@deepseek-harness-tui/dsh-tui 0.14.1 → 0.16.0

package/lib/types/backends/shared/image-size.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Intrinsic image dimensions from the encoded bytes alone — no decode, no
+ * dependencies. Backend-neutral (D15): the composer's staging gate
+ * (`src/utils/imageResize.ts`, which adds the sharp-backed re-encode on top)
+ * and the backends that admit pasted images both measure with this, and a
+ * backend must not reach into `src/utils/` (B-3's boundary rule). The sharp
+ * dependency stays on the host side, so this module is a pure leaf.
+ *
+ * Formats the probe cannot identify return null and MUST be forced through
+ * an actual decode for measurement — never read as "small enough".
+ */
+/** Pixel dimensions read from an encoded image's header. */
+export interface ImageSizeProbe {
+    readonly width: number;
+    readonly height: number;
+}
+/**
+ * The image media type the encoded bytes actually are, from the magic
+ * bytes alone (the same signatures {@link probeImageSize} dispatches on):
+ * PNG, JPEG, WebP (RIFF/WEBP) or GIF; anything else is undefined and the
+ * caller keeps its own label (those bytes take the decode-or-refuse path
+ * anyway). Used to keep a renamed file from travelling under a label its
+ * content contradicts.
+ */
+export declare function sniffImageMediaType(bytes: Uint8Array): 'image/png' | 'image/jpeg' | 'image/webp' | 'image/gif' | undefined;
+/**
+ * Measure intrinsic pixel dimensions from the encoded bytes alone — no
+ * decode, no dependencies. Recognizes PNG / JPEG / WebP (VP8X, VP8,
+ * VP8L) / GIF; anything else returns null, which callers MUST treat as
+ * "unknown, force a real decode" — never as "small enough".
+ */
+export declare function probeImageSize(bytes: Uint8Array): ImageSizeProbe | null;
+//# sourceMappingURL=image-size.d.ts.map

package/lib/types/backends/shared/image-size.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-size.d.ts","sourceRoot":"","sources":["../../../../src/backends/shared/image-size.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAiFD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAO1H;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc,GAAG,IAAI,CAevE"}

package/lib/types/backends/shared/image-size.js

@@ -0,0 +1,134 @@
+/**
+ * Intrinsic image dimensions from the encoded bytes alone — no decode, no
+ * dependencies. Backend-neutral (D15): the composer's staging gate
+ * (`src/utils/imageResize.ts`, which adds the sharp-backed re-encode on top)
+ * and the backends that admit pasted images both measure with this, and a
+ * backend must not reach into `src/utils/` (B-3's boundary rule). The sharp
+ * dependency stays on the host side, so this module is a pure leaf.
+ *
+ * Formats the probe cannot identify return null and MUST be forced through
+ * an actual decode for measurement — never read as "small enough".
+ */
+const PNG_SIGNATURE = [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a];
+function probePng(b) {
+    // IHDR is required to be the first chunk: width/height are big-endian
+    // u32 at fixed offsets 16/20.
+    if (b.length < 24)
+        return null;
+    const width = (b[16] << 24) | (b[17] << 16) | (b[18] << 8) | b[19];
+    const height = (b[20] << 24) | (b[21] << 16) | (b[22] << 8) | b[23];
+    return width > 0 && height > 0 ? { width, height } : null;
+}
+function probeJpeg(b) {
+    // Walk the segment chain to the first SOF marker (C0–CF except C4 DHT,
+    // C8 JPG, CC DAC); height/width are big-endian u16 at +5/+7 inside it.
+    if (b.length < 4 || b[0] !== 0xff || b[1] !== 0xd8)
+        return null;
+    let i = 2;
+    while (i + 9 < b.length) {
+        if (b[i] !== 0xff)
+            return null;
+        const marker = b[i + 1];
+        if (marker === 0xd8 || (marker >= 0xd0 && marker <= 0xd9)) {
+            i += 2; // standalone markers carry no length
+            continue;
+        }
+        const segLen = (b[i + 2] << 8) | b[i + 3];
+        if (segLen < 2)
+            return null;
+        const isSof = marker >= 0xc0 && marker <= 0xcf
+            && marker !== 0xc4 && marker !== 0xc8 && marker !== 0xcc;
+        if (isSof) {
+            const height = (b[i + 5] << 8) | b[i + 6];
+            const width = (b[i + 7] << 8) | b[i + 8];
+            return width > 0 && height > 0 ? { width, height } : null;
+        }
+        i += 2 + segLen;
+    }
+    return null;
+}
+function probeWebp(b) {
+    // RIFF....WEBP followed by VP8X (extended) or VP8 (lossy) or VP8L
+    // (lossless). VP8X carries the canvas size as 1-subtracted 24-bit LE;
+    // VP8 carries u16 LE after the frame tag; VP8L packs 14-bit
+    // 1-subtracted fields after the signature byte.
+    if (b.length < 30)
+        return null;
+    if (b[0] !== 0x52 || b[1] !== 0x49 || b[2] !== 0x46 || b[3] !== 0x46)
+        return null;
+    if (b[8] !== 0x57 || b[9] !== 0x45 || b[10] !== 0x42 || b[11] !== 0x50)
+        return null;
+    const fourcc = String.fromCharCode(b[12], b[13], b[14], b[15]);
+    if (fourcc === 'VP8X') {
+        const width = 1 + ((b[24] | (b[25] << 8) | (b[26] << 16)) & 0xffffff);
+        const height = 1 + ((b[27] | (b[28] << 8) | (b[29] << 16)) & 0xffffff);
+        return { width, height };
+    }
+    if (fourcc === 'VP8 ') {
+        // Uncompressed chunk header (10 bytes) then keyframe tag (3) then the
+        // dimensions: 14-bit width/height in the low bits of each u16, with a
+        // 2-bit horizontal/vertical scale in the top bits (RFC 6386 §9.1). Mask
+        // them off, or an encoder that sets the scale bits is measured up to
+        // 49152px too wide and gets shrunk far past the caps.
+        const width = (b[26] | (b[27] << 8)) & 0x3fff;
+        const height = (b[28] | (b[29] << 8)) & 0x3fff;
+        return width > 0 && height > 0 ? { width, height } : null;
+    }
+    if (fourcc === 'VP8L') {
+        const bits = (b[21] | (b[22] << 8) | (b[23] << 16) | (b[24] << 24)) >>> 0;
+        const width = (bits & 0x3fff) + 1;
+        const height = ((bits >> 14) & 0x3fff) + 1;
+        return { width, height };
+    }
+    return null;
+}
+function probeGif(b) {
+    // Logical screen descriptor: u16 LE at fixed offsets 6/8. A truncated header
+    // reads as 0×0 and would then look "inside the caps", so the zero check is
+    // what keeps an unmeasurable file on the decode path.
+    const width = b[6] | (b[7] << 8);
+    const height = b[8] | (b[9] << 8);
+    return width > 0 && height > 0 ? { width, height } : null;
+}
+/**
+ * The image media type the encoded bytes actually are, from the magic
+ * bytes alone (the same signatures {@link probeImageSize} dispatches on):
+ * PNG, JPEG, WebP (RIFF/WEBP) or GIF; anything else is undefined and the
+ * caller keeps its own label (those bytes take the decode-or-refuse path
+ * anyway). Used to keep a renamed file from travelling under a label its
+ * content contradicts.
+ */
+export function sniffImageMediaType(bytes) {
+    if (bytes.length >= 8 && PNG_SIGNATURE.every((v, i) => bytes[i] === v))
+        return 'image/png';
+    if (bytes.length >= 2 && bytes[0] === 0xff && bytes[1] === 0xd8)
+        return 'image/jpeg';
+    if (bytes.length >= 12 && bytes[0] === 0x52 && bytes[1] === 0x49 && bytes[2] === 0x46 && bytes[3] === 0x46
+        && bytes[8] === 0x57 && bytes[9] === 0x45 && bytes[10] === 0x42 && bytes[11] === 0x50)
+        return 'image/webp';
+    if (bytes.length >= 4 && bytes[0] === 0x47 && bytes[1] === 0x49 && bytes[2] === 0x46 && bytes[3] === 0x38)
+        return 'image/gif';
+    return undefined;
+}
+/**
+ * Measure intrinsic pixel dimensions from the encoded bytes alone — no
+ * decode, no dependencies. Recognizes PNG / JPEG / WebP (VP8X, VP8,
+ * VP8L) / GIF; anything else returns null, which callers MUST treat as
+ * "unknown, force a real decode" — never as "small enough".
+ */
+export function probeImageSize(bytes) {
+    if (bytes.length >= 8 && PNG_SIGNATURE.every((v, i) => bytes[i] === v)) {
+        return probePng(bytes);
+    }
+    if (bytes.length >= 2 && bytes[0] === 0xff && bytes[1] === 0xd8) {
+        return probeJpeg(bytes);
+    }
+    if (bytes.length >= 30 && bytes[0] === 0x52 && bytes[8] === 0x57) {
+        return probeWebp(bytes);
+    }
+    if (bytes.length >= 10
+        && bytes[0] === 0x47 && bytes[1] === 0x49 && bytes[2] === 0x46 && bytes[3] === 0x38) {
+        return probeGif(bytes);
+    }
+    return null;
+}

package/lib/types/{utils → backends/shared}/jsonl.d.ts

@@ -3,7 +3,11 @@
  * file. Legal JSON that is not a record (`null`, scalars, arrays) is skipped
  * silently since it is well-formed, just not a row; text that fails to parse
  * is counted, so a truncated or corrupted source can be reported.
- * Shared by the migration sources and the Claude backend's transcript reader.
+ *
+ * Backend-neutral (D15): the migration sources (via
+ * `src/dsh-adapter/migrate/parse/jsonl.ts`) and the Claude backend's
+ * transcript reader both read JSONL, and a backend must not reach into
+ * `src/utils/` (B-3's boundary rule). Pure, zero imports.
  */
 /** A decoded JSON object row. */
 export type JsonRecord = Record<string, unknown>;

package/lib/types/backends/shared/jsonl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonl.d.ts","sourceRoot":"","sources":["../../../../src/backends/shared/jsonl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,iCAAiC;AACjC,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEhD,oFAAoF;AACpF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAE5D;AAED,yCAAyC;AACzC,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAA;IACvC,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAgBjD"}

package/lib/types/{utils → backends/shared}/jsonl.js

@@ -3,7 +3,11 @@
  * file. Legal JSON that is not a record (`null`, scalars, arrays) is skipped
  * silently since it is well-formed, just not a row; text that fails to parse
  * is counted, so a truncated or corrupted source can be reported.
- * Shared by the migration sources and the Claude backend's transcript reader.
+ *
+ * Backend-neutral (D15): the migration sources (via
+ * `src/dsh-adapter/migrate/parse/jsonl.ts`) and the Claude backend's
+ * transcript reader both read JSONL, and a backend must not reach into
+ * `src/utils/` (B-3's boundary rule). Pure, zero imports.
  */
 /** Narrow an unknown JSON value to an object record (rejects `null` and arrays). */
 export function isRecord(value) {

package/lib/types/backends/shared/localized-text.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The two rules a backend's own copy needs, in one place (D15).
+ *
+ * A backend writes its user-facing strings itself (D2: the host dictionary is
+ * not readable from a backend), in the shape `src/i18n.ts` uses —
+ * `{{name}}` placeholders and, where a language marks number, a `one`/`other`
+ * pair selected on the `count` parameter. The *mechanism* is shared so two
+ * backends cannot disagree about what `{{name}}` or `count` means; the
+ * *dictionary* stays with each backend.
+ */
+import type { BackendLocale } from '../../agent/backend.js';
+/** One string in the languages the TUI ships: a plain template, or the
+ *  `one`/`other` plural forms selected on the `count` parameter. */
+export type LocalizedText = string | {
+    readonly one: string;
+    readonly other: string;
+};
+/** Values substituted into a template (`{{name}}`). */
+export type TextParams = Readonly<Record<string, string | number>>;
+/** Substitute `{{name}}` with the values of this call; a name the caller did
+ *  not supply is left verbatim, so a typo stays visible on screen instead of
+ *  turning into a blank (the rule `t()` applies). */
+export declare function fillTemplate(template: string, params: TextParams): string;
+/**
+ * The text of one entry in `locale`, with the `count` parameter choosing the
+ * plural form (a non-finite or absent `count` reads as 0, i.e. `other`).
+ * Undefined when the entry has no text in that language.
+ */
+export declare function pickLocalizedText(text: LocalizedText | undefined, locale: BackendLocale, params: TextParams): string | undefined;
+//# sourceMappingURL=localized-text.d.ts.map

package/lib/types/backends/shared/localized-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localized-text.d.ts","sourceRoot":"","sources":["../../../../src/backends/shared/localized-text.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE3D;oEACoE;AACpE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAErF,uDAAuD;AACvD,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAA;AAElE;;qDAEqD;AACrD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAIzE;AASD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAKhI"}

package/lib/types/backends/shared/localized-text.js

@@ -0,0 +1,24 @@
+/** Substitute `{{name}}` with the values of this call; a name the caller did
+ *  not supply is left verbatim, so a typo stays visible on screen instead of
+ *  turning into a blank (the rule `t()` applies). */
+export function fillTemplate(template, params) {
+    return template.replace(/\{\{(\w+)\}\}/g, (match, name) => name in params ? String(params[name]) : match);
+}
+// CLDR-backed and built into Node: zh always selects `other` (the language has
+// no grammatical number), en selects `one` exactly at 1.
+const pluralRules = {
+    zh: new Intl.PluralRules('zh'),
+    en: new Intl.PluralRules('en'),
+};
+/**
+ * The text of one entry in `locale`, with the `count` parameter choosing the
+ * plural form (a non-finite or absent `count` reads as 0, i.e. `other`).
+ * Undefined when the entry has no text in that language.
+ */
+export function pickLocalizedText(text, locale, params) {
+    if (text === undefined || typeof text === 'string')
+        return text;
+    const count = Number(params.count);
+    const category = pluralRules[locale].select(Number.isFinite(count) ? count : 0);
+    return category === 'one' ? text.one : text.other;
+}

package/lib/types/backends/shared/platform-text.d.ts

@@ -0,0 +1,88 @@
+/**
+ * The platform copy the host UI and the built-in backends both render, as one
+ * source (C-2): the status line's rate-limit window, /doctor, /rename, rewind
+ * and the names of the tool cards a backend shares with the host's own cards.
+ *
+ * Why a shared *source* rather than a shared dictionary: the host dictionary
+ * (`src/i18n.ts`) is not readable from a backend (D2), so each of these strings
+ * used to be copied byte for byte into a backend's own text module as well —
+ * two copies of one string, with nothing keeping them equal. The values now
+ * come from here; each side still carries the entry in its own dictionary and
+ * renders it the way it always did. `scripts/verify-i18n.ts` compares the host
+ * dictionary and both backend dictionaries against this file verbatim, so a
+ * copy that drifts — or an inline one written back over the spread — turns
+ * that gate red.
+ *
+ * D2 is unchanged: a third-party contribution must not be able to speak with
+ * the host's words. The layers a contribution occupies
+ * (`src/{screens,components,hooks,ink}/**`, `src/channel/**`) are kept out of
+ * `src/backends/**` by `scripts/verify-adapter-boundary.ts`, so this file is
+ * read only by the host dictionary and the two in-tree backends — never by a
+ * plugin. The seam itself may not read the host dictionary either (same gate),
+ * which is what keeps this route one-way.
+ */
+import type { LocalizedText } from './localized-text.js';
+/** One platform string in the languages the TUI ships. */
+export interface PlatformTextEntry {
+    readonly zh: LocalizedText;
+    readonly en: LocalizedText;
+}
+/**
+ * The shared platform copy. The keys are the union of what the claude and
+ * codex text modules render on a platform surface; the host dictionary spreads
+ * this object in, so its `keyof` stays a literal union and `t()` keeps its
+ * type safety — do not widen this declaration with a `Record<string, …>`
+ * annotation, which would collapse that union to `string`.
+ */
+export declare const PLATFORM_TEXT: Readonly<{
+    'capability-failed': Readonly<{
+        zh: "{{name}} 失败 · {{err}}";
+        en: "{{name}} failed · {{err}}";
+    }>;
+    'status-rate-limit-five-hour': Readonly<{
+        zh: "5小时";
+        en: "5h";
+    }>;
+    'status-rate-limit-seven-day': Readonly<{
+        zh: "7天";
+        en: "7d";
+    }>;
+    'doctor-unknown': Readonly<{
+        zh: "未知";
+        en: "unknown";
+    }>;
+    'effort-invalid': Readonly<{
+        zh: "未知推理等级 {{id}}（当前模型可选：{{ids}}）";
+        en: "Unknown reasoning effort {{id}} (this model offers: {{ids}})";
+    }>;
+    'tool-name-bash': Readonly<{
+        zh: "Bash";
+        en: "Bash";
+    }>;
+    'tool-name-edit': Readonly<{
+        zh: "编辑";
+        en: "Edit";
+    }>;
+    'rewind-first-message': Readonly<{
+        zh: "不能回退到第一条消息之前";
+        en: "Cannot rewind past the very first message";
+    }>;
+    'rename-failed': Readonly<{
+        zh: "重命名失败 · {{err}}";
+        en: "Rename failed · {{err}}";
+    }>;
+    'rename-usage': Readonly<{
+        zh: "用法  /rename <新名称>";
+        en: "Usage  /rename <new title>";
+    }>;
+}>;
+/** A key of {@link PLATFORM_TEXT}; a typo is a compile error. */
+export type PlatformTextKey = keyof typeof PLATFORM_TEXT;
+/**
+ * The frozen subset of {@link PLATFORM_TEXT} holding exactly `keys` — the
+ * platform strings this backend renders, and nothing else. `K` is constrained
+ * to {@link PlatformTextKey}, so a mistyped key is a compile error rather than
+ * a string that silently disappears from the screen.
+ */
+export declare function pickPlatformText<K extends PlatformTextKey>(keys: readonly K[]): Readonly<Pick<typeof PLATFORM_TEXT, K>>;
+//# sourceMappingURL=platform-text.d.ts.map

package/lib/types/backends/shared/platform-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-text.d.ts","sourceRoot":"","sources":["../../../../src/backends/shared/platform-text.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAExD,0DAA0D;AAC1D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAA;CAC3B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWoB,CAAA;AAE9C,iEAAiE;AACjE,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,aAAa,CAAA;AAKxD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,eAAe,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,CAMvH"}

package/lib/types/backends/shared/platform-text.js

@@ -0,0 +1,33 @@
+/**
+ * The shared platform copy. The keys are the union of what the claude and
+ * codex text modules render on a platform surface; the host dictionary spreads
+ * this object in, so its `keyof` stays a literal union and `t()` keeps its
+ * type safety — do not widen this declaration with a `Record<string, …>`
+ * annotation, which would collapse that union to `string`.
+ */
+export const PLATFORM_TEXT = Object.freeze({
+    'capability-failed': Object.freeze({ zh: '{{name}} 失败 · {{err}}', en: '{{name}} failed · {{err}}' }),
+    'status-rate-limit-five-hour': Object.freeze({ zh: '5小时', en: '5h' }),
+    'status-rate-limit-seven-day': Object.freeze({ zh: '7天', en: '7d' }),
+    'doctor-unknown': Object.freeze({ zh: '未知', en: 'unknown' }),
+    'effort-invalid': Object.freeze({ zh: '未知推理等级 {{id}}（当前模型可选：{{ids}}）', en: 'Unknown reasoning effort {{id}} (this model offers: {{ids}})' }),
+    'tool-name-bash': Object.freeze({ zh: 'Bash', en: 'Bash' }),
+    'tool-name-edit': Object.freeze({ zh: '编辑', en: 'Edit' }),
+    'rewind-first-message': Object.freeze({ zh: '不能回退到第一条消息之前', en: 'Cannot rewind past the very first message' }),
+    'rename-failed': Object.freeze({ zh: '重命名失败 · {{err}}', en: 'Rename failed · {{err}}' }),
+    'rename-usage': Object.freeze({ zh: '用法  /rename <新名称>', en: 'Usage  /rename <new title>' }),
+});
+/**
+ * The frozen subset of {@link PLATFORM_TEXT} holding exactly `keys` — the
+ * platform strings this backend renders, and nothing else. `K` is constrained
+ * to {@link PlatformTextKey}, so a mistyped key is a compile error rather than
+ * a string that silently disappears from the screen.
+ */
+export function pickPlatformText(keys) {
+    const picked = {};
+    for (const key of keys)
+        picked[key] = PLATFORM_TEXT[key];
+    // The loop fills exactly `keys`; a mapped type cannot express that, so the
+    // assertion is the one step TypeScript cannot check here.
+    return Object.freeze(picked);
+}

package/lib/types/branding.d.ts

@@ -23,6 +23,7 @@
 export type Brand = 'deepseek' | 'claude' | 'codex';
 export type { BrandSetting } from './adapter/ports/channel-display.js';
 import type { BrandSetting } from './adapter/ports/channel-display.js';
+import type { ThemeName } from './theme.js';
 /** 设置项的合法值表（注册与归一化共用一份）。 */
 export declare const BRAND_SETTING_VALUES: readonly BrandSetting[];
 /**
@@ -69,6 +70,18 @@ export declare const BRAND_THEMES: Readonly<Partial<Record<Brand, {
     readonly dark: string;
     readonly light: string;
 }>>>;
+/**
+ * 品牌默认档的落位：浅色档 → 该品牌主题对的浅色版，深色档 → 深色版；`deepseek`
+ * 没有品牌主题对（用系统默认 light/dark），返回 `undefined`，调用方沿用解析档。
+ *
+ * 判据是**解析后色板的明暗**（`isLightThemeActive`），不是主题名的字面量：浅色
+ * 内置名不止 `light` 一个（`pink-day`、`claude-paper`、`codex-paper`），自定义与
+ * 运行时主题更是任意名字——只认 `'light'` 会让持久化选了 `pink-day` 的用户在品牌
+ * 后端下看到深色版。
+ * @param brand - 当前品牌档（`resolveBrand` 的结果）。
+ * @param themeName - 品牌覆盖前的解析档（ThemeProvider 的 `active`，含 `auto`）。
+ */
+export declare function brandThemeFor(brand: Brand, themeName: ThemeName): string | undefined;
 /** 开屏欢迎语（品牌档；deepseek 沿用 i18n 的 `logo-tagline`）。英文两行以
  *  `\n` 分隔，渲染层按行拆开居中。 */
 export declare const BRAND_TAGLINE: Readonly<Record<Brand, {

package/lib/types/branding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branding.d.ts","sourceRoot":"","sources":["../../src/branding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,gFAAgF;AAChF,MAAM,MAAM,KAAK,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAA;AAInD,YAAY,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAA;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAA;AAEtE,4BAA4B;AAC5B,eAAO,MAAM,oBAAoB,EAAE,SAAS,YAAY,EAA4C,CAAA;AAEpG;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAIlE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,CAEnE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,YAAY,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,CAKpG;AAED,8BAA8B;AAC9B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,oDAAoD;AACpD,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAIvE,CAAA;AAEF;+BAC+B;AAC/B,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAGvF,CAAA;AAEF;;;+BAG+B;AAC/B,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,CAGxF,CAAA;AAEF;8BAC8B;AAC9B,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAG3G,CAAA;AAEF;yBACyB;AACzB,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAI9F,CAAA;AAEF,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,EAAE,SAAS;IAC3C,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAC/C,EAKA,CAAA;AAUD,uBAAuB;AACvB,wBAAgB,cAAc,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAIjD;AAED,gDAAgD;AAChD,wBAAgB,cAAc,IAAI,KAAK,CAEtC;AAED,2CAA2C;AAC3C,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAKrE"}
+{"version":3,"file":"branding.d.ts","sourceRoot":"","sources":["../../src/branding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,gFAAgF;AAChF,MAAM,MAAM,KAAK,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAA;AAInD,YAAY,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAA;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAA;AAEtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE3C,4BAA4B;AAC5B,eAAO,MAAM,oBAAoB,EAAE,SAAS,YAAY,EAA4C,CAAA;AAEpG;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAIlE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,CAEnE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,YAAY,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,CAKpG;AAED,8BAA8B;AAC9B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,oDAAoD;AACpD,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAIvE,CAAA;AAEF;+BAC+B;AAC/B,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAGvF,CAAA;AAEF;;;+BAG+B;AAC/B,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,CAGxF,CAAA;AAEF;8BAC8B;AAC9B,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAG3G,CAAA;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAIpF;AAED;yBACyB;AACzB,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAI9F,CAAA;AAEF,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,EAAE,SAAS;IAC3C,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAC/C,EAKA,CAAA;AAUD,uBAAuB;AACvB,wBAAgB,cAAc,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAIjD;AAED,gDAAgD;AAChD,wBAAgB,cAAc,IAAI,KAAK,CAEtC;AAED,2CAA2C;AAC3C,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAKrE"}

package/lib/types/branding.js

@@ -19,6 +19,7 @@
  * 实际上是 boot 时定死的；但读取仍走 `backendCapabilities`（在 ui-policy
  * 的 reactive 清单里），未来进程内热切也不用改这里。
  */
+import { isLightThemeActive } from './theme.js';
 /** 设置项的合法值表（注册与归一化共用一份）。 */
 export const BRAND_SETTING_VALUES = ['auto', 'deepseek', 'claude', 'codex'];
 /**
@@ -76,6 +77,23 @@ export const BRAND_THEMES = Object.freeze({
     claude: CLAUDE_BRAND_THEMES,
     codex: CODEX_BRAND_THEMES,
 });
+/**
+ * 品牌默认档的落位：浅色档 → 该品牌主题对的浅色版，深色档 → 深色版；`deepseek`
+ * 没有品牌主题对（用系统默认 light/dark），返回 `undefined`，调用方沿用解析档。
+ *
+ * 判据是**解析后色板的明暗**（`isLightThemeActive`），不是主题名的字面量：浅色
+ * 内置名不止 `light` 一个（`pink-day`、`claude-paper`、`codex-paper`），自定义与
+ * 运行时主题更是任意名字——只认 `'light'` 会让持久化选了 `pink-day` 的用户在品牌
+ * 后端下看到深色版。
+ * @param brand - 当前品牌档（`resolveBrand` 的结果）。
+ * @param themeName - 品牌覆盖前的解析档（ThemeProvider 的 `active`，含 `auto`）。
+ */
+export function brandThemeFor(brand, themeName) {
+    const pair = BRAND_THEMES[brand];
+    if (pair === undefined)
+        return undefined;
+    return isLightThemeActive(themeName) ? pair.light : pair.dark;
+}
 /** 开屏欢迎语（品牌档；deepseek 沿用 i18n 的 `logo-tagline`）。英文两行以
  *  `\n` 分隔，渲染层按行拆开居中。 */
 export const BRAND_TAGLINE = Object.freeze({

package/lib/types/channel/channel-slug.d.ts

@@ -3,7 +3,9 @@
  * characters collapsed to `-`, edges trimmed. A name with no ASCII letter or
  * digit (智谱, 硅基流动) gets `channel-<first 8 hex of its sha256>` instead,
  * so two such names never share one id (nor the token ref derived from it).
- * Shared by the /channel wizard and the Claude backend's channel store.
+ * Shared by the /channel wizard and the codex backend's channel store; the
+ * Claude backend keeps its own copy (`src/backends/shared/channel-slug.ts`),
+ * pinned to this one by the name vector in `verify-claude-channels.ts`.
  */
 export declare function channelProfileSlug(name: string): string;
 //# sourceMappingURL=channel-slug.d.ts.map

package/lib/types/channel/channel-slug.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel-slug.d.ts","sourceRoot":"","sources":["../../../src/channel/channel-slug.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKvD"}
+{"version":3,"file":"channel-slug.d.ts","sourceRoot":"","sources":["../../../src/channel/channel-slug.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKvD"}

package/lib/types/channel/channel-slug.js

@@ -4,7 +4,9 @@ import { createHash } from 'node:crypto';
  * characters collapsed to `-`, edges trimmed. A name with no ASCII letter or
  * digit (智谱, 硅基流动) gets `channel-<first 8 hex of its sha256>` instead,
  * so two such names never share one id (nor the token ref derived from it).
- * Shared by the /channel wizard and the Claude backend's channel store.
+ * Shared by the /channel wizard and the codex backend's channel store; the
+ * Claude backend keeps its own copy (`src/backends/shared/channel-slug.ts`),
+ * pinned to this one by the name vector in `verify-claude-channels.ts`.
  */
 export function channelProfileSlug(name) {
     const trimmed = name.trim();

package/lib/types/channel/projection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../../src/channel/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAA;AAC/D,OAAO,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAkC,MAAM,kCAAkC,CAAA;AAEnI,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAgB,gBAAgB,EAAsC,MAAM,oBAAoB,CAAA;AASxI,OAAO,EAAiG,KAAK,aAAa,EAAE,MAAM,YAAY,CAAA;AAE9I,KAAK,OAAO,CAAC,CAAC,IAAI;IAAE,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAAE,CAAA;AAKpD,oDAAoD;AACpD,MAAM,WAAW,eAAgB,SAAQ,OAAO,CAAC,IAAI,CAAC,SAAS,EAC3D,cAAc,GAAG,iBAAiB,GAAG,aAAa,GAAG,MAAM,GAAG,iBAAiB,GAAG,QAAQ,GAAG,UAAU,GACvG,OAAO,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,eAAe,GAAG,KAAK,GAAG,eAAe,GAAG,SAAS,GAC5G,YAAY,GAAG,WAAW,GAAG,eAAe,GAAG,iBAAiB,GAAG,cAAc,GAAG,aAAa,GAAG,cAAc,GAClH,YAAY,CACf,CAAC;IACA,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,UAAU,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACzC,KAAK,EAAE,aAAa,EAAE,CAAA;CACvB;AAED,sEAAsE;AACtE,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAA;KAAE,GAAG,SAAS,CAAA;CACjH;AAED,uDAAuD;AACvD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACzB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IACvC,mBAAmB,IAAI,IAAI,CAAA;IAC3B,mBAAmB,IAAI,IAAI,CAAA;IAC3B,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;IAC3B,gEAAgE;IAChE,IAAI,EAAE;QAAE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;IACjH;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAA;IACjE;;;;;;OAMG;IACH,UAAU,CAAC,EAAE;QAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAA;IACrE,gBAAgB,EAAE;QAAE,cAAc,EAAE,OAAO,CAAA;KAAE,CAAA;IAC7C,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B;4EACwE;IACxE,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAAA;IACrE;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,aAAa,CAAA;CAChD;AAID,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAAG,SAAS,GAAG,MAAM,CAGpF;AAED,0DAA0D;AAC1D,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,qBAAqB;oBAw4ClE,SAAS,UAAU,EAAE,QAAQ,cAAc,KAAG,IAAI;iBA2BvD,IAAI;2BA5oCM,IAAI;6BAmDF,IAAI;;;;;;;;;;;EAwnCnC;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAA"}
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../../src/channel/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAA;AAC/D,OAAO,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAkC,MAAM,kCAAkC,CAAA;AAEnI,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAgB,gBAAgB,EAAsC,MAAM,oBAAoB,CAAA;AASxI,OAAO,EAAiG,KAAK,aAAa,EAAE,MAAM,YAAY,CAAA;AAE9I,KAAK,OAAO,CAAC,CAAC,IAAI;IAAE,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAAE,CAAA;AAKpD,oDAAoD;AACpD,MAAM,WAAW,eAAgB,SAAQ,OAAO,CAAC,IAAI,CAAC,SAAS,EAC3D,cAAc,GAAG,iBAAiB,GAAG,aAAa,GAAG,MAAM,GAAG,iBAAiB,GAAG,QAAQ,GAAG,UAAU,GACvG,OAAO,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,eAAe,GAAG,KAAK,GAAG,eAAe,GAAG,SAAS,GAC5G,YAAY,GAAG,WAAW,GAAG,eAAe,GAAG,iBAAiB,GAAG,cAAc,GAAG,aAAa,GAAG,cAAc,GAClH,YAAY,CACf,CAAC;IACA,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,UAAU,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACzC,KAAK,EAAE,aAAa,EAAE,CAAA;CACvB;AAED,sEAAsE;AACtE,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAA;KAAE,GAAG,SAAS,CAAA;CACjH;AAED,uDAAuD;AACvD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACzB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IACvC,mBAAmB,IAAI,IAAI,CAAA;IAC3B,mBAAmB,IAAI,IAAI,CAAA;IAC3B,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;IAC3B,gEAAgE;IAChE,IAAI,EAAE;QAAE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;IACjH;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAA;IACjE;;;;;;OAMG;IACH,UAAU,CAAC,EAAE;QAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAA;IACrE,gBAAgB,EAAE;QAAE,cAAc,EAAE,OAAO,CAAA;KAAE,CAAA;IAC7C,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B;4EACwE;IACxE,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAAA;IACrE;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,aAAa,CAAA;CAChD;AAID,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAAG,SAAS,GAAG,MAAM,CAGpF;AAED,0DAA0D;AAC1D,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,qBAAqB;oBAi5ClE,SAAS,UAAU,EAAE,QAAQ,cAAc,KAAG,IAAI;iBA2BvD,IAAI;2BArpCM,IAAI;6BAmDF,IAAI;;;;;;;;;;;EAioCnC;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAA"}

package/lib/types/channel/projection.js

@@ -697,6 +697,16 @@ export function createChannelProjection(state, deps) {
             }
             return;
         }
+        // A team member's message to this session: its own bubble, labelled with
+        // the sender, never the human's last prompt.
+        if (event.source === 'team-message') {
+            if (event.text === '')
+                return;
+            appendRow({ id: deps.rowIds.value, kind: 'user', label: 'team-message', text: event.text, ...(event.sender === undefined ? {} : { sender: event.sender }), seq: event.seq });
+            state.contextSegments.prompt += estimateTokens(textOfBlocks(event.blocks));
+            deps.rowIds.value += 1;
+            return;
+        }
         // Injected context (plugin/skill/goal source) is not a human bubble;
         // v1 renders direct human prompts only.
         if (event.source !== 'user')

package/lib/types/channel/sanitize.d.ts

@@ -16,6 +16,13 @@
  */
 /** Sanitize an already-string value for the render path. */
 export declare function cleanRenderText(value: string, maxCells: number): string;
+/**
+ * Sanitize untrusted plugin text destined for a MULTI-LINE block (a
+ * `pushLocal` report): the same per-line strip as {@link cleanRenderText},
+ * but newlines are structure here, not whitespace to fold. Blank rows are
+ * dropped so one reported line stays one transcript row.
+ */
+export declare function cleanBlockLines(value: string, maxCells: number): string[];
 /**
  * Sanitize an untrusted (possibly non-string) value. Non-scalars — objects,
  * arrays, functions, symbols, null/undefined — yield '' so the caller takes

package/lib/types/channel/sanitize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/channel/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,4DAA4D;AAC5D,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAevE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGxE;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQhE;AAED;;6CAE6C;AAC7C,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKxD;AAED;;qCAEqC;AACrC,eAAO,MAAM,YAAY,MAAM,CAAA"}
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/channel/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,4DAA4D;AAC5D,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAevE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAEzE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGxE;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQhE;AAED;;6CAE6C;AAC7C,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKxD;AAED;;qCAEqC;AACrC,eAAO,MAAM,YAAY,MAAM,CAAA"}

package/lib/types/channel/sanitize.js

@@ -34,6 +34,15 @@ export function cleanRenderText(value, maxCells) {
     }
     return `${out}…`;
 }
+/**
+ * Sanitize untrusted plugin text destined for a MULTI-LINE block (a
+ * `pushLocal` report): the same per-line strip as {@link cleanRenderText},
+ * but newlines are structure here, not whitespace to fold. Blank rows are
+ * dropped so one reported line stays one transcript row.
+ */
+export function cleanBlockLines(value, maxCells) {
+    return value.split(/\r?\n/u).map(line => cleanRenderText(line, maxCells)).filter(line => line !== '');
+}
 /**
  * Sanitize an untrusted (possibly non-string) value. Non-scalars — objects,
  * arrays, functions, symbols, null/undefined — yield '' so the caller takes

package/lib/types/channel/usage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../../src/channel/usage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAA;AACjG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAEpD,8EAA8E;AAC9E,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,CAAA;AAE3C,8BAA8B;AAC9B,wBAAgB,eAAe,IAAI,UAAU,CAS5C;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,IAAI,gBAAgB,CAKnD;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAK7E;AA+DD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAqB3D;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKnF"}
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../../src/channel/usage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAA;AACjG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAEpD,8EAA8E;AAC9E,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,CAAA;AAE3C,8BAA8B;AAC9B,wBAAgB,eAAe,IAAI,UAAU,CAS5C;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,IAAI,gBAAgB,CAKnD;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAK7E;AAoED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAqB3D;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKnF"}

package/lib/types/channel/usage.js

@@ -40,6 +40,11 @@ export function addUsageToBucket(bucket, usage) {
  * harness `contextPressure` projection, `projectedTokens ?? pressureTokens`, see
  * `dsh-adapter/context-occupancy.ts`); these numbers only describe what the
  * segmented bar is made of and must never be summed into that total.
+ * The bar's span is anchored to that occupancy instead (`contextBarColumns`),
+ * so the role of these estimates is to WEIGHT the fills: the harness's own
+ * `contextBreakdown` supplies the system/envelope/message split where it exists,
+ * and these numbers split its message side and stand in for the whole
+ * composition where it does not. No span is ever derived from them alone.
  */
 /** ASCII, including control bytes and ANSI escapes: ~4 characters per token. */
 const CHARS_PER_TOKEN_ASCII = 4;

package/lib/types/commands.d.ts

@@ -9,6 +9,16 @@ export interface CommandCompletionNode {
     tag?: string;
     /** Optional i18n key; plugin nodes normally rely on fallback text. */
     descriptionKey?: string;
+    /**
+     * Mark this row as a syntax EXAMPLE rather than a candidate: it spells out a
+     * shape, not something this person typed. Tab therefore hands the draft back
+     * untouched instead of writing the placeholder in, and Enter runs the draft as
+     * typed — at the bare argument position that is the subcommand itself (its
+     * usage line), and once a spec is typed it is that spec. `/plugin install `
+     * shows the three shapes while neither Tab nor Enter can insert or install the
+     * placeholder, and a real spec that merely starts like one is never swallowed.
+     */
+    example?: true;
 }
 export type CommandChildren = (canonicalPath: readonly string[]) => readonly CommandCompletionNode[];
 /**
@@ -100,6 +110,8 @@ export declare const HIDDEN_COMMAND_NAMES: ReadonlySet<string>;
  * rules as {@link isLocalCommandName}).
  */
 export declare function isHiddenCommandName(input: string): boolean;
+/** Whether a command name (no slash) may run before the channel is ready. */
+export declare function isBootSafeCommand(name: string): boolean;
 /**
  * Resolve a command's description in the active UI language. The en text in
  * `LOCAL_COMMANDS` (and the registry's own text for external commands) is
@@ -137,6 +149,9 @@ export declare const WORKING_GATE_NOTICES: {
     readonly resume: "resume-while-working";
     readonly rewind: "rewind-while-working";
     readonly kernel: "kernel-switch-while-working";
+    readonly dsh: "kernel-switch-while-working";
+    readonly codex: "kernel-switch-while-working";
+    readonly claude: "kernel-switch-while-working";
     readonly channel: "channel-switch-while-working";
 };
 /**