@mstar-harness/dsh 3.8.0 → 3.8.2

package/dist/client/panel/PanelView.d.ts

@@ -1,60 +1,67 @@
 /**
- * Morning Star workflow panel page — the `conversation.view` tab component
- * (spec §4.2): render of the session's engine-status snapshot.
+ * Morning Star workflow panel page — the right-Sidebar pane body (the keyed
+ * `sidebar.right.pane.tab` seat component, plan sidebar §L1.5): render of the
+ * session's engine-status snapshot.
  *
- * Inputs: the session standard kit (`ConvViewProps` + the session-list seat),
- * the plugin's engine-status client (bound to the client `connection` service
- * by the plugin entry) and the typed `t` seat (`locale: 'mstar-panel'`). The
- * `useMstarEngineStatus()` hook turns the anchor row + the served snapshot
- * into ONE explicit render state (spec §5) — the render body is a pure
- * function of (state, payload, snapshot `at`, t).
+ * Inputs: the sidebar seat's props (`MstarPanelBodyProps` — the seat's
+ * runtime share incl. the framework-injected `useTabInfo()` + the session
+ * standard kit + the entry store share (`useStore` + baked `select`, backed
+ * by the registration's `store` option) + the plugin's engine-status client
+ * bound by the plugin entry + the typed `t` seat (`locale: 'mstar-panel'`)).
+ * The `useMstarEngineStatus()` hook turns the anchor row + the served
+ * snapshot into ONE explicit render state (spec §5) — the render body is a
+ * pure function of (state, payload, snapshot `at`, t).
  *
- * Layout (spec panel-tabs §2): root grid
- * `"main sidebar"` fills the Tab (height 100%, overflow hidden — the page
- * never scrolls); the right sidebar is RESIDENT (all tabs share it, its props
- * `{ t, state, source }` unchanged); main = the fixed header nav (TabNav, 3
- * MenuTabs) + the content region (switches per tab) + the freshness footer.
- * The `data-mstar-graph` anchor now marks the CONTENT container (spec §6.1 —
- * previously the canvas container), so tests pin the layout contract, not the
- * per-tab page internals.
+ * Visibility (plan sidebar §L2.6): a docked body is projected only while its
+ * sidebar column is expanded and the tab is active —
+ * `useTabInfo().tab.visible` — so a collapsed column renders NOTHING (no
+ * projection, no DOM). A floating pane is always visible.
  *
- * Tab state (spec §6.2): local `useState<PanelTab>` (default 'tasks', D1, no
- * routing) — `renderToStaticMarkup` renders the default tasks page, keeping
- * SSR assertions stable. The tasks tab renders the IterationTaskPage (Content
- * Head + Steps 横排/收拢 + full-width kanban, spec §3 —
- * replacing the WorkflowCanvas zone dashboard); the agents tab renders the
- * draggable AgentCanvasPage (spec §4 — replacing the muted placeholder + the AgentFlowZone); the events tab
- * renders the EventLogPage (spec §5 — the non-canvas log page with per-row
- * `<details>` expansion, replacing
- * the muted placeholder AND the AgentEventDock — 无双份日志).
+ * Layout (plan sidebar §L2.1): the narrow-column shell is a single flex
+ * column with exactly three zones — the section nav (`flex: none`), the
+ * panel-owned scroll body (`[data-mstar-scroll]`, flex: 1 1 auto ·
+ * min-height: 0 · the ONLY `overflow-y: auto` element in the panel; it also
+ * carries the `data-mstar-graph` content-container anchor), and the pinned
+ * meta dock (`flex: none`). The workspace-state digest renders IN FLOW at the
+ * end of the scroll body (the old 300px sibling column and its nested
+ * scroller are gone); the freshness footer follows it in the same flow.
  *
- * Empty branches (spec §2): waiting / loading / unavailable / no-harness render
- * no tabs and no sidebar — each with its OWN anchor and copy, so a degraded
- * read is never mistakable for an empty workspace. Waiting keeps the muted
- * hint; loading states the pending read; unavailable carries the
- * machine-readable reason; the no-harness branch renders a CENTERED
- * inactive-state card (icon + title + hint) with the freshness footer, and its
- * main keeps `data-mstar-graph` on the content container. Degradation stays
- * total: `projectGraph` never throws; no iteration → the IterationTaskPage's
- * collapsed muted head (spec §8); `state` null / plans missing → muted kanban
- * skeleton.
+ * Section state (plan sidebar §L2.4): the entry store, keyed by
+ * `tabInfo.tab.id` (default `'tasks'`, D1) — it survives the body's unmount
+ * when another pane tab activates, which `useState` cannot. The render is
+ * SSR-stable: an untouched store reads `undefined` → the default tasks page.
+ *
+ * Empty branches (spec §2): waiting / loading / unavailable / no-harness
+ * render no tabs, no digest and no meta dock — each with its OWN anchor and
+ * copy, so a degraded read is never mistakable for an empty workspace.
+ * Degradation stays total: `projectGraph` never throws; no iteration → the
+ * IterationTaskPage's collapsed muted head (spec §8); `state` null / plans
+ * missing → muted kanban skeleton.
  */
 import * as React from 'react';
-import type { ConvViewProps } from '@deepseek-ai/dsh-client-ui-conversation/client';
-import type { TranslateNS } from '@deepseek-ai/dsh-client-ui-slots';
+import type { PropsLocale, PropsRuntime, TranslateNS } from '@deepseek-ai/dsh-client-ui-slots';
 import type { SessionId } from '@deepseek-ai/dsh-session';
 import type { MstarEngineStatusPayload } from '../../types.ts';
+import type { PropsStore } from '@deepseek-ai/dsh-client-store';
 import type { MstarEngineStatusClient } from './engine-status-client.ts';
-import { type PanelTab } from './TabNav.tsx';
 import { type UseSessions } from './use-mstar-engine-status.ts';
-export interface MstarPanelViewProps extends ConvViewProps {
+import { createPanelStore, type PanelSection } from './panel-store.ts';
+/**
+ * The sidebar body seat's props (plan sidebar §L1.5): the seat's runtime
+ * share (owner + keyed + the seat's inject face — `useTabInfo()` — + the
+ * session standard kit, incl. the ui-chat-merged `useChat`) + the entry
+ * store share (plan §L2.4 — the registration's `store` option) + the typed
+ * `t` seat from the registration's `locale:` option.
+ */
+export interface MstarPanelBodyProps extends PropsRuntime<'sidebar.right.pane.tab'>, PropsStore<ReturnType<typeof createPanelStore>>, PropsLocale<'mstar-panel'> {
     /** Namespace-bound translate seat (`locale: 'mstar-panel'`). */
     t: TranslateNS<'mstar-panel'>;
     /**
      * Current session identity — the session standard kit's own prop. Declared
      * here (rather than inherited) because this package does not depend on the
      * ui-session adapter that merges the session-kit declarations into
-     * `ConvViewProps`; the view ring always supplies it at runtime.
+     * `SessionStandardProps`; the seat's session scope always supplies it at
+     * runtime.
      */
     sessionId?: SessionId;
     /** Host session-list selector hook (the global standard seat, same reason). */
@@ -67,20 +74,17 @@ export interface MstarPanelViewProps extends ConvViewProps {
     engineStatus?: MstarEngineStatusClient;
 }
 export interface PanelContentProps {
-    tab: PanelTab;
+    /** The active panel section (plan sidebar §L1.5 vocabulary — not a sidebar tab record). */
+    section: PanelSection;
     source: MstarEngineStatusPayload;
     t: TranslateNS<'mstar-panel'>;
 }
 /**
- * Tab → page mapping (spec §6.2): the only per-tab-switching part of the
- * layout. tasks = the IterationTaskPage (spec §3 — Content Head + Steps
- * 横排/收拢 + full-width kanban, it replaced the
- * WorkflowCanvas zone dashboard, whose file is removed by the plan close);
- * agents = the draggable AgentCanvasPage (spec §4 — full KNOWN_AGENTS roster
- * + idle states + AgentEdge collaboration edges; it replaced the muted placeholder and the AgentFlowZone); events =
- * the real EventLogPage (spec §5 — non-canvas log page: Agent 流转事件 +
- * 违规记录 partitions with per-row `<details>` expansion; it replaced the muted placeholder AND the
- * AgentEventDock — 无双份日志, the dock is removed with this plan).
+ * Section → page mapping (spec §6.2): the only per-section-switching part of
+ * the layout. tasks = the IterationTaskPage (spec §3 — Content Head + Steps
+ * + the plan board); agents = the AgentListPage (spec §4 — the vertical
+ * grouped list, plan sidebar §L3); events = the EventLogPage (spec §5 — the
+ * log page with per-row `<details>` expansion).
  */
-export declare function PanelContent({ tab, source, t }: PanelContentProps): React.JSX.Element;
-export declare function PanelView({ t, useChat, useSessions, sessionId, engineStatus }: MstarPanelViewProps): React.JSX.Element;
+export declare function PanelContent({ section, source, t }: PanelContentProps): React.JSX.Element;
+export declare function PanelView({ t, useChat, useSessions, sessionId, engineStatus, useTabInfo, useStore, actions }: MstarPanelBodyProps): React.JSX.Element | null;

package/dist/client/panel/TabNav.d.ts

@@ -1,28 +1,31 @@
 /**
  * TabNav (spec panel-tabs §2/§6.1) —
- * the fixed header nav: 3 MenuTabs (任务迭代 / 代理执行 / 事件记录, F1.2)
- * switching the main content. Tab state is owned by PanelView
- * (`useState<PanelTab>`, default 'tasks', no routing — SSR-stable under
- * `renderToStaticMarkup`); TabNav is a controlled component receiving
- * `active` + `onChange` (spec §6.1 interface contract).
+ * the section nav, the shell's first flex zone (`flex: none`): the three
+ * internal sections (任务迭代 / 代理执行 / 事件记录) of the one sidebar tab.
+ * Section state is owned by the panel entry store (plan sidebar §L2.4 —
+ * keyed by the sidebar tab record, default 'tasks', no routing); TabNav is a
+ * controlled component receiving `active` + `onChange` (spec §6.1 interface
+ * contract).
  *
  * Anchors: `data-mstar-tab-nav` (the nav frame), `data-mstar-tab="{id}"` on
  * every tab and `data-mstar-tab-active="true|false"` (activation state). The
  * active tab gets the business-token underline; inactive tabs stay secondary.
+ * Visual language (plan sidebar §L2.3): the strip ABOVE this nav is the dsh
+ * tab chrome (chips with borders — the host's, untouched); this nav is
+ * content — `role="tablist"`, `role="tab"` + `aria-selected`, the underline
+ * via `box-shadow`, no borders on the tabs.
  *
- * A11y: the nav is a WAI-ARIA tablist and each tab is a
- * `role="tab"` button with `aria-selected` (APG Tabs pattern, replacing the
- * former `aria-pressed` toggle). Deliberately minimal: every tab stays Tab-
- * reachable (no roving tabindex / arrow-key handling — that behavior would
- * be scope creep without an explicit keyboard contract).
+ * A11y: WAI-ARIA tablist, each tab a `role="tab"` button with
+ * `aria-selected` (APG Tabs pattern). Deliberately minimal: every tab stays
+ * Tab-reachable (no roving tabindex / arrow-key handling — that behavior
+ * would be scope creep without an explicit keyboard contract).
  */
 import * as React from 'react';
 import type { TranslateNS } from '@deepseek-ai/dsh-client-ui-slots';
-/** The three fixed panel tabs (spec §2 — D1 default = 'tasks'). */
-export type PanelTab = 'tasks' | 'agents' | 'events';
+import type { PanelSection } from './panel-store.ts';
 export interface TabNavProps {
-    active: PanelTab;
-    onChange: (tab: PanelTab) => void;
+    active: PanelSection;
+    onChange: (tab: PanelSection) => void;
     t: TranslateNS<'mstar-panel'>;
 }
 export declare function TabNav({ active, onChange, t }: TabNavProps): React.JSX.Element;

package/dist/client/panel/definition.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The panel's right-Sidebar tab-type definition (plan sidebar §L1.2) — stage
+ * one of the two-stage seat registration: what the panel IS in the tab
+ * system. Stage two (the keyed `sidebar.right.pane.tab` body and
+ * `sidebar.right.pane.tab.title` chip under the same `id`) lives in the
+ * plugin entry (`src/client/index.ts`).
+ *
+ * A page type: `patterns`/`canOpen` omitted (it recognizes no resource
+ * address — it is opened by `kind`), `priority` omitted (defaults to the
+ * `extension` band, the right band for a type from outside the product), and
+ * exactly one guide entry so the start page carries the MStar capsule. The
+ * `title` thunk is re-read on every use, so the guide capsule follows the
+ * current locale; the chip's copy is captured at open time by the host.
+ */
+import type { SidebarRightTabDefinition } from '@deepseek-ai/dsh-client-ui-sidebar-right/client';
+import type { TranslateNS } from '@deepseek-ai/dsh-client-ui-slots';
+/** This implementation's identity in the tab system — the key its body and title register under. */
+export declare const MSTAR_PANEL_ID = "@mstar-harness/dsh";
+/** The page kind the panel owns (U2: one sidebar tab). */
+export declare const MSTAR_PANEL_KIND = "mstar-workflow";
+/** The guide capsule's position among every registered type's entries (files ships order 10). */
+export declare const MSTAR_GUIDE_ORDER = 20;
+export declare function mstarPanelDefinition(t: TranslateNS<'mstar-panel'>): SidebarRightTabDefinition;

package/dist/client/panel/engine-status-client.d.ts

@@ -22,7 +22,13 @@
  * on arrival ({@link MstarEngineStatusClient.write}) and the next render
  * re-issues it. Without the fence an in-flight pre-reconnect answer would
  * repopulate the cache and then suppress the repull the invalidation exists to
- * force.
+ * force. A PICKER COMMIT uses the same fence PER SESSION
+ * ({@link MstarEngineStatusClient.invalidateSession}): the durable binding
+ * changed, so an in-flight pre-pick answer must not land — and the session's
+ * cached entry, which still answers the anchor row (a pick writes no row),
+ * must be re-pulled for its `binding` while the last emitted `payload` stays on
+ * screen (the plans / Event Log are the last MODEL emission until the next real
+ * one).
  *
  * DEADLINES: the gateway is a network hop, so one request is bounded
  * ({@link MstarEngineStatusClientOptions.timeoutMs}) and a request that
@@ -41,9 +47,10 @@
  * @module @mstar-harness/dsh/client/panel/engine-status-client
  */
 import type { ConnectionRpcResult } from '@deepseek-ai/dsh-client-connection/client';
-import { ENGINE_STATUS_CHANNEL, ENGINE_STATUS_ENDPOINT } from '../../engine-status-wire.ts';
-import { type MstarEngineStatusFetch } from './guards.ts';
-export { ENGINE_STATUS_CHANNEL, ENGINE_STATUS_ENDPOINT };
+import { ENGINE_STATUS_CHANNEL, ENGINE_STATUS_ENDPOINT, SELECT_WORKFLOW_ENDPOINT } from '../../engine-status-wire.ts';
+import { type MstarEngineStatusFetch, type MstarSelectWorkflowFetch } from './guards.ts';
+export { ENGINE_STATUS_CHANNEL, ENGINE_STATUS_ENDPOINT, SELECT_WORKFLOW_ENDPOINT };
+export type { MstarSelectWorkflowFetch };
 /** Deadline for one `/api/mstar/engineStatus` request (a hanging gateway must not pin `loading`). */
 export declare const ENGINE_STATUS_REQUEST_TIMEOUT_MS = 5000;
 /** How often a served snapshot is re-pulled (D3's "explicit refresh", modest interval). */
@@ -84,9 +91,28 @@ export interface MstarEngineStatusEntry {
     readonly fetchedAt: number;
     readonly fetch: MstarEngineStatusFetch;
 }
-/** The observable store value: at most one entry per session. */
+/**
+ * The picker state of ONE session (D4 control feedback, never a selection
+ * source of truth): idle, a submission awaiting the host, the acknowledged
+ * workflow id, or the explicit failure reason. The panel disables a second
+ * submission while `pending` and shows `failed` beside the picker instead of a
+ * fake selection.
+ */
+export type MstarSelectionState = {
+    readonly state: 'idle';
+} | {
+    readonly state: 'pending';
+} | {
+    readonly state: 'selected';
+    readonly workflowId: string;
+} | {
+    readonly state: 'failed';
+    readonly reason: string;
+};
+/** The observable store value: at most one entry per session (+ its picker state). */
 export interface MstarEngineStatusSnapshot {
     readonly entries: ReadonlyMap<string, MstarEngineStatusEntry>;
+    readonly selections: ReadonlyMap<string, MstarSelectionState>;
 }
 /**
  * The panel's engine-status client: one `/api/mstar/engineStatus` request per
@@ -106,6 +132,19 @@ export declare class MstarEngineStatusClient {
     private generationDisposer;
     /** Connection generation: bumped by {@link invalidate}; a mismatched answer is dropped. */
     private generation;
+    /**
+     * Per-session request generation: bumped by {@link invalidateSession} (a
+     * picker commit). A fetch captures the session's generation when it is
+     * issued, and its answer is dropped when that generation moved — the fence
+     * that keeps a late pre-pick answer from overwriting post-pick state.
+     */
+    private readonly sessionGenerations;
+    /**
+     * Sessions whose cached entry no longer describes their durable binding: the
+     * next `ensure` for that entry's own anchor re-pulls it instead of serving it.
+     * Set by {@link invalidateSession}, cleared when the answer lands.
+     */
+    private readonly stale;
     private disposed;
     /**
      * @param connection - the client `connection` service, or undefined in a
@@ -135,6 +174,41 @@ export declare class MstarEngineStatusClient {
      * repull this invalidation exists to force would be suppressed by them.
      */
     invalidate(): void;
+    /**
+     * Mark ONE session's cached answer stale and fence off the requests already on
+     * the wire (a picker commit changed that session's durable binding).
+     *
+     * The entry is KEPT — the last emitted payload is still the last model
+     * emission, and spec §Picker contract 2 keeps plans / Event Log on it until
+     * the next real `agent/pre-step` replaces it. What must change is `binding`,
+     * the host's current control state, which the next {@link ensure} re-pulls for
+     * the same anchor ({@link stale}), because an entry that already answers the
+     * anchor would otherwise short-circuit the request and the panel would keep
+     * rendering the pre-pick selection.
+     *
+     * The fence is per session: a pre-pick answer issued before this call belongs
+     * to the superseded control state and is dropped on arrival, and no other
+     * session's cache is touched.
+     */
+    invalidateSession(sessionId: string): void;
+    /**
+     * Commit this session's workflow pick over the host's shared gateway (the
+     * `selectWorkflow` UI control). Never optimistic: the returned state is
+     * `pending` until the host acknowledges, then either `selected` (with the
+     * acknowledged id) or `failed` (with the host's reason) — and a success
+     * invalidates THIS session only, so the next `ensure()` re-reads the
+     * acknowledged binding while every other session's cache is untouched.
+     * @param sessionId - the session the panel is showing.
+     * @param cwd - the session's workspace directory (the host cross-checks it).
+     * @param workflowId - the chosen ACTIVE workflow id.
+     */
+    selectWorkflow(sessionId: string, cwd: string, workflowId: string): Promise<MstarSelectWorkflowFetch>;
+    /** One `selectWorkflow` round trip (never throws — every fault is a reason). */
+    private callSelect;
+    /** Publish one session's picker state (store write outside a render). */
+    private setSelection;
+    /** One session's current request generation. */
+    private sessionGen;
     /** Stop accepting writes, abort in-flight requests and end the refresh interval (plugin teardown). */
     dispose(): void;
     /**
@@ -170,7 +244,11 @@ export declare class MstarEngineStatusClient {
      * An answer issued under a superseded connection generation is DROPPED: it
      * describes the connection that is gone, and publishing it would both render
      * pre-reconnect data as `ok` and suppress the repull `invalidate()` forces
-     * (the stale answer would satisfy `ensure`'s anchor check).
+     * (the stale answer would satisfy `ensure`'s anchor check). An answer issued
+     * under a superseded SESSION generation is dropped for the same reason after a
+     * picker commit ({@link invalidateSession}): it describes the pre-pick control
+     * state and would otherwise repopulate the very entry the acknowledgement
+     * invalidated.
      *
      * An answer for a SUPERSEDED anchor is dropped for the same class of reason:
      * a refresh issues its request for the anchor it saw, and a newer anchor row

package/dist/client/panel/graph/project-graph.d.ts

@@ -35,8 +35,7 @@
  *   (the stage skeleton + entities/edges now live in the `agents` projection —
  *   spec §4);
  * - added: `iteration.steps / currentStep / branches`, `tasks.columns / total
- *   / truncated`, `agents` (entities + actual/supervise edges + executing/
- *   pending counts — spec §4).
+ *   / truncated`, `agents` (entities + executing/pending counts — spec §4).
  *
  * Agent-entity semantics (the per-role aggregation): entities aggregate by ROLE, not by session
  * — a KNOWN_AGENTS roster role keys its own card (same role across sessions
@@ -48,8 +47,8 @@
  * RENDER places `zone: 'general'` entities in an unknown sub-partition at
  * the bottom of the LAST column (the standalone rightmost unknown column
  * is superseded: 4 columns total). The SDD loop back-edge (sdd-implement →
- * general) stays REMOVED from the projection; the supervise line is a SEPARATE sub-bucket edge
- * (`kind: 'supervise'`, see `superviseEdges`). The event-log `unexpected`
+ * general) and the sub-bucket supervise line are both REMOVED from the
+ * projection — the agents zone projects entities only. The event-log `unexpected`
  * badge is a SEPARATE, unchanged semantic (`expected` ⟺ role ∈
  * EXPECTED_ROLE_FLOW union). The `sdd-implement` column is further split
  * into implementor / reviewer SUB-BUCKETS: every entity carries a projected `bucket` field ('implementor' /
@@ -101,15 +100,15 @@ export interface FlowEventView {
     /** `${ts}-${kind}-${index}` — stable id (index = position in the projected window). */
     id: string;
     ts: number;
-    /** The ledger kind verbatim: dispatch | settle | the three workflow kinds | any unknown kind string (generic row). */
-    kind: 'dispatch' | 'settle' | 'workflow-run' | 'workflow-agent' | 'workflow-run-end' | (string & {});
+    /** The ledger kind verbatim: dispatch | settle | subagent-link | the three workflow kinds | any unknown kind string (generic row). */
+    kind: 'dispatch' | 'settle' | 'subagent-link' | 'workflow-run' | 'workflow-agent' | 'workflow-run-end' | (string & {});
     /** `Execute as`; '' for settle rows without a paired identity and for workflow/unknown rows. */
     role: string;
     planId: string | null;
     taskId: string | null;
     taskCategory: string | null;
     agent: string | null;
-    /** dispatch → dispatched|advisory|denied; settle → ok|error|denied; workflow/unknown → unknown (spec §2.4). */
+    /** dispatch → dispatched|advisory|denied; settle → ok|error|denied; link/workflow/unknown → unknown (spec §2.4). */
     status: FlowEventStatus;
     /** `role` ∈ the EXPECTED_ROLE_FLOW role union (spec §2.3 exact-string match). */
     expected: boolean;
@@ -135,8 +134,19 @@ export interface FlowEventView {
     readonly label?: string;
     /** Run-member phase (workflow-agent rows only, when carried). */
     readonly phase?: string;
-    /** The published member's child session identity (workflow-agent rows only). */
+    /**
+     * Child session identity when the source supplied one: workflow-agent —
+     * the published member; settle — the foreground `runId` or a background
+     * catalog join; `subagent-link` — the required catalog child id. Omitted
+     * when the row carried none. Never a registry job id (that is `taskRef`).
+     */
     readonly childId?: string;
+    /**
+     * Settle + `subagent-link` rows: the registry background-job id, when
+     * carried. A jobs-registry key, never a child session id. Omitted when
+     * the row carried none.
+     */
+    readonly taskRef?: string;
     /** Terminal workflow run reason (workflow-run-end rows only). */
     readonly stopReason?: string;
 }
@@ -215,7 +225,7 @@ export interface AgentEntityView {
      * non-roster dispatch); the KNOWN_AGENTS role id for idle cards. INVARIANT
      * (spec §6.2): keys are UNIQUE across the whole `entities` array —
      * an evidence-derived `general` key suppresses the idle general twin in
-     * `idleEntities`, so the React `key` / `layoutAgents` `cards.set` never see
+     * `idleEntities`, so the render layer's entity `key` space never sees
      * duplicates.
      */
     key: string;
@@ -291,58 +301,22 @@ export type AgentEmphasis = 'current' | 'next' | 'off' | null;
 export type AgentEntityStatus = 'running' | 'settled' | 'error' | 'denied'
 /** Retained for shape compat; the derivation (entityStatus) no longer emits it. */
  | 'advisory' | 'idle';
-/** Edge kinds (spec §4 — the finalized line semantics, design doc §2.2): handoff / sub-bucket
- * supervision arrows. `expected` (stage skeleton) and `next` (running
- * animation) are REMOVED — the column order implies the flow, the running
- * card glow/status point carries the position. */
-export type AgentEdgeKind = 'actual' | 'supervise';
-/**
- * One agents-zone arrow (spec §4):
- * - `actual`: same-plan handoff between ts-adjacent dispatch ENTITY keys
- *   (source/target = entity key — role-based). The line set filters
- *   general-bucket endpoints
- *   (a general handoff is noise, not a meaningful transfer) and keeps at most
- *   ONE edge per entity-key pair (the latest direction) — design doc §2.2;
- * - `supervise`: ONE static sub-bucket line inside the `sdd-implement`
- *   column — implementor ↔ reviewer mutual supervision (the mstar-sdd
- *   mutual-supervision contract; the render draws it as a bidirectional
- *   double arrow).
- *   source/target embed the column id as an anchor prefix:
- *   `<stage-id>:implementor` / `<stage-id>:reviewer`. NOT per-entity pairs —
- *   drawing per-role pairs would fabricate concrete supervision relations
- *   where no evidence exists (evidence-level handoffs are covered by
- *   `actualEdges`). STATIC presence (design knowledge) + evidence-driven
- *   lighting via `evidenced` (dim without implement/review dispatch
- *   evidence, lit with it — never a fabricated activation).
- */
-export interface AgentEdge {
-    kind: AgentEdgeKind;
-    /** actual: entity key; supervise: `<stage-id>:implementor|reviewer`. */
-    source: string;
-    target: string;
-    /** Unused by the line edge set (the removed `next` arrow carried the
-     * running entity key); kept for shape stability — always null. */
-    entityKey: string | null;
-    /** Supervise edges only:
-     * evidence-driven lighting — true when any dispatch row's role belongs to
-     * an SDD sub-bucket (implementor ∪ reviewer), false otherwise (dim).
-     * Absent (undefined) for actual. */
-    evidenced?: boolean;
-}
 /**
  * The canvas degradation-note classification (spec §8): the projection
  * decides the note from the RAW ledger (never a UI-side heuristic on the
- * entity list): `empty` = 0 events; `settle-only` = events present but NO
- * dispatch row (all settle / garbage rows — genuinely no dispatch evidence);
- * `null` = dispatch evidence present (incl. anonymous dispatch rows — they
- * are evidence, not settle-only). The unreadable-ledger case is the SEPARATE
- * `degraded` flag, not a note value.
+ * entity list): `empty` = 0 events; `link-only` = the readable window
+ * contains ONLY `subagent-link` rows (identity records — neither dispatch
+ * nor settlement evidence); `settle-only` = events present but NO dispatch
+ * and not link-only (settles / garbage / workflow — genuinely no dispatch
+ * evidence); `null` = dispatch evidence present (incl. anonymous dispatch
+ * rows — they are evidence, not settle-only). The unreadable-ledger case
+ * is the SEPARATE `degraded` flag, not a note value.
  */
-export type AgentZoneNote = 'empty' | 'settle-only' | null;
+export type AgentZoneNote = 'empty' | 'settle-only' | 'link-only' | null;
 /**
  * The projected agents zone (spec §4 + §6.2): the EXPECTED_ROLE_FLOW stage
- * skeleton plus the dispatch-derived entity cards and the actual/supervise
- * arrows. Total function — NEVER throws and NEVER fabricates: the KNOWN_AGENTS
+ * skeleton plus the dispatch-derived entity cards. Total function — NEVER
+ * throws and NEVER fabricates: the KNOWN_AGENTS
  * roster always projects as entities (idle cards when there is no evidence) —
  * agentFlow missing/unreadable → `degraded` (full idle roster + no
  * executing/pending claims); 0 events → `empty` (full idle roster + pending
@@ -360,8 +334,6 @@ export interface AgentZoneView {
     note: AgentZoneNote;
     /** Evidence-derived dispatch entities ∪ idle KNOWN_AGENTS cards — the full roster is NEVER hidden (spec §6.2). */
     entities: readonly AgentEntityView[];
-    /** expected (stage skeleton) + actual (same-plan handoffs) + at most one next (latest running). */
-    edges: readonly AgentEdge[];
     /** `running` entity count — the summary "N 执行中" (idle cards never count). */
     executing: number;
     /** Sum of expected roles of stages with no dispatch evidence — the summary "M 待执行". */
@@ -458,8 +430,7 @@ export declare function projectGraph(source: MstarEngineStatusPayload | null): Z
  *   role is pending);
  * - otherwise: entities aggregated from dispatch rows (with `idle: false`),
  *   statuses via the shared pairing walk, the un-evidenced KNOWN_AGENTS
- *   members appended as idle cards, actual/supervise edges (design doc §2.2 —
- *   the `expected` skeleton and `next` animation edges are REMOVED), and the
+ *   members appended as idle cards, and the
  *   executing (running entities — idle never counts) / pending
  *   (un-evidenced stage roles) counts.
  *
@@ -468,13 +439,13 @@ export declare function projectGraph(source: MstarEngineStatusPayload | null): Z
  * suppresses a known role's idle card when its id already exists as an
  * evidence-derived entity key (a NON-roster dispatch produces a lit `general`
  * key while the roster `general` id stays un-evidenced — the twin is
- * suppressed via `litKeys`), so the render layer's `key`/`cards.set` never
- * collide.
+ * suppressed via `litKeys`), so the render layer's entity `key` space never
+ * collides.
  *
  * Canvas note: `note` classifies the readable ledger in
- * the projection ('empty' / 'settle-only' / null — see `AgentZoneNote`); the
- * UI consumes it directly and never infers settle-only from the entity list
- * (garbage rows would fake it).
+ * the projection ('empty' / 'link-only' / 'settle-only' / null — see
+ * `AgentZoneNote`); the UI consumes it directly and never infers
+ * settle-only from the entity list (garbage rows would fake it).
  *
  * Current-plan note: `activePlanId` / `activePlanCount` ride the
  * `state.plans[]` InProgress rows (catalog order) — the Phase 2 group label

package/dist/client/panel/graph/schema.d.ts

@@ -82,8 +82,7 @@ export declare const TRANSITION_TO_PHASE: Readonly<Record<string, PhaseId>>;
  * placement (BOTTOM INSIDE the `sdd-implement` column bucket) is
  * superseded by the F5; the former SDD implement ↔ review
  * skeleton EDGE (sdd-implement → general back-edge, the `loop: true` arrow)
- * stays REMOVED from the projection ; the F5 supervise line is a SEPARATE sub-bucket edge (see
- * project-graph.ts `superviseEdges`).
+ * and the F5 sub-bucket supervise line are both REMOVED from the projection.
  *
  * Matching rules (spec §2.3 — implemented by `projectGraph`'s flow
  * projection): `expected` ⟺ `event.role` ∈ the union of ALL `roles` below

package/dist/client/panel/guards.d.ts

@@ -10,7 +10,7 @@
  * payload is a remote answer the panel never authored, so a malformed
  * envelope degrades to `unavailable` — never to a half-parsed view.
  */
-import type { MstarEngineStatusPayload } from '../../types.ts';
+import type { MstarEngineStatusPayload, WorkflowSelectionView } from '../../types.ts';
 /** String field: non-empty string, else null (missing → `unknown`). */
 export declare function str(value: unknown): string | null;
 /** Boolean field: real boolean, else null. */
@@ -33,10 +33,35 @@ export type MstarEngineStatusFetch = {
     readonly at: string;
     /** The agent turn the row was emitted for. */
     readonly turn: number;
+    /**
+     * The session's CURRENT control-state selection, when the host served one
+     * (D4). It is deliberately separate from `payload.state.selection`, which
+     * keeps recording the LAST MODEL EMISSION — the picker's acknowledgement
+     * shows here immediately while plans / Event Log stay on the last snapshot.
+     * Null when the response carries none (an older host, or a malformed one).
+     */
+    readonly binding: WorkflowSelectionView | null;
 } | {
     readonly status: 'unavailable';
     readonly reason: string;
 };
+/** One workflow-pick acknowledgement (the `selectWorkflow` wire result). */
+export type MstarSelectWorkflowFetch = {
+    readonly status: 'selected';
+    readonly sessionId: string;
+    readonly workflowId: string;
+} | {
+    readonly status: 'unavailable';
+    readonly reason: string;
+};
+/**
+ * Narrow one untrusted workflow-selection view. Every arm must carry its
+ * discriminants as non-empty strings; the picker rows (`activeWorkflowIds`)
+ * survive only as a string array. Anything else is null — the caller then
+ * falls back to the emitted payload's own selection rather than rendering a
+ * guessed one.
+ */
+export declare function selectionView(value: unknown): WorkflowSelectionView | null;
 /**
  * Validate one `/api/mstar/engineStatus` response into the panel's state.
  *
@@ -59,3 +84,18 @@ export type MstarEngineStatusFetch = {
  * @returns the validated snapshot state, or the explicit unavailable state.
  */
 export declare function parseEngineStatusResult(raw: unknown, sessionId: string, cwd?: string): MstarEngineStatusFetch;
+/**
+ * Validate one `/api/mstar/selectWorkflow` response into the picker's state.
+ *
+ * Like {@link parseEngineStatusResult} the whole envelope is untrusted: the
+ * transport result, the endpoint result and the acknowledged identity are all
+ * checked. A success MUST name the session AND the workflow this client asked
+ * for — a foreign acknowledgement is refused rather than rendered as this
+ * session's pick.
+ *
+ * @param raw - the value returned by `connection.rpc.call` (untrusted).
+ * @param sessionId - the session this client ASKED for.
+ * @param workflowId - the workflow id this client asked to select.
+ * @returns the acknowledged pick, or the explicit unavailable state.
+ */
+export declare function parseSelectWorkflowResult(raw: unknown, sessionId: string, workflowId: string): MstarSelectWorkflowFetch;

package/dist/client/panel/locale.d.ts

@@ -122,7 +122,7 @@ import type { LocaleDictOf } from '@deepseek-ai/dsh-client-ui-slots';
 /** Locale namespace id for the workflow-viz panel. */
 export declare const NS = "mstar-panel";
 /** Panel dictionary keys (union of every translatable string the panel renders). */
-export type PanelKey = 'view.mstar-workflow' | 'tab.tasks' | 'tab.agents' | 'tab.events' | 'page.iteration.not-started' | 'page.iteration.expand' | 'page.iteration.collapse' | 'event-log.section.events' | 'event-log.section.violations' | 'event-log.empty' | 'event-log.empty.events' | 'event-log.empty.violations' | 'event-log.field.role' | 'event-log.field.agent' | 'event-log.field.stage' | 'event-log.field.plan' | 'event-log.field.task' | 'event-log.field.category' | 'event-log.field.time' | 'event-log.field.kind' | 'event-log.field.status' | 'event-log.field.expected' | 'event-log.field.settled' | 'event-log.field.duration' | 'event-log.field.run-id' | 'event-log.field.name' | 'event-log.field.members' | 'event-log.field.stop-reason' | 'event-log.field.severity' | 'event-log.field.code' | 'event-log.field.message' | 'event-log.kind.dispatch' | 'event-log.kind.settle' | 'event-log.yes' | 'event-log.no' | 'empty.waiting' | 'empty.loading' | 'empty.unavailable' | 'empty.no-harness' | 'empty.no-harness-hint' | 'watermark.version' | 'watermark.harness' | 'watermark.none' | 'panel.unknown' | 'graph.pass' | 'graph.fail' | 'zone.legend.title' | 'zone.legend.agent-running' | 'zone.legend.agent-settled' | 'zone.legend.agent-idle' | 'zone.iteration.step-label' | 'zone.iteration.step-badge' | 'zone.iteration.step.current' | 'zone.iteration.step.next' | 'zone.iteration.step.done' | 'zone.iteration.step.idle' | 'zone.phase.iteration-start' | 'zone.phase.autonomous-execute' | 'zone.phase.iteration-close' | 'zone.phase.pr-delivery' | 'zone.phase.merge-ready' | 'zone.branches.title' | 'zone.branches.iteration-base' | 'zone.branches.target' | 'zone.branches.spec-integration' | 'zone.tasks.title' | 'zone.tasks.total' | 'zone.tasks.no-plans' | 'zone.tasks.more' | 'zone.tasks.collapse' | 'zone.project.title' | 'zone.project.milestones' | 'zone.project.residuals' | 'zone.project.none' | 'zone.state.Todo' | 'zone.state.InProgress' | 'zone.state.InReview' | 'zone.state.Done' | 'zone.state.blocked-unknown' | 'zone.agents.title' | 'zone.agents.summary' | 'zone.agents.on-demand' | 'zone.agents.unknown-sub' | 'zone.agents.bucket.implementor' | 'zone.agents.bucket.reviewer' | 'zone.agents.group.phase-1' | 'zone.agents.group.phase-2' | 'zone.agents.group.phase-n' | 'zone.agents.group.plan' | 'zone.agents.group.no-plan' | 'zone.agents.group.plan-more' | 'flow.empty' | 'flow.settle-only' | 'flow.degraded' | 'flow.unexpected' | 'flow.in-flight' | 'flow.settled-ok' | 'flow.error' | 'flow.advisory' | 'flow.denied' | 'state.title' | 'state.selection' | 'state.selection.history' | 'state.plans' | 'state.residuals' | 'state.policy' | 'state.leases' | 'state.knowledge' | 'state.direction' | 'state.none' | 'state.enforcement' | 'state.enforcement.hard' | 'state.enforcement.soft' | 'state.plans.more' | 'state.residual.more' | 'state.policy.push' | 'state.policy.worktree' | 'state.policy.control-worktree' | 'state.knowledge.docs' | 'freshness.last-updated' | 'freshness.refresh-note';
+export type PanelKey = 'view.mstar-workflow' | 'guide.description' | 'tab.tasks' | 'tab.agents' | 'tab.events' | 'page.iteration.not-started' | 'page.iteration.expand' | 'page.iteration.collapse' | 'event-log.section.events' | 'event-log.section.violations' | 'event-log.empty' | 'event-log.empty.events' | 'event-log.empty.violations' | 'event-log.field.role' | 'event-log.field.agent' | 'event-log.field.stage' | 'event-log.field.plan' | 'event-log.field.task' | 'event-log.field.category' | 'event-log.field.time' | 'event-log.field.kind' | 'event-log.field.status' | 'event-log.field.expected' | 'event-log.field.settled' | 'event-log.field.duration' | 'event-log.field.child-id' | 'event-log.field.run-id' | 'event-log.field.name' | 'event-log.field.members' | 'event-log.field.stop-reason' | 'event-log.field.severity' | 'event-log.field.code' | 'event-log.field.message' | 'event-log.kind.dispatch' | 'event-log.kind.settle' | 'event-log.yes' | 'event-log.no' | 'empty.waiting' | 'empty.loading' | 'empty.unavailable' | 'empty.no-harness' | 'empty.no-harness-hint' | 'watermark.version' | 'watermark.harness' | 'watermark.none' | 'panel.unknown' | 'graph.pass' | 'graph.fail' | 'zone.legend.title' | 'zone.legend.agent-running' | 'zone.legend.agent-settled' | 'zone.legend.agent-idle' | 'zone.iteration.step-label' | 'zone.iteration.step-badge' | 'zone.iteration.step.current' | 'zone.iteration.step.next' | 'zone.iteration.step.done' | 'zone.iteration.step.idle' | 'zone.phase.iteration-start' | 'zone.phase.autonomous-execute' | 'zone.phase.iteration-close' | 'zone.phase.pr-delivery' | 'zone.phase.merge-ready' | 'zone.branches.title' | 'zone.branches.iteration-base' | 'zone.branches.target' | 'zone.branches.spec-integration' | 'zone.tasks.title' | 'zone.tasks.total' | 'zone.tasks.no-plans' | 'zone.tasks.more' | 'zone.tasks.collapse' | 'zone.project.title' | 'zone.project.milestones' | 'zone.project.residuals' | 'zone.project.none' | 'zone.state.Todo' | 'zone.state.InProgress' | 'zone.state.InReview' | 'zone.state.Done' | 'zone.state.blocked-unknown' | 'zone.agents.title' | 'zone.agents.summary' | 'zone.agents.on-demand' | 'zone.agents.unknown-sub' | 'zone.agents.bucket.implementor' | 'zone.agents.bucket.reviewer' | 'zone.agents.group.phase-1' | 'zone.agents.group.phase-2' | 'zone.agents.group.phase-n' | 'zone.agents.group.plan' | 'zone.agents.group.no-plan' | 'zone.agents.group.plan-more' | 'flow.empty' | 'flow.settle-only' | 'flow.link-only' | 'flow.degraded' | 'flow.unexpected' | 'flow.in-flight' | 'flow.settled-ok' | 'flow.error' | 'flow.advisory' | 'flow.denied' | 'state.title' | 'state.selection' | 'state.selection.history' | 'state.selection.unbound' | 'state.selection.pick' | 'state.selection.pending' | 'state.selection.failed' | 'state.plans' | 'state.residuals' | 'state.policy' | 'state.leases' | 'state.knowledge' | 'state.direction' | 'state.none' | 'state.enforcement' | 'state.enforcement.hard' | 'state.enforcement.soft' | 'state.plans.more' | 'state.residual.more' | 'state.policy.push' | 'state.policy.worktree' | 'state.policy.control-worktree' | 'state.knowledge.docs' | 'freshness.last-updated' | 'freshness.refresh-note';
 declare module '@deepseek-ai/dsh-client-ui-slots' {
     interface LocaleNamespaceMap {
         'mstar-panel': PanelKey;