@deepseek-harness-tui/dsh-tui 0.9.0 → 0.9.2

package/lib/types/dsh-adapter/compat/sessionLog.js

@@ -1,45 +1,5 @@
-/**
- * Session-log compatibility helpers.
- *
- * Title lookup tolerates event types unknown to the current harness. Offline
- * rename and delete support the `/resume` picker when no live Agent owns the
- * selected persisted session. The resume seam registers vouched-for legacy
- * event types into every reachable KNOWN_SESSION_EVENT_TYPES copy so the
- * strict read path stops rejecting whole sessions over them (issue #153).
- *
- * Registration background: plugins like dsh-working-activity (< the publish
- * cut) appended `activity/status` through `session.append`, but rc.6's
- * append exposes no `ignorable` flag and the type is absent from
- * KNOWN_SESSION_EVENT_TYPES — so resume's seed validation rejects the WHOLE
- * session ("unknown to this harness and not marked ignorable"). Upstream's
- * catalog header defers a registration surface "until such a consumer
- * exists"; the working-activity plugin became that consumer at #119 and
- * registers its type at load. Logs written BEFORE that cut, resumed in a
- * process where the plugin's registration never ran (plugin unmounted, or
- * a bare cordis.yml), still hit the rejection — this module is the consumer
- * for exactly that residue.
- *
- * Why registration and NOT rewriting the log to mark events `ignorable`
- * (the #107 approach, restored then replaced after review): the store is
- * shared with dsh web (#24) and possibly a second TUI instance (#153), and
- * a whole-file tmp+rename swap (a) loses frames an already-open appender
- * lands on the replaced inode, (b) drops the backend's 0600 artifact mode,
- * (c) re-encodes frames without the writer's checksum flag, and (d) dies on
- * torn tails the backend itself can recover. Registration touches nothing
- * on disk and degrades to exactly the pre-patch behavior when no copy
- * resolves.
- *
- * Whitelist discipline: ONLY `activity/status` — the type the plugin
- * provably wrote as ephemeral UI frames. Anything else unknown stays
- * unknown: upstream's fail-closed ("likely written by a newer harness") is
- * a feature — silently skipping a REQUIRED future event would reconstruct
- * a wrong session. Retires the day upstream's shared catalog adopts the
- * type or ships a real registration API (the add() calls become no-ops).
- *
- * @module @deepseek-harness-tui/dsh-tui/compat/sessionLog
- */
 import { createRequire } from 'node:module';
-import { appendFileSync, existsSync, readdirSync, readFileSync, realpathSync, rmSync, } from 'node:fs';
+import { appendFileSync, closeSync, existsSync, openSync, readdirSync, readFileSync, readSync, realpathSync, rmSync, } from 'node:fs';
 import { dirname, join, sep } from 'node:path';
 import { zstdCompressSync, zstdDecompressSync } from 'node:zlib';
 import { homeDir } from '../../utils/paths.js';
@@ -107,6 +67,523 @@ export function findSessionLogFile(sessionId) {
     }
     return undefined;
 }
+let cachedDecoder;
+function decodeStorageRecord(value) {
+    if (cachedDecoder === undefined) {
+        const req = createRequire(import.meta.url);
+        cachedDecoder = req('@deepseek-ai/dsh-session').decodeStorageRecord;
+    }
+    return cachedDecoder(value);
+}
+/** I/O slice for streamed log reads. */
+const READ_CHUNK = 64 * 1024;
+/**
+ * Compressed-size cap for a single zstd frame, checked DURING accumulation
+ * (before any decompress attempt): a bare magic prefix followed by inert
+ * bytes must bail instead of buffering unboundedly.
+ */
+const MAX_FRAME_BYTES = 64 * 1024 * 1024;
+/**
+ * Decompressed-size cap for a single frame: a tiny on-disk bomb must be
+ * refused, not exploded into memory.
+ */
+const MAX_FRAME_TEXT_BYTES = 64 * 1024 * 1024;
+/**
+ * Dual-encoding sibling of {@link findSessionLogFile} for the bounded tree
+ * reader: also probes `session.jsonl` (a `compression:"none"` backend),
+ * which the rename/delete/title-string path has no use for. Same multi-root
+ * scan and id whitelist; compressed still wins when both exist.
+ * @param sessionId - Session id (directory name under each workspace dir).
+ * @returns The log path and encoding, or undefined when absent.
+ */
+function findSessionLogFileAnyEncoding(sessionId) {
+    if (!isSafeSessionId(sessionId))
+        return undefined;
+    for (const root of sessionsRoots()) {
+        let workspaces;
+        try {
+            workspaces = readdirSync(root);
+        }
+        catch {
+            continue;
+        }
+        for (const ws of workspaces) {
+            const dir = join(root, ws, sessionId);
+            const compressed = join(dir, 'session.jsonl.zstd');
+            if (existsSync(compressed))
+                return { path: compressed, compressed: true };
+            const plain = join(dir, 'session.jsonl');
+            if (existsSync(plain))
+                return { path: plain, compressed: false };
+        }
+    }
+    return undefined;
+}
+/**
+ * Yield a file's bytes in READ_CHUNK slices. Each yielded buffer is freshly
+ * allocated, so consumers may hold frames/lines across yields.
+ * @param fd - Open file descriptor (closed by the caller).
+ * @yields Raw byte slices in file order.
+ */
+function* fileChunks(fd) {
+    for (;;) {
+        const buf = Buffer.allocUnsafe(READ_CHUNK);
+        const n = readSync(fd, buf, 0, READ_CHUNK, null);
+        if (n === 0)
+            return;
+        yield buf.subarray(0, n);
+    }
+}
+/**
+ * Iterate the concatenated zstd frames of a log lazily, over byte chunks,
+ * walking each frame's RFC 8878 structure instead of scanning for magic
+ * bytes: magic (4) → frame header descriptor → window descriptor →
+ * dictionary id → frame content size → data blocks (3-byte little-endian
+ * header: last-block flag, block type, block size) until the last block →
+ * optional 4-byte content checksum. Structure walking wins over a magic
+ * scan twice over: a magic sequence inside a COMPRESSED payload no longer
+ * mis-splits its frame, and the exact frame end is known — so a crash
+ * mid-flush leaves a torn FINAL frame that is dropped like the plain
+ * reader's unterminated tail line (uncommitted), keeping every committed
+ * frame before it readable. Frame bytes accumulate as SEGMENTS (references
+ * into the 64 KiB read chunks) with one concat per completed frame; the
+ * MAX_FRAME_BYTES cap is checked on the running length, so it fires while
+ * the frame is still being read, not after it is buffered. Throws when no
+ * complete frame exists at all (not a zstd log / nothing committed), on
+ * structural corruption (a reserved block type, non-magic bytes at a frame
+ * boundary), or when one frame grows past MAX_FRAME_BYTES.
+ * @param chunks - Raw file bytes, in order.
+ * @yields Each frame's original compressed byte span, in log order.
+ */
+function* zstdFrames(chunks) {
+    const stream = chunks[Symbol.iterator]();
+    let current = null;
+    let pos = 0;
+    const advance = () => {
+        const next = stream.next();
+        if (next.done === true) {
+            current = null;
+            return false;
+        }
+        current = next.value;
+        pos = 0;
+        return true;
+    };
+    let segments = [];
+    let frameLength = 0;
+    const append = (bytes) => {
+        if (bytes.length === 0)
+            return;
+        segments.push(bytes);
+        frameLength += bytes.length;
+        if (frameLength > MAX_FRAME_BYTES) {
+            throw new Error(`zstd frame exceeds the ${MAX_FRAME_BYTES}-byte browse cap`);
+        }
+    };
+    /** Pull exactly n structural bytes (≤ 18, concatenating across chunk
+     *  boundaries); fewer only at EOF. The bytes join the current frame. */
+    const field = (n) => {
+        const parts = [];
+        let left = n;
+        while (left > 0) {
+            if (current === null && !advance())
+                break;
+            if (current === null || current.length === pos) {
+                current = null;
+                continue;
+            }
+            const take = Math.min(current.length - pos, left);
+            parts.push(current.subarray(pos, pos + take));
+            pos += take;
+            left -= take;
+        }
+        const out = parts.length === 1 ? parts[0] : Buffer.concat(parts);
+        append(out);
+        return out;
+    };
+    /** Swallow exactly n payload bytes into the current frame, in per-chunk
+     *  pieces (no concat — payloads can be megabytes). Returns the shortfall
+     *  at EOF (0 when the payload was fully consumed). */
+    const payload = (n) => {
+        let left = n;
+        while (left > 0) {
+            if (current === null && !advance())
+                return left;
+            if (current === null || current.length === pos) {
+                current = null;
+                continue;
+            }
+            const take = Math.min(current.length - pos, left);
+            append(current.subarray(pos, pos + take));
+            pos += take;
+            left -= take;
+        }
+        return 0;
+    };
+    // EOF partway through a frame is a torn write: committed frames already
+    // yielded stay yielded, the partial frame is dropped. Before the FIRST
+    // frame completes it instead means "nothing committed" — the old magic
+    // scan threw in that case, and the contract is kept.
+    let frames = 0;
+    const torn = () => frames > 0;
+    for (;;) {
+        const magic = field(4);
+        if (magic.length < 4) {
+            // Clean EOF at a frame boundary, or a 1–3 byte torn tail.
+            if (magic.length === 0 && frames === 0)
+                throw new Error('no zstd frame found');
+            if (!torn())
+                throw new Error('no complete zstd frame found');
+            return;
+        }
+        if (magic.readUInt32LE(0) !== ZSTD_MAGIC) {
+            throw new Error('non-zstd bytes at a frame boundary');
+        }
+        const descriptor = field(1);
+        if (descriptor.length < 1) {
+            if (!torn())
+                throw new Error('no complete zstd frame found');
+            return;
+        }
+        const d = descriptor[0];
+        const fcsFlag = d >>> 6;
+        const singleSegment = (d & 0x20) !== 0;
+        const hasChecksum = (d & 0x04) !== 0;
+        // Dictionary_ID flag: 0/1/2/3 → 0/1/2/4 bytes.
+        const dictIdBytes = (d & 0x03) === 3 ? 4 : d & 0x03;
+        // Frame_Content_Size: flag 0 → 1 byte only for single-segment frames;
+        // flags 1/2/3 → 2/4/8 bytes.
+        const fcsBytes = fcsFlag === 0 ? (singleSegment ? 1 : 0) : fcsFlag === 1 ? 2 : fcsFlag === 2 ? 4 : 8;
+        const headerBytes = (singleSegment ? 0 : 1) + dictIdBytes + fcsBytes;
+        if (field(headerBytes).length < headerBytes) {
+            if (!torn())
+                throw new Error('no complete zstd frame found');
+            return;
+        }
+        for (;;) {
+            const blockHeader = field(3);
+            if (blockHeader.length < 3) {
+                if (!torn())
+                    throw new Error('no complete zstd frame found');
+                return;
+            }
+            const packed = blockHeader[0] | (blockHeader[1] << 8) | (blockHeader[2] << 16);
+            const lastBlock = (packed & 1) !== 0;
+            const blockType = (packed >>> 1) & 0x03;
+            if (blockType === 3)
+                throw new Error('reserved zstd block type');
+            // RLE blocks carry a single byte; raw/compressed carry Block_Size.
+            if (payload(blockType === 1 ? 1 : packed >>> 3) > 0) {
+                if (!torn())
+                    throw new Error('no complete zstd frame found');
+                return;
+            }
+            if (lastBlock)
+                break;
+        }
+        if (hasChecksum && field(4).length < 4) {
+            if (!torn())
+                throw new Error('no complete zstd frame found');
+            return;
+        }
+        frames += 1;
+        yield Buffer.concat(segments);
+        segments = [];
+        frameLength = 0;
+    }
+}
+/**
+ * Iterate the lines of a plain-text (compression:"none") log lazily. A
+ * streaming UTF-8 decoder keeps multi-byte characters intact across read
+ * chunks. An unterminated FINAL line is a torn write (a crash mid-append):
+ * the backend's own reader ignores uncommitted records, and so does this
+ * one — the tree must never show events persistence.load() would not
+ * acknowledge.
+ * @param chunks - Raw file bytes, in order.
+ * @yields Each non-empty newline-terminated line's text, in log order.
+ */
+function* plainLines(chunks) {
+    const decoder = new TextDecoder('utf-8');
+    let pending = '';
+    for (const chunk of chunks) {
+        pending += decoder.decode(chunk, { stream: true });
+        let idx = pending.indexOf('\n');
+        while (idx !== -1) {
+            const line = pending.slice(0, idx);
+            pending = pending.slice(idx + 1);
+            if (line.length > 0)
+                yield line;
+            idx = pending.indexOf('\n');
+        }
+    }
+    // `pending` here (plus any partial code point in the decoder) is the
+    // unterminated torn tail — dropped, not yielded.
+}
+/**
+ * Iterate the lines of a decoded zstd frame lazily: lines are located by
+ * indexOf as the consumer pulls, so a reader stopping at its event budget
+ * never allocates the frame's remaining line strings (a single flush can be
+ * many MB of text). A COMPLETE frame must end newline-terminated — the
+ * backend flushes whole frames, so an unterminated tail line inside one is
+ * corruption (the strict backend rejects it too), never a torn write. The
+ * check runs UP FRONT, before the first line is yielded: a budget-limited
+ * reader returning early must not skip it and misjudge a corrupt frame as
+ * merely truncated.
+ * @param text - The frame's full decoded text.
+ * @yields Each non-empty line's text, in order. Throws on a torn frame.
+ */
+function* frameLines(text) {
+    if (text.length > 0 && !text.endsWith('\n')) {
+        throw new Error('unterminated record inside a zstd frame');
+    }
+    let pos = 0;
+    for (;;) {
+        const nl = text.indexOf('\n', pos);
+        if (nl === -1)
+            return;
+        if (nl > pos)
+            yield text.slice(pos, nl);
+        pos = nl + 1;
+    }
+}
+/**
+ * Parse one log's storage records (one JSON value per line) lazily, in log
+ * order, from whichever on-disk encoding was located. Decompression and
+ * parsing happen per frame/line as the consumer pulls, so stopping early
+ * (event budget reached) stops the I/O too — with one honest exception: a
+ * zstd FRAME is the atomic unit. The next magic (or EOF) delimits it and the
+ * whole frame is decompressed and stringified before its first line exists,
+ * so a single giant flush (a big seed write, a batched append) costs its
+ * full frame size in time and memory regardless of the budget. The budget
+ * bounds ACROSS frames; within one frame it only stops line splitting and
+ * JSON parsing early.
+ * @param fd - Open file descriptor of the log.
+ * @param compressed - Whether the log is zstd-framed (vs plain jsonl text).
+ * @yields Each line's JSON.parse result, unvalidated.
+ */
+function* logRecords(fd, compressed) {
+    if (compressed) {
+        for (const frame of zstdFrames(fileChunks(fd))) {
+            // maxOutputLength is the REAL resource bound: repetitive chunk deltas
+            // compress ~56×, so the compressed-byte cap alone says nothing about
+            // the text a frame inflates into. Over the limit zstd throws — the
+            // log degrades to unreadable rather than ballooning the TUI's RSS.
+            const text = zstdDecompressSync(frame, { maxOutputLength: MAX_FRAME_TEXT_BYTES }).toString('utf8');
+            for (const line of frameLines(text)) {
+                yield JSON.parse(line);
+            }
+        }
+    }
+    else {
+        for (const line of plainLines(fileChunks(fd))) {
+            yield JSON.parse(line);
+        }
+    }
+}
+/**
+ * Sniff a located artifact's encoding from its first bytes: zstd framing
+ * declares itself with the magic number; anything else is plain JSONL text.
+ * @param path - Candidate log path (must exist).
+ * @returns The path with its detected encoding, or undefined when unreadable.
+ */
+function sniffLogFile(path) {
+    let fd;
+    try {
+        fd = openSync(path, 'r');
+        const head = Buffer.alloc(4);
+        const n = readSync(fd, head, 0, 4, 0);
+        return { path, compressed: n === 4 && head.readUInt32LE(0) === ZSTD_MAGIC };
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        if (fd !== undefined) {
+            try {
+                closeSync(fd);
+            }
+            catch {
+                // A close failure leaves nothing actionable.
+            }
+        }
+    }
+}
+/**
+ * Resolve a `persistence.locate()` hint to a readable log. The hint may name
+ * the physical artifact directly or the backend's LOGICAL name for it (the
+ * jsonl backend's raw-artifact filename carries no encoding suffix), so the
+ * compressed twin is probed as well. Encoding is sniffed from content, never
+ * inferred from the extension.
+ * @param hint - Absolute path from SessionPersistence.locate().
+ * @returns The readable log, or undefined when nothing materialized there.
+ */
+function resolveLocatedPath(hint) {
+    const direct = existsSync(hint) ? sniffLogFile(hint) : undefined;
+    if (direct !== undefined)
+        return direct;
+    const twin = `${hint}.zstd`;
+    if (existsSync(twin))
+        return { path: twin, compressed: true };
+    return undefined;
+}
+/**
+ * Shared bounded read loop over a located log. See readSessionEventsFromLog
+ * for the contract; this is the file-level entry for backend-resolved paths.
+ * Returns undefined ONLY when the log vanished between the location scan and
+ * the open — every other failure lands in {@link SessionLogRead.failed}.
+ */
+function readEvents(file, maxEvents, maxScanned, skipBelowSeq) {
+    let fd;
+    try {
+        fd = openSync(file.path, 'r');
+    }
+    catch {
+        return undefined;
+    }
+    let scanned = 0;
+    const events = [];
+    try {
+        for (const record of logRecords(fd, file.compressed)) {
+            for (const event of decodeStorageRecord(record)) {
+                // The SCAN budget bounds the real cost drivers — I/O, decompression,
+                // JSON.parse — which are paid for EVERY envelope, collected or not.
+                // Without it, a log carrying hundreds of thousands of skipped rows
+                // (ignorable-marked activity frames) forces a full parse just
+                // to collect a handful of events, blocking the TUI on panel open.
+                scanned += 1;
+                if (scanned > maxScanned)
+                    return { events, complete: false, scanned };
+                const envelope = event;
+                if (typeof envelope['seq'] !== 'number' || envelope['ignorable'] === true)
+                    continue;
+                // Inherited-prefix skip (session-tree dedup): seqs an ancestor
+                // already shows are not collected. They still cost the scan budget
+                // (their bytes were read and parsed), but NOT the event budget — a
+                // fork of a huge parent is charged only for its OWN events, so two
+                // small forks of a 70k-event parent both stay visible. Titles still
+                // collect below the cutoff: branch-head labels need them and they
+                // never extract into entries.
+                if (envelope['seq'] < skipBelowSeq && envelope['type'] !== 'session/title')
+                    continue;
+                // Budget check BEFORE the push: an exact-fit log reports complete,
+                // and only a surviving (maxEvents+1)-th event marks truncation.
+                if (events.length >= maxEvents)
+                    return { events, complete: false, scanned };
+                events.push(event);
+            }
+        }
+        return { events, complete: true, scanned };
+    }
+    catch {
+        // An EXISTING but undecodable log (corruption, over-cap frame, decode
+        // bomb): fail closed — never silently empty, never eligible for an
+        // unbounded fallback re-read.
+        return { events, complete: false, scanned, failed: true };
+    }
+    finally {
+        try {
+            closeSync(fd);
+        }
+        catch {
+            // A close failure leaves nothing actionable — the read already ended.
+        }
+    }
+}
+/**
+ * Default scan budget derived from the event budget: 4× headroom over the
+ * collectible events (legitimate logs interleave a modest share of skipped
+ * rows — headers, repair-marked ignorable frames), plus a floor so even a
+ * tiny `maxEvents` tolerates a noisy prefix. Unbounded reads stay unbounded.
+ */
+export function defaultMaxScanned(maxEvents) {
+    return Number.isFinite(maxEvents) ? maxEvents * 4 + 4096 : Number.POSITIVE_INFINITY;
+}
+/**
+ * File-level sibling of {@link readSessionEventsFromLog} for paths resolved
+ * by the backend itself (`persistence.locate`) — covers a custom-configured
+ * root that none of the stock sessionsRoots() candidates describes.
+ * @param path - Absolute artifact path (physical or logical name).
+ * @param maxEvents - Stop before collecting more than this many events.
+ * @param maxScanned - Stop after INSPECTING this many envelopes, collected
+ *   or skipped (default: {@link defaultMaxScanned} of maxEvents).
+ * @param skipBelowSeq - Inherited-prefix cutoff (session-tree dedup):
+ *   seq'd events below it are skipped without spending the event budget —
+ *   they still count against maxScanned. `session/title` events are always
+ *   collected (branch-head labels need them; they never become entries).
+ * @returns The read outcome, or undefined ONLY when nothing materialized at
+ *   the path — an existing-but-undecodable log reports `failed: true`.
+ */
+export function readSessionEventsFromFile(path, maxEvents = Number.POSITIVE_INFINITY, maxScanned = defaultMaxScanned(maxEvents), skipBelowSeq = 0) {
+    const file = resolveLocatedPath(path);
+    if (file === undefined)
+        return undefined;
+    return readEvents(file, maxEvents, maxScanned, skipBelowSeq);
+}
+/**
+ * Read a session's events from its persisted log — tolerant, read-only, and
+ * cost-bounded. Built for the session tree (buildSessionTree), whose browse
+ * must satisfy three constraints the strict backend read cannot:
+ *
+ *  - READ-ONLY: `persistence.inspect` rejects logs carrying third-party
+ *    event types (working-activity's `activity/status`), and the resume
+ *    seam's answer (in-process type registration, issue #153) must not be
+ *    inverted here: opening a picker never rewrites a history log. This
+ *    reader never writes; unknown types are simply passed through
+ *    (extractEntries skips what it does not know).
+ *  - TOLERANT: envelope-shape or decode anomalies degrade to
+ *    `failed: true` (a structure-only tree node) instead of rejecting the
+ *    whole log — and a torn FINAL zstd frame (crash mid-flush) is dropped
+ *    as uncommitted, keeping the frames before it readable.
+ *  - BOUNDED: the file is read in 64 KiB slices and frames decode lazily,
+ *    stopping the moment `maxEvents` events have been collected — a
+ *    200k-event log costs budget × per-event work, not a whole-file read +
+ *    decompress + parse. `complete: false` marks the early stop (the caller
+ *    surfaces it as `truncated`). One honest exception: a single zstd FRAME
+ *    is the atomic unit (see logRecords) — the budget bounds work ACROSS
+ *    frames, never inside one giant flush.
+ *
+ * Packed rows are expanded with the backend's own `decodeStorageRecord`:
+ * the packChunks writer folds each run of same-block delta chunks into ONE
+ * `text-chunks`/`reasoning-chunks`/`tool-call-chunks` line (the default —
+ * the finding that motivated this reader's third revision), so a line is a
+ * storage record, not an event, and seq-less rows must not be dropped as if
+ * they were headers. The budget counts EXPANDED events, matching the tree's
+ * per-event cost. Malformed packed rows throw inside decodeStorageRecord —
+ * corrupt storage degrades to `undefined`, never to silently dropped runs.
+ *
+ * Torn-tail semantics mirror the backend's own reader: a plain log's
+ * unterminated final line (crash mid-append) is uncommitted data and
+ * ignored, while an unterminated record INSIDE a complete zstd frame is
+ * corruption and fails the read.
+ *
+ * Envelopes with `ignorable: true` are skipped (the read path's own skip
+ * signal) and the seq-less header row is metadata, not an event. Skipped
+ * envelopes still count against the SCAN budget (maxScanned): skipping is
+ * not free — the I/O, decompress and JSON.parse for them have already been
+ * paid — so an ignorable-heavy log cannot bypass the cost bound by keeping
+ * its collectible count low. Never throws; returns undefined ONLY when the
+ * log is absent — an existing-but-undecodable log returns `failed: true`
+ * so the caller degrades to a placeholder instead of escalating to an
+ * unbounded strict re-read.
+ * @param sessionId - Session whose log should be read.
+ * @param maxEvents - Stop before collecting more than this many events
+ *   (default: unbounded). 0 collects nothing and reports complete: false
+ *   whenever the log holds any collectible event.
+ * @param maxScanned - Stop after INSPECTING this many envelopes, collected
+ *   or skipped (default: 4× maxEvents + 4096; unbounded when maxEvents is).
+ * @param skipBelowSeq - Inherited-prefix cutoff (session-tree dedup):
+ *   seq'd events below it are skipped without spending the event budget —
+ *   they still count against maxScanned. `session/title` events are always
+ *   collected (branch-head labels need them; they never become entries).
+ * @returns The read outcome — events, completeness, real scan cost, and a
+ *   `failed` marker for safety-cap/corruption bailouts.
+ */
+export function readSessionEventsFromLog(sessionId, maxEvents = Number.POSITIVE_INFINITY, maxScanned = defaultMaxScanned(maxEvents), skipBelowSeq = 0) {
+    const file = findSessionLogFileAnyEncoding(sessionId);
+    if (file === undefined)
+        return undefined;
+    return readEvents(file, maxEvents, maxScanned, skipBelowSeq);
+}
 /**
  * Decode a (possibly multi-frame) zstd jsonl log. Frames are split by magic
  * scan; any frame failing to decode or any line failing to parse throws, so

package/lib/types/dsh-adapter/contract.d.ts

@@ -19,7 +19,7 @@ export declare const UPSTREAM_VALIDATED_VERSIONS: readonly ["0.1.0-rc.6", "0.1.0
  */
 export declare const UPSTREAM_FRAMEWORK_MAJORS: Record<string, number>;
 /** Official packages the adapter consumes at runtime or as types. */
-export declare const UPSTREAM_BLESSED_PACKAGES: readonly ["@deepseek-ai/cordis", "@deepseek-ai/schemastery", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-presets", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-commands", "@deepseek-ai/dsh-cordis-host-runner", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-persona", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-storage", "@deepseek-ai/dsh-storage-domain", "@deepseek-ai/dsh-storage-json", "@deepseek-ai/dsh-workspace", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-terminal", "@deepseek-ai/dsh-terminal-bash", "@deepseek-ai/dsh-tool-ask-user", "@deepseek-ai/dsh-tool-bash-persistent", "@deepseek-ai/dsh-tool-cordis", "@deepseek-ai/dsh-user-approval", "@deepseek-ai/dsh-user-questions"];
+export declare const UPSTREAM_BLESSED_PACKAGES: readonly ["@deepseek-ai/cordis", "@deepseek-ai/schemastery", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-presets", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-commands", "@deepseek-ai/dsh-cordis-host-runner", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-pi-ai", "@deepseek-ai/dsh-persona", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-storage", "@deepseek-ai/dsh-storage-domain", "@deepseek-ai/dsh-storage-json", "@deepseek-ai/dsh-workspace", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-terminal", "@deepseek-ai/dsh-terminal-bash", "@deepseek-ai/dsh-tool-ask-user", "@deepseek-ai/dsh-tool-bash-persistent", "@deepseek-ai/dsh-tool-cordis", "@deepseek-ai/dsh-user-approval", "@deepseek-ai/dsh-user-questions"];
 export interface UpstreamDriftEntry {
     package: string;
     installed: string | undefined;

package/lib/types/dsh-adapter/contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/contract.ts"],"names":[],"mappings":"AAiBA,gDAAgD;AAChD,eAAO,MAAM,0BAA0B,eAAe,CAAA;AAEtD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B,iFAM9B,CAAA;AAEV;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAG5D,CAAA;AAED,qEAAqE;AACrE,eAAO,MAAM,yBAAyB,2zBA2B5B,CAAA;AAEV,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,gFAAgF;AAChF,MAAM,MAAM,oBAAoB,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;AAE5E,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,oBAAoB,GAAG,SAAS,CAGlG;AA4BD,uGAAuG;AACvG,eAAO,MAAM,wBAAwB,QAA6D,CAAA;AAYlG,wBAAgB,yBAAyB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAqB9E;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAE9F;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAKnF;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,EAAE,CAQjD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,kBAAkB,EAAE,CAuBpD;AAED;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAA;AAEtE,wEAAwE;AACxE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,iBAAiB,CAAA;IACvB,sFAAsF;IACtF,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,oBAAoB,GAAG,SAAS,CAuBvE"}
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/contract.ts"],"names":[],"mappings":"AAiBA,gDAAgD;AAChD,eAAO,MAAM,0BAA0B,eAAe,CAAA;AAEtD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B,iFAM9B,CAAA;AAEV;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAG5D,CAAA;AAED,qEAAqE;AACrE,eAAO,MAAM,yBAAyB,y1BA4B5B,CAAA;AAEV,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,gFAAgF;AAChF,MAAM,MAAM,oBAAoB,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;AAE5E,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,oBAAoB,GAAG,SAAS,CAGlG;AA4BD,uGAAuG;AACvG,eAAO,MAAM,wBAAwB,QAA6D,CAAA;AAYlG,wBAAgB,yBAAyB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAqB9E;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAE9F;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAKnF;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,EAAE,CAQjD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,kBAAkB,EAAE,CAuBpD;AAED;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAA;AAEtE,wEAAwE;AACxE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,iBAAiB,CAAA;IACvB,sFAAsF;IACtF,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,oBAAoB,GAAG,SAAS,CAuBvE"}

package/lib/types/dsh-adapter/contract.js

@@ -55,6 +55,7 @@ export const UPSTREAM_BLESSED_PACKAGES = [
     '@deepseek-ai/dsh-commands',
     '@deepseek-ai/dsh-cordis-host-runner',
     '@deepseek-ai/dsh-llm',
+    '@deepseek-ai/dsh-llm-pi-ai',
     '@deepseek-ai/dsh-persona',
     '@deepseek-ai/dsh-session',
     '@deepseek-ai/dsh-settings',

package/lib/types/dsh-adapter/extension-events.d.ts

@@ -166,7 +166,7 @@ export type TuiSessionSwitchDecision =
  * before (not currently produced — every switch has a live source).
  */
 export interface TuiSessionSwitchedEvent extends TuiDecisionContext {
-    kind: 'new' | 'resume' | 'rewind';
+    kind: 'new' | 'resume' | 'rewind' | 'fork';
     /** The session that just went live. */
     sessionId: string;
     previousSessionId?: string;

package/lib/types/dsh-adapter/extension-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extension-events.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/extension-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAYlD;;wEAEwE;AACxE,eAAO,MAAM,2BAA2B,OAAO,CAAA;AAC/C,eAAO,MAAM,yBAAyB,OAAO,CAAA;AA4C7C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,GAAG,SAAS,GAC1E,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CA4DxB;AAED;uEACuE;AACvE,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAwCf;AAED;;;kDAGkD;AAClD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC3B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQ/C;AAED,mDAAmD;AACnD,MAAM,WAAW,kBAAkB;IACjC,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAA;IACjB,wCAAwC;IACxC,GAAG,EAAE,MAAM,CAAA;CACZ;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAc,SAAQ,kBAAkB;IACvD,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,2EAA2E;IAC3E,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAA;CAC/B;AAED,MAAM,MAAM,gBAAgB;AAC1B,6DAA6D;AAC3D;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE;AAClB;+EAC+E;GAC7E;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACpC,kEAAkE;GAChE;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACnC,gDAAgD;GAC9C,SAAS,CAAA;AAEb;;;;GAIG;AACH,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,EAAE,EAAE,MAAM,CAAA;IACV,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,MAAM,uBAAuB;AACjC,2EAA2E;AACzE;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACnC;0DAC0D;GACxD;IAAE,KAAK,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE;AACrC,oEAAoE;GAClE,SAAS,CAAA;AAEb;;;;GAIG;AACH,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC5D,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAA;IACZ;oCACgC;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAA;IACnB,6CAA6C;IAC7C,eAAe,EAAE,MAAM,CAAA;IACvB,2DAA2D;IAC3D,cAAc,EAAE,MAAM,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,MAAM,wBAAwB;AAClC;4BAC4B;AAC1B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACjC,SAAS,CAAA;AAEb;;;;;GAKG;AACH,MAAM,WAAW,uBAAwB,SAAQ,kBAAkB;IACjE,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACjC,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAA;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAgB,SAAQ,kBAAkB;CAAG;AAE9D,MAAM,MAAM,kBAAkB;AAC5B,qEAAqE;AACnE;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACjC,SAAS,CAAA;AAEb,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,MAAM;QACd,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC/E,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,GAAG,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;QAC5G,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;QAC9F,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,GAAG,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;QAChH,sBAAsB,CAAC,KAAK,EAAE,uBAAuB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5E,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;KACxF;CACF"}
+{"version":3,"file":"extension-events.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/extension-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAYlD;;wEAEwE;AACxE,eAAO,MAAM,2BAA2B,OAAO,CAAA;AAC/C,eAAO,MAAM,yBAAyB,OAAO,CAAA;AA4C7C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,GAAG,SAAS,GAC1E,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CA4DxB;AAED;uEACuE;AACvE,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAwCf;AAED;;;kDAGkD;AAClD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC3B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQ/C;AAED,mDAAmD;AACnD,MAAM,WAAW,kBAAkB;IACjC,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAA;IACjB,wCAAwC;IACxC,GAAG,EAAE,MAAM,CAAA;CACZ;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAc,SAAQ,kBAAkB;IACvD,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,2EAA2E;IAC3E,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAA;CAC/B;AAED,MAAM,MAAM,gBAAgB;AAC1B,6DAA6D;AAC3D;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE;AAClB;+EAC+E;GAC7E;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACpC,kEAAkE;GAChE;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACnC,gDAAgD;GAC9C,SAAS,CAAA;AAEb;;;;GAIG;AACH,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,EAAE,EAAE,MAAM,CAAA;IACV,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,MAAM,uBAAuB;AACjC,2EAA2E;AACzE;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACnC;0DAC0D;GACxD;IAAE,KAAK,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE;AACrC,oEAAoE;GAClE,SAAS,CAAA;AAEb;;;;GAIG;AACH,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC5D,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAA;IACZ;oCACgC;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAA;IACnB,6CAA6C;IAC7C,eAAe,EAAE,MAAM,CAAA;IACvB,2DAA2D;IAC3D,cAAc,EAAE,MAAM,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,MAAM,wBAAwB;AAClC;4BAC4B;AAC1B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACjC,SAAS,CAAA;AAEb;;;;;GAKG;AACH,MAAM,WAAW,uBAAwB,SAAQ,kBAAkB;IACjE,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAA;IAC1C,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAA;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAgB,SAAQ,kBAAkB;CAAG;AAE9D,MAAM,MAAM,kBAAkB;AAC5B,qEAAqE;AACnE;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACjC,SAAS,CAAA;AAEb,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,MAAM;QACd,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC/E,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,GAAG,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;QAC5G,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;QAC9F,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,GAAG,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;QAChH,sBAAsB,CAAC,KAAK,EAAE,uBAAuB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5E,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;KACxF;CACF"}

package/lib/types/dsh-adapter/index.d.ts

@@ -10,6 +10,7 @@ import type { Context } from '@deepseek-ai/cordis';
 import Schema from '@deepseek-ai/schemastery';
 import type { SessionModeSpec } from '../sessionModes.js';
 import { type ScrollGutterMode, type StatusBarConfig, type ToolBackground } from '../tuiDisplayPrefs.js';
+import { type ShortcutActionId } from '../utils/keymap.js';
 export declare const name = "dsh-tui";
 export declare const inject: string[];
 /**
@@ -81,8 +82,17 @@ export interface Config {
      *  `dsh-tui.scrollGutter`): `timeline` turn rail (default), `scrollbar`
      *  proportional thumb, or `hidden`. */
     scrollGutter?: ScrollGutterMode;
+    /** Show the session name as a chip on the prompt top border's right side
+     *  (settings `dsh-tui.promptSessionLabel`); off by default. */
+    promptSessionLabel?: boolean;
     /** Status-footer field visibility and compact presentation preferences. */
     statusBar?: Partial<StatusBarConfig>;
+    /** Built-in action-shortcut overrides (`paste: 'alt+v'`), keyed by action
+     *  id (see src/utils/keymap.ts). Combos are `ctrl+`/`alt+`/`shift+` plus a
+     *  key; several combos may be comma-separated. Unset actions keep their
+     *  defaults; the `/settings` screen edits the same keys live (its user
+     *  layer wins over this file). */
+    shortcuts?: Partial<Record<ShortcutActionId, string>>;
     /** Shift+Tab session-mode cycle (array order IS the cycle order; index 0
      *  is the unmarked base mode). Each entry bundles any subset of the
      *  `plan`/`sandbox`/`approval` atoms; absent → the built-in

package/lib/types/dsh-adapter/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAsB,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAE5H,eAAO,MAAM,IAAI,YAAY,CAAA;AAU7B,eAAO,MAAM,MAAM,UAAa,CAAA;AAEhC;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;yEAKqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;gDAC4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;gFAE4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;oCACgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;sBAIkB;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;4BAGwB;IACxB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;wDAEoD;IACpD,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;+DAI2D;IAC3D,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;kFAC8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;gCAG4B;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;6DAEyD;IACzD,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IACzC;;8EAE0E;IAC1E,YAAY,CAAC,EAAE,SAAS,GAAG,MAAM,CAAA;IACjC,sEAAsE;IACtE,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B;;2CAEuC;IACvC,YAAY,CAAC,EAAE,gBAAgB,CAAA;IAC/B,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;IACpC;;;yDAGqD;IACrD,KAAK,CAAC,EAAE,eAAe,EAAE,CAAA;CAC1B;AAED,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,CAiDhC,CAAA;AAEF;;;;;;GAMG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASvE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/dsh-adapter/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAsB,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC5H,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAE5E,eAAO,MAAM,IAAI,YAAY,CAAA;AAU7B,eAAO,MAAM,MAAM,UAAa,CAAA;AAEhC;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;yEAKqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;gDAC4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;gFAE4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;oCACgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;sBAIkB;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;4BAGwB;IACxB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;wDAEoD;IACpD,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;+DAI2D;IAC3D,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;kFAC8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;gCAG4B;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;6DAEyD;IACzD,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IACzC;;8EAE0E;IAC1E,YAAY,CAAC,EAAE,SAAS,GAAG,MAAM,CAAA;IACjC,sEAAsE;IACtE,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B;;2CAEuC;IACvC,YAAY,CAAC,EAAE,gBAAgB,CAAA;IAC/B;mEAC+D;IAC/D,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;IACpC;;;;sCAIkC;IAClC,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAA;IACrD;;;yDAGqD;IACrD,KAAK,CAAC,EAAE,eAAe,EAAE,CAAA;CAC1B;AAED,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,CAuDhC,CAAA;AAEF;;;;;;GAMG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASvE"}