@lingxi-ai-cn/dsh-tui-runtime 0.1.7-alpha.2 → 0.1.9-rc.1

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/ui/tui/README.md
-README.md: cf0b0192b4ceb9faaf8b65ecd755aa0e177d121e
-README.zh.md: 720be4c1e35f796310adaf9a809dd31f082ac9ba
+README.md: 390fc8c2bfb7f8efd2026abb0a3bc3bb23ef088f
+README.zh.md: a4df4260acb414c7fe64e4103f04ed28085d2013

package/README.md

@@ -19,7 +19,7 @@ While the root Agent is running, a non-empty draft uses Enter to steer the curre
 
 Native full-screen terminal frontend for one owned root DeepSeek Harness Agent and its live continuable child views. The plugin waits for Loader settlement, creates or resumes the root through `ctx.agents`, retains only its root `AgentHandle`, renders committed `session/event` rows with Ink, and disposes the root after flushing its Session. It mounts no HTTP server and imports no browser Client package.
 
-An empty root Session opens a centered startup workspace with a nine-row, 60-cell Electric `DSH` foreground-block mark when the complete workspace fits, and a compact `DSH` mark otherwise. Extended-color terminals evaluate the source design's cosine high-voltage-arc palette at each mark cell, ANSI 16-color terminals use the theme accent, and colorless output emits only the block characters. The workspace retains a bounded composer, the resolved model hint, and the workspace footer. After the first admitted input or when a Session already has transcript rows, the header becomes a compact activity row, the transcript follows the live tail above the composer, and short output remains bottom anchored. While an Agent is running, the activity row uses the configured fixed-width dots, pulse, minimal marker, or disabled animation and shows `Esc stop`; Escape uses the existing Agent cancellation path. `/quit` and `/exit` accept no arguments, settle their command audit before requesting exit, and converge on the terminal-first idempotent shutdown path.
+An empty root Session opens a centered startup workspace with a nine-row, 60-cell Electric `DSH` foreground-block mark when the complete workspace fits, and a compact `DSH` mark otherwise. Extended-color terminals evaluate the source design's cosine high-voltage-arc palette at each mark cell, ANSI 16-color terminals use the theme accent, and colorless output emits only the block characters. The workspace retains a bounded composer, the resolved model hint, and the workspace footer. After the first admitted input or when a Session already has transcript rows, the header becomes a compact activity row, the transcript follows the live tail above the composer, and short output remains bottom anchored. While an Agent is running, the activity row uses the configured fixed-width dots, pulse, minimal marker, or disabled animation and shows `Esc stop`; Escape uses the existing Agent cancellation path. `/quit` and `/exit` accept no arguments, settle their command audit before requesting exit, and converge on the terminal-first idempotent shutdown path. The launcher receives the exit request before asynchronous cleanup; cancelled startup catalog reads stop blocking the TUI, and Agent cancellation, Session flush, and disposal proceed alongside background-task settlement.
 
 Before the first request, the startup workspace derives process-local guidance from the successful `tuiStartup` Host snapshot, the selected provider's public authentication and model-catalog reads, and mounted Plugin Hub availability. A Host or provider failure points to `/doctor`; an unconfigured provider uses its provider-owned authentication label and points to `/models`; a configured route with an empty advisory catalog offers a generic `/models` retry because the LLM service exposes no provider remediation field. A healthy route retains the selected model and reasoning effort, then offers `/models`, `/plugins` when available, and `/help` as secondary actions. Provider topology and successful model changes refresh the snapshot. Every line is terminal-sanitized and Unicode-cell bounded, required status does not depend on dim color, and a narrow workspace mounts only the highest-priority executable line. The collector never reads credential values, environment variables, or the system prompt, and it creates no Session event.
 
@@ -33,7 +33,7 @@ A completed Turn adds one exact token-usage node folded by the official token-me
 
 The composer sends ordinary text with `Agent.followup()` while idle and `Agent.steer()` while running. It keeps one Unicode grapheme-aware insertion point, supports left/right and word movement, logical-line Home/End, backward/forward and previous-word deletion, submitted-history traversal with unsent-draft restoration, and up to five visible wrapped rows. `Ctrl+J` inserts a newline while Enter submits the original non-blank text without trimming its outer whitespace. `Ctrl+_` or `Ctrl+Shift+-` undoes an edit and `Ctrl+Y` redoes it through at most 100 process-local text-and-cursor snapshots. Rapid single-grapheme typing and same-direction deletion coalesce; paste, multiline insertion, suggestion acceptance, and history acceptance remain separate units, while cursor movement only ends coalescing. A bracketed paste of at least eight lines or 4 KiB becomes one bounded `[Pasted text]` placeholder; its terminal-safe original remains process-local and expands only at submission. `Ctrl+V` requests one typed system-clipboard read through the platform provider; macOS uses `pbpaste`, Linux Wayland uses `wl-paste`, and Linux X11 tries `xclip` then `xsel`. The provider uses argv-only execution, a short timeout, a complete byte cap, and independent image magic validation; file-list payloads are parsed as local `file:` paths. Unsupported Windows, headless SSH, missing utilities, and invalid media return a live notice and leave the draft untouched, so terminal paste and `@` path completion remain the fallback. Clipboard text and admitted image chips are inserted as one undo unit. Deleting the placeholder removes its payload, while undo, redo, stash, submitted history, and Agent-view switching retain the reference without mounting the pasted lines. `Ctrl+R` searches unique prompts submitted by the current TUI process newest-first; repeated use selects an older match, Enter accepts it, and Escape restores the exact draft and cursor. `Ctrl+S` stashes a non-empty draft, restores it into an empty editor, or swaps it with another non-empty draft so restoration never overwrites text; each draft retains its own edit history. Prompt-history search, stash, paste references, and edit history remain process-local and never enter the Session log. A command-only slash query opens the shared suggestion controller over the effective `ctx.commands.list(agent)` descriptors; the compatibility catalog retains TUI-owned localized metadata when an older Host omits additive discovery fields, while exact legacy first-party descriptions receive a localized fallback without rewriting same-name third-party text. An `@token` at the draft or after whitespace opens the same controller over cancellable workspace results: a Host-provided `ctx.fs.completePaths()` is preferred, while a legacy Host uses an equivalent bounded traversal over `listDir()` and `contains()`. Both paths stay rooted at the current Session workspace; loading, no-match, and truncated states remain bounded, directory acceptance keeps its trailing slash, and file acceptance adds one separating space. The bounded list marks one selection; Up/Down moves it without traversing prompt history, Shift+Tab moves backward, Tab or Enter accepts the selected command or path, and Escape closes the list while preserving the draft. One immutable action registry owns the effective Global, Composer, Suggestion, HistorySearch, TranscriptSearch, Transcript, Detail, Dialog, Footer, Work, and Approval bindings and their input priority. `/help` keeps returning the effective command descriptors and also opens a bounded, scrollable interaction panel generated from that registry; unsupported capability actions are omitted, `/help extra` remains a usage error, and Escape returns to the prior local mode. `Alt+P` opens the existing model picker without replacing the current draft. A leading slash first uses `ctx.commands.execute()`; an unmatched line remains an ordinary prompt so skill gestures retain their shared Agent path. Approvals are scoped to the exact owned Agent and expose only allow-once/reject. `ctx.userQuestions.registerProvider()` supplies a FIFO structured-question surface whose Dialog owns Enter even while the Agent is running.
 
-`/models` opens a bounded, scrollable selector over `ctx.llm.listProviders()` and each provider's live `listModels()` result. Providers that advertise interactive authentication appear as sign-in actions until configured. The first native flow is OpenAI Codex: choosing **Sign in with ChatGPT** runs the provider-owned browser OAuth flow through the official authorization owner, stores the refreshable grant through the scoped credential-record owner, refreshes the account model catalog, and returns to the selector. Older Hosts fall back to the provider-neutral LLM authentication bridge without changing the UI contract. After a model declares selectable reasoning efforts, a second bounded question chooses one exact effort. The resolved model and effort are persisted through `ctx.agentDefaultModel.saveSelection()`, become the owned Agent's next-step selection, and update the idle header immediately; an already-running step keeps its captured selection.
+`/models` opens a bounded, scrollable selector over `ctx.llm.listProviders()` and each provider's live `listModels()` result. Providers that advertise interactive authentication appear as sign-in actions until configured. The first native flow is OpenAI Codex: choosing **Sign in with ChatGPT** runs the provider-owned browser OAuth flow through the official authorization owner, stores the refreshable grant through the scoped credential-record owner, refreshes the account model catalog, and returns to the selector. Older Hosts fall back to the provider-neutral LLM authentication bridge without changing the UI contract. After a model declares selectable reasoning efforts, a second bounded question chooses one exact effort. The resolved model and effort are persisted in `tui.defaultModel` through the settings owner, become the owned Agent's next-step selection, and update the idle header immediately; an already-running step keeps its captured selection.
 
 `/mode` opens the dynamic `ctx.agentPresets` roster, with localized names and descriptions for Standard (`standard`), PTC (`ptc`), Minimal (`minimal`), and Creator (`cordis`) plus installed user presets. Missing and broken rows remain visible with bounded disabled reasons, without exposing preset paths. A downstream Session that durably records the retired `code` preset is interpreted as PTC and appends the canonical `ptc` selection only when a successful recomposition commits. A blank Session switches through `ctx.agentPresets.recompose()` under one single-flight transaction and appends `agent-preset/selected` only after the new composition commits. After the first `turn/start`, selection opens the existing fresh-Session confirmation instead; Escape keeps the current Agent, draft, transcript anchor, and footer, while confirmation creates and publishes a new Session under the selected preset before disposing the old handle. The current mode is an actionable footer item, and both footer and single-select menu rows use the same state transition for keyboard and primary SGR clicks. This package selects existing presets but does not copy, edit, or remove them.
 
@@ -146,10 +146,13 @@ The post-install runtime keeps every official-package import in `src/host.ts`. T
 
 ### User settings
 
+New TUI Agents prefer `tui.defaultModel` and fall back to `agent-default-model` when it is unset. `/models` leaves the shared default unchanged. The enhanced `lingxi-openai-codex` route uses `llm-openai-codex/openai-codex` credentials; the official `openai-codex` route uses its own authorization flow. If the shared default still names `openai-codex` and that official route is not enabled, set `tui.defaultModel` to provider `lingxi-openai-codex` and the existing model id before starting the TUI. Keep shared defaults and credential records unchanged.
+
 When `ctx.settings` is mounted, the package registers the `tui` namespace. The file provider persists the theme, optional custom-theme file, activity animation, `en`/`zh` locale, mouse ownership, and keybinding overrides in the shared user-settings document; the TUI never writes that file directly. The locale catalog is versioned, uses English as a missing-key fallback, and bounds translated content with the same terminal-cell rules as English output.
 
 | Key | Default | Behavior |
 |---|---:|---|
+| `defaultModel` | unset | TUI-only provider, model, and optional reasoning effort for new Agents. |
 | `theme` | `auto` | Select `auto` to follow the probed terminal background, or pin `dark`, `light`, or `no-color` semantic terminal tokens. |
 | `themeFile` | unset | Load one declarative JSON palette by file name from `$DSH_HOME/themes`; traversal, symlinks, oversized files, unknown fields, and unsupported colors are rejected. |
 | `locale` | `en` | Select the runtime catalog used by first-party TUI text; `/lang` changes this setting without replacing the Agent or view. |

package/README.zh.md

@@ -19,7 +19,7 @@ root Agent running 时，非空 draft 使用 Enter steer 当前 turn，Tab 排
 
 面向一个自有 root DeepSeek Harness Agent 及其 live continuable child view 的原生全屏终端前端。该插件等待 Loader 结算，通过 `ctx.agents` 创建或恢复 root，只持有它的 root `AgentHandle`，用 Ink 渲染已提交的 `session/event` 行，并在 flush 其 Session 后处置 root。它不挂载 HTTP server，也不导入浏览器 Client 包。
 
-空的 root Session 会打开居中的启动工作区；完整工作区能容纳时显示九行、60 cell 的 Electric `DSH` 前景色块标志，否则显示紧凑的 `DSH` 标志。扩展颜色终端会在每个标志 cell 上计算源设计的余弦高压电弧调色板，ANSI 16 色终端使用主题 accent，无色输出则只发出块字符。工作区保留有界 composer、已解析的 model 提示和 workspace footer。第一次 admitted input 之后，或 Session 已经存在 transcript 行时，header 会变成紧凑 activity row，transcript 会在 composer 上方跟随 live tail，短输出保持在底部锚定。Agent running 时，activity row 会使用已配置的固定宽度移动点、脉冲、简洁标记或关闭动效，并显示 `Esc stop`；Escape 复用已有的 Agent cancellation path。`/quit` 与 `/exit` 不接受参数，会在请求退出前完成 command audit，并汇入 terminal-first 的幂等 shutdown path。
+空的 root Session 会打开居中的启动工作区；完整工作区能容纳时显示九行、60 cell 的 Electric `DSH` 前景色块标志，否则显示紧凑的 `DSH` 标志。扩展颜色终端会在每个标志 cell 上计算源设计的余弦高压电弧调色板，ANSI 16 色终端使用主题 accent，无色输出则只发出块字符。工作区保留有界 composer、已解析的 model 提示和 workspace footer。第一次 admitted input 之后，或 Session 已经存在 transcript 行时，header 会变成紧凑 activity row，transcript 会在 composer 上方跟随 live tail，短输出保持在底部锚定。Agent running 时，activity row 会使用已配置的固定宽度移动点、脉冲、简洁标记或关闭动效，并显示 `Esc stop`；Escape 复用已有的 Agent cancellation path。`/quit` 与 `/exit` 不接受参数，会在请求退出前完成 command audit，并汇入 terminal-first 的幂等 shutdown path。 launcher 会在异步清理前收到退出请求；已取消的启动目录读取不再阻塞 TUI，Agent 取消、Session flush 与处置会和后台任务收尾并行进行。
 
 第一次请求前，启动工作区会根据已成功的 `tuiStartup` Host 快照、所选 provider 的公开认证与模型目录读取结果，以及 Plugin Hub 是否挂载，生成只存在于当前进程的引导。Host 或 provider 失败时指向 `/doctor`；provider 未配置时使用该 provider 自有的认证名称并指向 `/models`；已配置 route 的 advisory 目录为空时提供通用 `/models` 重试，因为 LLM service 没有暴露 provider 修复字段。健康 route 保留已选 model 与 reasoning effort，并把 `/models`、可用时的 `/plugins` 和 `/help` 作为次要操作。Provider topology 和成功的 model 变更会刷新该快照。每行都会清理终端控制字符并按 Unicode cell 限界，必要状态不依赖 dim color，窄工作区只挂载一条优先级最高的可执行提示。Collector 不读取 credential 值、环境变量或 system prompt，也不创建 Session event。
 
@@ -33,7 +33,7 @@ Transcript 是对耐久 Session 日志的纯 fold。以 append 方式产生的
 
 Agent idle 时，composer 用 `Agent.followup()` 发送普通文本；running 时使用 `Agent.steer()`。它维护一个感知 Unicode grapheme 的插入点，支持左右与按词移动、逻辑行 Home/End、向前／向后及删除前一词、保留未提交草稿的已提交历史遍历，以及最多五行可见换行内容。`Ctrl+J` 插入换行，Enter 提交原始非空白文本而不裁掉首尾空白。`Ctrl+_` 或 `Ctrl+Shift+-` 通过最多 100 份进程内文本与光标快照撤销编辑，`Ctrl+Y` 则重做。快速的单 grapheme 输入和同方向删除会合并；paste、多行插入、suggestion 接受与历史接受各自形成独立 unit，光标移动只会终止合并。至少八行或 4 KiB 的 bracketed paste 会变成一条有界的 `[Pasted text]` placeholder；经过终端安全处理的原文只保留在当前进程中，并仅在提交时展开。`Ctrl+V` 会通过平台 provider 请求一次 typed system clipboard 读取；macOS 使用 `pbpaste`，Linux Wayland 使用 `wl-paste`，Linux X11 依次尝试 `xclip` 与 `xsel`。provider 使用仅 argv 的执行方式、短超时、完整字节上限和独立的图片 magic 校验；file-list 只解析本地 `file:` path。Windows、无头 SSH、缺少 utility 或媒体无效时只显示 live notice 并保留 draft，回退到 terminal paste 与 `@` 路径补全。剪贴板文本和已准入的图片 chip 作为一个 undo unit 插入。删除 placeholder 会移除其 payload；undo、redo、stash、已提交历史与 Agent view 切换都能保留 reference，而不挂载被粘贴的行。`Ctrl+R` 按从新到旧的顺序搜索当前 TUI 进程提交的去重 prompt；重复触发会选择更早的匹配，Enter 接受匹配，Escape 恢复原 draft 和确切光标。`Ctrl+S` 会暂存非空 draft、把它恢复到空 editor，或与另一个非空 draft 交换，因此恢复不会覆盖文本；每份 draft 保留自己的编辑历史。Prompt-history 搜索、暂存、paste reference 与编辑历史仅存在于当前进程，绝不进入 Session 日志。只含命令的斜杠查询会通过共享 suggestion controller 使用有效的 `ctx.commands.list(agent)` descriptor；旧版 Host 省略 additive discovery 字段时，compatibility catalog 会保留 TUI 自有的本地化 metadata，而确切匹配旧版 first-party 命令描述的条目会得到本地化 fallback，不会改写同名第三方文本。在 draft 开头或空白之后的 `@token` 会通过同一 controller 使用可取消的 workspace 结果：优先调用 Host 提供的 `ctx.fs.completePaths()`，旧版 Host 则通过 `listDir()` 与 `contains()` 执行等价的有界遍历。两条路径都以当前 Session workspace 为根；loading、无匹配和 truncated 状态保持有界，目录接受时保留尾部斜杠，文件接受时追加一个分隔空格。有界列表标出一个选中项；Up/Down 移动选中项而不遍历 prompt history，Shift+Tab 向前移动，Tab 或 Enter 接受选中的命令或路径，Escape 关闭列表但保留 draft。一个不可变 action registry 统一拥有有效的 Global、Composer、Suggestion、HistorySearch、TranscriptSearch、Transcript、Detail、Dialog、Footer、Work 与 Approval binding 及其输入优先级。`/help` 继续返回有效 command descriptor，同时打开由该 registry 生成的有界可滚动交互面板；不支持的 capability action 会被省略，`/help extra` 仍返回 usage error，Escape 会回到之前的本地模式。`Alt+P` 可打开现有 model picker，且不会替换当前 draft。以斜杠开头的输入会先尝试 `ctx.commands.execute()`；未匹配行仍作为普通提示提交，使 skill 手势继续走共享 Agent 路径。审批限定到确切的自有 Agent，只提供单次允许／拒绝。`ctx.userQuestions.registerProvider()` 提供 FIFO 结构化问题界面；即使 Agent 正在 running，其 Dialog 也拥有 Enter。
 
-`/models` 会在 `ctx.llm.listProviders()` 及各提供方实时 `listModels()` 结果上打开有界、可滚动的选择器。声明了交互认证的提供方在尚未配置时显示为登录操作。首个原生流程是 OpenAI Codex：选择 **使用 ChatGPT 登录** 后，界面会通过官方 authorization owner 运行提供方自有的浏览器 OAuth flow，经 scoped credential-record owner 保存可刷新的 grant，刷新账户模型目录，再回到选择器。旧版 Host 会回退到 provider-neutral LLM authentication bridge，而不改变 UI 契约。模型声明可选 reasoning effort 时，第二个有界问题会选择一个确切等级。解析后的模型与 effort 会经 `ctx.agentDefaultModel.saveSelection()` 持久化，成为自有 Agent 的下一步选择，并立即更新 idle header；已经运行中的 step 仍保留它捕获的选择。
+`/models` 会在 `ctx.llm.listProviders()` 及各提供方实时 `listModels()` 结果上打开有界、可滚动的选择器。声明了交互认证的提供方在尚未配置时显示为登录操作。首个原生流程是 OpenAI Codex：选择 **使用 ChatGPT 登录** 后，界面会通过官方 authorization owner 运行提供方自有的浏览器 OAuth flow，经 scoped credential-record owner 保存可刷新的 grant，刷新账户模型目录，再回到选择器。旧版 Host 会回退到 provider-neutral LLM authentication bridge，而不改变 UI 契约。模型声明可选 reasoning effort 时，第二个有界问题会选择一个确切等级。解析后的模型与 effort 会经 settings owner 持久化到 `tui.defaultModel`，成为自有 Agent 的下一步选择，并立即更新 idle header；已经运行中的 step 仍保留它捕获的选择。
 
 `/mode` 会打开动态 `ctx.agentPresets` roster，其中包含本地化的 Standard（`standard`）、PTC（`ptc`）、Minimal（`minimal`）和 Creator（`cordis`）名称与说明，以及已经安装的 user preset。缺失和损坏的行会继续显示有界的禁用原因，但不会暴露 preset path。耐久记录旧 downstream `code` preset 的 Session 会按 PTC 解释，并且只有成功 recomposition 提交时才追加规范的 `ptc` selection。空白 Session 会在一项 single-flight transaction 中通过 `ctx.agentPresets.recompose()` 切换，并且只在新组装提交后追加 `agent-preset/selected`。第一次 `turn/start` 之后，选择操作会改为打开现有的新 Session 确认；Escape 会保持当前 Agent、draft、transcript anchor 与 footer，确认则会使用所选 preset 创建并发布新 Session，然后处置旧 handle。当前模式是可操作的 footer item；footer 与单选菜单行无论通过键盘还是 primary SGR click，都会使用同一项状态转换。本 package 只选择既有 preset，不会复制、编辑或移除 preset。
 
@@ -150,10 +150,13 @@ Registry 收录默认显示全部已接纳的目录记录，并按 Stars 排序
 
 ### 用户设置
 
+新 TUI Agent 优先使用 `tui.defaultModel`，未设置时回退到 `agent-default-model`。`/models` 保持共享默认值不变。增强版 `lingxi-openai-codex` 路由使用 `llm-openai-codex/openai-codex` 凭据；官方 `openai-codex` 路由使用其自己的授权流程。 若共享默认值仍指向 `openai-codex`，且该官方路由未启用，请在启动 TUI 前把 `tui.defaultModel` 设置为 provider `lingxi-openai-codex` 和已有 model id，保持共享默认值与凭据记录不变。
+
 挂载 `ctx.settings` 时，本包会注册 `tui` namespace。文件 provider 会把 theme、可选 custom-theme 文件、activity animation、`en`/`zh` locale、mouse ownership 和 keybinding override 持久化到共享用户设置文档；TUI 从不直接写该文件。locale catalog 带有版本号，缺失翻译键回退到英文，并对中英文使用同一套 terminal cell 有界规则。
 
 | 键 | 默认值 | 行为 |
 |---|---:|---|
+| `defaultModel` | 未设置 | 新 Agent 专用的 TUI provider、model 及可选 reasoning effort。 |
 | `theme` | `auto` | 选择 `auto` 跟随探测到的终端背景，或固定使用 `dark`、`light` 或 `no-color` 语义终端 token。 |
 | `themeFile` | 未设置 | 从 `$DSH_HOME/themes` 按文件名加载一个声明式 JSON palette；路径穿越、symlink、超大文件、未知字段与不支持的颜色都会被拒绝。 |
 | `locale` | `en` | 选择 first-party TUI 文案使用的 runtime catalog；`/lang` 会在不替换 Agent 或 view 的情况下切换该设置。 |

package/lib/index.js

@@ -13,11 +13,12 @@ import { dshHomePath } from "@deepseek-ai/dsh-home-paths";
 import z from "@deepseek-ai/schemastery";
 import { assembleContextFor, installModelSelection } from "@deepseek-ai/dsh-agent";
 import { JobId } from "@deepseek-ai/dsh-jobs";
-import { createUserMessage, errorChain, freezeMessage, normalizeApiKey } from "@deepseek-ai/dsh-llm";
+import { ReasoningEffortId, createUserMessage, errorChain, freezeMessage, normalizeApiKey } from "@deepseek-ai/dsh-llm";
 import { MessageId } from "@deepseek-ai/dsh-llm/brand";
 import { runNativeCommand } from "@deepseek-ai/dsh-native-command";
 import { isAppendSurfaceEvent } from "@deepseek-ai/dsh-session/surface";
-import { SESSION_FORMAT_VERSION, SessionId } from "@deepseek-ai/dsh-session";
+import { SESSION_FORMAT_VERSION, SessionId, SessionLogOffset } from "@deepseek-ai/dsh-session";
+import { queueHostSubagentPrompt } from "@deepseek-ai/dsh-subagent/internal";
 import { activeAtToken, formatFileMention } from "@deepseek-ai/dsh-file-reference";
 import { formatSessionReferenceMention } from "@deepseek-ai/dsh-session-reference";
 import { deriveTurnTokenUsage } from "@deepseek-ai/dsh-token-meter/client";
@@ -34,6 +35,17 @@ import { StringDecoder } from "node:string_decoder";
 import { spawn } from "node:child_process";
 import { tmpdir } from "node:os";
 import { fileURLToPath } from "node:url";
+//#region lib/types/exit.js
+/**
+* Hand terminal ownership back before starting the launcher's bounded teardown.
+* @param releaseTerminal - Synchronous unmount and terminal restoration.
+* @param exit - Launcher exit request, absent during owner disposal.
+*/
+function requestTuiExit(releaseTerminal, exit) {
+	releaseTerminal();
+	exit?.();
+}
+//#endregion
 //#region lib/types/host.js
 const SETTINGS_NAMESPACE_PATTERN = /^[a-z][a-z0-9-]*$/;
 /** Validate and brand one dynamic settings namespace before calling the Host owner. */
@@ -41,7 +53,7 @@ function settingsNamespace(value) {
 	if (!SETTINGS_NAMESPACE_PATTERN.test(value)) throw new TypeError(`settings namespace "${value}" must match ${String(SETTINGS_NAMESPACE_PATTERN)}`);
 	return brandString(value);
 }
-/** Install one TUI settings section through the alpha.2 owner method. */
+/** Install one TUI settings section through the rc.1 owner method. */
 function installSettingsSection(ctx, namespace, schema, entry, hooks) {
 	ctx.inject(["settings"], (settingsCtx) => {
 		settingsCtx.settings.installSection(ctx, namespace, schema, entry, hooks);
@@ -173,8 +185,7 @@ function authenticationLlm(host) {
 function authorizationEntry(host, provider) {
 	const authorization = host.get("authorization");
 	if (authorization === void 0) return void 0;
-	const matches = authorization.list().filter((entry) => credentialKeyId(entry.key) === provider);
-	return matches.find((entry) => credentialKeyScope(entry.key) === "llm-openai-codex") ?? matches[0];
+	return authorization.list().find((entry) => provider === "lingxi-openai-codex" ? credentialKeyScope(entry.key) === "llm-openai-codex" && credentialKeyId(entry.key) === "openai-codex" : credentialKeyScope(entry.key) !== "llm-openai-codex" && credentialKeyId(entry.key) === provider);
 }
 /**
 * Read provider authentication when the Host exposes that optional seam.
@@ -6523,6 +6534,11 @@ const DEFAULT_TUI_SETTINGS = Object.freeze({
 	sessionManager: DEFAULT_TUI_SESSION_MANAGER_PREFERENCES
 });
 const TUI_SETTINGS_FIELDS = z.object({
+	defaultModel: z.union([z.const(void 0), z.object({
+		provider: z.string().required(),
+		model: z.string().required(),
+		reasoningEffort: z.string()
+	})]),
 	theme: z.union([...TUI_THEME_PREFERENCES]).default(DEFAULT_TUI_SETTINGS.theme),
 	themeFile: z.string(),
 	locale: z.union([...TUI_LOCALES]).default(DEFAULT_TUI_SETTINGS.locale),
@@ -6553,6 +6569,11 @@ const TUI_SETTINGS_SCHEMA = z.transform(TUI_SETTINGS_FIELDS, (settings) => {
 	const themeFile = settings.themeFile?.trim();
 	if (themeFile !== void 0 && !/^[A-Za-z0-9][A-Za-z0-9._-]*\.json$/u.test(themeFile)) throw new Error("TUI themeFile must be one JSON file name under the Harness themes directory");
 	return {
+		...settings.defaultModel == null ? {} : { defaultModel: {
+			provider: settings.defaultModel.provider,
+			model: settings.defaultModel.model,
+			...settings.defaultModel.reasoningEffort == null ? {} : { reasoningEffort: ReasoningEffortId(settings.defaultModel.reasoningEffort) }
+		} },
 		theme: settings.theme ?? DEFAULT_TUI_SETTINGS.theme,
 		...themeFile === void 0 || themeFile === "" ? {} : { themeFile },
 		locale: settings.locale ?? DEFAULT_TUI_SETTINGS.locale,
@@ -14073,16 +14094,33 @@ function tuiLoadedContextPanelLines(snapshot, width) {
 /** Pure, bounded first-run guidance over public Host and provider facts. */
 const GRAPHEMES$1 = new Intl.Segmenter(void 0, { granularity: "grapheme" });
 const NARROW_CONTENT_COLUMNS = 40;
+/** Stop waiting for a Host read even when that Host has no cancellation parameter. */
+async function cancellableRead(read, signal) {
+	signal?.throwIfAborted();
+	if (signal === void 0) return read();
+	let abort = () => {};
+	const cancelled = new Promise((_resolve, reject) => {
+		abort = () => {
+			reject(signal.reason instanceof Error ? signal.reason : new Error("Startup guidance cancelled", { cause: signal.reason }));
+		};
+		signal.addEventListener("abort", abort, { once: true });
+	});
+	try {
+		return await Promise.race([read(), cancelled]);
+	} finally {
+		signal.removeEventListener("abort", abort);
+	}
+}
 /**
 * Inspect one selected provider without retaining credentials or raw failures.
 * @param provider - registered provider identity and display name.
 * @param inspector - public authentication and model-catalog reads.
-* @param signal - cancellation checked between provider-owned asynchronous reads.
+* @param signal - cancellation stops waiting for provider-owned asynchronous reads.
 * @returns configured, unconfigured, or contained-failure state.
 */
 async function inspectTuiStartupProvider(provider, inspector, signal) {
 	try {
-		const authentication = await inspector.authentication(provider.id);
+		const authentication = await cancellableRead(() => inspector.authentication(provider.id), signal);
 		signal?.throwIfAborted();
 		if (!authentication.configured) return Object.freeze({
 			state: "unconfigured",
@@ -14090,7 +14128,7 @@ async function inspectTuiStartupProvider(provider, inspector, signal) {
 			name: provider.name,
 			...authentication.methods[0]?.name === void 0 ? {} : { method: authentication.methods[0].name }
 		});
-		const models = await inspector.listModels(provider.id);
+		const models = await cancellableRead(() => inspector.listModels(provider.id), signal);
 		signal?.throwIfAborted();
 		return Object.freeze({
 			state: "configured",
@@ -27296,7 +27334,7 @@ var TuiController = class {
 				return;
 			}
 			this.handle = handle;
-			this.events = new SessionEventStore(handle.agent.session.events);
+			this.events = new SessionEventStore(handle.agent.session.snapshotEvents());
 			this.status = new AgentStatusStore(handle.agent.status);
 			this.selection = prepared.selection;
 			this.modelSelection.set(prepared.selectedModel);
@@ -27331,14 +27369,16 @@ var TuiController = class {
 			const pluginHub = this.ctx.get("pluginHub");
 			if (pluginHub !== void 0 && pluginHub.hasProvider()) await pluginHub.markMaintenanceReady();
 			await this.instance.waitUntilExit();
+			this.requestExit(this.requestedExit);
 			await this.shutdown();
 			if (!this.isOwnerDisposed()) this.ctx.get("appExit")?.(this.requestedExit);
 		} catch (error) {
-			await this.shutdown();
 			if (!this.ownerDisposed) {
+				this.terminal.restore();
 				terminalInternals.stderr.write(`dsh --profile tui: ${error instanceof Error ? error.message : String(error)}\n`);
-				this.ctx.get("appExit")?.(1);
 			}
+			this.requestExit(1);
+			await this.shutdown();
 		}
 	}
 	appElement(root, rootEvents, rootStatus) {
@@ -27775,7 +27815,7 @@ var TuiController = class {
 		const presets = hostAgentPresets(this.ctx);
 		const requestedPreset = request.kind === "resume" ? void 0 : request.preset;
 		const resolvedPreset = request.kind === "resume" ? void 0 : await presets.resolve(requestedPreset);
-		const configuredSelection = request.kind === "fresh" || request.kind === "rewind" ? request.selection : defaultModel.currentSelection();
+		const configuredSelection = request.kind === "fresh" || request.kind === "rewind" ? request.selection : this.settingsSource().defaultModel ?? defaultModel.currentSelection();
 		const resolvedDefault = await this.ctx.llm.resolveCallConfig(configuredSelection, signal);
 		const defaultSelection = {
 			provider: resolvedDefault.provider,
@@ -27791,8 +27831,11 @@ var TuiController = class {
 		const setup = async (agentCtx) => {
 			const session = agentCtx.agent?.session;
 			if (session === void 0) throw new Error("TUI Agent setup cannot resolve its unpublished Session");
-			const presetId = request.kind === "resume" ? this.assertResumeCompatible(session.header, session.events) : resolvedPreset?.id;
-			migration.legacyPreset = request.kind === "resume" && sessionUsesLegacyCodePreset(session);
+			const presetId = request.kind === "resume" ? this.assertResumeCompatible(session.header, session.snapshotEvents()) : resolvedPreset?.id;
+			migration.legacyPreset = request.kind === "resume" && sessionUsesLegacyCodePreset({
+				header: session.header,
+				events: session.snapshotEvents()
+			});
 			if (presetId === void 0) throw new Error("TUI Agent setup has no resolved Agent preset");
 			const logged = session.requestHeader()?.config;
 			if (logged !== void 0) selected.current = {
@@ -27801,7 +27844,7 @@ var TuiController = class {
 				...logged.reasoningEffort === void 0 ? {} : { reasoningEffort: logged.reasoningEffort }
 			};
 			else if (request.kind === "resume") {
-				const route = resumeRoute(session.events);
+				const route = resumeRoute(session.snapshotEvents());
 				if (route !== void 0) selected.current = route;
 			}
 			installModelSelection(agentCtx, selected);
@@ -27831,9 +27874,12 @@ var TuiController = class {
 					cwd: request.cwd,
 					agentPreset: resolvedPreset.id,
 					parentSession: request.parentSession,
-					seedLength: request.seed.length
+					isSeeded: true
 				},
-				...request.kind === "rewind" ? { seed: request.seed } : {},
+				...request.kind === "rewind" ? {
+					seed: request.seed,
+					inheritedEventCount: SessionLogOffset(request.seed.length)
+				} : {},
 				agentOptions: {
 					provider: defaultSelection.provider,
 					model: defaultSelection.model
@@ -28395,7 +28441,7 @@ var TuiController = class {
 					acceptsInput: true
 				}),
 				agent: child,
-				events: new SessionEventStore(child.session.events),
+				events: new SessionEventStore(child.session.snapshotEvents()),
 				status: new AgentStatusStore(child.status)
 			};
 			try {
@@ -29937,7 +29983,10 @@ var TuiController = class {
 			text: tuiMessage(this.locale, "plugin.command.dialog")
 		};
 		const presets = hostAgentPresets(this.ctx);
-		const currentId = resolveSessionPreset(invocation.agent.session) ?? presets.composedPreset(invocation.agent.ctx);
+		const currentId = resolveSessionPreset({
+			header: invocation.agent.session.header,
+			events: invocation.agent.session.snapshotEvents()
+		}) ?? presets.composedPreset(invocation.agent.ctx);
 		if (currentId === void 0) throw new Error("The active TUI Agent has no composed preset");
 		const roster = tuiAgentModeOptions(await presets.list(), currentId, this.locale);
 		const options = Object.freeze([...roster.filter((option) => option.preset.id === currentId), ...roster.filter((option) => option.preset.id !== currentId)]);
@@ -29969,7 +30018,7 @@ var TuiController = class {
 			kind: "success",
 			text: tuiMessage(this.locale, "mode.same", { mode: selected.name })
 		};
-		if (invocation.agent.session.events.some((event) => event.type === "turn/start")) {
+		if (invocation.agent.session.snapshotEvents().some((event) => event.type === "turn/start")) {
 			const cwd = invocation.agent.session.header.cwd;
 			if (cwd === void 0) return {
 				kind: "error",
@@ -30444,7 +30493,7 @@ var TuiController = class {
 		this.rewindDialog.set({
 			...dialog,
 			phase: "browsing",
-			candidates: tuiRewindCandidates(agent.session.events)
+			candidates: tuiRewindCandidates(agent.session.snapshotEvents())
 		});
 	}
 	closeRewind() {
@@ -30474,10 +30523,13 @@ var TuiController = class {
 		}
 		const detached = this.detachedRewindSource?.id === dialog.currentSessionId ? this.detachedRewindSource : void 0;
 		const sourceId = detached?.id ?? agent.session.id;
-		const sourceEvents = detached?.events ?? agent.session.events;
+		const sourceEvents = detached?.events ?? agent.session.snapshotEvents();
 		const cwd = detached?.cwd ?? agent.session.header.cwd;
 		const selectedModel = detached?.selection ?? this.selection?.current ?? this.modelSelection.getSnapshot();
-		const preset = detached?.preset ?? resolveSessionPreset(agent.session);
+		const preset = detached?.preset ?? resolveSessionPreset({
+			header: agent.session.header,
+			events: agent.session.snapshotEvents()
+		});
 		if (cwd === void 0 || selectedModel === void 0) {
 			this.rewindDialog.set({
 				...dialog,
@@ -30990,7 +31042,7 @@ var TuiController = class {
 	openTrajectory() {
 		const root = this.handle?.agent;
 		if (root === void 0) return;
-		const events = root.session.events;
+		const events = root.session.snapshotEvents();
 		const snapshot = this.trajectoryProjection.update(events, this.trajectoryLimit);
 		this.trajectoryStore.set(snapshot);
 	}
@@ -31159,7 +31211,7 @@ var TuiController = class {
 		const live = this.ctx.sessions.get(id);
 		const source = live === void 0 ? await this.ctx.sessionQuery.readSession(id) : {
 			session: live.header,
-			events: live.events
+			events: live.snapshotEvents()
 		};
 		if (source.session.version !== SESSION_FORMAT_VERSION) throw new Error("the source Session format is incompatible");
 		if (source.session.origin === "subagent") throw new Error("subagent-owned Sessions cannot be forked here");
@@ -31289,7 +31341,7 @@ var TuiController = class {
 					const live = this.ctx.sessions.get(record.header.id);
 					const session = live === void 0 ? await this.ctx.sessionQuery.readSession(record.header.id) : {
 						session: live.header,
-						events: live.events
+						events: live.snapshotEvents()
 					};
 					signal.throwIfAborted();
 					const id = resolveSessionPreset({
@@ -31389,7 +31441,7 @@ var TuiController = class {
 	async resumeActivityTime(record, signal) {
 		signal.throwIfAborted();
 		const live = this.ctx.sessions.get(record.header.id);
-		if (live !== void 0) return live.events.at(-1)?.time;
+		if (live !== void 0) return live.snapshotEvents().at(-1)?.time;
 		const location = this.ctx.get("sessionPersistence")?.locate(record.header);
 		if (location === void 0) return void 0;
 		try {
@@ -31443,7 +31495,7 @@ var TuiController = class {
 	async projectedResumeTitle(cache, record, signal) {
 		const live = this.ctx.sessions.get(record.header.id);
 		if (live !== void 0) return this.ctx.get("sessionProjections")?.snapshot(live).values.title;
-		const cached = cache.cachedSnapshot(record.header);
+		const cached = record.header.isSeeded ? void 0 : cache.cachedSnapshot(record.header, SessionLogOffset(0), ["title"]);
 		if (cached !== void 0 && "title" in cached.values) return cached.values.title;
 		const observation = await this.ctx.sessionQuery.observeSession(record.header.id, { signal });
 		try {
@@ -31626,7 +31678,10 @@ var TuiController = class {
 		if (!this.ownsAgent(oldAgent)) throw new Error("the active TUI Session changed");
 		const initialStatus = this.agentStatus(oldAgent);
 		if (initialStatus !== "idle") throw new Error(`current Agent is ${initialStatus}`);
-		const preset = targetPreset?.id ?? resolveSessionPreset(oldAgent.session);
+		const preset = targetPreset?.id ?? resolveSessionPreset({
+			header: oldAgent.session.header,
+			events: oldAgent.session.snapshotEvents()
+		});
 		if (preset === void 0) throw new Error("the current Session has no Agent preset to inherit");
 		const prepared = await this.prepareAgent({
 			kind: "fresh",
@@ -31688,7 +31743,7 @@ var TuiController = class {
 		const oldExportDialog = this.sessionExportDialog.getSnapshot();
 		const oldActiveView = this.activeView;
 		if (oldHandle?.agent !== oldAgent || oldEvents === void 0 || oldStatus === void 0 || this.instance === void 0) throw new Error("TUI Agent switch lost its current owner");
-		const nextEvents = new SessionEventStore(prepared.handle.agent.session.events);
+		const nextEvents = new SessionEventStore(prepared.handle.agent.session.snapshotEvents());
 		const nextStatus = new AgentStatusStore(prepared.handle.agent.status);
 		this.handle = prepared.handle;
 		this.events = nextEvents;
@@ -31986,7 +32041,7 @@ var TuiController = class {
 					...resolved.reasoningEffort === void 0 ? {} : { reasoningEffort: resolved.reasoningEffort }
 				};
 				if (this.selection === void 0) throw new Error("TUI model selection is unavailable before Agent setup");
-				await this.ctx.agentDefaultModel.saveSelection(selected);
+				await this.ctx.get("settings")?.update(TUI_SETTINGS_NAMESPACE, { defaultModel: selected });
 				invocation.signal.throwIfAborted();
 				this.selection.current = selected;
 				this.modelSelection.set(selected);
@@ -32127,13 +32182,10 @@ var TuiController = class {
 			}
 		}
 		const controller = new AbortController();
-		const completion = this.ctx.subagents.followup(parent, view.agent.id, [{
+		const completion = queueHostSubagentPrompt(this.ctx.subagents, parent, view.agent.id, [{
 			type: "text",
 			text
-		}, ...imageBlocks], {
-			source: { kind: "user" },
-			signal: controller.signal
-		});
+		}, ...imageBlocks], { kind: "user" }, controller.signal);
 		const operation = {
 			controller,
 			completion
@@ -32148,7 +32200,12 @@ var TuiController = class {
 	requestExit(code) {
 		this.requestedExit = Math.max(this.requestedExit, code);
 		this.terminal.setInputCursor(void 0);
-		this.instance?.unmount();
+		requestTuiExit(() => {
+			this.instance?.unmount();
+			this.terminal.restore();
+		}, this.ownerDisposed ? void 0 : () => {
+			this.ctx.get("appExit")?.(this.requestedExit);
+		});
 	}
 	isOwnerDisposed() {
 		return this.ownerDisposed;
@@ -32279,7 +32336,21 @@ var TuiController = class {
 		this.disposers.sessionEvents?.();
 		this.disposers.questionProvider?.();
 		this.terminal.restore();
+		const releaseAgent = async () => {
+			await activeAgentSwitch?.completion.catch(() => void 0);
+			const handle = this.handle;
+			this.handle = void 0;
+			this.events = void 0;
+			this.status = void 0;
+			if (handle !== void 0) {
+				if (handle.agent.status === "running") handle.agent.cancel({ kind: "disposed" });
+				await handle.agent.whenIdle().catch(() => void 0);
+				await this.ctx.get("sessions")?.flush(handle.agent.session).catch(() => void 0);
+				await handle.dispose().catch(() => void 0);
+			}
+		};
 		await Promise.all([
+			releaseAgent(),
 			activeCommand?.completion.catch(() => void 0),
 			startupGuidanceRefresh?.completion.catch(() => void 0),
 			activeSessionExport?.completion.catch(() => void 0),
@@ -32294,16 +32365,6 @@ var TuiController = class {
 			updateCheck?.completion.catch(() => void 0),
 			themeLoad?.completion.catch(() => void 0)
 		]);
-		const handle = this.handle;
-		this.handle = void 0;
-		this.events = void 0;
-		this.status = void 0;
-		if (handle !== void 0) {
-			if (handle.agent.status === "running") handle.agent.cancel({ kind: "disposed" });
-			await handle.agent.whenIdle().catch(() => void 0);
-			await this.ctx.get("sessions")?.flush(handle.agent.session).catch(() => void 0);
-			await handle.dispose().catch(() => void 0);
-		}
 	}
 };
 function resumeRoute(events) {

package/lib/types/exit.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Hand terminal ownership back before starting the launcher's bounded teardown.
+ * @param releaseTerminal - Synchronous unmount and terminal restoration.
+ * @param exit - Launcher exit request, absent during owner disposal.
+ */
+export declare function requestTuiExit(releaseTerminal: () => void, exit: (() => void) | undefined): void;
+//# sourceMappingURL=exit.d.ts.map

package/lib/types/host.d.ts

@@ -31,18 +31,19 @@ export type { AgentPreset, AgentPresetComposition, AgentPresetCompositionRow, }
 export type { CommandInvocation, CommandResult } from '@deepseek-ai/dsh-commands';
 export { JobId } from '@deepseek-ai/dsh-jobs';
 export type { JobSnapshot, JobStatus } from '@deepseek-ai/dsh-jobs';
-export { createUserMessage, errorChain, freezeMessage, normalizeApiKey } from '@deepseek-ai/dsh-llm';
+export { createUserMessage, errorChain, freezeMessage, normalizeApiKey, ReasoningEffortId } from '@deepseek-ai/dsh-llm';
 export type { ContentBlock, LlmConfigurableProvider, LlmDiscoveredModel, LlmModelDiscoveryRequest, StreamChunk, TokenUsage, UserMessage, } from '@deepseek-ai/dsh-llm';
 export { MessageId } from '@deepseek-ai/dsh-llm/brand';
 export { runNativeCommand } from '@deepseek-ai/dsh-native-command';
 export type { PermissionSelect } from '@deepseek-ai/dsh-permission-presets';
 export { isAppendSurfaceEvent, } from '@deepseek-ai/dsh-session/surface';
-export { SESSION_FORMAT_VERSION, SessionId, } from '@deepseek-ai/dsh-session';
+export { SESSION_FORMAT_VERSION, SessionId, SessionLogOffset, } from '@deepseek-ai/dsh-session';
 export type { SessionEvent, SessionHeader, SessionId as SessionIdType, TurnEndReason } from '@deepseek-ai/dsh-session';
 export type { SessionPersistence } from '@deepseek-ai/dsh-session-persistence';
 export type { TodoItem } from '@deepseek-ai/dsh-tool-todo';
 export type { SessionProjectionCache } from '@deepseek-ai/dsh-session-projection-cache';
 export type { SessionRecord } from '@deepseek-ai/dsh-session-query';
+export { queueHostSubagentPrompt } from '@deepseek-ai/dsh-subagent/internal';
 export type { SettingsDescriptor, SettingsNamespace, SettingsPathOp, SettingsProvider, } from '@deepseek-ai/dsh-settings';
 export { activeAtToken, formatFileMention } from '@deepseek-ai/dsh-file-reference';
 export type { FileReferenceCandidate } from '@deepseek-ai/dsh-file-reference';
@@ -60,7 +61,7 @@ export interface TuiSettingsSectionHooks<T> {
     /** Refuse a resolved settings section the TUI cannot apply. */
     validate?: (value: T) => void;
 }
-/** Install one TUI settings section through the alpha.2 owner method. */
+/** Install one TUI settings section through the rc.1 owner method. */
 export declare function installSettingsSection<T>(ctx: HostContext, namespace: string, schema: z<T>, entry: T, hooks: TuiSettingsSectionHooks<T>): void;
 /** Resolve the shared Host settings owner through the reviewed adapter boundary. */
 export declare function hostSettings(ctx: HostContext): import('@deepseek-ai/dsh-settings').SettingsProvider;

package/lib/types/startup-guidance.d.ts

@@ -52,7 +52,7 @@ export interface TuiStartupProviderInspector {
  * Inspect one selected provider without retaining credentials or raw failures.
  * @param provider - registered provider identity and display name.
  * @param inspector - public authentication and model-catalog reads.
- * @param signal - cancellation checked between provider-owned asynchronous reads.
+ * @param signal - cancellation stops waiting for provider-owned asynchronous reads.
  * @returns configured, unconfigured, or contained-failure state.
  */
 export declare function inspectTuiStartupProvider(provider: Readonly<{

package/lib/types/theme.d.ts

@@ -1,6 +1,6 @@
 /** Semantic terminal colors and user settings for the native TUI. */
 import React, { type ReactNode } from 'react';
-import { z } from './host.ts';
+import { z, type ModelSelection } from './host.ts';
 import { type TuiKeybindingOverrides } from './keybindings.ts';
 import { TUI_LOCALES, type TuiLocale } from './locale.ts';
 import type { TuiTerminalBackground, TuiTerminalColorDepth } from './terminal-session.ts';
@@ -28,6 +28,8 @@ export declare const TUI_SETTINGS_NAMESPACE: import("@deepseek-ai/dsh-settings")
 export declare const TUI_PROVIDER_ONBOARDING_VERSION: 1;
 /** User settings consumed live by the native TUI. */
 export interface TuiSettings {
+    /** Default for new TUI Agents; never changes the shared Web model selection. */
+    defaultModel?: ModelSelection;
     /** Built-in semantic terminal theme. */
     theme: TuiThemePreference;
     /** Optional JSON file name under the Harness home `themes` directory. */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lingxi-ai-cn/dsh-tui-runtime",
   "description": "Native terminal UI for one in-process DeepSeek Harness Agent and Session",
-  "version": "0.1.7-alpha.2",
+  "version": "0.1.9-rc.1",
   "publishConfig": {
     "access": "public"
   },
@@ -40,53 +40,53 @@
     "string-width": "^7.2.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-brand": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-attachment": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-authorization": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-attachment": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-authorization": "0.1.2-rc.1",
     "@deepseek-ai/cordis-plugin-loader": "1.0.3",
-    "@deepseek-ai/dsh-agent": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-agent-default-model": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-agent-presets": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-atomic-write": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-cmdline": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-compaction": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-commands": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-credentials": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-fs": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-file-reference": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-host-directory-picker": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-goal": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-invariants": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-jobs": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-message-feedback": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-native-command": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-permission-presets": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-plan-mode": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-projection-cache": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-stats": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-query": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-reference": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-schedule": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-title": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-settings": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-subagent": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-token-meter": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-tool-todo": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-tools": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-persistence": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-subprocess": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-user-approval": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-user-questions": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-workspace": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-agent-default-model": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-agent-presets": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-atomic-write": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-cmdline": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-compaction": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-commands": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-credentials": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-fs": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-file-reference": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-home-paths": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-host-directory-picker": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-goal": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-invariants": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-jobs": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-message-feedback": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-native-command": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-permission-presets": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-plan-mode": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-projection": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-projection-cache": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-stats": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-query": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-reference": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-schedule": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-title": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-settings": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-subagent": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-token-meter": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-tool-todo": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-tools": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-persistence": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-subprocess": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-user-approval": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-user-questions": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-workspace": "0.1.2-rc.1",
     "@deepseek-ai/cordis": "4.0.2",
     "@deepseek-ai/schemastery": "3.18.2",
-    "@lingxi-ai-cn/dsh-session-export": "0.1.7-alpha.2",
-    "@lingxi-ai-cn/dsh-plugin-hub": "0.1.7-alpha.2"
+    "@lingxi-ai-cn/dsh-session-export": "0.1.9-rc.1",
+    "@lingxi-ai-cn/dsh-plugin-hub": "0.1.9-rc.1"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-attachment": {
@@ -226,53 +226,54 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-brand": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-atomic-write": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-host-directory-picker": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-goal": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-attachment": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-authorization": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-atomic-write": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-home-paths": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-host-directory-picker": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-goal": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-attachment": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-authorization": "0.1.2-rc.1",
     "@deepseek-ai/cordis-plugin-loader": "1.0.3",
-    "@deepseek-ai/dsh-agent": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-agent-default-model": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-agent-presets": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-cmdline": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-compaction": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-commands": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-credentials": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-fs": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-file-reference": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-invariants": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-jobs": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-message-feedback": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-native-command": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-permission-presets": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-plan-mode": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-projection-cache": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-stats": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-query": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-reference": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-schedule": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-title": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-settings": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-subagent": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-token-meter": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-tool-todo": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-tools": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-persistence": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-subprocess": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-user-approval": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-user-questions": "0.1.2-alpha.2",
-    "@deepseek-ai/dsh-workspace": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-agent-default-model": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-agent-presets": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-cmdline": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-compaction": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-commands": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-credentials": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-fs": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-file-reference": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-invariants": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-jobs": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-message-feedback": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-native-command": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-permission-presets": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-plan-mode": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-projection": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-projection-cache": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-stats": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-query": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-reference": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-schedule": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-title": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-settings": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-subagent": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-token-meter": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-tool-todo": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-tools": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-persistence": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-subprocess": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-user-approval": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-user-questions": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-workspace": "0.1.2-rc.1",
     "@deepseek-ai/cordis": "4.0.2",
     "@deepseek-ai/schemastery": "3.18.2",
     "@types/react": "~18.3.1",
-    "@lingxi-ai-cn/dsh-session-export": "0.1.7-alpha.2",
-    "@lingxi-ai-cn/dsh-plugin-hub": "0.1.7-alpha.2"
+    "@deepseek-ai/dsh-settings-file": "0.1.2-rc.1",
+    "@lingxi-ai-cn/dsh-plugin-hub": "0.1.9-rc.1",
+    "@lingxi-ai-cn/dsh-session-export": "0.1.9-rc.1"
   }
 }