@xmoon76/dsh-pi-tui 0.4.3-alpha.2 → 0.4.5

package/README.en.md

@@ -19,27 +19,32 @@ Stable releases are recommended for ordinary users. Install DSH first, then add
 the TUI to the `pi-tui` profile:
 
 ```sh
-npm install -g @deepseek-ai/dsh@0.1.2-rc.1
+npm install -g --allow-scripts=@deepseek-ai/dsh-subprocess-local,koffi,node-pty,@google/genai,protobufjs,fs-ext @deepseek-ai/dsh@latest
 dsh plugin --profile pi-tui -- add @xmoon76/dsh-pi-tui@latest
 dsh --profile pi-tui
 ```
 
 ### Next / npm line (validation)
 
-The current `next` line targets the published npm release `dsh-v0.1.3-alpha.2`.
-Use the isolated npm driver (installs the exact DSH version declared by this
-checkout and exercises the full build/test/package path):
+Preview installation uses the DSH `alpha` channel and the TUI `next` channel.
+The DSH native install scripts must be explicitly allowed:
 
 ```sh
-pnpm compat:dsh:npm
+npm install -g --allow-scripts=@deepseek-ai/dsh-subprocess-local,koffi,node-pty,@google/genai,protobufjs,fs-ext @deepseek-ai/dsh@alpha
+dsh plugin --profile pi-tui -- add @xmoon76/dsh-pi-tui@next
+dsh --profile pi-tui
 ```
 
-The startup notice on an old runtime suggests the exact npm upgrade:
+Use the isolated npm driver (it installs the exact DSH version declared by this
+checkout and exercises the full build/test/package path):
 
 ```sh
-npm install -g @deepseek-ai/dsh@0.1.3-alpha.2
+pnpm compat:dsh:npm
 ```
 
+See the [compatibility guide](docs/dsh-compatibility.md) for the stable minimum,
+next compatibility range, and fallback paths.
+
 ### Requirements
 
 * DeepSeek Harness
@@ -47,35 +52,25 @@ npm install -g @deepseek-ai/dsh@0.1.3-alpha.2
 
 ### DSH/TUI version pairing (important)
 
-| TUI package line | Matching DSH line | Notes |
+| TUI package line | Official DSH tags for the pairing | Notes |
 |---|---|---|
-| `0.4.1` (published `@latest`) | `>=0.1.2-rc.1` | Historical stable; validated against the rc.1 family |
-| Current `next` npm line (this checkout; version `0.4.3-alpha.2`) | `>=0.1.3-alpha.2` | Published npm alpha.2 target; validated against the exact 0.1.3-alpha.2 family |
-| `0.3.x` (`@0.3`) | `0.1.1-rc.2` | Legacy runtime line |
-
-Do not mix the stable and `next` lines. The published 0.4.1 stable line
-still uses the 0.1.2-rc.1 family; if you keep a legacy DSH runtime, use the 0.3
-compatibility line below. This `next` checkout declares the published
-`0.1.3-alpha.2` npm floor, and older runtimes fail at the normal
-incompatible-runtime boundary. The startup row's compatibility notice is
-best-effort rather than a Loader startup-order guarantee; the suggested upgrade
-target is a published npm version.
-
-```sh
-npm install -g @deepseek-ai/dsh@0.1.1-rc.2
-dsh plugin --profile pi-tui -- add @xmoon76/dsh-pi-tui@0.3
-dsh --profile pi-tui
-```
+| `0.4.5` (published `@latest`) | `dsh-v0.1.5-rc.1`, `dsh-v0.1.5-rc.2` | Current stable line; rc.1 minimum, rc.2 compatible |
+| Current `next` npm line (this checkout; version `0.4.5`) | `dsh-v0.1.5-rc.1`, `dsh-v0.1.5-rc.2` | Current next line |
 
-The published `0.4.1` stable line declares `>=0.1.2-rc.1`; this checkout's
-`next` npm line declares `>=0.1.3-alpha.2`. `npm install -g` is only for
-installing a published DSH; to install dsh-pi-tui into a DSH profile, you must
-use the `dsh plugin` command.
+Do not mix the stable and `next` lines. The current `next` checkout declares
+the published `0.1.5-rc.1` npm floor; older runtimes fail at the normal
+incompatible-runtime boundary. The startup notice is best-effort rather than a
+Loader startup-order guarantee. See the [full historical compatibility matrix](docs/dsh-compatibility.md)
+for official-tag pairings and fallback commands, and see the [latest `next`
+README](https://github.com/XMoon/dsh-pi-tui/blob/next/README.md) for the current
+integration status.
 
 New agent sessions use the official roster's selected preset id. A custom DSH
 preset literally named `code` is valid and remains `code` when it exists in the
-current roster. Old persisted `code` defaults/session values fall back to `ptc`
-only after the roster proves that no custom `code` preset exists.
+current roster. DSH V3 migration owns historical session `code -> ptc`
+conversion, while the current projection preserves a legal custom `code`. Only
+an omitted legacy settings default `code` falls back to `ptc` after the roster
+proves that no custom `code` preset exists.
 
 ### Profile management
 
@@ -139,7 +134,8 @@ Supports persisted DSH Sessions, including:
 * Forking
 * Rewind
 * Session lineage
-* Transcript export
+* `/export` — full Session archive (descendants + attachments) saved to a Client-local directory
+* `/transcript` — readable Markdown transcript saved to a Client-local directory
 
 Use:
 
@@ -147,6 +143,8 @@ Use:
 /sessions
 /fork
 /rewind
+/export
+/transcript
 ```
 
 When the Agent is idle and the editor is empty, pressing `Esc` twice quickly also opens Rewind.
@@ -297,7 +295,7 @@ For the full `/footer` workflow, Custom Text / Command items, YAML reference, se
 | Key           | Action                                              |
 | ------------- | --------------------------------------------------- |
 | `Enter`       | Submit input                                        |
-| `Ctrl+Enter`  | Queue the draft while the agent is busy (the opposite of Enter while busy) |
+| `Ctrl+Enter`  | Submit with the OPPOSITE busy behavior (steers by default; queues when `busyEnter=steer`) |
 | `Shift+Enter` | Insert newline                                      |
 | `Esc`         | Cancel current interaction / interrupt running work |
 | `Esc Esc`     | Open Rewind while idle                              |
@@ -559,7 +557,7 @@ This section contains DSH compatibility and CI validation details only; ordinary
 ### npm mode (current `next`)
 
 The current `next` line is npm mode: it targets the published
-`dsh-v0.1.3-alpha.2` family declared by this checkout's `package.json` and
+`dsh-v0.1.5-rc.1` family declared by this checkout's `package.json` and
 resolved by its frozen lockfile. The isolated npm driver installs that exact
 family from the public registry and exercises the TUI build/test/package path:
 

package/README.md

@@ -18,27 +18,31 @@
 稳定版是普通用户的推荐渠道。请先安装 DSH，再将 TUI 添加到 `pi-tui` profile：
 
 ```sh
-npm install -g @deepseek-ai/dsh@0.1.2-rc.1
+npm install -g --allow-scripts=@deepseek-ai/dsh-subprocess-local,koffi,node-pty,@google/genai,protobufjs,fs-ext @deepseek-ai/dsh@latest
 dsh plugin --profile pi-tui -- add @xmoon76/dsh-pi-tui@latest
 dsh --profile pi-tui
 ```
 
 ### Next / npm 线（验证）
 
-当前 `next` 线以已发布的 npm 版本 `dsh-v0.1.3-alpha.2` 为兼容目标。使用
-隔离的 npm 驱动验证（安装 checkout 声明的精确 DSH 版本并跑完整
-build/test/package 路径）：
+预览安装使用 DSH 的 `alpha` channel 与 TUI 的 `next` channel；安装 DSH
+时需要显式允许其原生安装脚本：
 
 ```sh
-pnpm compat:dsh:npm
+npm install -g --allow-scripts=@deepseek-ai/dsh-subprocess-local,koffi,node-pty,@google/genai,protobufjs,fs-ext @deepseek-ai/dsh@alpha
+dsh plugin --profile pi-tui -- add @xmoon76/dsh-pi-tui@next
+dsh --profile pi-tui
 ```
 
-旧 runtime 的启动提示会给出精确的 npm 升级命令：
+隔离的 npm 驱动仍按本 checkout 声明的精确 DSH 版本运行，并执行完整的
+build/test/package 路径：
 
 ```sh
-npm install -g @deepseek-ai/dsh@0.1.3-alpha.2
+pnpm compat:dsh:npm
 ```
 
+具体的稳定版最低版本、next 兼容范围和回退路径见[兼容性文档](docs/dsh-compatibility.md)。
+
 ### 环境要求
 
 * DeepSeek Harness
@@ -46,33 +50,21 @@ npm install -g @deepseek-ai/dsh@0.1.3-alpha.2
 
 ### DSH 与 TUI 版本对应（重要）
 
-| TUI 包版本 | 对应 DSH 版本 | 说明 |
+| TUI 包版本 | 对应的官方 DSH tags | 说明 |
 |---|---|---|
-| `0.4.1`（已发布 `@latest`） | `>=0.1.2-rc.1` | 历史稳定版；按 0.1.2-rc.1 family 验证 |
-| 当前 `next` npm 线（本 checkout；版本 `0.4.3-alpha.2`） | `>=0.1.3-alpha.2` | 已发布的 npm alpha.2 目标；按精确 0.1.3-alpha.2 family 验证 |
-| `0.3.x`（`@0.3`） | `0.1.1-rc.2` | 旧运行时兼容线 |
-
-不要把稳定线与 `next` 线混装。已发布的 0.4.1 稳定线仍按
-0.1.2-rc.1 family 使用；保留旧 DSH 时请使用下方的 0.3 兼容线。当前
-`next` checkout 的 peer floor 是 `>=0.1.3-alpha.2`，旧 runtime 会在正常的
-不兼容边界以非零状态失败。启动行的兼容提示是 best-effort，不是 Loader
-启动顺序保证；它建议的升级目标是已发布的 npm 版本。
-
-```sh
-npm install -g @deepseek-ai/dsh@0.1.1-rc.2
-dsh plugin --profile pi-tui -- add @xmoon76/dsh-pi-tui@0.3
-dsh --profile pi-tui
-```
+| `0.4.5`（已发布 `@latest`） | `dsh-v0.1.5-rc.1`、`dsh-v0.1.5-rc.2` | 当前稳定版；最低 rc.1，兼容 rc.2 |
+| 当前 `next` npm 线（本 checkout；版本 `0.4.5`） | `dsh-v0.1.5-rc.1`、`dsh-v0.1.5-rc.2` | 当前 next 线 |
 
-已发布的 `0.4.1` 稳定线声明支持范围是 `>=0.1.2-rc.1`；本 checkout 的
-`next` npm 线则声明 `>=0.1.3-alpha.2`。`npm install -g` 仅用于
-安装已发布的 DSH；要将 dsh-pi-tui 安装进 DSH profile，必须使用
-`dsh plugin` 命令。
+不要把稳定线与 `next` 线混装。当前 `next` checkout 的 peer floor 是
+`>=0.1.5-rc.1`，旧 runtime 会在正常的不兼容边界以非零状态失败。完整的
+历史兼容矩阵和 fallback 命令见 [兼容性文档](docs/dsh-compatibility.md)；
+要查看 next 的最新集成状态，请看 [next 分支 README](https://github.com/XMoon/dsh-pi-tui/blob/next/README.md)。
 
 新的 Agent preset 使用当前 roster 中选定的 id。DSH 允许合法的自定义
 `code` preset；只要当前 roster 存在它，显式输入和持久化状态都会保留 `code`。
-旧数据中省略请求的 `code` default/session 值只有在确认 roster 不含 `code` 后
-才会回退到 `ptc`。
+DSH V3 migration 负责历史 session header/selection 的 `code -> ptc` 转换；
+当前 projection 会原样保留合法的自定义 `code`。只有省略请求的 legacy
+settings default `code` 才会在确认 roster 不含 `code` 后回退到 `ptc`。
 
 ### Profile management
 
@@ -136,7 +128,8 @@ dsh --profile pi-tui --session <session-id>
 * Fork
 * Rewind
 * Session lineage
-* Transcript 导出
+* `/export` — 完整 Session 归档(含子代理与附件),保存到 Client 本地目录
+* `/transcript` — 可读 Markdown 对话记录,保存到 Client 本地目录
 
 使用：
 
@@ -144,6 +137,8 @@ dsh --profile pi-tui --session <session-id>
 /sessions
 /fork
 /rewind
+/export
+/transcript
 ```
 
 空闲且编辑器为空时也可以快速按两次 `Esc` 打开 Rewind。
@@ -286,7 +281,7 @@ TUI 使用 DSH 提供的模型和设置服务。
 | 按键            | 功能                     |
 | ------------- | ---------------------- |
 | `Enter`       | 提交输入                   |
-| `Ctrl+Enter`  | Agent 忙碌时把草稿入队(与 Enter 相反) |
+| `Ctrl+Enter`  | 与 Enter 的忙碌行为相反(默认 steer,`busyEnter=steer` 时入队) |
 | `Shift+Enter` | 换行                     |
 | `Esc`         | 取消当前交互 / 中断运行          |
 | `Esc Esc`     | 空闲时打开 Rewind           |
@@ -538,7 +533,7 @@ dsh --profile pi-tui-dev
 ### npm 模式（当前 `next`）
 
 当前 `next` 线是 npm 模式：以本 checkout 的 `package.json` 声明、冻结
-lockfile 解析的已发布 `dsh-v0.1.3-alpha.2` family 为兼容目标。隔离的 npm
+lockfile 解析的已发布 `dsh-v0.1.5-rc.1` family 为兼容目标。隔离的 npm
 驱动从公共 registry 安装该精确 family，并跑完整 build/test/package 路径：
 
 ```sh

package/cordis.patch.yml

@@ -42,11 +42,12 @@
     - id: authorization
       name: '@deepseek-ai/dsh-authorization'
 
-    # Consume DSH 0.1.2's official shipped presets directly. The upstream
+    # Official shipped presets are the composition authority. The upstream
     # service defaults includeShippedRoot/includeUserRoot to true, so this
     # bundle deliberately owns no duplicate standard/ptc/minimal/cordis root.
-    # The legacy persisted id `code` is normalized at the data boundary to
-    # `ptc`; it is not another preset row.
+    # DSH's V2→V3 format migration owns historical session preset conversion;
+    # the settings/default compatibility shim is kept separately at the TUI
+    # request boundary and does not add another preset row.
     - id: agent-presets
       name: '@deepseek-ai/dsh-agent-presets'
       config:

package/dist/builtins.mjs

@@ -1,4 +1,4 @@
-import { I as dshVersion, V as PI_TUI_EXTENSIONS_SERVICE } from "./src-BL4AomX5.mjs";
+import { W as PI_TUI_EXTENSIONS_SERVICE, z as dshVersion } from "./src-B65x1oP2.mjs";
 import { TUI_STARTUP_SERVICE } from "./startup.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";

package/dist/extension/advanced.d.mts

@@ -1,4 +1,4 @@
-import { D as PiTuiApiInfo, E as NormalizedKey, _ as ExtensionTier, h as EditorSnapshot, ot as TuiOverlayOptions, v as ExtensionView } from "../public-types-_pe9ZH00.mjs";
+import { D as PiTuiApiInfo, E as NormalizedKey, _ as ExtensionTier, h as EditorSnapshot, ot as TuiOverlayOptions, v as ExtensionView } from "../public-types-YbB5Rhku.mjs";
 
 //#region src/extension/advanced-types.d.ts
 /** API level of the advanced tier. Bumped only on advanced breaking changes. */
@@ -8,6 +8,15 @@ declare const ADVANCED_API_LEVEL: 1;
  * sees. The Host has already decoded the terminal protocol (legacy + Kitty
  * CSI-u + modifyOtherKeys encodings, bracketed paste, key release/repeat
  * filtering), so an advanced plugin behaves identically on every terminal.
+ *
+ * EXPLICIT NON-EXPANSION (v0.85.1 mouse parity audit): this contract
+ * deliberately does NOT carry pointer/mouse events. Advanced interactive
+ * custom surfaces remain keyboard-input surfaces by contract; no raw
+ * mouse bytes are exposed and no API-level mouse feature is added here.
+ * A pointer-capable Advanced plugin API would require normalized mouse
+ * event design, capture ordering, docs, packed declaration checks and
+ * plugin migration semantics — a dedicated follow-up design, not a
+ * side effect of Host v0.85.1 integration.
  */
 type AdvancedInputEvent = /** One key press, normalized to the semantic identity. */{
   readonly kind: 'key';

package/dist/extension/unstable.d.mts

@@ -1,4 +1,4 @@
-import { D as PiTuiApiInfo, _ as ExtensionTier, ot as TuiOverlayOptions } from "../public-types-_pe9ZH00.mjs";
+import { D as PiTuiApiInfo, _ as ExtensionTier, ot as TuiOverlayOptions } from "../public-types-YbB5Rhku.mjs";
 
 //#region src/extension/unstable-types.d.ts
 /** API level of the unstable tier. Bumped only on unstable breaking changes. */

package/dist/extensions.d.mts

@@ -1,4 +1,4 @@
-import { $ as TuiKeybindingContribution, A as PiTuiSlotSemantic, B as TextView, C as InputWidget, D as PiTuiApiInfo, E as NormalizedKey, F as SpacerView, G as TuiAutocompleteQuery, H as TuiAction, I as StackView, J as TuiColorPalette, K as TuiAutocompleteRegistryView, L as StyledSpan, M as RegistrationSpec, N as RowsView, O as PiTuiCapability, P as SessionSnapshot, Q as TuiCommandHandle, R as SurfaceSnapshot, S as HeaderBadge, T as MessagePresentationSnapshot, U as TuiAutocompleteItem, V as ToolPresentationSnapshot, W as TuiAutocompleteProvider, X as TuiCommandBridgeView, Y as TuiCommandBridgeSnapshot, Z as TuiCommandContribution, _t as TuiThemeRegistrySnapshot, a as ContributionHealth, at as TuiOverlayHandle, b as FooterSegment, bt as describeKey, c as DockItem, ct as TuiRendererRegistrySnapshot, d as EditorHost, dt as TuiSettingHandle, et as TuiKeybindingHandle, f as EditorHostAction, ft as TuiSettingsRegistrySnapshot, g as ExtensionEditor, gt as TuiThemeHandle, h as EditorSnapshot, ht as TuiThemeContribution, i as AutocompleteProviderContribution, it as TuiMessageRendererContribution, j as RegistrationHandle, k as PiTuiSlotName, l as EditorContribution, lt as TuiRendererRegistryView, m as EditorInputEvent, mt as TuiSizeValue, n as ActivitySnapshot, nt as TuiKeybindingRegistryView, o as ContributionRecord, ot as TuiOverlayOptions, p as EditorHostActionResult, pt as TuiSettingsRegistryView, q as TuiAutocompleteSuggestions, r as AutocompleteHandle, rt as TuiLocalCommandHandler, s as ContributionState, st as TuiRendererHandle, t as API_VERSION, tt as TuiKeybindingRegistrySnapshot, u as EditorHandle, ut as TuiSettingContribution, v as ExtensionView, vt as TuiThemeRegistryView, w as MarkdownView, x as FrameView, y as FooterItemContribution, yt as TuiToolRendererContribution, z as SurfaceStateValues } from "./public-types-_pe9ZH00.mjs";
+import { $ as TuiKeybindingContribution, A as PiTuiSlotSemantic, B as TextView, C as InputWidget, D as PiTuiApiInfo, E as NormalizedKey, F as SpacerView, G as TuiAutocompleteQuery, H as TuiAction, I as StackView, J as TuiColorPalette, K as TuiAutocompleteRegistryView, L as StyledSpan, M as RegistrationSpec, N as RowsView, O as PiTuiCapability, P as SessionSnapshot, Q as TuiCommandHandle, R as SurfaceSnapshot, S as HeaderBadge, T as MessagePresentationSnapshot, U as TuiAutocompleteItem, V as ToolPresentationSnapshot, W as TuiAutocompleteProvider, X as TuiCommandBridgeView, Y as TuiCommandBridgeSnapshot, Z as TuiCommandContribution, _t as TuiThemeRegistrySnapshot, a as ContributionHealth, at as TuiOverlayHandle, b as FooterSegment, bt as describeKey, c as DockItem, ct as TuiRendererRegistrySnapshot, d as EditorHost, dt as TuiSettingHandle, et as TuiKeybindingHandle, f as EditorHostAction, ft as TuiSettingsRegistrySnapshot, g as ExtensionEditor, gt as TuiThemeHandle, h as EditorSnapshot, ht as TuiThemeContribution, i as AutocompleteProviderContribution, it as TuiMessageRendererContribution, j as RegistrationHandle, k as PiTuiSlotName, l as EditorContribution, lt as TuiRendererRegistryView, m as EditorInputEvent, mt as TuiSizeValue, n as ActivitySnapshot, nt as TuiKeybindingRegistryView, o as ContributionRecord, ot as TuiOverlayOptions, p as EditorHostActionResult, pt as TuiSettingsRegistryView, q as TuiAutocompleteSuggestions, r as AutocompleteHandle, rt as TuiLocalCommandHandler, s as ContributionState, st as TuiRendererHandle, t as API_VERSION, tt as TuiKeybindingRegistrySnapshot, u as EditorHandle, ut as TuiSettingContribution, v as ExtensionView, vt as TuiThemeRegistryView, w as MarkdownView, x as FrameView, y as FooterItemContribution, yt as TuiToolRendererContribution, z as SurfaceStateValues } from "./public-types-YbB5Rhku.mjs";
 import { Context, Service } from "@deepseek-ai/cordis";
 
 //#region src/extension/service.d.ts
@@ -26,9 +26,12 @@ interface PiTuiExtensionService {
    */
   subscribeState(listener: (state: SurfaceStateValues) => void): () => void;
   /**
-   * Register a TUI command contribution (M5): execution ownership metadata
-   * over an existing command. The bridge does NOT execute — actual
-   * execution stays in the commands service. Owned by the calling fiber.
+   * Register a CLIENT-OWNED command contribution (M5): a slash name whose
+   * behavior lives entirely on the client (the DSH client command
+   * contribution shape). It joins the `/` menu merged with the host catalog
+   * and the runner executes its own `handler` locally; a name that is also a
+   * host command fails loud at candidate synthesis and never shadows it.
+   * Owned by the calling fiber.
    * @param contribution - the command contribution.
    */
   registerCommand(contribution: TuiCommandContribution): TuiCommandHandle;

package/dist/extensions.mjs

@@ -1,3 +1,3 @@
-import { B as name, H as API_VERSION, R as apply, U as describeKey, V as PI_TUI_EXTENSIONS_SERVICE, z as inject } from "./src-BL4AomX5.mjs";
+import { G as API_VERSION, H as inject, K as describeKey, U as name, V as apply, W as PI_TUI_EXTENSIONS_SERVICE } from "./src-B65x1oP2.mjs";
 import "./startup.mjs";
 export { API_VERSION, PI_TUI_EXTENSIONS_SERVICE, apply, describeKey, inject, name };

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { H as TuiAction } from "./public-types-_pe9ZH00.mjs";
+import { H as TuiAction } from "./public-types-YbB5Rhku.mjs";
 import z from "@deepseek-ai/schemastery";
 import { Agent, ModelSelectionRef } from "@deepseek-ai/dsh-agent";
 import { ContentBlock } from "@deepseek-ai/dsh-llm";
@@ -140,6 +140,13 @@ interface Diag {
  * being committed). Derived by the runner from compaction/start →
  * compaction/summary → compaction/end (foldCompactionEvent). */
 type CompactionPhase = 'idle' | 'summarizing' | 'applying';
+/**
+ * The WEB composer submit gestures (DSH `ComposerSubmitGesture`): plain
+ * Enter, or the Cmd/Ctrl-accelerated chord. The busy-Enter policy resolves
+ * each to a delivery mode — plain Enter to the preferred mode, the
+ * accelerated chord to its OPPOSITE — so the chord is never a fixed mode.
+ */
+type ComposerSubmitGesture = 'enter' | 'accelerated';
 /** One queued inbox row for the queue pane (mirrors the agent Inbox's lists). */
 interface QueueItem {
   /** The pending message id (agent inbox identity). */
@@ -161,6 +168,11 @@ interface SurfaceCommandSummary {
   readonly description: string;
   readonly input?: {
     readonly hint: string;
+    /** The descriptor's attachment declaration (DSH
+     * `CommandInputDescriptor.attachments`): ONLY a command declaring it may
+     * be invoked with composer attachments (the composer-side half of the
+     * contract — the host executor enforces the other half at admission). */
+    readonly attachments?: boolean;
   };
 }
 /** One provider's detached failure text (never the thrown value itself). */
@@ -201,6 +213,34 @@ interface SurfaceCatalogContext {
  * @returns the fork seed events, or undefined.
  */
 declare function forkSeed(events: readonly SessionEvent[]): readonly SessionEvent[] | undefined;
+/**
+ * The effective mode ONE submission resolved at the submit boundary: whether
+ * an agent-facing delivery steers into the running turn or queues behind it
+ * (web `ComposerSubmissionPolicy` parity — an idle agent queues, plain Enter
+ * takes the preference, and the accelerated chord takes its OPPOSITE).
+ *
+ * It is a property of the GESTURE, not of the persisted settings: a one-shot
+ * gesture exists only inside the dispatch that resolved it, so every
+ * downstream consumer (the TUI skill delivery) accepts this value instead of
+ * re-deriving the mode from `busyEnter`.
+ */
+type SubmitDelivery = 'steer' | 'queue';
+/**
+ * The CURRENT host catalog's view of ONE parsed line (the DSH client
+ * `CommandUiRuntime.matchEnter` decision table): whether the host CLAIMS the
+ * line, and — for a claimed line — the claiming descriptor's attachment
+ * declaration, so the dispatch can never consult two different catalog views
+ * for the claim and the declaration.
+ */
+type HostCommandClaim = {
+  readonly claimed: true;
+  /** The claiming descriptor's `input.attachments`
+   * (DSH `CommandInputDescriptor.attachments`): only a declaring command
+   * may be invoked with composer attachments. */
+  readonly attachments: boolean;
+} | {
+  readonly claimed: false;
+};
 //#endregion
 //#region src/index.d.ts
 /** Stable Cordis plugin name. */
@@ -258,38 +298,103 @@ declare const LOCAL_COMMANDS: Set<string>;
  * @param parsed - the parsed slash command, undefined for a plain prompt.
  * @param text - the submission text.
  * @param store - the live draft store.
- * @param isLocal - whether the command name is a LOCAL (TUI-owned/UI)
- *   command; skill names answer false.
+ * @param isLocal - whether THIS LINE is a LOCAL (TUI-owned/UI) command; skill
+ *   names answer false. Never derived from the name alone: a host command's
+ *   input KIND decides which line it claims (see
+ *   {@link commandIsLocalForAttachments}).
  */
 declare function commandRejectsImages(parsed: {
   name: string;
-} | undefined, text: string, store: DraftImageStoreLike, isLocal: (name: string) => boolean): boolean;
+  rawInput?: string;
+} | undefined, text: string, store: DraftImageStoreLike, isLocal: boolean): boolean;
 /**
- * The AUTHORITATIVE host-owned command catalog (P1-04): every command name
- * the TUI registers itself (registerTuiCommands in commands.ts) plus the
- * ownership sets (LOCAL_COMMANDS and SESSIONLESS_COMMANDS — /kill and
- * other core commands the TUI does not register but dispatches locally).
- * A plugin command contribution is validated against this catalog at
- * register time: an exact or near-synonym collision is rejected loudly,
- * so a plugin can never shadow a built-in command.
+ * The STATIC host-owned command catalog (P1-04): the ownership sets
+ * (LOCAL_COMMANDS and SESSIONLESS_COMMANDS — the TUI's own local/UI command
+ * names, including the ones `registerTuiCommands` registers, plus core
+ * commands such as /kill that the TUI does not register but dispatches
+ * locally) and `/plan`. A plugin command contribution is validated against
+ * this fixed catalog at register time: an exact or near-synonym collision is
+ * rejected loudly, so a plugin can never shadow a built-in command. Names
+ * that only the CURRENT host catalog owns (session-scoped or dynamically
+ * registered commands) are not in this set — those collisions surface at
+ * candidate synthesis time instead.
  */
 declare const HOST_COMMAND_CATALOG: ReadonlySet<string>;
 /**
- * Whether one submission steers under the busy-Enter preference: NOT a
- * force-queued chord, NOT a TUI-owned local command, and the agent is
- * running with the preference set to 'steer'. Pure so the dispatch gate
- * (inside the runner closure) is testable headless.
+ * The TUI-local classification the attachment gate uses: a TUI/core local
+ * command or a live client command contribution is LOCAL (its line is a UI
+ * control — attachments are refused), while a LIVE skill wrapper is
+ * AGENT-FACING input (multimodal) even when a client contribution shares its
+ * name: the wrapper route outranks the contribution everywhere.
+ * @param name - the slash name.
+ * @param isSkillWrapper - the live skill-wrapper test (absent = none).
+ * @param isDynamicLocal - the live client-contribution test (absent = none).
+ * @param hostView - the host catalog's view of THIS LINE (`undefined` = the
+ *   catalog does not resolve the name at all; see {@link HostCommandClaim}).
+ *   A name the catalog RESOLVES is never a client-local line: when the
+ *   catalog claims the line the host's own `input.attachments` declaration
+ *   decides, and when it does not (an argued line of an execute-kind
+ *   command) the line is an ordinary submission — never a same-named client
+ *   contribution's.
+ */
+declare function isLocalCommandLine(name: string, isSkillWrapper: ((name: string) => boolean) | undefined, isDynamicLocal: ((name: string) => boolean) | undefined, hostView?: HostCommandClaim | undefined): boolean;
+/**
+ * Whether one parsed line is the BARE slash token (DSH `matchEnter`'s `bare`:
+ * no input follows the name — trailing whitespace is not input). It is the
+ * whole difference between a command invocation and an ordinary submission
+ * for the NAME-keyed client routes: a client command contribution claims the
+ * bare token only, exactly like an execute-kind host command.
+ * @param parsed - the parsed slash command.
+ * @returns whether the line carries no input after the command name.
+ */
+declare function isBareCommandLine(parsed: {
+  name: string;
+  rawInput?: string;
+}): boolean;
+/**
+ * The attachment gate's local-command classification for ONE parsed line —
+ * the SINGLE classification the dispatch and its regression tests share, and
+ * the DSH client namespace order applied to a LINE:
+ * - a TUI/core local command is local;
+ * - `/skill <name> ...` and a LIVE skill wrapper are agent-facing
+ *   (multimodal) even when a client contribution shares the name;
+ * - a name the HOST catalog RESOLVES is never local: when the catalog claims
+ *   the line, the claiming descriptor's `input.attachments` declaration
+ *   decides (`/goal <objective>` is claimed), and when it does not (an argued
+ *   line of an execute-kind command, `/compact extra`) the line is an
+ *   ordinary submission — never a command and never a same-named client
+ *   contribution's;
+ * - everything else follows the live client contribution of that name — for
+ *   the BARE token only: a contribution claims `/name`, so an argued line
+ *   (`/deploy explain`) is an ordinary multimodal submission that keeps its
+ *   attachments.
+ * @param parsed - the parsed slash command (undefined = plain prompt).
+ * @param isSkillWrapper - the live skill-wrapper test (absent = none).
+ * @param isDynamicLocal - the live client-contribution test (absent = none).
+ * @param hostClaim - the live HOST-catalog view of THIS LINE (absent = none).
+ * @returns whether the line is a local command line.
+ */
+declare function commandIsLocalForAttachments(parsed: {
+  name: string;
+  rawInput?: string;
+} | undefined, isSkillWrapper: ((name: string) => boolean) | undefined, isDynamicLocal: ((name: string) => boolean) | undefined, hostClaim?: ((parsed: {
+  name: string;
+  rawInput?: string;
+}) => HostCommandClaim | undefined) | undefined): boolean;
+/**
+ * The TUI dispatch boundary's delivery resolution: the WEB composer policy
+ * ({@link resolveComposerDelivery}) applied to agent-facing input, with the
+ * TUI's own ownership terms on top. Pure so the dispatch gate (inside the
+ * runner closure) is testable headless.
  * @param parsed - the parsed slash command, undefined for a plain prompt.
  * @param running - whether the live agent reports running.
+ * @param gesture - the composer gesture that raised the submission.
  * @param busyEnter - the persisted preference value (''/undefined = queue).
- * @param forceQueue - the Ctrl+Enter chord: always queue, never steer.
- * @param isDynamicLocal - M5: the CommandBridge's effective-local check for
- *   plugin-declared local commands (absent = static set only).
  */
-declare function shouldSteerOnEnter(parsed: {
+declare function resolveSubmitDelivery(parsed: {
   name: string;
   rawInput?: string;
-} | undefined, running: boolean, busyEnter: string | undefined, forceQueue: boolean, isDynamicLocal?: (name: string) => boolean): boolean;
+} | undefined, running: boolean, gesture: ComposerSubmitGesture, busyEnter: string | undefined): SubmitDelivery;
 /**
  * Normalize an explicit `/skill <name> <args>` invocation to the skill's
  * own slash line `/<name> <args>` (review finding 2). The harness's
@@ -313,7 +418,10 @@ declare function normalizeSkillInvocation(text: string): string | undefined;
  * unadvertised miss keeps the existing plain-input fallback (the user may
  * deliberately send slash text to the model).
  * @param execution - the settled `commands.execute` outcome.
- * @param wasAdvertised - the claim captured BEFORE session creation.
+ * @param wasAdvertised - whether the submission was an advertised command
+ *   INVOCATION: the submit-time name claim AND the command plane's final
+ *   ownership of the line (an argued line of an execute-kind command never
+ *   reached the plane, so it is an ordinary submission).
  * @returns whether the miss must be consumed as an advertised miss.
  */
 declare function shouldConsumeAdvertisedMiss(execution: {
@@ -669,6 +777,16 @@ interface AgentComposition {
   /** Preset id for the session header, absent when the deployment composes no roster. */
   agentPreset?: string;
   /** Agent-factory setup: model selection, then the preset mount when composed. */
+  setup: (agentCtx: Context, agent: Agent) => Promise<void> | void;
+}
+/**
+ * Source-compatible composition returned for standalone callers that provide
+ * their own ModelSelectionRef instead of an Agent-local installer.
+ */
+interface LegacyAgentComposition {
+  /** Preset id for the session header, absent when the deployment composes no roster. */
+  agentPreset?: string;
+  /** Standalone setup installs the caller-owned model selection ref. */
   setup: (agentCtx: Context) => Promise<void> | void;
 }
 /**
@@ -685,9 +803,10 @@ interface AgentComposition {
  * host composition, which is the behavior before presets existed.
  * @param ctx - the runner context (services read through `ctx.get`).
  * @param installSelection - installs a fresh Agent-local model selection ref
- *   during setup. A ModelSelectionRef is still accepted for source
- *   compatibility with standalone composition callers; the runner always
- *   supplies the Agent-local installer.
+ *   during setup using the explicit Agent identity supplied by DSH. A
+ *   ModelSelectionRef is also accepted for source compatibility with
+ *   standalone composition callers; that branch installs the caller-owned ref
+ *   and does not require an Agent.
  * @param presetId - the requested preset, or `undefined` for the default.
  * @param focusState - the shared Focus runtime state (STRUCTURAL on
  *   purpose: the public declaration bundle must not inline src/focus.ts —
@@ -700,12 +819,15 @@ interface AgentComposition {
  * @returns the id to record on the header (absent without a roster) and the setup callback.
  * @throws when the roster supplies no such preset.
  */
-declare function composeAgent(ctx: Context, installSelection: ((agentCtx: Context) => void) | ModelSelectionRef, presetId?: string, focusState?: {
+declare function composeAgent(ctx: Context, installSelection: ModelSelectionRef, presetId?: string, focusState?: {
+  enabled: boolean;
+}, diag?: Diag): Promise<LegacyAgentComposition>;
+declare function composeAgent(ctx: Context, installSelection: (agentCtx: Context, agent: Agent) => void, presetId?: string, focusState?: {
   enabled: boolean;
 }, diag?: Diag): Promise<AgentComposition>;
 /**
- * The preset a persisted session actually runs, resolved by the DSH 0.1.2+
- * session projection (header initialization plus the latest selection event).
+ * The preset a persisted session actually runs, read from DSH 0.1.5-rc.1's
+ * V3 session projection (header initialization plus the latest selection event).
  * @param ctx - the runner context.
  * @param sessionId - the persisted session id.
  * @returns the recorded preset id, or undefined to compose the default.
@@ -751,4 +873,4 @@ declare function recomposeBlank(ctx: Context, agent: {
  */
 declare function apply(ctx: Context, config: Config): void;
 //#endregion
-export { AgentComposition, CompactionFold, CompactionSettleSurface, Config, HOST_COMMAND_CATALOG, InitialCatalogResolution, InterruptAgentLike, InterruptWriterLike, LOCAL_COMMANDS, PendingSubagentCall, QueueFoldResult, QueueInboxMessage, QueueNoticeSource, RecomposableSession, RecomposeOutcome, ResolveInitialCatalogOptions, SESSIONLESS_COMMANDS, ViewerOpenToken, apply, busyAfterTurnBoundary, commandRejectsImages, compactingFromLog, composeAgent, contextRefreshKind, createViewerOpenToken, dangerCommand, foldCompactionEvent, foldQueueRows, forkSeed, inject, interruptAgent, isPlainExitPrompt, isSubagentSettlementNotice, isUserQueueInput, matchPendingSubagentCall, name, normalizeSkillInvocation, recomposeBlank, recordedPreset, resolveInitialCatalog, resumeCommand, runningProfile, settleCompactionSurface, shouldConsumeAdvertisedMiss, shouldSteerOnEnter, subagentJobTranscriptId, subagentJobViewHint, subagentNoticeIsFailure, teardownViewerForSessionSwap, viewerActionCapability };
+export { AgentComposition, CompactionFold, CompactionSettleSurface, Config, HOST_COMMAND_CATALOG, InitialCatalogResolution, InterruptAgentLike, InterruptWriterLike, LOCAL_COMMANDS, PendingSubagentCall, QueueFoldResult, QueueInboxMessage, QueueNoticeSource, RecomposableSession, RecomposeOutcome, ResolveInitialCatalogOptions, SESSIONLESS_COMMANDS, ViewerOpenToken, apply, busyAfterTurnBoundary, commandIsLocalForAttachments, commandRejectsImages, compactingFromLog, composeAgent, contextRefreshKind, createViewerOpenToken, dangerCommand, foldCompactionEvent, foldQueueRows, forkSeed, inject, interruptAgent, isBareCommandLine, isLocalCommandLine, isPlainExitPrompt, isSubagentSettlementNotice, isUserQueueInput, matchPendingSubagentCall, name, normalizeSkillInvocation, recomposeBlank, recordedPreset, resolveInitialCatalog, resolveSubmitDelivery, resumeCommand, runningProfile, settleCompactionSurface, shouldConsumeAdvertisedMiss, subagentJobTranscriptId, subagentJobViewHint, subagentNoticeIsFailure, teardownViewerForSessionSwap, viewerActionCapability };

package/dist/index.mjs

@@ -1,3 +1,3 @@
-import { A as shouldSteerOnEnter, C as recomposeBlank, D as runningProfile, E as resumeCommand, F as viewerActionCapability, L as forkSeed, M as subagentJobViewHint, N as subagentNoticeIsFailure, O as settleCompactionSurface, P as teardownViewerForSessionSwap, S as normalizeSkillInvocation, T as resolveInitialCatalog, _ as isPlainExitPrompt, a as apply, b as matchPendingSubagentCall, c as compactingFromLog, d as createViewerOpenToken, f as dangerCommand, g as interruptAgent, h as inject, i as SESSIONLESS_COMMANDS, j as subagentJobTranscriptId, k as shouldConsumeAdvertisedMiss, l as composeAgent, m as foldQueueRows, n as HOST_COMMAND_CATALOG, o as busyAfterTurnBoundary, p as foldCompactionEvent, r as LOCAL_COMMANDS, s as commandRejectsImages, t as Config, u as contextRefreshKind, v as isSubagentSettlementNotice, w as recordedPreset, x as name, y as isUserQueueInput } from "./src-BL4AomX5.mjs";
+import { A as resumeCommand, B as forkSeed, C as matchPendingSubagentCall, D as recordedPreset, E as recomposeBlank, F as subagentJobViewHint, I as subagentNoticeIsFailure, L as teardownViewerForSessionSwap, M as settleCompactionSurface, N as shouldConsumeAdvertisedMiss, O as resolveInitialCatalog, P as subagentJobTranscriptId, R as viewerActionCapability, S as isUserQueueInput, T as normalizeSkillInvocation, _ as interruptAgent, a as apply, b as isPlainExitPrompt, c as commandRejectsImages, d as contextRefreshKind, f as createViewerOpenToken, g as inject, h as foldQueueRows, i as SESSIONLESS_COMMANDS, j as runningProfile, k as resolveSubmitDelivery, l as compactingFromLog, m as foldCompactionEvent, n as HOST_COMMAND_CATALOG, o as busyAfterTurnBoundary, p as dangerCommand, r as LOCAL_COMMANDS, s as commandIsLocalForAttachments, t as Config, u as composeAgent, v as isBareCommandLine, w as name, x as isSubagentSettlementNotice, y as isLocalCommandLine } from "./src-B65x1oP2.mjs";
 import "./startup.mjs";
-export { Config, HOST_COMMAND_CATALOG, LOCAL_COMMANDS, SESSIONLESS_COMMANDS, apply, busyAfterTurnBoundary, commandRejectsImages, compactingFromLog, composeAgent, contextRefreshKind, createViewerOpenToken, dangerCommand, foldCompactionEvent, foldQueueRows, forkSeed, inject, interruptAgent, isPlainExitPrompt, isSubagentSettlementNotice, isUserQueueInput, matchPendingSubagentCall, name, normalizeSkillInvocation, recomposeBlank, recordedPreset, resolveInitialCatalog, resumeCommand, runningProfile, settleCompactionSurface, shouldConsumeAdvertisedMiss, shouldSteerOnEnter, subagentJobTranscriptId, subagentJobViewHint, subagentNoticeIsFailure, teardownViewerForSessionSwap, viewerActionCapability };
+export { Config, HOST_COMMAND_CATALOG, LOCAL_COMMANDS, SESSIONLESS_COMMANDS, apply, busyAfterTurnBoundary, commandIsLocalForAttachments, commandRejectsImages, compactingFromLog, composeAgent, contextRefreshKind, createViewerOpenToken, dangerCommand, foldCompactionEvent, foldQueueRows, forkSeed, inject, interruptAgent, isBareCommandLine, isLocalCommandLine, isPlainExitPrompt, isSubagentSettlementNotice, isUserQueueInput, matchPendingSubagentCall, name, normalizeSkillInvocation, recomposeBlank, recordedPreset, resolveInitialCatalog, resolveSubmitDelivery, resumeCommand, runningProfile, settleCompactionSurface, shouldConsumeAdvertisedMiss, subagentJobTranscriptId, subagentJobViewHint, subagentNoticeIsFailure, teardownViewerForSessionSwap, viewerActionCapability };