@deepseek-harness-tui/dsh-tui 0.9.2 → 0.10.0-beta.1

package/README.md

@@ -49,12 +49,14 @@
     </tr>
   </table>
 </div>
+
 ## 核心能力
 
   - **终端交互**：低资源占用，长会话稳定可靠；多种主题切换，样式美观，实时显示工作状态、TPS、缓存命中率等
-    推理等级、输入/输出 token 与 Git/会话信息。
-  - **功能全面**：`/resume`、`/new`、`/compact`、`/export`、`/btw`，模型热切换，原生subagent，会话fork，自动更新；可在vs code中[以vscode插件形式启动](docs/vscode.md)，已上架 VS Code Marketplace。
+    推理等级、输入/输出 token 与 Git/会话信息；终端卡多行命令可经 `/settings` 折叠为首行 + 计数提示（Ctrl+O 或点击卡片展开）；全屏模式下悬停在截断的工具卡标题、用户消息或会话标题上约 600ms，浮层显示完整内容。
+  - **功能全面**：`/resume` 按工作目录分类浏览、搜索与预览历史会话（左键恢复、右键弹出操作菜单；可固定常用会话——「已固定」分组置顶显示，行内 ★ 或 `Ctrl+P` 切换，持久化到 `~/.dsh-tui`），另有 `/new`、`/compact`、`/export`、`/btw`，模型热切换，原生subagent，会话fork，自动更新，输入框 `/vim` vim 编辑模式、鼠标选区编辑（拖选高亮、Shift+click 扩展、双击选词、Ctrl+C 复制选区）与全屏草稿编辑（`Ctrl+Shift+E` 或输入行 `⛶` 按钮：行号 + 当前行高亮、Enter 换行、Ctrl+Enter 发送、滚轮滚动、点击/拖选，长草稿独占整屏；`/settings` 可关）；可在vs code中[以vscode插件形式启动](docs/vscode.md)，已上架 VS Code Marketplace。
   - **扩展丰富**：原生浏览器交互，compter use等大量附属功能性扩展
+  - **技能归 DSH 管理**：`/skills` 展示当前 profile、用户与项目发现的技能；dsh-TUI 不预装通用技能。
 
 
 
@@ -123,12 +125,25 @@ sh install.sh
 
 想为 dsh-TUI 做插件/扩展？欢迎加入生态！
 
-- **接口与兼容性协定**：[终端交互生态插件准入规范与实施标准](https://github.com/T-Auto/dsh-ecosystem-spec)
-- **插件开发指南**：[`docs/plugins.md`](docs/plugins.md)（接缝、契约、规范与验证清单）
+- **接口与兼容性协定 / 插件开发指南**：[终端交互生态插件准入与开发指南](https://github.com/T-Auto/dsh-ecosystem-spec/blob/main/docs/plugin-admission-and-development.md)（准入规范、接缝、契约、验证清单）
 - **生态组织**：[dsh-tui-ecosystem](https://github.com/dsh-tui-ecosystem)（社区插件与模板的家）
 - **模板仓库**：[plugin-template](https://github.com/dsh-tui-ecosystem/plugin-template)（从模板起步，5 分钟出一个插件）
 - **参考实现**：`dsh-working-activity`（实时工作状态行：TUI 槽位 + `activity/status` 会话事件双出口）
 
+### 接缝稳定性参考
+
+按当前实现成熟度给出的**非正式**分级，帮助插件作者评估投入；正式状态与兼容性协定以
+[准入与开发指南](https://github.com/T-Auto/dsh-ecosystem-spec/blob/main/docs/plugin-admission-and-development.md)为准：
+
+| 分级 | 接缝 |
+| --- | --- |
+| 稳定候选（形态冻结；如有破坏性变更，先在次版本弃用告警再移除） | 六 设置区块 · 八 全屏场景 · 十 托管对话框 · 十一 状态行 · 十二 键盘快捷键 · 十三 条目渲染器 |
+| 实验性（仍可能随 dsh-std / 准入规范演进调整） | 九 决策事件 · toast 通知（`ctx.tuiToast`，新增） |
+| 跟随上游（稳定性由 cordis / dsh 官方机制决定） | 一 会话事件 · 二 官方 prompt 槽位 · 三 技能打包 · 四 主题 · 五 system prompt 段 · 七 profile 组合 |
+
+另：`@deepseek-harness-tui/dsh-tui/test-utils`（headless 准入/挂载测试助手）与
+`@deepseek-harness-tui/dsh-tui/api`（纯类型入口）为实验性公开面。
+
 
 
 ## 文档索引
@@ -137,12 +152,12 @@ sh install.sh
 | --- | --- |
 | [安装与快速开始](docs/getting-started.md) | 前置条件、安装、启动、profile 生命周期、源码开发 |
 | [配置参考](docs/configuration.md) | Cordis 覆盖、配置字段、Agent preset、MCP、环境变量 |
-| [主题系统](docs/themes.md) | 内置主题、自动检测、自定义 JSON 主题与校验规则 |
+| [主题系统](docs/themes.md) | 内置主题、自动检测、静态 JSON 与 npm 插件主题、校验规则 |
 | [交互与命令](docs/interaction.md) | 快捷键、鼠标、问卷、slash command 与会话工作流 |
 | [架构与限制](docs/architecture.md) | 运行链路、渲染与持久化设计、安全边界、已知限制 |
 | [VS Code 使用指南](docs/vscode.md) | 在 VS Code 集成终端运行 dsh-tui；companion 扩展 `dsh-tui-vscode` 提供与 Claude Code 官方扩展几乎一致的体验（已上架 Marketplace） |
 | [贡献与开发约定](docs/contributing.md) | 贡献流程、仓库地图、构建产物、验证矩阵与修改规则 |
-| [插件开发指南](docs/plugins.md) | 插件接缝（会话事件 / 槽位 / 技能 / 主题 / prompt 段）、契约、规范与收录 |
+| [插件准入与开发指南](https://github.com/T-Auto/dsh-ecosystem-spec/blob/main/docs/plugin-admission-and-development.md) | 接口与兼容性协定 / 插件准入规范 / 插件接缝 / 契约 / 验证清单（已并入 dsh-ecosystem-spec） |
 
 完整的中英文索引见 [`docs/README.md`](docs/README.md)。
 
@@ -152,16 +167,19 @@ sh install.sh
 
 - **生态组织**：[dsh-tui-ecosystem](https://github.com/dsh-tui-ecosystem) —— 社区插件、模板与收录列表的家。欢迎来发插件、提创意、互相取暖 🐋
 - **社区交流群**：使用问题、插件创意、功能许愿，都欢迎进来聊。
+- **行为准则**：参与前请读一遍[贡献者行为准则](CODE_OF_CONDUCT.md)。
 
-| 微信群 | QQ 群（群号 572549239） | 微信三群 |
+| 微信群 | QQ 群（群号 572549239） | 微信四群 |
 | :---: | :---: | :---: |
-| <img src="screenshots/wechat-group.jpg" alt="dsh-TUI 社区交流群微信群二维码" width="200"> | <img src="screenshots/qq-group.png" alt="dsh-TUI 社区交流群 QQ 群二维码" width="200"> | <img src="screenshots/wechat-group3.jpg" alt="dsh-TUI 社区交流群微信三群二维码" width="200"> |
+| <img src="screenshots/wechat-group.jpg" alt="dsh-TUI 社区交流群微信群二维码" width="200"> | <img src="screenshots/qq-group.png" alt="dsh-TUI 社区交流群 QQ 群二维码" width="200"> | <img src="screenshots/wechat-group4.jpg" alt="dsh-TUI 社区交流四群微信群二维码" width="200"> |
 
 > 微信群二维码约 7 天过期一次，如遇失效请走 QQ 群（572549239），或开个 issue 提醒我们更新。
 
 ## 权限与安全边界
 
-`dsh-TUI` 不实现独立沙箱，而是使用当前 DSH profile 的文件、Shell、sandbox 与 approval 策略。仓库提供的 profile 在非 Windows 平台默认采用工作区约束与审批；Windows 当前没有对应的沙箱后端，组合会退回到 `danger-full-access` 且不弹审批。在包含敏感凭证或不可信仓库的环境中启动前，请先检查 profile 配置。
+> **Windows 安全警告：** Windows profile 默认使用 `danger-full-access`，且 approval 默认是 `never`。这会授予工具不受限制的访问权限；在敏感凭证或不可信仓库环境中启动前，务必先检查并收紧 profile 配置。
+
+`dsh-TUI` 不实现独立沙箱，而是使用当前 DSH profile 的文件、Shell、sandbox 与 approval 策略。权限预设来自 DSH `permissionPresets` registry：服务缺失时使用 legacy 三项兼容名册；服务已挂载但为空、损坏或不一致时标记为 unavailable，TUI fail closed，不伪造名册。可用 registry 按声明顺序提供第三方预设，只有符合既有 command-token 语法的 ID 才进入补全，`custom` 只显示为当前态，不是可选择目标；切换始终走官方 `/permission <preset>` 命令。若外部 `/permission` 命令本身未注册，输入沿用现有默认命令/model dispatch。在包含敏感凭证或不可信仓库的环境中启动前，请先检查 profile 配置。
 
 详见[权限边界与已知限制](docs/architecture.md#权限与安全边界)。
 

package/bin/dsh-tui.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * dsh-tui — 双态启动器（delegating launcher，0.9.2）。
+ * dsh-tui — 双态启动器（delegating launcher，0.9.3）。
  *
  * 同一个文件按“自己住在哪”决定扮演的角色：
  *
@@ -28,13 +28,29 @@
  * `DSH_TUI_LANG` 显式指定时从其值，否则默认中文（同 src/i18n.ts 的缺省）。
  */
 import { spawn, spawnSync } from 'node:child_process'
-import { existsSync, readFileSync, realpathSync } from 'node:fs'
+import { existsSync, readFileSync, realpathSync, rmSync } from 'node:fs'
 import { homedir } from 'node:os'
 import { dirname, isAbsolute, join, resolve } from 'node:path'
 import { fileURLToPath, pathToFileURL } from 'node:url'
 
+if (process.platform === 'win32' && process.env.DSH_TUI_STANDALONE_BINARY) {
+  try {
+    const oldBinary = `${process.env.DSH_TUI_STANDALONE_BINARY}.old`
+    if (existsSync(oldBinary)) rmSync(oldBinary, { force: true })
+  } catch {
+    // Best effort cleanup.
+  }
+}
+
 const here = dirname(fileURLToPath(import.meta.url))
 const ownDir = dirname(here)
+
+/**
+ * Read and parse a JSON file safely.
+ *
+ * @param {string} p - File path to parse.
+ * @returns {any} Parsed JSON content or undefined.
+ */
 const readJson = p => {
   try {
     return JSON.parse(readFileSync(p, 'utf8'))
@@ -50,6 +66,12 @@ const PROFILE = 'dsh-tui'
 // --- 内联小工具（见文件头：零 lib 依赖是迁移契约的一部分）---------------------
 // 与 lib/types/utils/shellQuote.js 同语义的最小实现：cmd.exe 以空格拼接参数
 // 且不做转义，含空格/引号的参数必须整体加引号（内层引号与反斜杠转义）。
+/**
+ * Quote an array of arguments for cmd.exe.
+ *
+ * @param {string[]} args - Argument tokens.
+ * @returns {string[]} Quoted argument tokens.
+ */
 const shellQuote = args =>
   args.map(arg => {
     const s = String(arg)
@@ -190,7 +212,7 @@ const MSG = {
   },
   helpText: {
     en:
-      `Usage: dsh-tui [command] [options] [path|url]\n\n` +
+      `Usage: dsh-tui|dst [command] [options] [path|url]\n\n` +
       `Commands:\n` +
       `  update                 Update the ${PROFILE} profile to the latest release\n` +
       `  doctor                 Pre-flight environment checks (dsh/pnpm/profile/key)\n` +
@@ -202,7 +224,7 @@ const MSG = {
       `  <path|url>             Open with the given workspace target\n\n` +
       `Any other argument is forwarded to \`dsh --profile ${PROFILE}\`.`,
     zh:
-      `用法：dsh-tui [命令] [选项] [路径|URL]\n\n` +
+      `用法：dsh-tui|dst [命令] [选项] [路径|URL]\n\n` +
       `命令：\n` +
       `  update                 将 ${PROFILE} profile 升级到最新版本\n` +
       `  doctor                 启动前环境诊断（dsh/pnpm/profile/密钥）\n` +

package/cordis.patch.yml

@@ -7,7 +7,7 @@
 # restates every key it owns (see the dsh-base patch for the shared
 # defaults). The dsh-base core rows that need no dsh-tui value — tools,
 # sandbox/approval policy, skills, goal, plan mode, workspace context,
-# telemetry — are inherited unchanged.
+# telemetry — are inherited unless this surface explicitly restates them.
 
 # ── surface-specific values over the dsh-base layer ─────────────────────────
 
@@ -37,18 +37,39 @@
   config:
     agents: []
 
+# Preserve the TUI's opt-in privacy stance across the alpha base default
+# change to FEEDBACK_ONLY. An explicit DSH_TELEMETRY_MODE still wins. This
+# restates the whole alpha config because include patches replace config
+# objects rather than merging them.
+- id: session-telemetry-otel
+  config:
+    mode: !!js process.env.DSH_TELEMETRY_MODE || 'DISABLED'
+    shutdownTimeoutMillis: 3000
+    exporter:
+      url: !!js process.env.DSH_TELEMETRY_OTLP_URL ?? 'https://harness-telemetry.deepseeksvc.com/v1/logs'
+      compression: gzip
+      timeoutMillis: 1000
+    processor:
+      scheduledDelayMillis: 10000
+      maxQueueSize: 2048
+      maxExportBatchSize: 2048
+      exportTimeoutMillis: 1500
+
+# The alpha base sends the active Loader package inventory on official
+# DeepSeek requests by default. TUI keeps that diagnostic metadata opt-in.
+- id: plugin-package-inventory-deepseek
+  config:
+    enabled: false
+
 # ── agent presets (issue #8) ────────────────────────────────────────────────
 #
 # The model-facing plugin set moves INTO the agent-presets roster: every
 # session composes its tools/prompt sections from one preset directory
-# (standard/code/minimal/cordis) instead of the host rows below. The TUI's
-# roster row uses the scoped `dsh-tui-agent-presets` id and carries the
-# shipped `config/agent-presets/` system root itself (derived from the dsh
-# CLI installation through the launcher-maintained `profiles/node_modules`
-# fallback link), because the official profile-boot root overlay only targets
-# the unscoped `agent-presets` id that surface bundles own. The roster itself
-# appends `$DSH_HOME/.agent-presets` (user-authored presets,
-# `includeUserRoot` default). Mirroring the official dsh-web-app patch: every
+# (standard/ptc/minimal/cordis) instead of the host rows below. The TUI's
+# roster row uses the scoped `dsh-tui-agent-presets` id. alpha packages prepend
+# their bundled system root; the validated rc line still needs the dsh CLI's
+# `config/agent-presets/` directory supplied explicitly. Both append
+# `$DSH_HOME/.agent-presets`. Mirroring the official dsh-web-app patch: every
 # dsh-base row a preset now owns is disabled here, so a minimal agent does not
 # leak host-layer tools (an agent's registry view resolves agent → preset →
 # global).
@@ -59,7 +80,7 @@
 - id: command-compact
   disabled: true
 
-# compaction lives in the preset's own isolate realm (standard/code/cordis
+# compaction lives in the preset's own isolate realm (standard/ptc/cordis
 # carry `compaction-basic` with package defaults; minimal has none). The
 # CC_TUI_COMPACT_RATIO/CC_TUI_COMPACT_RETAIN tunables retired with this host
 # row — preset compositions own their compaction config.
@@ -81,6 +102,27 @@
 - id: tool-fs-search
   disabled: true
 
+- id: command-goal
+  # rc.2 presets do not carry this command, so their host row must remain
+  # active. alpha disables it only when the shipped standard preset really
+  # owns the command; reading the capability avoids guessing from another
+  # optional Loader row.
+  disabled: !!js >-
+    (() => {
+      const require = process.getBuiltinModule('node:module').createRequire(ctx.baseUrl)
+      const fs = process.getBuiltinModule('node:fs')
+      const path = process.getBuiltinModule('node:path')
+      try {
+        const manifest = require.resolve('@deepseek-ai/dsh-agent-presets/package.json')
+        const preset = path.join(path.dirname(manifest), 'presets', 'standard', 'agent.cordis.yml')
+        return fs.readFileSync(preset, 'utf8')
+          .split(/\r?\n/u)
+          .some(line => line.trim() === '- id: command-goal')
+      } catch {
+        return false
+      }
+    })()
+
 - id: tool-goal
   disabled: true
 
@@ -158,16 +200,17 @@
 # semantics would create a duplicate row. dsh-tui defensively creates the
 # service on its own context when no composition provides it (bare
 # `dsh --config cordis.yml` boots), then mounts the model-facing
-# ask_user_question tool and registers the questionnaire provider on
-# `ctx.userQuestions`.
+# ask_user_question tool. On legacy hosts it registers the TUI provider on
+# `ctx.userQuestions`; on Alpha it answers the scoped
+# `user-questions/request` waterfall.
 
 - insert:
     # Workspace grouping is a separate durable ledger, not a cwd-derived
     # projection. Mount the same domain stack and storage root as dsh-web-app
     # so TUI-created sessions can attach to the exact registry Web reads.
     #
-    # The six rows below own host-plane services that the official web-app
-    # bundle may already mount. Loader entry ids are process-global, so these
+    # These rows own host-plane services that the official web-app bundle may
+    # already mount. Loader entry ids are process-global, so these
     # rows use dsh-tui-* scoped ids and self-disable when an enabled row with
     # the official id/name is already present in the tree. The disabled check
     # is evaluated during the same include update that inserts every row, so
@@ -188,10 +231,38 @@
       config:
         backend: json
 
+    # Alpha moved the durable storage stack into dsh-base, so these three
+    # scoped copies self-disable there. Keep them for the validated rc lines,
+    # whose base layer does not provide the stack to a TUI-only profile.
+
     - id: dsh-tui-workspace
       name: '@deepseek-ai/dsh-workspace'
       disabled: !!js "[...ctx.loader.entries()].some(entry => entry.options.id === 'workspace' && entry.options.name === '@deepseek-ai/dsh-workspace' && !entry.disabled)"
 
+    # PTC presentation waits on this Host service. The scoped row supports a
+    # TUI-only profile and yields to the official web-app row in mixed profiles.
+    - id: dsh-tui-code-runtime
+      name: '@deepseek-ai/dsh-code-runtime-worker-thread'
+      disabled: !!js "[...ctx.loader.entries()].some(entry => entry.options.id === 'code-runtime' && entry.options.name === '@deepseek-ai/dsh-code-runtime-worker-thread' && !entry.disabled)"
+
+    # Alpha presets opt their delegation tool into Host-owned model-selection
+    # settings. Without this service standard/ptc/cordis preset mounting fails.
+    # The package subpath does not exist on rc.2, so resolve that capability
+    # directly before Loader attempts the import. An enabled official row still
+    # owns the seat in mixed profiles.
+    - id: dsh-tui-subagent-model-selection-settings
+      name: '@deepseek-ai/dsh-tool-subagent/model-selection-settings'
+      disabled: !!js >-
+        (() => {
+          const require = process.getBuiltinModule('node:module').createRequire(ctx.baseUrl)
+          try {
+            require.resolve('@deepseek-ai/dsh-tool-subagent/model-selection-settings')
+          } catch {
+            return true
+          }
+          return [...ctx.loader.entries()].some(entry => entry.options.id === 'subagent-model-selection-settings' && entry.options.name === '@deepseek-ai/dsh-tool-subagent/model-selection-settings' && !entry.disabled)
+        })()
+
     # Generic terminal workspace registry. Optional plugins add providers;
     # the TUI itself always supplies LOCAL and has no provider-specific code.
     - id: dsh-tui-workspaces
@@ -231,27 +302,35 @@
       name: '@deepseek-harness-tui/dsh-tui/extensions'
 
     # The agent-preset roster (issue #8): `ctx.agentPresets`, the service the
-    # TUI composes every session's model-facing world from. The scoped row
-    # carries the official CLI's shipped `config/agent-presets/` directory
-    # (standard/code/minimal/cordis, system trust) through the
-    # launcher-maintained profiles/node_modules fallback link; the roster
-    # itself appends `$DSH_HOME/.agent-presets` (user-authored presets,
-    # `includeUserRoot` default). A boot that never reached profile-boot
-    # leaves the system root empty and the roster finds only user presets.
+    # TUI composes every session's model-facing world from. alpha packages
+    # prepend their bundled presets as the read-only system root; rc.2 packages
+    # have no bundled root and still scan the dsh CLI directory. Both append
+    # `$DSH_HOME/.agent-presets` as the user root. Deployment-added roots may
+    # still be supplied by a later patch.
     - id: dsh-tui-agent-presets
       name: '@deepseek-ai/dsh-agent-presets'
       disabled: !!js "[...ctx.loader.entries()].some(entry => entry.options.id === 'agent-presets' && entry.options.name === '@deepseek-ai/dsh-agent-presets' && !entry.disabled)"
-      config:
-        default: standard
-        roots: !!js >-
-          (() => {
-            const base = ctx.baseUrl
-            if (!base) return undefined
-            const root = new URL('../node_modules/@deepseek-ai/dsh/config/agent-presets/', base)
-            let path = decodeURIComponent(root.pathname)
-            if (/^\/[A-Za-z]:/.test(path)) path = path.slice(1)
-            return [{ path, trust: 'system' }]
-          })()
+      config: !!js >-
+        (() => {
+          const require = process.getBuiltinModule('node:module').createRequire(ctx.baseUrl)
+          const fs = process.getBuiltinModule('node:fs')
+          const path = process.getBuiltinModule('node:path')
+          try {
+            const manifest = require.resolve('@deepseek-ai/dsh-agent-presets/package.json')
+            if (fs.existsSync(path.join(path.dirname(manifest), 'presets'))) {
+              return { default: 'standard' }
+            }
+          } catch {
+            // Let the roster import report a missing package; preserve the rc
+            // root fallback below for every package generation without one.
+          }
+          const base = ctx.baseUrl
+          if (!base) return { default: 'standard' }
+          const root = new URL('../node_modules/@deepseek-ai/dsh/config/agent-presets/', base)
+          let rootPath = decodeURIComponent(root.pathname)
+          if (/^\/[A-Za-z]:/.test(rootPath)) rootPath = rootPath.slice(1)
+          return { default: 'standard', roots: [{ path: rootPath, trust: 'system' }] }
+        })()
 
     # Host-plane services the `cordis` preset's plugin-experimentation tool
     # waits on (dynamicCordisRunner/cordisInspect); dsh-base carries no such
@@ -281,10 +360,11 @@
       name: '@deepseek-harness-tui/dsh-tui'
       # The entry-level dependency augments the plugin's `agents` inject and
       # prevents startup Session creation from racing WorkspaceRegistry init.
-      inject: [workspaceRegistry, agents, tuiWorkspaces, tuiScenes, tuiDialogs, tuiStatus, tuiShortcuts, tuiRenderers]
-      # `tuiWorkspaces`/`tuiScenes` (and the dsh-tui-extensions services)
-      # live in the entry-level inject ONLY as an
-      # ordering (and reload-rebind) guarantee alongside their service rows
+      inject: [workspaceRegistry, agents, tuiWorkspaces, tuiScenes, tuiDialogs, tuiStatus, tuiShortcuts, tuiRenderers, tuiThemes]
+      # `tuiWorkspaces`/`tuiScenes` (and the dsh-tui-extensions services,
+      # including `tuiThemes`)
+      # live in the entry-level inject ONLY as an ordering (and reload-rebind)
+      # guarantee alongside their service rows
       # above — they are deliberately absent from the plugin's code-level
       # inject (issue #183): the dsh CLI may read this patch from an older
       # copy of the package than the plugin module it loads, and a hard
@@ -306,9 +386,7 @@
         # split（强制双栏）/ unified（强制统一式）。/settings 屏可实时改。
         # diffLayout: auto
         # 每个请求实际生效的推理强度，按当前路由的 adapter 档位校验
-        # （deepseek: off/high/max）——不在档位表里的值被忽略，回落 adapter
-        # 默认值。优先于持久化的 Shift+Tab 选择（~/.dsh-tui/effort.json）；
-        # 同时作为顶栏/状态栏的启动显示，首个请求头回来后以实际值为准。
+        #（deepseek: off/low/high/max）；非法值回落 adapter 默认。
         effort: max
         # Shift+Tab session-mode cycle (array order IS the cycle order;
         # absent → the built-in default/plan/full trio below). Each entry

package/cordis.yml

@@ -3,9 +3,10 @@
 # Requires DEEPSEEK_API_KEY; a terminal TTY is mandatory.
 
 # The user-interaction service: hosts `ctx.userQuestions`, the seam behind
-# the model-facing ask_user_question tool. dsh-tui registers its questionnaire
-# provider on it; the service must live at the root so the agent loop's tool
-# execution can reach it.
+# the model-facing ask_user_question tool. dsh-tui uses the legacy provider
+# API when present, otherwise the scoped user-questions/request waterfall;
+# the service must live at the root so the agent loop's tool execution can
+# reach it.
 - id: user-questions
   name: '@deepseek-ai/dsh-user-questions'
 
@@ -43,14 +44,17 @@
   name: '@deepseek-harness-tui/dsh-tui/plugin-host'
 
 # Plugin-facing UI seams: managed dialogs, status-line contributions,
-# keyboard shortcuts, custom session-entry renderers (decision events are
-# fired by the channel and need no row).
+# keyboard shortcuts, custom session-entry renderers, and runtime themes
+# (decision events are fired by the channel and need no row).
 - id: dsh-tui-extensions
   name: '@deepseek-harness-tui/dsh-tui/extensions'
 
 - id: dsh-tui
   name: '@deepseek-harness-tui/dsh-tui'
-  inject: [agents, tuiWorkspaces, tuiScenes, tuiDialogs, tuiStatus, tuiShortcuts, tuiRenderers]
+  # Entry-level only: orders/rebinds optional extension services on reload;
+  # dsh-tui does not hard-inject them at code level, so stale profiles degrade
+  # to static themes and inert extension surfaces instead of deadlocking boot.
+  inject: [agents, tuiWorkspaces, tuiScenes, tuiDialogs, tuiStatus, tuiShortcuts, tuiRenderers, tuiThemes]
   config:
     provider: deepseek-official
     # Alt-screen fullscreen (CC 同款): 应用内鼠标选区（选择即复制, OSC 52 +
@@ -58,10 +62,9 @@
     # inline 渲染, 鼠标交给终端模拟器原生选择。
     fullscreen: true
     # Reasoning effort applied to every request, validated against the live
-    # route's adapter levels (deepseek: off/high/max) — an unlisted level is
-    # ignored and the adapter default applies. Wins over the persisted
-    # Shift+Tab choice (~/.dsh-tui/effort.json); also seeds the startup
-    # header/statusline until the first request header reports the live value.
+    # route's adapter levels. An unlisted level falls back to the adapter
+    # default; this wins over the persisted /effort choice and seeds the
+    # startup header/statusline.
     effort: max
     # Shift+Tab 会话模式循环（数组顺序即循环顺序；缺省为下面三档）。
     # 每档可声明 plan（计划模式开/关）、sandbox（read-only/

package/dsh-ecosystem-spec/protocols/profile-definitions.d.ts

@@ -1,13 +1,13 @@
-import type { ApiReference, ProtocolCatalog, ProtocolDefinition } from '@dsh-std/core'
-export { registerTuiContributionExtensions } from './tui-contributions.js'
-export * from './tui-channel.js'
-
-export const DECISION_EVENTS: Readonly<ApiReference & {
-  apiVersion: 'tui.dsh/v1alpha1'
-  kind: 'DecisionEvents'
-}>
-
-export const decisionEventsDefinition: ProtocolDefinition
-export const profileDefinitions: readonly ProtocolDefinition[]
-
-export function registerProfileProtocols(catalog: ProtocolCatalog): () => void
+import type { ApiReference, ProtocolCatalog, ProtocolDefinition } from '@dsh-std/core'
+export { registerTuiContributionExtensions } from './tui-contributions.js'
+export * from './tui-channel.js'
+
+export const DECISION_EVENTS: Readonly<ApiReference & {
+  apiVersion: 'tui.dsh/v1alpha1'
+  kind: 'DecisionEvents'
+}>
+
+export const decisionEventsDefinition: ProtocolDefinition
+export const profileDefinitions: readonly ProtocolDefinition[]
+
+export function registerProfileProtocols(catalog: ProtocolCatalog): () => void

package/dsh-ecosystem-spec/protocols/profile-definitions.js

@@ -1,59 +1,59 @@
-/** dsh-TUI private protocol definitions evaluated by @dsh-std/core. */
-
-export { registerTuiContributionExtensions } from './tui-contributions.js'
-export * from './tui-channel.js'
-import { tuiChannelDefinition } from './tui-channel.js'
-
-export const DECISION_EVENTS = Object.freeze({
-  apiVersion: 'tui.dsh/v1alpha1',
-  kind: 'DecisionEvents',
-})
-
-function featureSupport(value, label) {
-  if (value === undefined) return Object.freeze({ features: Object.freeze([]) })
-  if (typeof value !== 'object' || value === null || Array.isArray(value)) {
-    throw new TypeError(`${label} support spec must be an object`)
-  }
-  const unknown = Object.keys(value).filter(key => key !== 'features' && !key.startsWith('x-'))
-  if (unknown.length > 0) throw new TypeError(`${label} support spec contains unknown field ${JSON.stringify(unknown[0])}`)
-  if (value.features !== undefined && (!Array.isArray(value.features)
-    || value.features.some(feature => typeof feature !== 'string' || feature.trim() === ''))) {
-    throw new TypeError(`${label} support spec.features must be an array of non-empty strings`)
-  }
-  return Object.freeze({ features: Object.freeze([...(value.features ?? [])].sort()) })
-}
-
-function providerDefinition(reference, label) {
-  return Object.freeze({
-    ...reference,
-    validateRequirement(value) {
-      if (value !== undefined) throw new TypeError(`${label} requirement does not accept spec in manifest v0.15`)
-      return undefined
-    },
-    validateSupport(value) { return featureSupport(value, label) },
-    negotiate(input) {
-      const providers = [...new Set(input.supports.map(row => row.participant))].sort()
-      const issues = input.requirements.flatMap(row => providers.length === 0
-        ? [{
-            code: row.requirement.optional === true ? 'optional-support-missing' : 'required-support-missing',
-            severity: row.requirement.optional === true ? 'warning' : 'error',
-            participant: row.participant,
-            message: `${label} has no provider in this negotiation scope`,
-          }]
-        : [])
-      return { agreement: Object.freeze({ providers: Object.freeze(providers) }), issues: Object.freeze(issues) }
-    },
-  })
-}
-
-export const decisionEventsDefinition = providerDefinition(DECISION_EVENTS, 'DecisionEvents')
-
-export const profileDefinitions = Object.freeze([
-  decisionEventsDefinition,
-  tuiChannelDefinition,
-])
-
-export function registerProfileProtocols(catalog) {
-  const disposers = profileDefinitions.map(definition => catalog.register(definition))
-  return () => { for (const dispose of disposers.reverse()) dispose() }
-}
+/** dsh-TUI private protocol definitions evaluated by @dsh-std/core. */
+
+export { registerTuiContributionExtensions } from './tui-contributions.js'
+export * from './tui-channel.js'
+import { tuiChannelDefinition } from './tui-channel.js'
+
+export const DECISION_EVENTS = Object.freeze({
+  apiVersion: 'tui.dsh/v1alpha1',
+  kind: 'DecisionEvents',
+})
+
+function featureSupport(value, label) {
+  if (value === undefined) return Object.freeze({ features: Object.freeze([]) })
+  if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+    throw new TypeError(`${label} support spec must be an object`)
+  }
+  const unknown = Object.keys(value).filter(key => key !== 'features' && !key.startsWith('x-'))
+  if (unknown.length > 0) throw new TypeError(`${label} support spec contains unknown field ${JSON.stringify(unknown[0])}`)
+  if (value.features !== undefined && (!Array.isArray(value.features)
+    || value.features.some(feature => typeof feature !== 'string' || feature.trim() === ''))) {
+    throw new TypeError(`${label} support spec.features must be an array of non-empty strings`)
+  }
+  return Object.freeze({ features: Object.freeze([...(value.features ?? [])].sort()) })
+}
+
+function providerDefinition(reference, label) {
+  return Object.freeze({
+    ...reference,
+    validateRequirement(value) {
+      if (value !== undefined) throw new TypeError(`${label} requirement does not accept spec in manifest v0.15`)
+      return undefined
+    },
+    validateSupport(value) { return featureSupport(value, label) },
+    negotiate(input) {
+      const providers = [...new Set(input.supports.map(row => row.participant))].sort()
+      const issues = input.requirements.flatMap(row => providers.length === 0
+        ? [{
+            code: row.requirement.optional === true ? 'optional-support-missing' : 'required-support-missing',
+            severity: row.requirement.optional === true ? 'warning' : 'error',
+            participant: row.participant,
+            message: `${label} has no provider in this negotiation scope`,
+          }]
+        : [])
+      return { agreement: Object.freeze({ providers: Object.freeze(providers) }), issues: Object.freeze(issues) }
+    },
+  })
+}
+
+export const decisionEventsDefinition = providerDefinition(DECISION_EVENTS, 'DecisionEvents')
+
+export const profileDefinitions = Object.freeze([
+  decisionEventsDefinition,
+  tuiChannelDefinition,
+])
+
+export function registerProfileProtocols(catalog) {
+  const disposers = profileDefinitions.map(definition => catalog.register(definition))
+  return () => { for (const dispose of disposers.reverse()) dispose() }
+}

package/dsh-ecosystem-spec/protocols/tui-channel-http.d.ts

@@ -1,15 +1,15 @@
-export const TUI_CHANNEL_HTTP_API_VERSION: 'tui.dsh/v1alpha1'
-export const TUI_CHANNEL_HTTP_KIND: 'ChannelEndpoint'
-export const TUI_CHANNEL_HTTP_HEALTH_PATH: '/dsh-tui/v1/health'
-export const TUI_CHANNEL_HTTP_DESCRIPTOR_PATH: '/dsh-tui/v1/endpoint'
-export const TUI_CHANNEL_HTTP_WEBSOCKET_PATH: '/dsh-tui/v1/connection'
-
-export interface TuiChannelEndpointDescriptor {
-  readonly apiVersion: typeof TUI_CHANNEL_HTTP_API_VERSION
-  readonly kind: typeof TUI_CHANNEL_HTTP_KIND
-  readonly origin: string
-  readonly connection: typeof TUI_CHANNEL_HTTP_WEBSOCKET_PATH
-}
-
-export function createTuiChannelEndpointDescriptor(origin: string): TuiChannelEndpointDescriptor
-export function validateTuiChannelEndpointDescriptor(value: unknown): TuiChannelEndpointDescriptor
+export const TUI_CHANNEL_HTTP_API_VERSION: 'tui.dsh/v1alpha1'
+export const TUI_CHANNEL_HTTP_KIND: 'ChannelEndpoint'
+export const TUI_CHANNEL_HTTP_HEALTH_PATH: '/dsh-tui/v1/health'
+export const TUI_CHANNEL_HTTP_DESCRIPTOR_PATH: '/dsh-tui/v1/endpoint'
+export const TUI_CHANNEL_HTTP_WEBSOCKET_PATH: '/dsh-tui/v1/connection'
+
+export interface TuiChannelEndpointDescriptor {
+  readonly apiVersion: typeof TUI_CHANNEL_HTTP_API_VERSION
+  readonly kind: typeof TUI_CHANNEL_HTTP_KIND
+  readonly origin: string
+  readonly connection: typeof TUI_CHANNEL_HTTP_WEBSOCKET_PATH
+}
+
+export function createTuiChannelEndpointDescriptor(origin: string): TuiChannelEndpointDescriptor
+export function validateTuiChannelEndpointDescriptor(value: unknown): TuiChannelEndpointDescriptor