            },
+            list() {
+                return [...sceneStateFor(runtime).scenes.values()];
+            },
             open(id) {
                 return openScene(runtime, id);
             },
@@ -48,6 +74,7 @@ export class TuiSceneRuntime extends Service {
      * records `undeclared` (C-060).
      */
     register(descriptor, identity) {
+        assertCapabilityShadowPolicy('host.scenes.register', sceneStateFor(this).runtime.mode, sceneStateFor(this).runtime.slices);
         const state = sceneStateFor(this);
         const caller = requirePluginCaller(this.ctx, 'tuiScenes.register', this);
         const activationOwner = activationFiber(caller);
@@ -95,11 +122,13 @@ export class TuiSceneRuntime extends Service {
      * the log, not silently do nothing in the UI.
      */
     open(id) {
+        assertCapabilityShadowPolicy('host.scenes.open', sceneStateFor(this).runtime.mode, sceneStateFor(this).runtime.slices);
         const caller = requirePluginCaller(this.ctx, 'tuiScenes.open', this);
         const owner = activationFiber(caller);
         return owner === undefined ? false : openScene(this, id, caller, owner);
     }
     close() {
+        assertCapabilityShadowPolicy('host.scenes.close', sceneStateFor(this).runtime.mode, sceneStateFor(this).runtime.slices);
         const caller = requirePluginCaller(this.ctx, 'tuiScenes.close', this);
         const owner = activationFiber(caller);
         if (owner !== undefined)
@@ -107,6 +136,7 @@ export class TuiSceneRuntime extends Service {
     }
     /** The scene currently replacing the conversation, if any. */
     get active() {
+        assertCapabilityShadowPolicy('host.scenes.active', sceneStateFor(this).runtime.mode, sceneStateFor(this).runtime.slices);
         const caller = requirePluginCaller(this.ctx, 'tuiScenes.active', this);
         const owner = activationFiber(caller);
         const state = sceneStateFor(this);
@@ -116,6 +146,7 @@ export class TuiSceneRuntime extends Service {
     }
     /** UI-side change feed: fired after every open/close/dispose transition. */
     subscribe(listener) {
+        assertCapabilityShadowPolicy('host.scenes.subscribe', sceneStateFor(this).runtime.mode, sceneStateFor(this).runtime.slices);
         const caller = requirePluginCaller(this.ctx, 'tuiScenes.subscribe', this);
         const owner = activationFiber(caller);
         if (owner === undefined)

package/lib/types/dsh-adapter/sessionTree.d.ts

@@ -1,3 +1,5 @@
+import type { SessionTreeData, TreeNode, TreeEntry } from '../adapter/ports/channel-session.js';
+export type { SessionTreeData, TreeNode, TreeEntry, TreeEntryKind, SessionTreeMeta, SessionRewindFacts, TurnRange } from '../adapter/ports/channel-session.js';
 /**
  * Session family tree — the model behind the /tree screen
  * (pi's Session Tree ported to DSH's cross-session fork model).
@@ -15,37 +17,9 @@
  * @module @deepseek-harness-tui/dsh-tui/sessionTree
  */
 import type { SessionEvent } from '@deepseek-ai/dsh-session';
-/** Displayable entry kinds (a subset of ChatRow kinds, plus fork structure). */
-export type TreeEntryKind = 'user' | 'assistant' | 'tool' | 'compact' | 'interrupt' | 'notice';
 /** Filter modes cycled in the tree screen (pi parity, minus labels). */
 export type TreeFilter = 'default' | 'no-tools' | 'user-only' | 'all';
 export declare const TREE_FILTERS: readonly TreeFilter[];
-/** One displayable log entry; identity = (sessionId, seq). */
-export interface TreeEntry {
-    readonly sessionId: string;
-    /** Source event seq inside that session's log (the fork anchor). */
-    readonly seq: number;
-    readonly kind: TreeEntryKind;
-    /** One-line preview (whitespace folded, capped). */
-    readonly text: string;
-    /** Uncapped searchable text (kind + tool name + content). */
-    readonly searchText: string;
-    /** Event wall-clock time. */
-    readonly time: number;
-    /** Tool outcome for kind 'tool' (settled by tool/result during extraction). */
-    readonly toolStatus?: 'running' | 'ok' | 'error';
-    /** Extra marker (e.g. `aborted` for chunk-only assistant text). */
-    readonly label?: string;
-    /** True on entries of the log's OWN first turn (a complete log's turn 0).
-     *  Only USER entries among them are unrewindable (dropping turn 0 needs
-     *  boundary -1, "cannot rewind to the very first message"), so the screen
-     *  refuses those up front instead of failing at confirm time; non-user
-     *  turn-0 entries rewind fine (a mid-turn cut at their step's step/end, or
-     *  turn 0's closing turn/end). Never set on a truncated tail: its first
-     *  VISIBLE turn rewinds fine against the full log, which is where
-     *  rewindToNode computes boundaries. */
-    readonly firstTurn?: boolean;
-}
 /** One family member's log, as channel.buildSessionTree gathered it. */
 export interface FamilySession {
     readonly id: string;
@@ -73,58 +47,6 @@ export interface FamilySession {
      *  hold content the UX claims does not exist. */
     readonly tailComplete?: boolean;
 }
-export interface TreeNode {
-    /** `${sessionId}:${seq}`, or `${sessionId}:head` for a placeholder. */
-    readonly id: string;
-    /** Null only on a session's placeholder node (empty fork / unreadable log). */
-    readonly entry: TreeEntry | null;
-    /** Session whose chain this node belongs to. */
-    readonly sessionId: string;
-    /** True on a session chain's first node (renders the fork/session marker). */
-    branchHead: boolean;
-    children: TreeNode[];
-}
-export interface SessionTreeData {
-    readonly roots: readonly TreeNode[];
-    /** Node ids on the path from the family root to the live tip (`•` marker). */
-    readonly activePath: ReadonlySet<string>;
-    /** Live session's last node (initial cursor target). */
-    readonly activeLeafId: string | null;
-    /** Per-session display facts (branch-head labels in the screen). */
-    readonly sessions: ReadonlyMap<string, SessionTreeMeta>;
-    /** Per-session rewind UX facts (drop-turn warning, branch-adopt target). */
-    readonly rewindFacts: ReadonlyMap<string, SessionRewindFacts>;
-    /** True when the family exceeded a cap and distant branches were dropped. */
-    readonly truncated: boolean;
-    readonly sessionCount: number;
-}
-/** One own turn of a session, as far as the loaded events show it. */
-export interface TurnRange {
-    /** turn/start seq. */
-    readonly start: number;
-    /** turn/end seq, or the last loaded event's seq while the turn is open. */
-    readonly end: number;
-    /** Displayable own entries inside (start, end]. */
-    readonly entries: number;
-    /** The turn/end was seen (an open turn's end is only the loaded tail). */
-    readonly closed: boolean;
-}
-/** Per-session rewind UX facts, derived from the loaded events at build time. */
-export interface SessionRewindFacts {
-    /** Own turns in seq order. A turn whose start was trimmed away (coverage /
-     *  budget head cut) has no range — its entries find no match and the
-     *  confirm UX stays silent rather than guessing. */
-    readonly turns: readonly TurnRange[];
-    /** Own entries displayed for this session. */
-    readonly ownEntries: number;
-    /** The loaded events reach the log tip (see FamilySession.tailComplete). */
-    readonly tailComplete: boolean;
-    /** Adopt-this-branch fork target: the log's last turn/end seq. Only set
-     *  when tailComplete holds and a closed turn exists — a tail-cut read's
-     *  last turn/end is NOT the branch tip, and forking there would silently
-     *  drop the unseen tail the user means to keep. */
-    readonly tipBoundary?: number;
-}
 /** What dropping a user-message pick's turn removes (the confirm warning). */
 export interface DropTurnInfo {
     /** Own entries of the session inside the dropped turn. */
@@ -141,14 +63,6 @@ export interface DropTurnInfo {
  * step) and whenever the turn cannot be located in the loaded events.
  */
 export declare function droppedTurnInfo(data: SessionTreeData, entry: TreeEntry): DropTurnInfo | undefined;
-export interface SessionTreeMeta {
-    readonly title?: string;
-    readonly createdAt: number;
-    readonly live: boolean;
-    readonly unreadable: boolean;
-    /** Log unread because the browse budget was spent (placeholder node). */
-    readonly unloaded: boolean;
-}
 /** One flattened, render-ready row with its tree-drawing geometry. */
 export interface FlatNode {
     readonly node: TreeNode;
@@ -175,13 +89,18 @@ export interface GutterInfo {
 }
 /**
  * Coalesce runs of same-type assistant/chunk deltas into single synthetic
- * events for REPLAY only. A streamed turn logs one event per token (~100k
- * events in long sessions); replaying them one at a time costs per-chunk
- * string growth on every row (quadratic in the turn's length). Merging is
- * outcome-identical: ensureStreaming/ensureReasoning only read chunk.type
- * and the concatenated text, and the row's seq comes from the run's FIRST
- * chunk (the fork boundary rewindToNode derives from it). Parts join once —
- * no quadratic concat. Live events never go through this.
+ * events for REPLAY only. A streamed pre-V3 turn logs one event per token
+ * (~100k events in long sessions); replaying them one at a time costs
+ * per-chunk string growth on every row (quadratic in the turn's length).
+ * Merging is outcome-identical: ensureStreaming/ensureReasoning only read
+ * chunk.type and the concatenated text, and the row's seq comes from the
+ * run's FIRST chunk (the fork boundary rewindToNode derives from it). Parts
+ * join once — no quadratic concat. Live events never go through this.
+ *
+ * Pre-V3 durable logs only: 0.1.5 removed `assistant/chunk` from the event
+ * union (V3 embeds the compacted stream in `assistant/message.stream`), so
+ * the merger works on the widened structural shape — runtime payloads from
+ * raw pre-V3 logs remain typed as SessionEvent by the reader.
  *
  * (Moved from channel.ts: the transcript replay and the tree extraction
  * share it.)