@deepseek-harness-tui/dsh-tui 0.10.0 → 0.10.2

package/lib/types/dsh-adapter/sessions/types.d.ts

@@ -1,125 +1,5 @@
-/**
- * What the TUI knows about a persisted session before opening it.
- *
- * The shape here is the whole point of this feature. The picker used to run on
- * `{ id, title, cwd, createdAt, updatedAt }`, and every defect it had was
- * downstream of that: it could not tell a delegated sub-agent run from a
- * conversation because it never carried the distinction, and it could not show
- * why a row was labelled the way it was because the label arrived without its
- * provenance. So the types below carry both — the kind as a closed sum, and
- * every derived label together with the evidence that produced it.
- *
- * @module @deepseek-harness-tui/dsh-tui/sessions/types
- */
-/**
- * What a persisted session *is*, decided once from its immutable header.
- *
- * A closed sum rather than a pair of booleans: `isSubagent`/`isFork` would
- * admit a fourth, meaningless combination, and every reader would have to
- * re-derive the precedence between them. Deciding once, here, is also the fix
- * for the defect that started this work — `origin` and `parentSession` reached
- * the picker and were dropped on the floor.
- *
- * The discriminator is `origin`, never `parentSession`. A `/rewind` fork
- * carries `parentSession` and no `origin`, so filtering on lineage alone would
- * silently hide the user's own rewound branches along with the sub-agents.
- */
-export type SessionKind = 
-/** A conversation the user started. */
-{
-    readonly kind: 'root';
-}
-/**
- * A `/rewind` fork: a real conversation that inherited a prefix of its
- * parent's log. `parent` is what defines it, so it is never absent.
- */
- | {
-    readonly kind: 'fork';
-    readonly parent: string;
-}
-/**
- * A delegated sub-agent run. `origin: 'subagent'` is the authority, so the
- * lineage link is reported as it is found — a run whose header records no
- * parent is still a sub-agent run.
- */
- | {
-    readonly kind: 'subagent';
-    readonly parent: string | undefined;
-    readonly depth: number;
-};
-/** Which evidence produced a session's display title. */
-export type TitleSource = 
-/** A `session/title` event appended after the session's own opening — a rename. */
-'renamed'
-/** The session's first `session/title`, written for it automatically. */
- | 'auto'
-/** No title event; the opening user prompt stands in. */
- | 'prompt'
-/** Nothing readable; the working directory's basename stands in. */
- | 'fallback';
-/**
- * A display title and the evidence behind it.
- *
- * The source travels with the text because the UI consumes it: a `fallback`
- * title is dimmed rather than presented as if the session were named that, and
- * a reader who wonders why a row carries a fallback label can be told. A source that
- * nothing consumed would be decoration; this one changes what is rendered.
- */
-export interface SessionTitle {
-    readonly text: string;
-    readonly source: TitleSource;
-}
-/**
- * Everything the browser shows for one session, and nothing that costs an
- * unbounded read to learn.
- *
- * That second half is an invariant, not an accident: every field here comes
- * from the persistence header, one `stat`, or a bounded window at one end of
- * the log. A session's full statistics (turn counts, tool totals, token spend)
- * require folding the entire event log, which is what the trajectory scene is
- * for — the browser stays responsive on a 4 MB log because it never asks a
- * question that big.
- */
-export interface SessionSummary {
-    readonly id: string;
-    readonly kind: SessionKind;
-    readonly title: SessionTitle;
-    /** Working directory recorded in the header; '' when it recorded none. */
-    readonly cwd: string;
-    readonly createdAt: number;
-    /**
-     * Last activity: the later of the log's own mtime and this install's
-     * last-used note. Both are lower bounds on "when this session was last
-     * touched" — the mtime catches writes by another client (dsh web appends to
-     * the same store), the note catches a resume this install performed. The
-     * later of two lower bounds is the best available answer, and unlike a
-     * composite value there is no risk of stitching halves from different
-     * origins: this is one scalar with two witnesses.
-     */
-    readonly updatedAt: number;
-    /** Log size in bytes; undefined when the backend owns no per-session file. */
-    readonly bytes: number | undefined;
-    /**
-     * Whether the log holds a user prompt at all.
-     *
-     * `list()` reports *materialized* sessions, not conversations: a session
-     * that only ever recorded its own boot policy is a real stored session with
-     * nothing to resume. Answering this is the consumer's job — the header does
-     * not promise it — and getting it wrong is why one empty row per launch used
-     * to accumulate in the picker.
-     */
-    readonly hasPrompt: boolean;
-    /** Agent preset the session was composed from, when the deployment records one. */
-    readonly agentPreset: string | undefined;
-    /** Model last seen in the log's trailing window, when one is recorded. */
-    readonly model: string | undefined;
-    /** Sub-agent label from the run's descriptor (`subagent` kind only). */
-    readonly label: string | undefined;
-    /** Git branch noted when this install last used the session. */
-    readonly branch: string | undefined;
-    /** How many sub-agent runs name this session as their parent. */
-    readonly childCount: number;
-}
+import type { SessionTitle } from '../../adapter/ports/channel-session.js';
+export type { SessionSummary, SessionKind, SessionTitle, TitleSource, PreviewEntry } from '../../adapter/ports/channel-session.js';
 /**
  * Facts a bounded read can recover from one session log.
  *
@@ -129,6 +9,8 @@ export interface SessionSummary {
  */
 export interface SessionDigest {
     readonly title: SessionTitle | undefined;
+    /** False only after a complete successful scan proves no human message;
+     * true also keeps inconclusive reads visible and out of empty cleanup. */
     readonly hasPrompt: boolean;
     readonly model: string | undefined;
     readonly label: string | undefined;
@@ -136,10 +18,4 @@ export interface SessionDigest {
      * trailing window; no unseen middle event can supersede it. */
     readonly titleComplete?: true;
 }
-/** One exchange in the preview pane, newest last. */
-export interface PreviewEntry {
-    readonly role: 'user' | 'assistant';
-    readonly text: string;
-    readonly at: number | undefined;
-}
 //# sourceMappingURL=types.d.ts.map

package/lib/types/dsh-adapter/sessions/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/dsh-adapter/sessions/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,WAAW;AACrB,uCAAuC;AACrC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC3B;;;GAGG;GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACpD;;;;GAIG;GACD;IACA,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,CAAA;AAEH,yDAAyD;AACzD,MAAM,MAAM,WAAW;AACrB,mFAAmF;AACjF,SAAS;AACX,yEAAyE;GACvE,MAAM;AACR,yDAAyD;GACvD,QAAQ;AACV,oEAAoE;GAClE,UAAU,CAAA;AAEd;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAC7B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,mFAAmF;IACnF,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,iEAAiE;IACjE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,CAAA;IACxC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC;mEAC+D;IAC/D,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAA;CAC9B;AAED,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,CAAA;CAChC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/dsh-adapter/sessions/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA+B,YAAY,EAA6B,MAAM,wCAAwC,CAAA;AAClI,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAGlI;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,CAAA;IACxC;8EAC0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC;mEAC+D;IAC/D,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAA;CAC9B"}

package/lib/types/dsh-adapter/sessions/types.js

@@ -1,14 +1 @@
-/**
- * What the TUI knows about a persisted session before opening it.
- *
- * The shape here is the whole point of this feature. The picker used to run on
- * `{ id, title, cwd, createdAt, updatedAt }`, and every defect it had was
- * downstream of that: it could not tell a delegated sub-agent run from a
- * conversation because it never carried the distinction, and it could not show
- * why a row was labelled the way it was because the label arrived without its
- * provenance. So the types below carry both — the kind as a closed sum, and
- * every derived label together with the evidence that produced it.
- *
- * @module @deepseek-harness-tui/dsh-tui/sessions/types
- */
 export {};

package/lib/types/dsh-adapter/settings-sections.d.ts

@@ -1,3 +1,5 @@
+import type { TuiSettingsSection } from '../adapter/ports/channel-settings.js';
+export type { TuiSettingsSection, TuiSettingsGroup, TuiSettingsField, TuiSettingsFieldKind, TuiSettingsFieldOption, TuiSettingsFieldWrite } from '../adapter/ports/channel-settings.js';
 /**
  * Plugin settings-section extension seam for terminal front doors.
  *
@@ -10,104 +12,11 @@
  * metadata only.
  */
 import { Context, Service } from '@deepseek-ai/cordis';
-import type { LocalizedDescriptions } from '../commands.js';
-/** Control kinds the TUI settings screen knows how to render. */
-export type TuiSettingsFieldKind = 'text' | 'number' | 'boolean' | 'select';
-export interface TuiSettingsFieldOption {
-    /** Stored value. */
-    value: string;
-    /** Display label (English; also the fallback). */
-    label: string;
-    /** Provider-owned translations for the label. */
-    descriptions?: LocalizedDescriptions;
-}
-/** Optional navigation group inside one settings section. */
-export interface TuiSettingsGroup {
-    /** Stable identifier, unique inside the section. */
-    id: string;
-    /** Group title (English; also the fallback). */
-    title: string;
-    /** Provider-owned translations for the title. */
-    descriptions?: LocalizedDescriptions;
-}
-/** The write one field's draft stages when the section is saved. */
-export type TuiSettingsFieldWrite = {
-    kind: 'set';
-    value: unknown;
-} | {
-    kind: 'clear';
-};
-export interface TuiSettingsField {
-    /**
-     * Key path from the section root, in the settings service's `mutate` path
-     * vocabulary (object keys; dict keys name their entry directly).
-     */
-    path: readonly string[];
-    /** Short field label (English; also the fallback). */
-    label: string;
-    /** Provider-owned translations for the label. */
-    descriptions?: LocalizedDescriptions;
-    /** Optional one-line help rendered under the field. */
-    hint?: string;
-    /** Provider-owned translations for the hint. */
-    hintDescriptions?: LocalizedDescriptions;
-    /** Optional group id; grouped fields render on that group's subpage. */
-    group?: string;
-    kind: TuiSettingsFieldKind;
-    /**
-     * Choices for `kind: 'select'`; any options-bearing field (text hybrids
-     * included — e.g. the page-margin presets) also cycles via ←/→ in the
-     * settings list while Enter keeps the kind's own action (select cycles,
-     * text opens the editor for a custom value).
-     */
-    options?: readonly TuiSettingsFieldOption[];
-    /** Input placeholder for `kind: 'text' | 'number'`. */
-    placeholder?: string;
-    /**
-     * Credential control (mirrors the web cards' CardSecretSpec): the literal
-     * never rides the settings document — the draft starts blank on every
-     * open, a blank draft writes nothing, and a typed draft writes through the
-     * credentials seam under `ref`. The screen shows only whether a value is
-     * configured.
-     */
-    secret?: {
-        ref: string;
-    };
-    /**
-     * Render a stored value as draft text. Defaults to the kind's conversion
-     * (strings verbatim, numbers via `String`, booleans/selects by value).
-     */
-    format?(value: unknown): string;
-    /**
-     * The write this draft text stages, or `undefined` when the text is not a
-     * value this field accepts — an invalid draft blocks the save rather than
-     * being discarded. Defaults to the kind's conversion (an empty text/number
-     * draft stages a clear, letting the field re-inherit the composition
-     * layer).
-     */
-    parse?(text: string): TuiSettingsFieldWrite | undefined;
-}
-/** One plugin's section inside the TUI settings screen. */
-export interface TuiSettingsSection {
-    /**
-     * Settings namespace this section edits. Should match a namespace the
-     * plugin registers on the dsh settings service; the screen marks the
-     * section unavailable when the composition serves no such namespace.
-     */
-    ns: string;
-    /** Section title (English; also the fallback). */
-    title: string;
-    /** Provider-owned translations for the title. */
-    descriptions?: LocalizedDescriptions;
-    /** Optional navigation groups, in display order. */
-    groups?: readonly TuiSettingsGroup[];
-    /** Editable fields, in display order. */
-    fields: readonly TuiSettingsField[];
-}
 /** Host-only settings-section controls used by the TUI bootstrap/channel. */
 export interface TuiSettingsSectionsHost {
     register(section: TuiSettingsSection): () => void;
     list(): readonly TuiSettingsSection[];
+    section(ns: string): TuiSettingsSection | undefined;
     subscribe(listener: () => void): () => void;
 }
 declare module '@deepseek-ai/cordis' {
@@ -134,6 +43,6 @@ export declare class TuiSettingsSectionsRuntime extends Service {
     subscribe(listener: () => void): () => void;
 }
 export declare function getHostSettingsSections(runtime: TuiSettingsSectionsRuntime | undefined): TuiSettingsSectionsHost | undefined;
-export declare function getLocalSettingsSectionsHost(): TuiSettingsSectionsHost;
+export declare function getLocalSettingsSectionsHost(ctx?: Context): TuiSettingsSectionsHost;
 export default TuiSettingsSectionsRuntime;
 //# sourceMappingURL=settings-sections.d.ts.map

package/lib/types/dsh-adapter/settings-sections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings-sections.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/settings-sections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AAI3D,iEAAiE;AACjE,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAA;AAE3E,MAAM,WAAW,sBAAsB;IACrC,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAA;IACb,iDAAiD;IACjD,YAAY,CAAC,EAAE,qBAAqB,CAAA;CACrC;AAED,6DAA6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,EAAE,EAAE,MAAM,CAAA;IACV,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAA;IACb,iDAAiD;IACjD,YAAY,CAAC,EAAE,qBAAqB,CAAA;CACrC;AAED,oEAAoE;AACpE,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAA;AAErB,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IACvB,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAA;IACb,iDAAiD;IACjD,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,gDAAgD;IAChD,gBAAgB,CAAC,EAAE,qBAAqB,CAAA;IACxC,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,oBAAoB,CAAA;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAA;IAC3C,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;IACxB;;;OAGG;IACH,MAAM,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAA;IAC/B;;;;;;OAMG;IACH,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAAA;CACxD;AAED,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAA;IACV,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAA;IACb,iDAAiD;IACjD,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,oDAAoD;IACpD,MAAM,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAA;IACpC,yCAAyC;IACzC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAA;CACpC;AAED,6EAA6E;AAC7E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,IAAI,CAAA;IACjD,IAAI,IAAI,SAAS,kBAAkB,EAAE,CAAA;IACrC,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAA;CAC5C;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,mBAAmB,EAAE,0BAA0B,CAAA;KAChD;CACF;AAED,eAAO,MAAM,IAAI,8BAA8B,CAAA;AAE/C;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,OAAO;gBACzC,GAAG,EAAE,OAAO;IAmBxB,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,IAAI;IAsBjD,iDAAiD;IACjD,IAAI,IAAI,SAAS,kBAAkB,EAAE;IAQrC,sDAAsD;IACtD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAQnD;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;CAS5C;AAwFD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,0BAA0B,GAAG,SAAS,GAAG,uBAAuB,GAAG,SAAS,CAO5H;AAuBD,wBAAgB,4BAA4B,IAAI,uBAAuB,CAatE;AAED,eAAe,0BAA0B,CAAA"}
+{"version":3,"file":"settings-sections.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/settings-sections.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAA2G,MAAM,sCAAsC,CAAA;AACvL,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AACvL;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAWtD,6EAA6E;AAC7E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,IAAI,CAAA;IACjD,IAAI,IAAI,SAAS,kBAAkB,EAAE,CAAA;IACrC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAA;IACnD,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAA;CAC5C;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,mBAAmB,EAAE,0BAA0B,CAAA;KAChD;CACF;AAED,eAAO,MAAM,IAAI,8BAA8B,CAAA;AAE/C;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,OAAO;gBACzC,GAAG,EAAE,OAAO;IAsBxB,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,IAAI;IAuBjD,iDAAiD;IACjD,IAAI,IAAI,SAAS,kBAAkB,EAAE;IASrC,sDAAsD;IACtD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IASnD;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;CAU5C;AAyFD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,0BAA0B,GAAG,SAAS,GAAG,uBAAuB,GAAG,SAAS,CAO5H;AAiDD,wBAAgB,4BAA4B,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,uBAAuB,CAiBnF;AAED,eAAe,0BAA0B,CAAA"}

package/lib/types/dsh-adapter/settings-sections.js

@@ -12,6 +12,8 @@
 import { Service } from '@deepseek-ai/cordis';
 import { activationFiber, bindCallerEffect, compositionRoot, concreteService, requirePluginCaller } from './host-access.js';
 import { vetSectionSecretRefs } from './credentialRefGuard.js';
+import { assertCapabilityShadowPolicy, defaultAdapterRuntime, } from '../adapter/kernel/runtime.js';
+import { adapterRuntimeFor } from '../adapter/kernel/runtime-context.js';
 export const name = 'dsh-tui-settings-sections';
 /**
  * Small host-only registry; settings storage and validation remain owned by
@@ -22,7 +24,7 @@ export class TuiSettingsSectionsRuntime extends Service {
         super(ctx, 'tuiSettingsSections');
         compositionRoot(ctx);
         const runtime = this;
-        const state = { sections: new Map(), owners: new Map(), listeners: new Set(), host: undefined };
+        const state = { sections: new Map(), owners: new Map(), listeners: new Set(), host: undefined, runtime: adapterRuntimeFor(ctx) };
         state.host = Object.freeze({
             register(section) {
                 return registerSection(runtime, section);
@@ -30,6 +32,9 @@ export class TuiSettingsSectionsRuntime extends Service {
             list() {
                 return [...settingsSectionStateFor(runtime).sections.values()];
             },
+            section(ns) {
+                return settingsSectionStateFor(runtime).sections.get(ns.trim());
+            },
             subscribe(listener) {
                 return subscribeSections(runtime, listener);
             },
@@ -37,6 +42,7 @@ export class TuiSettingsSectionsRuntime extends Service {
         settingsSectionStates.set(this, state);
     }
     register(section) {
+        assertCapabilityShadowPolicy('host.settings.register', settingsSectionStateFor(this).runtime.mode, settingsSectionStateFor(this).runtime.slices);
         const caller = requirePluginCaller(this.ctx, 'tuiSettingsSections.register', this);
         const owner = activationFiber(caller);
         if (owner === undefined)
@@ -58,6 +64,7 @@ export class TuiSettingsSectionsRuntime extends Service {
     }
     /** Registered sections in registration order. */
     list() {
+        assertCapabilityShadowPolicy('host.settings.list', settingsSectionStateFor(this).runtime.mode, settingsSectionStateFor(this).runtime.slices);
         const caller = requirePluginCaller(this.ctx, 'tuiSettingsSections.list', this);
         const owner = activationFiber(caller);
         return owner === undefined ? [] : [...settingsSectionStateFor(this).sections.entries()]
@@ -66,6 +73,7 @@ export class TuiSettingsSectionsRuntime extends Service {
     }
     /** The section registered for a namespace, if any. */
     section(ns) {
+        assertCapabilityShadowPolicy('host.settings.section', settingsSectionStateFor(this).runtime.mode, settingsSectionStateFor(this).runtime.slices);
         const caller = requirePluginCaller(this.ctx, 'tuiSettingsSections.section', this);
         const owner = activationFiber(caller);
         const state = settingsSectionStateFor(this);
@@ -77,6 +85,7 @@ export class TuiSettingsSectionsRuntime extends Service {
      * re-read the section list (a plugin (un)loading mid-session changes it).
      */
     subscribe(listener) {
+        assertCapabilityShadowPolicy('host.settings.subscribe', settingsSectionStateFor(this).runtime.mode, settingsSectionStateFor(this).runtime.slices);
         const caller = requirePluginCaller(this.ctx, 'tuiSettingsSections.subscribe', this);
         const owner = activationFiber(caller);
         if (owner === undefined)
@@ -190,24 +199,52 @@ function isSectionState(value) {
  * service is unavailable. Third-party sections still require the service
  * row; the local host only carries the TUI's own section.
  */
-const localSectionsState = {
-    sections: new Map(),
-    owners: new Map(),
-    listeners: new Set(),
-    host: undefined,
-};
-export function getLocalSettingsSectionsHost() {
-    localSectionsState.host ??= Object.freeze({
+let defaultLocalSectionsState;
+const localSectionsStates = new WeakMap();
+function localSectionsStateFor(ctx) {
+    if (ctx === undefined) {
+        // The no-context fallback is captured lazily on first use so importing
+        // this module never freezes an env-dependent policy before the embedding
+        // process has a chance to configure adapter mode.
+        defaultLocalSectionsState ??= {
+            runtime: defaultAdapterRuntime(),
+            sections: new Map(),
+            owners: new Map(),
+            listeners: new Set(),
+            host: undefined,
+        };
+        return defaultLocalSectionsState;
+    }
+    const root = compositionRoot(ctx);
+    let state = localSectionsStates.get(root);
+    if (state === undefined) {
+        state = {
+            runtime: adapterRuntimeFor(ctx),
+            sections: new Map(),
+            owners: new Map(),
+            listeners: new Set(),
+            host: undefined,
+        };
+        localSectionsStates.set(root, state);
+    }
+    return state;
+}
+export function getLocalSettingsSectionsHost(ctx) {
+    const state = localSectionsStateFor(ctx);
+    state.host ??= Object.freeze({
         register(section) {
-            return registerSection(localSectionsState, section);
+            return registerSection(state, section);
         },
         list() {
-            return [...localSectionsState.sections.values()];
+            return [...state.sections.values()];
+        },
+        section(ns) {
+            return state.sections.get(ns.trim());
         },
         subscribe(listener) {
-            return subscribeSections(localSectionsState, listener);
+            return subscribeSections(state, listener);
         },
     });
-    return localSectionsState.host;
+    return state.host;
 }
 export default TuiSettingsSectionsRuntime;

package/lib/types/dsh-adapter/settingsEditor.d.ts

@@ -1,3 +1,5 @@
+import type { SettingsHost, SettingsNamespaceView } from '../adapter/ports/channel-settings.js';
+export type { SettingsHost, SettingsNamespaceView, SettingsPathOp } from '../adapter/ports/channel-settings.js';
 /**
  * React-free form model behind the `/settings` screen (issue #165), mirroring
  * the web front door's card-form.ts semantics: a section stages what the user
@@ -17,42 +19,6 @@
  * translates between drafts and `mutate` path ops.
  */
 import type { TuiSettingsField } from './settings-sections.js';
-/** One settings namespace as the screen reads it (secrets redacted). */
-export interface SettingsNamespaceView {
-    readonly ns: string;
-    /** Monotonic revision of the raw user section; fences writes. */
-    readonly revision: number;
-    /** 'live' applies immediately; 'restart' needs a relaunch. */
-    readonly applies: 'live' | 'restart';
-    /** Current resolved value (all layers composed). */
-    readonly value: unknown;
-    /** Raw user layer; a path present here is a user override. */
-    readonly user: unknown;
-}
-/**
- * Runtime capabilities the settings screen needs, implemented by the channel
- * over the dsh `settings` / `credentials` seams. `undefined` from
- * `channel.settingsHost()` means the composition lacks them (bare cordis.yml
- * start) and the screen shows namespaces read-only.
- */
-export interface SettingsHost {
-    /** Every registered namespace, secrets redacted, in registration order. */
-    listNamespaces(): readonly SettingsNamespaceView[];
-    /** Write path ops against a namespace, fenced by its current revision. */
-    write(ns: string, ops: readonly SettingsPathOp[], expectedRevision?: number): Promise<void>;
-    /** Whether any layer supplies a credential under `ref`. */
-    credentialConfigured(ref: string): Promise<boolean>;
-    /** Persist a credential; rejects when env-shadowed or the store is read-only. */
-    writeCredential(ref: string, value: string): Promise<void>;
-}
-export type SettingsPathOp = {
-    op: 'set';
-    path: readonly string[];
-    value: unknown;
-} | {
-    op: 'unset';
-    path: readonly string[];
-};
 /** One field as the screen renders it. */
 export interface SettingsFieldState {
     /** Draft text the control renders. */

package/lib/types/dsh-adapter/settingsEditor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settingsEditor.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/settingsEditor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAyB,MAAM,wBAAwB,CAAA;AAErF,wEAAwE;AACxE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,oDAAoD;IACpD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,2EAA2E;IAC3E,cAAc,IAAI,SAAS,qBAAqB,EAAE,CAAA;IAClD,0EAA0E;IAC1E,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,cAAc,EAAE,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3F,2DAA2D;IAC3D,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnD,iFAAiF;IACjF,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3D;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACtD;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAA;AAE5C,0CAA0C;AAC1C,MAAM,WAAW,kBAAkB;IACjC,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAA;IACZ,oEAAoE;IACpE,UAAU,EAAE,OAAO,CAAA;IACnB,8EAA8E;IAC9E,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,gDAAgD;AAChD,MAAM,WAAW,oBAAoB;IACnC,iEAAiE;IACjE,SAAS,EAAE,OAAO,CAAA;IAClB,4DAA4D;IAC5D,KAAK,EAAE,OAAO,CAAA;IACd,kEAAkE;IAClE,OAAO,EAAE,OAAO,CAAA;IAChB,mCAAmC;IACnC,MAAM,EAAE,OAAO,CAAA;IACf,sEAAsE;IACtE,MAAM,EAAE,OAAO,CAAA;IACf;4EACwE;IACxE,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,8DAA8D;AAC9D,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAWxE;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAOxE;AAiDD;;;;GAIG;AACH,qBAAa,YAAY;IAOrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IARzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,MAAM,UAAQ;IACd,MAAM,UAAQ;IACd,cAAc,EAAE,MAAM,GAAG,SAAS,CAAY;gBAG3B,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,qBAAqB,GAAG,SAAS,EACvC,MAAM,EAAE,SAAS,gBAAgB,EAAE;IAGtD,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,4EAA4E;IAC5E,IAAI,SAAS,IAAI,qBAAqB,GAAG,SAAS,CAEjD;IAED,KAAK,CAAC,KAAK,EAAE,gBAAgB,GAAG,kBAAkB;IAuBlD,KAAK,IAAI,oBAAoB;IAe7B,uDAAuD;IACvD,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO;IAI1C,sCAAsC;IACtC,IAAI,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAKjD,gFAAgF;IAChF,UAAU,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAKzC,8BAA8B;IAC9B,OAAO,IAAI,IAAI;IAKf,uEAAuE;IACvE,OAAO,CAAC,YAAY;IAKpB,kEAAkE;IAClE,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;;;;;;OAUG;IACG,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IAsD9B,0EAA0E;IAC1E,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAGhE"}
+{"version":3,"file":"settingsEditor.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/settingsEditor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,qBAAqB,EAAkB,MAAM,sCAAsC,CAAA;AAC/G,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AAC/G;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAyB,MAAM,wBAAwB,CAAA;AAErF,0CAA0C;AAC1C,MAAM,WAAW,kBAAkB;IACjC,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAA;IACZ,oEAAoE;IACpE,UAAU,EAAE,OAAO,CAAA;IACnB,8EAA8E;IAC9E,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,gDAAgD;AAChD,MAAM,WAAW,oBAAoB;IACnC,iEAAiE;IACjE,SAAS,EAAE,OAAO,CAAA;IAClB,4DAA4D;IAC5D,KAAK,EAAE,OAAO,CAAA;IACd,kEAAkE;IAClE,OAAO,EAAE,OAAO,CAAA;IAChB,mCAAmC;IACnC,MAAM,EAAE,OAAO,CAAA;IACf,sEAAsE;IACtE,MAAM,EAAE,OAAO,CAAA;IACf;4EACwE;IACxE,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,8DAA8D;AAC9D,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAWxE;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAOxE;AAiDD;;;;GAIG;AACH,qBAAa,YAAY;IAOrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IARzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,MAAM,UAAQ;IACd,MAAM,UAAQ;IACd,cAAc,EAAE,MAAM,GAAG,SAAS,CAAY;gBAG3B,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,qBAAqB,GAAG,SAAS,EACvC,MAAM,EAAE,SAAS,gBAAgB,EAAE;IAGtD,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,4EAA4E;IAC5E,IAAI,SAAS,IAAI,qBAAqB,GAAG,SAAS,CAEjD;IAED,KAAK,CAAC,KAAK,EAAE,gBAAgB,GAAG,kBAAkB;IAuBlD,KAAK,IAAI,oBAAoB;IAe7B,uDAAuD;IACvD,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO;IAI1C,sCAAsC;IACtC,IAAI,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAKjD,gFAAgF;IAChF,UAAU,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAKzC,8BAA8B;IAC9B,OAAO,IAAI,IAAI;IAKf,uEAAuE;IACvE,OAAO,CAAC,YAAY;IAKpB,kEAAkE;IAClE,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;;;;;;OAUG;IACG,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IAsD9B,0EAA0E;IAC1E,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAGhE"}

package/lib/types/dsh-adapter/settingsEditor.js

@@ -1,21 +1,3 @@
-/**
- * React-free form model behind the `/settings` screen (issue #165), mirroring
- * the web front door's card-form.ts semantics: a section stages what the user
- * types and writes it only on save — every settings write is a durable,
- * revision-fenced `settings.mutate`, so a control that committed as it
- * settled turned one edit into a write the user never asked for and could
- * not preview; staged text makes what is on screen exactly what a save would
- * store.
- *
- * A field shows its effective value — the user layer over the composition
- * layer over the schema default — and whether the user layer carries it. That
- * presence, not a value comparison, is what marks a field overridden: an
- * override equal to the composition default is still an override.
- *
- * The kernel side (storage, schema validation, layering, revision fencing)
- * stays with the dsh settings / credentials services; this module only
- * translates between drafts and `mutate` path ops.
- */
 /** Read a nested value by path (array indexes as strings). */
 export function getPath(value, path) {
     let current = value;

package/lib/types/dsh-adapter/shortcuts.d.ts

@@ -36,6 +36,11 @@ export type { ParsedCombo };
  * Cordis service object, so one plugin cannot synthesize an input event to
  * invoke another plugin's shortcut handler. */
 export interface TuiShortcutHost {
+    register(combo: string, options: TuiShortcutOptions): () => void;
+    list(): readonly {
+        combo: string;
+        description: string;
+    }[];
     dispatch(input: string, key: TuiShortcutKey): boolean;
     setErrorHandler(handler: (combo: string, error: unknown) => void): () => void;
 }

package/lib/types/dsh-adapter/shortcuts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shortcuts.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/shortcuts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAGtD,OAAO,EAEL,kBAAkB,EAElB,UAAU,EAEV,KAAK,aAAa,EAClB,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAA;AAE3B;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,aAAa,CAAA;AAI1C,eAAO,MAAM,kBAAkB,mBAAa,CAAA;AAC5C,eAAO,MAAM,aAAa,2BAAqB,CAAA;AAC/C,YAAY,EAAE,WAAW,EAAE,CAAA;AAE3B;;+CAE+C;AAC/C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAA;IACrD,eAAe,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;CAC9E;AAED,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACpC;AAiBD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,YAAY,EAAE,kBAAkB,CAAA;KACjC;CACF;AAED,8DAA8D;AAC9D,qBAAa,kBAAmB,SAAQ,OAAO;gBACjC,GAAG,EAAE,OAAO;IAwBxB;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,IAAI;IA0FpF,sEAAsE;IACtE,IAAI,IAAI,SAAS;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE;CAS1D;AAmCD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,kBAAkB,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAOrG;AAED,eAAe,kBAAkB,CAAA"}
+{"version":3,"file":"shortcuts.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/shortcuts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAQtD,OAAO,EAEL,kBAAkB,EAElB,UAAU,EAEV,KAAK,aAAa,EAClB,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAA;AAE3B;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,aAAa,CAAA;AAI1C,eAAO,MAAM,kBAAkB,mBAAa,CAAA;AAC5C,eAAO,MAAM,aAAa,2BAAqB,CAAA;AAC/C,YAAY,EAAE,WAAW,EAAE,CAAA;AAE3B;;+CAE+C;AAC/C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,MAAM,IAAI,CAAA;IAChE,IAAI,IAAI,SAAS;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACzD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAA;IACrD,eAAe,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;CAC9E;AAED,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACpC;AAiBD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,YAAY,EAAE,kBAAkB,CAAA;KACjC;CACF;AAED,8DAA8D;AAC9D,qBAAa,kBAAmB,SAAQ,OAAO;gBACjC,GAAG,EAAE,OAAO;IA+DxB;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,IAAI;IA2FpF,sEAAsE;IACtE,IAAI,IAAI,SAAS;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE;CAU1D;AAqCD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,kBAAkB,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAOrG;AAED,eAAe,kBAAkB,CAAA"}

package/lib/types/dsh-adapter/shortcuts.js

@@ -24,6 +24,8 @@
 import { Service } from '@deepseek-ai/cordis';
 import { cleanScalarText } from './sanitize.js';
 import { activationFiber, bindCallerEffect, compositionRoot, concreteService, requirePluginCaller } from './host-access.js';
+import { assertCapabilityShadowPolicy, } from '../adapter/kernel/runtime.js';
+import { adapterRuntimeFor } from '../adapter/kernel/runtime-context.js';
 import { canonicalCombo, comboMatchesStrict, fixedReservedCombos, parseCombo, reservedActionCombos, } from '../utils/keymap.js';
 // Shared combo grammar + built-in keymap live in src/utils/keymap.ts; the
 // parse/match entry points stay re-exported here for API stability.
@@ -49,8 +51,52 @@ export class TuiShortcutRuntime extends Service {
             onError: undefined,
             host: undefined,
             logger: ctx.logger,
+            runtime: adapterRuntimeFor(ctx),
         };
         const host = Object.freeze({
+            register: (combo, options) => {
+                const shortcutState = shortcutStateFor(runtime);
+                let parsed;
+                try {
+                    parsed = parseShortcutCombo(combo);
+                }
+                catch {
+                    return () => { };
+                }
+                if (parsed === undefined)
+                    return () => { };
+                const key = canonicalCombo(parsed);
+                const shiftlessKey = canonicalCombo({ ...parsed, shift: false });
+                const actionReserved = reservedActionCombos();
+                if (FIXED_RESERVED_CANONICAL.has(key) || FIXED_RESERVED_CANONICAL.has(shiftlessKey)
+                    || actionReserved.has(key) || actionReserved.has(shiftlessKey)
+                    || shortcutState.shortcuts.has(key)) {
+                    return () => { };
+                }
+                let description;
+                let handler;
+                try {
+                    description = cleanScalarText(options?.description, 120);
+                    handler = options?.handler;
+                }
+                catch {
+                    return () => { };
+                }
+                if (typeof handler !== 'function' || description === '')
+                    return () => { };
+                const entry = { combo: parsed, description, handler };
+                shortcutState.shortcuts.set(key, entry);
+                return () => {
+                    if (shortcutState.shortcuts.get(key) !== entry)
+                        return;
+                    shortcutState.shortcuts.delete(key);
+                    shortcutState.owners.delete(key);
+                };
+            },
+            list: () => [...shortcutStateFor(runtime).shortcuts.entries()].map(([, entry]) => ({
+                combo: entry.combo.raw,
+                description: entry.description,
+            })),
             dispatch: (input, key) => dispatchShortcut(runtime, input, key),
             setErrorHandler: (handler) => {
                 state.onError = handler;
@@ -77,6 +123,7 @@ export class TuiShortcutRuntime extends Service {
      * effect ledger's pluginId — omitting it records `undeclared` (C-060).
      */
     register(combo, options, identity) {
+        assertCapabilityShadowPolicy('host.shortcuts.register', shortcutStateFor(this).runtime.mode, shortcutStateFor(this).runtime.slices);
         let caller;
         try {
             caller = requirePluginCaller(this.ctx, 'tuiShortcuts.register', this);
@@ -158,6 +205,7 @@ export class TuiShortcutRuntime extends Service {
     }
     /** Combos and descriptions owned by the calling plugin activation. */
     list() {
+        assertCapabilityShadowPolicy('host.shortcuts.list', shortcutStateFor(this).runtime.mode, shortcutStateFor(this).runtime.slices);
         const caller = requirePluginCaller(this.ctx, 'tuiShortcuts.list', this);
         const owner = activationFiber(caller);
         if (owner === undefined)
@@ -176,6 +224,7 @@ function shortcutStateFor(runtime) {
     return state;
 }
 function dispatchShortcut(runtime, input, key) {
+    assertCapabilityShadowPolicy('host.shortcuts.dispatch', shortcutStateFor(runtime).runtime.mode, shortcutStateFor(runtime).runtime.slices);
     const state = shortcutStateFor(runtime);
     for (const entry of state.shortcuts.values()) {
         if (!matchShortcut(entry.combo, input, key))

package/lib/types/dsh-adapter/status.d.ts

@@ -137,6 +137,11 @@ export declare class TuiStatusRuntime extends Service {
      * same attribution-only meaning as `set()`.
      */
     registerView(descriptor: TuiStatusViewDescriptor, identity?: Context): TuiStatusViewDisposer | undefined;
+    /**
+     * Subscribe to status-line changes. Kept on the plugin-visible service so
+     * the shadow-policy gate covers this subscription effect too.
+     */
+    subscribe(listener: () => void): () => void;
 }
 export declare function getHostStatusStore(runtime: TuiStatusRuntime | undefined): TuiStatusStore | undefined;
 export default TuiStatusRuntime;

package/lib/types/dsh-adapter/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAKtD,iCAAiC;AACjC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,6DAA6D;AAC7D,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAE5C,KAAK,8BAA8B,GAC/B,KAAK,GACL,UAAU,GACV,WAAW,GACX,eAAe,GACf,SAAS,GACT,gBAAgB,GAChB,QAAQ,GACR,eAAe,GACf,WAAW,GACX,kBAAkB,GAClB,SAAS,CAAA;AAEb,KAAK,qBAAqB,GAAG,IAAI,CAC/B,KAAK,CAAC,cAAc,CAAC,cAAc,UAAU,EAAE,GAAG,CAAC,EACnD,8BAA8B,CAC/B,CAAA;AAED,KAAK,sBAAsB,GAAG,IAAI,CAChC,KAAK,CAAC,cAAc,CAAC,cAAc,UAAU,EAAE,IAAI,CAAC,EACpD,KAAK,CACN,CAAA;AAED,KAAK,uBAAuB,GAAG,KAAK,CAAC,cAAc,CACjD,cAAc,UAAU,EAAE,KAAK,CAChC,CAAA;AA2BD;;sEAEsE;AACtE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAA;IACxD,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAA;IAC5D,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAA;IAC1D,QAAQ,CAAC,eAAe,EAAE,cAAc,UAAU,EAAE,eAAe,CAAA;CACpE;AAED;4EAC4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,KAAK,CAAA;IAC5B,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAA;CAC7B;AAED,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAA;AAE9C;;;4BAG4B;AAC5B,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAA;CAC5D;AAED,6EAA6E;AAC7E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAA;IAC3D,8EAA8E;IAC9E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAWD;4EAC4E;AAC5E,qBAAa,cAAc;IAcvB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAb/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAKlD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoE;IAC5F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgF;IAGtG,OAAO,CAAC,QAAQ,CAAgC;IAChD,OAAO,CAAC,YAAY,CAAoC;gBAGrC,WAAW,CAAC,GAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,aAAA;IAGpE,8CAA8C;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,SAAI,EAAE,KAAK,GAAE,MAA0B,GAAG,IAAI;IAmB9F,uEAAuE;IACvE,WAAW,IAAI,SAAS,cAAc,EAAE;IAIxC;8DAC0D;IAC1D,eAAe,IAAI,SAAS,kBAAkB,EAAE;IAIhD;wDACoD;IACpD,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI5C,OAAO,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAMrE,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO;IAUhE,mDAAmD;IACnD,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI;IAIhD;;yEAEqE;IACrE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO;IAS5D,kCAAkC;IAClC,KAAK,IAAI,IAAI;IASb,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAO3C,OAAO,CAAC,IAAI;CAGb;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,SAAS,EAAE,gBAAgB,CAAA;KAC5B;CACF;AAED;;;;GAIG;AACH,qBAAa,gBAAiB,SAAQ,OAAO;gBAC/B,GAAG,EAAE,OAAO;IAexB;;;;;;;;;;;;;;;;;;OAkBG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,IAAI;IA0G7F;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,UAAU,EAAE,uBAAuB,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,qBAAqB,GAAG,SAAS;CA4GzG;AAgBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,GAAG,cAAc,GAAG,SAAS,CAOpG;AAED,eAAe,gBAAgB,CAAA"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAUtD,iCAAiC;AACjC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,6DAA6D;AAC7D,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAE5C,KAAK,8BAA8B,GAC/B,KAAK,GACL,UAAU,GACV,WAAW,GACX,eAAe,GACf,SAAS,GACT,gBAAgB,GAChB,QAAQ,GACR,eAAe,GACf,WAAW,GACX,kBAAkB,GAClB,SAAS,CAAA;AAEb,KAAK,qBAAqB,GAAG,IAAI,CAC/B,KAAK,CAAC,cAAc,CAAC,cAAc,UAAU,EAAE,GAAG,CAAC,EACnD,8BAA8B,CAC/B,CAAA;AAED,KAAK,sBAAsB,GAAG,IAAI,CAChC,KAAK,CAAC,cAAc,CAAC,cAAc,UAAU,EAAE,IAAI,CAAC,EACpD,KAAK,CACN,CAAA;AAED,KAAK,uBAAuB,GAAG,KAAK,CAAC,cAAc,CACjD,cAAc,UAAU,EAAE,KAAK,CAChC,CAAA;AA2BD;;sEAEsE;AACtE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAA;IACxD,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAA;IAC5D,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAA;IAC1D,QAAQ,CAAC,eAAe,EAAE,cAAc,UAAU,EAAE,eAAe,CAAA;CACpE;AAED;4EAC4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,KAAK,CAAA;IAC5B,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAA;CAC7B;AAED,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAA;AAE9C;;;4BAG4B;AAC5B,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAA;CAC5D;AAED,6EAA6E;AAC7E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAA;IAC3D,8EAA8E;IAC9E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAWD;4EAC4E;AAC5E,qBAAa,cAAc;IAcvB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAb/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAKlD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoE;IAC5F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgF;IAGtG,OAAO,CAAC,QAAQ,CAAgC;IAChD,OAAO,CAAC,YAAY,CAAoC;gBAGrC,WAAW,CAAC,GAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,aAAA;IAGpE,8CAA8C;IAC9C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,SAAI,EAAE,KAAK,GAAE,MAA0B,GAAG,IAAI;IAmB9F,uEAAuE;IACvE,WAAW,IAAI,SAAS,cAAc,EAAE;IAIxC;8DAC0D;IAC1D,eAAe,IAAI,SAAS,kBAAkB,EAAE;IAIhD;wDACoD;IACpD,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI5C,OAAO,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAMrE,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO;IAUhE,mDAAmD;IACnD,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI;IAIhD;;yEAEqE;IACrE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO;IAS5D,kCAAkC;IAClC,KAAK,IAAI,IAAI;IASb,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAO3C,OAAO,CAAC,IAAI;CAGb;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,SAAS,EAAE,gBAAgB,CAAA;KAC5B;CACF;AAED;;;;GAIG;AACH,qBAAa,gBAAiB,SAAQ,OAAO;gBAC/B,GAAG,EAAE,OAAO;IAgBxB;;;;;;;;;;;;;;;;;;OAkBG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,IAAI;IA2G7F;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,UAAU,EAAE,uBAAuB,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,qBAAqB,GAAG,SAAS;IAkHxG;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;CAiB5C;AAiBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,GAAG,cAAc,GAAG,SAAS,CAOpG;AAED,eAAe,gBAAgB,CAAA"}