@xmoon76/dsh-pi-tui 0.2.1 → 0.3.0

package/dist/{src-C_RdKmcj.mjs → src-ClAKiW0z.mjs}

@@ -31,6 +31,8 @@ import { fileURLToPath } from "node:url";
 import { EventEmitter } from "events";
 import { Service } from "@deepseek-ai/cordis";
 import { isUserInvocable, renderSkillContent } from "@deepseek-ai/dsh-skill";
+import { AuthorizationDeclinedError } from "@deepseek-ai/dsh-authorization";
+import { credentialKeyId, credentialKeyScope } from "@deepseek-ai/dsh-credentials";
 //#region src/present.ts
 /** Figma row titles per variant (design literals, not translatable copy). */
 const VARIANT_TITLES = {
@@ -85,8 +87,121 @@ const TUI_TOOL_TITLES = {
 	"workflow-member": "Workflow Agent",
 	error: "Error",
 	interrupted: "Interrupted",
-	ask_user_question: "Question"
+	ask_user_question: "Question",
+	get_goal: "Read Goal",
+	create_goal: "Create Goal",
+	update_goal: "Update Goal"
 };
+/** The goal tool family (all three share the `{"goal":…}` result shape). */
+const GOAL_TOOL_NAMES = /* @__PURE__ */ new Set([
+	"get_goal",
+	"create_goal",
+	"update_goal"
+]);
+/**
+* Tools whose folded result preview must never leak the raw result JSON
+* (web parity: the web's folded row shows only the args summary, never the
+* result). The TUI keeps its result-preview row but shows a parsed summary
+* instead — and nothing at all when the result cannot be parsed.
+*
+* `ralph`'s render already leads with a friendly line ("Ralph worker
+* reported completion after N rounds.") before the JSON report, so its
+* summary IS that first line. The agent-team family is deliberately NOT in
+* the set: it is experimental (not in the production bundle) and two of its
+* tools (`send_message`, `interrupt_agent`) share names with subagent tools
+* whose render text is friendly — a name-keyed set cannot tell them apart.
+*/
+const FOLDED_JSON_RESULT_TOOLS = /* @__PURE__ */ new Set([
+	"ralph",
+	"schedule_create",
+	"schedule_list",
+	"schedule_delete",
+	"cordis_inspect_list",
+	"cordis_inspect_query",
+	"cordis_inspect_self"
+]);
+/** Parse a result text as JSON, tolerating a friendly prefix line before
+* the JSON document (e.g. ralph's "…\nFinal report:\n{…}"). */
+function parseJsonValue(text) {
+	try {
+		return JSON.parse(text);
+	} catch {}
+	const brace = text.indexOf("{");
+	const bracket = text.indexOf("[");
+	const start = bracket !== -1 && (brace === -1 || bracket < brace) ? bracket : brace;
+	if (start > 0) try {
+		return JSON.parse(text.slice(start));
+	} catch {
+		return;
+	}
+}
+/** A non-empty string field, or undefined. */
+function stringField(value) {
+	return typeof value === "string" && value !== "" ? value : void 0;
+}
+/**
+* The folded preview summary for one of {@link FOLDED_JSON_RESULT_TOOLS}:
+* a short human phrase derived from the parsed result JSON. Returns
+* undefined when nothing useful can be derived — the caller then shows NO
+* folded result preview (web parity), never the raw JSON.
+* @param name - the tool name.
+* @param text - the settled result text.
+*/
+function foldedResultSummaryFor(name, text) {
+	if (name === "ralph") {
+		const line = firstLine(text);
+		if (line !== "" && !line.startsWith("{")) return line;
+		const parsed = parseJsonValue(text);
+		if (typeof parsed === "object" && parsed !== null) {
+			const record = parsed;
+			const status = stringField(record.status);
+			const rounds = typeof record.roundsStarted === "number" ? String(record.roundsStarted) : void 0;
+			const parts = [status, rounds === void 0 ? void 0 : `${rounds} rounds`].filter((part) => part !== void 0);
+			return parts.length === 0 ? void 0 : parts.join(" · ");
+		}
+		return;
+	}
+	const parsed = parseJsonValue(text);
+	if (name === "schedule_list") {
+		if (Array.isArray(parsed)) return parsed.length === 0 ? "no scheduled jobs" : `${parsed.length} scheduled`;
+		if (typeof parsed === "object" && parsed !== null) return stringField(parsed.code);
+		return;
+	}
+	if (name === "schedule_create") {
+		if (typeof parsed !== "object" || parsed === null) return void 0;
+		const record = parsed;
+		const parts = [stringField(record.kind), stringField(record.state)].filter((part) => part !== void 0);
+		return parts.length === 0 ? void 0 : parts.join(" · ");
+	}
+	if (name === "schedule_delete") {
+		if (typeof parsed !== "object" || parsed === null) return void 0;
+		const record = parsed;
+		if (record.deleted === true) return "deleted";
+		if (record.deleted === false) return "not found";
+		return stringField(record.code);
+	}
+	if (name === "cordis_inspect_list") {
+		if (typeof parsed !== "object" || parsed === null) return void 0;
+		const providers = parsed.providers;
+		if (Array.isArray(providers)) return providers.length === 0 ? "no providers" : `${providers.length} providers`;
+		return;
+	}
+	if (name === "cordis_inspect_query") {
+		if (typeof parsed !== "object" || parsed === null) return void 0;
+		const record = parsed;
+		const parts = [
+			stringField(record.platform),
+			stringField(record.provider),
+			stringField(record.method)
+		].filter((part) => part !== void 0);
+		return parts.length === 0 ? void 0 : parts.join(" · ");
+	}
+	if (name === "cordis_inspect_self") {
+		if (typeof parsed !== "object" || parsed === null) return void 0;
+		const mode = stringField(parsed.mode);
+		return mode === void 0 ? void 0 : `mode ${mode}`;
+	}
+}
 /** Summary key preference per variant (args-derived). */
 const SUMMARY_KEYS = {
 	bash: ["description", "command"],
@@ -172,6 +287,15 @@ function summarizeToolArgs(name, argsRaw) {
 		if (typeof question !== "string" || question === "") return void 0;
 		return firstLine(question);
 	}
+	if (name === "create_goal") {
+		const objective = args.objective;
+		return typeof objective === "string" && objective !== "" ? firstLine(objective) : void 0;
+	}
+	if (name === "update_goal") {
+		const action = args.action;
+		return typeof action === "string" && action !== "" ? action : void 0;
+	}
+	if (name === "get_goal") return "";
 	if (name !== "todo_write") return void 0;
 	const todos = args.todos;
 	if (!Array.isArray(todos)) return void 0;
@@ -421,6 +545,36 @@ function resultTextLines(blocks, error) {
 	return lines;
 }
 /**
+* Parse and normalize the tool's `{"answers":[…]}` render text. A
+* malformed entry (non-object) invalidates the WHOLE text — the Web's
+* `answeredSummary` checks `answers.every(isAnswer)` the same way, and a
+* half-valid set would make the count and the rendered rows disagree.
+* Non-string `selected` members are dropped; missing id/custom normalize
+* to empty.
+* @param text - the settled result text.
+* @returns the normalized entries, or undefined when unparseable/malformed.
+*/
+function parseAnswerEntries(text) {
+	let parsed;
+	try {
+		parsed = JSON.parse(text);
+	} catch {
+		return;
+	}
+	if (typeof parsed !== "object" || parsed === null) return void 0;
+	const answers = parsed.answers;
+	if (!Array.isArray(answers)) return void 0;
+	if (!answers.every((entry) => typeof entry === "object" && entry !== null)) return void 0;
+	return answers.map((entry) => {
+		const candidate = entry;
+		return {
+			id: typeof candidate.id === "string" ? candidate.id : "",
+			selected: Array.isArray(candidate.selected) ? candidate.selected.filter((item) => typeof item === "string") : [],
+			custom: typeof candidate.custom === "string" ? candidate.custom : ""
+		};
+	});
+}
+/**
 * The answered-count summary for a settled `ask_user_question` result
 * (Web AskQuestionRow parity): parses the tool's `{"answers":[…]}` render
 * text and counts the entries that actually carry an answer — a non-empty
@@ -432,6 +586,43 @@ function resultTextLines(blocks, error) {
 * @returns the answered-count summary, or undefined when unparseable.
 */
 function askAnswersSummary(text) {
+	const entries = parseAnswerEntries(text);
+	if (entries === void 0) return void 0;
+	return `${entries.filter((entry) => entry.selected.length > 0 || entry.custom !== "").length}/${entries.length} answered`;
+}
+/**
+* The per-question display lines for a settled `ask_user_question` result
+* (the expanded card's body, complementing {@link askAnswersSummary}'s
+* count). Parses the tool's `{"answers":[…]}` render text and renders one
+* line per entry: `● <id> → <selected, custom>` for an answered question,
+* `○ <id> — skipped` when neither is present. Shares the normalization with
+* {@link askAnswersSummary}, so the rendered rows and the count always
+* agree; an unparseable/malformed text returns undefined.
+* @param text - the settled result text.
+* @returns the display lines, or undefined when unparseable/malformed.
+*/
+function askAnswersLines(text) {
+	const entries = parseAnswerEntries(text);
+	if (entries === void 0) return void 0;
+	return entries.map((entry) => {
+		if (entry.selected.length > 0) return {
+			text: `● ${entry.id} → ${entry.selected.join(", ")}`,
+			skipped: false
+		};
+		if (entry.custom !== "") return {
+			text: `● ${entry.id} → ${entry.custom}`,
+			skipped: false
+		};
+		return {
+			text: `○ ${entry.id} — skipped`,
+			skipped: true
+		};
+	});
+}
+/** Parse a settled goal-tool result text, or undefined when it is not the
+* expected `{"goal":…}` JSON (the caller then falls back to the generic
+* presentation). */
+function parseGoalResult(text) {
 	let parsed;
 	try {
 		parsed = JSON.parse(text);
@@ -439,14 +630,72 @@ function askAnswersSummary(text) {
 		return;
 	}
 	if (typeof parsed !== "object" || parsed === null) return void 0;
-	const answers = parsed.answers;
-	if (!Array.isArray(answers)) return void 0;
-	const total = answers.length;
-	return `${answers.filter((entry) => {
-		if (typeof entry !== "object" || entry === null) return false;
-		const candidate = entry;
-		return Array.isArray(candidate.selected) && candidate.selected.length > 0 || typeof candidate.custom === "string" && candidate.custom !== "";
-	}).length}/${total} answered`;
+	const value = parsed;
+	if (value.goal === null) return { goal: null };
+	if (typeof value.goal !== "object" || value.goal === null) return void 0;
+	const goal = value.goal;
+	const blocked = typeof goal.blockedReason === "object" && goal.blockedReason !== null ? goal.blockedReason : void 0;
+	return {
+		goal: {
+			...typeof goal.id === "string" ? { id: goal.id } : {},
+			...typeof goal.revision === "number" ? { revision: goal.revision } : {},
+			...typeof goal.objective === "string" ? { objective: goal.objective } : {},
+			...typeof goal.phase === "string" ? { phase: goal.phase } : {},
+			...typeof goal.roundsStarted === "number" ? { roundsStarted: goal.roundsStarted } : {},
+			...typeof goal.maxGoalRounds === "number" ? { maxGoalRounds: goal.maxGoalRounds } : {},
+			...blocked !== void 0 ? { blockedReason: {
+				...typeof blocked.code === "string" ? { code: blocked.code } : {},
+				...typeof blocked.message === "string" ? { message: blocked.message } : {}
+			} } : {}
+		},
+		...typeof value.activation === "string" ? { activation: value.activation } : {}
+	};
+}
+/**
+* The one-line folded summary for a settled goal-tool result: `phase … ·
+* revision N · N/M rounds`, or `no goal set` for `{"goal":null}`.
+* Returns undefined when the text is not the expected result JSON (the
+* caller then falls back to the generic preview instead of inventing one).
+* @param text - the settled result text.
+*/
+function goalResultSummary(text) {
+	const value = parseGoalResult(text);
+	if (value === void 0) return void 0;
+	const goal = value.goal;
+	if (goal === null) return "no goal set";
+	const parts = [];
+	if (goal.phase !== void 0) parts.push(`phase ${goal.phase}`);
+	if (goal.revision !== void 0) parts.push(`revision ${goal.revision}`);
+	if (goal.roundsStarted !== void 0) parts.push(goal.maxGoalRounds === void 0 ? `${goal.roundsStarted} rounds` : `${goal.roundsStarted}/${goal.maxGoalRounds} rounds`);
+	return parts.length === 0 ? "goal" : parts.join(" · ");
+}
+/**
+* The expanded-card display lines for a settled goal-tool result: one field
+* per line (`● objective: …`, `● phase: … · revision N`, `● rounds: N/M`,
+* `● activation: …`, `● blocked: code — message`), or a single `no goal
+* set` line for `{"goal":null}`. Returns undefined when the text is not the
+* expected result JSON (the caller falls back to the generic presentation).
+* @param text - the settled result text.
+*/
+function goalResultLines(text) {
+	const value = parseGoalResult(text);
+	if (value === void 0) return void 0;
+	const goal = value.goal;
+	if (goal === null) return ["no goal set"];
+	const lines = [];
+	if (goal.objective !== void 0 && goal.objective !== "") lines.push(`● objective: ${goal.objective}`);
+	const identity = [];
+	if (typeof goal.phase === "string" && goal.phase !== "") identity.push(goal.phase);
+	if (goal.revision !== void 0) identity.push(`revision ${goal.revision}`);
+	if (identity.length > 0) lines.push(`● ${identity.join(" · ")}`);
+	if (goal.roundsStarted !== void 0) lines.push(goal.maxGoalRounds === void 0 ? `● rounds: ${goal.roundsStarted}` : `● rounds: ${goal.roundsStarted}/${goal.maxGoalRounds}`);
+	const blocked = goal.blockedReason;
+	if (blocked !== void 0 && (blocked.code !== void 0 || blocked.message !== void 0)) {
+		const detail = [blocked.code, blocked.message].filter((part) => typeof part === "string" && part !== "").join(" — ");
+		lines.push(`● blocked: ${detail}`);
+	}
+	if (value.activation !== void 0) lines.push(`● activation: ${value.activation}`);
+	return lines;
 }
 /**
 * The folded-card call preview for tools whose args carry a one-line
@@ -519,6 +768,41 @@ function toolPresenterFrom(get) {
 		}
 	};
 }
+/**
+* Subagent-family tool names whose call args may carry an explicit
+* model/provider override. Matched by REGISTERED name; unknown names are
+* ignored so third-party subagent-like tools keep their default rendering.
+*/
+const SUBAGENT_TOOL_NAMES = /* @__PURE__ */ new Set([
+	"subagent",
+	"subagent_route",
+	"subagent_router",
+	"subagent_fork"
+]);
+/**
+* Extract the model · provider display line for a subagent-family tool call.
+*
+* COMPATIBILITY CONTRACT: the line renders ONLY when the call args actually
+* carry a model/provider — the top-level `model`/`provider` shape
+* (subagent_route / subagent_router) or the `agentOptions.model/provider`
+* shape. Every other call returns `undefined` and the card renders exactly
+* as before; unknown tool names and unparseable args are ignored. The
+* official `subagent` tool's model lives in deployment config (never in
+* the call args), so it naturally renders nothing.
+* @param name - the tool's registered name.
+* @param argsRaw - the raw tool-call arguments JSON ('' or malformed → none).
+* @returns `model · provider` (either part alone when only one is present),
+*   or undefined when the call carries no model/provider.
+*/
+function subagentModelDisplay(name, argsRaw) {
+	if (!SUBAGENT_TOOL_NAMES.has(name)) return void 0;
+	const parsed = parseArgs(argsRaw);
+	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return void 0;
+	const args = parsed;
+	const opts = typeof args.agentOptions === "object" && args.agentOptions !== null ? args.agentOptions : void 0;
+	const parts = [typeof args.model === "string" && args.model !== "" ? args.model : typeof opts?.model === "string" && opts.model !== "" ? opts.model : void 0, typeof args.provider === "string" && args.provider !== "" ? args.provider : typeof opts?.provider === "string" && opts.provider !== "" ? opts.provider : void 0].filter((part) => part !== void 0);
+	return parts.length === 0 ? void 0 : parts.join(" · ");
+}
 //#endregion
 //#region src/context.ts
 /**
@@ -13154,6 +13438,7 @@ var TaskBrowserPanel = class {
 	searchEnabled;
 	onSelect;
 	onCancel;
+	onAction;
 	/** Live tick: bumped every second while a running row is visible. */
 	now = Date.now();
 	tickTimer;
@@ -13168,6 +13453,7 @@ var TaskBrowserPanel = class {
 		this.options = options;
 		this.onSelect = onSelect;
 		this.onCancel = onCancel;
+		this.onAction = options.onAction;
 		this.requestRender = requestRender;
 		this.searchEnabled = options.enableSearch ?? false;
 		this.searchInput.onEscape = () => this.onCancel();
@@ -13230,6 +13516,18 @@ var TaskBrowserPanel = class {
 		const isNavUp = matchesKey(data, "up") || !this.searchEnabled && data === "k";
 		const isNavDown = matchesKey(data, "down") || !this.searchEnabled && data === "j";
 		const isPage = matchesKey(data, "pageUp") || matchesKey(data, "pageDown");
+		if (data === "i" && this.onAction !== void 0 && !this.searchEnabled) {
+			const item = this.filtered[this.selected];
+			if (item !== void 0) this.onAction(item.value, "interrupt");
+			return;
+		}
+		if (data === "i" && this.onAction !== void 0 && this.searchEnabled && (this.searchInput.getValue() ?? "") === "") {
+			const item = this.filtered[this.selected];
+			if (item !== void 0 && item.value.startsWith("agent:")) {
+				this.onAction(item.value, "interrupt");
+				return;
+			}
+		}
 		if (!isNavUp && !isNavDown && !isPage && !matchesKey(data, "enter") && !matchesKey(data, "escape") && this.searchEnabled) {
 			this.searchInput.handleInput(data);
 			this.applyFilter(this.searchInput.getValue() ?? "");
@@ -13270,7 +13568,7 @@ var TaskBrowserPanel = class {
 		if (query === "") this.filtered = this.items;
 		else {
 			const needle = query.toLowerCase();
-			this.filtered = this.items.filter((item) => `${item.value}\n${item.label}\n${item.status}\n${item.detail ?? ""}`.toLowerCase().includes(needle));
+			this.filtered = this.items.filter((item) => `${item.value}\n${item.label}\n${item.status}\n${item.detail ?? ""}\n${item.group ?? ""}`.toLowerCase().includes(needle));
 		}
 		this.selected = 0;
 		this.scroll = 0;
@@ -13346,7 +13644,7 @@ var TaskBrowserPanel = class {
 		return out;
 	}
 	hint() {
-		return `${this.searchEnabled ? "type to filter · " : ""}↑↓ navigate · enter open · esc close`;
+		return `${this.searchEnabled ? "type to filter · " : ""}${this.filtered.some((item) => item.value.startsWith("agent:")) ? "i interrupt · " : ""}↑↓ navigate · enter open · esc close`;
 	}
 };
 //#endregion
@@ -13718,6 +14016,11 @@ var QuestionFlow = class {
 			if (row.key === OTHER_ROW && this.editingOther) {
 				const inputLine = this.otherInput.render(Math.max(1, width - visibleWidth(prefix)))[0] ?? "";
 				const stripped = inputLine.startsWith("> ") ? inputLine.slice(2) : inputLine;
+				if (question.masked === true && this.otherInput.getValue() !== "") {
+					lines.push(prefix + color.textDim("•".repeat(this.otherInput.getValue().length)));
+					hits.push(OTHER_ROW);
+					continue;
+				}
 				lines.push(prefix + (this.otherInput.getValue() === "" ? color.textDim(row.label) : stripped));
 				hits.push(OTHER_ROW);
 				continue;
@@ -14030,7 +14333,7 @@ var QuestionFlow = class {
 				const question = this.questions[qi];
 				const draft = this.drafts[qi];
 				if (question === void 0 || draft === void 0) continue;
-				const value = draft.skipped ? "(skipped)" : draft.custom !== "" && question.multiSelect !== true ? draft.custom : [...draft.selected].join(", ") + (draft.custom !== "" ? ` + ${draft.custom}` : "");
+				const value = draft.skipped ? "(skipped)" : draft.custom !== "" && question.multiSelect !== true ? question.masked === true ? "•".repeat(draft.custom.length) : draft.custom : [...draft.selected].join(", ") + (draft.custom !== "" ? ` + ${draft.custom}` : "");
 				reviewBudget = appendWrappedBudgeted(lines, `${color.textDim(`Q${qi + 1}`)}  `, "       ", question.question, safeWidth, reviewBudget);
 				if (reviewBudget > 0) reviewBudget = appendWrappedBudgeted(lines, "  ", "    ", value === "" ? color.textDim("(no answer)") : value, safeWidth, reviewBudget);
 			}
@@ -14091,7 +14394,8 @@ var QuestionFlow = class {
 		if (optionless) {
 			const inputLine = this.otherInput.render(Math.max(1, safeWidth - 2))[0] ?? "";
 			const stripped = inputLine.startsWith("> ") ? inputLine.slice(2) : inputLine;
-			lines.push(this.otherInput.getValue() === "" ? color.textDim(" Type your answer…") : ` ${stripped}`);
+			if (question.masked === true && this.otherInput.getValue() !== "") lines.push(` ${color.textDim("•".repeat(this.otherInput.getValue().length))}`);
+			else lines.push(this.otherInput.getValue() === "" ? color.textDim(" Type your answer…") : ` ${stripped}`);
 		}
 		if (draft.skipped) lines.push(color.textDim("(skipped)"));
 		lines.push("");
@@ -14120,6 +14424,305 @@ var QuestionFlow = class {
 	}
 };
 //#endregion
+//#region src/shell-words.ts
+/**
+* A small, reliable POSIX-ish shell word parser for external-command
+* strings like `$VISUAL`/`$EDITOR` (`code --wait`, `vim -f`, `sensible-editor
+* --nofork`) and `!` shell lines. It handles the quoting rules that matter
+* in practice — single quotes (literal), double quotes (backslash escapes,
+* everything else verbatim — no expansion), and backslash escapes outside
+* quotes — WITHOUT executing a shell.
+*
+* This deliberately replaces naive `command.split(/\s+/)` splitting: an
+* editor path with spaces or a quoted argument would be mangled into
+* phantom arguments.
+* @module @xmoon76/dsh-pi-tui/shell-words
+*/
+/**
+* Split a command line into words, POSIX-ish. Never throws: unbalanced
+* quotes are treated as a trailing literal word (matching how shells
+* consume the rest of the line). Backslashes before non-special characters
+* are dropped outside quotes; inside double quotes a backslash only escapes
+* `"`, `\`, and `$` and is kept verbatim before anything else.
+* @param line - the raw command line.
+* @returns the parsed words.
+*/
+function parseShellWords(line) {
+	const words = [];
+	let current = "";
+	let inWord = false;
+	let quote;
+	for (let index = 0; index < line.length; index += 1) {
+		const char = line[index];
+		if (quote === void 0 && char === "\\") {
+			const next = line[index + 1];
+			if (next !== void 0) {
+				current += next;
+				index += 1;
+			} else current += "\\";
+			inWord = true;
+			continue;
+		}
+		if (quote === void 0 && (char === "'" || char === "\"")) {
+			quote = char;
+			inWord = true;
+			continue;
+		}
+		if (quote === "\"" && char === "\\") {
+			const next = line[index + 1];
+			if (next === "\"" || next === "\\" || next === "$") {
+				current += next;
+				index += 1;
+			} else current += "\\";
+			inWord = true;
+			continue;
+		}
+		if (quote === "'" && char === "'") {
+			quote = void 0;
+			continue;
+		}
+		if (quote === "\"" && char === "\"") {
+			quote = void 0;
+			continue;
+		}
+		if (quote === void 0 && (char === " " || char === "	" || char === "\n")) {
+			if (inWord) {
+				words.push(current);
+				current = "";
+				inWord = false;
+			}
+			continue;
+		}
+		current += char;
+		inWord = true;
+	}
+	if (inWord) words.push(current);
+	return words;
+}
+//#endregion
+//#region src/shell-completion.ts
+/**
+* Bash completion for `!`/`!!` shell lines: a real-shell `compgen` bridge
+* (docs/input-and-card-polish.md §1). Command names come from
+* `compgen -A command` (cached per cwd+PATH for 30s), `$VAR` names from
+* `compgen -A variable`, and subcommands from a small per-command table
+* (`git --list-cmds`). Path completion stays with the fork's fd-backed
+* provider — the bridge never competes with it.
+*
+* Decisions that matter (design doc):
+* - `bash -lc`, never `-ic`: an interactive shell sources `.bashrc` on
+*   every keystroke (slow, and runs user startup code). Alias completion
+*   is therefore not provided — accepted limitation.
+* - One spawn per request, hard-capped at COMPGEN_TIMEOUT_MS and wired to
+*   the editor's AbortSignal; the caller commits latest-only. A slow or
+*   missing `bash` degrades to no suggestions, never an error.
+* - The completion prefix crosses to bash through an environment variable
+*   (COMPGEN_WORD), never string interpolation — no shell injection from
+*   the user's own draft.
+* @module @xmoon76/dsh-pi-tui/shell-completion
+*/
+/**
+* Hard cap on one compgen spawn (ms). GitHub Actions runners are markedly
+* slower at a `bash -lc` cold start (measured 260-310ms in CI vs ~60ms
+* locally — a login shell sources /etc/profile, which is heavy on the
+* runner image), so a single tight cap made the suite flaky there (three
+* CI failures, every one at the 300ms boundary). The cap is therefore
+* raised under GitHub Actions only; local runs keep the tight cap.
+*/
+const COMPGEN_TIMEOUT_MS = process.env.GITHUB_ACTIONS === "true" ? 1500 : 300;
+/** Command-name cache TTL (ms): command sets change rarely. */
+const COMMAND_CACHE_TTL_MS = 3e4;
+/** Suggestion cap per request (the fork's own lists are capped too). */
+const MAX_SUGGESTIONS = 50;
+/**
+* Parse the editor line at the cursor for shell completion. Returns a
+* context only when the line is a `!`/`!!` line AND the cursor completes a
+* shell-bridge word (command name, subcommand, `$VAR`); a path position
+* returns undefined so the caller falls through to the fork's fd
+* completion — paths are not the bridge's job.
+* @param line - the full editor line.
+* @param col - the cursor column.
+*/
+function shellCompletionContext(line, col) {
+	if (!line.startsWith("!")) return void 0;
+	const prefixLength = line.startsWith("!!") ? 2 : 1;
+	const before = line.slice(prefixLength, col);
+	const lastSpace = Math.max(before.lastIndexOf(" "), before.lastIndexOf("	"));
+	const currentWord = before.slice(lastSpace + 1);
+	const priorWords = parseShellWords(lastSpace === -1 ? "" : before.slice(0, lastSpace));
+	if (priorWords.length === 0) {
+		if (currentWord.startsWith(".") || currentWord.startsWith("/") || currentWord.startsWith("~")) return void 0;
+		return {
+			kind: "command",
+			prefix: currentWord,
+			priorWords
+		};
+	}
+	if (currentWord.startsWith("$")) return {
+		kind: "variable",
+		prefix: currentWord,
+		priorWords
+	};
+	if (priorWords.length === 1 && SUBCOMMAND_TABLE[priorWords[0]] !== void 0) return {
+		kind: "subcommand",
+		prefix: currentWord,
+		priorWords
+	};
+}
+/**
+* Per-command subcommand completion. `lister` emits the live list (one
+* name per line, no headers) when the installed command supports it;
+* `fallback` covers older versions (e.g. git before 2.18 has no
+* `--list-cmds`) and is used when the lister produces nothing. Extend the
+* table with one entry per command.
+*/
+const SUBCOMMAND_TABLE = { git: {
+	lister: "git --list-cmds 2>/dev/null",
+	fallback: [
+		"add",
+		"am",
+		"archive",
+		"bisect",
+		"branch",
+		"bundle",
+		"checkout",
+		"cherry-pick",
+		"clean",
+		"clone",
+		"commit",
+		"config",
+		"diff",
+		"fetch",
+		"init",
+		"log",
+		"merge",
+		"mv",
+		"pull",
+		"push",
+		"rebase",
+		"reset",
+		"restore",
+		"revert",
+		"rm",
+		"show",
+		"stash",
+		"status",
+		"switch",
+		"tag"
+	]
+} };
+let compgenRunner = (cwd, expression, prefix, signal) => runCompgenSpawn(cwd, expression, prefix, signal);
+function runCompgenSpawn(cwd, expression, prefix, signal) {
+	return new Promise((resolve) => {
+		const settle = (ok, lines) => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			signal.removeEventListener("abort", onAbort);
+			resolve({
+				ok,
+				lines
+			});
+		};
+		let settled = false;
+		const onAbort = () => {
+			child.kill();
+			settle(false, []);
+		};
+		const child = spawn("bash", ["-lc", expression], {
+			cwd,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			],
+			env: {
+				...process.env,
+				COMPGEN_WORD: prefix
+			}
+		});
+		const timer = setTimeout(() => {
+			child.kill("SIGKILL");
+			settle(false, []);
+		}, COMPGEN_TIMEOUT_MS);
+		signal.addEventListener("abort", onAbort, { once: true });
+		let out = "";
+		child.stdout.on("data", (chunk) => {
+			out += chunk.toString("utf8");
+		});
+		child.stderr.on("data", () => {});
+		child.on("error", () => settle(false, []));
+		child.on("close", (code) => {
+			settle(code === 0, out.split("\n").filter((line) => line !== ""));
+		});
+	});
+}
+/** Command-name cache, keyed by cwd + PATH (30s TTL). Only SUCCESSFUL runs
+* are cached — a failed run (timeout/abort/spawn error) must not suppress
+* completion for the whole TTL, so the next request retries the spawn. */
+const commandCache = /* @__PURE__ */ new Map();
+/** The cached `compgen -A command` list for one cwd+PATH, refreshed on
+* expiry or after a failed run. */
+async function cachedCommands(cwd, signal) {
+	const key = `${cwd}\0${process.env.PATH ?? ""}`;
+	const entry = commandCache.get(key);
+	if (entry !== void 0 && entry.expires > Date.now()) return entry.commands;
+	const run = await compgenRunner(cwd, "compgen -A command", "", signal);
+	if (!run.ok) return [];
+	commandCache.set(key, {
+		expires: Date.now() + COMMAND_CACHE_TTL_MS,
+		commands: run.lines
+	});
+	return run.lines;
+}
+/** Filter one candidate list to the prefix and cap it ('' prefix keeps all). */
+function matchesFor(prefix, candidates) {
+	const matched = prefix === "" ? candidates : candidates.filter((name) => name.startsWith(prefix));
+	if (matched.length === 0) return null;
+	return {
+		items: matched.slice(0, MAX_SUGGESTIONS).map((name) => ({
+			value: name,
+			label: name
+		})),
+		prefix
+	};
+}
+/**
+* Suggest shell completions for a parsed `!` line context. Returns null
+* when nothing matches or the shell is unavailable — the editor then shows
+* no suggestions (the caller falls through to the fork's own provider).
+* @param context - the parsed cursor context.
+* @param cwd - the session workspace (compgen runs there).
+* @param options - the editor's request options (signal; force: an empty
+*   command prefix lists the cached commands on explicit Tab, while a
+*   natural trigger with an empty prefix stays quiet).
+*/
+async function suggestShellCompletion(context, cwd, options) {
+	if (options.signal.aborted) return null;
+	if (context.kind === "command") {
+		if (context.prefix === "" && options.force !== true) return null;
+		const commands = await cachedCommands(cwd, options.signal);
+		return matchesFor(context.prefix, commands);
+	}
+	if (context.kind === "variable") {
+		const run = await compgenRunner(cwd, "compgen -A variable -- \"$COMPGEN_WORD\"", context.prefix.slice(1), options.signal);
+		if (!run.ok) return null;
+		const items = run.lines.slice(0, MAX_SUGGESTIONS).map((name) => ({
+			value: `$${name}`,
+			label: `$${name}`
+		}));
+		return items.length === 0 ? null : {
+			items,
+			prefix: context.prefix
+		};
+	}
+	const command = context.priorWords[0];
+	const entry = SUBCOMMAND_TABLE[command];
+	const run = await compgenRunner(cwd, entry.lister, "", options.signal);
+	const candidates = run.ok && run.lines.length > 0 ? run.lines.map((line) => line.trim()).filter((line) => line !== "") : entry.fallback;
+	return matchesFor(context.prefix, candidates);
+}
+//#endregion
 //#region src/mentions.ts
 /**
 * @-file mention completion for the editor: a consumer-side wrapper over the
@@ -14270,13 +14873,19 @@ var MentionProvider = class {
 		this.inner = new CombinedAutocompleteProvider([...slashCommands], workDir, fdPath);
 	}
 	async getSuggestions(lines, cursorLine, cursorCol, options) {
-		const atPrefix = extractAtPrefix((lines[cursorLine] ?? "").slice(0, cursorCol));
+		const currentLine = lines[cursorLine] ?? "";
+		const atPrefix = extractAtPrefix(currentLine.slice(0, cursorCol));
 		if (atPrefix !== null) {
 			if (this.fdPath !== null) try {
 				return await this.inner.getSuggestions(lines, cursorLine, cursorCol, options);
 			} catch {}
 			return fsMentionSuggestions(this.workDir, atPrefix, options.signal);
 		}
+		const shellContext = shellCompletionContext(currentLine, cursorCol);
+		if (shellContext !== void 0) {
+			const suggestions = await suggestShellCompletion(shellContext, this.workDir, options);
+			if (suggestions !== null) return suggestions;
+		}
 		try {
 			return await this.inner.getSuggestions(lines, cursorLine, cursorCol, options);
 		} catch {
@@ -14284,6 +14893,19 @@ var MentionProvider = class {
 		}
 	}
 	applyCompletion(lines, cursorLine, cursorCol, item, prefix) {
+		const currentLine = lines[cursorLine] ?? "";
+		if (shellCompletionContext(currentLine, cursorCol) !== void 0) {
+			const before = currentLine.slice(0, cursorCol - prefix.length);
+			const after = currentLine.slice(cursorCol);
+			const newLine = `${before}${item.value} ${after}`;
+			const newLines = [...lines];
+			newLines[cursorLine] = newLine;
+			return {
+				lines: newLines,
+				cursorLine,
+				cursorCol: before.length + item.value.length + 1
+			};
+		}
 		return this.inner.applyCompletion(lines, cursorLine, cursorCol, item, prefix);
 	}
 	shouldTriggerFileCompletion(lines, cursorLine, cursorCol) {
@@ -14820,9 +15442,9 @@ function describeKey(key) {
 * This inventory is the SINGLE authoritative list, kept in sync with the
 * host's `matchesKey` lifecycle checks in tui-app.ts (Ctrl+C/D exit,
 * Ctrl+S steer-all, Ctrl+F transcript search, Ctrl+Shift+F search, Ctrl+O
-* expand, Ctrl+T todo panel, Ctrl+G external editor, Ctrl+J task
-* browser, Ctrl+Enter queue, Enter submit, Esc cancel, Shift+Tab
-* permission cycle, Alt+Up dequeue, Alt+T thinking toggle). Every
+* expand, Ctrl+T todo panel, Ctrl+G external editor, Ctrl+Enter queue,
+* Enter submit, Esc cancel, Shift+Tab permission cycle, Alt+Up dequeue,
+* Alt+T thinking toggle). Every
 * reserved binding here must match a host `matchesKey(data, ...)` call;
 * when a new host lifecycle key lands, extend THIS list in the same
 * commit.
@@ -14884,13 +15506,6 @@ const RESERVED_HOST_KEYS = [
 		shift: false,
 		super: false
 	},
-	{
-		key: "j",
-		ctrl: true,
-		alt: false,
-		shift: false,
-		super: false
-	},
 	{
 		key: "enter",
 		ctrl: true,
@@ -16799,6 +17414,7 @@ var QuestionFrame = class extends Frame {
 	render(width) {
 		const rows = Math.max(1, this.heightOf());
 		this.lastTermRows = rows;
+		this.lastTermColumns = width;
 		const frameRows = this.flow.isBodyExpanded() ? Math.max(10, Math.min(40, Math.floor(rows * .8))) : Math.max(10, Math.min(26, Math.floor(rows * .6)));
 		this.flow.setMaxRows(frameRows - 2);
 		const out = super.render(width);
@@ -16813,12 +17429,18 @@ var QuestionFrame = class extends Frame {
 	get termRows() {
 		return this.lastTermRows;
 	}
+	/** The terminal width the last render used (a resize changes wrapping and
+	* the flow's hit map, so clicks must wait for a fresh render too). */
+	get termColumns() {
+		return this.lastTermColumns;
+	}
 	get focused() {
 		return this.flow.focused;
 	}
 	set focused(value) {
 		this.flow.focused = value;
 	}
+	lastTermColumns = 0;
 };
 /** The session head card: identity facts, wrapped to the available width so
 * nothing is truncated, framed with a box whose width matches the editor's
@@ -17136,6 +17758,9 @@ var TuiApp = class TuiApp {
 	todoItems = [];
 	/** Ctrl+T: whether the todo panel between transcript and editor is shown. */
 	todoPanelVisible = false;
+	/** Fullscreen click on the todo panel (or the panel's own expand verb):
+	* whether the panel shows the FULL list or the compact five rows. */
+	todoExpanded = false;
 	/** The todo panel Text; empty when hidden. */
 	todoPanel;
 	/**
@@ -17298,8 +17923,11 @@ var TuiApp = class TuiApp {
 	workingMessageOverride;
 	/** Timestamp of the last Ctrl+C press, for the empty-editor exit chord. */
 	lastCtrlCAt;
-	/** The empty-editor double-Ctrl+C exit window in ms (pi handleCtrlC). */
-	static CTRL_C_EXIT_WINDOW_MS = 500;
+	/** The empty-editor double-Ctrl+C exit window in ms. A 500ms window
+	* silently misses a human-paced double press (0.6–1s apart), which
+	* read as "the chord doesn't work"; 1.5s covers a natural double
+	* press, and the armed state is announced by the hint. */
+	static CTRL_C_EXIT_WINDOW_MS = 1500;
 	/** Session workspace root for path relativization (Web relativizeToCwd). */
 	workspaceRoot;
 	/** The tool presentation bridge, wired by the runner to the live registry. */
@@ -17772,6 +18400,7 @@ var TuiApp = class TuiApp {
 			this.clearNotify();
 			this.seatEditor().setText("");
 			this.editorSeatHolder.notifyChanged();
+			this.requestRender();
 			this.events.onQueueSubmit(text);
 			return { consume: true };
 		}
@@ -17810,10 +18439,11 @@ var TuiApp = class TuiApp {
 			const draft = this.seatEditor().getText();
 			this.seatEditor().setText("");
 			this.editorSeatHolder.notifyChanged();
+			this.requestRender();
 			this.events.onSteer?.(draft);
 			return { consume: true };
 		}
-		if (matchesKey(data, "down") || matchesKey(data, "ctrl+j")) {
+		if (matchesKey(data, "down")) {
 			if (this.tasksActive && !this.activeScreen.hasOverlayEntries && this.seatEditor().getText().trim() === "") {
 				this.events.onOpenTasks?.();
 				return { consume: true };
@@ -17831,13 +18461,17 @@ var TuiApp = class TuiApp {
 				this.seatEditor().setText("");
 				this.editorSeatHolder.notifyChanged();
 				this.lastCtrlCAt = Date.now();
+				this.requestRender();
 				return { consume: true };
 			}
 			const now = Date.now();
 			if (this.lastCtrlCAt !== void 0 && now - this.lastCtrlCAt < TuiApp.CTRL_C_EXIT_WINDOW_MS) {
 				this.lastCtrlCAt = void 0;
 				this.events.onExit();
-			} else this.lastCtrlCAt = now;
+			} else {
+				this.lastCtrlCAt = now;
+				this.notify("Press Ctrl+C again to exit", "info");
+			}
 			return { consume: true };
 		}
 		if (matchesKey(data, "ctrl+d")) {
@@ -18388,7 +19022,7 @@ var TuiApp = class TuiApp {
 	handleFullscreenClick(x, y) {
 		const question = this.activeQuestions;
 		if (question?.frame !== void 0) {
-			if (this.terminal.rows !== question.frame.termRows) return;
+			if (this.terminal.rows !== question.frame.termRows || this.terminal.columns !== question.frame.termColumns) return;
 			const width = this.terminal.columns;
 			const height = this.terminal.rows;
 			const footerHeight = this.footer.render(width).length;
@@ -18400,10 +19034,28 @@ var TuiApp = class TuiApp {
 					question.flow.clickRow(y - seatTop - 1);
 					this.requestRender();
 				}
-				return;
 			}
+			return;
 		}
 		const width = this.terminal.columns;
+		const height = this.terminal.rows;
+		const footerHeight = this.footer.render(width).length;
+		const editorHeight = this.editorSeat.render(width).length;
+		const workingHeight = this.working.render(width).length;
+		const queueHeight = this.queuePane.render(width).length;
+		const goalHeight = this.goalLine.render(width).length;
+		const todoHeight = this.todoPanel.render(width).length;
+		const todoBottom = Math.max(0, Math.min(height, height - footerHeight - editorHeight - workingHeight - queueHeight - goalHeight));
+		const todoTop = Math.max(0, todoBottom - todoHeight);
+		const dockHeight = this.dock.render(width).length;
+		if (dockHeight > 0 && y >= todoTop - dockHeight && y < todoTop) {
+			this.toggleTodoPanel();
+			return;
+		}
+		if (todoTop < todoBottom && y >= todoTop && y < todoBottom) {
+			this.handleTodoPanelClick();
+			return;
+		}
 		const rowInScroll = y - this.header.render(width).length;
 		if (rowInScroll < 0) return;
 		const scrollTop = this.fullscreenScroll?.scrollTop ?? 0;
@@ -19551,7 +20203,18 @@ var TuiApp = class TuiApp {
 			const rows = [];
 			const callPreview = parseCallPreview(message.name, message.args);
 			const foldedCall = header.summary === "" ? foldedCallPreview(message.name, message.args) : "";
-			const resultPreview = message.name === "read" ? readFoldedPreview(message.result) : message.result === "" ? "" : ` — ${preview(message.result, 3)}`;
+			let resultPreview;
+			if (message.name === "read") resultPreview = readFoldedPreview(message.result);
+			else if (message.name === "ask_user_question") {
+				const summary = message.error === void 0 ? askAnswersSummary(message.result) : void 0;
+				resultPreview = summary === void 0 ? "" : ` — ${summary}`;
+			} else if (GOAL_TOOL_NAMES.has(message.name)) {
+				const summary = message.error === void 0 ? goalResultSummary(message.result) : void 0;
+				resultPreview = summary === void 0 ? "" : ` — ${summary}`;
+			} else if (FOLDED_JSON_RESULT_TOOLS.has(message.name)) {
+				const summary = foldedResultSummaryFor(message.name, message.result);
+				resultPreview = summary === void 0 || summary === "" ? "" : ` — ${summary}`;
+			} else resultPreview = message.result === "" ? "" : ` — ${preview(message.result, 3)}`;
 			const callHead = foldedCall === "" ? "" : foldedCall;
 			const headWithPreview = `${head}${callHead}${resultPreview}`;
 			if (callPreview?.kind === "bash" && callPreview.command !== "") {
@@ -19723,6 +20386,8 @@ var TuiApp = class TuiApp {
 			return;
 		}
 		if (message.status === "running") {
+			const modelLine = subagentModelDisplay(message.name, message.args);
+			if (modelLine !== void 0) card.addChild(new Text(color.textDim(modelLine), 0, 0));
 			const callView = this.present?.call(message.name, message.args);
 			if (callView !== void 0) {
 				if (callView.card === "diff" && callView.diffs.length > 0) {
@@ -19752,10 +20417,25 @@ var TuiApp = class TuiApp {
 			const summary = message.status === "ok" ? askAnswersSummary(message.result) : void 0;
 			if (summary !== void 0) {
 				card.addChild(new Text(color.textDim(summary), 0, 0));
+				const answerLines = askAnswersLines(message.result);
+				if (answerLines !== void 0) for (const line of answerLines) card.addChild(new Text(`  ${line.skipped ? color.textMuted(line.text) : color.textDim(line.text)}`, 0, 0));
+				return;
+			}
+		}
+		if (GOAL_TOOL_NAMES.has(message.name)) {
+			if (message.error !== void 0) {
+				card.addChild(new Text(color.textDim(`${message.error.name}: ${message.error.code}`), 0, 0));
+				return;
+			}
+			const goalLines = message.status === "ok" ? goalResultLines(message.result) : void 0;
+			if (goalLines !== void 0) {
+				for (const line of goalLines) card.addChild(new Text(color.textDim(line), 0, 0));
 				return;
 			}
 		}
 		if (message.result === "" && (message.resultBlocks?.length ?? 0) === 0) return;
+		const settledModelLine = subagentModelDisplay(message.name, message.args);
+		if (settledModelLine !== void 0) card.addChild(new Text(color.textDim(settledModelLine), 0, 0));
 		const resultView = this.present?.result(message.name, message.args, {
 			content: message.resultBlocks ?? [],
 			isError: message.status === "error",
@@ -19957,19 +20637,42 @@ var TuiApp = class TuiApp {
 	/** Toggle the todo panel between the transcript and the editor. */
 	toggleTodoPanel() {
 		this.todoPanelVisible = !this.todoPanelVisible;
+		if (!this.todoPanelVisible) this.todoExpanded = false;
 		this.renderTodoPanel();
 		this.renderDock();
 		this.requestRender();
 		return this.todoPanelVisible;
 	}
+	/** Toggle the todo panel between the compact five rows and the full list
+	* (fullscreen click on the panel's area). */
+	toggleTodoExpanded() {
+		if (!this.todoPanelVisible) return false;
+		this.todoExpanded = !this.todoExpanded;
+		this.renderTodoPanel();
+		this.requestRender();
+		return this.todoExpanded;
+	}
+	/** The fullscreen click loop over the todo panel's own rows: compact →
+	* full list → back to the summary row (the panel closes). The mouse thus
+	* opens AND closes the panel without Ctrl+T; the dock summary row itself
+	* opens it (handleFullscreenClick's dock region). */
+	handleTodoPanelClick() {
+		if (this.todoExpanded) this.toggleTodoPanel();
+		else this.toggleTodoExpanded();
+	}
 	/** Whether the todo panel is currently shown. */
 	isTodoPanelVisible() {
 		return this.todoPanelVisible;
 	}
+	/** Whether the todo panel is showing the full list (headless-test hook). */
+	isTodoPanelExpanded() {
+		return this.todoExpanded;
+	}
 	/**
 	* Rebuild the todo panel text: a border rule + `Todo` title (both indented
-	* one cell) plus up to five rows, in_progress first, then pending, then
-	* completed (strikethrough).
+	* one cell) plus up to five rows by default (in_progress first, then
+	* pending, then completed (strikethrough)); the full list when expanded
+	* (fullscreen click on the panel toggles).
 	*/
 	renderTodoPanel() {
 		if (!this.todoPanelVisible) {
@@ -19981,15 +20684,16 @@ var TuiApp = class TuiApp {
 			...this.todoItems.filter((todo) => todo.status === "in_progress"),
 			...this.todoItems.filter((todo) => todo.status === "pending"),
 			...this.todoItems.filter((todo) => todo.status === "completed")
-		].slice(0, 5);
+		];
+		const shown = this.todoExpanded ? ordered : ordered.slice(0, 5);
 		const width = Math.max(1, this.terminal.columns);
 		const border = color.border(` ${"─".repeat(Math.max(0, width - 2))} `);
 		const title = color.textStrong("  Todo");
-		if (ordered.length === 0) {
+		if (shown.length === 0) {
 			this.todoPanel.setText([border, title].join("\n"));
 			return;
 		}
-		const lines = ordered.map((todo) => {
+		const lines = shown.map((todo) => {
 			const body = todo.status === "completed" ? `\x1b[9m${todo.content}\x1b[29m` : todo.content;
 			return `${mark(todo)} ${body}`;
 		});
@@ -20136,6 +20840,8 @@ var TuiApp = class TuiApp {
 		this.renderQueuePane();
 		this.syncExtensionState();
 	}
+	/** Notice rows shown in full before the `+N more` fold (user rows are never folded). */
+	static MAX_NOTICE_ROWS = 5;
 	/** Rebuild the queue pane text from the current inbox rows. */
 	renderQueuePane() {
 		const items = this.queueItems;
@@ -20146,12 +20852,20 @@ var TuiApp = class TuiApp {
 		}
 		const width = Math.max(1, this.terminal.columns);
 		const lines = [color.border(` ${"─".repeat(Math.max(0, width - 2))} `)];
-		for (const item of items) {
-			const prefix = item.notice === true ? `${color.textDim("⏳")} ` : `${color.accent("❯")} `;
-			const truncated = truncateToWidth(item.text.replace(/\s+/g, " ").trim(), Math.max(1, width - visibleWidth(prefix)), "…");
-			lines.push(prefix + (item.notice === true ? color.textDim(truncated) : truncated));
-		}
-		const hint = items.some((item) => item.notice !== true) ? "ctrl+s to steer all · alt+↑ to edit all · /queue for per-item actions" : "job notices deliver after the current task · /tasks to view";
+		const userRows = items.filter((item) => item.notice !== true);
+		const noticeRows = items.filter((item) => item.notice === true);
+		const shownNotices = noticeRows.slice(0, TuiApp.MAX_NOTICE_ROWS);
+		for (const item of userRows) {
+			const truncated = truncateToWidth(item.text.replace(/\s+/g, " ").trim(), Math.max(1, width - visibleWidth("❯ ")), "…");
+			lines.push(`${color.accent("❯")} ${truncated}`);
+		}
+		for (const item of shownNotices) {
+			const truncated = truncateToWidth(item.text.replace(/\s+/g, " ").trim(), Math.max(1, width - visibleWidth("⏳ ")), "…");
+			lines.push(`${color.textDim("⏳")} ${color.textDim(truncated)}`);
+		}
+		const folded = noticeRows.length - shownNotices.length;
+		if (folded > 0) lines.push(color.textDim(truncateToWidth(`  +${folded} more notices pending · they deliver as the next turn runs`, Math.max(1, width - 2), "…")));
+		const hint = userRows.length > 0 ? "ctrl+s to steer all · alt+↑ to edit all" : "notices deliver after the current task · /tasks to view";
 		lines.push(color.textDim(truncateToWidth(`  ${hint}`, Math.max(1, width - 2), "…")));
 		this.queuePane.setText(lines.join("\n"));
 		this.requestRender();
@@ -20536,7 +21250,8 @@ var TuiApp = class TuiApp {
 			header: options.header,
 			noMatchText: options.noMatchText,
 			enableSearch: options.enableSearch,
-			initialQuery: options.initialQuery
+			initialQuery: options.initialQuery,
+			onAction: options.onAction
 		}, (value) => {
 			close();
 			onSelect(value);
@@ -20875,7 +21590,8 @@ var TuiApp = class TuiApp {
 					...question.detail !== void 0 ? { detail: question.detail } : {},
 					...question.options !== void 0 ? { options: question.options } : {},
 					...question.multiSelect !== void 0 ? { multiSelect: question.multiSelect } : {},
-					...question.intent !== void 0 ? { intent: question.intent } : {}
+					...question.intent !== void 0 ? { intent: question.intent } : {},
+					...question.masked !== void 0 ? { masked: question.masked } : {}
 				})), (answers) => this.settleQuestions(state, answers), () => this.settleQuestions(state, void 0)),
 				suspendedOverlays: /* @__PURE__ */ new Set(),
 				resolve,
@@ -24475,6 +25191,7 @@ function providerOptionsFor(entries, readSection) {
 		route: "deepseek-official",
 		configured: true,
 		declared: false,
+		namesCredential: true,
 		group: "configured",
 		settingsNs: "",
 		settingsPath: []
@@ -24486,13 +25203,15 @@ function providerOptionsFor(entries, readSection) {
 		const profile = entry.settingsPath.length === 0 ? section : getPath(section, entry.settingsPath);
 		const configured = profile !== void 0;
 		const namedRef = configured && typeof profile === "object" && profile !== null && typeof profile.apiKeyEnv === "string" ? profile.apiKeyEnv : void 0;
-		const ref = namedRef !== void 0 && namedRef !== "" ? namedRef : deriveKeyRef(entry.provider);
+		const namesCredential = namedRef !== void 0 && namedRef !== "";
+		const ref = namesCredential ? namedRef : deriveKeyRef(entry.provider);
 		push({
 			label: entry.displayName,
 			ref,
 			route: entry.provider,
 			configured,
 			declared: entry.declared === true,
+			namesCredential,
 			group: configured ? "configured" : entry.declared === true ? "custom" : "available",
 			settingsNs: entry.settingsNs,
 			settingsPath: [...entry.settingsPath]
@@ -24537,7 +25256,185 @@ function resolveCredentialArg(arg, options) {
 	if (route !== void 0) return route.ref;
 	if (/^[a-zA-Z][a-zA-Z0-9_]*$/.test(trimmed)) return trimmed.toUpperCase();
 }
-//#endregion
+/** Map the seam's entries to /login targets, deriving the route from the
+*  key's scope (llm-pi-ai flows address the provider route). */
+function authorizationTargets(entries) {
+	return entries.map((entry) => ({
+		kind: "authorization",
+		route: credentialKeyScope(entry.key) === "llm-pi-ai" ? credentialKeyId(entry.key) : void 0,
+		key: entry.key,
+		label: entry.label,
+		methods: entry.methods,
+		inFlight: entry.inFlight
+	}));
+}
+/** The flow target for a provider route, when one is registered. */
+function flowForRoute(targets, route) {
+	return targets.find((target) => target.route === route);
+}
+/**
+* Merge the reference targets and the authorization flows into the /login
+* picker set, applying the rc.1 dedup rule per route:
+*
+* - explicit `apiKeyEnv` profile → the reference target wins (the flow is
+*   NOT offered as a second default entry for the same route — requests
+*   resolve the reference first and a "successful" flow login would leave
+*   the reference unset, failing the next request);
+* - keyless route with a flow → the authorization target wins (no derived
+*   `<ROUTE>_API_KEY` entry is offered as a default);
+* - keyless route without a flow → the derived reference fallback.
+*
+* Flows whose key maps no option route (foreign scopes, or catalog routes
+* the llm directory does not expose) are appended as standalone targets.
+*/
+function mergeLoginTargets(options, targets) {
+	const flowByRoute = /* @__PURE__ */ new Map();
+	const standalone = [];
+	for (const target of targets) if (target.route !== void 0) flowByRoute.set(target.route, target);
+	else standalone.push(target);
+	const merged = [];
+	const covered = /* @__PURE__ */ new Set();
+	for (const option of options) {
+		const flow = flowByRoute.get(option.route);
+		merged.push(option.namesCredential || flow === void 0 ? {
+			kind: "reference",
+			route: option.route,
+			label: option.label,
+			ref: option.ref,
+			configured: option.configured,
+			declared: option.declared,
+			namesCredential: option.namesCredential
+		} : flow);
+		covered.add(option.route);
+	}
+	for (const target of targets) if (target.route === void 0 || !covered.has(target.route)) merged.push(target);
+	return merged;
+}
+/**
+* The one user-facing notice body: the message first, then the page to open
+* and the code to enter, each on its own line. Never truncated — the
+* output panel wraps, so the URL stays copyable. Notices never carry
+* secrets.
+*/
+function formatAuthorizationNotice(notice) {
+	const lines = [notice.message];
+	if (notice.url !== void 0 && notice.url !== "") lines.push("", "Open this page to continue:", notice.url);
+	if (notice.code !== void 0 && notice.code !== "") lines.push("", `Code: ${notice.code}`);
+	return lines.join("\n");
+}
+/**
+* Build the interaction half of one authorization attempt. One instance per
+* attempt: the notice panel is reused across progress notices, and
+* `close()` hides it when the attempt settles (the caller's finally).
+*
+* Prompt mapping:
+* - `text` and `secret` go through the question flow's free-text row;
+*   `secret` is rendered masked (the real value never leaves the input's
+*   memory and is never logged, put in history, or shown anywhere else);
+* - `select` goes through the picker and returns the chosen option's `id`,
+*   never its label;
+* - the user closing the question is a decline → `AuthorizationDeclinedError`;
+* - the prompt's OWN signal withdrawing it is NOT a decline: the rejection
+*   is passed through as-is so the flow can tell a refusal from a race.
+*/
+function createAuthorizationInteraction(app) {
+	let noticeHandle;
+	let noticeBody = "";
+	const showNotice = (notice) => {
+		noticeBody = formatAuthorizationNotice(notice);
+		if (noticeHandle === void 0) noticeHandle = app.openOutputViewer({
+			title: "Sign in",
+			initial: noticeBody,
+			refresh: () => noticeBody,
+			onClose: () => {
+				noticeHandle = void 0;
+			}
+		});
+	};
+	const close = () => {
+		noticeHandle?.();
+		noticeHandle = void 0;
+	};
+	return {
+		interaction: {
+			notify: (notice) => {
+				showNotice(notice);
+			},
+			prompt: async (prompt) => {
+				if (prompt.kind === "select") {
+					const signal = prompt.signal;
+					return await new Promise((resolve, reject) => {
+						if (signal?.aborted === true) {
+							reject(cancellationError("authorization prompt withdrawn"));
+							return;
+						}
+						let settled = false;
+						let handle;
+						const cleanup = () => {
+							if (signal !== void 0) signal.removeEventListener("abort", onAbort);
+						};
+						const onAbort = () => {
+							if (settled) return;
+							settled = true;
+							cleanup();
+							handle?.close?.();
+							reject(cancellationError("authorization prompt withdrawn"));
+						};
+						if (signal !== void 0) signal.addEventListener("abort", onAbort, { once: true });
+						handle = app.openPicker(prompt.options.map((option) => ({
+							value: option.id,
+							label: option.label,
+							...option.description !== void 0 && option.description !== "" ? { description: option.description } : {}
+						})), (value) => {
+							if (settled) return;
+							settled = true;
+							cleanup();
+							resolve(value);
+						}, () => {
+							if (settled) return;
+							settled = true;
+							cleanup();
+							reject(new AuthorizationDeclinedError());
+						}, {
+							header: prompt.message,
+							enableSearch: true
+						});
+						if (settled) handle?.close?.();
+					});
+				}
+				try {
+					const text = (await app.askQuestions([{
+						id: "answer",
+						question: prompt.message,
+						...prompt.placeholder !== void 0 && prompt.placeholder !== "" ? { placeholder: prompt.placeholder } : {},
+						...prompt.kind === "secret" ? { masked: true } : {}
+					}], prompt.signal))[0]?.custom ?? "";
+					if (text === "") throw new AuthorizationDeclinedError();
+					return text;
+				} catch (error) {
+					if (prompt.signal?.aborted === true) throw error;
+					throw new AuthorizationDeclinedError();
+				}
+			}
+		},
+		close
+	};
+}
+/** The user-facing text for one authorization attempt failure, mapping the
+*  seam's stable error taxonomy to copy (plan §15). `unknownErrorText` is
+*  the safe fallback for provider/network errors (already passed through
+*  safeErrorMessage by the caller). */
+function authorizationFailureText(error, unknownErrorText) {
+	switch (error?.code) {
+		case "NO_FLOW": return "login method is no longer available";
+		case "UNKNOWN_METHOD": return "selected login method is no longer available";
+		case "ALREADY_IN_FLIGHT": return "sign-in already in progress";
+		case "NOT_COMMITTED": return "sign-in finished without storing a credential";
+		case "DECLINED": return "login cancelled";
+		default: return `sign-in failed: ${unknownErrorText}`;
+	}
+}
+//#endregion
 //#region src/skill-catalog.ts
 /**
 * The standing-scope skill catalog adapter: the SINGLE narrow seam between
@@ -24807,7 +25704,7 @@ function sortCommands(commands) {
 //#region src/commands.ts
 /**
 * The TUI-owned slash commands (/exit /settings /sessions /skill /model
-* /new /tasks /preset /subagents /search /title /rename /copy /export
+* /new /tasks /preset /search /title /copy /export
 * /fork /status /login /logout /help), extracted from the runner's
 * monolithic apply() so the registration surface is testable and the runner
 * closure shrinks. Every command reads the live runner state through the
@@ -24879,6 +25776,9 @@ function presetDisplayText(preset) {
 }
 /** The sentinel picker value for the "add a brand-new provider" action row. */
 const ADD_PROVIDER_VALUE = "\0add-provider";
+/** The sentinel prefix for an authorization-target picker row (a credential
+* key can never start with NUL, so route values cannot collide). */
+const AUTH_VALUE_PREFIX = "\0auth:";
 /**
 * M11: the /status extension-health rows (plan §16 — /status extension
 * health). Reads the extension registries' live snapshots: contribution
@@ -24970,6 +25870,7 @@ function readProviderOptions(ctx) {
 		route: "deepseek-official",
 		configured: true,
 		declared: false,
+		namesCredential: true,
 		group: "configured",
 		settingsNs: "",
 		settingsPath: []
@@ -24978,26 +25879,36 @@ function readProviderOptions(ctx) {
 		route: option.label,
 		configured: true,
 		declared: false,
+		namesCredential: true,
 		group: "configured",
 		settingsNs: "llm-pi-ai",
 		settingsPath: ["providers", option.label]
 	});
 }
-/** Build the picker rows from the merged options: grouped by configured /
-* available / custom via the SelectList group extension (the fork renders a
-* non-interactive header row per group automatically), with the Add New
-* Platform action row pinned last. */
-function providerPickerRows(options) {
+/** Build the merged /login picker rows: reference targets keep their
+* configured/available/custom groups (the fork renders a non-interactive
+* header row per group), authorization targets get their own group, and the
+* Add New Platform action row is pinned last. Authorization row values
+* carry the AUTH_VALUE_PREFIX so they can never collide with a route. */
+function mergedPickerRows(merged) {
 	const rows = [];
 	const groupLabels = {
 		configured: "configured",
 		available: "available · catalog",
-		custom: "custom"
+		custom: "custom",
+		authorization: "sign in with provider"
 	};
-	for (const option of options) rows.push({
-		value: option.route,
-		label: `${option.label} (${option.ref})`,
-		group: groupLabels[option.group]
+	for (const target of merged) if (target.kind === "reference") {
+		const group = target.configured ? "configured" : target.declared ? "custom" : "available";
+		rows.push({
+			value: target.route,
+			label: `${target.label} (${target.ref})`,
+			group: groupLabels[group]
+		});
+	} else rows.push({
+		value: AUTH_VALUE_PREFIX + target.key,
+		label: target.inFlight ? `${target.label} — sign-in in progress` : `${target.label} — sign in`,
+		group: groupLabels.authorization
 	});
 	rows.push({
 		value: ADD_PROVIDER_VALUE,
@@ -25005,6 +25916,161 @@ function providerPickerRows(options) {
 	});
 	return rows;
 }
+/** Recover an authorization target from a picked row value (the marker
+* prefix guarantees no collision with reference route values). */
+function targetFromPickerValue(merged, value) {
+	if (!value.startsWith(AUTH_VALUE_PREFIX)) return void 0;
+	const key = value.slice(6);
+	for (const target of merged) if (target.kind === "authorization" && target.key === key) return target;
+}
+/** One-line summary of every merged target, for the unknown-target error. */
+function mergedTargetsSummary(merged) {
+	return merged.map((target) => target.kind === "reference" ? `${target.label} (${target.ref})` : `${target.label} (provider sign-in)`).join(", ");
+}
+/**
+* Run one authorization attempt on the seam and report it. Method picking
+* (single method → direct; multiple → a picker), notice rendering and
+* prompts all live behind the interaction built here; the seam's stable
+* error taxonomy maps to user-facing copy (§15). On success, a catalog
+* route that is not configured yet gets a minimal keyless profile so the
+* runtime keeps reading the credential record (§12.1 — never an apiKeyEnv,
+* which would switch the request path back to a reference that is not set).
+*/
+async function runAuthorizationLogin(ctx, app, runner, target, options) {
+	const authorization = ctx.get("authorization");
+	if (authorization === void 0) return {
+		kind: "error",
+		text: "authorization service unavailable"
+	};
+	if (target.inFlight) return {
+		kind: "error",
+		text: `sign-in already in progress for ${target.label}`
+	};
+	let method = target.methods[0]?.id;
+	if (method === void 0) return {
+		kind: "error",
+		text: `no sign-in method available for ${target.label}`
+	};
+	if (target.methods.length > 1) {
+		const picked = await new Promise((resolve) => {
+			app.openPicker(target.methods.map((candidate) => ({
+				value: candidate.id,
+				label: candidate.label
+			})), (value) => resolve(value), () => resolve(void 0), {
+				header: `Sign in method · ${target.label}`,
+				enableSearch: false
+			});
+		});
+		if (picked === void 0) return {
+			kind: "error",
+			text: "login cancelled"
+		};
+		method = picked;
+	}
+	const { interaction, close } = createAuthorizationInteraction(app);
+	let outcome;
+	try {
+		outcome = await authorization.begin({
+			key: target.key,
+			method,
+			interaction,
+			signal: runner.signal
+		});
+	} catch (error) {
+		if (runner.signal.aborted) return {
+			kind: "error",
+			text: "login cancelled"
+		};
+		if (error?.code === "NOT_COMMITTED") runner.diag.error("authorization", {
+			key: target.key,
+			error: safeErrorMessage(error)
+		});
+		return {
+			kind: "error",
+			text: authorizationFailureText(error, safeErrorMessage(error))
+		};
+	} finally {
+		close();
+	}
+	if (outcome.status === "cancelled") return {
+		kind: "error",
+		text: "login cancelled"
+	};
+	const profileNote = await provisionKeylessProfile(ctx, runner, target, options);
+	return {
+		kind: "success",
+		text: `signed in to ${target.label}${profileNote}`
+	};
+}
+/**
+* After a successful authorization, write a MINIMAL keyless profile for a
+* catalog route that is not configured yet (§12.1). The record alone does
+* not make the route selectable — llm-pi-ai registers a route only when
+* its settings section names it — and the profile must NOT carry
+* apiKeyEnv, or the request path would switch back to a reference that was
+* never set. Hand-declared/custom routes are left to the add wizard
+* (§12.2). Any failure degrades silently (the sign-in itself succeeded).
+* @returns a user-facing note, or '' when nothing was provisioned.
+*/
+async function provisionKeylessProfile(ctx, runner, target, options) {
+	if (target.route === void 0) return "";
+	const option = options.find((candidate) => candidate.route === target.route);
+	if (option === void 0 || option.configured || option.declared || option.settingsNs === "") return "";
+	const settings = ctx.get("settings");
+	if (settings === void 0) return "";
+	try {
+		await settings.mutate(option.settingsNs, [{
+			op: "set",
+			path: [...option.settingsPath],
+			value: {}
+		}]);
+		return " — provider profile recorded";
+	} catch (error) {
+		runner.diag.warn("authorization", {
+			key: target.key,
+			note: "profile write failed",
+			error: safeErrorMessage(error)
+		});
+		return "";
+	}
+}
+/** Value prefixes for the /logout picker rows (no collision with a ref). */
+const LOGOUT_REF_VALUE = "\0ref:";
+const LOGOUT_RECORD_VALUE = "\0record:";
+/** Build the /logout picker rows: every stored credential record plus every
+* configured reference (presence only — a secret's value never leaves the
+* credentials service). Records are deduplicated by key and labelled with
+* the authorization flow's user-facing name when one owns the key (a
+* record row must say what signing out actually clears). */
+async function logoutPickerRows(credentials, options, targets) {
+	const rows = [];
+	const seenRefs = /* @__PURE__ */ new Set();
+	for (const option of options) {
+		if (seenRefs.has(option.ref)) continue;
+		seenRefs.add(option.ref);
+		try {
+			if ((await credentials.describe(option.ref)).configured) rows.push({
+				value: LOGOUT_REF_VALUE + option.ref,
+				label: `${option.label} (${option.ref})`,
+				group: "API keys"
+			});
+		} catch {}
+	}
+	const records = await credentials.listRecords();
+	const seenKeys = /* @__PURE__ */ new Set();
+	for (const record of records) {
+		if (seenKeys.has(record.key)) continue;
+		seenKeys.add(record.key);
+		const owner = targets.find((target) => target.key === record.key);
+		const label = owner !== void 0 ? `${owner.label} — stored credential${record.kind === void 0 ? "" : ` (${record.kind})`}` : `${record.key}${record.kind === void 0 ? "" : ` (${record.kind})`}`;
+		rows.push({
+			value: LOGOUT_RECORD_VALUE + record.key,
+			label,
+			group: "stored credentials"
+		});
+	}
+	return rows;
+}
 /** Run the add-provider wizard: collect route/api/baseURL/displayName/key
 * through question flows, probe the endpoint for its models (falling back to
 * hand entry), review, then persist the profile + credential.
@@ -25252,18 +26318,43 @@ function registerTuiCommands(runner, initial) {
 		}
 	};
 	refreshCompletions();
+	/**
+	* Register one TUI command plus its aliases (kimi parity: an alias is
+	* another NAME of the same logical command). Every alias registers with
+	* the host commands service — the shared handler by default, or its own
+	* handler when the alias keeps a fast path (e.g. /resume's direct-resume
+	* lookup) — so host dispatch, the completion catalog (aliases are
+	* searchable: typing `resume` completes `/resume`) and the busy-Enter
+	* gate all see it, while the command surface lists one logical command
+	* and the docs mark the alias.
+	* @param spec - the primary command; `aliases` register with the shared
+	*   handler unless `aliasHandlers` overrides one.
+	*/
+	const registerTuiCommand = (spec) => {
+		commands.register({
+			name: spec.name,
+			description: spec.description,
+			...spec.input === void 0 ? {} : { input: spec.input },
+			handler: spec.handler
+		});
+		for (const alias of spec.aliases ?? []) {
+			const handler = spec.aliasHandlers?.[alias] ?? spec.handler;
+			commands.register({
+				name: alias,
+				description: `${spec.description} (alias of /${spec.name})`,
+				...spec.input === void 0 ? {} : { input: spec.input },
+				handler
+			});
+		}
+	};
 	const exitHandler = () => {
 		runner.requestExit();
 		return { kind: "success" };
 	};
-	commands.register({
+	registerTuiCommand({
 		name: "exit",
 		description: "Quit the terminal UI (flush and exit)",
-		handler: exitHandler
-	});
-	commands.register({
-		name: "quit",
-		description: "Quit the terminal UI (flush and exit) — alias of /exit",
+		aliases: ["quit"],
 		handler: exitHandler
 	});
 	commands.register({
@@ -25337,6 +26428,13 @@ function registerTuiCommands(runner, initial) {
 					currentValue: tuiSettings?.get().busyEnter ?? "queue",
 					values: ["queue", "steer"]
 				},
+				{
+					id: "local-shell-sandbox",
+					label: "Local shell sandbox",
+					description: "! / !! commands run outside the dsh sandbox (bypass, default) or under the sandbox policy",
+					currentValue: tuiSettings?.get().localShellSandbox ?? "bypass",
+					values: ["bypass", "sandbox"]
+				},
 				{
 					id: "fullscreen",
 					label: "Fullscreen",
@@ -25464,6 +26562,14 @@ function registerTuiCommands(runner, initial) {
 							busyEnter: value
 						}), { notify: true });
 					}
+				} else if (id === "local-shell-sandbox") {
+					if (value === "bypass" || value === "sandbox") {
+						const settings = tuiSettings;
+						if (settings !== void 0) detach("settings local shell sandbox write", () => settings.replace({
+							...settings.get(),
+							localShellSandbox: value
+						}), { notify: true });
+					}
 				} else if (id === "fullscreen") {
 					if (value === "off" || value === "on") app.setFullscreen(value === "on");
 				}
@@ -25538,17 +26644,13 @@ function registerTuiCommands(runner, initial) {
 		});
 		return { kind: "success" };
 	};
-	commands.register({
+	registerTuiCommand({
 		name: "sessions",
 		description: "List, search, and switch persisted sessions",
 		input: { hint: "[query]" },
-		handler: (invocation) => openSessionPicker(invocation, "sessions")
-	});
-	commands.register({
-		name: "resume",
-		description: "Resume a session by id or pick from the list (alias of /sessions)",
-		input: { hint: "[id|query]" },
-		handler: async (invocation) => {
+		handler: (invocation) => openSessionPicker(invocation, "sessions"),
+		aliases: ["resume"],
+		aliasHandlers: { resume: async (invocation) => {
 			const raw = invocation.rawInput.trim();
 			if (raw !== "") {
 				const currentId = runner.liveAgent?.session.id;
@@ -25571,7 +26673,7 @@ function registerTuiCommands(runner, initial) {
 				}
 			}
 			return openSessionPicker(invocation, "resume");
-		}
+		} }
 	});
 	/** The workspace the live session runs in; fallback to the TUI's cwd. */
 	const sessionCwd = (agent) => agent.session.header.cwd ?? cwd;
@@ -25957,129 +27059,13 @@ function registerTuiCommands(runner, initial) {
 			};
 		}
 	});
-	commands.register({
-		name: "queue",
-		description: "Manage queued input: edit, delete, steer, or insert",
-		handler: async () => {
-			const liveAgent = await requireAgent();
-			const inbox = liveAgent.inbox;
-			const queued = [...inbox.nextTurn.map((message, index) => ({
-				message,
-				slot: `next ${index + 1}`,
-				list: "next-turn"
-			})), ...inbox.nextStep.map((message, index) => ({
-				message,
-				slot: `steer ${index + 1}`,
-				list: "next-step"
-			}))];
-			if (queued.length === 0) return {
-				kind: "success",
-				text: "no queued input"
-			};
-			app.openSettings(queued.map(({ message, slot }) => ({
-				id: message.id,
-				label: `[${slot}] ${textOf(message.content).replace(/\s+/g, " ").trim().slice(0, 40)}`,
-				description: message.id,
-				currentValue: "",
-				submenu: (value, done) => new SettingsList([
-					{
-						id: "edit",
-						label: "Edit",
-						description: "Rewrite this queued message",
-						currentValue: "",
-						values: ["✓"]
-					},
-					{
-						id: "delete",
-						label: "Delete",
-						description: "Remove it from the queue",
-						currentValue: "",
-						values: ["✓"]
-					},
-					{
-						id: "steer",
-						label: "Steer",
-						description: "Send it now: into the running turn, or start one when idle",
-						currentValue: "",
-						values: ["✓"]
-					},
-					{
-						id: "insert",
-						label: "Insert before",
-						description: "Queue a new message ahead of this one",
-						currentValue: "",
-						values: ["✓"]
-					}
-				], 6, settingsListTheme(), (action) => done(action), () => done(), {})
-			})), (id, action) => {
-				const target = queued.find((item) => item.message.id === id);
-				if (target === void 0) return;
-				const message = target.message;
-				if (action === "delete") {
-					inbox.remove(message.id);
-					app.notify("queued message deleted", "info");
-				} else if (action === "steer") {
-					inbox.remove(message.id);
-					if (liveAgent.status === "running") liveAgent.steer(message);
-					else liveAgent.followup(message);
-					app.notify("steering queued message", "info");
-				} else if (action === "edit" || action === "insert") runOwned("queued message edit", () => app.askQuestions([{
-					id: "q",
-					question: action === "edit" ? "Edit queued message:" : "New message to insert:"
-				}]), {
-					diag: runner.diag,
-					sessionId: () => runner.liveAgent?.session.id,
-					onResult: (answers) => {
-						const text = answers[0]?.custom?.trim() ?? "";
-						if (text === "") return;
-						const next = createUserMessage({
-							content: [{
-								type: "text",
-								text
-							}],
-							source: { kind: "user" }
-						});
-						if (action === "edit") {
-							inbox.replace(message.id, next);
-							app.notify("queued message updated", "info");
-						} else {
-							const position = (target.list === "next-turn" ? inbox.nextTurn : inbox.nextStep).findIndex((item) => item.id === message.id);
-							if (position < 0) return;
-							inbox.splice(target.list, position, 0, [next]);
-							app.notify("message inserted before the selected one", "info");
-						}
-					}
-				});
-			}, () => {});
-			return { kind: "success" };
-		}
-	});
-	commands.register({
+	registerTuiCommand({
 		name: "tasks",
-		description: "List background jobs for this session",
+		description: "Browse background jobs and subagents for this session (search filters rows)",
+		aliases: ["subagents"],
 		handler: async () => {
-			const liveAgent = await requireAgent();
-			const jobs = ctx.get("jobs");
-			if (jobs === void 0) return {
-				kind: "error",
-				text: "jobs service unavailable"
-			};
-			const snapshots = jobs.list(liveAgent);
-			if (snapshots.length === 0) return {
-				kind: "error",
-				text: "no background jobs"
-			};
-			app.openTaskBrowser(snapshots.map((job) => ({
-				value: job.id,
-				label: `${job.kind} · ${job.label}`,
-				status: job.status,
-				detail: job.detail,
-				startedAt: job.startedAt,
-				group: "jobs"
-			})), (jobId) => runner.openJobView(jobId), () => {}, {
-				header: "tasks",
-				enableSearch: true
-			});
+			await requireAgent();
+			runner.openTasksBrowser();
 			return { kind: "success" };
 		}
 	});
@@ -26271,56 +27257,6 @@ function registerTuiCommands(runner, initial) {
 			return { kind: "success" };
 		}
 	});
-	commands.register({
-		name: "subagents",
-		description: "List child agents; view a transcript or interrupt one",
-		handler: async () => {
-			const liveAgent = await requireAgent();
-			const subagents = ctx.get("subagents");
-			if (subagents === void 0) return {
-				kind: "error",
-				text: "subagent service unavailable"
-			};
-			const children = (await subagents.listChildren(liveAgent.session.id)).filter((child) => child.kind === "child");
-			if (children.length === 0) return {
-				kind: "success",
-				text: "no subagents for this session"
-			};
-			const labelOf = (child) => child.label ?? child.id;
-			const closeSubagents = app.openSettings(children.map((child) => ({
-				id: child.id,
-				label: labelOf(child),
-				description: `${child.mode} · ${child.activity}${child.hasChildren ? " · has children" : ""}`,
-				currentValue: "",
-				submenu: (value, done) => new SettingsList([{
-					id: "view",
-					label: "View transcript",
-					description: "Watch this session read-only (Esc to return)",
-					currentValue: "",
-					values: ["✓"]
-				}, {
-					id: "interrupt",
-					label: "Interrupt",
-					description: "Cancel the child agent",
-					currentValue: "",
-					values: ["✓"]
-				}], 6, settingsListTheme(), (id) => done(id), () => done(), {})
-			})), (childId, action) => {
-				const child = children.find((candidate) => candidate.id === childId);
-				if (child === void 0) return;
-				closeSubagents();
-				if (action === "view") detach("subagent view", () => runner.enterView(child.id, labelOf(child)), { notify: true });
-				else if (action === "interrupt") {
-					subagents.interrupt(child.id, {
-						kind: "user",
-						parentSessionId: liveAgent.session.id
-					});
-					app.notify(`interrupting ${labelOf(child)}`, "info");
-				}
-			}, () => {});
-			return { kind: "success" };
-		}
-	});
 	commands.register({
 		name: "search",
 		description: "Search persisted sessions for text and switch to a hit",
@@ -26412,16 +27348,11 @@ function registerTuiCommands(runner, initial) {
 			};
 		}
 	};
-	commands.register({
+	registerTuiCommand({
 		name: "title",
 		description: "Set the session title; without an argument, regenerate it from the conversation (overwrites the current title)",
 		input: { hint: "<title>" },
-		handler: titleHandler
-	});
-	commands.register({
-		name: "rename",
-		description: "Alias of /title: set the session title, or regenerate it without an argument (overwrites the current title)",
-		input: { hint: "<title>" },
+		aliases: ["rename"],
 		handler: titleHandler
 	});
 	commands.register({
@@ -26561,7 +27492,7 @@ function registerTuiCommands(runner, initial) {
 	});
 	commands.register({
 		name: "login",
-		description: "Set an API key — deepseek official or an llm-pi-ai provider route",
+		description: "Sign in — deepseek official or an llm-pi-ai provider route (API key or provider-native flow)",
 		input: { hint: "[<route|env-var>]" },
 		handler: async (invocation) => {
 			const credentials = ctx.get("credentials");
@@ -26569,39 +27500,51 @@ function registerTuiCommands(runner, initial) {
 				kind: "error",
 				text: "credentials service unavailable"
 			};
+			const authorization = ctx.get("authorization");
 			const options = readProviderOptions(ctx);
+			const targets = authorizationTargets(authorization?.list() ?? []);
+			const merged = mergeLoginTargets(options, targets);
 			const arg = invocation.rawInput.trim();
 			let route;
 			let ref;
+			let target;
 			if (arg !== "") {
 				const known = resolveCredentialArg(arg, options);
 				if (known !== void 0) {
 					const option = options.find((candidate) => candidate.ref === known);
 					if (option !== void 0) {
-						route = option.route;
-						ref = option.ref;
+						const flow = option.route !== "deepseek-official" ? flowForRoute(targets, option.route) : void 0;
+						if (flow !== void 0 && option.namesCredential === false) target = flow;
+						else {
+							route = option.route;
+							ref = option.ref;
+						}
 					} else ref = known;
 				} else if (ROUTE_PATTERN.test(arg)) {
-					const outcome = await askAddProvider(ctx, app, runner.signal, arg);
-					if (outcome.kind === "cancelled") return {
-						kind: "error",
-						text: "add provider cancelled"
-					};
-					if (outcome.kind === "error") return {
-						kind: "error",
-						text: outcome.text
-					};
-					return {
-						kind: "success",
-						text: outcome.text
-					};
+					const flow = flowForRoute(targets, arg);
+					if (flow !== void 0) target = flow;
+					else {
+						const outcome = await askAddProvider(ctx, app, runner.signal, arg);
+						if (outcome.kind === "cancelled") return {
+							kind: "error",
+							text: "add provider cancelled"
+						};
+						if (outcome.kind === "error") return {
+							kind: "error",
+							text: outcome.text
+						};
+						return {
+							kind: "success",
+							text: outcome.text
+						};
+					}
 				} else return {
 					kind: "error",
-					text: `unknown credential target "${arg}" — ${options.map((option) => `${option.label} (${option.ref})`).join(", ")}`
+					text: `unknown credential target "${arg}" — ${mergedTargetsSummary(merged)}`
 				};
-			} else if (options.length > 1) {
+			} else if (merged.length > 1) {
 				const picked = await new Promise((resolve) => {
-					app.openPicker(providerPickerRows(options), (value) => resolve(value), () => resolve(void 0), {
+					app.openPicker(mergedPickerRows(merged), (value) => resolve(value), () => resolve(void 0), {
 						enableSearch: true,
 						header: "login · providers",
 						noMatchText: "  no matching providers",
@@ -26629,8 +27572,22 @@ function registerTuiCommands(runner, initial) {
 						text: outcome.text
 					};
 				}
-				route = picked;
-			} else route = options[0]?.route;
+				const authTarget = targetFromPickerValue(merged, picked);
+				if (authTarget !== void 0) target = authTarget;
+				else route = picked;
+			} else {
+				const only = merged[0];
+				if (only === void 0) return {
+					kind: "error",
+					text: "no credential targets available"
+				};
+				if (only.kind === "authorization") target = only;
+				else {
+					route = only.route;
+					ref = only.ref;
+				}
+			}
+			if (target !== void 0) return runAuthorizationLogin(ctx, app, runner, target, options);
 			if (route === void 0 && ref === void 0) return {
 				kind: "error",
 				text: "no credential targets available"
@@ -26641,7 +27598,8 @@ function registerTuiCommands(runner, initial) {
 			try {
 				const key = (await app.askQuestions([{
 					id: "key",
-					question: `Paste the API key for ${label}:`
+					question: `Paste the API key for ${label}:`,
+					masked: true
 				}]))[0]?.custom ?? "";
 				if (key === "") return {
 					kind: "error",
@@ -26662,7 +27620,7 @@ function registerTuiCommands(runner, initial) {
 	});
 	commands.register({
 		name: "logout",
-		description: "Clear a stored API key — deepseek official or an llm-pi-ai provider route",
+		description: "Clear a stored credential — deepseek official or an llm-pi-ai provider route (API key or stored record)",
 		input: { hint: "[<route|env-var>]" },
 		handler: async (invocation) => {
 			const credentials = ctx.get("credentials");
@@ -26670,24 +27628,72 @@ function registerTuiCommands(runner, initial) {
 				kind: "error",
 				text: "credentials service unavailable"
 			};
+			const authorization = ctx.get("authorization");
 			const options = readProviderOptions(ctx);
+			const targets = authorizationTargets(authorization?.list() ?? []);
 			const arg = invocation.rawInput.trim();
 			if (arg !== "") {
 				const resolved = resolveCredentialArg(arg, options);
-				if (resolved === void 0) return {
+				if (resolved !== void 0) {
+					const option = options.find((candidate) => candidate.ref === resolved);
+					const flow = option !== void 0 && option.route !== "deepseek-official" && !option.namesCredential ? flowForRoute(targets, option.route) : void 0;
+					if (flow !== void 0) {
+						await credentials.deleteRecord(flow.key);
+						return {
+							kind: "success",
+							text: `${flow.label} signed out locally — stored credential cleared`
+						};
+					}
+					await credentials.unset(resolved);
+					return {
+						kind: "success",
+						text: `${resolved} cleared`
+					};
+				}
+				const flow = flowForRoute(targets, arg.toLowerCase());
+				if (flow !== void 0) {
+					await credentials.deleteRecord(flow.key);
+					return {
+						kind: "success",
+						text: `${flow.label} signed out locally — stored credential cleared`
+					};
+				}
+				return {
 					kind: "error",
-					text: `unknown credential target "${arg}" — ${options.map((option) => `${option.label} (${option.ref})`).join(", ")}`
+					text: `unknown credential target "${arg}" — ${mergedTargetsSummary(mergeLoginTargets(options, targets))}`
 				};
-				await credentials.unset(resolved);
+			}
+			const rows = await logoutPickerRows(credentials, options, targets);
+			if (rows.length === 0) return {
+				kind: "error",
+				text: "nothing to sign out"
+			};
+			const picked = await new Promise((resolve) => {
+				app.openPicker(rows, (value) => resolve(value), () => resolve(void 0), {
+					enableSearch: true,
+					header: "logout · credentials",
+					noMatchText: "  nothing to sign out",
+					width: 76,
+					maxHeight: 26,
+					showHint: true
+				});
+			});
+			if (picked === void 0) return {
+				kind: "error",
+				text: "logout cancelled"
+			};
+			if (picked.startsWith(LOGOUT_RECORD_VALUE)) {
+				await credentials.deleteRecord(picked.slice(8));
 				return {
 					kind: "success",
-					text: `${resolved} cleared`
+					text: `${picked.slice(8)} signed out locally — stored credential cleared`
 				};
 			}
-			await credentials.unset(options[0].ref);
+			const targetRef = picked.slice(5);
+			await credentials.unset(targetRef);
 			return {
 				kind: "success",
-				text: `${options[0].ref} cleared`
+				text: `${targetRef} cleared`
 			};
 		}
 	});
@@ -26918,6 +27924,33 @@ function appendHistoryLine(file, text, lastContent) {
 	return true;
 }
 //#endregion
+//#region src/dsh-version.ts
+/**
+* The installed dsh (DeepSeek Harness CLI) version, resolved from the
+* launcher's real path: `process.argv[1]` is the `dsh` bin, whose realpath
+* walks up to the `@deepseek-ai/dsh/package.json` that owns it. The header
+* and the welcome card show the harness the TUI runs on, not this bundle's
+* own patch level. Undefined when the launcher path is unreadable.
+* @module @xmoon76/dsh-pi-tui/dsh-version
+*/
+/** @returns the installed dsh version string, or undefined. */
+function dshVersion() {
+	const bin = process.argv[1];
+	if (bin === void 0) return void 0;
+	try {
+		let dir = dirname(realpathSync(bin));
+		for (let depth = 0; depth < 8; depth += 1) {
+			try {
+				const pkg = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+				if (pkg.name === "@deepseek-ai/dsh" && typeof pkg.version === "string") return pkg.version;
+			} catch {}
+			const parent = dirname(dir);
+			if (parent === dir) return void 0;
+			dir = parent;
+		}
+	} catch {}
+}
+//#endregion
 //#region src/exit.ts
 /**
 * The TUI exit contract: flush the live session with a HARD timeout, record
@@ -27460,6 +28493,17 @@ function shellCommandOf(text) {
 	return text.replace(/^!+/, "").trim();
 }
 /**
+* The local-shell sandbox preference for user-typed `!`/`!!` commands:
+* 'sandbox' routes them through the dsh shell capability's policy,
+* anything else (including an absent settings document) is 'bypass' — the
+* pi/kimi default that runs the user's own commands outside the sandbox
+* (the sandbox guards the model's autonomous commands, not the user's).
+* @param settings - the TUI settings document's fields, when present.
+*/
+function localShellSandboxPreferenceOf(settings) {
+	return settings?.localShellSandbox === "sandbox" ? "sandbox" : "bypass";
+}
+/**
 * The model-facing submission text: the command echoed `$`-style (kimi
 * ShellExecution parity) followed by the settled card result (output +
 * `[exit N]` / truncation lines).
@@ -27678,82 +28722,6 @@ function formatBytes(bytes) {
 	return `${(bytes / 1048576).toFixed(1)} MiB`;
 }
 //#endregion
-//#region src/shell-words.ts
-/**
-* A small, reliable POSIX-ish shell word parser for external-command
-* strings like `$VISUAL`/`$EDITOR` (`code --wait`, `vim -f`, `sensible-editor
-* --nofork`) and `!` shell lines. It handles the quoting rules that matter
-* in practice — single quotes (literal), double quotes (backslash escapes,
-* everything else verbatim — no expansion), and backslash escapes outside
-* quotes — WITHOUT executing a shell.
-*
-* This deliberately replaces naive `command.split(/\s+/)` splitting: an
-* editor path with spaces or a quoted argument would be mangled into
-* phantom arguments.
-* @module @xmoon76/dsh-pi-tui/shell-words
-*/
-/**
-* Split a command line into words, POSIX-ish. Never throws: unbalanced
-* quotes are treated as a trailing literal word (matching how shells
-* consume the rest of the line). Backslashes before non-special characters
-* are dropped outside quotes; inside double quotes a backslash only escapes
-* `"`, `\`, and `$` and is kept verbatim before anything else.
-* @param line - the raw command line.
-* @returns the parsed words.
-*/
-function parseShellWords(line) {
-	const words = [];
-	let current = "";
-	let inWord = false;
-	let quote;
-	for (let index = 0; index < line.length; index += 1) {
-		const char = line[index];
-		if (quote === void 0 && char === "\\") {
-			const next = line[index + 1];
-			if (next !== void 0) {
-				current += next;
-				index += 1;
-			} else current += "\\";
-			inWord = true;
-			continue;
-		}
-		if (quote === void 0 && (char === "'" || char === "\"")) {
-			quote = char;
-			inWord = true;
-			continue;
-		}
-		if (quote === "\"" && char === "\\") {
-			const next = line[index + 1];
-			if (next === "\"" || next === "\\" || next === "$") {
-				current += next;
-				index += 1;
-			} else current += "\\";
-			inWord = true;
-			continue;
-		}
-		if (quote === "'" && char === "'") {
-			quote = void 0;
-			continue;
-		}
-		if (quote === "\"" && char === "\"") {
-			quote = void 0;
-			continue;
-		}
-		if (quote === void 0 && (char === " " || char === "	" || char === "\n")) {
-			if (inWord) {
-				words.push(current);
-				current = "";
-				inWord = false;
-			}
-			continue;
-		}
-		current += char;
-		inWord = true;
-	}
-	if (inWord) words.push(current);
-	return words;
-}
-//#endregion
 //#region src/skill-catalog-refresh.ts
 /** Whether two targets are the same owner (no transition needed). The
 * preset identity is the caller-provided presetId compared EXACTLY —
@@ -28241,6 +29209,19 @@ const inject = [
 	TUI_STARTUP_SERVICE
 ];
 const Config = z.object({ sessionId: z.string() });
+/**
+* Wire the credential surface refresh to the dsh 0.1.1-rc.1 credential
+* events. The rc.1 release split the credential update event into the
+* reference half and the durable-record half; both change what the footer
+* model row and the welcome card show (a /login /logout, an external
+* .credentials.yaml edit, or an authorization flow committing a record), so
+* they share one best-effort callback. The callback must not read secrets
+* or mutate providers — it only re-reads describe-level state.
+*/
+function registerCredentialSurfaceRefresh(ctx, refresh) {
+	ctx.on("credentials/reference-updated", refresh);
+	ctx.on("credentials/record-updated", refresh);
+}
 /** Display window in turns; older turns collapse into a summary entry. */
 const WINDOW_TURNS = 15;
 /** Coalesced repaint interval for streaming events, in ms. */
@@ -28294,7 +29275,6 @@ const LOCAL_COMMANDS = /* @__PURE__ */ new Set([
 	"model",
 	"new",
 	"preset",
-	"queue",
 	"quit",
 	"reload",
 	"rename",
@@ -28431,15 +29411,30 @@ function subagentJobTranscriptId(snapshot) {
 /** Viewer body for a subagent job with no uniquely matched child. */
 function subagentJobViewHint(status, detail) {
 	return [
-		`status: ${status}${status === "running" || status === "stopping" ? " — running in the background; its transcript updates live in /subagents" : ` — this subagent finished${detail === void 0 ? "" : ` (${detail})`}`}`,
+		`status: ${status}${status === "running" || status === "stopping" ? " — running in the background; its transcript updates live in /tasks" : ` — this subagent finished${detail === void 0 ? "" : ` (${detail})`}`}`,
 		"",
 		"The job record does not carry the child session id, so this job cannot",
 		"be matched to its child from the task browser (a same-label foreground",
-		"run would be indistinguishable). Open /subagents and pick the child by",
+		"run would be indistinguishable). Open /tasks and pick the child by",
 		"its label to read the transcript."
 	].join("\n");
 }
 /**
+* Whether an inbox message is USER-ORIGIN input — the queue pane's steerable
+* `❯` rows. Everything else is injected context, not the user's own queued
+* input, and must never read as one: plugin notices (background-job
+* completions), `subagent-report` relays (a child's active report, e.g.
+* "Background subagent X reported:"), injected skill/agent instructions,
+* goal messages. The web makes the same cut (`placement: source.kind ===
+* 'user' ? 'steering' : 'context'`), and this deployment's queue pane has
+* the same rule: only user-origin rows are steerable. A sourceless row
+* (undefined) is treated as user input — plain rows never carry a source.
+* @param source - the message source projection, or undefined for a plain row.
+*/
+function isUserQueueInput(source) {
+	return source === void 0 || source.kind === "user";
+}
+/**
 * Whether a plain submitted draft is the quit word: exactly `exit` (trimmed,
 * lowercase). The runner intercepts this BEFORE any session creation or
 * submission (shell muscle memory); anything else — `exit!`, `Exit`, or a
@@ -28511,7 +29506,7 @@ function foldQueueRows(messages, mode, notified) {
 			id: message.id,
 			text: textOf(message.content),
 			mode,
-			notice: source?.form === "notice"
+			notice: !isUserQueueInput(source)
 		});
 	}
 	return {
@@ -28520,33 +29515,10 @@ function foldQueueRows(messages, mode, notified) {
 	};
 }
 /**
-* The installed dsh version (e.g. `0.1.0-rc.6`), resolved from the launcher's
-* real path: `process.argv[1]` is the `dsh` bin, whose realpath walks up to
-* the `@deepseek-ai/dsh/package.json` that owns it. The version the welcome
-* card shows is the harness the TUI runs on, not this bundle's own patch
-* level. Undefined when the launcher path is unreadable.
-* @returns the installed dsh version string, or undefined.
-*/
-function dshVersion() {
-	const bin = process.argv[1];
-	if (bin === void 0) return void 0;
-	try {
-		let dir = dirname(realpathSync(bin));
-		for (let depth = 0; depth < 8; depth += 1) {
-			try {
-				const pkg = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
-				if (pkg.name === "@deepseek-ai/dsh" && typeof pkg.version === "string") return pkg.version;
-			} catch {}
-			const parent = dirname(dir);
-			if (parent === dir) return void 0;
-			dir = parent;
-		}
-	} catch {}
-}
-/**
 * The bundle's own version, read from package.json at runtime so the welcome
 * card never drifts from the shipped version. The DISPLAYED version prefers
-* the installed dsh version (`dshVersion`), falling back to this one.
+* the installed dsh version (`dshVersion` — shared with the header badge
+* via src/dsh-version.ts), falling back to this one.
 * @returns the version string, or a fallback when the file is unreadable.
 */
 function packageVersion() {
@@ -29292,9 +30264,11 @@ function apply(ctx, config) {
 		/**
 		* The LIVE session's workspace: each session carries its own header cwd
 		* (fixed at creation, e.g. a session birthed by the web in another
-		* directory). The footer/welcome/completions follow THIS cwd so a
-		* session switch updates the whole surface; `cwd` (the process cwd)
-		* stays for launch-relative concerns (`!` shell, /export paths).
+		* directory). The footer/welcome/completions AND `!`/`!!` shell runs
+		* follow THIS cwd, so a session switch moves the whole surface with the
+		* session (pi parity: `executeBash` runs in the session cwd) and a
+		* shell command executes where the completions suggest files; `cwd`
+		* (the process cwd) stays for launch-relative concerns (/export paths).
 		*/
 		const sessionCwd = () => liveAgent?.session.header.cwd ?? cwd;
 		/** The footer model label: the live selection (with effort) when one exists. */
@@ -29466,11 +30440,13 @@ function apply(ctx, config) {
 				});
 				if (includeInContext && !localSignal.aborted) submitResult(result);
 			};
-			const shell = ctx.get("shell");
+			const sandboxPreference = localShellSandboxPreferenceOf(tuiSettings?.get());
+			const shell = sandboxPreference === "sandbox" ? ctx.get("shell") : void 0;
+			if (shell === void 0 && sandboxPreference === "sandbox") app.notify("local shell sandbox unavailable in this composition — running unsandboxed", "error");
 			if (shell !== void 0) {
 				const spec = shell.resolve({
 					command,
-					workdir: cwd,
+					workdir: sessionCwd(),
 					signal: localSignal
 				});
 				runOwned("local shell", () => shell.run(spec), {
@@ -29500,7 +30476,7 @@ function apply(ctx, config) {
 				return;
 			}
 			const child = spawn(command, {
-				cwd,
+				cwd: sessionCwd(),
 				stdio: [
 					"ignore",
 					"pipe",
@@ -30063,8 +31039,7 @@ function apply(ctx, config) {
 			},
 			onDequeue: () => {
 				if (liveAgent === void 0) return;
-				const isNotice = (message) => message.source?.form === "notice";
-				const queued = [...liveAgent.inbox.nextTurn, ...liveAgent.inbox.nextStep].filter((message) => !isNotice(message));
+				const queued = [...liveAgent.inbox.nextTurn, ...liveAgent.inbox.nextStep].filter((message) => isUserQueueInput(message.source));
 				if (queued.length === 0) return;
 				for (const message of queued) liveAgent.inbox.remove(message.id);
 				const queuedText = queued.map((message) => textOf(message.content)).join("\n\n");
@@ -30072,58 +31047,7 @@ function apply(ctx, config) {
 				app.setDraft([queuedText, current].filter((part) => part.trim() !== "").join("\n\n"));
 				refreshQueue();
 			},
-			onOpenTasks: () => {
-				if (liveAgent === void 0) return;
-				let jobSnapshots = [];
-				if (jobs !== void 0) try {
-					jobSnapshots = jobs.list(liveAgent);
-				} catch {}
-				let rows = buildTaskRows(jobSnapshots, []);
-				const selectRow = (value) => {
-					const row = rows.find((candidate) => candidate.value === value);
-					if (row === void 0) return;
-					if (row.kind === "subagent") {
-						runOwned("subagent view from tasks", () => enterView(row.childId, row.label), {
-							diag,
-							sessionId: () => liveAgent?.session.id,
-							onError: (error) => app.notify(`could not open the subagent view: ${safeErrorMessage(error)}`, "error")
-						});
-						return;
-					}
-					openJobView(row.jobId);
-				};
-				const taskPanelItems = (target) => target.map((row) => row.kind === "job" ? {
-					value: row.value,
-					label: taskRowLabel(row),
-					status: row.status,
-					detail: row.detail,
-					startedAt: row.startedAt,
-					group: rowGroup(row)
-				} : {
-					value: row.value,
-					label: taskRowLabel(row),
-					status: row.activity,
-					detail: row.hasChildren ? "has children" : void 0,
-					group: rowGroup(row)
-				});
-				const handle = app.openTaskBrowser(taskPanelItems(rows), selectRow, () => {}, {
-					header: "tasks · subagents",
-					enableSearch: true
-				});
-				if (subagents !== void 0) {
-					const sessionId = liveAgent.session.id;
-					const generation = sessionGeneration;
-					runOwned("task browser children", () => subagents.listChildren(sessionId), {
-						diag,
-						sessionId: () => liveAgent?.session.id,
-						onResult: (entries) => {
-							if (sessionGeneration !== generation || liveAgent?.session.id !== sessionId) return;
-							rows = buildTaskRows(jobSnapshots, entries);
-							handle.setItems(taskPanelItems(rows));
-						}
-					});
-				}
-			}
+			onOpenTasks: () => openTasksBrowser()
 		}, {
 			present,
 			workspaceRoot: cwd,
@@ -30142,6 +31066,73 @@ function apply(ctx, config) {
 			unstableInputsRevision: () => extensionService?._unstableInputsRevision() ?? 0,
 			unstableFailSafeRelease: () => extensionService?._unstableEmergencyRelease()
 		});
+		const openTasksBrowser = () => {
+			if (liveAgent === void 0) return;
+			let jobSnapshots = [];
+			if (jobs !== void 0) try {
+				jobSnapshots = jobs.list(liveAgent);
+			} catch {}
+			let rows = buildTaskRows(jobSnapshots, []);
+			const selectRow = (value) => {
+				const row = rows.find((candidate) => candidate.value === value);
+				if (row === void 0) return;
+				if (row.kind === "subagent") {
+					runOwned("subagent view from tasks", () => enterView(row.childId, row.label), {
+						diag,
+						sessionId: () => liveAgent?.session.id,
+						onError: (error) => app.notify(`could not open the subagent view: ${safeErrorMessage(error)}`, "error")
+					});
+					return;
+				}
+				openJobView(row.jobId);
+			};
+			const actionRow = (value, action) => {
+				const row = rows.find((candidate) => candidate.value === value);
+				if (row === void 0 || row.kind !== "subagent") return;
+				const service = ctx.get("subagents");
+				if (service === void 0 || liveAgent === void 0) {
+					app.notify("subagent service unavailable", "error");
+					return;
+				}
+				service.interrupt(row.childId, {
+					kind: "user",
+					parentSessionId: liveAgent.session.id
+				});
+				app.notify(`interrupting ${row.label}`, "info");
+			};
+			const taskPanelItems = (target) => target.map((row) => row.kind === "job" ? {
+				value: row.value,
+				label: taskRowLabel(row),
+				status: row.status,
+				detail: row.detail,
+				startedAt: row.startedAt,
+				group: rowGroup(row)
+			} : {
+				value: row.value,
+				label: taskRowLabel(row),
+				status: row.activity,
+				detail: row.hasChildren ? "has children" : void 0,
+				group: rowGroup(row)
+			});
+			const handle = app.openTaskBrowser(taskPanelItems(rows), selectRow, () => {}, {
+				header: "tasks · subagents",
+				enableSearch: true,
+				onAction: actionRow
+			});
+			if (subagents !== void 0) {
+				const sessionId = liveAgent.session.id;
+				const generation = sessionGeneration;
+				runOwned("task browser children", () => subagents.listChildren(sessionId), {
+					diag,
+					sessionId: () => liveAgent?.session.id,
+					onResult: (entries) => {
+						if (sessionGeneration !== generation || liveAgent?.session.id !== sessionId) return;
+						rows = buildTaskRows(jobSnapshots, entries);
+						handle.setItems(taskPanelItems(rows));
+					}
+				});
+			}
+		};
 		if (extensionHost !== void 0 && extensionService !== void 0) {
 			app.setRendererErrorSink(({ id, error, slot }) => {
 				const message = safeErrorMessage(error).replace(/\s+/g, " ").slice(0, 200);
@@ -30186,12 +31177,14 @@ function apply(ctx, config) {
 			theme: z.string(),
 			footer: z.string(),
 			fullscreen: z.string(),
-			busyEnter: z.string()
+			busyEnter: z.string(),
+			localShellSandbox: z.string()
 		}), { base: {
 			theme: "auto",
 			footer: "full",
 			fullscreen: "on",
-			busyEnter: "queue"
+			busyEnter: "queue",
+			localShellSandbox: "bypass"
 		} });
 		if (tuiSettings?.get().fullscreen === "on") app.setFullscreen(true);
 		const storedTheme = tuiSettings?.get().theme;
@@ -30305,7 +31298,7 @@ function apply(ctx, config) {
 		* (never the output — the job's single read cursor belongs to the agent's
 		* job_output; consuming it from the UI would leave the model an
 		* incomplete result and could swallow the completion notice); a subagent
-		* job shows the status viewer with a /subagents hint. The job record
+		* job shows the status viewer with a /tasks hint. The job record
 		* carries no child session id, so label/order/time heuristics cannot
 		* distinguish a background child from a same-label foreground one-shot;
 		* the task browser therefore never opens a transcript by guess.
@@ -30338,7 +31331,7 @@ function apply(ctx, config) {
 		};
 		/**
 		* Status-only viewer for one job (never touches the read cursor). The
-		* subagent variant appends the /subagents hint because a transcript
+		* subagent variant appends the /tasks hint because a transcript
 		* cannot always be matched; the bash variant is pure status.
 		*/
 		const openJobStatusViewer = (jobId, title, snapshot) => {
@@ -30608,6 +31601,7 @@ function apply(ctx, config) {
 			refreshStatus,
 			updateWelcomeCard,
 			openJobView,
+			openTasksBrowser,
 			enterView,
 			requestExit,
 			exit
@@ -30777,10 +31771,11 @@ function apply(ctx, config) {
 				updateWelcomeCard();
 			}
 		});
-		ctx.on("credentials/updated", () => {
+		const refreshCredentialSurface = () => {
 			refreshStatus();
 			updateWelcomeCard();
-		});
+		};
+		registerCredentialSurfaceRefresh(ctx, refreshCredentialSurface);
 		if (liveAgent !== void 0) {
 			app.setPlanMode(foldPlanMode(liveAgent.session.events));
 			app.setWorking(workingFromLog(liveAgent.session.events));
@@ -30848,4 +31843,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { inject$1 as A, shouldConsumeAdvertisedMiss as C, subagentNoticeIsFailure as D, subagentJobViewHint as E, PI_TUI_EXTENSIONS_SERVICE as M, API_VERSION as N, forkSeed as O, describeKey as P, runningProfile as S, subagentJobTranscriptId as T, name as _, SessionLockRefusedError as a, resolveInitialCatalog as b, compactingFromLog as c, foldCompactionEvent as d, foldQueueRows as f, matchPendingSubagentCall as g, isSubagentSettlementNotice as h, SESSIONLESS_COMMANDS as i, name$1 as j, apply$1 as k, composeAgent as l, isPlainExitPrompt as m, HOST_COMMAND_CATALOG as n, apply as o, inject as p, LOCAL_COMMANDS as r, busyAfterTurnBoundary as s, Config as t, dangerCommand as u, recomposeBlank as v, shouldSteerOnEnter as w, resumeCommand as x, recordedPreset as y };
+export { dshVersion as A, resumeCommand as C, subagentJobTranscriptId as D, shouldSteerOnEnter as E, PI_TUI_EXTENSIONS_SERVICE as F, API_VERSION as I, describeKey as L, apply$1 as M, inject$1 as N, subagentJobViewHint as O, name$1 as P, resolveInitialCatalog as S, shouldConsumeAdvertisedMiss as T, matchPendingSubagentCall as _, SessionLockRefusedError as a, recordedPreset as b, compactingFromLog as c, foldCompactionEvent as d, foldQueueRows as f, isUserQueueInput as g, isSubagentSettlementNotice as h, SESSIONLESS_COMMANDS as i, forkSeed as j, subagentNoticeIsFailure as k, composeAgent as l, isPlainExitPrompt as m, HOST_COMMAND_CATALOG as n, apply as o, inject as p, LOCAL_COMMANDS as r, busyAfterTurnBoundary as s, Config as t, dangerCommand as u, name as v, runningProfile as w, registerCredentialSurfaceRefresh as x, recomposeBlank as y };