@deepseek-harness-tui/dsh-tui 0.11.2 → 0.13.0

package/lib/types/update.js

@@ -966,16 +966,38 @@ export function ensureProfileAllowBuilds(profile) {
  * (24h by default) — on release day that gate refuses the very version
  * `/update` is installing (ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION), which
  * reads to the user as a broken update until the window passes. Pre-seed the
- * profile's pnpm-workspace.yaml with a release-age exclusion scoped to this
- * package at the exact target version — the same best-effort, idempotent
- * pattern as {@link ensureProfileAllowBuilds}: foreign entries are preserved,
- * an existing entry for this package is replaced (one entry tracks the current
- * target instead of accumulating), a missing `minimumReleaseAgeExclude` block
- * is appended, a missing file is created, and an absent profile directory
- * resolves to undefined — the caller still runs pnpm, whose own diagnostic
- * stays the visible fallback.
+ * profile's pnpm-workspace.yaml with release-age exclusions scoped to this
+ * package at the exact versions pnpm verifies before it can swap the package:
+ * the target version itself, plus `alsoExempt` — the pre-update `updatedFrom`,
+ * read from the running package's own manifest (normally the version the
+ * profile lockfile pins). Two releases inside the 24h window leave the OLD
+ * lockfile entry inside it too, and pnpm fails the whole policy check on that
+ * entry before replacing the package (issue #1205), so exempting only the
+ * target is not enough. Same best-effort,
+ * idempotent pattern as {@link ensureProfileAllowBuilds}: entries for this
+ * package track exactly the versions the current update needs (older own
+ * entries are dropped instead of accumulating), foreign entries are
+ * preserved, a missing `minimumReleaseAgeExclude` block is appended, a
+ * missing file is created, and an absent profile directory resolves to
+ * undefined — the caller still runs pnpm, whose own diagnostic stays the
+ * visible fallback. Own entries are re-rendered target-first on every
+ * rewrite: pnpm 11.7.x honours only the FIRST entry per package (later
+ * entries for the same package are ignored against the real registry), and
+ * 11.21.x applies every entry in any order, so the target — the version the
+ * swap itself has to resolve, and published by construction while a
+ * dev-built `updatedFrom` need not be — takes the slot older pnpm still
+ * reads. Both exemptions come from the manifest, not from `pnpm-lock.yaml`:
+ * a profile whose manifest and lockfile diverged keeps the lockfile's entry
+ * unexempted. The 11.7.x `--frozen-lockfile` policy check reads that first
+ * entry only, so a two-entry list does not clear it there; the `pnpm add`
+ * path `/update` runs resolves the target and does pass.
+ *
+ * @param profile - The dsh profile whose workspace file is seeded.
+ * @param version - The update target (exact version).
+ * @param alsoExempt - Optional second version to keep exempt, normally the
+ *   pre-update `updatedFrom`; ignored when empty or equal to `version`.
  */
-export function ensureProfileReleaseAgeExclude(profile, version) {
+export function ensureProfileReleaseAgeExclude(profile, version, alsoExempt) {
     const yamlPath = profileWorkspaceYamlPath(profile);
     try {
         if (!existsSafe(dirname(yamlPath)))
@@ -988,6 +1010,10 @@ export function ensureProfileReleaseAgeExclude(profile, version) {
             // Missing file — start from an empty document; writeFileSync creates it.
         }
         const entry = `${PACKAGE_NAME}@${version}`;
+        const alsoEntry = alsoExempt !== undefined && alsoExempt !== '' && alsoExempt !== version
+            ? `${PACKAGE_NAME}@${alsoExempt}`
+            : undefined;
+        const keep = alsoEntry === undefined ? [entry] : [entry, alsoEntry];
         const lines = text.split(/\r?\n/u);
         let blockStart = -1;
         for (let i = 0; i < lines.length; i += 1) {
@@ -999,9 +1025,12 @@ export function ensureProfileReleaseAgeExclude(profile, version) {
         }
         /** Item text of a list line, unquoted (`- 'x@1'` / `- x@1` → `x@1`). */
         const itemOf = (line) => line.trim().replace(/^-\s*/u, '').replace(/^'(.*)'$/u, '$1');
-        const foreign = [];
+        /** Foreign exclusion lines, preserved verbatim and in file order. */
+        const foreignLines = [];
+        /** Keep-set entries already present in the block. */
+        const present = [];
+        let droppedStale = false;
         let blockEnd = -1;
-        let alreadyCurrent = false;
         if (blockStart !== -1) {
             blockEnd = blockStart + 1;
             for (let i = blockStart + 1; i < lines.length; i += 1) {
@@ -1010,21 +1039,27 @@ export function ensureProfileReleaseAgeExclude(profile, version) {
                     break; // dedent = block ends
                 blockEnd = i + 1;
                 const item = itemOf(line);
-                if (item === entry) {
-                    alreadyCurrent = true;
-                    foreign.push(line);
+                if (!item.startsWith(`${PACKAGE_NAME}@`)) {
+                    foreignLines.push(line);
                 }
-                else if (!item.startsWith(`${PACKAGE_NAME}@`)) {
-                    foreign.push(line);
+                else if (keep.includes(item)) {
+                    present.push(item);
+                }
+                else {
+                    // Own entries for older targets: dropped (no accumulation).
+                    droppedStale = true;
                 }
-                // Stale entries for THIS package (older targets) are dropped above.
             }
         }
-        if (alreadyCurrent) {
-            const entries = [entry, ...lines.slice(blockStart + 1, blockEnd).map(itemOf)];
-            return { entries, changed: false };
+        const missing = keep.filter(item => !present.includes(item));
+        if (!droppedStale && missing.length === 0) {
+            return { entries: [...foreignLines.map(itemOf), ...present], changed: false };
         }
-        const insert = foreign.concat(`  - '${entry}'`);
+        // Own entries are re-rendered in keep order (target first) instead of
+        // copied as found: pnpm 11.7.x honours only the first entry per package
+        // (11.21.x applies them all, order-independent), and the target is the
+        // version the swap must resolve, so it takes that first slot.
+        const insert = foreignLines.concat(keep.map(item => `  - '${item}'`));
         if (blockStart !== -1) {
             lines.splice(blockStart + 1, blockEnd - blockStart - 1, ...insert);
         }
@@ -1034,7 +1069,7 @@ export function ensureProfileReleaseAgeExclude(profile, version) {
             lines.push('minimumReleaseAgeExclude:', ...insert);
         }
         writeFileSync(yamlPath, `${lines.join('\n')}\n`);
-        return { entries: [...foreign.map(itemOf), entry], changed: true };
+        return { entries: insert.map(itemOf), changed: true };
     }
     catch {
         return undefined;
@@ -1427,8 +1462,8 @@ export async function updateTui(profile, targetVersion) {
     const dsh = process.platform === 'win32' ? 'dsh.cmd' : 'dsh';
     const updateArgs = tuiUpdatePluginArgs(profile, targetVersion);
     // pnpm ≥11 hard-fails installs whose dependency tree carries un-allowlisted
-    // build scripts (ERR_PNPM_IGNORED_BUILDS). The dsh-auth chain pulls in
-    // postinstall-only deps (@google/genai/protobufjs via pi-ai), so pre-seed
+    // build scripts (ERR_PNPM_IGNORED_BUILDS). The host's pi-ai adapter pulls in
+    // postinstall-only deps (@google/genai/protobufjs), so pre-seed
     // the profile workspace with explicit `false` entries before pnpm runs.
     const allowBuilds = ensureProfileAllowBuilds(profile);
     if (allowBuilds !== undefined && allowBuilds.added.length > 0) {
@@ -1446,13 +1481,17 @@ export async function updateTui(profile, targetVersion) {
     // pnpm ≥11's minimumReleaseAge (24h by default) refuses installs of
     // packages published within the window — on release day that gate rejects
     // the exact version /update pins, surfacing as a failed update that heals
-    // itself a day later. Scope-exempt this package at the exact target before
-    // pnpm runs (release-day /update parity with the allowBuilds seed above).
+    // itself a day later. Two releases inside the window (issue #1205) trip the
+    // same gate on the OLD lockfile entry pnpm verifies before the swap, so
+    // both the target and the still-installed updatedFrom are exempted.
     if (targetVersion !== undefined) {
-        const releaseAge = ensureProfileReleaseAgeExclude(profile, targetVersion);
+        const releaseAge = ensureProfileReleaseAgeExclude(profile, targetVersion, updatedFrom === '' ? undefined : updatedFrom);
         if (releaseAge !== undefined && releaseAge.changed) {
-            process.stderr.write(`dsh-tui: pre-seeded profile release-age exclusion (${PACKAGE_NAME}@${targetVersion}) — ` +
-                'a freshly published version installs without the 24h supply-chain delay\n');
+            const exempted = updatedFrom !== '' && updatedFrom !== targetVersion
+                ? `${PACKAGE_NAME}@${targetVersion} + ${PACKAGE_NAME}@${updatedFrom}`
+                : `${PACKAGE_NAME}@${targetVersion}`;
+            process.stderr.write(`dsh-tui: pre-seeded profile release-age exclusion (${exempted}) — ` +
+                'freshly published versions install without the 24h supply-chain delay\n');
         }
     }
     let updateStderr = '';
@@ -1622,6 +1661,33 @@ export async function cliUpdate(profile) {
     }
     return outcome.code;
 }
+/**
+ * Release the shared console for the replacement without resetting it.
+ *
+ * A pty's termios is per-DEVICE: destroying this stream would write this
+ * process's saved cooked/ECHO mode back over the replacement's raw mode
+ * (libuv restores orig_termios on tty close; verified on Node 24 — mouse
+ * reports then echo as `^[[<…M` and keys wait for a newline). Detaching —
+ * no readers, paused, unref'd — keeps the mode untouched.
+ *
+ * Two deliberate trade-offs vs the old destroy():
+ * - destroy() doubled as a permanent gate ("a destroyed stream can never be
+ *   resumed"). Readers removed + paused already keep this process out of the
+ *   console's key path (#284/#307), and after the handoff only the
+ *   child-exit listener remains here — nothing re-attaches a reader.
+ * - On exit Node still writes the saved cooked mode back once (atexit
+ *   uv_tty_reset_mode). Fine in the normal order — this process outlives the
+ *   replacement, and the shell wants cooked back anyway; it only bites if
+ *   this process dies while the replacement is still running.
+ *
+ * @param stdin - Console stream to detach; injectable for the regression.
+ */
+export function detachHandoffStdin(stdin = process.stdin) {
+    stdin.removeAllListeners('readable');
+    stdin.removeAllListeners('data');
+    stdin.pause();
+    stdin.unref();
+}
 export async function restartTui(sessionId, options = {}) {
     const kind = options.kind ?? 'restart';
     const tag = kind === 'update' ? 'update-restart' : 'restart';
@@ -1661,10 +1727,12 @@ export async function restartTui(sessionId, options = {}) {
         // 1. SAMPLE this process's stdin state every second — if anything
         //    re-attaches a reader after the funnel's detachStdinForHandoff, the
         //    sample (taken before the re-assert below) shows it in the log.
-        // 2. RE-ASSERT the detach and finally destroy the stream: this process
-        //    must never read the shared console again — every keypress belongs
-        //    to the replacement, and a resumed pump here is exactly the
-        //    "restarted TUI sees dropped or swallowed input" failure (#284/#307).
+        // 2. RE-ASSERT the detach — never DESTROY the stream: destroying it
+        //    resets the shared pty and stomps the replacement's raw mode (see
+        //    detachHandoffStdin for the mechanism and trade-offs). This process
+        //    must never read the shared console again — every keypress belongs to
+        //    the replacement, and a resumed pump here is exactly the "restarted
+        //    TUI sees dropped or swallowed input" failure (#284/#307).
         let watchdogTicks = 0;
         const watchdog = setInterval(() => {
             watchdogTicks += 1;
@@ -1678,25 +1746,14 @@ export async function restartTui(sessionId, options = {}) {
                 buffered: stdin.readableLength,
             });
             try {
-                stdin.removeAllListeners('readable');
-                stdin.removeAllListeners('data');
-                stdin.pause();
+                detachHandoffStdin(stdin);
             }
             catch {
                 // Diagnosis/mitigation only.
             }
             if (watchdogTicks === 15) {
                 clearInterval(watchdog);
-                try {
-                    // Terminal safeguard: a destroyed stream can never be resumed by
-                    // any late re-attachment. The child holds its own inherited
-                    // handle, so closing ours does not affect it.
-                    process.stdin.destroy();
-                    logRestartEvent('parent: stdin destroyed after watchdog');
-                }
-                catch {
-                    // Best effort.
-                }
+                logRestartEvent('parent: stdin detached after watchdog (kept raw, not destroyed)');
             }
         }, 1000);
         watchdog.unref();

package/lib/types/utils/bmp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bmp.d.ts","sourceRoot":"","sources":["../../../src/utils/bmp.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA8DH;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuFlE"}
+{"version":3,"file":"bmp.d.ts","sourceRoot":"","sources":["../../../src/utils/bmp.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA8DH;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4FlE"}

package/lib/types/utils/bmp.js

@@ -74,6 +74,10 @@ export async function bmpToPng(bmp) {
         return null;
     if (bpp !== 24 && bpp !== 32)
         return null;
+    // High-colour DIBs may still carry a colour table. Without a file header
+    // its length is ambiguous; a BMP file instead locates pixels via bfOffBits.
+    if (!hasFileHeader && bmp.readUInt32LE(dib + 32) !== 0)
+        return null; // biClrUsed
     if (compression !== BI_RGB && compression !== BI_BITFIELDS && compression !== BI_ALPHABITFIELDS)
         return null;
     if (bpp === 24 && compression !== BI_RGB)
@@ -100,7 +104,10 @@ export async function bmpToPng(bmp) {
     if (bpp === 32 && (redMask === 0 || greenMask === 0 || blueMask === 0))
         return null;
     const declaredOffset = hasFileHeader ? bmp.readUInt32LE(10) : 0;
-    const pixelOffset = declaredOffset > 0 ? declaredOffset : dib + headerSize + maskBytes;
+    const minimumOffset = dib + headerSize + maskBytes;
+    if (hasFileHeader && declaredOffset < minimumOffset)
+        return null;
+    const pixelOffset = hasFileHeader ? declaredOffset : minimumOffset;
     const stride = Math.floor((bpp * width + 31) / 32) * 4;
     if (pixelOffset + stride * height > bmp.length)
         return null;

package/lib/types/utils/clipboard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"clipboard.d.ts","sourceRoot":"","sources":["../../../src/utils/clipboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAeH;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAElC;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,gBAAgB,GAAG;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAAA;AAE5F;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CA6BtD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAIvE;AAWD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAYtE;AAiDD;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAS9C;AAoeD;;;;;;GAMG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,CAStD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAEhE;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAcvE"}
+{"version":3,"file":"clipboard.d.ts","sourceRoot":"","sources":["../../../src/utils/clipboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAeH;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAElC;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,gBAAgB,GAAG;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAAA;AAE5F;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CA6BtD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAIvE;AAWD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAYtE;AAiDD;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAS9C;AAsfD;;;;;;GAMG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,CAStD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAEhE;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAcvE"}

package/lib/types/utils/clipboard.js

@@ -239,8 +239,18 @@ function spawnForBuffer(file, args, timeout = CLIPBOARD_TIMEOUT) {
         const child = spawn(file, [...args], { timeout });
         const chunks = [];
         child.stdout.on('data', (chunk) => chunks.push(chunk));
-        child.on('error', () => resolve({ code: 1, stdout: Buffer.concat(chunks) }));
-        child.on('close', code => resolve({ code, stdout: Buffer.concat(chunks) }));
+        child.stderr.resume(); // A full stderr pipe must not block the child.
+        // Node's spawn timeout sends SIGTERM only; an uncooperative helper can
+        // otherwise keep the paste Promise pending forever.
+        const hardKill = setTimeout(() => child.kill('SIGKILL'), timeout + 1000);
+        child.on('error', () => {
+            clearTimeout(hardKill);
+            resolve({ code: 1, stdout: Buffer.concat(chunks) });
+        });
+        child.on('close', code => {
+            clearTimeout(hardKill);
+            resolve({ code, stdout: Buffer.concat(chunks) });
+        });
         child.stdin.end();
     });
 }
@@ -490,12 +500,15 @@ function buildWslPsScript() {
     return [
         "$ErrorActionPreference='SilentlyContinue'",
         '[Console]::OutputEncoding=[System.Text.Encoding]::UTF8',
+        // Only CLIPBRD_E_CANT_OPEN is retryable. A missing format or empty
+        // clipboard is not a reason to cold-start PowerShell three times.
+        'function Test-ClipboardBusy($e){while($e){if($e.HResult -eq -2147221040){return $true};$e=$e.InnerException};return $false}',
         '$files=$null',
-        'try { $files = Get-Clipboard -Format FileDropList -ErrorAction Stop } catch {}',
+        'try { $files = Get-Clipboard -Format FileDropList -ErrorAction Stop } catch { if(Test-ClipboardBusy $_.Exception){exit 75} }',
         'if($files){foreach($f in $files){Write-Output ("FILE:"+$f.FullName)}}',
         '$saved=$false',
-        'if(-not $files){try { Add-Type -AssemblyName System.Drawing; $img=Get-Clipboard -Format Image -ErrorAction Stop; if($img){$ms=New-Object System.IO.MemoryStream; $img.Save($ms,[System.Drawing.Imaging.ImageFormat]::Png); $img.Dispose(); Write-Output ("IMAGE64:"+[Convert]::ToBase64String($ms.ToArray())); $saved=$true} } catch {} }',
-        'if(-not $files -and -not $saved){$t=Get-Clipboard -Raw; if($null -ne $t){Write-Output ("TEXT64:"+[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($t)))}}',
+        'if(-not $files){try { Add-Type -AssemblyName System.Drawing; $img=Get-Clipboard -Format Image -ErrorAction Stop; if($img){$ms=New-Object System.IO.MemoryStream; $img.Save($ms,[System.Drawing.Imaging.ImageFormat]::Png); $img.Dispose(); Write-Output ("IMAGE64:"+[Convert]::ToBase64String($ms.ToArray())); $saved=$true} } catch { if(Test-ClipboardBusy $_.Exception){exit 75} } }',
+        'if(-not $files -and -not $saved){try { $t=Get-Clipboard -Raw -ErrorAction Stop; if($null -ne $t){Write-Output ("TEXT64:"+[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($t)))} } catch { if(Test-ClipboardBusy $_.Exception){exit 75} } }',
     ].join('; ');
 }
 /**
@@ -505,7 +518,13 @@ function buildWslPsScript() {
  *   clipboard holds nothing usable.
  */
 async function readClipboardWsl() {
-    const result = await spawnForBuffer('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', buildWslPsScript()], WSL_POWERSHELL_TIMEOUT);
+    let result;
+    for (let attempt = 0;; attempt += 1) {
+        result = await spawnForBuffer('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', buildWslPsScript()], WSL_POWERSHELL_TIMEOUT);
+        if (result.code !== 75 || attempt >= 2)
+            break;
+        await new Promise(resolve => setTimeout(resolve, 150));
+    }
     if (result.code !== 0)
         return null;
     const files = [];

package/lib/types/utils/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../src/utils/credentials.ts"],"names":[],"mappings":"AAgBA,kFAAkF;AAClF,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAqB,GAAG,OAAO,CAUxF"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../src/utils/credentials.ts"],"names":[],"mappings":"AAgBA,kFAAkF;AAClF,wBAAgB,UAAU,IAAI,MAAM,CAMnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAqB,GAAG,OAAO,CAUxF"}

package/lib/types/utils/credentials.js

@@ -15,7 +15,11 @@ import { homedir } from 'node:os';
 import { join } from 'node:path';
 /** The DSH home that owns the credential store, following the launcher's rule. */
 export function dshHomeDir() {
-    return process.env.DSH_HOME ?? join(homedir(), '.dsh');
+    // `||`, not `??`: the launcher resolves the same root as
+    // `process.env.DSH_HOME || join(homedir(), '.dsh')` (bin/dsh-tui.js), so an
+    // empty `DSH_HOME=` — a common way to spell "unset" in scripts — must fall
+    // back here too instead of turning every path into a relative one.
+    return process.env.DSH_HOME || join(homedir(), '.dsh');
 }
 /**
  * Whether the DSH credential store declares a reference by this name.

package/lib/types/utils/draftWordBoundary.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Whether the seam at `offset` (`text[offset-1] | text[offset]`) is a word
+ * boundary. `offset` is a code-unit index, as produced by the composer's
+ * grapheme-normalized caret.
+ */
+export declare function isDraftWordBoundary(text: string, offset: number): boolean;
+/**
+ * The word interval `[start, end)` containing the character at `index`: the
+ * ICU segment when that character is word-like, otherwise just the character
+ * itself (whitespace and punctuation are boundaries, never part of a
+ * multi-character word). A deletion run uses this as the range it may keep
+ * consuming.
+ *
+ * The window widens until the segment no longer touches its edge: ICU
+ * segmentation is length-dependent, so a truncated copy of a repeated-Han run
+ * can split differently from the full draft (and the ±32 window would then
+ * read the wrong word at the seam).
+ */
+export declare function draftWordRangeAt(text: string, index: number): {
+    start: number;
+    end: number;
+};
+//# sourceMappingURL=draftWordBoundary.d.ts.map

package/lib/types/utils/draftWordBoundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"draftWordBoundary.d.ts","sourceRoot":"","sources":["../../../src/utils/draftWordBoundary.ts"],"names":[],"mappings":"AA4GA;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAWzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAoB5F"}

package/lib/types/utils/draftWordBoundary.js

@@ -0,0 +1,161 @@
+import { getWordSegmenter } from './intl.js';
+/**
+ * Word boundaries for the prompt draft. `Intl.Segmenter` (`granularity:
+ * 'word'`, UAX #29 + the ICU dictionary) is the source of truth; a cheap
+ * hard-rule layer in front of it answers the common cases (edges, whitespace,
+ * CJK punctuation, script changes) without paying for a segmentation.
+ *
+ * Two callers:
+ *
+ * - `Ctrl+Z`/typing grouping asks whether a seam (`text[offset-1] |
+ *   text[offset]`) is a word boundary — {@link isDraftWordBoundary}.
+ * - a deletion run asks for the word interval its first removed character
+ *   belongs to, so the run may keep consuming that word and nothing else —
+ *   {@link draftWordRangeAt}.
+ *
+ * Idle coalescing is deliberately NOT here: the undo stack applies its own
+ * 700ms rule so a test clock can be injected at that call site.
+ */
+/** Window radius (characters) for the ICU layer, and its scan budget. */
+const DRAFT_WORD_WINDOW = 32;
+const WHITESPACE = /\s/u;
+const HAN = /\p{Script=Han}/u;
+const KANA = /[\p{Script=Hiragana}\p{Script=Katakana}]/u;
+const HANGUL = /\p{Script=Hangul}/u;
+const LATIN = /\p{Script=Latin}/u;
+const DIGIT = /\p{N}/u;
+/**
+ * CJK/fullwidth punctuation always severs a word: ，。！？、；：""''（）《》【】
+ * plus the rest of the CJK Symbols, Halfwidth/Fullwidth Forms and the
+ * curly-quote/ellipsis/em-dash block.
+ */
+const CJK_PUNCT = /[\u2014\u2018\u2019\u201c\u201d\u2026\u3000-\u303f\uff01-\uff0f\uff1a-\uff20\uff3b-\uff40\uff5b-\uff65]/u;
+/** Grapheme-cluster continuations: combining marks, ZWJ, variation selectors. */
+const JOINER = /[\p{M}\u200d\ufe00-\ufe0f]/u;
+const CLASS_OTHER = 0;
+const CLASS_LATIN = 1;
+const CLASS_DIGIT = 2;
+const CLASS_HAN = 3;
+const CLASS_KANA = 4;
+const CLASS_HANGUL = 5;
+/** Code point ending at `index`, surrogate-pair aware. */
+function codePointBefore(text, index) {
+    const low = text.charCodeAt(index - 1);
+    if (low >= 0xdc00 && low <= 0xdfff && index >= 2) {
+        const high = text.charCodeAt(index - 2);
+        if (high >= 0xd800 && high <= 0xdbff) {
+            return (high - 0xd800) * 0x400 + (low - 0xdc00) + 0x10000;
+        }
+    }
+    return low;
+}
+function scriptClass(codePoint) {
+    const char = String.fromCodePoint(codePoint);
+    if (HAN.test(char))
+        return CLASS_HAN;
+    if (KANA.test(char))
+        return CLASS_KANA;
+    if (HANGUL.test(char))
+        return CLASS_HANGUL;
+    if (DIGIT.test(char))
+        return CLASS_DIGIT;
+    if (LATIN.test(char))
+        return CLASS_LATIN;
+    return CLASS_OTHER;
+}
+/** Continuation of a grapheme cluster: combining mark, ZWJ, variation selector. */
+function isClusterJoiner(codePoint) {
+    return JOINER.test(String.fromCodePoint(codePoint));
+}
+/**
+ * Script class of the character before `offset`, skipping any trailing
+ * cluster joiners so `e` + U+0301 classifies as Latin, not "other".
+ */
+function leftClassAt(text, offset) {
+    let index = offset;
+    while (index > 0) {
+        const codePoint = codePointBefore(text, index);
+        if (!isClusterJoiner(codePoint))
+            return scriptClass(codePoint);
+        index = stepBackward(text, index);
+    }
+    return CLASS_OTHER;
+}
+/** Layer 1 only: cheap, context-free break rules (edges count as breaks). */
+function hardBoundaryAt(text, offset) {
+    if (offset <= 0 || offset >= text.length)
+        return true;
+    const right = text.codePointAt(offset);
+    // A joining mark on the right means the seam sits INSIDE a grapheme
+    // cluster — never a word boundary, whatever the base character's class.
+    if (isClusterJoiner(right))
+        return false;
+    const left = codePointBefore(text, offset);
+    const leftChar = String.fromCodePoint(left);
+    const rightChar = String.fromCodePoint(right);
+    if (WHITESPACE.test(leftChar) || WHITESPACE.test(rightChar))
+        return true;
+    if (CJK_PUNCT.test(leftChar) || CJK_PUNCT.test(rightChar))
+        return true;
+    return leftClassAt(text, offset) !== scriptClass(right);
+}
+/** Previous code-point index before `index` (never splits a surrogate pair). */
+function stepBackward(text, index) {
+    const codePoint = codePointBefore(text, index);
+    return codePoint > 0xffff ? index - 2 : index - 1;
+}
+/**
+ * Whether the seam at `offset` (`text[offset-1] | text[offset]`) is a word
+ * boundary. `offset` is a code-unit index, as produced by the composer's
+ * grapheme-normalized caret.
+ */
+export function isDraftWordBoundary(text, offset) {
+    if (hardBoundaryAt(text, offset))
+        return true;
+    // Layer 1 rejected this offset, so 0 < offset < text.length, which means the
+    // window's own edges can never masquerade as a seam boundary and the queried
+    // offset is always strictly inside.
+    const start = Math.max(0, offset - DRAFT_WORD_WINDOW);
+    const end = Math.min(text.length, offset + DRAFT_WORD_WINDOW);
+    for (const part of getWordSegmenter().segment(text.slice(start, end))) {
+        if (start + part.index === offset)
+            return true;
+    }
+    return false;
+}
+/**
+ * The word interval `[start, end)` containing the character at `index`: the
+ * ICU segment when that character is word-like, otherwise just the character
+ * itself (whitespace and punctuation are boundaries, never part of a
+ * multi-character word). A deletion run uses this as the range it may keep
+ * consuming.
+ *
+ * The window widens until the segment no longer touches its edge: ICU
+ * segmentation is length-dependent, so a truncated copy of a repeated-Han run
+ * can split differently from the full draft (and the ±32 window would then
+ * read the wrong word at the seam).
+ */
+export function draftWordRangeAt(text, index) {
+    const single = { start: index, end: index + 1 };
+    if (index < 0 || index >= text.length)
+        return single;
+    const segmenter = getWordSegmenter();
+    let radius = DRAFT_WORD_WINDOW;
+    for (;;) {
+        const windowStart = Math.max(0, index - radius);
+        const windowEnd = Math.min(text.length, index + radius);
+        for (const part of segmenter.segment(text.slice(windowStart, windowEnd))) {
+            const start = windowStart + part.index;
+            const end = start + part.segment.length;
+            if (start > index || index >= end)
+                continue;
+            const clipped = (start === windowStart && windowStart > 0) || (end === windowEnd && windowEnd < text.length);
+            if (!clipped)
+                return part.isWordLike === true ? { start, end } : single;
+            break;
+        }
+        if (windowStart === 0 && windowEnd === text.length)
+            return single;
+        radius = Math.min(radius * 2, text.length);
+    }
+}

package/lib/types/utils/fileTarget.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fileTarget.d.ts","sourceRoot":"","sources":["../../../src/utils/fileTarget.ts"],"names":[],"mappings":"AAuBA,yEAAyE;AACzE,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAE3C,yDAAyD;AACzD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOhE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAWvE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM7D;AA0BD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAoBvD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMtD;AAWD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,GAC9C,MAAM,CAcR"}
+{"version":3,"file":"fileTarget.d.ts","sourceRoot":"","sources":["../../../src/utils/fileTarget.ts"],"names":[],"mappings":"AAuBA,yEAAyE;AACzE,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAE3C,yDAAyD;AACzD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOhE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAWvE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM7D;AA0BD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAoBvD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMtD;AAWD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,GAC9C,MAAM,CAYR"}

package/lib/types/utils/fileTarget.js

@@ -161,15 +161,13 @@ const PATH_SPAN_RE = /(?:\.{1,2}[\\/]|[\\/]|~[\\/]|[A-Za-z]:[\\/])[^\s<>"'`|?#]*
  */
 export function linkifyFilePaths(text, wrap) {
     return text.replace(PATH_SPAN_RE, (match, offset, full) => {
-        // The slash-anchor branch would otherwise match inside URLs
-        // (`https:/…` matches `/…`): a span glued to a scheme colon or a `//`
-        // run is part of a URL, never a path. offset is available because the
-        // regex has no capture groups.
-        if (offset > 0) {
-            const prev = full[offset - 1];
-            if (prev === ':' || prev === '/')
-                return match;
-        }
+        // A candidate must start at a text boundary, not inside another token:
+        // `/idle/needs-input` in `working/idle/needs-input` otherwise looks like
+        // an absolute path (#1181). Colons and slashes are not boundaries, so
+        // URL interiors stay excluded too. Quotes/opening delimiters and `=`
+        // still allow standalone anchored paths in prose and assignments.
+        if (offset > 0 && !/[\s<>"'`|([{=]/u.test(full[offset - 1]))
+            return match;
         const display = match.replace(/[.,;:!?]+$/u, '');
         if (display === '' || !looksLikeFilePath(display))
             return match;

package/lib/types/utils/inputPaste.d.ts

@@ -0,0 +1,62 @@
+/**
+ * 输入粘贴的**共享语义**（PromptInput 与 Launchpad 复用；2026-10 方案 B）。
+ *
+ * 只抽两条输入真正同源的东西：
+ * 1. **粘贴管线**——载荷清洗（win32 输入记录残渣、终端控制字节、\r 规整、
+ *    bracketed paste 标记字节）与单行折叠；
+ * 2. **组合键匹配**——`paste` 动作经 keymap 的生效组合键（可重映射），
+ *    谁都不许再硬编码 `ctrl+v` 字符串。
+ *
+ * 明确**不**统一的语义（边界见 Launchpad/PromptInput 各自注释）：
+ * - 多行/附件/图片暂存/历史/chip 折叠是聊天页编辑器的能力，落地页是单行
+ *   首屏输入——多行内容在落地页折叠成一行（{@link collapseToSingleLine}），
+ *   PromptInput 保留换行；
+ * - 异步落点守则**同一条**（读回时必须用当下最新的文本/光标，闭包旧值一律
+ *   不许用），实现各自落地：PromptInput 用 revision lease（与会话代次、图片
+ *   租约耦合，搬动会改变聊天页行为），Launchpad 用每次渲染刷新的 current-ref
+ *   （受控组件，props 即最新值）。
+ */
+import { type ComboKeyFlags } from './keymap.js';
+/**
+ * Normalize editable text so no terminal control characters remain in state.
+ */
+export declare function sanitizeEditableText(text: string): string;
+/**
+ * Paste-payload ingress: strip the ESC-less tail of a split record before
+ * normalizing. The tail is printable, so it survives `sanitizeEditableText`'s
+ * control probe untouched; typed text keeps it because only a paste payload
+ * can carry a partial record.
+ *
+ * The five separators only prove the *shape*, not that a record was split:
+ * a user can legitimately paste the literal `[13;28;13;1;0;1_`. Strip the
+ * ESC-less form only when the same payload also carries a full ESC-bearing
+ * record — only then is there in-payload evidence of a split stream.
+ * Otherwise the bytes are ordinary text and must survive verbatim.
+ */
+export declare function sanitizePastedText(text: string): string;
+/**
+ * Strip literal bracketed-paste marker bytes (`\x1b[200~` / `\x1b[201~`).
+ * ink's parser normally consumes them before `useInput` sees the payload;
+ * this is the belt-and-braces pass for any path that receives raw bytes
+ * (a flush boundary splitting marker from payload leaves them printable-side).
+ */
+export declare function stripBracketedPasteMarkers(text: string): string;
+/**
+ * Single-line paste fold (Launchpad 语义)：清洗后把换行折叠成一个空格——
+ * 单行编辑器里 Enter 是提交，多行内容不许拼出换行。
+ */
+export declare function collapseToSingleLine(text: string): string;
+/**
+ * 按键是否命中 `paste` 动作的**生效**组合键（默认 Ctrl+V/Cmd+V + Alt+V 别名，
+ * 可经 /settings 重映射）。唯一的组合键判定入口——调用方不许自己比键字符串。
+ */
+export declare function matchesPasteShortcut(input: string, key: ComboKeyFlags): boolean;
+/**
+ * 单行插入的纯计算：把已清洗文本落在给定光标处，返回新的文本与光标。
+ * 调用方负责拿**当下最新**的 query/caret（异步落点守则），这里不做 IO。
+ */
+export declare function insertSingleLineAt(query: string, caret: number, text: string): {
+    text: string;
+    caret: number;
+};
+//# sourceMappingURL=inputPaste.d.ts.map

package/lib/types/utils/inputPaste.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inputPaste.d.ts","sourceRoot":"","sources":["../../../src/utils/inputPaste.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAA;AA+B/D;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAWzD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKvD;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAE/E;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAGjC"}