@deepseek-harness-tui/dsh-tui 0.14.1 → 0.16.0

package/lib/types/screens/Chat.js

@@ -4,24 +4,24 @@ import { t, getLang, setLang, isLang, writeLangPref, readLangPref, subscribeLang
 import { checkForTuiUpdate, installedTuiVersion } from '../update.js';
 import { installedKernelVersion } from '../dsh-adapter/contract.js';
 import { readThemePref } from '../themePrefs.js';
-import { readPresetPref } from '../presetPrefs.js';
+import { presetOverrideFromEnv, readPresetPref } from '../presetPrefs.js';
 import { readModelPref } from '../modelPrefs.js';
 import { readActivityFrames } from '../activityPrefs.js';
 import { envThemeOverride } from '../components/design-system/ThemeProvider.js';
 import { resolveBrand, setActiveBrand } from '../branding.js';
 import { hasPath } from '../dsh-adapter/settingsEditor.js';
 import { planReload } from '../reload.js';
-import { AlternateScreen, Box, Image, Text, useInput, ScrollBox, useTheme, useTerminalSize } from '../ui.js';
+import { AlternateScreen, Box, Image, Text, InputCaret, useInput, ScrollBox, useTheme, useTerminalSize } from '../ui.js';
 import { usePageInset } from '../components/PageMargin.js';
 import { POINTER } from '../terminal-utils/figures.js';
+import { previousCodePoint } from '../components/AgentMessageComposer.js';
 import { isPlainReturnInput } from '../utils/modifiers.js';
 import { actionMatches, effectiveComboDisplay, primaryComboString } from '../utils/keymap.js';
 import { formatTokens } from '../terminal-utils/format.js';
 import { formatClock } from '../trajectory/format.js';
 import { homeDir } from '../utils/paths.js';
 import { execFileNoThrow } from '../utils/execFileNoThrow.js';
-import { cleanRenderText, cleanScalarText } from '../dsh-adapter/sanitize.js';
-import { deriveModelGroups, modelPickerLanding, recentCatalogModels, RECENTS_GROUP_PROVIDER, } from '../modelGroups.js';
+import { cleanBlockLines, cleanRenderText, cleanScalarText } from '../dsh-adapter/sanitize.js';
 import { readModelRecents, recordModelUse } from '../modelRecents.js';
 import { WORKING_GATE_NOTICES } from '../commands.js';
 import { TuiDialogStore } from '../dsh-adapter/dialogs.js';
@@ -37,6 +37,7 @@ const MATH_PREVIEW_MAX_COLUMNS = 480;
 const MATH_PREVIEW_MAX_ROWS = 64;
 import { runOAuthLogin, runProviderWizard } from '../dsh-adapter/providerWizard.js';
 import { useKernelPicker } from './chat/useKernelPicker.js';
+import { useModelPicker } from './chat/useModelPicker.js';
 import { useBackendChannels } from './chat/useBackendChannels.js';
 import { backendModeStatus as modeStatus, backendPermissionCommand, parseMcpCommand } from './chat/backendCommands.js';
 import { PermissionStore } from '../channel/permissions.js';
@@ -60,11 +61,12 @@ import { ScrollbarGutter } from '../components/ScrollbarGutter.js';
 import { normalizeScrollGutter } from '../tuiDisplayPrefs.js';
 import { OverlayAbove } from '../components/OverlayAbove.js';
 import { TooltipLayer } from '../components/Tooltip.js';
-import { PromptInput } from '../components/PromptInput.js';
+import { PromptInput, composerImageRefsForText } from '../components/PromptInput.js';
 import { turnUsageParts } from '../components/TurnUsageRow.js';
 import { AgentTranscriptScene } from './AgentTranscriptScene.js';
 import { agentViewStore } from '../components/sidePanel/agentViewStore.js';
 import { agentComposeTargetOf } from '../components/messages/agentTeam.js';
+import { resolveBindingGeneration } from '../components/promptDraftCache.js';
 import { PromptEditorLayer, usePromptEditorOpen } from '../components/PromptEditor.js';
 import { GoalTodoPanel } from '../components/GoalTodoPanel.js';
 import { useSidePanel } from '../components/sidePanel/useSidePanel.js';
@@ -105,8 +107,13 @@ import { PermissionsPicker } from '../components/PermissionsPicker.js';
 import { ModePicker } from '../components/ModePicker.js';
 import { KernelPicker } from '../components/KernelPicker.js';
 import { SdkInstallWizard } from '../components/SdkInstallWizard.js';
+import { PluginInstallPane } from '../components/PluginInstallPane.js';
+import { PluginManagePane } from '../components/PluginManagePane.js';
+import { teamMemberCounts } from '../components/teamRoster.js';
+import { usePluginWriteFlow } from './chat/usePluginWriteFlow.js';
 import { ChannelPicker } from '../components/ChannelPicker.js';
 import { modeDisplayName } from '../sessionModes.js';
+import { PERMISSION_PRESET_AUTO, permissionPresetLabel } from '../permissionPresetLabels.js';
 import { PlanPicker } from '../components/PlanPicker.js';
 import { LangPicker } from '../components/LangPicker.js';
 import { ThemePicker, getThemeOptions } from '../components/ThemePicker.js';
@@ -142,12 +149,10 @@ import { Launchpad, launchpadVisible } from './Launchpad.js';
 import { resolveLaunchpadActions } from '../components/launchpadActions.js';
 import { Onboarding } from './Onboarding.js';
 import { appendHistory } from '../history.js';
-import { isHiddenCommandName, isLocalCommandName, parseCommandName } from '../commands.js';
+import { isBootSafeCommand, isHiddenCommandName, isLocalCommandName, isUnavailableLocalCommand, parseCommandName } from '../commands.js';
 import { extendTrajectory, projectWave } from '../dsh-adapter/trajectory/index.js';
 import { miniWakeWidth } from '../components/trajectory/MiniWake.js';
 import { readTrajectorySeen, writeTrajectorySeen } from '../trajectoryPrefs.js';
-import { LoadingState } from '../components/design-system/LoadingState.js';
-import { Pane } from '../components/design-system/Pane.js';
 import { loadHistory } from '../history.js';
 import { formatLoadedContextReport } from '../utils/loaded-context.js';
 import { NO_OVERLAY, chatOverlayReducer, dialogOverlayVisible, wrapIndex, } from './chatOverlay.js';
@@ -171,6 +176,10 @@ const STATUS_VIEW_UI = Object.freeze({
 /** Shared empty snapshot for hosts whose channel has no event log. */
 const NO_EVENTS = [];
 const COMMAND_RESULT_CELLS = 200;
+/** Per-line width budget for a transcript block (`/plugins`, `/goal`): much
+ *  wider than COMMAND_RESULT_CELLS, whose 200-cell single-line rule cannot
+ *  carry a full goal objective. Still a bound, not "no limit". */
+const LOCAL_BLOCK_CELLS = 4000;
 /** Ceiling for one `dsh-tui migrate` child run. Discovery parses every source
  *  file, but a healthy import of thousands of conversations finishes well
  *  inside this; without a cap a wedged child would hang the loop forever. */
@@ -209,11 +218,24 @@ function cleanCommandError(error) {
         return '';
     }
 }
+/** Picking the experimental `auto` preset from the picker asks first, unless
+ *  the session already sits on it. A typed `/permission auto` does not. */
+function needsAutoConfirm(snapshot, value) {
+    return value === PERMISSION_PRESET_AUTO && snapshot.autoConfirmed !== true;
+}
+/** The current identity's display name, localized like the picker rows. */
+function currentPermissionName(snapshot) {
+    const current = snapshot.current;
+    if (current === undefined)
+        return undefined;
+    return current.kind === 'preset' ? permissionPresetLabel(current) : current.name;
+}
 function clonePermissionPresetSnapshot(snapshot) {
     return {
         availability: snapshot.availability,
         options: snapshot.options.map(option => ({ ...option })),
         ...(snapshot.current === undefined ? {} : { current: { ...snapshot.current } }),
+        ...(snapshot.autoConfirmed === true ? { autoConfirmed: true } : {}),
     };
 }
 /** Row kinds the message-selection cursor can land on. */
@@ -302,12 +324,14 @@ let fallbackStatusStore;
 let fallbackActivityStore;
 const noCouponSubscription = () => () => undefined;
 const noCouponSnapshot = () => null;
+/** Stable identity for hosts that supply no kernel entries (bare embeds, tests). */
+const EMPTY_KERNEL_ENTRIES = [];
 /** Identity of one caret-preview dismissal: the token (its title) on the
  *  image, so the same image staged twice is dismissed per token. */
 function peekKey(image, title) {
     return `${title ?? ''} ${image.id}`;
 }
-export function Chat({ channel, questionStore, approvalStore, extensionDialogs, bonusNotices, extensionStatus, activityStore, extensionShortcuts, themeHost, onExit, onUpdate, onRestart, onSwitchBackend, onRestartFreshSession, onProbeKernels, onResolveSdkInstallTarget, onStartSdkInstall, onCheckPnpm, sdkInstallPinned, kernelPinned, fullscreen = false, trajectorySeen: trajectorySeenProp, injectControllerRef, promptControllerRef: promptControllerRefProp, renderScene, openHomeOnBoot, launchpadOnBoot, onboardingOnBoot, starPrompt, }) {
+export function Chat({ channel, questionStore, approvalStore, extensionDialogs, bonusNotices, extensionStatus, activityStore, extensionShortcuts, themeHost, onExit, onUpdate, onRestart, onSwitchBackend, onRestartFreshSession, onProbeKernels, kernelEntries = EMPTY_KERNEL_ENTRIES, onResolveSdkInstall, onPluginInstall, onPluginManage, onTeamCommand, kernelPinned, fullscreen = false, trajectorySeen: trajectorySeenProp, injectControllerRef, promptControllerRef: promptControllerRefProp, renderScene, openHomeOnBoot, launchpadOnBoot, onboardingOnBoot, starPrompt, }) {
     const writeRaw = React.useContext(TerminalWriteContext);
     // Re-render whenever the channel mutates; rows/status are read fresh below.
     // DEFAULT lane on purpose (useExternalVersion): the channel version bumps
@@ -423,35 +447,72 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
             permissionOverlayFocusRef.current = null;
         }
     }, [overlay]);
+    // The preset registry and the session's current preset can change while
+    // the picker is open (the experimental `auto` preset registers or leaves
+    // live; another surface switches the preset; a session adopt moves to a
+    // fresh log). Reopen on the live snapshot, keeping the focused preset; a
+    // confirmation whose preset left drops back to the list. The channel
+    // memoizes the snapshot, so an unchanged roster, current identity and
+    // `autoConfirmed` flag are the same object and the resync stops there.
+    const permissionResyncRef = React.useRef(null);
+    React.useEffect(() => {
+        if (overlay.kind !== 'permission') {
+            permissionResyncRef.current = null;
+            return;
+        }
+        let live;
+        try {
+            live = channel.permissionPresets();
+        }
+        catch {
+            return;
+        }
+        const seen = permissionResyncRef.current;
+        if (seen?.overlay === overlay && seen.live === live)
+            return;
+        permissionResyncRef.current = { overlay, live };
+        const values = (snapshot) => snapshot.options.map(option => option.value).join('\n');
+        // A roster value change is the obvious case; the current identity and the
+        // session-scoped `autoConfirmed` flag can also move without changing the
+        // option values (another surface switches the preset, a session adopt
+        // lands, the auto preset leaves after a confirmation). Refresh on either,
+        // so `needsAutoConfirm` never reads a stale flag from another session.
+        if (values(live) === values(overlay.snapshot)
+            && live.availability === overlay.snapshot.availability
+            && live.current?.value === overlay.snapshot.current?.value
+            && live.current?.kind === overlay.snapshot.current?.kind
+            && live.autoConfirmed === overlay.snapshot.autoConfirmed)
+            return;
+        if (live.availability === 'unavailable' || live.options.length === 0) {
+            dispatchOverlay({ type: 'close-if', kind: 'permission' });
+            return;
+        }
+        const focusIndex = permissionOverlayFocusRef.current?.overlay === overlay
+            ? permissionOverlayFocusRef.current.index
+            : overlay.index;
+        const focused = overlay.confirm === true ? PERMISSION_PRESET_AUTO : overlay.snapshot.options[focusIndex]?.value;
+        const liveCurrent = live.current?.kind === 'preset' ? live.current.value : undefined;
+        const index = [focused, liveCurrent]
+            .map(value => live.options.findIndex(option => option.value === value))
+            .find(found => found >= 0) ?? Math.min(1, live.options.length - 1);
+        const confirm = overlay.confirm === true && live.options.some(option => option.value === PERMISSION_PRESET_AUTO);
+        if (overlay.confirm === true && !confirm)
+            channel.notify(t('permission-auto-unavailable'), { color: 'warning' });
+        dispatchOverlay({
+            type: 'open-if',
+            overlay: { kind: 'permission', index, snapshot: clonePermissionPresetSnapshot(live), ...(confirm ? { confirm } : {}) },
+            when: ['permission'],
+        });
+    });
     const [models, setModels] = React.useState([]);
-    /** Provider display identities for the /model group level; refreshed alongside `models`. */
+    const [modelsLoading, setModelsLoading] = React.useState(false);
+    const modelCatalogGeneration = React.useRef(0);
+    /** Provider display identities for the /model tabs; refreshed alongside `models`. */
     const [providerInfos, setProviderInfos] = React.useState([]);
     /** /model 最近使用分组：成功切换即记录（去重置顶，上限 10），重启保留。 */
-    // Recents are per backend: a Claude session's picks never evict the DSH list.
+    const modelProviderTabs = channel.backendCapabilities?.modelRoutes !== 'backend';
     const recentsBackend = channel.backendCapabilities?.backendId;
-    const [modelRecents, setModelRecents] = React.useState(() => readModelRecents(undefined, recentsBackend));
-    /** Two-level /model: the drilled-in provider route; undefined = group level.
-     *  Reset on open; stale ids resolve back to the group level via `activeModelGroup`. */
-    const [modelGroup, setModelGroup] = React.useState(undefined);
-    /** True while the picker sits in the single-provider fast path (drilled in
-     *  at open, the group level never shown): Esc closes directly and no back
-     *  hint renders — a pinned recents pseudo-group must not fake a two-level
-     *  walk the user never saw (issue #527 regression: repro-picker-windowing). */
-    const [modelPickerDirect, setModelPickerDirect] = React.useState(false);
-    /** Group rows over the current catalog, first-appearance (registry) order,
-     *  with the pinned recents pseudo-group first when any entry is catalogued. */
-    const modelGroups = React.useMemo(() => deriveModelGroups(models, providerInfos, modelRecents), [models, providerInfos, modelRecents]);
-    /** The drilled-in group, but only while it still exists in the catalog. */
-    const activeModelGroup = modelGroup !== undefined && modelGroups.some(group => group.provider === modelGroup)
-        ? modelGroup
-        : undefined;
-    const groupModels = React.useMemo(() => {
-        if (activeModelGroup === undefined)
-            return [];
-        if (activeModelGroup === RECENTS_GROUP_PROVIDER)
-            return recentCatalogModels(modelRecents, models);
-        return models.filter(model => model.provider === activeModelGroup);
-    }, [models, modelRecents, activeModelGroup]);
+    const [modelRecents, setModelRecents] = React.useState(() => modelProviderTabs ? readModelRecents(undefined, recentsBackend) : []);
     /** Switch + record: every successful switch feeds the /model recents group
      *  (picker Enter/click, `/model provider/id`, the wizard's live switch,
      *  and /reload's applied model all ride this one path). */
@@ -463,10 +524,24 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 return ok;
             if (name !== undefined)
                 channel.notify(t('model-switched', { name }));
-            setModelRecents(recordModelUse({ provider, id }, undefined, recentsBackend));
+            if (modelProviderTabs)
+                setModelRecents(recordModelUse({ provider, id }, undefined, recentsBackend));
             return ok;
         });
     };
+    const modelPicker = useModelPicker({
+        channel, models, providers: providerInfos, recents: modelProviderTabs ? modelRecents : undefined, open: overlay.kind === 'model',
+        onCancel: () => dispatchOverlay({ type: 'close-if', kind: 'model' }),
+        onPick: (model, effort) => {
+            dispatchOverlay({ type: 'close-if', kind: 'model' });
+            void switchModelRecorded(model.provider, model.id, model.name).then(ok => {
+                // Validate/apply on the adopted route; a refused switch leaves both
+                // the live effort and its persisted preference untouched.
+                if (ok && effort !== undefined)
+                    return channel.setEffort(effort);
+            });
+        },
+    });
     /** `/skills` 技能目录（issue #204）：null = 注册表快照在途。 */
     const [skillsList, setSkillsList] = React.useState(null);
     /**
@@ -496,7 +571,13 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
     // 整屏」，浏览器必须提前藏在下面；现在整屏（会话/设置/任务面板）盖在
     // 落地页**之上**、Esc 退回落地页，按需打开即可——boot 时同时为真反而会
     // 让浏览器盖住落地页（渲染顺序见各 early-return）。恢复重挂同样不开它。
-    const [supervisorOpen, setSupervisorOpen] = React.useState(openHomeOnBoot === true && launchpadOnBoot !== true && !recoveryRemountOnBoot);
+    // A channel still starting its session (in-process DSH kernel) holds the two
+    // DSH boot screens (home, guide) until `ready`; the effect after
+    // `settingsOpen` opens them then.
+    const heldBootScreensRef = React.useRef(channel.ready === false && !recoveryRemountOnBoot
+        ? { home: openHomeOnBoot === true && launchpadOnBoot !== true, onboarding: onboardingOnBoot === true }
+        : undefined);
+    const [supervisorOpen, setSupervisorOpen] = React.useState(openHomeOnBoot === true && launchpadOnBoot !== true && !recoveryRemountOnBoot && channel.ready !== false);
     /**
      * The launchpad: the landing page every ordinary launch starts on.
      *
@@ -514,6 +595,40 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
     const [launchpadDraft, setLaunchpadDraft] = React.useState('');
     const [launchpadCaret, setLaunchpadCaret] = React.useState(0);
     const [launchpadFocus, setLaunchpadFocus] = React.useState(-1);
+    const launchpadImagesRef = React.useRef(new Map());
+    const changeLaunchpadDraft = (text, cursor) => {
+        const live = new Set(composerImageRefsForText(text, launchpadImagesRef.current).map(image => image.token));
+        for (const [token, stageId] of launchpadImagesRef.current) {
+            if (live.has(token))
+                continue;
+            launchpadImagesRef.current.delete(token);
+            channel.discardStagedImage(stageId);
+        }
+        setLaunchpadDraft(text);
+        setLaunchpadCaret(cursor);
+    };
+    const launchpadBindingGeneration = resolveBindingGeneration(channel);
+    // Capture the image epoch with each session binding. Automatic startup keeps
+    // it; explicit replacement revokes it before publishing the new binding.
+    const composerImageGeneration = channel.stagedImageGeneration?.() ?? 0;
+    const launchpadSessionRef = React.useRef({ id: channel.agentId, imageGeneration: composerImageGeneration });
+    const discardLaunchpadImages = () => {
+        for (const stageId of launchpadImagesRef.current.values())
+            channel.discardStagedImage(stageId);
+        launchpadImagesRef.current.clear();
+    };
+    // Lifetime cleanup is separate from binding changes: startup adoption keeps
+    // the same draft, including the capabilities behind its image tokens.
+    React.useEffect(() => discardLaunchpadImages, [channel]);
+    React.useEffect(() => {
+        const previous = launchpadSessionRef.current;
+        launchpadSessionRef.current = { id: channel.agentId, imageGeneration: composerImageGeneration };
+        if (previous.id === '' && channel.agentId !== '' && previous.imageGeneration === composerImageGeneration)
+            return;
+        setLaunchpadDraft('');
+        setLaunchpadCaret(0);
+        discardLaunchpadImages();
+    }, [channel, channel.agentId, launchpadBindingGeneration]);
     /**
      * 「整屏盖启动页」的显式授权（第七版防御位，用户实测回归：启动页一闪而过
      * 被顶掉）。整屏分支排在落地页**之前**，任何一处状态在开机后被异步置真
@@ -555,7 +670,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
      * settings / help 的 early-return 排在两个界面**之后**：不收掉当前界面就是
      * "点了没反应"，状态还滞留着、等界面关掉才突然弹出来。默认收，白名单只留给覆盖层。
      */
-    const overlayCommandNames = React.useMemo(() => new Set(['model', 'effort', 'plan', 'preset', 'permission', 'kernel']), []);
+    const overlayCommandNames = React.useMemo(() => new Set(['model', 'effort', 'plan', 'preset', 'permission', 'kernel', 'dsh', 'codex', 'claude']), []);
     /**
      * 打开**整屏界面**的命令（第七版）：从落地页触发这些命令时**不收掉落地页**
      * ——整屏盖在落地页之上渲染（它们的 early-return 排在落地页分支之前），
@@ -580,59 +695,80 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
             setLaunchpadUpdateAvailable(update !== undefined);
         }).catch(() => undefined);
     }, [launchpadShown]);
-    const canInstallSdk = onResolveSdkInstallTarget !== undefined && onStartSdkInstall !== undefined
-        && onCheckPnpm !== undefined && sdkInstallPinned !== undefined;
-    const { currentId: kernelCurrentId, options: kernelOptions, open: openKernelPicker, pick: pickKernel, reprobe: reprobeKernels } = useKernelPicker({
-        channel, kernelVersion, launchpadShown, onProbeKernels, onSwitchBackend, canInstallSdk, dispatchOverlay,
+    const canInstallSdk = onResolveSdkInstall !== undefined;
+    const { currentId: kernelCurrentId, options: kernelOptions, open: openKernelPicker, pick: pickKernel, pickById: pickKernelById, reprobe: reprobeKernels } = useKernelPicker({
+        channel, kernelVersion, kernelEntries, launchpadShown, onProbeKernels, onSwitchBackend, canInstallSdk, dispatchOverlay,
     });
+    /** 当前内核那一行：短名给落地页入口、PromptInput 的不可用提示等消费（同源，
+     *  不按 id 查表；目录里没有（宿主未接线/未知后端）就没有名字）。 */
+    const kernelCurrentOption = kernelOptions.find(option => option.current);
     /**
      * SDK 安装向导的步骤态（异步进程状态，按 chatOverlay 的分工留在 Chat，
-     * 不进 overlay union）。生命周期约定：向导打开时从 idle 初始化，安装
-     * （checking/running）期间面板保持打开——所有异步落地都发生在面板还在
-     * 的窗口内；关闭路径（Esc/Enter 离开）一律重置回 idle，下一次打开重新
-     * 解析安装目标。
+     * 不进 overlay union）。每次打开独占安装面与进程句柄；浮层关闭或替换时
+     * 取消安装并重置步骤，旧预检/安装结果不能落进下一次打开的向导。
      */
     const [sdkPhase, setSdkPhase] = React.useState({ kind: 'idle' });
-    const sdkInstallerRef = React.useRef(undefined);
-    // 打开即解析安装目标（同步、只读 argv + 文件系统）：profile → 确认面板；
-    // standalone / 无 profile → 直接给手动指引面板。
+    const sdkInstallRef = React.useRef(undefined);
+    const sdkOverlay = overlay.kind === 'sdk-install' ? overlay : undefined;
+    // 安装面在这次打开时快照；宿主回调更新不重启正在进行的安装。
     React.useEffect(() => {
-        if (overlay.kind !== 'sdk-install' || sdkPhase.kind !== 'idle' || onResolveSdkInstallTarget === undefined)
+        if (sdkOverlay === undefined)
+            return;
+        const surface = onResolveSdkInstall?.(sdkOverlay.backendId);
+        if (surface === undefined) {
+            dispatchOverlay({ type: 'close' });
             return;
-        const target = onResolveSdkInstallTarget();
-        if (target.kind === 'profile' && sdkInstallPinned !== undefined) {
-            setSdkPhase({ kind: 'confirm', dir: target.dir, version: sdkInstallPinned.version, specifier: sdkInstallPinned.specifier });
+        }
+        const installation = { surface };
+        sdkInstallRef.current = installation;
+        const target = surface.resolveTarget();
+        if (target.kind === 'profile') {
+            setSdkPhase({
+                kind: 'confirm',
+                dir: target.dir,
+                version: surface.version,
+                specifier: surface.specifier,
+                ...(sdkOverlay.foundCli === undefined ? {} : { foundCli: sdkOverlay.foundCli }),
+            });
         }
         else {
             setSdkPhase({ kind: 'no-target', reason: target.kind === 'standalone' ? 'standalone' : 'no-profile' });
         }
-    }, [overlay.kind, sdkPhase.kind, onResolveSdkInstallTarget, sdkInstallPinned]);
+        return () => {
+            sdkInstallRef.current = undefined;
+            installation.installer?.cancel();
+            setSdkPhase({ kind: 'idle' });
+        };
+    }, [sdkOverlay]);
     const closeSdkInstallToKernelPicker = () => {
-        setSdkPhase({ kind: 'idle' });
         dispatchOverlay({ type: 'close' });
         openKernelPicker();
     };
     const closeSdkInstall = () => {
-        setSdkPhase({ kind: 'idle' });
         dispatchOverlay({ type: 'close' });
     };
     const runSdkInstall = (dir) => {
-        if (onStartSdkInstall === undefined || sdkInstallPinned === undefined)
+        const installation = sdkInstallRef.current;
+        if (installation === undefined)
             return;
-        const installer = onStartSdkInstall(dir);
-        sdkInstallerRef.current = installer;
+        const { surface } = installation;
+        const installer = surface.start(dir);
+        installation.installer = installer;
         setSdkPhase({ kind: 'running' });
         void installer.result.then(result => {
+            if (sdkInstallRef.current !== installation)
+                return;
+            installation.installer = undefined;
             if (result.kind === 'ok') {
                 // 装好了：重探内核（灰行变亮，无需重启进程），停在完成面板。
                 reprobeKernels();
-                setSdkPhase({ kind: 'done' });
+                setSdkPhase({ kind: 'done', rebuiltStore: result.rebuiltStore === true });
             }
             else if (result.kind === 'failed') {
-                setSdkPhase({ kind: 'failed', exitCode: result.exitCode, tail: result.tail, dir, version: sdkInstallPinned.version, specifier: sdkInstallPinned.specifier });
+                setSdkPhase({ kind: 'failed', exitCode: result.exitCode, tail: result.tail, dir, version: surface.version, specifier: surface.specifier });
             }
             else if (result.kind === 'pnpm-missing') {
-                setSdkPhase({ kind: 'pnpm-missing', dir, version: sdkInstallPinned.version, specifier: sdkInstallPinned.specifier });
+                setSdkPhase({ kind: 'pnpm-missing', dir, version: surface.version, specifier: surface.specifier });
             }
             else {
                 setSdkPhase({ kind: 'cancelled' });
@@ -640,17 +776,93 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
         });
     };
     const confirmSdkInstall = (dir) => {
-        if (onCheckPnpm === undefined)
+        const installation = sdkInstallRef.current;
+        if (installation === undefined)
             return;
+        const { surface } = installation;
         setSdkPhase({ kind: 'checking' });
-        void onCheckPnpm().then(ok => {
-            if (!ok && sdkInstallPinned !== undefined) {
-                setSdkPhase({ kind: 'pnpm-missing', dir, version: sdkInstallPinned.version, specifier: sdkInstallPinned.specifier });
+        void surface.preflight().then(ok => {
+            if (sdkInstallRef.current !== installation)
+                return;
+            if (!ok) {
+                setSdkPhase({ kind: 'pnpm-missing', dir, version: surface.version, specifier: surface.specifier });
                 return;
             }
             runSdkInstall(dir);
         });
     };
+    /**
+     * `/plugin install <spec>` 的步骤态（C-4）。六件套（ref / state / 收尾 / 结算 /
+     * 栅栏 / 起步）与 manage 侧共用 `usePluginWriteFlow`，两处的差异只有「关浮层
+     * 要不要取消」与「Enter 调哪个方法」。
+     */
+    const pluginInstall = usePluginWriteFlow({
+        overlayKind: 'plugin-install',
+        overlay,
+        dispatchOverlay,
+        pushLocal: lines => channel.pushLocal('/plugin', lines),
+        initialStep: { kind: 'done' },
+        // 装了半截就关浮层会把 profile 留在半装状态：取消由服务自己结算（回滚）。
+        cancelOnClose: flow => flow.cancel(),
+        failureLine: error => t('plugins-install-failed', { reason: cleanScalarText(error, COMMAND_RESULT_CELLS) }),
+    });
+    /** 开始一次安装；`false` 表示这段输入不是 install 形式（或本启动没有服务）。 */
+    const startPluginInstall = (rawArgs) => {
+        const flow = onPluginInstall?.(rawArgs, {
+            binding: () => channel.agentBindingGeneration,
+            // 回合运行中改 profile 会触发应用／HMR：门禁在流程里（inspect 之前与写入之前各查一次）。
+            busy: () => channel.working,
+            onLines: lines => channel.pushLocal('/plugin', lines),
+        });
+        if (flow === undefined)
+            return false;
+        pluginInstall.start(flow, flow.begin());
+        return true;
+    };
+    /**
+     * 取消在途安装。取消由服务自己结算（回滚 profile），浮层等它回答。
+     * 「还没开始装」（confirm 步）时不该走这里：服务那边没有可取消的请求，
+     * 只会打出一行「没有在跑的安装」——那条路径直接 `pluginInstall.close()`。
+     */
+    const cancelPluginInstall = () => {
+        const view = pluginInstall.view;
+        if (view === undefined)
+            return;
+        pluginInstall.run(view.flow.cancel());
+    };
+    /**
+     * `/plugin remove|enable|disable <target>` 的步骤态（C-5）：与装链路同一副骨架，
+     * 只有两条差异——没有 `cancelOnClose`（这三个动作服务不给取消面，写也是一次就
+     * 结算的 profile 操作，关掉浮层它照旧跑完并把结果写进转录），以及 Enter 只有
+     * 「确认」一种答案。
+     */
+    const pluginManage = usePluginWriteFlow({
+        overlayKind: 'plugin-manage',
+        overlay,
+        dispatchOverlay,
+        pushLocal: lines => channel.pushLocal('/plugin', lines),
+        initialStep: { kind: 'done' },
+        failureLine: error => t('plugins-manage-failed', { reason: cleanScalarText(error, COMMAND_RESULT_CELLS) }),
+    });
+    /** 绑定会话的 teammate 数、其中运行中／准备中的数与可能在运行的数（关闭团队前的确认用）。 */
+    const teamMembers = () => {
+        const team = channel.team;
+        return team === undefined ? { total: 0, active: 0, unseen: 0 } : teamMemberCounts(team, [...channel.subagents], channel.sessionId);
+    };
+    /** 开始一次生命周期动作；`false` 表示这段输入不是那三种形式（或本启动没有服务）。 */
+    const startPluginManage = (rawArgs) => {
+        const flow = onPluginManage?.(rawArgs, {
+            binding: () => channel.agentBindingGeneration,
+            // 回合运行中改 profile 会触发应用／HMR：门禁在流程里（解析之前与写入之前各查一次）。
+            busy: () => channel.working,
+            onLines: lines => channel.pushLocal('/plugin', lines),
+            teamActiveMembers: teamMembers,
+        });
+        if (flow === undefined)
+            return false;
+        pluginManage.start(flow, flow.begin());
+        return true;
+    };
     const host = channel.backendChannels?.();
     const { rows: channelRows, open: openChannelPicker, pick: pickChannel, setMode: runBackendModeCommand, login: runBackendLogin } = useBackendChannels({
         channel, host, questionStore, dispatchOverlay, onRestartFreshSession, runOAuthLogin,
@@ -665,7 +877,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
      * The first-run guide. Renders above the launchpad (see the prop docs): a
      * launch that needs setup has not answered the launchpad's question yet.
      */
-    const [onboardingOpen, setOnboardingOpen] = React.useState(onboardingOnBoot === true && !recoveryRemountOnBoot);
+    const [onboardingOpen, setOnboardingOpen] = React.useState(onboardingOnBoot === true && !recoveryRemountOnBoot && channel.ready !== false);
     /**
      * 落地页那条"第一次用？跑一遍引导"的横幅认的是**还欠一次引导**，而不是启动快照：
      * 完成（写进 onboarding.json）之后立刻收掉；跳过刻意保留——没记账，下次启动还会问，
@@ -724,6 +936,29 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
      *  browser, a screen rather than a panel: it owns its own focus, staged
      *  drafts and keyboard; Chat only opens it. */
     const [settingsOpen, setSettingsOpen] = React.useState(false);
+    // The held boot screens open once the session is adopted, unless the user
+    // went to another screen; a failed startup never opens them.
+    const channelReady = channel.ready;
+    const channelStartupFailed = channel.startupFailure !== undefined;
+    React.useEffect(() => {
+        const held = heldBootScreensRef.current;
+        if (held === undefined)
+            return;
+        // A later `/new` that adopts a session must not open them over the chat.
+        if (channelStartupFailed) {
+            heldBootScreensRef.current = undefined;
+            return;
+        }
+        if (channelReady === false)
+            return;
+        heldBootScreensRef.current = undefined;
+        if (settingsOpen || treeOpen)
+            return;
+        if (held.onboarding)
+            setOnboardingOpen(true);
+        if (held.home)
+            setSupervisorOpen(true);
+    }, [channelReady, channelStartupFailed, settingsOpen, treeOpen]);
     /** 99h / 999 次的"求 star"开屏弹窗（`usageStats` 记账，一档只弹一次）：
      * 只在启动时判定一次——回合进行中、或已有整屏界面在开（如开机首页），
      * 这一轮不弹也**不记账**，留给下一次启动。`starPrompt` 是测试缝：传
@@ -760,7 +995,15 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
         // 让开屏先画半秒：弹窗压在介绍动画之上，而不是同抢第一帧。
         const timer = setTimeout(() => {
             // 到点时回合已经开始的仍不弹（channel 是活对象，读到的是当前值）。
-            if (channel.working)
+            // /restart、/kernel 的旧进程不卸这棵树，channel 生命周期结束后读它会抛：读不到就不弹。
+            let working;
+            try {
+                working = channel.working;
+            }
+            catch {
+                return;
+            }
+            if (working)
                 return;
             if (starModalPreview) {
                 const preview = STAR_MILESTONES.findIndex(milestone => milestone.hours === 99);
@@ -890,8 +1133,12 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
      * （Standard/PTC/极简…），名册是异步的——落地页出来时顺手预热一次
      * （空名册不写；失败静默，段缺省不画）。/preset 自己的加载路径不动。
      */
+    // No roster to ask on a placeholder still starting, nor on a kernel without
+    // /preset (the refusal would land as a "not supported" notice).
+    const presetsReady = channel.ready !== false;
+    const presetsServed = !isUnavailableLocalCommand('preset', channel.backendCapabilities);
     React.useEffect(() => {
-        if (!launchpadShown || presetOptions.length > 0)
+        if (!launchpadShown || presetOptions.length > 0 || !presetsReady || !presetsServed)
             return;
         let cancelled = false;
         channel.listPresets()
@@ -899,7 +1146,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
             setPresetOptions(list); })
             .catch(() => { });
         return () => { cancelled = true; };
-    }, [launchpadShown, presetOptions.length, channel]);
+    }, [launchpadShown, presetOptions.length, channel, presetsReady, presetsServed]);
     /** `/effort` adapter levels: load async before the slider opens. */
     const [effortOptions, setEffortOptions] = React.useState([]);
     /** True when those levels are the CLI-standard compatibility ladder (the
@@ -1036,8 +1283,8 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
     }, [autoRecapSessionId]);
     // The user starts a new message → the auto recap has served its purpose
     // (catching them up) and bows out. A newer user row is the signal; the
-    // assistant's own streamed rows don't count.
-    const lastUserRowId = channel.rows.filter(row => row.kind === 'user').at(-1)?.id ?? -1;
+    // assistant's own streamed rows (and a teammate's message) don't count.
+    const lastUserRowId = channel.rows.filter(row => row.kind === 'user' && row.label !== 'team-message').at(-1)?.id ?? -1;
     React.useEffect(() => {
         if (recap !== null &&
             recap.auto &&
@@ -1240,7 +1487,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
     }, [launchpadCoverScreenUp]);
     /**
      * 从落地页出发的交互要开整屏前先授权（配合 `launchpadGate`）：调用点只在
-     * 落地页自己的回调里（onAction / onCommandPick / onEscape 的会话浏览路）。
+     * 落地页自己的回调里（onAction / onSubmit / onCommandPick / onEscape）。
      * 异步误置真的整屏状态没有这道授权 → 闸门挡下，落地页留在最上层。
      */
     const authorizeLaunchpadCover = () => { launchpadCoverRef.current = true; };
@@ -1667,8 +1914,9 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
         };
     }, []);
     const draftSessionId = channel.agentId;
-    /** Session the effect below last reconciled against; a change is a switch. */
-    const draftSessionRef = React.useRef(draftSessionId);
+    const draftBindingGeneration = resolveBindingGeneration(channel);
+    /** Last reconciled binding; its image epoch distinguishes adoption from replacement. */
+    const draftSessionRef = React.useRef({ id: draftSessionId, generation: draftBindingGeneration, imageGeneration: composerImageGeneration });
     /**
      * The session a fill Chat itself requested belongs to, if one is in flight.
      *
@@ -1694,9 +1942,23 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
      * answered by the snapshot's owner fields.
      */
     React.useLayoutEffect(() => {
-        if (draftSessionRef.current === draftSessionId)
+        const previous = draftSessionRef.current;
+        draftSessionRef.current = { id: draftSessionId, generation: draftBindingGeneration, imageGeneration: composerImageGeneration };
+        if (previous.id === draftSessionId)
             return;
-        draftSessionRef.current = draftSessionId;
+        if (previous.id === '' && previous.imageGeneration === composerImageGeneration) {
+            // Startup adoption gives the existing draft its first conversation.
+            // A covered composer has parked that draft in the owner slot instead.
+            const snapshot = promptDraftRef.current.current;
+            if (snapshot?.ownerAgentId === '' && snapshot.bindingGeneration === previous.generation) {
+                promptDraftRef.current.current = {
+                    ...snapshot,
+                    ownerAgentId: String(draftSessionId),
+                    bindingGeneration: draftBindingGeneration,
+                };
+            }
+            return;
+        }
         // A stored draft can only belong to the conversation being replaced: the
         // composer is the one that writes it, and it writes it on the way out.
         promptDraftRef.current.current = null;
@@ -1705,7 +1967,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
             return;
         }
         promptControllerRef.current?.clear();
-    }, [draftSessionId]);
+    }, [draftSessionId, draftBindingGeneration]);
     const previewGallery = activePreview === null ? [] : activePreview.peek
         ? promptControllerRef.current?.previewImages?.() ?? [activePreview]
         : overlay.kind === 'image-preview' ? overlay.gallery ?? [activePreview] : [];
@@ -1744,7 +2006,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 if (!controller)
                     return;
                 const text = controller.append('').trim();
-                if (text === '')
+                if (text === '' || refusedAtStartup(undefined))
                     return;
                 channel.submit(text);
                 controller.clear();
@@ -1798,7 +2060,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
     // Mouse text selection auto-copy: active only in
     // fullscreen (<AlternateScreen> supplies mouse tracking); a no-op
     // subscription in inline mode, where selection belongs to the terminal.
-    // The copy clears the highlight and posts a transient notification.
+    // The copy retains the highlight and posts a transient notification.
     // Smart migration hint (product ask): ~12s after mount, one background
     // pass over the foreign-agent stores; when a source was active inside the
     // 20-minute window, surface the user's own wording once per session. The
@@ -1806,14 +2068,20 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
     // off the render path; failures read as "no data" and stay silent.
     const migrateHintShownRef = React.useRef(false);
     React.useEffect(() => {
+        // A replaced Channel must not retain the old hint's Enter shortcut.
+        setMigrateHintAgent(null);
         if (migrateHintShownRef.current)
             return;
+        let disposed = false;
+        let hintTimer;
         const timer = setTimeout(() => {
             migrateHintShownRef.current = true;
             void (async () => {
                 const newest = await new Promise(resolve => {
                     setImmediate(() => resolve(collectActivitySamples(MIGRATION_ADAPTERS, adapter => MIGRATE_SCAN_SPECS[adapter.id])));
                 });
+                if (disposed)
+                    return;
                 const top = recentAgentsFrom(newest, Date.now())[0];
                 if (top !== undefined) {
                     channel.notify(t('migrate-hint-notify', { agent: top.label }), { timeoutMs: 10000 });
@@ -1821,18 +2089,23 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                     // overlay) jumps into the picker with this source pre-checked;
                     // the global key layer below consumes it, anything else disarms.
                     setMigrateHintAgent(top.agentId);
-                    setTimeout(() => setMigrateHintAgent(current => current === top.agentId ? null : current), 10_000);
+                    hintTimer = setTimeout(() => setMigrateHintAgent(current => current === top.agentId ? null : current), 10_000);
                 }
             })();
         }, 12_000);
-        return () => clearTimeout(timer);
+        return () => {
+            disposed = true;
+            clearTimeout(timer);
+            if (hintTimer !== undefined)
+                clearTimeout(hintTimer);
+        };
     }, [channel]);
     useCopyOnSelect(text => channel.notify(t('copied-chars', { n: text.length }), { timeoutMs: 1500 }), 
     // Stale-selection refusal: the highlighted rows were replaced in place
     // (streaming overwrite), so nothing was copied — say why instead of
     // letting the highlight vanish silently.
     () => channel.notify(t('copy-refused-stale'), { timeoutMs: 2500 }));
-    const { clearSelection: clearMouseSelection, hasSelection: hasMouseSelection } = useSelection();
+    const { clearSelection: clearMouseSelection, hasSelection: hasMouseSelection, getState: getMouseSelectionState, } = useSelection();
     React.useEffect(() => {
         if (!channel.working || !terminalFocused)
             return;
@@ -1963,8 +2236,15 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
      * plugin (plan/goal/…) dispatches through the command registry, whose
      * result text lands as a notification. `rawInput` carries the text after
      * the command name (`/plan off` → ` off`).
+     *
+     * `render.block` prints a multi-line report the way `/plugins` prints one:
+     * a `local` echo row plus one wrapped `local-output` row per line, in the
+     * transcript (native scrollback in inline mode). A single truncated toast
+     * row cannot carry a full goal objective, so the bare `/goal` status query
+     * asks for the block; errors always notify — they want the color and the
+     * transient read.
      */
-    const runExternalCommand = (name, rawInput, images = []) => {
+    const runExternalCommand = (name, rawInput, images = [], render) => {
         const originAgentBinding = channel.agentBindingGeneration;
         return channel.runExternalCommandOutcome(name, rawInput, images).then((outcome) => {
             if (channel.agentBindingGeneration !== originAgentBinding)
@@ -1973,9 +2253,17 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 channel.notify(t('command-not-found', { name }), { color: 'error' });
                 return false;
             }
-            const cleaned = cleanRenderText(outcome.text, COMMAND_RESULT_CELLS);
-            if (cleaned !== '') {
-                channel.notify(cleaned, outcome.kind === 'error' ? { color: 'error' } : undefined);
+            if (render?.block === true && outcome.kind !== 'error') {
+                // Per-line sanitize: the newlines here are the report's structure.
+                const lines = cleanBlockLines(outcome.text, LOCAL_BLOCK_CELLS);
+                if (lines.length > 0)
+                    channel.pushLocal(`/${name}`, lines, { lineLimit: LOCAL_BLOCK_CELLS });
+            }
+            else {
+                const cleaned = cleanRenderText(outcome.text, COMMAND_RESULT_CELLS);
+                if (cleaned !== '') {
+                    channel.notify(cleaned, outcome.kind === 'error' ? { color: 'error' } : undefined);
+                }
             }
             return outcome.consumeDraft;
         }).catch((error) => {
@@ -2123,18 +2411,29 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 : t('migrate-failed', { n: failures }), failures === 0 ? { timeoutMs: 6000 } : { color: 'error', timeoutMs: 10000 });
         })();
     };
+    /** Not-ready refusal (`ChannelUi.ready`) for paths that bypass the composer:
+     *  true, after a notice, when `name` (undefined: plain text) must wait. */
+    const refusedAtStartup = (name) => {
+        if (channel.ready !== false || (name !== undefined && isBootSafeCommand(name)))
+            return false;
+        channel.notify(t('startup-not-ready', { backend: kernelCurrentOption?.shortLabel ?? channel.backendCapabilities.backendId }), { color: 'warning', timeoutMs: 2500 });
+        return true;
+    };
     /**
-     * Close the launchpad and hand the draft to the chat screen.
+     * Submit launchpad input or a selected command through the chat routes.
      *
      * THREE cases, and they are genuinely different:
      *
      *   - a slash command → `runCommand`, the same dispatch a typed command
-     *     takes in the composer. The line is NOT submitted to the model.
+     *     takes in the composer. Completion-only filesystem skills keep
+     *     the composer's model route.
      *     Recognition is the composer's OWN rule (第六版 BUG 1 修复): the merged
      *     command list (locals + plugin/registry commands via channel.commandList)
      *     decides whether the line is a command — isLocalCommandName alone missed
      *     registry-only names (e.g. /plan, /goal), which then fell through to
      *     channel.submit and went to the model as a user message.
+     *     Picker and full-screen commands keep the launchpad mounted underneath;
+     *     the consumed command is cleared before either surface opens.
      *   - ordinary text  → SENT DIRECTLY (fifth revision, user-reported bug:
      *     "按了回车就直接进入流式输出"). The line rides the composer's own
      *     submit path (`channel.submit`, which queues through the DSH inbox
@@ -2145,9 +2444,26 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
      * History is appended for the two non-empty cases (matching what PromptInput
      * does on submit) so the launchpad's first line is reachable with ↑ later.
      */
-    const closeLaunchpad = React.useCallback((submit) => {
+    const submitLaunchpad = (submit) => {
         const text = submit.trim();
-        setLaunchpadOpen(false);
+        const parsed = text.startsWith('/') ? parseCommandName(text) : undefined;
+        // Refused BEFORE the page closes, so the draft stays on it.
+        if (text !== '' && refusedAtStartup(parsed?.name))
+            return;
+        const images = composerImageRefsForText(text, launchpadImagesRef.current);
+        const command = parsed === undefined ? undefined : channel.commandList.find(entry => entry.name === parsed.name);
+        const knownCommand = parsed !== undefined && (isLocalCommandName(parsed.name) || isHiddenCommandName(parsed.name) || command !== undefined);
+        const modelRoutedSkill = command?.skill === true && command.external !== true;
+        // Match the composer's image admission before consuming the draft.
+        if (knownCommand && images.length > 0 && !modelRoutedSkill && command?.acceptsImages !== true) {
+            return t('command-images-unsupported', { name: parsed.name });
+        }
+        const submitted = new Set(images.map(image => image.stageId));
+        for (const stageId of launchpadImagesRef.current.values()) {
+            if (!submitted.has(stageId))
+                channel.discardStagedImage(stageId);
+        }
+        launchpadImagesRef.current.clear();
         // 首启时 openHomeOnBoot 与落地页同时为真：会话浏览器已经开着、只是被落地页盖住。
         // 提交首句后必须把它收掉，否则用户落到浏览器而不是"草稿就在眼前的对话"，
         // 与本函数 doc 承诺的落点直接矛盾。
@@ -2155,10 +2471,11 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
         setLaunchpadFocus(-1);
         setLaunchpadDraft('');
         setLaunchpadCaret(0);
-        if (text === '')
+        if (text === '') {
+            setLaunchpadOpen(false);
             return;
+        }
         void appendHistory(text);
-        const parsed = text.startsWith('/') ? parseCommandName(text) : undefined;
         // 第八版：/help 在落地页上也是盖屏浮层（补全面板被 Esc 收掉后直接
         // Enter 的那条路）——不收落地页、不进对话页。聊天页里 /help 的行为
         // 不变（那边不走这个回调）。
@@ -2168,18 +2485,51 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
         }
         // 与 composer 的 tryRunCommand 同一条判定：合并命令表（LOCAL_COMMANDS +
         // channel.commandList 的插件/registry 命令）里有名字才是命令；hidden
-        // 命令照旧认。判定之外的 / 开头行才走 submit（与聊天页 Enter 行为一致）。
-        if (parsed !== undefined && (isLocalCommandName(parsed.name)
-            || isHiddenCommandName(parsed.name)
-            || channel.commandList.some(entry => entry.name === parsed.name))) {
-            void runCommand(parsed.name, parsed.rawInput);
+        // 命令照旧认。模型路由技能与判定之外的 / 开头行走 submit，与聊天页一致。
+        if (parsed !== undefined && knownCommand && !modelRoutedSkill) {
+            if (launchpadScreenCommands.has(parsed.name)) {
+                authorizeLaunchpadCover();
+            }
+            else if (!overlayCommandNames.has(parsed.name)) {
+                setLaunchpadOpen(false);
+            }
+            void runCommand(parsed.name, parsed.rawInput, images);
             return;
         }
         // 直接发送：与 composer 回车同一条提交路径。发出去之后输入框是空的
         // （内容已作为首轮发出，绝不"既发了又留在框里"），也没有交接提示——
         // 没有草稿要交，一句"已放进输入框"的 toast 反而是假的。
-        channel.submit(text);
-    }, [channel, launchpadOpen]);
+        setLaunchpadOpen(false);
+        channel.submit(text, images);
+    };
+    /**
+     * A failed startup open closes the landing page, uncovering the failure row
+     * and its `/new` hint; the draft moves to the composer once it mounts.
+     */
+    const launchpadDraftHandoffRef = React.useRef(undefined);
+    const startupFailure = channel.startupFailure;
+    React.useEffect(() => {
+        if (!launchpadOpen || startupFailure === undefined)
+            return;
+        launchpadDraftHandoffRef.current = launchpadDraft;
+        setLaunchpadOpen(false);
+        setSupervisorOpen(false);
+        setLaunchpadFocus(-1);
+        setLaunchpadDraft('');
+        setLaunchpadCaret(0);
+        // eslint-disable-next-line react-hooks/exhaustive-deps -- the draft is read at the moment of the failure, not tracked
+    }, [launchpadOpen, startupFailure]);
+    React.useEffect(() => {
+        const draft = launchpadDraftHandoffRef.current;
+        if (launchpadOpen || draft === undefined)
+            return;
+        const controller = promptControllerRef.current;
+        if (controller === null)
+            return;
+        launchpadDraftHandoffRef.current = undefined;
+        if (draft.trim() !== '')
+            controller.append(draft);
+    });
     /**
      * The screen's command dispatcher. Every entry point reaches this one
      * closure — PromptInput's `onRunCommand`, the completion menu, this screen's
@@ -2187,6 +2537,8 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
      * second dispatcher for the landing page.
      */
     const runCommand = (name, rawInput = '', images = []) => {
+        if (refusedAtStartup(name))
+            return true;
         switch (name) {
             case 'activity': {
                 // Ported from the pi working-activity extension: bare `/activity`
@@ -2507,8 +2859,8 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 setHelpOpen(true);
                 return true;
             case 'model': {
-                // `/model <provider/model>` switches directly (same live-fork path
-                // as the picker's Enter), bare `/model` opens the picker.
+                // `/model <provider/model>` switches directly (same in-session route
+                // switch as the picker's Enter), bare `/model` opens the picker.
                 const parts = rawInput.trim().split(/\s+/).filter(Boolean);
                 if (parts.length > 0) {
                     setHelpOpen(false);
@@ -2533,37 +2885,37 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                     return true;
                 }
                 setHelpOpen(false);
-                // Opens over the cached catalog (empty cache shows the loading
-                // pane); the fresh list lands with the authoritative focus, and the
-                // kind-guarded set-index cannot re-focus a picker the user left.
-                // Seed-on-open: the model in use IS a use — recording it here means
-                // the recents group exists before the first post-update switch, and
-                // switching A→B keeps A in the list (the file records what was
-                // used, not only switches made after the file appeared).
-                let recentsNow = modelRecents;
-                if (channel.provider !== '' && channel.model !== ''
-                    && !recentsNow.some(ref => ref.provider === channel.provider && ref.id === channel.model)) {
-                    recentsNow = recordModelUse({ provider: channel.provider, id: channel.model }, undefined, recentsBackend);
-                    setModelRecents(recentsNow);
-                }
-                // Two-level landing: recents (when catalogued) focus their pinned
-                // row; else multi-provider catalogs focus the current provider's
-                // group row; a single-provider catalog without a meaningful recents
-                // list drills straight into its model list (pre-grouping UX).
-                {
-                    const landing = modelPickerLanding(models, channel.provider, channel.model, recentsNow);
-                    setModelGroup(landing.group);
-                    setModelPickerDirect(landing.group !== undefined);
-                    dispatchOverlay({ type: 'open', overlay: { kind: 'model', index: landing.index } });
+                // Opening counts the live route as the latest use, including when
+                // restoring a session whose model already exists later in recents.
+                // Refresh the catalog without overriding navigation made meanwhile.
+                const latestRecent = modelRecents[0];
+                if (modelProviderTabs && channel.provider !== '' && channel.model !== ''
+                    && (latestRecent?.provider !== channel.provider || latestRecent?.id !== channel.model)) {
+                    setModelRecents(recordModelUse({ provider: channel.provider, id: channel.model }, undefined, recentsBackend));
                 }
+                modelPicker.reset();
+                dispatchOverlay({ type: 'open', overlay: { kind: 'model' } });
+                setModelsLoading(true);
+                const generation = ++modelCatalogGeneration.current;
                 void channel.listModels().then((list) => {
+                    if (generation !== modelCatalogGeneration.current)
+                        return;
                     setModels(list);
-                    const landing = modelPickerLanding(list, channel.provider, channel.model, recentsNow);
-                    setModelGroup(landing.group);
-                    setModelPickerDirect(landing.group !== undefined);
-                    dispatchOverlay({ type: 'set-index', kind: 'model', index: landing.index });
+                    setModelsLoading(false);
+                }).catch(() => {
+                    if (generation !== modelCatalogGeneration.current)
+                        return;
+                    setModelsLoading(false);
+                    channel.notify(t('model-load-failed'), { color: 'error' });
                 });
-                void channel.listProviders().then(setProviderInfos).catch(() => setProviderInfos([]));
+                if (modelProviderTabs)
+                    void channel.listProviders().then(list => {
+                        if (generation === modelCatalogGeneration.current)
+                            setProviderInfos(list);
+                    }).catch(() => {
+                        if (generation === modelCatalogGeneration.current)
+                            setProviderInfos([]);
+                    });
                 return true;
             }
             case 'skills': {
@@ -3032,13 +3384,66 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 void collectMigrateRows().then(setMigrateRows);
                 return true;
             }
-            case 'plugins':
+            case 'plugin': {
                 // Plugin diagnostics (C-070): trust banner first, then descriptor /
                 // grant matrix / ledger tail — or validate+negotiate for
-                // `/plugins check <path>` (rawInput carries the subcommand).
+                // `/plugin check <path>` (rawInput carries the subcommand).
+                setHelpOpen(false);
+                // `/plugin install <spec>` is the one form that needs a flow of its own
+                // (C-4). Anything else — and any launch whose entry has no service to
+                // install through — falls through to the read-only report below.
+                // The three lifecycle forms (C-5) and the install form each need a flow
+                // of their own. They are mutually exclusive by their subcommand, so
+                // trying one and then the other cannot take the wrong path; anything
+                // else — and any launch whose entry has no service — falls through to
+                // the read-only report below.
+                if (startPluginManage(rawInput))
+                    return true;
+                if (startPluginInstall(rawInput))
+                    return true;
+                // The bundle/row half comes from the host plugin service, so the
+                // report is async (the `/agents` case reads the same way). `pushLocal`
+                // writes the CURRENTLY bound session, and a resume or `/new` can land
+                // while the service is still answering: fence the report to the
+                // binding that asked for it, or it appears in the new transcript.
+                const originAgentBinding = channel.agentBindingGeneration;
+                void channel.pluginsInfo(rawInput).then((lines) => {
+                    if (channel.agentBindingGeneration !== originAgentBinding)
+                        return;
+                    channel.pushLocal('/plugin', lines);
+                });
+                return true;
+            }
+            case 'team': {
+                // `/team` 是团队 bundle 的启停（team-mode.ts）：on/off 走与 /plugin 同一个
+                // 生命周期流程与确认浮层，status 是一段报告；都按发起时的绑定落行。
                 setHelpOpen(false);
-                channel.pushLocal('/plugins', channel.pluginsInfo(rawInput));
+                if (onTeamCommand === undefined) {
+                    channel.pushLocal('/team', [t('team-cmd-unavailable')]);
+                    return true;
+                }
+                const originAgentBinding = channel.agentBindingGeneration;
+                const outcome = onTeamCommand(rawInput, {
+                    binding: () => channel.agentBindingGeneration,
+                    busy: () => channel.working,
+                    onLines: lines => channel.pushLocal('/team', lines),
+                    members: teamMembers,
+                });
+                if (outcome.kind === 'flow') {
+                    pluginManage.start(outcome.flow, outcome.flow.begin());
+                    return true;
+                }
+                void outcome.lines.then((lines) => {
+                    if (channel.agentBindingGeneration !== originAgentBinding)
+                        return;
+                    channel.pushLocal('/team', [...lines]);
+                }, (error) => {
+                    if (channel.agentBindingGeneration !== originAgentBinding)
+                        return;
+                    channel.pushLocal('/team', [t('plugins-manage-failed', { reason: cleanCommandError(error) })]);
+                });
                 return true;
+            }
             case 'export': {
                 const target = channel.exportSession();
                 channel.notify(target === null
@@ -3107,12 +3512,23 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 }
                 return false;
             }
-            case 'agents':
+            case 'agents': {
                 setHelpOpen(false);
+                // The roster comes from the host subagents service, so the report is
+                // async. Two fences, each for a window of its own: the generation guard
+                // drops an answer that raced a session switch (`pushLocal` writes the
+                // CURRENT binding), and the catch takes the rejection `listSubagents`
+                // raises on purpose when the capture it read for has ended — an
+                // unhandledRejection there is fatal to the process guard, and there is
+                // nothing left to report to.
+                const originAgentBinding = channel.agentBindingGeneration;
                 void channel.listSubagents().then((lines) => {
+                    if (channel.agentBindingGeneration !== originAgentBinding)
+                        return;
                     channel.pushLocal('/agents', lines);
-                });
+                }).catch(() => undefined);
                 return true;
+            }
             case 'login': {
                 setHelpOpen(false);
                 if (runBackendLogin())
@@ -3195,7 +3611,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                     }
                     const currentName = snapshot.availability === 'unavailable'
                         ? t('permission-roster-unavailable')
-                        : snapshot.current?.name ?? '—';
+                        : currentPermissionName(snapshot) ?? '—';
                     channel.pushLocal('/permission', [
                         t('permission-current', { name: currentName }),
                         t('permission-policy-hint'),
@@ -3250,15 +3666,21 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
             }
             case 'plan': {
                 // Registered by dsh-plan-mode: bare `/plan` opens an on/off picker
-                // marked with the current state instead of toggling blindly; Enter
-                // dispatches `/plan` or `/plan off`. Arguments pass through verbatim
-                // (`/plan off`). Availability comes from the shared capability facts
-                // (the same read Shift+Tab uses), not from a second command-list
-                // scan; with no registry command the line falls through to the model,
-                // exactly as before.
+                // marked with the current state instead of toggling blindly; the
+                // picker's own rows dispatch the bare command and ` off`, never the
+                // catalog token. The catalog's `on` child (the only producer of that
+                // literal argument) is normalized back to the bare command:
+                // upstream's grammar is `/plan [off|message]`, so a verbatim `on`
+                // would enter plan mode AND steer the word "on" into the next step as
+                // a user message. Every other argument — `/plan off` and
+                // `/plan <message>` — passes through verbatim. Availability comes from
+                // the shared capability facts (the same read Shift+Tab uses), not from
+                // a second command-list scan; with no registry command the line falls
+                // through to the model, exactly as before.
                 const plan = channel.capabilities().plan;
                 const mounted = plan.route !== 'none';
                 const parts = rawInput.trim().split(/\s+/).filter(Boolean);
+                const argument = parts.length === 1 && parts[0] === 'on' ? '' : rawInput;
                 if (mounted && parts.length === 0) {
                     setHelpOpen(false);
                     dispatchOverlay({
@@ -3269,7 +3691,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 }
                 if (mounted) {
                     setHelpOpen(false);
-                    return runExternalCommand('plan', rawInput, images);
+                    return runExternalCommand('plan', argument, images);
                 }
                 return false;
             }
@@ -3338,13 +3760,9 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                     currentLang: getLang(),
                     langOverriddenBySettings: tuiNamespace !== undefined && hasPath(tuiNamespace.user, ['lang']),
                     configuredLang: channel.configuredLang,
-                    configuredPreset: channel.configuredPreset,
+                    envPreset: presetOverrideFromEnv(),
                     presetPref: readPresetPref(),
                     currentPreset: channel.agentPreset,
-                    configuredModel: {
-                        provider: channel.configuredProvider,
-                        model: channel.configuredModel,
-                    },
                     modelPref: readModelPref(),
                     currentModel: { provider: channel.provider, model: channel.model },
                     configuredActivity: channel.configuredActivityFrames,
@@ -3398,7 +3816,11 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 // default branch below would dispatch it.
                 if (channel.commandList.some(command => command.external && command.name === 'goal')) {
                     setHelpOpen(false);
-                    return runExternalCommand(name, rawInput, images);
+                    // Bare `/goal` is DSH's status query. Print it as a transcript
+                    // block: inline mode sees no pointer events, so the hover tooltip
+                    // cannot carry the objective there, and the toast truncates it to
+                    // one row.
+                    return runExternalCommand(name, rawInput, images, { block: rawInput.trim() === '' });
                 }
                 // Another backend: the channel core's host over its typed `goals`
                 // capability. None (DSH without the row, or a backend's own `goal`
@@ -3416,7 +3838,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 const command = parseGoalCommand(rawInput);
                 switch (command.kind) {
                     case 'status':
-                        channel.pushLocal('/goal', goalStatusLines(channel.goal));
+                        channel.pushLocal('/goal', goalStatusLines(channel.goal), { lineLimit: LOCAL_BLOCK_CELLS });
                         return true;
                     case 'invalid':
                         channel.notify(command.reason, { color: 'error' });
@@ -3442,7 +3864,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 return true;
             }
             case 'kernel':
-                // 内核选择器，每个内核下都可用（在对话页里切回 DSH 只有这一条路）。
+                // 内核选择器，每个内核下都可用。
                 // 确认后由组合根的 onSwitchBackend 记住选择并以新内核重启。与 /help、
                 // 参数行一致：选择器已开着就收起，没开才打开。
                 setHelpOpen(false);
@@ -3451,6 +3873,11 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 else
                     openKernelPicker();
                 return true;
+            case 'dsh':
+            case 'codex':
+            case 'claude':
+                setHelpOpen(false);
+                return pickKernelById(name).then(() => true);
             case 'restart':
                 // pi-style reload tail: /reload cannot re-read boot-time-only state
                 // (cordis.yml root config, frozen fullscreen layout, newly built
@@ -3679,10 +4106,11 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
     const pageInsetX = usePageInset().x;
     // 侧栏控制器：几何（chatColumns/panelColumns）、焦点与键盘分发都在
     // 这个 hook 里（设计文档 §16.5——Chat 只多一次调用、一处键盘让位、
-    // 一条 runCommand case）。编辑器展开时几何强制 collapsed。
+    // 一条 runCommand case）。启动页没有侧栏，命令走整屏回退；编辑器
+    // 展开时几何同样强制 collapsed。
     const sidePanel = useSidePanel({
         columns: terminalColumns,
-        fullscreen,
+        fullscreen: fullscreen && !launchpadShown,
         editorOpen: promptEditorOpen,
     });
     /**
@@ -3935,7 +4363,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
         // The launchpad owns the whole terminal while it is up — including the
         // plain letters that would otherwise reach the composer, which is exactly
         // the point: it IS the composer on this screen, and its draft is submitted
-        // directly (see closeLaunchpad). ONE exception (fifth revision): a picker
+        // directly (see submitLaunchpad). ONE exception (fifth revision): a picker
         // opened from the param row renders ABOVE the launchpad and therefore owns
         // the keyboard — fall through to the overlay branches below (Esc closes the
         // picker back onto the launchpad). The launchpad's own useInput is paused
@@ -4078,6 +4506,21 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
             }
             return;
         }
+        if (overlay.kind === 'model') {
+            if (actionMatches('sidePanel', input, key) || actionMatches('sidePanelZoom', input, key)) {
+                if (sidePanel.handleKey(input, key, event))
+                    return;
+            }
+            // The model picker owns both navigation axes, including when a side
+            // panel or transcript selection held focus before it opened.
+            const now = Date.now();
+            const confirm = isPlainReturnInput(input, key) && now - lastModalEnterAtRef.current >= 80;
+            if (confirm)
+                lastModalEnterAtRef.current = now;
+            modelPicker.handleKey(input, key, confirm);
+            event.stopImmediatePropagation();
+            return;
+        }
         // 侧栏键盘分发（v2.1 优先级）：上面的审批 / 问卷 / 对话框守卫仍然
         // 最先，其次是侧栏全局快捷键（Ctrl+B / Alt+Z，两种焦点都生效），
         // 然后焦点在右栏时一切按键归侧栏——活动面板的业务键优先，宿主
@@ -4111,11 +4554,10 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
             event.stopImmediatePropagation();
             return;
         }
-        // Esc clears a settled mouse selection before the ordinary chat meanings
-        // below, but never before a top-level modal. Otherwise a preview opened
-        // over selected transcript text needed two Esc presses to close.
-        // hasSelection() is an imperative read — no subscription needed.
-        if (key.escape && hasMouseSelection()) {
+        // With no overlay open, Esc cancels an active mouse drag or retained
+        // selection before ordinary chat meanings. Open overlays own Esc.
+        // Selection queries are imperative reads — no subscription needed.
+        if (overlay.kind === 'none' && key.escape && (hasMouseSelection() || getMouseSelectionState()?.isDragging)) {
             clearMouseSelection();
             event.stopImmediatePropagation();
             return;
@@ -4336,59 +4778,6 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
             }
             return;
         }
-        if (overlay.kind === 'model') {
-            // Two-level picker: group rows at the top (Enter drills in), one
-            // provider's models below (Enter switches, the same live-fork path as
-            // the flat picker always had). Esc/⌫ climbs one level and only closes
-            // at the top; a single-group catalog never shows the group level, so
-            // Esc there closes directly.
-            const rowCount = activeModelGroup === undefined ? modelGroups.length : groupModels.length;
-            if (key.upArrow || key.downArrow) {
-                dispatchOverlay({ type: 'move', delta: key.upArrow ? -1 : 1, count: rowCount });
-            }
-            else if (plainReturn) {
-                if (activeModelGroup === undefined) {
-                    const group = modelGroups[overlay.index];
-                    if (!group) {
-                        dispatchOverlay({ type: 'close' });
-                        return;
-                    }
-                    setModelGroup(group.provider);
-                    // The recents group opens on its most-recent entry; a provider
-                    // group on its current model when it owns one, else its first row.
-                    if (group.provider === RECENTS_GROUP_PROVIDER) {
-                        dispatchOverlay({ type: 'set-index', kind: 'model', index: 0 });
-                        return;
-                    }
-                    const landing = modelPickerLanding(models.filter(model => model.provider === group.provider), channel.provider, channel.model);
-                    dispatchOverlay({ type: 'set-index', kind: 'model', index: landing.index });
-                    return;
-                }
-                const model = groupModels[overlay.index];
-                // oxlint-disable-next-line typescript/no-unnecessary-condition -- runtime guard: out-of-range index on an empty list
-                if (model) {
-                    // Enter switches the live model right away: the conversation is
-                    // forked at its end and continued with an agent routed to the new
-                    // model (history replays unchanged) — and feeds the recents group.
-                    dispatchOverlay({ type: 'close' });
-                    void switchModelRecorded(model.provider, model.id, model.name);
-                }
-                else {
-                    dispatchOverlay({ type: 'close' });
-                }
-            }
-            else if (key.escape || key.backspace) {
-                if (activeModelGroup !== undefined && modelGroups.length > 1 && !modelPickerDirect) {
-                    setModelGroup(undefined);
-                    const groupIndex = Math.max(0, modelGroups.findIndex(group => group.provider === activeModelGroup));
-                    dispatchOverlay({ type: 'set-index', kind: 'model', index: groupIndex });
-                }
-                else {
-                    dispatchOverlay({ type: 'close' });
-                }
-            }
-            return;
-        }
         if (overlay.kind === 'skills') {
             const list = skillsList ?? [];
             if (key.upArrow || key.downArrow) {
@@ -4548,6 +4937,17 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
             }
             return;
         }
+        if (overlay.kind === 'permission' && overlay.confirm === true) {
+            if (plainReturn) {
+                permissionOverlayFocusRef.current = null;
+                dispatchOverlay({ type: 'close' });
+                void runPermissionCommand(` ${PERMISSION_PRESET_AUTO}`);
+            }
+            else if (key.escape) {
+                dispatchOverlay({ type: 'open', overlay: { ...overlay, confirm: false } });
+            }
+            return;
+        }
         if (overlay.kind === 'permission') {
             if (key.upArrow || key.downArrow) {
                 const currentIndex = permissionOverlayFocusRef.current?.overlay === overlay
@@ -4563,6 +4963,10 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                     : overlay.index;
                 const option = overlay.snapshot.options[currentIndex];
                 permissionOverlayFocusRef.current = null;
+                if (needsAutoConfirm(overlay.snapshot, option?.value)) {
+                    dispatchOverlay({ type: 'open', overlay: { ...overlay, index: currentIndex, confirm: true } });
+                    return;
+                }
                 dispatchOverlay({ type: 'close' });
                 if (option !== undefined)
                     void runPermissionCommand(` ${option.value}`);
@@ -4604,7 +5008,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
         }
         if (overlay.kind === 'sdk-install') {
             // 向导按键按步骤态分派；checking/running 期间除 Esc（取消安装）外
-            // 全部吞掉——异步落地只发生在面板还在的窗口内（见 sdkPhase 注释）。
+            // 全部吞掉；鼠标关闭/替换浮层由向导的 effect 取消并隔离迟到结果。
             if (sdkPhase.kind === 'confirm') {
                 if (plainReturn)
                     confirmSdkInstall(sdkPhase.dir);
@@ -4616,7 +5020,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
             }
             else if (sdkPhase.kind === 'running') {
                 if (key.escape)
-                    sdkInstallerRef.current?.cancel();
+                    sdkInstallRef.current?.installer?.cancel();
             }
             else if (sdkPhase.kind === 'done') {
                 if (plainReturn)
@@ -4637,6 +5041,77 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
             }
             return;
         }
+        if (overlay.kind === 'plugin-install') {
+            // 装链路浮层（C-4）：一次安装的每一步都是显式的——确认、批准构建脚本、
+            // 接受版本风险；取消由服务自己结算（回滚 profile），期间除 Esc 外不接键。
+            const view = pluginInstall.view;
+            if (view === undefined || view.busy) {
+                if (key.escape) {
+                    cancelPluginInstall();
+                    event.stopImmediatePropagation();
+                }
+                return;
+            }
+            if (view.step.kind === 'confirm') {
+                if (plainReturn) {
+                    pluginInstall.run(view.flow.confirm());
+                    event.stopImmediatePropagation();
+                }
+                else if (key.escape) {
+                    // 还没开始装：收起浮层即可，不去服务那边取消一个不存在的安装。
+                    pluginInstall.close();
+                    event.stopImmediatePropagation();
+                }
+            }
+            else if (view.step.kind === 'build-blocked') {
+                if (plainReturn) {
+                    pluginInstall.run(view.flow.approve(view.step.builds));
+                    event.stopImmediatePropagation();
+                }
+                else if (key.escape) {
+                    pluginInstall.close();
+                    event.stopImmediatePropagation();
+                }
+            }
+            else if (view.step.kind === 'incompatible') {
+                if (plainReturn) {
+                    pluginInstall.run(view.flow.acceptRisk());
+                    event.stopImmediatePropagation();
+                }
+                else if (key.escape) {
+                    pluginInstall.close();
+                    event.stopImmediatePropagation();
+                }
+            }
+            else if (key.escape) {
+                pluginInstall.close();
+                event.stopImmediatePropagation();
+            }
+            return;
+        }
+        if (overlay.kind === 'plugin-manage') {
+            // 生命周期浮层（C-5）：只有「确认」一种答案，写入中除 Esc 外不接键。
+            // 与装链路的关键差异是**没有取消**：这三个动作服务不提供取消面，写也是一次
+            // 就结算的 profile 操作，所以 Esc 只关面板，流程照旧跑完并把结果（仍按发起时
+            // 的 binding 加栅栏）写进转录；浮层没了就不再更新步骤态。
+            const view = pluginManage.view;
+            if (view === undefined || view.busy) {
+                if (key.escape) {
+                    pluginManage.close();
+                    event.stopImmediatePropagation();
+                }
+                return;
+            }
+            if (plainReturn) {
+                pluginManage.run(view.flow.confirm());
+                event.stopImmediatePropagation();
+            }
+            else if (key.escape) {
+                pluginManage.close();
+                event.stopImmediatePropagation();
+            }
+            return;
+        }
         if (overlay.kind === 'channel') {
             // 名册不冻在 overlay 里（channelRows 是渲染期派生值）：切换/导入后
             // 选择器自己就刷新成新状态，不需要重开。
@@ -5169,8 +5644,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                         // 鼠标等价），浮层收起、人还在启动页（第八版：不许进对话页）。
                         dispatchOverlay({ type: 'close' });
                         const filled = '/' + name + ' ';
-                        setLaunchpadDraft(filled);
-                        setLaunchpadCaret(filled.length);
+                        changeLaunchpadDraft(filled, filled.length);
                         setLaunchpadFocus(-1);
                     } }) })), overlay.kind === 'thinking' && (_jsx(ThinkingToggle, { currentValue: thinkingVisible, focusIndex: overlay.focus, onPick: (index) => {
                     // 点击行 = 设焦点 + 应用（与 Enter 同一条路径）
@@ -5195,28 +5669,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                             return;
                         dispatchOverlay({ type: 'set-index', kind: 'workspace-flow', index });
                         runWorkspaceFlowAction(signal => choice.choose(signal));
-                    } }) })), overlay.kind === 'model' && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: models.length === 0 ? (_jsx(ModelPickerLoading, {})) : activeModelGroup === undefined ? (_jsx(ModelPicker, { groups: modelGroups, focusIndex: overlay.index, currentProvider: channel.provider, onPick: (index) => {
-                        // 点击分组行 = 进入该组（与 Enter 同一条路径）
-                        const group = modelGroups[index];
-                        if (!group)
-                            return;
-                        setModelGroup(group.provider);
-                        if (group.provider === RECENTS_GROUP_PROVIDER) {
-                            dispatchOverlay({ type: 'set-index', kind: 'model', index: 0 });
-                            return;
-                        }
-                        const landing = modelPickerLanding(models.filter(model => model.provider === group.provider), channel.provider, channel.model);
-                        dispatchOverlay({ type: 'set-index', kind: 'model', index: landing.index });
-                    } })) : (_jsx(ModelPicker, { models: groupModels, groupLabel: activeModelGroup === RECENTS_GROUP_PROVIDER
-                        ? t('picker-group-recent')
-                        : modelGroups.find(group => group.provider === activeModelGroup)?.label, showBack: modelGroups.length > 1 && !modelPickerDirect, showProviderPrefix: activeModelGroup === RECENTS_GROUP_PROVIDER, focusIndex: overlay.index, currentModel: `${channel.provider}/${channel.model}`, onPick: (index) => {
-                        // 点击行 = 应用该行模型（与 Enter 同一条路径）
-                        const model = groupModels[index];
-                        if (!model)
-                            return;
-                        dispatchOverlay({ type: 'close' });
-                        void switchModelRecorded(model.provider, model.id, model.name);
-                    } })) })), overlay.kind === 'migrate' && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(MigratePicker, { rows: migrateRows ?? [], focusIndex: overlay.index, checked: migrateChecked, loading: migrateRows === null, onPick: (index) => {
+                    } }) })), overlay.kind === 'model' && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(ModelPicker, { groups: modelPicker.groups, provider: modelPicker.provider, models: modelPicker.models, focusIndex: modelPicker.index, currentModel: `${channel.provider}/${channel.model}`, loading: modelsLoading, efforts: modelPicker.efforts, effortId: modelPicker.effortId, effortsLoading: modelPicker.effortsLoading, effortError: modelPicker.effortError, levelsFallback: modelPicker.levelsFallback, cursorZone: modelPicker.cursorZone, onProvider: modelPicker.focusProvider, onFocus: modelPicker.focusModel, onEffort: modelPicker.pickEffort, onMove: modelPicker.moveModel, onConfirm: modelPicker.confirm, onCancel: modelPicker.cancel }) })), overlay.kind === 'migrate' && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(MigratePicker, { rows: migrateRows ?? [], focusIndex: overlay.index, checked: migrateChecked, loading: migrateRows === null, onPick: (index) => {
                         const row = (migrateRows ?? [])[index];
                         if (!row)
                             return;
@@ -5264,10 +5717,24 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                         const option = presetOptions[index];
                         if (option)
                             void channel.switchPreset(option.id);
-                    } }) })), overlay.kind === 'permission' && overlay.snapshot.options.length > 0 && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(PermissionsPicker, { options: overlay.snapshot.options, focusIndex: overlay.index, currentValue: overlay.snapshot.current?.value, cwd: channel.cwd, onPick: (index) => {
+                    } }) })), overlay.kind === 'permission' && overlay.snapshot.options.length > 0 && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(PermissionsPicker, { options: overlay.snapshot.options, focusIndex: overlay.index, currentValue: overlay.snapshot.current?.value, cwd: channel.cwd, confirming: overlay.confirm === true, onConfirm: () => {
+                        if (approvalSnapshot !== null || questionSnapshot !== null || dialogSnapshot !== null)
+                            return;
+                        permissionOverlayFocusRef.current = null;
+                        dispatchOverlay({ type: 'close' });
+                        void runPermissionCommand(` ${PERMISSION_PRESET_AUTO}`);
+                    }, onCancelConfirm: () => {
+                        if (approvalSnapshot !== null || questionSnapshot !== null || dialogSnapshot !== null)
+                            return;
+                        dispatchOverlay({ type: 'open', overlay: { ...overlay, confirm: false } });
+                    }, onPick: (index) => {
                         if (approvalSnapshot !== null || questionSnapshot !== null || dialogSnapshot !== null)
                             return;
                         const option = overlay.snapshot.options[index];
+                        if (needsAutoConfirm(overlay.snapshot, option?.value)) {
+                            dispatchOverlay({ type: 'open', overlay: { ...overlay, index, confirm: true } });
+                            return;
+                        }
                         dispatchOverlay({ type: 'close' });
                         if (option !== undefined)
                             void runPermissionCommand(` ${option.value}`);
@@ -5282,7 +5749,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                         if (approvalSnapshot !== null || questionSnapshot !== null || dialogSnapshot !== null)
                             return;
                         pickKernel(index);
-                    } }) })), overlay.kind === 'sdk-install' && sdkPhase.kind !== 'idle' && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(SdkInstallWizard, { phase: sdkPhase }) })), overlay.kind === 'channel' && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(ChannelPicker, { rows: channelRows, focusIndex: overlay.index, onPick: (index) => {
+                    } }) })), overlay.kind === 'sdk-install' && sdkPhase.kind !== 'idle' && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(SdkInstallWizard, { phase: sdkPhase }) })), overlay.kind === 'plugin-install' && pluginInstall.view !== undefined && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(PluginInstallPane, { step: pluginInstall.view.step, busy: pluginInstall.view.busy }) })), overlay.kind === 'plugin-manage' && pluginManage.view !== undefined && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(PluginManagePane, { step: pluginManage.view.step, busy: pluginManage.view.busy }) })), overlay.kind === 'channel' && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(ChannelPicker, { rows: channelRows, focusIndex: overlay.index, onPick: (index) => {
                         if (approvalSnapshot !== null || questionSnapshot !== null || dialogSnapshot !== null)
                             return;
                         pickChannel(index);
@@ -5424,12 +5891,11 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 // 第七版：明确选中一个会话 = 有意导航（与 Esc「退出」相对）——浏览页
                 // 与盖在它底下的落地页**一起收**，人落在那个会话的聊天页。只收浏览页
                 // 会露出启动页，正是用户实测的「选完会话还是回到启动页」。落地页的
-                // 草稿/焦点也按 closeLaunchpad 同一口径清掉（进入的是别的会话，旧草稿
+                // 草稿/焦点也按 submitLaunchpad 同一口径清掉（进入的是别的会话，旧草稿
                 // 不该跟过去）。
                 setLaunchpadOpen(false);
                 setLaunchpadFocus(-1);
-                setLaunchpadDraft('');
-                setLaunchpadCaret(0);
+                changeLaunchpadDraft('', 0);
                 repaintTranscript();
                 return result;
             }, onNewSession: async (target) => {
@@ -5441,8 +5907,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                     // 同 onOpenSession：新建/切工作区会话也是有意导航，落地页一并收。
                     setLaunchpadOpen(false);
                     setLaunchpadFocus(-1);
-                    setLaunchpadDraft('');
-                    setLaunchpadCaret(0);
+                    changeLaunchpadDraft('', 0);
                     repaintTranscript();
                 }
                 return ok;
@@ -5540,7 +6005,10 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
     // of the sidebar panel. Esc returns to the sidebar exactly as it was — the
     // thread and the composer draft live in btwThreads, nothing is cleared.
     if (btwSceneOpen && launchpadGate()) {
-        const scene = (_jsx(BtwThreadScene, { channel: channel, onClose: () => setBtwSceneOpen(false) }));
+        const scene = (_jsx(BtwThreadScene, { channel: channel, onClose: () => setBtwSceneOpen(false), 
+            // 送聊天之后整屏场景让位：关场景 + 焦点回主输入框——与侧栏形态里
+            // 「面板留着、焦点回输入框」的落点一致（见 BtwThreadScene.sendToChat）。
+            onFocusChat: sidePanel.focusChat }));
         return fullscreen ? scene : _jsx(AlternateScreen, { children: scene });
     }
     // Subagent dashboard: displays all active and completed subagents.
@@ -5548,7 +6016,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
     if (subagentDashboardOpen && launchpadGate()) {
         // No kernel serves agents from other sessions yet, so the dashboard gets
         // no `peers`; once one does, pass them here.
-        const dashboard = (_jsx(SubagentDashboard, { subagents: [...channel.subagents], onSelect: (id) => {
+        const dashboard = (_jsx(SubagentDashboard, { subagents: [...channel.subagents], team: channel.team, sessionId: channel.sessionId, onSelect: (id) => {
                 setSubagentDashboardOpen(false);
                 setSubagentDetailId(id);
             }, onOpenView: (id) => openAgentView(id, { kind: 'agents-dashboard' }), messages: channel.subagentControl?.message?.messages(), onClose: () => setSubagentDashboardOpen(false) }));
@@ -5598,7 +6066,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
         let launchpadPermission;
         try {
             const snapshot = channel.permissionPresets();
-            launchpadPermission = snapshot.availability === 'runtime' ? snapshot.current?.name : undefined;
+            launchpadPermission = snapshot.availability === 'runtime' ? currentPermissionName(snapshot) : undefined;
         }
         catch {
             launchpadPermission = undefined;
@@ -5618,10 +6086,22 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
             jobsRunning: (channel.backgroundJobs ?? []).some(job => job.status === 'running' || job.status === 'stopping'),
             updateAvailable: launchpadUpdateAvailable,
             starDue: launchpadStarDue,
-            // 内核入口带名（「内核 · Claude」）：backendId 是内核身份的唯一来源。
+            // 内核入口带名（「内核 · Claude」）：backendId 是内核身份的唯一来源，
+            // 名字取同一份选择器目录里的短品牌名（manifest 的 shortLabel）。
             backendId: kernelCurrentId,
+            backendLabel: kernelCurrentOption?.shortLabel,
         });
-        const launchpad = (_jsx(Launchpad, { query: launchpadDraft, cursorOffset: launchpadCaret, focusIndex: launchpadFocus, isTerminalFocused: terminalFocused, whale: channel.whale, whaleIdle: channel.whaleIdle, whaleGirl: channel.whaleGirl, fontId: splashFontIdOf(channel.splashFont), brand: brand, starred: starred, onStarClick: runStarAction, firstRun: onboardingPending, actions: launchpadActions, 
+        const lastNotification = channel.notifications.at(-1);
+        // While the session's backend is still starting (the status line's
+        // `status-starting` segment), the Tips row says so — below any notice.
+        const launchpadNotice = lastNotification === undefined
+            ? channel.ready === false && channel.startupFailure === undefined
+                ? { text: t('status-starting', { backend: channel.backendCapabilities?.backendLabel ?? 'DSH' }), color: 'warning' }
+                : undefined
+            : { text: lastNotification.text, ...(lastNotification.color === undefined ? {} : { color: lastNotification.color }) };
+        const launchpad = (_jsx(Launchpad, { query: launchpadDraft, imageComposer: { channel, bindings: launchpadImagesRef.current }, cursorOffset: launchpadCaret, focusIndex: launchpadFocus, isTerminalFocused: terminalFocused, whale: channel.whale, whaleIdle: channel.whaleIdle, whaleGirl: channel.whaleGirl, fontId: splashFontIdOf(channel.splashFont), brand: brand, starred: starred, onStarClick: runStarAction, firstRun: onboardingPending, actions: launchpadActions, 
+            // 落地页没有 toast 区：最近一条 channel 通知借 Tips 行显示。
+            notice: launchpadNotice, 
             // 参数行四段点开的既有选择器（第五版）：pickerPanels 与聊天页共用
             // 同一份 JSX，盖在落地页之上；选择器开着时落地页键盘让位（inputPaused）。
             overlayPanel: launchpadOverlayUp ? pickerPanels : undefined, inputPaused: launchpadOverlayUp, onParamPick: (segment) => {
@@ -5642,10 +6122,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                     dispatchOverlay({ type: 'close' });
                 }
                 void runCommand(segment, '');
-            }, onQueryChange: (text, cursor) => {
-                setLaunchpadDraft(text);
-                setLaunchpadCaret(cursor);
-            }, onSubmit: closeLaunchpad, onFocusChange: setLaunchpadFocus, onAction: (action) => {
+            }, onQueryChange: changeLaunchpadDraft, onSubmit: submitLaunchpad, onFocusChange: setLaunchpadFocus, onAction: (action) => {
                 // 第八版（用户实测：「刚点帮助，不知道为什么直接进入聊天页面了」）：
                 // 帮助**不属于**离开启动页的两条路（Enter 发非命令消息 / 会话浏览
                 // 里选中会话）——它盖在落地页之上（overlay kind 'help'），再点同一
@@ -5663,6 +6140,8 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 // launchpadGate 的授权位（防御：异步误置的整屏状态盖不走启动页）。
                 // 其余命令（star / update——反馈在对话页的转录/通知）仍收掉落地页
                 // 再执行，这是用户主动执行命令，不是「返回」。
+                if (refusedAtStartup(action.command))
+                    return;
                 if (launchpadScreenCommands.has(action.command)) {
                     authorizeLaunchpadCover();
                 }
@@ -5693,26 +6172,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 ? undefined
                 : presetOptions.find(option => option.id === channel.agentPreset)?.name ?? channel.agentPreset, permission: launchpadPermission, commands: launchpadOverlayUp || !launchpadDraft.startsWith('/')
                 ? undefined
-                : channel.commandCompletions(launchpadDraft), onCommandPick: (commandLine) => {
-                // 补全面板选中（Enter/Tab/点击）：走 runCommand，与快捷入口同一条
-                // 白名单口径——覆盖层与整屏命令（第七版 launchpadScreenCommands）
-                // 不收落地页（盖在它之上），其余收掉再执行。/help 与快捷入口同一条
-                // 拦截：盖屏浮层，不进对话页（第八版）。
-                const parsed = parseCommandName(commandLine);
-                if (parsed === undefined)
-                    return;
-                if (parsed.name === 'help') {
-                    dispatchOverlay({ type: 'open', overlay: { kind: 'help' } });
-                    return;
-                }
-                if (launchpadScreenCommands.has(parsed.name)) {
-                    authorizeLaunchpadCover();
-                }
-                else if (!overlayCommandNames.has(parsed.name)) {
-                    setLaunchpadOpen(false);
-                }
-                void runCommand(parsed.name, parsed.rawInput);
-            }, cwd: channel.displayCwd, branch: channel.gitBranch, tuiVersion: tuiVersion, 
+                : channel.commandCompletions(launchpadDraft), onCommandPick: submitLaunchpad, cwd: channel.displayCwd, branch: channel.gitBranch, tuiVersion: tuiVersion, 
             // 右下角的内核行：与选择器同一份目录，标出当前内核，点它打开选择器。
             kernels: kernelOptions, onKernelPick: () => openKernelPicker(), 
             // 左下角工作目录铭牌（第七版）：点开/回车开既有 /workspace 菜单——
@@ -5772,7 +6232,7 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                 ? () => setPeekSuppressed(peekKey(activePreview.image, activePreview.title))
                 : () => dispatchOverlay({ type: 'close-if', kind: 'image-preview' }), region: imagePreviewRegion }))
         : null;
-    return (_jsxs(Box, { ref: wakeTickRef, flexDirection: "column", flexGrow: 1, width: "100%", children: [_jsxs(SidePanelLayout, { geometry: sidePanel.geometry, focus: sidePanel.focus, onActivateChat: sidePanel.focusChat, onActivatePanel: sidePanel.focusPanel, side: _jsx(SidePanelColumn, { width: sidePanel.panelColumns, controller: sidePanel, channel: channel, activity: workingActivity, attention: {
+    return (_jsxs(Box, { ref: wakeTickRef, flexDirection: "column", flexGrow: 1, width: "100%", children: [_jsxs(SidePanelLayout, { geometry: sidePanel.geometry, focus: sidePanel.focus, onActivateChat: sidePanel.focusChat, onActivatePanel: sidePanel.focusPanel, onResize: sidePanel.resize, side: _jsx(SidePanelColumn, { width: sidePanel.panelColumns, controller: sidePanel, channel: channel, activity: workingActivity, attention: {
                         approvals: approvalSnapshot !== null ? 1 : 0,
                         questions: questionSnapshot !== null ? 1 : 0,
                     }, trajectory: trajectory, onExpand: openPanelFullscreen }), children: [!isSticky && timeline.activeId !== null && (_jsx(PinnedTurnHeader, { text: anchorUserText || null, onClick: () => {
@@ -5852,6 +6312,9 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                                                     writeRaw?.(raw); });
                                                 channel.notify(t('copied-chars', { n: answer.length }), { timeoutMs: 1500 });
                                             } }) })) : questionPanelNode !== null ? (questionPanelNode) : null, _jsx(PromptInput, { channel: channel, suspended: promptReplacementOpen, 
+                                        // 选择器、搜索框或侧栏持有键盘焦点时，让对应输入框接管原生
+                                        // 光标与 IME 锚点，避免主输入框在后续提交中抢回声明。
+                                        cursorParking: overlay.kind === 'none' && sidePanel.focus !== 'panel', 
                                         // 宠物面板是活动面板时，通知由它的头顶气泡「说出来」，输入框上方
                                         // 不再重复弹同一条（error 色除外——可能要行动的信号永远走 toast）。
                                         // 渲染期判定（split + activePanelId），与气泡同一次提交切换，不会
@@ -5865,7 +6328,9 @@ export function Chat({ channel, questionStore, approvalStore, extensionDialogs,
                                         onOpenSessions: () => {
                                             agentViewOpenSessionRef.current = channel.agentId;
                                             setSupervisorOpen(true);
-                                        }, backgroundAgentsNeedingInput: 
+                                        }, 
+                                        // 当前内核的短品牌名：与选择器、落地页铭牌同一份 manifest 数据（P0 D2）。
+                                        backendLabel: kernelCurrentOption?.shortLabel, backgroundAgentsNeedingInput: 
                                         // Only the real channel supplies the seam; pre-agent-view test
                                         // stubs must not grow the footer row (layout-dependent
                                         // regressions pin the visible row count). The footer only
@@ -5920,15 +6385,12 @@ function NewMessagesPill({ count, onClick, }) {
                         ? t(count === 1 ? 'new-message' : 'new-messages', { n: count })
                         : t('back-to-bottom'), ' '] }) }) }));
 }
-/** /model while the provider catalog is still loading. */
-function ModelPickerLoading() {
-    return (_jsx(Pane, { color: "permission", children: _jsxs(Box, { flexDirection: "column", gap: 1, children: [_jsx(Text, { bold: true, color: "permission", children: t('picker-title-model') }), _jsx(LoadingState, { message: t('model-loading'), bold: true, subtitle: t('model-loading-subtitle') })] }) }));
-}
 /**
  * The `/` incsearch bar: a
  * single row above the prompt input with the query, a block cursor, and the
  * match counter (`current/count`) or a red `no matches` when nothing hits.
  */ function TranscriptSearch({ query, cursorOffset, count, current, }) {
-    const cursorChar = cursorOffset < query.length ? query[cursorOffset] : ' ';
-    return (_jsxs(NoSelect, { borderTopDimColor: true, borderBottom: false, borderLeft: false, borderRight: false, borderStyle: "single", marginTop: 1, paddingLeft: 2, width: "100%", children: [_jsx(Text, { children: "/" }), _jsx(Text, { children: query.slice(0, cursorOffset) }), _jsx(Text, { inverse: true, children: cursorChar }), cursorOffset < query.length && _jsx(Text, { children: query.slice(cursorOffset + 1) }), _jsx(Box, { flexGrow: 1 }), query && count === 0 ? (_jsxs(Text, { color: "error", children: [t('search-no-matches'), " "] })) : count > 0 ? (_jsxs(Text, { dimColor: true, children: [Math.min(current + 1, count), "/", count, '  '] })) : null] }));
+    const caretOffset = cursorOffset < query.length ? previousCodePoint(query, cursorOffset + 1) : query.length;
+    const cursorChar = [...query.slice(caretOffset)][0] ?? ' ';
+    return (_jsxs(NoSelect, { borderTopDimColor: true, borderBottom: false, borderLeft: false, borderRight: false, borderStyle: "single", marginTop: 1, paddingLeft: 2, width: "100%", children: [_jsx(Text, { children: "/" }), _jsx(Text, { children: query.slice(0, caretOffset) }), _jsx(InputCaret, { children: cursorChar }), caretOffset < query.length && _jsx(Text, { children: query.slice(caretOffset + cursorChar.length) }), _jsx(Box, { flexGrow: 1 }), query && count === 0 ? (_jsxs(Text, { color: "error", children: [t('search-no-matches'), " "] })) : count > 0 ? (_jsxs(Text, { dimColor: true, children: [Math.min(current + 1, count), "/", count, '  '] })) : null] }));
 }