@deepseek-harness-tui/dsh-tui 0.9.3 → 0.10.0-beta.1

package/README.md

@@ -53,9 +53,10 @@
 ## 核心能力
 
   - **终端交互**：低资源占用，长会话稳定可靠；多种主题切换，样式美观，实时显示工作状态、TPS、缓存命中率等
-    推理等级、输入/输出 token 与 Git/会话信息；终端卡多行命令可经 `/settings` 折叠为首行 + 计数提示（Ctrl+O 或点击卡片展开）。
-  - **功能全面**：`/resume`、`/new`、`/compact`、`/export`、`/btw`，模型热切换，原生subagent，会话fork，自动更新；可在vs code中[以vscode插件形式启动](docs/vscode.md)，已上架 VS Code Marketplace。
+    推理等级、输入/输出 token 与 Git/会话信息；终端卡多行命令可经 `/settings` 折叠为首行 + 计数提示（Ctrl+O 或点击卡片展开）；全屏模式下悬停在截断的工具卡标题、用户消息或会话标题上约 600ms，浮层显示完整内容。
+  - **功能全面**：`/resume` 按工作目录分类浏览、搜索与预览历史会话（左键恢复、右键弹出操作菜单；可固定常用会话——「已固定」分组置顶显示，行内 ★ 或 `Ctrl+P` 切换，持久化到 `~/.dsh-tui`），另有 `/new`、`/compact`、`/export`、`/btw`，模型热切换，原生subagent，会话fork，自动更新，输入框 `/vim` vim 编辑模式、鼠标选区编辑（拖选高亮、Shift+click 扩展、双击选词、Ctrl+C 复制选区）与全屏草稿编辑（`Ctrl+Shift+E` 或输入行 `⛶` 按钮：行号 + 当前行高亮、Enter 换行、Ctrl+Enter 发送、滚轮滚动、点击/拖选，长草稿独占整屏；`/settings` 可关）；可在vs code中[以vscode插件形式启动](docs/vscode.md)，已上架 VS Code Marketplace。
   - **扩展丰富**：原生浏览器交互，compter use等大量附属功能性扩展
+  - **技能归 DSH 管理**：`/skills` 展示当前 profile、用户与项目发现的技能；dsh-TUI 不预装通用技能。
 
 
 
@@ -129,6 +130,20 @@ sh install.sh
 - **模板仓库**：[plugin-template](https://github.com/dsh-tui-ecosystem/plugin-template)（从模板起步，5 分钟出一个插件）
 - **参考实现**：`dsh-working-activity`（实时工作状态行：TUI 槽位 + `activity/status` 会话事件双出口）
 
+### 接缝稳定性参考
+
+按当前实现成熟度给出的**非正式**分级，帮助插件作者评估投入；正式状态与兼容性协定以
+[准入与开发指南](https://github.com/T-Auto/dsh-ecosystem-spec/blob/main/docs/plugin-admission-and-development.md)为准：
+
+| 分级 | 接缝 |
+| --- | --- |
+| 稳定候选（形态冻结；如有破坏性变更，先在次版本弃用告警再移除） | 六 设置区块 · 八 全屏场景 · 十 托管对话框 · 十一 状态行 · 十二 键盘快捷键 · 十三 条目渲染器 |
+| 实验性（仍可能随 dsh-std / 准入规范演进调整） | 九 决策事件 · toast 通知（`ctx.tuiToast`，新增） |
+| 跟随上游（稳定性由 cordis / dsh 官方机制决定） | 一 会话事件 · 二 官方 prompt 槽位 · 三 技能打包 · 四 主题 · 五 system prompt 段 · 七 profile 组合 |
+
+另：`@deepseek-harness-tui/dsh-tui/test-utils`（headless 准入/挂载测试助手）与
+`@deepseek-harness-tui/dsh-tui/api`（纯类型入口）为实验性公开面。
+
 
 
 ## 文档索引
@@ -137,7 +152,7 @@ sh install.sh
 | --- | --- |
 | [安装与快速开始](docs/getting-started.md) | 前置条件、安装、启动、profile 生命周期、源码开发 |
 | [配置参考](docs/configuration.md) | Cordis 覆盖、配置字段、Agent preset、MCP、环境变量 |
-| [主题系统](docs/themes.md) | 内置主题、自动检测、自定义 JSON 主题与校验规则 |
+| [主题系统](docs/themes.md) | 内置主题、自动检测、静态 JSON 与 npm 插件主题、校验规则 |
 | [交互与命令](docs/interaction.md) | 快捷键、鼠标、问卷、slash command 与会话工作流 |
 | [架构与限制](docs/architecture.md) | 运行链路、渲染与持久化设计、安全边界、已知限制 |
 | [VS Code 使用指南](docs/vscode.md) | 在 VS Code 集成终端运行 dsh-tui；companion 扩展 `dsh-tui-vscode` 提供与 Claude Code 官方扩展几乎一致的体验（已上架 Marketplace） |
@@ -152,16 +167,19 @@ sh install.sh
 
 - **生态组织**：[dsh-tui-ecosystem](https://github.com/dsh-tui-ecosystem) —— 社区插件、模板与收录列表的家。欢迎来发插件、提创意、互相取暖 🐋
 - **社区交流群**：使用问题、插件创意、功能许愿，都欢迎进来聊。
+- **行为准则**：参与前请读一遍[贡献者行为准则](CODE_OF_CONDUCT.md)。
 
-| 微信群 | QQ 群（群号 572549239） | 微信三群 |
+| 微信群 | QQ 群（群号 572549239） | 微信四群 |
 | :---: | :---: | :---: |
-| <img src="screenshots/wechat-group.jpg" alt="dsh-TUI 社区交流群微信群二维码" width="200"> | <img src="screenshots/qq-group.png" alt="dsh-TUI 社区交流群 QQ 群二维码" width="200"> | <img src="screenshots/wechat-group3.jpg" alt="dsh-TUI 社区交流群微信三群二维码" width="200"> |
+| <img src="screenshots/wechat-group.jpg" alt="dsh-TUI 社区交流群微信群二维码" width="200"> | <img src="screenshots/qq-group.png" alt="dsh-TUI 社区交流群 QQ 群二维码" width="200"> | <img src="screenshots/wechat-group4.jpg" alt="dsh-TUI 社区交流四群微信群二维码" width="200"> |
 
 > 微信群二维码约 7 天过期一次，如遇失效请走 QQ 群（572549239），或开个 issue 提醒我们更新。
 
 ## 权限与安全边界
 
-`dsh-TUI` 不实现独立沙箱，而是使用当前 DSH profile 的文件、Shell、sandbox 与 approval 策略。仓库提供的 profile 在非 Windows 平台默认采用工作区约束与审批；Windows 当前没有对应的沙箱后端，组合会退回到 `danger-full-access` 且不弹审批。在包含敏感凭证或不可信仓库的环境中启动前，请先检查 profile 配置。
+> **Windows 安全警告：** Windows profile 默认使用 `danger-full-access`，且 approval 默认是 `never`。这会授予工具不受限制的访问权限；在敏感凭证或不可信仓库环境中启动前，务必先检查并收紧 profile 配置。
+
+`dsh-TUI` 不实现独立沙箱，而是使用当前 DSH profile 的文件、Shell、sandbox 与 approval 策略。权限预设来自 DSH `permissionPresets` registry：服务缺失时使用 legacy 三项兼容名册；服务已挂载但为空、损坏或不一致时标记为 unavailable，TUI fail closed，不伪造名册。可用 registry 按声明顺序提供第三方预设，只有符合既有 command-token 语法的 ID 才进入补全，`custom` 只显示为当前态，不是可选择目标；切换始终走官方 `/permission <preset>` 命令。若外部 `/permission` 命令本身未注册，输入沿用现有默认命令/model dispatch。在包含敏感凭证或不可信仓库的环境中启动前，请先检查 profile 配置。
 
 详见[权限边界与已知限制](docs/architecture.md#权限与安全边界)。
 

package/cordis.patch.yml

@@ -7,7 +7,7 @@
 # restates every key it owns (see the dsh-base patch for the shared
 # defaults). The dsh-base core rows that need no dsh-tui value — tools,
 # sandbox/approval policy, skills, goal, plan mode, workspace context,
-# telemetry — are inherited unchanged.
+# telemetry — are inherited unless this surface explicitly restates them.
 
 # ── surface-specific values over the dsh-base layer ─────────────────────────
 
@@ -37,18 +37,39 @@
   config:
     agents: []
 
+# Preserve the TUI's opt-in privacy stance across the alpha base default
+# change to FEEDBACK_ONLY. An explicit DSH_TELEMETRY_MODE still wins. This
+# restates the whole alpha config because include patches replace config
+# objects rather than merging them.
+- id: session-telemetry-otel
+  config:
+    mode: !!js process.env.DSH_TELEMETRY_MODE || 'DISABLED'
+    shutdownTimeoutMillis: 3000
+    exporter:
+      url: !!js process.env.DSH_TELEMETRY_OTLP_URL ?? 'https://harness-telemetry.deepseeksvc.com/v1/logs'
+      compression: gzip
+      timeoutMillis: 1000
+    processor:
+      scheduledDelayMillis: 10000
+      maxQueueSize: 2048
+      maxExportBatchSize: 2048
+      exportTimeoutMillis: 1500
+
+# The alpha base sends the active Loader package inventory on official
+# DeepSeek requests by default. TUI keeps that diagnostic metadata opt-in.
+- id: plugin-package-inventory-deepseek
+  config:
+    enabled: false
+
 # ── agent presets (issue #8) ────────────────────────────────────────────────
 #
 # The model-facing plugin set moves INTO the agent-presets roster: every
 # session composes its tools/prompt sections from one preset directory
-# (standard/code/minimal/cordis) instead of the host rows below. The TUI's
-# roster row uses the scoped `dsh-tui-agent-presets` id and carries the
-# shipped `config/agent-presets/` system root itself (derived from the dsh
-# CLI installation through the launcher-maintained `profiles/node_modules`
-# fallback link), because the official profile-boot root overlay only targets
-# the unscoped `agent-presets` id that surface bundles own. The roster itself
-# appends `$DSH_HOME/.agent-presets` (user-authored presets,
-# `includeUserRoot` default). Mirroring the official dsh-web-app patch: every
+# (standard/ptc/minimal/cordis) instead of the host rows below. The TUI's
+# roster row uses the scoped `dsh-tui-agent-presets` id. alpha packages prepend
+# their bundled system root; the validated rc line still needs the dsh CLI's
+# `config/agent-presets/` directory supplied explicitly. Both append
+# `$DSH_HOME/.agent-presets`. Mirroring the official dsh-web-app patch: every
 # dsh-base row a preset now owns is disabled here, so a minimal agent does not
 # leak host-layer tools (an agent's registry view resolves agent → preset →
 # global).
@@ -59,7 +80,7 @@
 - id: command-compact
   disabled: true
 
-# compaction lives in the preset's own isolate realm (standard/code/cordis
+# compaction lives in the preset's own isolate realm (standard/ptc/cordis
 # carry `compaction-basic` with package defaults; minimal has none). The
 # CC_TUI_COMPACT_RATIO/CC_TUI_COMPACT_RETAIN tunables retired with this host
 # row — preset compositions own their compaction config.
@@ -81,6 +102,27 @@
 - id: tool-fs-search
   disabled: true
 
+- id: command-goal
+  # rc.2 presets do not carry this command, so their host row must remain
+  # active. alpha disables it only when the shipped standard preset really
+  # owns the command; reading the capability avoids guessing from another
+  # optional Loader row.
+  disabled: !!js >-
+    (() => {
+      const require = process.getBuiltinModule('node:module').createRequire(ctx.baseUrl)
+      const fs = process.getBuiltinModule('node:fs')
+      const path = process.getBuiltinModule('node:path')
+      try {
+        const manifest = require.resolve('@deepseek-ai/dsh-agent-presets/package.json')
+        const preset = path.join(path.dirname(manifest), 'presets', 'standard', 'agent.cordis.yml')
+        return fs.readFileSync(preset, 'utf8')
+          .split(/\r?\n/u)
+          .some(line => line.trim() === '- id: command-goal')
+      } catch {
+        return false
+      }
+    })()
+
 - id: tool-goal
   disabled: true
 
@@ -158,16 +200,17 @@
 # semantics would create a duplicate row. dsh-tui defensively creates the
 # service on its own context when no composition provides it (bare
 # `dsh --config cordis.yml` boots), then mounts the model-facing
-# ask_user_question tool and registers the questionnaire provider on
-# `ctx.userQuestions`.
+# ask_user_question tool. On legacy hosts it registers the TUI provider on
+# `ctx.userQuestions`; on Alpha it answers the scoped
+# `user-questions/request` waterfall.
 
 - insert:
     # Workspace grouping is a separate durable ledger, not a cwd-derived
     # projection. Mount the same domain stack and storage root as dsh-web-app
     # so TUI-created sessions can attach to the exact registry Web reads.
     #
-    # The six rows below own host-plane services that the official web-app
-    # bundle may already mount. Loader entry ids are process-global, so these
+    # These rows own host-plane services that the official web-app bundle may
+    # already mount. Loader entry ids are process-global, so these
     # rows use dsh-tui-* scoped ids and self-disable when an enabled row with
     # the official id/name is already present in the tree. The disabled check
     # is evaluated during the same include update that inserts every row, so
@@ -188,10 +231,38 @@
       config:
         backend: json
 
+    # Alpha moved the durable storage stack into dsh-base, so these three
+    # scoped copies self-disable there. Keep them for the validated rc lines,
+    # whose base layer does not provide the stack to a TUI-only profile.
+
     - id: dsh-tui-workspace
       name: '@deepseek-ai/dsh-workspace'
       disabled: !!js "[...ctx.loader.entries()].some(entry => entry.options.id === 'workspace' && entry.options.name === '@deepseek-ai/dsh-workspace' && !entry.disabled)"
 
+    # PTC presentation waits on this Host service. The scoped row supports a
+    # TUI-only profile and yields to the official web-app row in mixed profiles.
+    - id: dsh-tui-code-runtime
+      name: '@deepseek-ai/dsh-code-runtime-worker-thread'
+      disabled: !!js "[...ctx.loader.entries()].some(entry => entry.options.id === 'code-runtime' && entry.options.name === '@deepseek-ai/dsh-code-runtime-worker-thread' && !entry.disabled)"
+
+    # Alpha presets opt their delegation tool into Host-owned model-selection
+    # settings. Without this service standard/ptc/cordis preset mounting fails.
+    # The package subpath does not exist on rc.2, so resolve that capability
+    # directly before Loader attempts the import. An enabled official row still
+    # owns the seat in mixed profiles.
+    - id: dsh-tui-subagent-model-selection-settings
+      name: '@deepseek-ai/dsh-tool-subagent/model-selection-settings'
+      disabled: !!js >-
+        (() => {
+          const require = process.getBuiltinModule('node:module').createRequire(ctx.baseUrl)
+          try {
+            require.resolve('@deepseek-ai/dsh-tool-subagent/model-selection-settings')
+          } catch {
+            return true
+          }
+          return [...ctx.loader.entries()].some(entry => entry.options.id === 'subagent-model-selection-settings' && entry.options.name === '@deepseek-ai/dsh-tool-subagent/model-selection-settings' && !entry.disabled)
+        })()
+
     # Generic terminal workspace registry. Optional plugins add providers;
     # the TUI itself always supplies LOCAL and has no provider-specific code.
     - id: dsh-tui-workspaces
@@ -231,27 +302,35 @@
       name: '@deepseek-harness-tui/dsh-tui/extensions'
 
     # The agent-preset roster (issue #8): `ctx.agentPresets`, the service the
-    # TUI composes every session's model-facing world from. The scoped row
-    # carries the official CLI's shipped `config/agent-presets/` directory
-    # (standard/code/minimal/cordis, system trust) through the
-    # launcher-maintained profiles/node_modules fallback link; the roster
-    # itself appends `$DSH_HOME/.agent-presets` (user-authored presets,
-    # `includeUserRoot` default). A boot that never reached profile-boot
-    # leaves the system root empty and the roster finds only user presets.
+    # TUI composes every session's model-facing world from. alpha packages
+    # prepend their bundled presets as the read-only system root; rc.2 packages
+    # have no bundled root and still scan the dsh CLI directory. Both append
+    # `$DSH_HOME/.agent-presets` as the user root. Deployment-added roots may
+    # still be supplied by a later patch.
     - id: dsh-tui-agent-presets
       name: '@deepseek-ai/dsh-agent-presets'
       disabled: !!js "[...ctx.loader.entries()].some(entry => entry.options.id === 'agent-presets' && entry.options.name === '@deepseek-ai/dsh-agent-presets' && !entry.disabled)"
-      config:
-        default: standard
-        roots: !!js >-
-          (() => {
-            const base = ctx.baseUrl
-            if (!base) return undefined
-            const root = new URL('../node_modules/@deepseek-ai/dsh/config/agent-presets/', base)
-            let path = decodeURIComponent(root.pathname)
-            if (/^\/[A-Za-z]:/.test(path)) path = path.slice(1)
-            return [{ path, trust: 'system' }]
-          })()
+      config: !!js >-
+        (() => {
+          const require = process.getBuiltinModule('node:module').createRequire(ctx.baseUrl)
+          const fs = process.getBuiltinModule('node:fs')
+          const path = process.getBuiltinModule('node:path')
+          try {
+            const manifest = require.resolve('@deepseek-ai/dsh-agent-presets/package.json')
+            if (fs.existsSync(path.join(path.dirname(manifest), 'presets'))) {
+              return { default: 'standard' }
+            }
+          } catch {
+            // Let the roster import report a missing package; preserve the rc
+            // root fallback below for every package generation without one.
+          }
+          const base = ctx.baseUrl
+          if (!base) return { default: 'standard' }
+          const root = new URL('../node_modules/@deepseek-ai/dsh/config/agent-presets/', base)
+          let rootPath = decodeURIComponent(root.pathname)
+          if (/^\/[A-Za-z]:/.test(rootPath)) rootPath = rootPath.slice(1)
+          return { default: 'standard', roots: [{ path: rootPath, trust: 'system' }] }
+        })()
 
     # Host-plane services the `cordis` preset's plugin-experimentation tool
     # waits on (dynamicCordisRunner/cordisInspect); dsh-base carries no such
@@ -281,10 +360,11 @@
       name: '@deepseek-harness-tui/dsh-tui'
       # The entry-level dependency augments the plugin's `agents` inject and
       # prevents startup Session creation from racing WorkspaceRegistry init.
-      inject: [workspaceRegistry, agents, tuiWorkspaces, tuiScenes, tuiDialogs, tuiStatus, tuiShortcuts, tuiRenderers]
-      # `tuiWorkspaces`/`tuiScenes` (and the dsh-tui-extensions services)
-      # live in the entry-level inject ONLY as an
-      # ordering (and reload-rebind) guarantee alongside their service rows
+      inject: [workspaceRegistry, agents, tuiWorkspaces, tuiScenes, tuiDialogs, tuiStatus, tuiShortcuts, tuiRenderers, tuiThemes]
+      # `tuiWorkspaces`/`tuiScenes` (and the dsh-tui-extensions services,
+      # including `tuiThemes`)
+      # live in the entry-level inject ONLY as an ordering (and reload-rebind)
+      # guarantee alongside their service rows
       # above — they are deliberately absent from the plugin's code-level
       # inject (issue #183): the dsh CLI may read this patch from an older
       # copy of the package than the plugin module it loads, and a hard
@@ -306,9 +386,7 @@
         # split（强制双栏）/ unified（强制统一式）。/settings 屏可实时改。
         # diffLayout: auto
         # 每个请求实际生效的推理强度，按当前路由的 adapter 档位校验
-        # （deepseek: off/high/max）——不在档位表里的值被忽略，回落 adapter
-        # 默认值。优先于持久化的 Shift+Tab 选择（~/.dsh-tui/effort.json）；
-        # 同时作为顶栏/状态栏的启动显示，首个请求头回来后以实际值为准。
+        #（deepseek: off/low/high/max）；非法值回落 adapter 默认。
         effort: max
         # Shift+Tab session-mode cycle (array order IS the cycle order;
         # absent → the built-in default/plan/full trio below). Each entry

package/cordis.yml

@@ -3,9 +3,10 @@
 # Requires DEEPSEEK_API_KEY; a terminal TTY is mandatory.
 
 # The user-interaction service: hosts `ctx.userQuestions`, the seam behind
-# the model-facing ask_user_question tool. dsh-tui registers its questionnaire
-# provider on it; the service must live at the root so the agent loop's tool
-# execution can reach it.
+# the model-facing ask_user_question tool. dsh-tui uses the legacy provider
+# API when present, otherwise the scoped user-questions/request waterfall;
+# the service must live at the root so the agent loop's tool execution can
+# reach it.
 - id: user-questions
   name: '@deepseek-ai/dsh-user-questions'
 
@@ -43,14 +44,17 @@
   name: '@deepseek-harness-tui/dsh-tui/plugin-host'
 
 # Plugin-facing UI seams: managed dialogs, status-line contributions,
-# keyboard shortcuts, custom session-entry renderers (decision events are
-# fired by the channel and need no row).
+# keyboard shortcuts, custom session-entry renderers, and runtime themes
+# (decision events are fired by the channel and need no row).
 - id: dsh-tui-extensions
   name: '@deepseek-harness-tui/dsh-tui/extensions'
 
 - id: dsh-tui
   name: '@deepseek-harness-tui/dsh-tui'
-  inject: [agents, tuiWorkspaces, tuiScenes, tuiDialogs, tuiStatus, tuiShortcuts, tuiRenderers]
+  # Entry-level only: orders/rebinds optional extension services on reload;
+  # dsh-tui does not hard-inject them at code level, so stale profiles degrade
+  # to static themes and inert extension surfaces instead of deadlocking boot.
+  inject: [agents, tuiWorkspaces, tuiScenes, tuiDialogs, tuiStatus, tuiShortcuts, tuiRenderers, tuiThemes]
   config:
     provider: deepseek-official
     # Alt-screen fullscreen (CC 同款): 应用内鼠标选区（选择即复制, OSC 52 +
@@ -58,10 +62,9 @@
     # inline 渲染, 鼠标交给终端模拟器原生选择。
     fullscreen: true
     # Reasoning effort applied to every request, validated against the live
-    # route's adapter levels (deepseek: off/high/max) — an unlisted level is
-    # ignored and the adapter default applies. Wins over the persisted
-    # Shift+Tab choice (~/.dsh-tui/effort.json); also seeds the startup
-    # header/statusline until the first request header reports the live value.
+    # route's adapter levels. An unlisted level falls back to the adapter
+    # default; this wins over the persisted /effort choice and seeds the
+    # startup header/statusline.
     effort: max
     # Shift+Tab 会话模式循环（数组顺序即循环顺序；缺省为下面三档）。
     # 每档可声明 plan（计划模式开/关）、sandbox（read-only/

package/lib/types/api.d.ts

@@ -0,0 +1,7 @@
+export type { TuiDecisionContext, TuiInputEvent, TuiInputDecision, TuiRewindPromptEvent, TuiRewindMode, TuiRewindPromptDecision, TuiRewindDoneEvent, TuiSessionSwitchEvent, TuiSessionSwitchDecision, TuiSessionSwitchedEvent, TuiCompactEvent, TuiCompactDecision, TuiDialogAnswer, TuiDialogBase, TuiDialogConfirmRequest, TuiDialogInputRequest, TuiDialogSelectOption, TuiDialogSelectRequest, TuiDialogSnapshot, TuiStatusEntry, TuiShortcutKey, TuiShortcutOptions, TuiEntryRenderer, TuiEntryRenderResult, TuiToastDelivery, TuiToastOptions, TuiToastSink, } from './extensions.js';
+export type { GrantPrincipal, GrantStore, HostContract, HostDescriptor, ContractCoordinate, ContractRef, NegotiationDecision, PermissionEntry, PermissionRegistry, TuiPluginStorage, PluginStorageErrorCode, TuiPluginStorageRuntime, MessagesObserveContentBlock, MessagesObserveEnvelope, MessagesObserveListener, MessagesObservePayload, TuiMessageObserverRuntime, LedgerEntry, LedgerOperation, LedgerResult, TuiEffectLedgerRuntime, CommandErrorCode, CodedCommandError, } from './plugin-host.js';
+export type { TuiSceneProps, TuiSceneDescriptor } from './scenes.js';
+export type { TuiSettingsFieldKind, TuiSettingsFieldOption, TuiSettingsGroup, TuiSettingsFieldWrite, TuiSettingsField, TuiSettingsSection, } from './settings-sections.js';
+export type { TuiCommandTreeProvider } from './command-trees.js';
+export type { TuiWorkspaceKind, TuiWorkspaceTarget, TuiWorkspaceChoice, TuiWorkspaceCommandResult, TuiWorkspaceCommand, TuiCommandShell, TuiWorkspaceProvider, } from './workspaces.js';
+//# sourceMappingURL=api.d.ts.map

package/lib/types/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/api.ts"],"names":[],"mappings":"AAQA,YAAY,EACV,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,YAAY,GACb,MAAM,iBAAiB,CAAA;AACxB,YAAY,EACV,cAAc,EACd,UAAU,EACV,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,EAC3B,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,WAAW,EACX,eAAe,EACf,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AACpE,YAAY,EACV,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAChE,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,mBAAmB,EACnB,eAAe,EACf,oBAAoB,GACrB,MAAM,iBAAiB,CAAA"}

package/lib/types/api.js

@@ -0,0 +1 @@
+export {};

package/lib/types/cc/hyperlink.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hyperlink.d.ts","sourceRoot":"","sources":["../../../src/cc/hyperlink.ts"],"names":[],"mappings":"AAMA,0EAA0E;AAC1E,eAAO,MAAM,UAAU,eAAa,CAAA;AACpC,2FAA2F;AAC3F,eAAO,MAAM,QAAQ,WAAS,CAAA;AAE9B,KAAK,gBAAgB,GAAG;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B;;;;OAIG;IACH,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;CACjC,CAAA;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,gBAAgB,GACzB,MAAM,CAYR"}
+{"version":3,"file":"hyperlink.d.ts","sourceRoot":"","sources":["../../../src/cc/hyperlink.ts"],"names":[],"mappings":"AAMA,0EAA0E;AAC1E,eAAO,MAAM,UAAU,eAAa,CAAA;AACpC,2FAA2F;AAC3F,eAAO,MAAM,QAAQ,WAAS,CAAA;AAE9B,KAAK,gBAAgB,GAAG;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B;;;;OAIG;IACH,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;CACjC,CAAA;AAkCD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,gBAAgB,GACzB,MAAM,CAqBR"}

package/lib/types/cc/hyperlink.js

@@ -7,6 +7,35 @@ import { supportsHyperlinks } from '../ink/supports-hyperlinks.js';
 export const OSC8_START = '\x1b]8;;';
 /** OSC 8 hyperlink terminator: BEL (`\x07`), more widely supported than the ST variant. */
 export const OSC8_END = '\x07';
+/** Schemes a rendered hyperlink may point at. Anything else degrades to
+ * plain display text: link targets come from model output and file
+ * contents, and an arbitrary scheme would reach the OS handler on click. */
+const HYPERLINK_SCHEMES = new Set(['http:', 'https:', 'dsh-file:', 'file:', 'mailto:']);
+// Control characters never legitimately appear in a URL; stripping them
+// before the scheme check keeps `java\x00script:` from passing as a
+// relative reference and keeps the embedded URL 7-bit clean (the osc()
+// exit strips again — this is the entry side of the same defense). Spaces
+// are stripped for the scheme check but preserved as %20 in the embedded
+// URL — deleting them would retarget `file:///C:/My Project/x`.
+const URL_CONTROL_CHARS = /[\x00-\x1f\x7f-\x9f]/g;
+function sanitizeHyperlinkUrl(raw) {
+    const stripped = raw.replace(URL_CONTROL_CHARS, '');
+    const scheme = /^([a-zA-Z][a-zA-Z0-9+.-]*):/.exec(stripped);
+    if (scheme === null)
+        return null;
+    if (!HYPERLINK_SCHEMES.has(`${scheme[1].toLowerCase()}:`))
+        return null;
+    return stripped.replaceAll(' ', '%20');
+}
+// Display text keeps spaces (legitimate in link labels) but drops every
+// escape sequence and leftover control character: an OSC 8 sequence
+// smuggled into `content` would survive the plain-text wrap verbatim,
+// hijack cell.hyperlink after tokenize, and repaint a phish link over the
+// legitimate URL. Stripping COMPLETE ANSI sequences (not just the ESC byte)
+// also keeps the display clean when a caller passes an already-painted
+// string — the SGR parameter text would otherwise appear on screen as
+// literal `[38;2;…m` garbage.
+const DISPLAY_TEXT_CONTROL_CHARS = /[\u001b\u009b][[\]()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><~]|\u001b\][^\u0007\u001b]*(?:\u0007|\u001b\\)|[\x00-\x1f\x7f-\x9f]/g;
 /**
  * Create a clickable hyperlink using OSC 8 escape sequences.
  * Falls back to plain text if the terminal doesn't support hyperlinks.
@@ -20,13 +49,22 @@ export const OSC8_END = '\x07';
  */
 export function createHyperlink(url, content, options) {
     const hasSupport = options?.supportsHyperlinks ?? supportsHyperlinks();
-    if (!hasSupport) {
-        return url;
+    const safeUrl = sanitizeHyperlinkUrl(url);
+    // Sanitized up front so BOTH degrade paths emit clean text too: non-TTY
+    // and log destinations bypass the cell-layer escape stripping, so a raw
+    // url/content with control characters would escape there.
+    const safeContent = content?.replace(DISPLAY_TEXT_CONTROL_CHARS, '');
+    if (!hasSupport || safeUrl === null) {
+        // Degrade to the plain display text — for a rejected scheme that is
+        // the content alone (never the raw url: `javascript:...` must not
+        // reach the screen either), for a supported terminal it is the
+        // control-stripped url (safeUrl).
+        return safeUrl === null ? (safeContent ?? '') : safeUrl;
     }
     // Apply basic ANSI blue color - wrap-ansi preserves this across line breaks
     // RGB colors (like theme colors) are NOT preserved by wrap-ansi with OSC 8
-    const displayText = content ?? url;
+    const displayText = safeContent ?? safeUrl;
     const style = options?.style ?? ((text) => chalk.blue(text));
     const coloredText = style(displayText);
-    return `${OSC8_START}${url}${OSC8_END}${coloredText}${OSC8_START}${OSC8_END}`;
+    return `${OSC8_START}${safeUrl}${OSC8_END}${coloredText}${OSC8_START}${OSC8_END}`;
 }

package/lib/types/cc/markdown.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../../../src/cc/markdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAA4B,KAAK,KAAK,EAAe,MAAM,QAAQ,CAAA;AAO1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AA6BrD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE1D;AAID;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAWtC;AAsED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,KAAK,EACZ,SAAS,SAAI,EACb,iBAAiB,GAAE,MAAM,GAAG,IAAW,EACvC,MAAM,GAAE,KAAK,GAAG,IAAW,EAC3B,SAAS,GAAE,YAAY,GAAG,IAAW,GACpC,MAAM,CAER;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,YAAY,GAAG,IAAW,GACpC,MAAM,CAgBR;AA2SD;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,GACpD,MAAM,CAUR"}
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../../../src/cc/markdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAA4B,KAAK,KAAK,EAAe,MAAM,QAAQ,CAAA;AAO1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AA6BrD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAO1D;AAID;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAWtC;AA0ED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,KAAK,EACZ,SAAS,SAAI,EACb,iBAAiB,GAAE,MAAM,GAAG,IAAW,EACvC,MAAM,GAAE,KAAK,GAAG,IAAW,EAC3B,SAAS,GAAE,YAAY,GAAG,IAAW,GACpC,MAAM,CAER;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,YAAY,GAAG,IAAW,GACpC,MAAM,CAgBR;AA2SD;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,GACpD,MAAM,CAUR"}

package/lib/types/cc/markdown.js

@@ -47,6 +47,12 @@ const ISSUE_REFERENCE_PATTERN = /(^|[^\w./-])([A-Za-z0-9][\w-]*\/[A-Za-z0-9][\w.
  * @returns The content with those blocks removed and whitespace trimmed.
  */
 export function stripPromptXMLTags(content) {
+    // Every alternative in the pattern is anchored on a literal '<', so content
+    // without one cannot match. Skip the regex entirely in that case: the
+    // backreference defeats most of the engine's fast paths, and streaming
+    // re-runs this over the whole accumulated message on every frame.
+    if (!content.includes('<'))
+        return content.trim();
     return content.replace(TOOL_ANALYSIS_TAG_BLOCKS, '').trim();
 }
 let markedInitialized = false;
@@ -79,13 +85,17 @@ function paintInlineCode(text) {
  * without OSC 8 support keep the plain painted code span.
  */
 function renderCodeSpan(token) {
-    const painted = paintInlineCode(token.text);
+    // Paint via the style callback so the permission color is applied AFTER
+    // createHyperlink's anti-smuggle content scrub: passing the painted
+    // string as content would have its ESC bytes stripped, leaving
+    // `[38;2;…m` parameter text on screen.
+    const paint = (text) => paintInlineCode(text);
     if (!looksLikeFilePath(token.text))
-        return painted;
+        return paint(token.text);
     if (!supportsHyperlinks())
-        return painted;
-    return createHyperlink(fileLinkUrl(token.text), painted, {
-        style: (text) => text,
+        return paint(token.text);
+    return createHyperlink(fileLinkUrl(token.text), token.text, {
+        style: paint,
     });
 }
 /**

package/lib/types/commands.d.ts

@@ -48,6 +48,12 @@ export interface CommandCompletion extends LocalCommand {
     descriptionKey?: string;
 }
 export type CommandChildren = (canonicalPath: readonly string[]) => readonly CommandCompletionNode[];
+/**
+ * Whether a value can occupy one command-completion token. Keep this aligned
+ * with the grammar accepted by {@link completeCommands}; callers that need an
+ * empty prefix handle that case separately.
+ */
+export declare function isCommandCompletionToken(value: string): boolean;
 /**
  * The built-in slash commands (name + description pairs). Plugin-registered
  * commands merge in at runtime; locals win on name collisions.

package/lib/types/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/commands.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;AAElF,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAA;IACZ;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB,yEAAyE;IACzE,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,qEAAqE;IACrE,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,+EAA+E;AAC/E,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,2EAA2E;AAC3E,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,KAAK,SAAS,qBAAqB,EAAE,CAAA;AAEpG;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,YAAY,EA+DxC,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAElD,CAAA;AAED,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAEpD,CAAA;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAG1D;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAIhG;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,GACX;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAIhD;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,SAAS,YAAY,EAAmB,GAC7C,OAAO,CAKT;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,SAAS,YAAY,EAAmB,GAC7C,YAAY,EAAE,CAKhB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,KAAK,GAAE,SAAS,YAAY,EAAmB,EAC/C,QAAQ,GAAE,eAA0B,GACnC,iBAAiB,EAAE,CAuCrB"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/commands.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;AAElF,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAA;IACZ;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB,yEAAyE;IACzE,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,qEAAqE;IACrE,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,+EAA+E;AAC/E,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,2EAA2E;AAC3E,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,KAAK,SAAS,qBAAqB,EAAE,CAAA;AAEpG;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,YAAY,EA2DxC,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAElD,CAAA;AAED,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAEpD,CAAA;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAG1D;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAIhG;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,GACX;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAIhD;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,SAAS,YAAY,EAAmB,GAC7C,OAAO,CAKT;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,SAAS,YAAY,EAAmB,GAC7C,YAAY,EAAE,CAKhB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,KAAK,GAAE,SAAS,YAAY,EAAmB,EAC/C,QAAQ,GAAE,eAA0B,GACnC,iBAAiB,EAAE,CAuCrB"}

package/lib/types/commands.js

@@ -7,6 +7,14 @@
  * handler winning for names both sides declare.
  */
 import { getLang, tOr } from './i18n.js';
+/**
+ * Whether a value can occupy one command-completion token. Keep this aligned
+ * with the grammar accepted by {@link completeCommands}; callers that need an
+ * empty prefix handle that case separately.
+ */
+export function isCommandCompletionToken(value) {
+    return /^[a-z0-9_.:\/-]+$/iu.test(value);
+}
 /**
  * The built-in slash commands (name + description pairs). Plugin-registered
  * commands merge in at runtime; locals win on name collisions.
@@ -56,12 +64,8 @@ export const LOCAL_COMMANDS = [
     { name: 'skills', description: 'List available skills' },
     { name: 'plugins', description: 'Show plugin contract, grant, and ledger diagnostics' },
     { name: 'update', description: 'Update dsh-tui and restart' },
-    // Built-in skills (audit/review/pr-comments/…) are NOT listed here: their
-    // packaged SKILL.md files register through the DSH skill registry, and
-    // refreshSkillCommands publishes each as a real command whose handler
-    // injects the body host-side (#86/#496). A local entry of the same name
-    // would win the collision filter and lock the skill onto the legacy
-    // "activation prompt" path forever.
+    // Skills are discovered through the DSH registry and added at runtime.
+    // A local entry of the same name would win the collision filter.
     // Misc / not applicable on this leaf
     { name: 'vim', description: 'Toggle vim mode' },
     { name: 'terminal-setup', description: 'Show terminal setup instructions' },
@@ -161,7 +165,7 @@ export function completeCommands(input, roots = LOCAL_COMMANDS, children = () =>
     // Token charset includes `. : /` so provider/model specs (e.g.
     // `deepseek/deepseek-v4-flash`, `openai/gpt-4.1`) survive as ONE token —
     // the /model completion matches its candidates against the whole spec.
-    if (!/^[a-z0-9_.:\/-]*(?:[\t ]+[a-z0-9_.:\/-]*)*$/iu.test(body))
+    if (!body.split(/[\t ]+/u).every(token => token === '' || isCommandCompletionToken(token)))
         return [];
     const trailingSeparator = /[\t ]$/u.test(body);
     const tokens = body.split(/[\t ]+/u);
@@ -180,7 +184,7 @@ export function completeCommands(input, roots = LOCAL_COMMANDS, children = () =>
     const normalizedPrefix = prefix.toLowerCase();
     return candidates.flatMap(candidate => {
         const completionToken = matchingCompletionToken(candidate, normalizedPrefix);
-        if (completionToken === undefined)
+        if (completionToken === undefined || !isCommandCompletionToken(completionToken))
             return [];
         const path = [...tokens, completionToken];
         const commandLine = `/${path.join(' ')}`;

package/lib/types/components/MessageList.d.ts

@@ -4,15 +4,15 @@ import type { ChatRow } from '../dsh-adapter/channel.js';
 import type { DOMElement } from '../ink/dom.js';
 import { type TimelineSnapshot } from '../ink/timeline-rail.js';
 import type { ToolBackground } from '../tuiDisplayPrefs.js';
-export declare function MessageList({ rows, expanded, expandedRows, selectedId, onToggleRow, streamFoldedRows, onToggleStreamFold, model, diffLayout, thinkingFold, toolBackground, foldTerminalCommand, activityFrames, showAll, onToggleAll, onLoadOlder, thinkingVisible, historyPaintEnabled, registerRowRef, scrollHandle, forceMountRowId, newSinceRowId, onUnseenCount, onTimeline, failureHintRowId, failureHint, onOpenSubagent, onOpenFile, }: {
+export declare function MessageList({ rows, expanded, expandedRows, selectedId, onToggleRow, streamViewToggledRows, onToggleStreamView, model, diffLayout, thinkingFold, toolBackground, foldTerminalCommand, activityFrames, showAll, onToggleAll, onLoadOlder, thinkingVisible, historyPaintEnabled, registerRowRef, scrollHandle, forceMountRowId, newSinceRowId, onUnseenCount, onTimeline, failureHintRowId, failureHint, onOpenSubagent, onOpenFile, }: {
     rows: readonly ChatRow[];
     expanded: boolean;
     expandedRows: ReadonlySet<number>;
     selectedId: number | null;
     onToggleRow: (rowId: number) => void;
-    /** 流式 reasoning 行被用户折叠（点击展开/折叠对流式行同样有效）。 */
-    streamFoldedRows?: ReadonlySet<number>;
-    onToggleStreamFold?: (rowId: number) => void;
+    /** 流式 reasoning 行相对 thinkingFold 默认视图的逐行切换。 */
+    streamViewToggledRows?: ReadonlySet<number>;
+    onToggleStreamView?: (rowId: number) => void;
     model: string;
     /** Edit/Write diff presentation preference (forwarded to tool cards). */
     diffLayout?: 'auto' | 'split' | 'unified';

package/lib/types/components/MessageList.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MessageList.d.ts","sourceRoot":"","sources":["../../../src/components/MessageList.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAmB,MAAM,OAAO,CAAA;AAEvC,OAAO,EAA8B,KAAK,eAAe,EAAE,MAAM,UAAU,CAAA;AAE3E,OAAO,KAAK,EAAE,OAAO,EAAsD,MAAM,2BAA2B,CAAA;AAC5G,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAgB/C,OAAO,EAAe,KAAK,gBAAgB,EAAqB,MAAM,yBAAyB,CAAA;AAC/F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAqI3D,wBAAgB,WAAW,CAAC,EAC1B,IAAI,EACJ,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,WAAW,EACX,gBAAmC,EACnC,kBAA4C,EAC5C,KAAK,EACL,UAAmB,EACnB,YAAwB,EACxB,cAAuB,EACvB,mBAA2B,EAC3B,cAAc,EACd,OAAO,EACP,WAAW,EACX,WAAW,EACX,eAAsB,EACtB,mBAA0B,EAC1B,cAAc,EACd,YAAY,EACZ,eAAe,EACf,aAAa,EACb,aAAa,EACb,UAAU,EACV,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,UAAU,GACX,EAAE;IACD,IAAI,EAAE,SAAS,OAAO,EAAE,CAAA;IACxB,QAAQ,EAAE,OAAO,CAAA;IACjB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACjC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IACpC,4CAA4C;IAC5C,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACtC,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5C,KAAK,EAAE,MAAM,CAAA;IACb,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IACzC,mEAAmE;IACnE,YAAY,CAAC,EAAE,SAAS,GAAG,MAAM,CAAA;IACjC,qEAAqE;IACrE,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,mEAAmE;IACnE,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B;sEACkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,EAAE,MAAM,IAAI,CAAA;IACvB;2EACuE;IACvE,WAAW,CAAC,EAAE,MAAM,IAAI,CAAA;IACxB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,8EAA8E;IAC9E,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,GAAG,IAAI,KAAK,IAAI,CAAA;IAC/D,oDAAoD;IACpD,YAAY,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;IACrC,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B;8EAC0E;IAC1E,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IACvC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAA;IAC9C;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,qCAAqC;IACrC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAC1C,6BAA6B;IAC7B,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CACpC,qBA4wBA;AA2VD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,EACzB,KAAK,EACL,MAAM,EACN,GAAG,EACH,KAAY,EACZ,SAAiB,GAClB,EAAE;IACD,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,OAAO,CAAA;IACf;qEACiE;IACjE,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB,GAAG,KAAK,CAAC,SAAS,CASlB"}
+{"version":3,"file":"MessageList.d.ts","sourceRoot":"","sources":["../../../src/components/MessageList.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAmB,MAAM,OAAO,CAAA;AAEvC,OAAO,EAA8B,KAAK,eAAe,EAAE,MAAM,UAAU,CAAA;AAE3E,OAAO,KAAK,EAAE,OAAO,EAAsD,MAAM,2BAA2B,CAAA;AAC5G,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAgB/C,OAAO,EAAe,KAAK,gBAAgB,EAAqB,MAAM,yBAAyB,CAAA;AAC/F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAqI3D,wBAAgB,WAAW,CAAC,EAC1B,IAAI,EACJ,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,WAAW,EACX,qBAA8C,EAC9C,kBAA4C,EAC5C,KAAK,EACL,UAAmB,EACnB,YAAwB,EACxB,cAAuB,EACvB,mBAA2B,EAC3B,cAAc,EACd,OAAO,EACP,WAAW,EACX,WAAW,EACX,eAAsB,EACtB,mBAA0B,EAC1B,cAAc,EACd,YAAY,EACZ,eAAe,EACf,aAAa,EACb,aAAa,EACb,UAAU,EACV,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,UAAU,GACX,EAAE;IACD,IAAI,EAAE,SAAS,OAAO,EAAE,CAAA;IACxB,QAAQ,EAAE,OAAO,CAAA;IACjB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACjC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IACpC,+CAA+C;IAC/C,qBAAqB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3C,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5C,KAAK,EAAE,MAAM,CAAA;IACb,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IACzC,mEAAmE;IACnE,YAAY,CAAC,EAAE,SAAS,GAAG,MAAM,CAAA;IACjC,qEAAqE;IACrE,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,mEAAmE;IACnE,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B;sEACkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,EAAE,MAAM,IAAI,CAAA;IACvB;2EACuE;IACvE,WAAW,CAAC,EAAE,MAAM,IAAI,CAAA;IACxB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,8EAA8E;IAC9E,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,GAAG,IAAI,KAAK,IAAI,CAAA;IAC/D,oDAAoD;IACpD,YAAY,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;IACrC,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B;8EAC0E;IAC1E,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IACvC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAA;IAC9C;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,qCAAqC;IACrC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAC1C,6BAA6B;IAC7B,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CACpC,qBA4wBA;AA0VD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,EACzB,KAAK,EACL,MAAM,EACN,GAAG,EACH,KAAY,EACZ,SAAiB,GAClB,EAAE;IACD,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,OAAO,CAAA;IACf;qEACiE;IACjE,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB,GAAG,KAAK,CAAC,SAAS,CASlB"}