@deepseek-harness-tui/dsh-tui 0.8.0 → 0.8.2

package/lib/types/dsh-adapter/extension-events.d.ts

@@ -0,0 +1,193 @@
+/**
+ * Decision-point events the TUI fires on the cordis bus so plugins can
+ * intercept, cancel, or customize interactive flows — the `session_before_*`
+ * style seam (pi's `session_before_fork` / `input` events) expressed in
+ * cordis dispatch semantics.
+ *
+ * All of these are FIRED BY THE CHANNEL and answered by admitted Components
+ * through the host-mediated DecisionEvents registry. No extra service row is
+ * involved: an absent handler simply means "no opinion", and the built-in
+ * flow proceeds unchanged. Dispatch is SERIAL in the registry's stable order
+ * with the first VALID decision winning — see {@link dispatchTuiDecision} for
+ * why this is not raw `ctx.serial`: per-handler crash isolation, deadlines and
+ * return-value normalization mean a broken or malformed handler can never
+ * skip a later (possibly safety) veto.
+ *
+ * Synchronous-only rule: handlers may be async, but while a decision is
+ * awaited the originating UI flow is parked (the submit is not delivered,
+ * the rewind confirm has not happened). Handlers that need user input should
+ * use the managed dialogs (`ctx.tuiDialogs`) or open a scene, then resolve.
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/** Explicit budgets from the DecisionEvents profile.  A timed-out handler is
+ * treated as no-opinion and the chain continues; once the total budget is
+ * exhausted the remaining handlers are skipped with the same policy. */
+export declare const DECISION_HANDLER_TIMEOUT_MS = 1000;
+export declare const DECISION_TOTAL_TIMEOUT_MS = 5000;
+/**
+ * Dispatch a decision event listener-by-listener in the host's stable order.
+ *
+ * Deliberately NOT `ctx.serial`: cordis bails at ANY non-null/false/undefined
+ * return, so a malformed-but-object decision (a blank `{ text }` rewrite, a
+ * junk primitive) would cut the chain before a later veto listener runs —
+ * and one throwing listener rejects the whole dispatch, skipping every later
+ * listener. Here:
+ *
+ * - a throwing listener is logged and the chain CONTINUES;
+ * - each return value passes through `normalize` (per-event validation)
+ *   INSIDE the same isolation boundary — a Proxy/throwing-getter return is
+ *   logged and skipped like any other invalid shape;
+ * - "no opinion" (undefined/null/false) and invalid shapes are logged and
+ *   the chain CONTINUES;
+ * - the first listener whose NORMALIZED decision is non-undefined wins.
+ *
+ * Handlers come from the host-mediated DecisionEvents registry.  Raw Cordis
+ * `ctx.on` listeners are intentionally absent from this path.
+ */
+export declare function dispatchTuiDecision<T>(ctx: Context, name: string, payload: Record<string, unknown>, normalize: (result: unknown, warn: (what: string) => void) => T | undefined): Promise<T | undefined>;
+/** Fire a non-veto DecisionEvents point with the same bounded, isolated
+ * semantics.  Notifications deliberately ignore every return value. */
+export declare function dispatchTuiNotification(ctx: Context, name: string, payload: Record<string, unknown>): Promise<void>;
+/** Shared normalizer for the veto-only decisions (session-switch, compact):
+ *  `{ cancel: true, reason? }` or no opinion; everything else is ignored.
+ *  The reason is toast-bound plugin text — sanitized (a veto must not
+ *  smuggle control sequences onto the screen). */
+export declare function normalizeCancelDecision(result: unknown, warn: (what: string) => void): {
+    cancel: true;
+    reason?: string;
+} | undefined;
+/** Shared context every decision event carries. */
+export interface TuiDecisionContext {
+    /** The live session (agent) id the flow belongs to. */
+    sessionId: string;
+    /** Working directory of the session. */
+    cwd: string;
+}
+/**
+ * Fired before user-typed text is delivered to the model (`submit` and
+ * `steer`; local `!`/`!!` shell lines never fire it — they are not model
+ * input). The message is NOT yet in the session log; nothing is observable
+ * from the transcript at this point.
+ */
+export interface TuiInputEvent extends TuiDecisionContext {
+    /** The trimmed text as typed. */
+    text: string;
+    /** Where the text would go: a new turn (`followup`) or the running one. */
+    delivery: 'followup' | 'steer';
+}
+export type TuiInputDecision = 
+/** Replace the text; the substitute is delivered instead. */
+{
+    text: string;
+}
+/** The plugin consumed the input itself; nothing is delivered. An optional
+ *  notice is toasted so the user is not left wondering where the line went. */
+ | {
+    handled: true;
+    notice?: string;
+}
+/** Drop the input; an optional reason is toasted as a warning. */
+ | {
+    cancel: true;
+    reason?: string;
+}
+/** No opinion — delivery proceeds unchanged. */
+ | undefined;
+/**
+ * Fired when the rewind picker confirms a message, BEFORE the fork happens.
+ * `seq` is the session event seq of the picked user message (the fork itself
+ * lands just before its turn — see channel.rewindTo).
+ */
+export interface TuiRewindPromptEvent extends TuiDecisionContext {
+    /** Text of the picked message. */
+    text: string;
+    /** Session event seq of the picked message. */
+    seq: number;
+}
+/** One extra rewind mode offered by a plugin (e.g. "also restore files"). */
+export interface TuiRewindMode {
+    /** Stable id reported back in `TuiRewindDoneEvent.mode`. */
+    id: string;
+    /** One-line label shown in the confirm pane. */
+    label: string;
+    /** Optional dimmed description under the label. */
+    description?: string;
+}
+export type TuiRewindPromptDecision = 
+/** Abort the rewind; the picker stays open. Optional reason is toasted. */
+{
+    cancel: true;
+    reason?: string;
+}
+/** Extra choices rendered in the confirm pane on top of the built-in
+ *  conversation-only rewind (which stays option zero). */
+ | {
+    modes: readonly TuiRewindMode[];
+}
+/** No opinion — the plain confirm pane shows, exactly as before. */
+ | undefined;
+/**
+ * Fired after a rewind completed: the forked session is live and the
+ * transcript replayed. The first listener returning a non-empty string has
+ * it toasted as the post-rewind summary (serial bail semantics).
+ */
+export interface TuiRewindDoneEvent extends TuiDecisionContext {
+    /** Text of the message that was rewound to (back in the input). */
+    text: string;
+    /** The mode id the user picked, or null for the built-in
+     *  conversation-only rewind. */
+    mode: string | null;
+    /** Inclusive source seq the fork cut at (the child's seed end). */
+    boundarySeq: number;
+    /** The session that was forked away from. */
+    sourceSessionId: string;
+    /** The freshly created fork session — now the live one. */
+    childSessionId: string;
+}
+/**
+ * Fired before the live session is replaced (`/new` or `/resume`; rewind has
+ * its own prompt event above). `targetSessionId` is set for resume only.
+ */
+export interface TuiSessionSwitchEvent extends TuiDecisionContext {
+    kind: 'new' | 'resume';
+    targetSessionId?: string;
+}
+export type TuiSessionSwitchDecision = 
+/** Abort the switch; the current session stays live. Optional reason is
+ *  toasted as a warning. */
+{
+    cancel: true;
+    reason?: string;
+} | undefined;
+/**
+ * Notification (parallel, fire-and-forget) after the live session changed.
+ * Listener errors are logged, never propagated. Rebind per-session state
+ * here; `previousSessionId` is undefined only when there was nothing live
+ * before (not currently produced — every switch has a live source).
+ */
+export interface TuiSessionSwitchedEvent extends TuiDecisionContext {
+    kind: 'new' | 'resume' | 'rewind';
+    /** The session that just went live. */
+    sessionId: string;
+    previousSessionId?: string;
+}
+/** Fired before manual `/compact` runs. */
+export interface TuiCompactEvent extends TuiDecisionContext {
+}
+export type TuiCompactDecision = 
+/** Abort the compaction; optional reason is toasted as a warning. */
+{
+    cancel: true;
+    reason?: string;
+} | undefined;
+declare module '@deepseek-ai/cordis' {
+    interface Events {
+        'tui/input'(event: TuiInputEvent): TuiInputDecision | Promise<TuiInputDecision>;
+        'tui/rewind-prompt'(event: TuiRewindPromptEvent): TuiRewindPromptDecision | Promise<TuiRewindPromptDecision>;
+        'tui/rewind-done'(event: TuiRewindDoneEvent): string | undefined | Promise<string | undefined>;
+        'tui/session-switch'(event: TuiSessionSwitchEvent): TuiSessionSwitchDecision | Promise<TuiSessionSwitchDecision>;
+        'tui/session-switched'(event: TuiSessionSwitchedEvent): void | Promise<void>;
+        'tui/compact'(event: TuiCompactEvent): TuiCompactDecision | Promise<TuiCompactDecision>;
+    }
+}
+//# sourceMappingURL=extension-events.d.ts.map

package/lib/types/dsh-adapter/extension-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-events.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/extension-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAYlD;;wEAEwE;AACxE,eAAO,MAAM,2BAA2B,OAAO,CAAA;AAC/C,eAAO,MAAM,yBAAyB,OAAO,CAAA;AA4C7C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,GAAG,SAAS,GAC1E,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CA4DxB;AAED;uEACuE;AACvE,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAwCf;AAED;;;kDAGkD;AAClD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC3B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQ/C;AAED,mDAAmD;AACnD,MAAM,WAAW,kBAAkB;IACjC,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAA;IACjB,wCAAwC;IACxC,GAAG,EAAE,MAAM,CAAA;CACZ;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAc,SAAQ,kBAAkB;IACvD,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,2EAA2E;IAC3E,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAA;CAC/B;AAED,MAAM,MAAM,gBAAgB;AAC1B,6DAA6D;AAC3D;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE;AAClB;+EAC+E;GAC7E;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACpC,kEAAkE;GAChE;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACnC,gDAAgD;GAC9C,SAAS,CAAA;AAEb;;;;GAIG;AACH,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,EAAE,EAAE,MAAM,CAAA;IACV,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,MAAM,uBAAuB;AACjC,2EAA2E;AACzE;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACnC;0DAC0D;GACxD;IAAE,KAAK,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE;AACrC,oEAAoE;GAClE,SAAS,CAAA;AAEb;;;;GAIG;AACH,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC5D,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAA;IACZ;oCACgC;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAA;IACnB,6CAA6C;IAC7C,eAAe,EAAE,MAAM,CAAA;IACvB,2DAA2D;IAC3D,cAAc,EAAE,MAAM,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,MAAM,wBAAwB;AAClC;4BAC4B;AAC1B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACjC,SAAS,CAAA;AAEb;;;;;GAKG;AACH,MAAM,WAAW,uBAAwB,SAAQ,kBAAkB;IACjE,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACjC,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAA;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAgB,SAAQ,kBAAkB;CAAG;AAE9D,MAAM,MAAM,kBAAkB;AAC5B,qEAAqE;AACnE;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACjC,SAAS,CAAA;AAEb,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,MAAM;QACd,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC/E,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,GAAG,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;QAC5G,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;QAC9F,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,GAAG,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;QAChH,sBAAsB,CAAC,KAAK,EAAE,uBAAuB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5E,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;KACxF;CACF"}

package/lib/types/dsh-adapter/extension-events.js

@@ -0,0 +1,207 @@
+/**
+ * Decision-point events the TUI fires on the cordis bus so plugins can
+ * intercept, cancel, or customize interactive flows — the `session_before_*`
+ * style seam (pi's `session_before_fork` / `input` events) expressed in
+ * cordis dispatch semantics.
+ *
+ * All of these are FIRED BY THE CHANNEL and answered by admitted Components
+ * through the host-mediated DecisionEvents registry. No extra service row is
+ * involved: an absent handler simply means "no opinion", and the built-in
+ * flow proceeds unchanged. Dispatch is SERIAL in the registry's stable order
+ * with the first VALID decision winning — see {@link dispatchTuiDecision} for
+ * why this is not raw `ctx.serial`: per-handler crash isolation, deadlines and
+ * return-value normalization mean a broken or malformed handler can never
+ * skip a later (possibly safety) veto.
+ *
+ * Synchronous-only rule: handlers may be async, but while a decision is
+ * awaited the originating UI flow is parked (the submit is not delivered,
+ * the rewind confirm has not happened). Handlers that need user input should
+ * use the managed dialogs (`ctx.tuiDialogs`) or open a scene, then resolve.
+ */
+import { cleanScalarText } from './sanitize.js';
+import { DECISION_EVENT_PERMISSIONS, decisionHandlersOf, decisionRegistryOf, } from './decision-guard.js';
+/** Toast-bound plugin text (veto reasons) is render-path data: sanitized
+ *  with the one shared implementation, capped at toast width. */
+const NOTICE_CELLS = 200;
+/** Explicit budgets from the DecisionEvents profile.  A timed-out handler is
+ * treated as no-opinion and the chain continues; once the total budget is
+ * exhausted the remaining handlers are skipped with the same policy. */
+export const DECISION_HANDLER_TIMEOUT_MS = 1000;
+export const DECISION_TOTAL_TIMEOUT_MS = 5000;
+function freezeClone(value) {
+    const seen = new WeakSet();
+    const freeze = (current) => {
+        if (current === null || typeof current !== 'object' || Object.isFrozen(current))
+            return current;
+        if (seen.has(current))
+            return current;
+        seen.add(current);
+        for (const child of Object.values(current))
+            freeze(child);
+        return Object.freeze(current);
+    };
+    let copy;
+    try {
+        copy = structuredClone(value);
+    }
+    catch {
+        // Decision payloads are host-created records.  Keep a defensive fallback
+        // for degraded embedders rather than handing a shared object to a plugin.
+        copy = JSON.parse(JSON.stringify(value));
+    }
+    return freeze(copy);
+}
+async function runBounded(task, timeoutMs) {
+    let timer;
+    const work = Promise.resolve()
+        .then(task)
+        .then(value => ({ kind: 'value', value }), error => ({ kind: 'error', error }));
+    const timeout = new Promise(resolve => {
+        timer = setTimeout(() => resolve({ kind: 'timeout' }), timeoutMs);
+    });
+    try {
+        return await Promise.race([work, timeout]);
+    }
+    finally {
+        if (timer !== undefined)
+            clearTimeout(timer);
+        // `work` has rejection handlers attached above, so a promise that settles
+        // after a timeout cannot become an unhandled rejection.
+    }
+}
+/**
+ * Dispatch a decision event listener-by-listener in the host's stable order.
+ *
+ * Deliberately NOT `ctx.serial`: cordis bails at ANY non-null/false/undefined
+ * return, so a malformed-but-object decision (a blank `{ text }` rewrite, a
+ * junk primitive) would cut the chain before a later veto listener runs —
+ * and one throwing listener rejects the whole dispatch, skipping every later
+ * listener. Here:
+ *
+ * - a throwing listener is logged and the chain CONTINUES;
+ * - each return value passes through `normalize` (per-event validation)
+ *   INSIDE the same isolation boundary — a Proxy/throwing-getter return is
+ *   logged and skipped like any other invalid shape;
+ * - "no opinion" (undefined/null/false) and invalid shapes are logged and
+ *   the chain CONTINUES;
+ * - the first listener whose NORMALIZED decision is non-undefined wins.
+ *
+ * Handlers come from the host-mediated DecisionEvents registry.  Raw Cordis
+ * `ctx.on` listeners are intentionally absent from this path.
+ */
+export async function dispatchTuiDecision(ctx, name, payload, normalize) {
+    const sessionId = typeof payload.sessionId === 'string' ? payload.sessionId : undefined;
+    const scope = sessionId === undefined ? undefined : `session:${sessionId}`;
+    const listeners = decisionHandlersOf(ctx, name, scope);
+    const log = (message, error) => {
+        try {
+            if (error === undefined)
+                ctx.logger.warn(message);
+            else
+                ctx.logger.warn(message, error);
+        }
+        catch {
+            // Degraded ctx without a logger: warnings are best-effort.
+        }
+    };
+    const started = Date.now();
+    for (const handler of listeners) {
+        const permission = DECISION_EVENT_PERMISSIONS[name];
+        const principal = { componentId: handler.componentId, activationId: handler.activationId };
+        if (permission !== undefined
+            // Re-check the handler's declared scope at the concrete payload scope.
+            // GrantStore applies parent-scope grants and narrow deny precedence, so
+            // an event-wide grant cannot bypass a revoked session.
+            && !decisionRegistryOf(ctx).grants.allows(principal, permission, scope ?? handler.scope)) {
+            log(`dsh-tui: ${name} handler from Component "${handler.componentId}" skipped after grant revocation`);
+            continue;
+        }
+        const remaining = DECISION_TOTAL_TIMEOUT_MS - (Date.now() - started);
+        if (remaining <= 0) {
+            log(`dsh-tui: ${name} total decision budget exceeded; remaining handlers skipped`);
+            break;
+        }
+        const bounded = await runBounded(() => handler.listener(freezeClone(payload)), Math.min(DECISION_HANDLER_TIMEOUT_MS, remaining));
+        if (bounded.kind === 'timeout') {
+            log(`dsh-tui: ${name} handler from Component "${handler.componentId}" exceeded ${DECISION_HANDLER_TIMEOUT_MS}ms; continuing`);
+            continue;
+        }
+        if (bounded.kind === 'error') {
+            log(`dsh-tui: ${name} listener failed; continuing with the next listener: %o`, bounded.error);
+            continue;
+        }
+        const result = bounded.value;
+        // normalize runs INSIDE the isolation boundary too: a hostile return
+        // value (a Proxy or a throwing getter) must not reject the dispatch —
+        // that would cut the chain before later veto listeners run, and leave
+        // unhandled rejections at the fire-and-forget call sites.
+        let decision;
+        try {
+            decision = normalize(result, what => log(`dsh-tui: ${name} listener returned ${what}; ignored`));
+        }
+        catch (error) {
+            log(`dsh-tui: ${name} listener returned a value that threw during validation; ignored: %o`, error);
+            continue;
+        }
+        if (decision !== undefined)
+            return decision;
+    }
+    return undefined;
+}
+/** Fire a non-veto DecisionEvents point with the same bounded, isolated
+ * semantics.  Notifications deliberately ignore every return value. */
+export async function dispatchTuiNotification(ctx, name, payload) {
+    const sessionId = typeof payload.sessionId === 'string' ? payload.sessionId : undefined;
+    const scope = sessionId === undefined ? undefined : `session:${sessionId}`;
+    const listeners = decisionHandlersOf(ctx, name, scope);
+    const log = (message, error) => {
+        try {
+            if (error === undefined)
+                ctx.logger.warn(message);
+            else
+                ctx.logger.warn(message, error);
+        }
+        catch {
+            // Degraded ctx without a logger: warnings are best-effort.
+        }
+    };
+    const started = Date.now();
+    // Notifications have no return-value or ordering semantics. Start every
+    // listener from the same snapshot so one slow plugin cannot delay another
+    // plugin's session rebind (or make a fire-and-forget dispatch look stuck).
+    await Promise.all(listeners.map(async (handler) => {
+        const permission = DECISION_EVENT_PERMISSIONS[name];
+        const principal = { componentId: handler.componentId, activationId: handler.activationId };
+        if (permission !== undefined
+            && !decisionRegistryOf(ctx).grants.allows(principal, permission, scope ?? handler.scope)) {
+            log(`dsh-tui: ${name} handler from Component "${handler.componentId}" skipped after grant revocation`);
+            return;
+        }
+        const remaining = DECISION_TOTAL_TIMEOUT_MS - (Date.now() - started);
+        if (remaining <= 0) {
+            log(`dsh-tui: ${name} total decision budget exceeded; handler skipped`);
+            return;
+        }
+        const bounded = await runBounded(() => handler.listener(freezeClone(payload)), Math.min(DECISION_HANDLER_TIMEOUT_MS, remaining));
+        if (bounded.kind === 'timeout') {
+            log(`dsh-tui: ${name} handler from Component "${handler.componentId}" exceeded ${DECISION_HANDLER_TIMEOUT_MS}ms; continuing`);
+        }
+        else if (bounded.kind === 'error') {
+            log(`dsh-tui: ${name} listener failed; continuing with the other listeners: %o`, bounded.error);
+        }
+    }));
+}
+/** Shared normalizer for the veto-only decisions (session-switch, compact):
+ *  `{ cancel: true, reason? }` or no opinion; everything else is ignored.
+ *  The reason is toast-bound plugin text — sanitized (a veto must not
+ *  smuggle control sequences onto the screen). */
+export function normalizeCancelDecision(result, warn) {
+    if (result === undefined || result === null || result === false)
+        return undefined;
+    if (typeof result === 'object' && result.cancel === true) {
+        const reason = cleanScalarText(result.reason, NOTICE_CELLS);
+        return { cancel: true, ...(reason === '' ? {} : { reason }) };
+    }
+    warn('an unrecognized decision shape');
+    return undefined;
+}

package/lib/types/dsh-adapter/extensions.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The dsh-tui-extensions row: mounts every plugin-facing UI seam service in
+ * one cordis plugin (one profile row, one patch-surface entry — see issue
+ * #183 for the cost of row/code skew, and #242 for the entry-level-only
+ * inject rule this row follows).
+ *
+ * Services mounted here (each documented in its own module):
+ *
+ * - `ctx.tuiDialogs`   — managed select/confirm/input dialogs
+ * - `ctx.tuiStatus`    — keyed status-line contributions
+ * - `ctx.tuiShortcuts` — keyboard shortcut registry
+ * - `ctx.tuiRenderers` — custom session-entry text renderers
+ *
+ * The decision-point events (`tui/input`, `tui/rewind-prompt`, …) need no
+ * separate service — they are fired by the channel and answered through the
+ * host-mediated DecisionEvents registry; their types ride along in this
+ * module's public surface (`./extensions` export). The Cordis `ctx.on` hook is
+ * only a compatibility facade and cannot bypass admission, scope or grant
+ * checks. Intercept-class events require an explicit grant in
+ * `~/.dsh-tui/extension-grants.json`, default deny. The channel installs the
+ * SAME hook (idempotent per cordis root, so exactly one installation lands):
+ * this row covers profiles launching without the channel, and the channel
+ * covers the skew path where THIS row is missing.
+ *
+ * Every consumer (`channel.ts`, `Chat.tsx`) reads these with `ctx.get`
+ * softly: without this row the TUI degrades to no dialogs/status/shortcuts/
+ * renderers, and plugin.ts logs the skew warning once for profile launches.
+ */
+import { Context } from '@deepseek-ai/cordis';
+export declare const name = "dsh-tui-extensions";
+export declare function apply(ctx: Context): void;
+//# sourceMappingURL=extensions.d.ts.map

package/lib/types/dsh-adapter/extensions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/extensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAQ7C,eAAO,MAAM,IAAI,uBAAuB,CAAA;AAExC,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAMxC"}

package/lib/types/dsh-adapter/extensions.js

@@ -0,0 +1,42 @@
+/**
+ * The dsh-tui-extensions row: mounts every plugin-facing UI seam service in
+ * one cordis plugin (one profile row, one patch-surface entry — see issue
+ * #183 for the cost of row/code skew, and #242 for the entry-level-only
+ * inject rule this row follows).
+ *
+ * Services mounted here (each documented in its own module):
+ *
+ * - `ctx.tuiDialogs`   — managed select/confirm/input dialogs
+ * - `ctx.tuiStatus`    — keyed status-line contributions
+ * - `ctx.tuiShortcuts` — keyboard shortcut registry
+ * - `ctx.tuiRenderers` — custom session-entry text renderers
+ *
+ * The decision-point events (`tui/input`, `tui/rewind-prompt`, …) need no
+ * separate service — they are fired by the channel and answered through the
+ * host-mediated DecisionEvents registry; their types ride along in this
+ * module's public surface (`./extensions` export). The Cordis `ctx.on` hook is
+ * only a compatibility facade and cannot bypass admission, scope or grant
+ * checks. Intercept-class events require an explicit grant in
+ * `~/.dsh-tui/extension-grants.json`, default deny. The channel installs the
+ * SAME hook (idempotent per cordis root, so exactly one installation lands):
+ * this row covers profiles launching without the channel, and the channel
+ * covers the skew path where THIS row is missing.
+ *
+ * Every consumer (`channel.ts`, `Chat.tsx`) reads these with `ctx.get`
+ * softly: without this row the TUI degrades to no dialogs/status/shortcuts/
+ * renderers, and plugin.ts logs the skew warning once for profile launches.
+ */
+import TuiDialogRuntime from './dialogs.js';
+import TuiStatusRuntime from './status.js';
+import TuiShortcutRuntime from './shortcuts.js';
+import TuiRendererRuntime from './renderers.js';
+import { installDecisionGuard } from './decision-guard.js';
+import { readGrantStore } from './grants.js';
+export const name = 'dsh-tui-extensions';
+export function apply(ctx) {
+    installDecisionGuard(ctx, readGrantStore());
+    ctx.plugin(TuiDialogRuntime);
+    ctx.plugin(TuiStatusRuntime);
+    ctx.plugin(TuiShortcutRuntime);
+    ctx.plugin(TuiRendererRuntime);
+}

package/lib/types/dsh-adapter/grants.d.ts

@@ -0,0 +1,25 @@
+/** Live, scoped plugin grant evaluation. */
+import type { PermissionRegistry } from '../plugin-spec/types.js';
+export declare const EXTENSION_GRANTS_FILE = "extension-grants.json";
+export interface GrantPrincipal {
+    componentId: string;
+    activationId?: string;
+}
+export interface GrantStore {
+    /** Evaluate one concrete operation scope. Missing/unsupported scopes deny. */
+    allows(principal: GrantPrincipal | string, permission: string, scope: string): boolean;
+    defaultOf(permission: string): 'allow' | 'deny';
+    knownPermissions(): readonly string[];
+    /** Subscribe to file changes. Used to actively release grant-owned effects. */
+    onChange?(listener: () => void): () => void;
+    readonly corrupt: boolean;
+}
+/** Parse a fixed snapshot, primarily for deterministic tests. */
+export declare function parseGrantStore(text: string, registry?: PermissionRegistry): GrantStore;
+/**
+ * Read grants on every decision. File changes therefore affect the next
+ * operation without a restart. onChange uses a non-persistent watcher so
+ * grant-owned subscriptions can be released even when no event is flowing.
+ */
+export declare function readGrantStore(dir?: string, registry?: PermissionRegistry): GrantStore;
+//# sourceMappingURL=grants.d.ts.map

package/lib/types/dsh-adapter/grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/grants.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAI5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAKjE,eAAO,MAAM,qBAAqB,0BAA0B,CAAA;AAE5D,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,8EAA8E;IAC9E,MAAM,CAAC,SAAS,EAAE,cAAc,GAAG,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;IACtF,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAA;IAC/C,gBAAgB,IAAI,SAAS,MAAM,EAAE,CAAA;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAA;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAkJD,iEAAiE;AACjE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,kBAAkB,GAAG,UAAU,CAKvF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAiB,EAAE,QAAQ,CAAC,EAAE,kBAAkB,GAAG,UAAU,CA0DhG"}