@deepseek-harness-tui/dsh-tui 0.11.1 → 0.12.0

package/README.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <img src="docs/assets/logo.svg" alt="dsh-TUI - DeepSeek Harness terminal interface" width="560">
+  <img src="docs/assets/readme/logo-en.svg" alt="dsh-TUI animated whale logo" width="560">
 </p>
 
 <p align="center">
@@ -27,13 +27,16 @@
 - **Pixel whale pet** — three startup intros, click to wake; freezes after the first task.
 - **Terminal-native UI** — streaming Markdown, tool cards, `/` and `@` completion, `#L12-14` ranges, history search, zh/en UI.
 - **Images** — Kitty/Sixel thumbnails, centered preview with zoom and pan, paste-time fitting, text fallback.
-- **Mermaid diagrams** — ```` ```mermaid ```` fences drawn as Unicode diagrams.
+- **Mermaid diagrams** — ````mermaid ```` fences drawn as Unicode diagrams.
+- **LaTeX math** — `$…$` and `$$…$$` formulas as Unicode text, fractions and limits stacked in display blocks; `mathRendering: image` typesets block and one-row inline formulas as terminal images on graphics terminals.
 - **Timeline rail** — every turn clickable; timeline / scrollbar / hidden gutter.
-- **Live state** — activity animation, context bar, TPS, cache hit rate, effort, tokens, Git and session metadata.
+- **Live state** — activity animation, context bar, TPS, cache hit rate, effort, tokens, session cost estimate (main + subagents), Git and session metadata.
 - **One session manager** — `/resume` `/home` `/agentview` `/bg` `⌸`.
 - **Session workflow** — `/new` `/compact` `/export` `/btw`, model hot-switch, fork, rewind, vim, fullscreen draft editor.
 - **IDE selection channel** — a VS Code selection lands in the prompt.
 - **DSH integrations** — presets, skills, MCP, goals, todos, subagents, questionnaires.
+- **Account sign-in** — the standard profile offers pi-ai OAuth for ChatGPT/Codex, Claude, and Grok (plus OpenAI direct and Meta Muse when available), and Host-owned DeepSeek browser sign-in as `deepseek-account` on DSH 0.2.0-rc.1+. Use `/provider` or `/auth` without another plugin.
+  A profile-only update from a global TUI patch that already mounts `dsh-tui-auth` can still start the official loopback callback listener on demand; fixed-port SSH forwarding still requires the global package to be aligned.
 - **Extensions** — browser interaction, computer use and more.
 - **Built for long sessions** — event-driven projection, virtualization, bounded caches.
 
@@ -42,20 +45,10 @@ Keys and commands: [Interaction and commands](docs/interaction.en.md). Everythin
 ## Preview
 
 <div align="center">
-  <table>
-    <tr>
-      <td align="center" valign="middle" width="50%">
-        <img src="screenshots/splash.png" alt="dsh-TUI conversation with the pixel-whale header" width="480">
-        <br>
-        <strong>Conversation with the pixel-whale header</strong>
-      </td>
-      <td align="center" valign="middle" width="50%">
-        <img src="screenshots/ide-selection-badge.png" alt="IDE selection badge: live line count under the prompt" width="480">
-        <br>
-        <strong>Live IDE selection badge</strong>
-      </td>
-    </tr>
-  </table>
+  <picture>
+    <source media="(max-width: 640px)" srcset="docs/assets/readme/preview-en-mobile.svg">
+    <img src="docs/assets/readme/preview-en.svg" alt="Recorded dsh-TUI session: welcome, completion, help and typing, with animated pixel whale." width="78%">
+  </picture>
 </div>
 
 ## Featured & Listed
@@ -89,10 +82,13 @@ daily** (TypeScript).
 ## Quick Start
 
 Prerequisites: [Node.js](https://nodejs.org/en) and
-[deepseek-harness](https://github.com/deepseek-ai/deepseek-harness), with
-`DEEPSEEK_API_KEY` configured.
+[deepseek-harness](https://github.com/deepseek-ai/deepseek-harness).
+The `deepseek-official` API-key route needs `DEEPSEEK_API_KEY`. On DSH
+0.2.0-rc.1+, the standard profile can instead use `/auth login deepseek-account`
+and select the separate account route through `/model`. Other supported
+accounts can sign in through `/provider` or `/auth` after startup.
 
-The primary compatibility target is DSH `0.1.7-rc.2`. This adapter supports its
+The primary compatibility target is DSH `0.2.0-rc.2`. This adapter supports its
 Shell API, V4 session messages, declarative presets, and profile-backed settings;
 older supported hosts retain their compatibility paths. See [configuration](docs/configuration.en.md).
 
@@ -138,7 +134,35 @@ source builds, and troubleshooting, including migration from the former
 | `dsh-tui safe` | Read-only diagnostics, plugin inventory and repair guidance; `safe --rescue` builds a clean rescue profile |
 | `dsh-tui version` · `dsh-tui help` | Launcher and profile versions and usage; both work even without a `dsh` install |
 
-Other arguments go to `dsh --profile dsh-tui`. Safe mode: [Getting started](docs/getting-started.en.md).
+Leading DSH options such as `--dump-config` and `--patch <path>` are forwarded
+unchanged; other arguments go to the app in `dsh --profile dsh-tui`. Use
+`dsh-tui -- --resume=sid-1 ./notes` to send `--resume=sid-1 ./notes` as literal
+prompt text, without selecting a session or workspace. When invoking DSH
+directly, use `dsh --profile dsh-tui -- -- --resume=sid-1 ./notes`: the first
+`--` belongs to DSH, the second to the app. Host options can precede a literal
+prompt: `dsh-tui --patch ./overlay.yml -- --resume=sid-1` applies the overlay
+and sends `--resume=sid-1` as prompt text without resuming that session.
+Safe mode: [Getting started](docs/getting-started.en.md).
+
+### Importing conversations from other agents (`dsh-tui migrate`)
+
+Bring Claude Code, Codex, OMP, zcode, or Grok Build conversation histories into the DSH session store, then browse and resume them by their original working directory via `/resume`:
+
+```sh
+dsh-tui migrate                # list importable counts per agent (writes nothing)
+dsh-tui migrate claude-code    # import every Claude Code conversation (likewise codex / omp / zcode / grok-build)
+dsh-tui migrate codex --dry-run  # preview what would land, write nothing
+```
+
+- **Read-only source**: migration only reads the foreign agent's local store; artifacts are written through the official `JsonlSessionPersistence` backend, so imported sessions are first-class (openable, continuable).
+- **Idempotent**: one deterministic UUID per source conversation — re-importing skips what is already present instead of stacking duplicates.
+- **Structure preserved**: user/assistant messages, reasoning traces, tool calls with their results, and the source's context compactions (as native compaction checkpoints) are rebuilt turn by turn; harness-injected machine text opens no turn. An imported session can pick the work straight up.
+In-TUI browsing: the session screen (`/resume`) shows a tab per agent that has conversations; picking one imports just that conversation and opens it.
+In-TUI: `/migrate` (optionally `/migrate <agent> [--dry-run]`) runs the same import in a child process and reports through the notification flow.
+CLI alternative: `dsh-tui migrate ...` from any shell runs the same import.
+Full guide: [Session migration](docs/migrate.en.md).
+
+- More agents (pi, opencode, …) extend the adapter registry as adapters land; grok-build reads `GROK_HOME` when set.
 
 **VS Code**: use the integrated terminal or the `dsh-tui-vscode` extension. See [VS Code guide](docs/vscode.en.md). **Herdr**: run `dsh-tui` in a [Herdr](https://herdr.dev) pane; `idle` / `working` / `blocked` are reported through its local integration API.
 
@@ -148,13 +172,33 @@ Other arguments go to `dsh --profile dsh-tui`. Safe mode: [Getting started](docs
 
 While the model is working: `Enter` steers, `Tab` queues a follow-up, `Ctrl+Enter` interrupts and sends.
 
+On native Windows, fragmented Win32 input records are reassembled across short input delays instead of appearing as numeric protocol text. The platform check only reports that this machine might run the private mode (win32-input-mode); a bare `ESC[` fragment is held only after one record has actually been decoded, while a fragment whose own shape is already record-specific holds on its own (which is how even the first record can survive a split). Windows terminals that never enter the mode (mintty, GitBash) therefore keep the classic VT path: a lone `Esc` keeps its normal response time, and a letter typed after a timed-out `ESC[` is not swallowed.
+
+Incomplete records are held for a bounded recovery window (1 second from first capture, never extended by later input; 64 bytes max); past either bound the hold ends and input is handled as before. Unrecognized complete CSI sequences are not inserted as text; after a damaged CSI prefix, a bare ASCII letter can be consumed as its terminator, while normal Win32 key records and bracketed-paste text retain their own boundaries.
+
+A session's very first record can still leave residue if it is split before its record-specific shape forms; once any record has been decoded, every split position is covered. Inside the recovery window, literal input starting with `[digit;…` cannot be told apart from a protocol prefix — it may be held, or re-joined to a preceding `Esc`. To type it, wait for the window to close, or avoid that shape right after `Esc`.
+
+Terminal replies that arrive split are reassembled the same way (native Windows ConPTY is the common source): while the app still has a query awaiting its answer, an unfinished DA1 / DA2 / DSR / DECRPM / XTVERSION tail — even one split again after the introducer `Esc` was flushed — is held across input delays, but only while its shape can still complete into the response type that query expects. It is then consumed as the reply it completes instead of entering the prompt as protocol text.
+
+That claim is evidence-gated, and this is the difference from earlier builds: no query awaiting an answer means nothing is claimed, so a literal `[?61;4c` typed right after `Esc` still enters the prompt exactly as before.
+
+The window is bounded like the record hold (about a second, never extended by later input; 64 bytes max); past either bound it ends, and bytes still shaped like an unfinished reply prefix are dropped rather than shown.
+
+Inside that window, with a query of the matching response type outstanding, same-shaped literal input can still be claimed as a reply; to type it, wait for the window to close (about a second), or avoid that shape while a query is outstanding.
+
 Mouse (fullscreen): drag to select and copy, double/triple click to select a word or line, click tool cards, timeline ticks and `[Image #N]` previews.
 
+**Pasting**: native and bracketed paste keeps ordinary text and newlines, and never submits itself on arrival. On Windows terminals that deliver a paste as win32-input-mode key records, the residue is stripped at the entry point (a multi-line paste no longer leaves stray `_`) and pasted CRLF collapses to a single newline; genuine underscores and bracketed-paste text are untouched.
+
+**Dropped files**: a native Windows desktop drop (Windows Terminal / OpenConsole) arrives as an OSC 8 hyperlink; the parser restores its `file://` URI to a decoded local path before paste hygiene runs, so the `]8;id=…;` parameter bytes never reach the draft. Image paths enter the existing image staging pipeline; other files are inserted as a referenceable path (a path containing whitespace arrives in the composer's quoted `"…"` single-token form). Only `file://` URIs are restored, and it is fail-closed: a remote authority/UNC, a payload carrying several distinct URIs, or a URI that carries several tokens is refused and stays literal text rather than guessed.
+
 Full reference: [Interaction and commands](docs/interaction.en.md).
 
 ## Built-in Commands
 
-`/resume` · `/home` · `/agentview` · `/bg` · `⌸` open the same session manager: workspace rail, live state, filter, ★ pins. Also `/model` `/new` `/compact` `/export` `/btw` `/tree` `/fork` `/rewind` `/settings` `/status` `/cost` `/jobs` `/skills` `/mcp` `/login` `/update`.
+`/resume` · `/home` · `/agentview` · `/bg` · `⌸` open the same session manager: workspace rail, live state, filter, ★ pins. Also `/model` `/new` `/compact` `/export` `/btw` `/tree` `/fork` `/rewind` `/settings` `/status` `/cost` `/jobs` `/skills` `/mcp` `/provider` `/auth` `/login` `/update`.
+
+The session manager paints the last successful list immediately while it checks the persistence store for changes. Titles that require a deeper log scan appear first with a fallback name and update in place when recovery finishes.
 
 **Background sessions**: `/bg` or `←` on an empty prompt; `Esc` returns. They run in this process and stop when the TUI exits. Logs survive.
 
@@ -178,10 +222,12 @@ Runtime path, module boundaries, performance notes and persistence locations: [A
 ## Known Limitations
 
 - Injected plugin context has no standalone display; it counts into the context segments.
-- `/model` switches by forking the session; the old session stays in `/resume`.
+- `/model` switches by forking the session; the old session stays in `/resume` (a session nobody has typed into records no branch, so your first prompt there still gets a generated title).
 - `Ctrl+V` needs platform clipboard tools; unsupported bitmap formats are rejected.
+- A dropped file is restored from its OSC 8 `file://` URI alone: multi-file drops, non-Windows terminal drop encodings and terminator-less truncated frames are not covered, and the hyperlink's own display name is never used.
 - A background session lives inside this process and stops when the TUI exits.
-- `/thinking` is not persisted; `/compact` is unavailable under the `minimal` preset; `/update` needs a `dsh --profile` launch and is refused while a turn is running.
+- `/thinking` is not persisted; `/compact` is unavailable under the kernel's `minimal` agent preset (极简模式, one persistent-shell tool) — a different thing from the `/settings → Minimal UI` (极简界面) display switch; `/update` needs a `dsh --profile` launch and is refused while a turn is running.
+- The status-bar `≈¥` and `/cost` are session estimates that include subagent usage (priced per each agent's model × peak/idle × cache components); unofficial or unlisted models show tokens only and are marked unpriced. **The platform bill is authoritative.**
 
 Full list: [Architecture and limitations → Known limitations](docs/architecture.en.md#known-limitations).
 

package/bin/dsh-tui.js

@@ -62,6 +62,16 @@ const ownPackage = readJson(join(ownDir, 'package.json'))
 const ownVersion = ownPackage?.name === '@deepseek-harness-tui/dsh-tui' ? ownPackage.version : undefined
 const PACKAGE = '@deepseek-harness-tui/dsh-tui'
 const PROFILE = 'dsh-tui'
+
+// 随包用户手册（guide/，见 scripts/build-guide.mjs）：交给 dsh 当内核
+// dsh-skill-filesystem 的随包技能根（rank 600 的 bundledSkillDir 默认取这个
+// 环境变量）。会话里模型常驻只多一行技能目录，用户真问到 dsh-tui 时才按需
+// 读手册。用户自己设过就不覆盖；包里没有 guide/（旧安装/裁剪包）时保持原样。
+const withGuideSkillDir = env => {
+  if (env.DSH_BUNDLED_SKILL_DIR !== undefined) return env
+  const guideDir = join(ownDir, 'guide')
+  return existsSync(guideDir) ? { ...env, DSH_BUNDLED_SKILL_DIR: guideDir } : env
+}
 // 救援 profile（最小可用）：同 home 下的空白 profile（仅 base+TUI，无第三方
 // 插件），是主 profile 装炸时的干净启动通道——创建走官方 dsh plugin add
 // （钉当前版本，同 bootstrap 语义）。
@@ -432,11 +442,20 @@ const MSG = {
       `[dsh-tui] \`update\` 需要 profile 的编译产物，但它缺失或版本过旧、不含 CLI 入口。\n` +
       `请改用手工升级：\n  dsh plugin --profile ${PROFILE} add ${PACKAGE}@latest`,
   },
+  migrateUnavailable: {
+    en:
+      `[dsh-tui] \`migrate\` needs the profile's compiled copy, but it is missing or too old to carry the CLI entry.\n` +
+      `Update first:\n  dsh-tui update`,
+    zh:
+      `[dsh-tui] \`migrate\` 需要 profile 的编译产物，但它缺失或版本过旧、不含 CLI 入口。\n` +
+      `请先升级：\n  dsh-tui update`,
+  },
   helpText: {
     en:
       `Usage: dsh-tui|dst [command] [options] [path|url]\n\n` +
       `Commands:\n` +
       `  update                 Update the ${PROFILE} profile to the latest release\n` +
+      `  migrate [agent]        Import conversations from claude-code/codex/omp/zcode/grok-build (--dry-run to preview)\n` +
       `  doctor                 Pre-flight environment checks (dsh/pnpm/profile/key)\n` +
       `  safe                   Safe mode: read-only diagnostics, inventory, repair guidance\n` +
       `  safe --rescue          Create/verify the clean rescue profile (starts it in a terminal)\n` +
@@ -445,12 +464,15 @@ const MSG = {
       `Options:\n` +
       `  --resume [id]          Resume the last (or the given) session\n` +
       `  -c, --continue         Same as --resume\n` +
+      `  -- <prompt...>        Treat the remaining arguments as literal prompt text\n` +
       `  <path|url>             Open with the given workspace target\n\n` +
-      `Any other argument is forwarded to \`dsh --profile ${PROFILE}\`.`,
+      `Leading DSH options (e.g. --dump-config, --patch <path>) are forwarded unchanged.\n` +
+      `Other arguments go to the app in \`dsh --profile ${PROFILE}\`.`,
     zh:
       `用法：dsh-tui|dst [命令] [选项] [路径|URL]\n\n` +
       `命令：\n` +
       `  update                 将 ${PROFILE} profile 升级到最新版本\n` +
+      `  migrate [agent]        迁移 claude-code/codex/omp/zcode/grok-build 的对话（--dry-run 预览）\n` +
       `  doctor                 启动前环境诊断（dsh/pnpm/profile/密钥）\n` +
       `  safe                   安全模式：只读诊断、插件清单与修复指引\n` +
       `  safe --rescue          创建/校验干净的救援 profile（有终端时随即启动它）\n` +
@@ -459,8 +481,10 @@ const MSG = {
       `选项：\n` +
       `  --resume [id]          恢复上次（或指定 id 的）会话\n` +
       `  -c, --continue         同 --resume\n` +
+      `  -- <提示词...>         将剩余参数作为字面提示词\n` +
       `  <路径|URL>             以指定工作区目标启动\n\n` +
-      `其余参数原样转发给 \`dsh --profile ${PROFILE}\`。`,
+      `前置 DSH 选项（如 --dump-config、--patch <路径>）原样转发。\n` +
+      `其余参数交给 \`dsh --profile ${PROFILE}\` 中的应用。`,
   },
 }
 const msg = key => MSG[key][lang]
@@ -714,7 +738,7 @@ const startDshSession = (dshArgs, profile = PROFILE, env = process.env) =>
   new Promise(resolve => {
     const child = spawn(...cmd('dsh', ['--profile', profile, ...dshArgs]), {
       stdio: 'inherit',
-      env,
+      env: withGuideSkillDir(env),
       ...shellOpt,
     })
     child.on('error', err => resolve({ kind: 'error', error: err }))
@@ -737,6 +761,23 @@ const rescueEnv = () => {
   return env
 }
 
+// 安全模式「重试正常启动」的环境（菜单选项 1，首启 fallback 与 `safe` 共用）：
+// 崩溃往往发生在 TUI 的退出漏斗之前，此时 `~/.dsh-tui/resume.txt` 是"用户上
+// 一刻在哪个会话"的唯一线索（TUI 侧崩溃分支也会写它，见
+// src/dsh-adapter/plugin.ts 的退出漏斗）。不带这个变量重试等于开一个新的空会话
+// ——正是「会话丢了」的观感。已经显式设了该变量（用户自己 `--resume`）则不覆盖；
+// 指针缺失/不可读时保持冷启动语义。
+const resumeEnvForRetry = () => {
+  if (process.env.DSH_TUI_RESUME_SESSION !== undefined) return process.env
+  let target = ''
+  try {
+    target = readFileSync(join(homedir(), '.dsh-tui', 'resume.txt'), 'utf8').trim()
+  } catch {
+    // 没有历史会话可恢复——静默冷启动。
+  }
+  return target === '' ? process.env : { ...process.env, DSH_TUI_RESUME_SESSION: target }
+}
+
 // TTY 判定：询问与菜单都要求 stdin/stdout 均可交互（readline 需要 stdin，
 // 菜单可读需要 stdout）；任一非 TTY（脚本/管道/headless 宿主）走降级。
 const isInteractive = () => Boolean(process.stdin.isTTY && process.stdout.isTTY)
@@ -1057,7 +1098,7 @@ const settleFirstResult = async (result, firstArgs) => {
   if (result.kind === 'error') {
     console.error(msg('launchFailed')(result.error))
     if (isInteractive()) {
-      if (await askSafeEntry(1)) process.exit(await runSafeSession({ pendingExitCode: 1, retryDsh: () => startDshSession(firstArgs) }))
+      if (await askSafeEntry(1)) process.exit(await runSafeSession({ pendingExitCode: 1, retryDsh: () => startDshSession(firstArgs, PROFILE, resumeEnvForRetry()) }))
     } else {
       console.error(msg('safeHint')(1))
     }
@@ -1068,7 +1109,7 @@ const settleFirstResult = async (result, firstArgs) => {
     console.error(msg('profileExited')(result.code))
     if (isInteractive()) {
       if (await askSafeEntry(result.code)) {
-        process.exit(await runSafeSession({ pendingExitCode: result.code, retryDsh: () => startDshSession(firstArgs) }))
+        process.exit(await runSafeSession({ pendingExitCode: result.code, retryDsh: () => startDshSession(firstArgs, PROFILE, resumeEnvForRetry()) }))
       }
     } else {
       console.error(msg('safeHint')(result.code))
@@ -1234,6 +1275,26 @@ if (subcommand === 'update') {
   process.exit(await cliUpdate(PROFILE))
 }
 
+// ─── 子命令：migrate ─────────────────────────────────────────────────────────
+// 跨代理会话迁移（claude-code / codex / omp → DSH sessions）。与 update 同
+// 一条委托路径：动态 import **profile 的**编译产物（瘦壳零 lib 依赖不变），
+// 落盘走上游官方 JsonlSessionPersistence（见 src/dsh-adapter/migrate/）。
+// profile 未初始化时先自举；产物缺失或旧版无 cliMigrate 导出给升级指引。
+if (subcommand === 'migrate') {
+  if (!profileReady()) bootstrapProfile()
+  let cliMigrate
+  try {
+    ;({ cliMigrate } = await import(pathToFileURL(join(profilePkgDir, 'lib', 'types', 'dsh-adapter', 'migrate', 'cli.js')).href))
+  } catch {
+    cliMigrate = undefined
+  }
+  if (typeof cliMigrate !== 'function') {
+    console.error(msg('migrateUnavailable'))
+    process.exit(1)
+  }
+  process.exit(await cliMigrate(process.argv.slice(3)))
+}
+
 // ─── 全局副本：瘦壳角色 ───────────────────────────────────────────────────────
 // DSH_TUI_NO_DELEGATE=1 是测试/调试逃生口：强制走完整逻辑（verify-launcher
 // 的沙箱用它直接驱动全量路径；现场排查委托链时同样可用）。
@@ -1302,10 +1363,34 @@ if (!runningInsideProfile && ownVersion !== undefined && process.env.DSH_TUI_NO_
     }
     return ''
   }
+  // Launcher-owned options from DSH apps/cli/src/args.ts. Only classify the
+  // leading prefix here; DSH still owns validation and execution. Keep this
+  // inline: migrated global launchers must not depend on lib/ or other files.
+  const dshValueFlags = new Set(['--profile', '--from-default-profile', '--patch'])
+  const dshSwitches = new Set(['--dump-config', '--dump-default-config', '--dump-config-schema', '-V', '--version'])
+  const hostArgs = []
   const args = []
   const argv = process.argv.slice(2)
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i]
+    if (a === '--') {
+      args.push(...argv.slice(i))
+      break
+    }
+    if (args.length === 0) {
+      const flag = a.split('=', 1)[0]
+      if (dshValueFlags.has(flag)) {
+        hostArgs.push(a)
+        // Required host values are raw tokens, even when flag-shaped. Never
+        // intercept them as a resume flag or an existing workspace path.
+        if (a === flag && argv[i + 1] !== undefined) hostArgs.push(argv[++i])
+        continue
+      }
+      if (dshSwitches.has(a)) {
+        hostArgs.push(a)
+        continue
+      }
+    }
     if (a === '--resume' || a === '-c' || a === '--continue' || a.startsWith('--resume=')) {
       let sessionId = ''
       if (a.startsWith('--resume=')) {
@@ -1331,6 +1416,8 @@ if (!runningInsideProfile && ownVersion !== undefined && process.env.DSH_TUI_NO_
     process.env.DSH_TUI_LAUNCHER_VERSION = ownVersion
   }
 
-  const firstArgs = args
+  // DSH consumes its own --; only the app tail belongs behind it. Preserve
+  // the app-level separator too, and replay this same argv on a safe retry.
+  const firstArgs = [...hostArgs, ...(args.length > 0 ? ['--', ...args] : [])]
   settleFirstResult(await startDshSession(firstArgs), firstArgs)
 }

package/cordis.patch.yml

@@ -57,20 +57,43 @@
 # Preserve the TUI's opt-in privacy stance across the 0.1.2 base default
 # change to FEEDBACK_ONLY. An explicit DSH_TELEMETRY_MODE still wins. This
 # restates the whole 0.1.2 config because include patches replace config
-# objects rather than merging them.
+# objects rather than merging them. The 0.2.0 base moved the collector to
+# dsh-otel-collector and added maxRequestBytes; older cohorts keep the
+# endpoint (and the key set) their base shipped, so both follow the
+# installed package version.
 - id: session-telemetry-otel
-  config:
-    mode: !!js process.env.DSH_TELEMETRY_MODE || 'DISABLED'
-    shutdownTimeoutMillis: 3000
-    exporter:
-      url: !!js process.env.DSH_TELEMETRY_OTLP_URL ?? 'https://harness-telemetry.deepseeksvc.com/v1/logs'
-      compression: gzip
-      timeoutMillis: 1000
-    processor:
-      scheduledDelayMillis: 10000
-      maxQueueSize: 2048
-      maxExportBatchSize: 2048
-      exportTimeoutMillis: 1500
+  config: !!js >-
+    (() => {
+      let url = 'https://dsh-otel-collector.deepseeksvc.com/v1/logs'
+      let modern = false
+      try {
+        const require = process.getBuiltinModule('node:module').createRequire(ctx.baseUrl)
+        const fs = process.getBuiltinModule('node:fs')
+        const manifest = require.resolve('@deepseek-ai/dsh-session-telemetry-otel/package.json')
+        const version = String(JSON.parse(fs.readFileSync(manifest, 'utf8')).version ?? '')
+        const match = /^(\d+)\.(\d+)\./u.exec(version)
+        modern = match === null || Number(match[1]) > 0 || Number(match[2]) >= 2
+        if (!modern) url = 'https://harness-telemetry.deepseeksvc.com/v1/logs'
+      } catch {}
+      return {
+        mode: process.env.DSH_TELEMETRY_MODE || 'DISABLED',
+        shutdownTimeoutMillis: 3000,
+        // 0.2.0's base config caps one request at 4 MB; the older plugin's
+        // schema has no such key, so only a probed 0.2+ host gets it.
+        ...(modern ? { maxRequestBytes: 4000000 } : {}),
+        exporter: {
+          url: process.env.DSH_TELEMETRY_OTLP_URL ?? url,
+          compression: 'gzip',
+          timeoutMillis: 1000,
+        },
+        processor: {
+          scheduledDelayMillis: 10000,
+          maxQueueSize: 2048,
+          maxExportBatchSize: 2048,
+          exportTimeoutMillis: 1500,
+        },
+      }
+    })()
 
 # The 0.1.2 base sends the active Loader package inventory on official
 # DeepSeek requests by default. TUI keeps that diagnostic metadata opt-in.
@@ -386,11 +409,30 @@
       name: '@deepseek-ai/dsh-cordis-host-runner'
       disabled: !!js "[...ctx.loader.entries()].some(entry => entry.options.id === 'cordis-host-runner' && entry.options.name === '@deepseek-ai/dsh-cordis-host-runner' && !entry.disabled)"
 
-    # Subscription OAuth sign-in (bundled dsh-auth dependency): mounts the
-    # ChatGPT/Codex, Claude Pro/Max and SuperGrok provider routes plus the
-    # /auth command; the TUI's /provider wizard gains its OAuth branch from
-    # the ctx.dshAuth service this row provides. Entry-level inject only —
-    # the plugin module's own inject is empty so a stale patch cannot
+    # DeepSeek account sign-in uses the Host-owned /oauth/callback route. A
+    # TUI-only profile needs a loopback listener; a mixed Web+TUI profile
+    # reuses Web's official webserver instead of opening a second one. Hosts
+    # without an enabled account service row leave this listener disabled.
+    - id: dsh-tui-webserver
+      name: '@deepseek-ai/dsh-host-webserver'
+      disabled: !!js >-
+        (() => {
+          const require = process.getBuiltinModule('node:module').createRequire(ctx.baseUrl)
+          try { require.resolve('@deepseek-ai/dsh-host-webserver/package.json') } catch { return true }
+          const entries = [...ctx.loader.entries()]
+          return !entries.some(entry => entry.options.name === '@deepseek-ai/dsh-deepseek-account-platform' && !entry.disabled)
+            || entries.some(entry => entry.options.id === 'webserver' && entry.options.name === '@deepseek-ai/dsh-host-webserver' && !entry.disabled)
+        })()
+      config:
+        host: 127.0.0.1
+        port: 0
+
+    # Built-in subscription OAuth sign-in: mounts available pi-ai routes
+    # (ChatGPT/Codex, Claude, Grok; newer pi-ai adds OpenAI direct and Meta)
+    # plus the /auth command. Its facade also delegates DeepSeek sign-in to
+    # the Host-owned account service when available. The TUI's /provider
+    # wizard gains its OAuth branch from ctx.dshAuth. Entry-level inject only —
+    # the internal module's own inject is empty so a stale patch cannot
     # deadlock a composition lacking these services (#183 pattern).
     - id: dsh-tui-auth
       name: '@deepseek-harness-tui/dsh-tui/oauth'
@@ -427,13 +469,12 @@
         # 想退回 inline 主屏（终端原生滚动/选择）：/settings 全屏开关或 cordis.yml
         # `fullscreen: false`——显式选择始终优先于默认。
         fullscreen: true
-        # 在支持的终端预览图片；/settings 可关闭，重启生效。
+        # 以下为 /settings 可改的显示设置；每项说明与默认值见应用内 /settings 屏。
         terminalImages: true
-        # Edit/Write diff 呈现：auto（≥110 列双栏对照，窄屏统一式）/
-        # split（强制双栏）/ unified（强制统一式）。/settings 屏可实时改。
         # diffLayout: auto
-        # 回复中的 ```mermaid 代码块画成字符图；false 保留源码。/settings 可实时改。
         # mermaidDiagrams: true
+        # 回复中 LaTeX 公式的显示方式：auto（默认，目前为 Unicode）/ image（支持图形的终端里块级公式显示为图片）/ unicode / source（保留源码）。/settings 可实时改。
+        # mathRendering: auto
         # 每个请求实际生效的推理强度，按当前路由的 adapter 档位校验
         #（deepseek: off/low/high/max）；非法值回落 adapter 默认。
         effort: max

package/cordis.yml

@@ -61,10 +61,11 @@
     # wl-copy/xclip/xsel 兜底）、滚轮滚动、双击选词/三击选行。false 则退回
     # inline 渲染, 鼠标交给终端模拟器原生选择。
     fullscreen: true
-    # 在支持的终端预览图片；/settings 可关闭，重启生效。
+    # 以下为 /settings 可改的显示设置；每项说明与默认值见应用内 /settings 屏。
     terminalImages: true
-    # 回复中的 ```mermaid 代码块画成字符图；false 保留源码。/settings 可实时改。
     # mermaidDiagrams: true
+    # 回复中 LaTeX 公式的显示方式：auto（默认，目前为 Unicode）/ image（支持图形的终端里块级公式显示为图片）/ unicode / source（保留源码）。/settings 可实时改。
+    # mathRendering: auto
     # Reasoning effort applied to every request, validated against the live
     # route's adapter levels. An unlisted level falls back to the adapter
     # default; this wins over the persisted /effort choice and seeds the

package/guide/dsh-tui-guide/SKILL.md

@@ -0,0 +1,37 @@
+---
+name: dsh-tui-guide
+description: Use when the user asks about dsh-tui itself (usage, shortcuts, config, themes, migration, VS Code). Load before answering; skip for normal coding tasks.
+---
+
+# dsh-tui 用户手册（索引）
+
+用户手册全文就在**本文件所在目录**——`skill` 工具返回的 `resourceBase`。共 8 篇，
+每篇中英各一份：中文文件名无后缀，英文加 `.en.md`。拿不到绝对路径时，用
+`glob` 在 dsh-tui 包里搜 `guide/dsh-tui-guide`。
+
+## 怎么用
+
+1. **跟用户同语言**：中文提问读无后缀文件，英文提问读加后缀的那份；回答也用同一种语言。
+2. **先定位再读**：16 个文件合计约 290 KB，整篇读既慢又挤上下文。先 `grep` 关键词拿到命中行，
+   再用 `read` 带 `offset`/`limit` 只展开需要的那几段。
+3. **一次一到两篇**：按下面的路由表挑最贴近的；跨主题时再补第二篇。
+4. **给出处**：回答末尾写清来源（文件名 + 小节标题），用户能直接翻回去核对。
+5. **别编**：手册没写的直说"手册没写"，再给保守建议；不要拿记忆里的旧行为顶替。
+
+## 路由表
+
+| 用户问的 | 文件 |
+| --- | --- |
+| 安装、首次启动、启动失败、排障 | `getting-started.md` |
+| 日常使用、键位、斜杠命令、会话与工作流、设置 | `user-guide.md` |
+| 输入框、鼠标、选中复制、粘贴、图片、问卷与审批 | `interaction.md` |
+| 配置覆盖层、TUI 开关、agent preset、模型路由、MCP | `configuration.md` |
+| 主题、配色、自动检测、自定义主题 | `themes.md` |
+| 从 Claude Code / Codex / OMP / zcode / Grok 迁移会话 | `migrate.md` |
+| VS Code 集成、扩展、IDE 选区 | `vscode.md` |
+| 插件生态、接缝稳定性分级 | `plugins.md` |
+
+英文提问时把上表文件名接上后缀（例如 `user-guide.en.md`）。
+
+> 除本文件外，这些副本由 `scripts/build-guide.mjs` 从仓库 `docs/` 逐字节同步生成，
+> 不要手改；改文档请改 `docs/` 再跑一次构建。