@deepseek-harness-tui/dsh-tui 0.7.3 → 0.8.1

package/lib/types/plugin-spec/schema-check.js

@@ -0,0 +1,165 @@
+/**
+ * 零依赖 JSON Schema 校验器——上游 `conformance/tests/run.js` 的 check()
+ * 的保真 TS 移植。刻意只实现 vendored schemas 用到的子集：本地 $ref、
+ * oneOf（恰好一个匹配）、const/enum、object（required/additionalProperties:
+ * false/patternProperties）、array（min/maxItems/items/uniqueItems）、
+ * string（min/maxLength/pattern/format uri|date-time）、integer（minimum）、
+ * boolean。遇到子集之外的构件不静默放行——schema 更新引入新构件时这里
+ * 必须显式扩展（fixtures 矩阵会当场抓住）。
+ */
+/** Canonical JSON encoding for `uniqueItems`.  JSON object member order is not
+ * semantically significant, while `JSON.stringify` preserves insertion order
+ * and therefore lets equivalent objects evade duplicate detection. */
+function canonicalJson(value) {
+    if (value === null)
+        return 'null';
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(',')}]`;
+    switch (typeof value) {
+        case 'object': {
+            const record = value;
+            return `{${Object.keys(record).sort().map(key => `${JSON.stringify(key)}:${canonicalJson(record[key])}`).join(',')}}`;
+        }
+        case 'string': return JSON.stringify(value);
+        case 'number': return JSON.stringify(value) ?? 'null';
+        case 'boolean': return value ? 'true' : 'false';
+        case 'undefined': return 'undefined';
+        default: return `${typeof value}:${String(value)}`;
+    }
+}
+function resolveRef(rootSchema, ref) {
+    if (!ref.startsWith('#/')) {
+        throw new Error(`external ref is not supported by the zero-dependency checker: ${ref}`);
+    }
+    return ref
+        .slice(2)
+        .split('/')
+        .reduce((value, key) => {
+        const child = value[key.replace(/~1/g, '/').replace(/~0/g, '~')];
+        if (child === null || typeof child !== 'object') {
+            throw new Error(`unresolvable $ref segment "${key}" in ${ref}`);
+        }
+        return child;
+    }, rootSchema);
+}
+/**
+ * Validate `value` against `schema`; throws an Error with the failing path
+ * (`$.a.b[0]: reason`) on the first violation.
+ */
+export function check(value, schema, rootSchema = schema, where = '$') {
+    if (typeof schema.$ref === 'string') {
+        return check(value, resolveRef(rootSchema, schema.$ref), rootSchema, where);
+    }
+    // oneOf: exactly one variant must match (JSON Schema semantics). Variants
+    // are currently mutually exclusive by design; exact-one keeps future
+    // overlap from being silently accepted.
+    if (Array.isArray(schema.oneOf)) {
+        let matched = 0;
+        const errors = [];
+        for (const variant of schema.oneOf) {
+            try {
+                check(value, variant, rootSchema, where);
+                matched += 1;
+            }
+            catch (error) {
+                errors.push(error instanceof Error ? error.message : String(error));
+            }
+        }
+        if (matched !== 1) {
+            throw new Error(`${where}: expected exactly one oneOf match, got ${matched}: ${errors.join(' | ')}`);
+        }
+        return;
+    }
+    if (schema.const !== undefined && value !== schema.const) {
+        throw new Error(`${where}: expected ${JSON.stringify(schema.const)}`);
+    }
+    if (Array.isArray(schema.enum) && !schema.enum.includes(value)) {
+        throw new Error(`${where}: value is not in enum`);
+    }
+    if (schema.type === 'object') {
+        if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+            throw new Error(`${where}: expected object`);
+        }
+        const record = value;
+        for (const key of schema.required ?? []) {
+            if (!(key in record))
+                throw new Error(`${where}.${key}: required`);
+        }
+        // draft-2020-12: additionalProperties consults properties AND
+        // patternProperties — a key matching a declared pattern is not
+        // "additional".
+        if (schema.additionalProperties === false) {
+            const patterns = Object.keys(schema.patternProperties ?? {});
+            for (const key of Object.keys(record)) {
+                const declared = schema.properties?.[key] !== undefined;
+                const patterned = patterns.some(pattern => new RegExp(pattern).test(key));
+                if (!declared && !patterned)
+                    throw new Error(`${where}.${key}: additional property`);
+            }
+        }
+        for (const [key, child] of Object.entries(schema.properties ?? {})) {
+            if (key in record)
+                check(record[key], child, rootSchema, `${where}.${key}`);
+        }
+        if (schema.patternProperties !== undefined) {
+            for (const [pattern, child] of Object.entries(schema.patternProperties)) {
+                for (const name of Object.keys(record)) {
+                    if (new RegExp(pattern).test(name))
+                        check(record[name], child, rootSchema, `${where}.${name}`);
+                }
+            }
+        }
+        return;
+    }
+    if (schema.type === 'array') {
+        if (!Array.isArray(value))
+            throw new Error(`${where}: expected array`);
+        if (schema.minItems !== undefined && value.length < schema.minItems) {
+            throw new Error(`${where}: too few items`);
+        }
+        if (schema.maxItems !== undefined && value.length > schema.maxItems) {
+            throw new Error(`${where}: too many items`);
+        }
+        for (let i = 0; i < value.length; i++) {
+            check(value[i], schema.items, rootSchema, `${where}[${i}]`);
+        }
+        if (schema.uniqueItems === true) {
+            const encoded = value.map(canonicalJson);
+            if (new Set(encoded).size !== encoded.length)
+                throw new Error(`${where}: duplicate items`);
+        }
+        return;
+    }
+    if (schema.type === 'string') {
+        if (typeof value !== 'string')
+            throw new Error(`${where}: expected string`);
+        if (schema.minLength !== undefined && value.length < schema.minLength) {
+            throw new Error(`${where}: too short`);
+        }
+        if (schema.maxLength !== undefined && value.length > schema.maxLength) {
+            throw new Error(`${where}: too long`);
+        }
+        if (schema.pattern !== undefined && !new RegExp(schema.pattern).test(value)) {
+            throw new Error(`${where}: pattern mismatch`);
+        }
+        if (schema.format === 'uri' && !/^[A-Za-z][A-Za-z0-9+.-]*:\/\//.test(value)) {
+            throw new Error(`${where}: invalid URI`);
+        }
+        if (schema.format === 'date-time' && Number.isNaN(Date.parse(value))) {
+            throw new Error(`${where}: invalid date-time`);
+        }
+        return;
+    }
+    if (schema.type === 'integer') {
+        if (!Number.isInteger(value))
+            throw new Error(`${where}: expected integer`);
+        if (schema.minimum !== undefined && value < schema.minimum) {
+            throw new Error(`${where}: below minimum`);
+        }
+        return;
+    }
+    if (schema.type === 'boolean') {
+        if (typeof value !== 'boolean')
+            throw new Error(`${where}: expected boolean`);
+    }
+}

package/lib/types/plugin-spec/tui-extension.d.ts

@@ -0,0 +1,16 @@
+/** dsh-TUI private protocol registration on the shared dsh-std catalog. */
+import { ProtocolCatalog, type ProtocolDefinition } from '@dsh-std/core';
+import { ManifestDefinitionCatalog } from '@dsh-std/manifest';
+import type { ContractCoordinate } from './types.js';
+export declare const TUI_EXTENSION_API_VERSION = "tui.dsh/v1alpha1";
+export declare const DECISION_EVENTS_COORDINATE: Readonly<ContractCoordinate>;
+export declare const TUI_DECISION_EVENT_NAMES: readonly ["tui/input", "tui/rewind-prompt", "tui/rewind-done", "tui/session-switch", "tui/session-switched", "tui/compact"];
+export declare const TUI_EXTENSION_PERMISSION_NAMES: readonly ["session.input.intercept", "session.rewind.intercept", "session.switch.intercept", "session.compact.intercept"];
+export declare const decisionEventsDefinition: ProtocolDefinition;
+export interface AdmissionCatalog {
+    protocols: ProtocolCatalog;
+    manifests: ManifestDefinitionCatalog;
+}
+/** Register public and private definitions into one evaluator-owned catalog. */
+export declare function createAdmissionCatalog(): AdmissionCatalog;
+//# sourceMappingURL=tui-extension.d.ts.map

package/lib/types/plugin-spec/tui-extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui-extension.d.ts","sourceRoot":"","sources":["../../../src/plugin-spec/tui-extension.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EAAE,eAAe,EAAE,KAAK,kBAAkB,EAAsB,MAAM,eAAe,CAAA;AAC5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAK7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAEpD,eAAO,MAAM,yBAAyB,qBAAqB,CAAA;AAE3D,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,kBAAkB,CAGlE,CAAA;AAEF,eAAO,MAAM,wBAAwB,6HAO1B,CAAA;AAEX,eAAO,MAAM,8BAA8B,2HAKhC,CAAA;AAiBX,eAAO,MAAM,wBAAwB,EAAE,kBAsBrC,CAAA;AAEF,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,eAAe,CAAA;IAC1B,SAAS,EAAE,yBAAyB,CAAA;CACrC;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,IAAI,gBAAgB,CASzD"}

package/lib/types/plugin-spec/tui-extension.js

@@ -0,0 +1,77 @@
+/** dsh-TUI private protocol registration on the shared dsh-std catalog. */
+import { ProtocolCatalog } from '@dsh-std/core';
+import { ManifestDefinitionCatalog } from '@dsh-std/manifest';
+import { register as registerCommand } from '@dsh-std/command';
+import { register as registerMessages } from '@dsh-std/messages';
+import { register as registerPresentation } from '@dsh-std/presentation';
+import { register as registerStorage } from '@dsh-std/storage';
+export const TUI_EXTENSION_API_VERSION = 'tui.dsh/v1alpha1';
+export const DECISION_EVENTS_COORDINATE = Object.freeze({
+    apiVersion: TUI_EXTENSION_API_VERSION,
+    kind: 'DecisionEvents',
+});
+export const TUI_DECISION_EVENT_NAMES = Object.freeze([
+    'tui/input',
+    'tui/rewind-prompt',
+    'tui/rewind-done',
+    'tui/session-switch',
+    'tui/session-switched',
+    'tui/compact',
+]);
+export const TUI_EXTENSION_PERMISSION_NAMES = Object.freeze([
+    'session.input.intercept',
+    'session.rewind.intercept',
+    'session.switch.intercept',
+    'session.compact.intercept',
+]);
+function featureSupport(value) {
+    if (value === undefined)
+        return Object.freeze({ features: Object.freeze([]) });
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        throw new TypeError('DecisionEvents support spec must be an object');
+    }
+    const record = value;
+    const unknown = Object.keys(record).filter(key => key !== 'features' && !key.startsWith('x-'));
+    if (unknown.length > 0)
+        throw new TypeError(`DecisionEvents support spec contains unknown field ${JSON.stringify(unknown[0])}`);
+    if (record.features !== undefined && (!Array.isArray(record.features)
+        || record.features.some(feature => typeof feature !== 'string' || feature.trim() === ''))) {
+        throw new TypeError('DecisionEvents support spec.features must be an array of non-empty strings');
+    }
+    return Object.freeze({ features: Object.freeze([...(record.features ?? [])].sort()) });
+}
+export const decisionEventsDefinition = Object.freeze({
+    ...DECISION_EVENTS_COORDINATE,
+    validateRequirement(value) {
+        if (value !== undefined)
+            throw new TypeError('DecisionEvents requirement does not accept spec in manifest v0.15');
+        return undefined;
+    },
+    validateSupport: featureSupport,
+    negotiate(input) {
+        const providers = [...new Set(input.supports.map(row => row.participant))].sort();
+        const issues = input.requirements.flatMap(row => providers.length === 0
+            ? [{
+                    code: row.requirement.optional === true ? 'optional-support-missing' : 'required-support-missing',
+                    severity: row.requirement.optional === true ? 'warning' : 'error',
+                    participant: row.participant,
+                    message: 'DecisionEvents has no provider in this negotiation scope',
+                }]
+            : []);
+        return {
+            agreement: Object.freeze({ providers: Object.freeze(providers) }),
+            issues: Object.freeze(issues),
+        };
+    },
+});
+/** Register public and private definitions into one evaluator-owned catalog. */
+export function createAdmissionCatalog() {
+    const protocols = new ProtocolCatalog({ name: 'dsh-tui-admission', version: '0.15' });
+    const manifests = new ManifestDefinitionCatalog();
+    registerCommand(protocols, manifests);
+    registerStorage(protocols);
+    registerMessages(protocols);
+    registerPresentation(protocols);
+    protocols.register(decisionEventsDefinition);
+    return { protocols, manifests };
+}

package/lib/types/plugin-spec/types.d.ts

@@ -0,0 +1,114 @@
+/** Types shared by the dsh-std admission adapter and the TUI runtime. */
+import type { PluginManifest as StandardPluginManifest } from '@dsh-std/manifest';
+export interface ContractCoordinate {
+    apiVersion: string;
+    kind: string;
+}
+export interface ContractRef extends ContractCoordinate {
+    optional?: boolean;
+    fallback?: string;
+}
+export interface ManifestPermission {
+    name: string;
+    scope: string;
+    reason?: string;
+}
+export type SubscriptionRef = ContractCoordinate & {
+    scope?: string;
+} | string;
+/** Community v0.15 is parsed and frozen by @dsh-std/manifest. */
+export type PluginManifest = StandardPluginManifest;
+export type HostContractDefinition = {
+    source: 'dsh-std';
+    package: `@dsh-std/${string}`;
+} | {
+    source: 'tui-profile';
+    profileHash: `sha256:${string}`;
+};
+export interface HostContract extends ContractCoordinate {
+    spec?: unknown;
+    definition: HostContractDefinition;
+    permissions: string[];
+}
+export interface HostDescriptor {
+    $schema: 'urn:dsh-tui:host-descriptor:0.15';
+    hostId: string;
+    hostVersion: string;
+    facetApiVersions: string[];
+    contracts: HostContract[];
+    runtime: {
+        location: 'local' | 'remote' | 'container';
+        generationId: string;
+        headless: boolean;
+        remoteAttach?: boolean;
+    };
+    trustLevel: 'trusted-in-process';
+    platform: {
+        os: string;
+        arch: string;
+        node?: string;
+    };
+}
+export type NegotiationDecision = {
+    decision: 'compatible';
+} | {
+    decision: 'compatible_degraded';
+    missingOptional: string[];
+} | {
+    decision: 'waiting_authorization';
+    reasonCode: string;
+    deniedPermissions: string[];
+} | {
+    decision: 'rejected';
+    reasonCode: string;
+    missingRequired?: string[];
+    facetApiVersion?: string;
+    hostFacetApiVersions?: string[];
+    issues?: readonly unknown[];
+} | {
+    decision: 'unknown';
+    reasonCode: string;
+    unknownContracts: string[];
+};
+export declare const NEGOTIATION_ERROR_CODES: readonly ["REQUIRED_PROTOCOL_UNAVAILABLE", "PROTOCOL_NEGOTIATION_FAILED", "FACET_API_VERSION_UNAVAILABLE", "PERMISSION_NOT_GRANTED", "UNKNOWN_PROTOCOL_VERSION", "DUPLICATE_CONTRIBUTION_ID", "INVALID_MANIFEST"];
+export type NegotiationErrorCode = (typeof NEGOTIATION_ERROR_CODES)[number];
+export interface PermissionEntry {
+    name: string;
+    default: 'allow' | 'deny';
+    revocable: boolean;
+    scope: string;
+    rationale?: string;
+}
+export interface PermissionRegistry {
+    registryVersion: string;
+    permissions: PermissionEntry[];
+}
+interface RegistryEntryBase {
+    name: string;
+    coordinates: ContractCoordinate;
+    kind: 'capability' | 'event';
+    permissions: string[];
+    eventEnvelope?: string;
+}
+export interface ImportedRegistryEntry extends RegistryEntryBase {
+    package: `@dsh-std/${string}`;
+}
+export interface PrivateRegistryEntry extends RegistryEntryBase {
+    authority: 'dsh-tui';
+    profile: string;
+    profileHash: `sha256:${string}`;
+}
+export type RegistryEntry = ImportedRegistryEntry | PrivateRegistryEntry;
+export interface ContractRegistry {
+    profileVersion: string;
+    std: {
+        repository: string;
+        submodule: string;
+        manifestVersion: string;
+    };
+    imports: ImportedRegistryEntry[];
+    definitions: PrivateRegistryEntry[];
+    facetApiVersions: string[];
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/lib/types/plugin-spec/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/plugin-spec/types.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE,OAAO,KAAK,EAAE,cAAc,IAAI,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAEjF,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,WAAY,SAAQ,kBAAkB;IACrD,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,eAAe,GAAG,kBAAkB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAA;AAE9E,iEAAiE;AACjE,MAAM,MAAM,cAAc,GAAG,sBAAsB,CAAA;AAEnD,MAAM,MAAM,sBAAsB,GAC9B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,YAAY,MAAM,EAAE,CAAA;CAAE,GACpD;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,UAAU,MAAM,EAAE,CAAA;CAAE,CAAA;AAE9D,MAAM,WAAW,YAAa,SAAQ,kBAAkB;IACtD,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,UAAU,EAAE,sBAAsB,CAAA;IAClC,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,kCAAkC,CAAA;IAC3C,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,SAAS,EAAE,YAAY,EAAE,CAAA;IACzB,OAAO,EAAE;QACP,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAA;QAC1C,YAAY,EAAE,MAAM,CAAA;QACpB,QAAQ,EAAE,OAAO,CAAA;QACjB,YAAY,CAAC,EAAE,OAAO,CAAA;KACvB,CAAA;IACD,UAAU,EAAE,oBAAoB,CAAA;IAChC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,EAAE,YAAY,CAAA;CAAE,GAC1B;IAAE,QAAQ,EAAE,qBAAqB,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9D;IAAE,QAAQ,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAAE,GACtF;IACE,QAAQ,EAAE,UAAU,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;CAC5B,GACD;IAAE,QAAQ,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE3E,eAAO,MAAM,uBAAuB,mNAQ1B,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE3E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,GAAG,MAAM,CAAA;IACzB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,WAAW,EAAE,eAAe,EAAE,CAAA;CAC/B;AAED,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,kBAAkB,CAAA;IAC/B,IAAI,EAAE,YAAY,GAAG,OAAO,CAAA;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,OAAO,EAAE,YAAY,MAAM,EAAE,CAAA;CAC9B;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,SAAS,EAAE,SAAS,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,UAAU,MAAM,EAAE,CAAA;CAChC;AAED,MAAM,MAAM,aAAa,GAAG,qBAAqB,GAAG,oBAAoB,CAAA;AAExE,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAA;IACtB,GAAG,EAAE;QACH,UAAU,EAAE,MAAM,CAAA;QAClB,SAAS,EAAE,MAAM,CAAA;QACjB,eAAe,EAAE,MAAM,CAAA;KACxB,CAAA;IACD,OAAO,EAAE,qBAAqB,EAAE,CAAA;IAChC,WAAW,EAAE,oBAAoB,EAAE,CAAA;IACnC,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B"}

package/lib/types/plugin-spec/types.js

@@ -0,0 +1,10 @@
+/** Types shared by the dsh-std admission adapter and the TUI runtime. */
+export const NEGOTIATION_ERROR_CODES = [
+    'REQUIRED_PROTOCOL_UNAVAILABLE',
+    'PROTOCOL_NEGOTIATION_FAILED',
+    'FACET_API_VERSION_UNAVAILABLE',
+    'PERMISSION_NOT_GRANTED',
+    'UNKNOWN_PROTOCOL_VERSION',
+    'DUPLICATE_CONTRIBUTION_ID',
+    'INVALID_MANIFEST',
+];

package/lib/types/plugin-spec/validate.d.ts

@@ -0,0 +1,21 @@
+/** Semantic validation layered on the official manifest parser/projection. */
+import { createAdmissionCatalog } from './tui-extension.js';
+import type { ContractCoordinate, ContractRegistry, HostDescriptor, PermissionRegistry, PluginManifest, RegistryEntry, SubscriptionRef } from './types.js';
+export interface ContractIndex {
+    registry: ContractRegistry;
+    permissions: PermissionRegistry;
+    facetApiVersions: string[];
+    protocols: ReturnType<typeof createAdmissionCatalog>['protocols'];
+    manifests: ReturnType<typeof createAdmissionCatalog>['manifests'];
+    lookupContract(coordinate: ContractCoordinate): RegistryEntry | undefined;
+    resolveContractRef(ref: ContractCoordinate): {
+        entry: RegistryEntry | null;
+        unregisteredVersion: boolean;
+    };
+    resolveSubscription(sub: SubscriptionRef): RegistryEntry;
+}
+export declare const groupOf: (apiVersion: string) => string;
+export declare function createContractIndex(registry: ContractRegistry, permissions: PermissionRegistry): ContractIndex;
+export declare function validatePlugin(index: ContractIndex, manifest: PluginManifest): void;
+export declare function validateHost(index: ContractIndex, host: HostDescriptor): void;
+//# sourceMappingURL=validate.d.ts.map

package/lib/types/plugin-spec/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/plugin-spec/validate.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAG9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAG3D,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,eAAe,EAChB,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,WAAW,EAAE,kBAAkB,CAAA;IAC/B,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,SAAS,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC,WAAW,CAAC,CAAA;IACjE,SAAS,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC,WAAW,CAAC,CAAA;IACjE,cAAc,CAAC,UAAU,EAAE,kBAAkB,GAAG,aAAa,GAAG,SAAS,CAAA;IACzE,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,GAAG;QAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;QAAC,mBAAmB,EAAE,OAAO,CAAA;KAAE,CAAA;IAC1G,mBAAmB,CAAC,GAAG,EAAE,eAAe,GAAG,aAAa,CAAA;CACzD;AAGD,eAAO,MAAM,OAAO,GAAI,YAAY,MAAM,KAAG,MAAwC,CAAA;AAErF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,kBAAkB,GAAG,aAAa,CAsC9G;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAwCnF;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,GAAG,IAAI,CA4B7E"}

package/lib/types/plugin-spec/validate.js

@@ -0,0 +1,119 @@
+/** Semantic validation layered on the official manifest parser/projection. */
+import { projectManifest } from '@dsh-std/manifest';
+import { createAdmissionCatalog } from './tui-extension.js';
+import { registryEntries } from './registry.js';
+import { INTERCEPT_PERMISSIONS, normalizePermissionScope } from './permission-scope.js';
+const coordinateKey = (coordinate) => `${coordinate.apiVersion}#${coordinate.kind}`;
+export const groupOf = (apiVersion) => apiVersion.split('/')[0] ?? '';
+export function createContractIndex(registry, permissions) {
+    const entries = registryEntries(registry);
+    const byCoordinate = new Map(entries.map(entry => [coordinateKey(entry.coordinates), entry]));
+    const byName = new Map(entries.map(entry => [entry.name, entry]));
+    const { protocols, manifests } = createAdmissionCatalog();
+    const resolveContractRef = (ref) => {
+        const exact = byCoordinate.get(coordinateKey(ref));
+        if (exact !== undefined)
+            return { entry: exact, unregisteredVersion: false };
+        const sameGroup = entries.filter(entry => groupOf(entry.coordinates.apiVersion) === groupOf(ref.apiVersion));
+        if (sameGroup.length === 0)
+            throw new Error(`unknown protocol group: ${groupOf(ref.apiVersion)}`);
+        if (!sameGroup.some(entry => entry.coordinates.kind === ref.kind)) {
+            throw new Error(`unknown protocol kind: ${coordinateKey(ref)}`);
+        }
+        return { entry: null, unregisteredVersion: true };
+    };
+    const resolveSubscription = (subscription) => {
+        const entry = typeof subscription === 'string'
+            ? byName.get(subscription)
+            : byCoordinate.get(coordinateKey(subscription));
+        if (entry === undefined) {
+            throw new Error(`unknown subscription: ${typeof subscription === 'string' ? subscription : coordinateKey(subscription)}`);
+        }
+        if (entry.kind !== 'event')
+            throw new Error(`subscription must reference an event: ${entry.name}`);
+        return entry;
+    };
+    return {
+        registry,
+        permissions,
+        facetApiVersions: [...registry.facetApiVersions],
+        protocols,
+        manifests,
+        lookupContract: coordinate => byCoordinate.get(coordinateKey(coordinate)),
+        resolveContractRef,
+        resolveSubscription,
+    };
+}
+export function validatePlugin(index, manifest) {
+    if (!index.facetApiVersions.includes(manifest.facets.host.apiVersion)) {
+        throw new Error(`facet apiVersion is not admitted: ${manifest.facets.host.apiVersion}`);
+    }
+    for (const requirement of manifest.requires.contracts) {
+        index.resolveContractRef(requirement);
+        if (requirement.optional === true && !requirement.fallback) {
+            throw new Error(`optional protocol requires a TUI fallback: ${coordinateKey(requirement)}`);
+        }
+    }
+    for (const subscription of manifest.subscriptions)
+        index.resolveSubscription(subscription);
+    const knownPermissions = new Set(index.permissions.permissions.map(permission => permission.name));
+    const commandIds = new Set(manifest.contributes.commands.map(command => command.id));
+    const requiresDecisionEvents = manifest.requires.contracts.some(requirement => requirement.apiVersion === 'tui.dsh/v1alpha1' && requirement.kind === 'DecisionEvents');
+    for (const permission of manifest.permissions) {
+        if (!knownPermissions.has(permission.name)) {
+            throw new Error(`permission is not admitted by the TUI profile: ${permission.name}`);
+        }
+        if (normalizePermissionScope(permission.name, permission.scope, manifest.id) === undefined) {
+            throw new Error(`permission scope cannot be enforced: ${permission.name}@${permission.scope}`);
+        }
+        if (permission.name === 'commands.invoke' && !commandIds.has(permission.scope)) {
+            throw new Error(`commands.invoke scope is not a declared command: ${permission.scope}`);
+        }
+        if (INTERCEPT_PERMISSIONS.has(permission.name) && !requiresDecisionEvents) {
+            throw new Error(`${permission.name} requires tui.dsh/v1alpha1#DecisionEvents`);
+        }
+    }
+    for (const commandId of commandIds) {
+        if (!manifest.permissions.some(permission => permission.name === 'commands.invoke' && permission.scope === commandId)) {
+            throw new Error(`declared command is missing commands.invoke permission scope: ${commandId}`);
+        }
+    }
+    const projected = projectManifest(manifest);
+    const report = index.manifests.validate(projected, index.protocols);
+    const errors = report.issues.filter(issue => issue.severity === 'error');
+    if (errors.length > 0)
+        throw new Error(errors.map(issue => issue.message).join('; '));
+}
+export function validateHost(index, host) {
+    const seen = new Set();
+    const knownPermissions = new Set(index.permissions.permissions.map(permission => permission.name));
+    for (const contract of host.contracts) {
+        const key = coordinateKey(contract);
+        if (seen.has(key))
+            throw new Error(`host declares duplicate protocol: ${key}`);
+        seen.add(key);
+        const entry = index.lookupContract(contract);
+        const definition = index.protocols.resolve(contract);
+        if (entry === undefined || definition === undefined)
+            throw new Error(`host declares an unknown protocol: ${key}`);
+        definition.validateSupport(Object.hasOwn(contract, 'spec') ? contract.spec : undefined);
+        if ('package' in entry) {
+            if (contract.definition.source !== 'dsh-std' || contract.definition.package !== entry.package) {
+                throw new Error(`host dsh-std definition source mismatch: ${key}`);
+            }
+        }
+        else if (contract.definition.source !== 'tui-profile' || contract.definition.profileHash !== entry.profileHash) {
+            throw new Error(`host TUI profile definition hash mismatch: ${key}`);
+        }
+        const expectedPermissions = [...entry.permissions].sort();
+        const actualPermissions = [...contract.permissions].sort();
+        if (expectedPermissions.length !== actualPermissions.length
+            || expectedPermissions.some((permission, index) => permission !== actualPermissions[index])) {
+            throw new Error(`host permission advertisement mismatch: ${key}`);
+        }
+        for (const permission of contract.permissions) {
+            if (!knownPermissions.has(permission))
+                throw new Error(`host declares unknown permission: ${permission}`);
+        }
+    }
+}

package/lib/types/scenes.d.ts

@@ -0,0 +1,3 @@
+export * from './dsh-adapter/scenes.js';
+export { default } from './dsh-adapter/scenes.js';
+//# sourceMappingURL=scenes.d.ts.map

package/lib/types/scenes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenes.d.ts","sourceRoot":"","sources":["../../src/scenes.ts"],"names":[],"mappings":"AAEA,cAAc,yBAAyB,CAAA;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA"}

package/lib/types/scenes.js

@@ -0,0 +1,4 @@
+// Re-export shim: the Cordis-backed implementation lives behind the adapter
+// boundary so UI consumers never import official @deepseek-ai/* packages.
+export * from './dsh-adapter/scenes.js';
+export { default } from './dsh-adapter/scenes.js';

package/lib/types/screens/Chat.d.ts

@@ -1,8 +1,11 @@
 import React from 'react';
 import { type Channel } from '../dsh-adapter/channel.js';
 import type { QuestionStore } from '../dsh-adapter/questions.js';
+import { TuiDialogStore } from '../dsh-adapter/dialogs.js';
+import { TuiStatusStore } from '../dsh-adapter/status.js';
+import type { TuiShortcutRuntime } from '../dsh-adapter/shortcuts.js';
 import { ApprovalStore } from '../dsh-adapter/approvals.js';
-export declare function Chat({ channel, questionStore, approvalStore, onExit, onUpdate, fullscreen, trajectorySeen: trajectorySeenProp, }: {
+export declare function Chat({ channel, questionStore, approvalStore, extensionDialogs, extensionStatus, extensionShortcuts, onExit, onUpdate, fullscreen, trajectorySeen: trajectorySeenProp, }: {
     channel: Channel;
     questionStore: QuestionStore;
     /**
@@ -11,6 +14,16 @@ export declare function Chat({ channel, questionStore, approvalStore, onExit, on
      * simply never see an approval panel — the question panel keeps its seat.
      */
     approvalStore?: ApprovalStore;
+    /**
+     * The managed plugin dialog queue (tuiDialogs service's store). Optional
+     * for the same hosts as approvalStore; absent, plugin dialog requests
+     * park unanswered (their `timeoutMs` is the plugin's guard).
+     */
+    extensionDialogs?: TuiDialogStore;
+    /** Plugin status-line contributions (tuiStatus service's store). */
+    extensionStatus?: TuiStatusStore;
+    /** Plugin keyboard shortcut registry (tuiShortcuts service). */
+    extensionShortcuts?: TuiShortcutRuntime;
     onExit: () => void;
     /** Update the installed package and restart the current TUI process. */
     onUpdate?: () => void;

package/lib/types/screens/Chat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Chat.d.ts","sourceRoot":"","sources":["../../../src/screens/Chat.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAA;AAQzB,OAAO,EAAqB,KAAK,OAAO,EAAsD,MAAM,2BAA2B,CAAA;AAC/H,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AA0H3D,wBAAgB,IAAI,CAAC,EACnB,OAAO,EACP,aAAa,EACb,aAAa,EACb,MAAM,EACN,QAAQ,EACR,UAAkB,EAClB,cAAc,EAAE,kBAAkB,GACnC,EAAE;IACD,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,aAAa,CAAA;IAC5B;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,MAAM,EAAE,MAAM,IAAI,CAAA;IAClB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB,qBA02DA"}
+{"version":3,"file":"Chat.d.ts","sourceRoot":"","sources":["../../../src/screens/Chat.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAA;AASzB,OAAO,EAAqB,KAAK,OAAO,EAAsE,MAAM,2BAA2B,CAAA;AAC/I,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAGrE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAwI3D,wBAAgB,IAAI,CAAC,EACnB,OAAO,EACP,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,MAAM,EACN,QAAQ,EACR,UAAkB,EAClB,cAAc,EAAE,kBAAkB,GACnC,EAAE;IACD,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,aAAa,CAAA;IAC5B;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,cAAc,CAAA;IACjC,oEAAoE;IACpE,eAAe,CAAC,EAAE,cAAc,CAAA;IAChC,gEAAgE;IAChE,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IACvC,MAAM,EAAE,MAAM,IAAI,CAAA;IAClB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB,qBA6jEA"}