@xmoon76/dsh-pi-tui 0.4.8 → 0.4.9

package/dist/{src-R8SVGB-L.mjs → src-BAwPimrH.mjs}

@@ -1,4 +1,4 @@
-import { n as TUI_STARTUP_SERVICE } from "./startup-Cd07dCyh.mjs";
+import { n as TUI_STARTUP_SERVICE } from "./startup-xTIOW90U.mjs";
 import { createRequire } from "node:module";
 import { createHash, randomUUID } from "node:crypto";
 import { StringDecoder } from "node:string_decoder";
@@ -383,10 +383,26 @@ function requestHeaderOf(agent) {
 */
 var DirectModelSelectionOwner = class {
 	installed = /* @__PURE__ */ new WeakMap();
+	/** The per-Agent model-selection / image prompt-admission chain (rc.2
+	*  `ApiSessionAgentController.serializeImageAdmission`). Overlapping model
+	*  selections and image-bearing prompt admissions therefore apply in call
+	*  order instead of racing each other. */
+	admissionChains = /* @__PURE__ */ new WeakMap();
 	defaultModel;
 	constructor(defaultModel) {
 		this.defaultModel = defaultModel;
 	}
+	/**
+	* Run one operation inside the Agent's serialization window. The chain
+	* swallows each settled result so a failed operation never poisons the
+	* queue, while the returned promise still rejects to its own caller.
+	*/
+	serializeImageAdmission(agent, operation) {
+		const live = agent;
+		const result = (this.admissionChains.get(live) ?? Promise.resolve()).then(operation);
+		this.admissionChains.set(live, result.then(() => void 0, () => void 0));
+		return result;
+	}
 	/** Read the current process default without retaining its object identity. */
 	defaultSelection() {
 		return agentSelection(selectionValue(this.defaultModel.currentSelection()));
@@ -24828,7 +24844,7 @@ const selectListTheme = {
 	groupHeader: (text) => chalk.bold.hex(currentPalette.textMuted)(text)
 };
 /**
-* Status-dot colour for a background-job status (dsh-web StateDot parity:
+* Status-dot colour for a job status (dsh-web StateDot parity:
 * running = ongoing/primary, stopping/killed = warning, completed = done/dim,
 * failed/timed-out/lost = error). Unknown statuses fall back to the
 * muted token so a future wire status never crashes the renderer.
@@ -26304,7 +26320,7 @@ const APP_KEYBINDINGS = {
 	"tasks.scope.toggle": {
 		id: "tasks.scope.toggle",
 		defaultKeys: ["a"],
-		description: "Toggle Active and All task scope",
+		description: "Toggle Active and Tracked task scope",
 		category: "Tasks",
 		scope: "tasks",
 		configurable: false
@@ -27834,7 +27850,7 @@ var TaskBrowserPanel = class {
 		const active = real.filter(isTaskItemActive).length;
 		const done = real.filter((item) => item.status === "completed").length;
 		const failed = real.filter((item) => isTaskItemFailure(item.status)).length;
-		const chips = [`[${this.scope.toUpperCase()}]`];
+		const chips = [`[${this.scope === "all" ? "TRACKED" : "ACTIVE"}]`];
 		if (this.activeType !== null) chips.push(`[${this.activeType}]`);
 		if (this.getFilter() !== "") chips.push(`[search: ${this.getFilter()}]`);
 		const stats = [`${active} active`];
@@ -28659,12 +28675,12 @@ const modelItem = {
 /**
 * The Task Center badge. Legacy snapshots (which predate totals) retain the
 * old wording for embedders; the runtime-backed snapshot uses independent
-* running/total job and agent counts and a persistent failure marker.
+* active/tracked job and agent counts and a persistent failure marker.
 */
 const tasksItem = {
 	id: "tasks",
 	label: "Tasks",
-	description: "The Task Center running/total badge with failure attention and the ↓ view hint.",
+	description: "The Task Center active/tracked badge with failure attention and the ↓ view hint.",
 	defaultZone: "left",
 	defaultImportance: 85,
 	formats: ["badge"],
@@ -28718,9 +28734,9 @@ const tasksItem = {
 		if (failed > 0) parts.push(`! ${failed} failed`);
 		if (tasks > 0 && agents > 0) {
 			parts.push(`● ${agents}/${totalAgents} agents`);
-			parts.push(`${tasks}/${totalJobs} jobs`);
+			parts.push(`${tasks}/${totalJobs} tracked jobs`);
 		} else if (agents > 0) parts.push(`● ${agents}/${totalAgents} agents`);
-		else if (tasks > 0) parts.push(`● ${tasks}/${totalJobs} jobs`);
+		else if (tasks > 0) parts.push(`● ${tasks}/${totalJobs} tracked jobs`);
 		return { spans: [{
 			text: `[${parts.join(" · ")}${hint}]`,
 			tone
@@ -45241,7 +45257,7 @@ var TuiApp = class TuiApp {
 	pendingUserRows = [];
 	/** Activity of the same pending-input subject shown in queueItems. */
 	queueRunning = true;
-	/** Whether any background task is running/stopping. */
+	/** Whether any job/subagent is running/stopping. */
 	tasksActive = false;
 	/** Independent Task Center counts; footer consumes this through status. */
 	taskSummary = {
@@ -52757,7 +52773,7 @@ var TuiApp = class TuiApp {
 	/**
 	* The task-browser trigger semantic — ONE definition shared by the ↓
 	* routing gate, the viewer's parent-lock, and the footer's `↓ view`
-	* hint: active background tasks or failure attention, no overlay entries, an EMPTY VISIBLE
+	* hint: active jobs/subagents or failure attention, no overlay entries, an EMPTY VISIBLE
 	* seat editor in PROMPT mode. The visible seat decides (a shell-mode
 	* empty body is composing a command; a plugin replacement editor
 	* contributes its own text/mode) — the hidden host editor's draft is
@@ -54863,10 +54879,11 @@ var TuiApp = class TuiApp {
 		};
 	}
 	/**
-	* Replace the background-job snapshot used by the footer badge. The
+	* Replace the JobRegistry snapshot used by the footer badge. The
 	* runtime-backed caller supplies terminal records too; the rich summary
-	* separates active and total counts. Non-empty active/attention sets arm
-	* the footer ↓ Task Center trigger.
+	* separates active and tracked counts (the tracked denominator is the
+	* registry's CURRENT roster, never a session lifetime total).
+	* Non-empty active/attention sets arm the footer ↓ Task Center trigger.
 	* @param tasks - job records (id + label + lifecycle status), empty to hide.
 	*/
 	setTasks(tasks) {
@@ -54895,7 +54912,7 @@ var TuiApp = class TuiApp {
 		this.projectActivity();
 		this.syncExtensionState();
 	}
-	/** Whether background tasks or unacknowledged failures are available. */
+	/** Whether active jobs/subagents or unacknowledged failures are available. */
 	isTasksActive() {
 		return this.tasksActive;
 	}
@@ -56124,6 +56141,36 @@ var TuiApp = class TuiApp {
 		});
 		return () => handle?.hide();
 	}
+	/**
+	* Host the shared Plugin Manager panel (P1-A) as a standalone overlay. The
+	* panel/controller are runner-owned and outlive this overlay: hiding the
+	* panel never cancels an active install (plan §10.5/§17). `onClosed` fires
+	* on every hide path so the runner can drop its active-host reference.
+	* Returns the closer.
+	*/
+	openPluginManagerPanel(panel, onClosed) {
+		if (this.disposed) return () => {};
+		const configuredWidth = 76;
+		const configuredMaxHeight = 28;
+		const geometryOf = () => {
+			const width = Math.max(1, Math.min(this.terminal.columns, configuredWidth));
+			const maxHeight = Math.max(1, Math.min(this.terminal.rows, configuredMaxHeight));
+			return {
+				width,
+				maxHeight,
+				key: `${this.terminal.columns}:${this.terminal.rows}:${width}:${maxHeight}`
+			};
+		};
+		const budgetAware = panel;
+		const frame = new ResponsiveOverlayFrame(panel, geometryOf, (geometry) => {
+			budgetAware.setMaxRows?.(Math.max(1, geometry.maxHeight - 2));
+		}, onClosed);
+		const handle = this.showOverlayOnHost(frame, {
+			width: configuredWidth,
+			maxHeight: configuredMaxHeight
+		});
+		return () => handle.hide();
+	}
 	/** Track an action-first editor even when it is nested inside the
 	* SettingsList submenu rather than mounted as a standalone overlay. The
 	* returned unregister callback is idempotent. */
@@ -59292,6 +59339,13 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 	batcher;
 	hostVersion;
 	/**
+	* INTERNAL owner → owning Loader entry id projection (P1-A1.4): recorded at
+	* every contribution registration from the caller fiber's Loader entry. It
+	* is read only by the Plugin Manager presentation classification and never
+	* exposes a Cordis object.
+	*/
+	ownerEntryIds = /* @__PURE__ */ new Map();
+	/**
 	* P1-1: the CURRENT surface's render sink (attached by the runner once
 	* per surface generation). Registry invalidations (ledger, commands,
 	* themes, autocomplete, settings, keybindings, renderers, editors) all
@@ -59558,6 +59612,7 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 		if (!isSlotName(slot)) throw new Error(`unknown extension slot "${slot}" (known: ${slotNames().join(", ")})`);
 		const caller = this.ctx;
 		const owner = `${caller.fiber.uid}:${caller.fiber.name}`;
+		this.recordOwnerEntry(owner, caller.fiber);
 		const stableOwner = slot === "chrome.footer.item" ? caller.fiber.name : void 0;
 		if (slot === "chrome.footer.item" && (spec.id.includes("/") || /[\u0000-\u001f\u007f-\u009f]/.test(spec.id))) throw new Error(`chrome.footer.item registration id must not contain "/" or control characters (owner "${owner}", id "${stripControlChars(spec.id)}")`);
 		if (slot === "chrome.footer.item") for (const record of this.ledger.snapshot("chrome.footer.item").records) {
@@ -59598,6 +59653,7 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 	registerCommand(contribution) {
 		const caller = this.ctx;
 		const owner = `${caller.fiber.uid}:${caller.fiber.name}`;
+		this.recordOwnerEntry(owner, caller.fiber);
 		const outcome = this.commands.register(contribution, owner);
 		if (outcome.kind === "conflict") {
 			const detail = outcome.nearSynonym === void 0 ? `owner "${outcome.existingOwner}" already holds it` : `a near-synonym of "${contribution.name}" (${outcome.nearSynonym}, owned by "${outcome.existingOwner}") — the AGENTS near-synonym rule forbids the ambiguity`;
@@ -59631,6 +59687,7 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 	registerTheme(contribution) {
 		const caller = this.ctx;
 		const owner = `${caller.fiber.uid}:${caller.fiber.name}`;
+		this.recordOwnerEntry(owner, caller.fiber);
 		const stableOwner = caller.fiber.name;
 		const selectableValue = ThemeRegistry.selectableValue(stableOwner, contribution.id);
 		const handle = this.themes.register(contribution, owner, stableOwner);
@@ -59726,6 +59783,7 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 	registerAutocomplete(contribution) {
 		const caller = this.ctx;
 		const owner = `${caller.fiber.uid}:${caller.fiber.name}`;
+		this.recordOwnerEntry(owner, caller.fiber);
 		const handle = this.autocomplete.register(contribution, owner);
 		this.trackRegistryHealth("autocomplete", contribution.id, owner);
 		let dispose;
@@ -59755,6 +59813,7 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 	registerSetting(contribution) {
 		const caller = this.ctx;
 		const owner = `${caller.fiber.uid}:${caller.fiber.name}`;
+		this.recordOwnerEntry(owner, caller.fiber);
 		const handle = this.settings.register(contribution, owner);
 		this.trackRegistryHealth("setting", contribution.id, owner);
 		let dispose;
@@ -59788,6 +59847,7 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 	registerKeybinding(contribution) {
 		const caller = this.ctx;
 		const owner = `${caller.fiber.uid}:${caller.fiber.name}`;
+		this.recordOwnerEntry(owner, caller.fiber);
 		const handle = this.keybindings.register(contribution, owner);
 		this.trackRegistryHealth("keybinding", contribution.id, owner);
 		let dispose;
@@ -59818,6 +59878,7 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 	registerMessageRenderer(contribution) {
 		const caller = this.ctx;
 		const owner = `${caller.fiber.uid}:${caller.fiber.name}`;
+		this.recordOwnerEntry(owner, caller.fiber);
 		const handle = this.renderers.registerMessageRenderer(contribution, owner);
 		this.ledger.trackHealth("transcript.message.renderer", contribution.id, owner);
 		let dispose;
@@ -59847,6 +59908,7 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 	registerToolRenderer(contribution) {
 		const caller = this.ctx;
 		const owner = `${caller.fiber.uid}:${caller.fiber.name}`;
+		this.recordOwnerEntry(owner, caller.fiber);
 		const handle = this.renderers.registerToolRenderer(contribution, owner);
 		this.ledger.trackHealth("transcript.tool.renderer", contribution.id, owner);
 		let dispose;
@@ -59939,6 +60001,7 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 	registerEditor(contribution) {
 		const caller = this.ctx;
 		const owner = `${caller.fiber.uid}:${caller.fiber.name}`;
+		this.recordOwnerEntry(owner, caller.fiber);
 		const handle = this.editors.register(contribution, owner);
 		this.trackRegistryHealth("editor", contribution.id, owner);
 		let dispose;
@@ -59966,6 +60029,27 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 		return this.ledger;
 	}
 	/**
+	* INTERNAL read-only projection (P1-A1.4): owner → owning Loader entry id.
+	* The Plugin Manager surface uses it to associate a live TUI extension
+	* contribution with the official PluginManager entry that loaded it,
+	* exactly and without name guessing. It is NOT a second inventory, NOT an
+	* authority, and NEVER part of the public Extension API.
+	*/
+	_ownerEntryIds() {
+		return this.ownerEntryIds;
+	}
+	/**
+	* Record the owning Loader entry id of one contribution owner. The Loader
+	* stamps `fiber.entry = fiber.parent[Entry.key]` at import time, so a
+	* plugin loaded from a composition row carries the exact id the official
+	* plugin inventory reports as `entryId`. A fiber with no Loader entry
+	* (a programmatically created context) records nothing and falls back.
+	*/
+	recordOwnerEntry(owner, fiber) {
+		const id = fiber.entry?.id;
+		if (typeof id === "string" && id !== "") this.ownerEntryIds.set(owner, id);
+	}
+	/**
 	* Register a normalized input capture (plan §5). Caller-fiber-owned:
 	* owner unload removes the capture. A duplicate id or a second live
 	* exclusive capture is an explicit error (the registry's rules — never
@@ -59975,6 +60059,7 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 	_advancedCaptureInput(spec) {
 		const caller = this.ctx;
 		const owner = `${caller.fiber.uid}:${caller.fiber.name}`;
+		this.recordOwnerEntry(owner, caller.fiber);
 		const handle = this.advancedInputs.register(spec, owner);
 		let dispose;
 		try {
@@ -60225,6 +60310,7 @@ var PiTuiExtensionServiceImpl = class PiTuiExtensionServiceImpl extends Service
 	_unstableCaptureRaw(spec) {
 		const caller = this.ctx;
 		const owner = `${caller.fiber.uid}:${caller.fiber.name}`;
+		this.recordOwnerEntry(owner, caller.fiber);
 		const handle = this.unstableInputs.register(spec, owner);
 		let dispose;
 		try {
@@ -66360,41 +66446,13 @@ function registerTuiCommands(runner, initial) {
 		});
 		return [...byName.values()];
 	};
-	let presetSelectionEnabled;
-	let presetSelectionOwner;
-	let presetSelectionRequest = 0;
-	/** Register a roster read that feeds the PRESENTATION cache. The token is
-	* taken at START, so a read that merely SETTLES later can never overwrite a
-	* newer one — every reader (probe, typed `/preset`, picker) participates.
-	* Mutation ownership is SEPARATE: an operation that already passed its own
-	* subject/token fences still dispatches even when this cache commit loses. */
-	const beginPresetSelectionRead = () => ++presetSelectionRequest;
-	const currentPresetOwner = () => ({
-		generation: runner.sessionGeneration,
-		sessionId: runner.liveAgent?.session.id
-	});
-	const samePresetOwner = (left, right) => left.generation === right.generation && left.sessionId === right.sessionId;
 	/**
 	* The TUI-owned `/preset` command IDENTITY — the official
 	* discovery/presentation identity (0.1.6 `definitionId`), never an
-	* authorization fact. Visibility is keyed on it so a scoped same-name
-	* `/preset` contributed by a preset/plugin (which selects its own full
-	* descriptor and does not inherit this identity) keeps its own presentation.
+	* authorization fact.
 	*/
 	const TUI_PRESET_COMMAND_DEFINITION_ID = CommandDefinitionId("@xmoon76/dsh-pi-tui/preset");
 	/**
-	* Whether one effective command is visible in the preset-selection surface.
-	* Only the TUI's OWN `/preset` identity honors the Host mode-selection
-	* policy; a same-name command with a DIFFERENT definitionId is semantically
-	* unrelated and stays visible. A value belonging to another owner is
-	* unknown: keep the affordance rather than inherit a stale `false`.
-	*/
-	const presetCommandVisible = (command) => {
-		if (command.definitionId !== TUI_PRESET_COMMAND_DEFINITION_ID) return true;
-		if (presetSelectionOwner === void 0 || !samePresetOwner(presetSelectionOwner, currentPresetOwner())) return true;
-		return presetSelectionEnabled !== false;
-	};
-	/**
 	* One collision notice per contribution IDENTITY and failure GENERATION
 	* (the key is dropped when the collision recovers): a new owner reusing a
 	* released name, or the same contribution colliding again after the host
@@ -66418,7 +66476,7 @@ function registerTuiCommands(runner, initial) {
 			leadingInput: command.input !== void 0,
 			attachments: command.input?.attachments === true
 		}]));
-		const display = options.display === "none" ? [] : [...mergeContributions(sorted)].filter(presetCommandVisible).sort((left, right) => left.name < right.name ? -1 : 1);
+		const display = options.display === "none" ? [] : [...mergeContributions(sorted)].sort((left, right) => left.name < right.name ? -1 : 1);
 		const extensionAutocomplete = runner.extensions?.autocomplete;
 		app.setCommandCompletions(display.map((command) => ({
 			name: command.name,
@@ -66509,48 +66567,6 @@ function registerTuiCommands(runner, initial) {
 		const liveAgent = runner.liveAgent;
 		installCompletionsContained(liveAgent === void 0 ? mergeGlobalAndSavedScoped() : commands.list(liveAgent).map(commandSummaryOf));
 	};
-	/**
-	* Commit one roster read to the PRESENTATION cache while `request` is still
-	* the newest registered read, returning whether it committed. This owns ONLY
-	* the display cache: a `false` return means a later-started presentation read
-	* already owns the cache and the value must not repaint it — it must NEVER
-	* cancel the caller's own user operation. A user mutation decides from the
-	* roster IT read: the official Web keeps `loadGeneration` (presentation) and
-	* `select()` (mutation ownership) separate, and the Host
-	* `agentPresets.select` owns the blank-session/mount/commit authority.
-	*/
-	const commitPresetVisibility = (enabled, owner, request) => {
-		if (request !== presetSelectionRequest) return false;
-		if (presetSelectionOwner !== void 0 && samePresetOwner(presetSelectionOwner, owner) && presetSelectionEnabled === enabled) return true;
-		presetSelectionEnabled = enabled;
-		presetSelectionOwner = owner;
-		refreshCompletions();
-		return true;
-	};
-	/**
-	* Seed/refresh the presentation capability from the CURRENT owner. The read
-	* is fenced by request order AND owner identity: a roster that settles after
-	* a newer read or a switch must never rewrite the new Session's command
-	* surface. A superseded or aborted read is a cancellation (debug diagnostics
-	* only); any other failure keeps the current presentation and is recorded by
-	* runOwned. A rosterless deployment (`available() === false`) is unknown and
-	* keeps `/preset` visible (its handler still refuses execution).
-	*/
-	const refreshPresetSelectionVisibility = () => {
-		const presets = runner.catalog.presets;
-		if (!presets.available()) return;
-		const owner = currentPresetOwner();
-		const request = beginPresetSelectionRead();
-		runOwned("preset selection visibility", async () => {
-			const roster = await presets.roster(runner.signal);
-			if (!samePresetOwner(owner, currentPresetOwner())) return;
-			commitPresetVisibility(roster.modeSelectionEnabled, owner, request);
-		}, {
-			diag: runner.diag,
-			sessionId: () => runner.liveAgent?.session.id,
-			isCancellation: (error) => error instanceof SupersededReadError || runner.signal.aborted
-		});
-	};
 	let commandCommitDepth = 0;
 	let commandCommitDirty = false;
 	/** Run one bulk command commit; registry changes inside are coalesced. */
@@ -66872,7 +66888,14 @@ function registerTuiCommands(runner, initial) {
 					description: row.description,
 					currentValue: row.currentValue,
 					...row.values.length > 0 ? { values: [...row.values] } : {}
-				}))
+				})),
+				{
+					id: "plugins",
+					label: "Plugins",
+					description: "Manage DSH plugins and TUI extensions",
+					currentValue: "Manage…",
+					submenu: (_currentValue, done) => runner.createPluginManagerSubmenu(done)
+				}
 			], (id, value, revert, navigate) => {
 				if (id === "approval") {
 					if ((value === "ask" || value === "never") && liveAgent !== void 0) {
@@ -67634,15 +67657,6 @@ function registerTuiCommands(runner, initial) {
 		const releasePin = pinDraftAttachments(line, runner.imageStore, runner.fileStore);
 		let userMessage;
 		try {
-			userMessage = await runner.prepareDraftMessage(line);
-			skillSignal.throwIfAborted();
-			if (!sessionUnchanged({
-				agent,
-				generation
-			}, runner.liveAgent, runner.sessionGeneration)) return {
-				kind: "error",
-				text: "the session changed while loading the skill — try again"
-			};
 			if (runner.sessionTransitionPending()) {
 				const merged = mergeDraft(app.getDraft(), line);
 				app.setEditorText(merged);
@@ -67652,57 +67666,78 @@ function registerTuiCommands(runner, initial) {
 					text: merged === line ? "a session transition is in progress — try again in a moment" : "the draft changed while transitioning — review it before submitting again"
 				};
 			}
-			try {
-				const outcome = await runner.withSessionWriter(agent.session.id, async () => {
-					skillSignal.throwIfAborted();
-					if (!sessionUnchanged({
-						agent,
-						generation
-					}, runner.liveAgent, runner.sessionGeneration)) return void 0;
-					if (delivery !== "steer" && hostLoadsSkillBody) return runner.sessionWriter.prompt(agent.session.id, userMessage, "queue");
-					if (fallbackBody !== void 0) {
-						const first = await runner.sessionWriter.prompt(agent.session.id, userMessage, "steer");
-						if (first.kind !== "committed") return first;
-						try {
-							consumeDraftAttachments(line, runner.imageStore, runner.fileStore);
-							const body = await runner.sessionWriter.prompt(agent.session.id, fallbackBody, "steer");
-							if (body.kind !== "committed") recordCommandDraftDisposition(commandId, "suppressed");
-							return body;
-						} catch (error) {
-							recordCommandDraftDisposition(commandId, "suppressed");
-							throw error;
-						}
-					}
-					return runner.sessionWriter.prompt(agent.session.id, userMessage, "steer");
-				});
-				if (outcome === void 0) return {
-					kind: "error",
-					text: "the session changed while loading the skill — try again"
+			const admission = await runner.withSessionWriter(agent.session.id, () => runner.withPromptAdmission(agent, line, async () => {
+				skillSignal.throwIfAborted();
+				if (!sessionUnchanged({
+					agent,
+					generation
+				}, runner.liveAgent, runner.sessionGeneration)) return { kind: "stale" };
+				userMessage = await runner.prepareDraftMessage(line);
+				skillSignal.throwIfAborted();
+				if (!sessionUnchanged({
+					agent,
+					generation
+				}, runner.liveAgent, runner.sessionGeneration)) return { kind: "stale" };
+				if (delivery !== "steer" && hostLoadsSkillBody) return {
+					kind: "written",
+					outcome: await runner.sessionWriter.prompt(agent.session.id, userMessage, "queue")
 				};
-				if (outcome.kind !== "committed") {
-					if (outcome.kind === "indeterminate") throw new IndeterminateSkillWriteError();
-					if (outcome.kind === "cancelled") throw cancellationError("skill write cancelled");
-					return {
-						kind: "error",
-						text: outcome.kind === "rejected" ? outcome.error.message : outcome.reason
-					};
-				}
-			} catch (error) {
-				if (error instanceof TransitionInProgressError) {
-					const merged = mergeDraft(app.getDraft(), line);
-					app.setEditorText(merged);
-					recordCommandDraftDisposition(commandId, "restored");
-					return {
-						kind: "error",
-						text: merged === line ? "a session transition is in progress — try again in a moment" : "the draft changed while transitioning — review it before submitting again"
+				if (fallbackBody !== void 0) {
+					const first = await runner.sessionWriter.prompt(agent.session.id, userMessage, "steer");
+					if (first.kind !== "committed") return {
+						kind: "written",
+						outcome: first
 					};
+					try {
+						consumeDraftAttachments(line, runner.imageStore, runner.fileStore);
+						const body = await runner.sessionWriter.prompt(agent.session.id, fallbackBody, "steer");
+						if (body.kind !== "committed") recordCommandDraftDisposition(commandId, "suppressed");
+						return {
+							kind: "written",
+							outcome: body
+						};
+					} catch (error) {
+						recordCommandDraftDisposition(commandId, "suppressed");
+						throw error;
+					}
 				}
-				throw error;
+				return {
+					kind: "written",
+					outcome: await runner.sessionWriter.prompt(agent.session.id, userMessage, "steer")
+				};
+			}));
+			if (admission.kind === "stale") return {
+				kind: "error",
+				text: "the session changed while loading the skill — try again"
+			};
+			const outcome = admission.outcome;
+			if (outcome === void 0) return {
+				kind: "error",
+				text: "the session changed while loading the skill — try again"
+			};
+			if (outcome.kind !== "committed") {
+				if (outcome.kind === "indeterminate") throw new IndeterminateSkillWriteError();
+				if (outcome.kind === "cancelled") throw cancellationError("skill write cancelled");
+				return {
+					kind: "error",
+					text: outcome.kind === "rejected" ? outcome.error.message : outcome.reason
+				};
+			}
+		} catch (error) {
+			if (error instanceof TransitionInProgressError) {
+				const merged = mergeDraft(app.getDraft(), line);
+				app.setEditorText(merged);
+				recordCommandDraftDisposition(commandId, "restored");
+				return {
+					kind: "error",
+					text: merged === line ? "a session transition is in progress — try again in a moment" : "the draft changed while transitioning — review it before submitting again"
+				};
 			}
-			consumeDraftAttachments(line, runner.imageStore, runner.fileStore);
+			throw error;
 		} finally {
 			releasePin();
 		}
+		consumeDraftAttachments(line, runner.imageStore, runner.fileStore);
 		return {
 			kind: "success",
 			text: "skill " + name + " loaded"
@@ -67769,7 +67804,6 @@ function registerTuiCommands(runner, initial) {
 			savedScopedCommands = snapshot.scopedCommands;
 			installCompletionsContained(mergeGlobalAndSavedScoped());
 		});
-		refreshPresetSelectionVisibility();
 	};
 	/**
 	* The revalidating transition (target/owner change): scoped previews clear
@@ -68136,6 +68170,14 @@ function registerTuiCommands(runner, initial) {
 			return { kind: "success" };
 		}
 	});
+	registerTuiCommand({
+		name: "plugins",
+		description: "Inspect and manage DSH plugins and TUI extensions for this profile",
+		handler: () => {
+			runner.openPluginManager();
+			return { kind: "success" };
+		}
+	});
 	commands.register({
 		name: "yolo",
 		description: "Switch to danger-full-access (alias of /permission danger-full-access)",
@@ -68182,24 +68224,6 @@ function registerTuiCommands(runner, initial) {
 					kind: "success",
 					text: `default preset: ${await displayedDefault()}`
 				};
-				const defaultOwner = {
-					generation: runner.sessionGeneration,
-					sessionId: runner.liveAgent?.session.id
-				};
-				const defaultVisibilityRequest = beginPresetSelectionRead();
-				let defaultRoster;
-				try {
-					defaultRoster = await presets.roster(runner.signal);
-				} catch (error) {
-					if (error instanceof SupersededReadError || runner.signal.aborted) return { kind: "success" };
-					throw error;
-				}
-				if (runner.sessionGeneration !== defaultOwner.generation || runner.liveAgent?.session.id !== defaultOwner.sessionId) return { kind: "success" };
-				commitPresetVisibility(defaultRoster.modeSelectionEnabled, defaultOwner, defaultVisibilityRequest);
-				if (!defaultRoster.modeSelectionEnabled) return {
-					kind: "error",
-					text: "preset selection is disabled in this deployment"
-				};
 				try {
 					await presets.resolve(rest, runner.signal);
 					await runner.config.presetDefault.set(rest);
@@ -68232,15 +68256,6 @@ function registerTuiCommands(runner, initial) {
 				};
 				const ownerCurrent = () => runner.sessionGeneration === owner.generation && runner.liveAgent?.session.id === owner.sessionId;
 				try {
-					const visibilityRequest = beginPresetSelectionRead();
-					const roster = await presets.roster(runner.signal);
-					if (token !== presetOperationToken) return { kind: "superseded" };
-					if (!ownerCurrent()) return { kind: "superseded" };
-					commitPresetVisibility(roster.modeSelectionEnabled, owner, visibilityRequest);
-					if (!roster.modeSelectionEnabled) return {
-						kind: "rejected",
-						message: "preset selection is disabled in this deployment"
-					};
 					const agent = runner.liveAgent;
 					if (agent === void 0) {
 						const resolved = await presets.resolve(id, runner.signal);
@@ -68371,7 +68386,6 @@ function registerTuiCommands(runner, initial) {
 			const pickerSessionId = runner.liveAgent?.session.id;
 			const pickerOwnerCurrent = () => runner.sessionGeneration === pickerGeneration && runner.liveAgent?.session.id === pickerSessionId;
 			let roster;
-			const visibilityRequest = beginPresetSelectionRead();
 			try {
 				roster = await presets.roster(runner.signal);
 			} catch (error) {
@@ -68379,14 +68393,6 @@ function registerTuiCommands(runner, initial) {
 				throw error;
 			}
 			if (!pickerOwnerCurrent()) return { kind: "success" };
-			if (!commitPresetVisibility(roster.modeSelectionEnabled, {
-				generation: pickerGeneration,
-				sessionId: pickerSessionId
-			}, visibilityRequest)) return { kind: "success" };
-			if (!roster.modeSelectionEnabled) return {
-				kind: "error",
-				text: "preset selection is disabled in this deployment"
-			};
 			if (roster.presets.length === 0) return {
 				kind: "success",
 				text: "no agent presets configured"
@@ -69038,7 +69044,7 @@ function registerTuiCommands(runner, initial) {
 					label: color.border("─".repeat(34)),
 					currentValue: ""
 				},
-				...commands.list(runner.liveAgent).filter(presetCommandVisible).map((command) => ({
+				...commands.list(runner.liveAgent).map((command) => ({
 					id: `cmd-${command.name}`,
 					label: `/${command.name}`,
 					description: command.description,
@@ -70330,22 +70336,39 @@ async function copyToClipboard(text, run, env) {
 //#region src/startup-status.ts
 /** The erase-current-line sequence (EL) used to overwrite in place. */
 const ERASE_LINE = "\r\x1B[2K";
+/** Erase attempts one `clear` makes before this instance gives up on the
+* stream: the original attempt plus ONE immediate retry. That is exactly the
+* one-off write failure the clear-then-log ordering must survive — it is NOT a
+* general I/O recovery policy, so it is deliberately a constant. */
+const CLEAR_ATTEMPTS = 2;
 /** Create the pre-mount status writer. `isTTY` defaults to true when the
 * output does not declare itself (the runner passes
 * `process.stdout.isTTY` explicitly). */
 function createStartupStatus(output) {
 	const tty = output.isTTY ?? true;
 	let shown = false;
+	let disabled = false;
+	const write = (text) => {
+		try {
+			output.write(text);
+			return true;
+		} catch {
+			return false;
+		}
+	};
 	return {
 		show(message) {
-			if (!tty) return;
-			output.write(`${ERASE_LINE}${message}`);
+			if (!tty || disabled) return;
+			write(`${ERASE_LINE}${message}`);
 			shown = true;
 		},
 		clear() {
-			if (!tty || !shown) return;
-			output.write(ERASE_LINE);
-			shown = false;
+			if (!tty || !shown || disabled) return;
+			for (let attempt = 0; attempt < CLEAR_ATTEMPTS && shown; attempt += 1) if (write(ERASE_LINE)) {
+				shown = false;
+				return;
+			}
+			disabled = true;
 		}
 	};
 }
@@ -70666,25 +70689,28 @@ function dshVersion() {
 //#region src/exit.ts
 /**
 * The TUI exit contract: latch the exit request, dispose/restore the Client
-* surface, apply the resume-hint policy, then request the launcher's
-* `appExit`. Pure and injectable so the resolve/reject/hang paths are
-* testable without a Cordis context.
+* surface, run one synchronous Host-retirement preparation hook, apply the
+* resume-hint policy, then request the launcher's `appExit`. Pure and
+* injectable so the resolve/reject/hang paths are testable without a Cordis
+* context.
 *
 * Host-owned final durability is NOT this controller's job: the Direct
 * owned-session retirement (cancel → idle → drain descendants → final flush
 * → AgentHandle.dispose) runs inside the application-tree disposal that
 * `appExit` starts, under the DSH process-shutdown watchdog — see
 * `src/runtime/direct/owned-session-retirement.ts` and
-* `docs/concurrency.md`. The exit controller only stops the Client surface
-* and requests the exit; it never awaits a potentially long Host teardown
-* in front of `appExit`. (The former flush-failure warning was removed
-* with the flush: retirement failures are recorded by the retirement
-* diagnostics, not by a user-facing exit warning.)
+* `docs/concurrency.md`. The exit controller may invoke ONE injected
+* synchronous Host-retirement preparation hook (the Direct owner's first
+* cancel, so it lands before the root teardown unregisters the inbox
+* projection), but it NEVER awaits full Host retirement in front of
+* `appExit`. (The former flush-failure warning was removed with the flush:
+* retirement failures are recorded by the retirement diagnostics, not by a
+* user-facing exit warning.)
 *
 * Zero-unhandled guarantee: the exit root is a terminal lifecycle boundary
-* — every step (cleanup, hint, exit) and every error observation is
-* individually protected, so no throw can skip a later step, leak a
-* rejection, or leave the process running with a stopped TUI.
+* — every step (cleanup, preparation, hint, exit) and every error
+* observation is individually protected, so no throw can skip a later step,
+* leak a rejection, or leave the process running with a stopped TUI.
 * @module @xmoon76/dsh-pi-tui/exit
 */
 /** Best-effort diagnostics write: a throwing diag can never break the
@@ -70698,13 +70724,14 @@ function safeDiag(diag, level, message, fields) {
 /**
 * The ONE exit orchestration shared by every exit entry (Ctrl+C, Ctrl+D,
 * `/exit`, `/quit`): latch once → dispose/restore the Client surface →
-* resume-hint policy → request `appExit`. Idempotent: later requests while
-* one is in flight (or after it finished) are no-ops, so double Ctrl+C or a
-* command plus a key cannot double-cleanup or double-exit.
+* synchronous Host-retirement preparation → resume-hint policy → request
+* `appExit`. Idempotent: later requests while one is in flight (or after it
+* finished) are no-ops, so double Ctrl+C or a command plus a key cannot
+* double-cleanup or double-exit.
 *
-* TERMINAL ROOT: every step (cleanup, hint, exit) is individually
-* protected, so no throw can skip a later step or leak a rejection, and
-* cleanup/exit always run (exit exactly once, last).
+* TERMINAL ROOT: every step (cleanup, preparation, hint, exit) is
+* individually protected, so no throw can skip a later step or leak a
+* rejection, and cleanup/exit always run (exit exactly once, last).
 * @param deps - the injectable surface.
 * @returns `requestExit()` — safe to call from any entry, any number of times.
 */
@@ -70720,6 +70747,11 @@ function createExitController(deps) {
 			} catch (cleanupError) {
 				safeDiag(deps.diag, "error", "cleanup failed", { error: safeErrorMessage$1(cleanupError) });
 			}
+			try {
+				deps.prepareRetirement?.();
+			} catch (preparationError) {
+				safeDiag(deps.diag, "error", "retirement preparation failed", { error: safeErrorMessage$1(preparationError) });
+			}
 			try {
 				const resume = deps.resumeHint();
 				if (resume !== void 0) deps.hint(resume);
@@ -71061,7 +71093,8 @@ const DIRECT_IMPLEMENTED_CAPABILITIES = [
 	"config",
 	"host-file",
 	"session-archive",
-	"host-command"
+	"host-command",
+	"plugin-manager"
 ];
 //#endregion
 //#region src/runtime/backend.ts
@@ -71079,7 +71112,7 @@ const DIRECT_IMPLEMENTED_CAPABILITIES = [
 /** Assemble the Direct backend: in-process adapters over `ctx.*` services.
 * The runner depends on the returned `Backend`, never on `ctx.*` directly
 * for the ported domains. */
-function createDirectBackend(subagent, sessionReader, pendingInputReader, sessionWriter, sessionLifecycle, interaction, catalog, config, hostFile, sessionArchive, hostCommand) {
+function createDirectBackend(subagent, sessionReader, pendingInputReader, sessionWriter, sessionLifecycle, interaction, catalog, config, hostFile, sessionArchive, hostCommand, pluginManager) {
 	return {
 		kind: "direct",
 		capabilities: new Set(DIRECT_IMPLEMENTED_CAPABILITIES),
@@ -71093,7 +71126,8 @@ function createDirectBackend(subagent, sessionReader, pendingInputReader, sessio
 		config,
 		hostFile,
 		sessionArchive,
-		hostCommand
+		hostCommand,
+		pluginManager
 	};
 }
 //#endregion
@@ -72218,6 +72252,28 @@ var DirectInteractionPort = class {
 };
 //#endregion
 //#region src/runtime/direct/catalog-direct.ts
+/** A no-op diagnostics channel for an embedded/test adapter constructed
+*  without the runner's Diag: detached ownership still observes failures
+*  instead of leaving a bare promise. */
+const NOOP_DIAG = {
+	debug: () => {},
+	info: () => {},
+	warn: () => {},
+	error: () => {},
+	dispose: () => {}
+};
+/** Adapt the optional narrow diagnostic surface to the full detached-work
+*  channel (severity is collapsed onto the one sink the seam owns). */
+function detachedDiag(diag) {
+	if (diag === void 0) return NOOP_DIAG;
+	return {
+		debug: () => {},
+		info: () => {},
+		warn: (message, fields) => diag.warn(message, fields),
+		error: (message, fields) => diag.warn(message, fields),
+		dispose: () => {}
+	};
+}
 /** The Direct backend's catalog: the `ctx` services behind the semantic
 * `Catalog` interfaces. */
 var DirectCatalogPort = class {
@@ -72246,18 +72302,6 @@ var DirectModelCatalog = class {
 	agentFor;
 	modelSelections;
 	diag;
-	/** Fence overlapping default writes so the newest choice wins persistence. */
-	defaultWriteGeneration = 0;
-	/** The generation of the newest SUCCESSFULLY committed default. Any
-	*  successful write with a NEWER generation advances it, so a failed
-	*  newer attempt never erases an older success (the correction target
-	*  stays the newest committed value). */
-	committedGeneration = 0;
-	/** The newest SUCCESSFULLY committed default (the correction target). A
-	*  failed attempt is never recorded here, so a failed choice can never be
-	*  resurrected by a stale-write correction. */
-	latestCommitted;
-	latestWrite = Promise.resolve();
 	constructor(ctx, agentFor = () => void 0, modelSelections, diag) {
 		this.ctx = ctx;
 		this.agentFor = agentFor;
@@ -72371,52 +72415,27 @@ var DirectModelCatalog = class {
 				message: "model selection service unavailable"
 			}
 		});
-		const generation = ++this.defaultWriteGeneration;
-		const write = Promise.resolve().then(() => defaultModel.saveSelection({ ...next }));
-		this.latestWrite = write;
-		const fence = (outcome) => {
-			if (outcome.ok && generation > this.committedGeneration) {
-				this.committedGeneration = generation;
-				this.latestCommitted = { ...next };
-			}
-			return this.reassertLatest(generation).then(() => {
-				if (outcome.ok) return {
-					kind: "committed",
-					value: void 0
-				};
-				return {
-					kind: "indeterminate",
-					error: {
-						code: "session/model-default-indeterminate",
-						message: safeErrorMessage$1(outcome.error)
-					}
-				};
-			});
-		};
-		return write.then((value) => fence({
-			ok: true,
-			value
-		}), (error) => fence({
-			ok: false,
-			error
+		return Promise.resolve().then(() => defaultModel.saveSelection({ ...next })).then(() => ({
+			kind: "committed",
+			value: void 0
+		}), (error) => ({
+			kind: "indeterminate",
+			error: {
+				code: "session/model-default-indeterminate",
+				message: safeErrorMessage$1(error)
+			}
 		}));
 	}
-	async reassertLatest(generation) {
-		while (generation !== this.defaultWriteGeneration) {
-			const observedGeneration = this.defaultWriteGeneration;
-			await this.latestWrite.catch(() => void 0);
-			if (observedGeneration !== this.defaultWriteGeneration) continue;
-			const latest = this.latestCommitted;
-			const defaultModel = this.defaultModel();
-			if (latest === void 0 || defaultModel === void 0) return;
-			try {
-				await defaultModel.saveSelection({ ...latest });
-			} catch (error) {
-				this.diag?.warn("model default correction failed", { error: error instanceof Error ? error.message : String(error) });
-				return;
-			}
-			generation = observedGeneration;
-		}
+	/** Start the best-effort global-default save for a committed Session
+	*  selection. rc.2 returns the Session success immediately; the rejection is
+	*  observed through the detached owner, never the Session outcome. */
+	startDefaultSave(selection, sessionId) {
+		const defaultModel = this.defaultModel();
+		if (defaultModel === void 0) return;
+		runDetached("model default save", () => defaultModel.saveSelection({ ...selection }), {
+			diag: detachedDiag(this.diag),
+			sessionId: () => sessionId
+		});
 	}
 	sessionSelection(sessionId) {
 		const agent = this.agentFor(sessionId);
@@ -72434,13 +72453,45 @@ var DirectModelCatalog = class {
 		if (Boolean(signal?.aborted)) return { kind: "cancelled" };
 		const llm = this.llm();
 		const agent = this.agentFor(sessionId);
-		if (agent === void 0 || this.modelSelections === void 0 || llm === void 0) return {
+		const owner = this.modelSelections;
+		if (agent === void 0 || owner === void 0 || llm === void 0) return {
 			kind: "rejected",
 			error: {
 				code: "session/model-unavailable",
 				message: "session model selection unavailable"
 			}
 		};
+		return owner.serializeImageAdmission(agent, () => this.commitSessionModelSelection(sessionId, agent, owner, llm, selection, signal));
+	}
+	async commitSessionModelSelection(sessionId, agent, owner, llm, selection, signal) {
+		if (Boolean(signal?.aborted)) return { kind: "cancelled" };
+		try {
+			if (!llm.listProviders().some((provider) => provider.id === selection.provider)) return {
+				kind: "rejected",
+				error: {
+					code: "session/model-unavailable",
+					message: `model provider "${selection.provider}" is not available`
+				}
+			};
+			const models = await llm.listModels(selection.provider);
+			if (Boolean(signal?.aborted)) return { kind: "cancelled" };
+			if (!models.some((model) => model.id === selection.model)) return {
+				kind: "rejected",
+				error: {
+					code: "session/model-unavailable",
+					message: `model "${selection.model}" is not available on provider "${selection.provider}"`
+				}
+			};
+		} catch (error) {
+			if (Boolean(signal?.aborted)) return { kind: "cancelled" };
+			return {
+				kind: "rejected",
+				error: {
+					code: "session/model-unavailable",
+					message: safeErrorMessage$1(error)
+				}
+			};
+		}
 		let resolved;
 		try {
 			resolved = await llm.resolveCallConfig({
@@ -72472,7 +72523,7 @@ var DirectModelCatalog = class {
 			}
 		};
 		try {
-			this.modelSelections.appendSelection(agent, next);
+			owner.appendSelection(agent, next);
 		} catch (error) {
 			return {
 				kind: "rejected",
@@ -72482,13 +72533,8 @@ var DirectModelCatalog = class {
 				}
 			};
 		}
-		this.modelSelections.setCurrent(agent, next);
-		const defaultOutcome = await this.saveDefaultSelection(next);
-		if (defaultOutcome.kind !== "committed") this.diag?.warn("model default save did not commit after the Session selection", {
-			session: sessionId,
-			kind: defaultOutcome.kind,
-			...defaultOutcome.kind === "rejected" || defaultOutcome.kind === "indeterminate" ? { error: defaultOutcome.error.message } : {}
-		});
+		owner.setCurrent(agent, next);
+		this.startDefaultSave(next, sessionId);
 		return {
 			kind: "committed",
 			value: { ...next }
@@ -72528,10 +72574,7 @@ var DirectPresetCatalog = class {
 	async roster(signal) {
 		signal?.throwIfAborted();
 		const presets = this.presets();
-		if (presets === void 0) return {
-			presets: [],
-			modeSelectionEnabled: false
-		};
+		if (presets === void 0) return { presets: [] };
 		const roster = await presets.remoteExportList();
 		signal?.throwIfAborted();
 		const defaultId = roster.presets.find((preset) => preset.isDefault === true)?.id;
@@ -72542,8 +72585,7 @@ var DirectPresetCatalog = class {
 				...preset.description === void 0 ? {} : { description: preset.description },
 				...preset.broken === void 0 ? {} : { broken: preset.broken }
 			})),
-			...defaultId === void 0 ? {} : { defaultId },
-			modeSelectionEnabled: roster.modeSelectionEnabled
+			...defaultId === void 0 ? {} : { defaultId }
 		};
 	}
 	async resolve(id, signal) {
@@ -73599,6 +73641,1846 @@ var DirectHostCommandPort = class {
 	}
 };
 //#endregion
+//#region src/runtime/direct/plugin-manager-direct.ts
+/** Resolve one official localized text to the English fallback. */
+function localizedText(value) {
+	if (value === void 0) return void 0;
+	return typeof value === "string" ? value : value.en;
+}
+function detachIncompatible(entry) {
+	return Object.freeze({
+		name: entry.name,
+		version: entry.version,
+		runtimeVersion: entry.runtimeVersion,
+		peers: Object.freeze({ ...entry.peers })
+	});
+}
+function detachError(error) {
+	if (error === void 0) return void 0;
+	return Object.freeze({
+		code: error.code,
+		...error.diagnostic === void 0 ? {} : { diagnostic: error.diagnostic },
+		...error.incompatible === void 0 ? {} : { incompatible: Object.freeze(error.incompatible.map(detachIncompatible)) }
+	});
+}
+function detachBundle(bundle) {
+	const rows = bundle.rows.map((row) => Object.freeze({
+		rowId: row.rowId,
+		moduleName: row.moduleName,
+		...row.meta === void 0 ? {} : pickMeta(row.meta),
+		...row.entryId === void 0 ? {} : { entryId: String(row.entryId) }
+	}));
+	return Object.freeze({
+		name: bundle.name,
+		...bundle.version === void 0 ? {} : { version: bundle.version },
+		...bundle.meta === void 0 ? {} : pickMeta(bundle.meta),
+		...bundle.description === void 0 ? {} : { description: bundle.description },
+		enabled: bundle.enabled,
+		installed: bundle.installed,
+		optional: bundle.optional,
+		removable: bundle.removable,
+		...bundle.readOnlyReason === void 0 ? {} : { readOnlyReason: bundle.readOnlyReason },
+		...bundle.error === void 0 ? {} : { error: detachError(bundle.error) },
+		rows: Object.freeze(rows),
+		overrides: Object.freeze([...bundle.overrides])
+	});
+}
+function pickMeta(meta) {
+	const title = localizedText(meta.title);
+	const description = localizedText(meta.description);
+	return {
+		...title === void 0 ? {} : { title },
+		...description === void 0 ? {} : { description }
+	};
+}
+function detachPlugin(entry) {
+	const addressable = "patchId" in entry;
+	return Object.freeze({
+		entryId: String(entry.entryId),
+		moduleName: entry.moduleName,
+		...entry.meta === void 0 ? {} : pickMeta(entry.meta),
+		enabled: entry.enabled,
+		fiberPhase: entry.fiberPhase,
+		...addressable ? { patchId: entry.patchId } : { readOnlyReason: entry.readOnlyReason }
+	});
+}
+function detachRegistries(registries) {
+	return Object.freeze({
+		registry: registries.registry,
+		fallbackRegistries: Object.freeze([...registries.fallbackRegistries]),
+		resolved: registries.resolved
+	});
+}
+function detachChange(result) {
+	return Object.freeze({
+		changed: result.changed,
+		application: result.application,
+		stage: result.stage,
+		target: result.target,
+		...result.error === void 0 ? {} : { error: detachError(result.error) },
+		...result.warnings === void 0 ? {} : { warnings: Object.freeze([...result.warnings]) },
+		...result.bundle === void 0 ? {} : { bundle: result.bundle }
+	});
+}
+function detachInspection(inspection) {
+	if (inspection.status === "accepted") return Object.freeze({
+		status: "accepted",
+		kind: inspection.kind,
+		...inspection.name === void 0 ? {} : { name: inspection.name },
+		...inspection.version === void 0 ? {} : { version: inspection.version },
+		...inspection.description === void 0 ? {} : { description: inspection.description },
+		bundle: inspection.bundle,
+		registry: inspection.registry,
+		...inspection.host === void 0 ? {} : { host: inspection.host }
+	});
+	return Object.freeze({
+		status: "refused",
+		problem: inspection.problem,
+		reason: inspection.reason,
+		...inspection.registries === void 0 ? {} : { registries: Object.freeze([...inspection.registries]) }
+	});
+}
+function detachPhase(progress) {
+	return Object.freeze({
+		requestId: String(progress.requestId),
+		phase: progress.phase,
+		...progress.attempt === void 0 ? {} : { attempt: Object.freeze({
+			registry: progress.attempt.registry,
+			index: progress.attempt.index,
+			total: progress.attempt.total
+		}) }
+	});
+}
+function detachLog(chunk) {
+	return Object.freeze({
+		...chunk.requestId === void 0 ? {} : { requestId: String(chunk.requestId) },
+		jobId: chunk.jobId,
+		stream: chunk.stream,
+		text: chunk.text
+	});
+}
+/** Generate one install request id (the branded shape is a plain string). */
+function pluginInstallRequestId(value) {
+	return value;
+}
+/** The Direct backend's Plugin Manager port over the official Host service. */
+var DirectPluginManagerPort = class {
+	ctx;
+	constructor(ctx) {
+		this.ctx = ctx;
+	}
+	/** The official service, read lazily so the adapter construction never
+	* races the composition; a missing row is a fail-loud composition error. */
+	service() {
+		const service = this.ctx.get("pluginManager");
+		if (service === void 0) throw new Error("pluginManager service unavailable: the supported DSH base must mount @deepseek-ai/dsh-plugin-manager");
+		return service;
+	}
+	async snapshot() {
+		const service = this.service();
+		const [bundles, plugins, registries] = await Promise.all([
+			service.listBundles(),
+			service.listPlugins(),
+			service.registries()
+		]);
+		const exemptions = service.listVersionExemptions();
+		const exemptionFacts = Object.entries(exemptions.exemptions).map(([packageVersion, runtimeVersions]) => Object.freeze({
+			packageVersion,
+			runtimeVersions: Object.freeze([...runtimeVersions])
+		}));
+		return Object.freeze({
+			bundles: Object.freeze(bundles.map(detachBundle)),
+			plugins: Object.freeze(plugins.map(detachPlugin)),
+			registries: detachRegistries(registries),
+			exemptions: Object.freeze(exemptionFacts),
+			exemptionWarnings: Object.freeze([...exemptions.warnings])
+		});
+	}
+	async inspect(spec, registry, signal) {
+		return detachInspection(await this.service().inspect(spec, registry === void 0 ? void 0 : { registry }, signal));
+	}
+	async setBundleEnabled(name, enabled) {
+		return detachChange(await this.service().setBundleEnabled(name, enabled));
+	}
+	async setPluginEnabled(id, enabled) {
+		return detachChange(await this.service().setPluginEnabled(id, enabled));
+	}
+	async removeBundle(name) {
+		return detachChange(await this.service().removeBundle(name));
+	}
+	async startInstall(request) {
+		const options = {
+			requestId: pluginInstallRequestId(request.requestId),
+			registry: request.registry,
+			...request.enabled === void 0 ? {} : { enabled: request.enabled }
+		};
+		return detachChange(await this.service().installBundle(request.spec, options));
+	}
+	async waitForInstall(requestId) {
+		const result = await this.service().waitForInstall(pluginInstallRequestId(requestId));
+		return result === null ? null : detachChange(result);
+	}
+	async cancelInstall(requestId) {
+		const result = await this.service().cancelInstall(pluginInstallRequestId(requestId));
+		return Object.freeze({ status: result.status });
+	}
+	subscribeInstall(listener) {
+		const offState = this.ctx.on("plugin-manager/install-state", (payload) => {
+			listener({
+				kind: "phase",
+				phase: detachPhase(payload)
+			});
+		});
+		const offLog = this.ctx.on("plugin-manager/install-log", (payload) => {
+			listener({
+				kind: "log",
+				log: detachLog(payload)
+			});
+		});
+		return () => {
+			offState();
+			offLog();
+		};
+	}
+};
+//#endregion
+//#region src/runtime/direct/job-observation-direct.ts
+/**
+* The Direct selected-Job observation adapter (P1-B0/B1): the ONLY module
+* that knows the official `@deepseek-ai/dsh-api-job-controller` Host service.
+*
+* It calls `JobController.follow()` — the official NON-CONSUMING Host
+* observer (upstream proof: `packages/api/job-controller/src/observe.ts`
+* reads ONLY `registry.readAt()` and never `registry.read()`; it neither
+* advances the model `job_output` cursor nor acknowledges a completion
+* notice) — and maps its frames onto detached snapshots. It never polls,
+* never builds a custom cursor/gap state machine and never calls
+* `jobs.read()`.
+*
+* @module @xmoon76/dsh-pi-tui/runtime/direct/job-observation-direct
+*/
+/** The retained-output tail bound (a presentation preview, not an archive). */
+const TAIL_MAX_CHARS = 65536;
+function isTerminalStatus(status) {
+	return status === "completed" || status === "killed" || status === "failed";
+}
+/** The Direct backend's selected-Job observation port. */
+var DirectJobObservationPort = class {
+	ctx;
+	diag;
+	constructor(ctx, diag) {
+		this.ctx = ctx;
+		this.diag = diag;
+	}
+	open(sessionId, jobId, listener) {
+		const abort = new AbortController();
+		let closed = false;
+		let text = "";
+		let current;
+		let last;
+		const emit = (patch = {}) => {
+			const job = current;
+			last = Object.freeze({
+				jobId: job === void 0 ? jobId : String(job.id),
+				kind: job?.kind ?? "",
+				label: job?.label ?? "",
+				status: job?.status ?? "running",
+				...job?.progress === void 0 ? {} : { progress: job.progress },
+				...job?.detail === void 0 ? {} : { detail: job.detail },
+				text,
+				gapBefore: false,
+				settled: job !== void 0 && isTerminalStatus(job.status),
+				...patch
+			});
+			listener(last);
+		};
+		const service = this.ctx.get("jobController");
+		if (service === void 0) throw new Error("jobController service unavailable: the supported DSH base plus the pi-tui bundle must mount @deepseek-ai/dsh-api-job-controller");
+		runOwned("job observation", async () => {
+			let gap = false;
+			for await (const frame of service.follow({
+				sessionId,
+				jobId
+			}, abort.signal)) {
+				if (abort.signal.aborted) return;
+				if (frame.type === "opened") {
+					gap = frame.job.output.earliest > 0;
+					current = frame.job;
+					emit({ gapBefore: gap });
+					continue;
+				}
+				if (frame.type === "output") {
+					if (frame.lossy === true) gap = true;
+					for (const chunk of frame.chunks) {
+						if (chunk.gapBefore === true) gap = true;
+						text += chunk.text;
+					}
+					if (text.length > TAIL_MAX_CHARS) text = text.slice(text.length - TAIL_MAX_CHARS);
+					emit({ gapBefore: gap });
+					continue;
+				}
+				current = frame.job;
+				emit({ gapBefore: gap });
+				if (isTerminalStatus(frame.job.status)) return;
+			}
+		}, {
+			diag: this.diag,
+			isCancellation: () => abort.signal.aborted,
+			onError: (error) => {
+				if (closed || abort.signal.aborted) return;
+				const base = last;
+				listener(Object.freeze({
+					jobId,
+					kind: base?.kind ?? "",
+					label: base?.label ?? "",
+					status: base?.status ?? "running",
+					text,
+					gapBefore: base?.gapBefore ?? false,
+					settled: base?.settled ?? false,
+					error: safeErrorMessage$1(error)
+				}));
+			}
+		});
+		return () => {
+			if (closed) return;
+			closed = true;
+			abort.abort();
+		};
+	}
+};
+//#endregion
+//#region src/plugin-manager/classify.ts
+/** The bundle that provides the currently running TUI surface. */
+const SELF_BUNDLE = "@xmoon76/dsh-pi-tui";
+/** Aggregate several proven observations of ONE card into detached facts. */
+function aggregate(observations) {
+	const entryIds = /* @__PURE__ */ new Set();
+	const kinds = /* @__PURE__ */ new Set();
+	let contributionCount = 0;
+	let failed = 0;
+	let active = 0;
+	let advanced = false;
+	let unstable = false;
+	for (const observation of observations) {
+		if (observation.entryId !== void 0) entryIds.add(observation.entryId);
+		for (const kind of observation.contributionKinds) kinds.add(kind);
+		contributionCount += observation.contributionCount;
+		if (observation.health === "active") active += 1;
+		else if (observation.health === "failed") failed += 1;
+		else {
+			active += 1;
+			failed += 1;
+		}
+		if (observation.usesAdvancedCapability) advanced = true;
+		if (observation.usesUnstableCapability) unstable = true;
+	}
+	return Object.freeze({
+		entryIds: Object.freeze([...entryIds].sort()),
+		contributionKinds: Object.freeze([...kinds].sort()),
+		contributionCount,
+		health: failed === 0 ? "active" : active === 0 ? "failed" : "mixed",
+		usesAdvancedCapability: advanced,
+		usesUnstableCapability: unstable
+	});
+}
+/**
+* Classify every package card. Association requires a PROVEN Loader entry id
+* that belongs to exactly one card; otherwise the card stays `dsh-plugin`.
+*/
+function classifyPluginPackages(inputs, observations) {
+	const perCard = /* @__PURE__ */ new Map();
+	for (const observation of observations) {
+		if (observation.entryId === void 0) continue;
+		const owners = inputs.filter((input) => input.entryIds.includes(observation.entryId));
+		if (owners.length !== 1) continue;
+		const key = owners[0].key;
+		const list = perCard.get(key);
+		if (list === void 0) perCard.set(key, [observation]);
+		else list.push(observation);
+	}
+	const out = /* @__PURE__ */ new Map();
+	for (const input of inputs) {
+		if (input.bundleName === "@xmoon76/dsh-pi-tui") {
+			out.set(input.key, { role: "current-tui" });
+			continue;
+		}
+		const owned = perCard.get(input.key);
+		if (owned === void 0 || owned.length === 0) {
+			out.set(input.key, { role: "dsh-plugin" });
+			continue;
+		}
+		out.set(input.key, {
+			role: "tui-extension",
+			extension: aggregate(owned)
+		});
+	}
+	return out;
+}
+//#endregion
+//#region src/plugin-manager/model.ts
+/** Stable identity of one bundle card. */
+function bundleValue(name) {
+	return `bundle:${name}`;
+}
+/** Stable identity of one standalone plugin-entry card. */
+function entryValue(entryId) {
+	return `entry:${entryId}`;
+}
+/** The action values the panel maps to operations. */
+const PLUGIN_ACTION = {
+	install: "action:install",
+	refresh: "action:refresh",
+	close: "action:close",
+	toggle: "action:toggle",
+	remove: "action:remove",
+	back: "action:back",
+	confirmRemove: "action:confirm-remove",
+	cancelRemove: "action:cancel-remove"
+};
+/** The row-level toggle value for one addressable plugin entry id. */
+function rowToggleValue(entryId) {
+	return `action:toggle-row:${entryId}`;
+}
+/** The entry id of a row-level toggle value, or undefined. */
+function rowToggleEntryId(value) {
+	return value.startsWith("action:toggle-row:") ? value.slice(18) : void 0;
+}
+function section(label) {
+	return {
+		value: `section:${label}`,
+		kind: "section",
+		label,
+		tone: "dim",
+		selectable: false
+	};
+}
+function info(label, secondary) {
+	return {
+		value: `info:${label}:${secondary ?? ""}`,
+		kind: "info",
+		label,
+		...secondary === void 0 ? {} : { secondary },
+		tone: "dim",
+		selectable: false
+	};
+}
+function action(value, label, tone = "normal") {
+	return {
+		value,
+		kind: "action",
+		label,
+		tone,
+		selectable: true
+	};
+}
+/** Human text for one role, shown as the card's classification chip. */
+function roleLabel(role) {
+	switch (role) {
+		case "current-tui": return "Current TUI";
+		case "tui-extension": return "TUI extension";
+		default: return "DSH plugin";
+	}
+}
+function cardBadge(card) {
+	if (card.error !== void 0) return "error";
+	if (card.readOnlyReason !== void 0) return "read-only";
+	return card.enabled ? "active" : "disabled";
+}
+function cardTone(card) {
+	if (card.error !== void 0) return "error";
+	if (card.role === "current-tui") return "normal";
+	if (card.readOnlyReason !== void 0) return "warning";
+	return card.enabled ? "normal" : "dim";
+}
+/** The card's one-line secondary text: description + factual flags. */
+function cardSecondary(card) {
+	const text = card.title ?? card.description;
+	const flags = [roleLabel(card.role)];
+	if (card.role === "tui-extension" && card.extension !== void 0) {
+		flags.push(`${card.extension.contributionCount} contribution${card.extension.contributionCount === 1 ? "" : "s"}`);
+		flags.push(card.extension.health);
+	}
+	if (!card.installed) flags.push("provided");
+	if (card.optional) flags.push("optional");
+	const head = text ?? "";
+	const tail = flags.join(" · ");
+	return head === "" ? tail : `${head} · ${tail}`;
+}
+/** Render one Host error fact as an actionable line. */
+function errorText(error) {
+	const parts = [error.code];
+	if (error.diagnostic !== void 0 && error.diagnostic !== "") parts.push(error.diagnostic);
+	for (const entry of error.incompatible ?? []) parts.push(incompatibleText(entry));
+	return parts.join(" — ");
+}
+/** Render one rejected package with its required peer ranges. */
+function incompatibleText(entry) {
+	const peers = Object.entries(entry.peers).map(([name, range]) => `${name} ${range}`).join(", ");
+	return `${entry.name}@${entry.version} rejects DSH ${entry.runtimeVersion}${peers === "" ? "" : ` (needs ${peers})`}`;
+}
+/** Format the exemption list for the diagnostics section. */
+function exemptionText(entry) {
+	return `${entry.packageVersion} → ${entry.runtimeVersions.join(", ")}`;
+}
+/** The registries summary rendered on the list footer/detail. */
+function registriesText(registries) {
+	const parts = [registries.registry === null ? "pnpm default" : registries.registry];
+	if (registries.fallbackRegistries.length > 0) parts.push(`fallbacks: ${registries.fallbackRegistries.join(", ")}`);
+	if (registries.resolved !== null) parts.push(`resolved: ${registries.resolved}`);
+	return parts.join(" · ");
+}
+function rowView(row, live, selfOwned) {
+	const entryId = live?.entryId ?? row.entryId ?? "";
+	const title = live?.title ?? row.title;
+	const description = live?.description ?? row.description;
+	const addressable = live !== void 0 && live.patchId !== void 0 && live.readOnlyReason === void 0;
+	return Object.freeze({
+		entryId,
+		moduleName: live?.moduleName ?? row.moduleName,
+		...title === void 0 ? {} : { title },
+		...description === void 0 ? {} : { description },
+		enabled: live?.enabled ?? false,
+		fiberPhase: live?.fiberPhase ?? null,
+		live: live !== void 0,
+		...live?.patchId === void 0 ? {} : { patchId: live.patchId },
+		...live?.readOnlyReason === void 0 ? {} : { readOnlyReason: live.readOnlyReason },
+		selfProtected: selfOwned,
+		canToggle: addressable && !selfOwned
+	});
+}
+function entryRowView(entry, selfOwned) {
+	const addressable = entry.patchId !== void 0 && entry.readOnlyReason === void 0;
+	return Object.freeze({
+		entryId: entry.entryId,
+		moduleName: entry.moduleName,
+		...entry.title === void 0 ? {} : { title: entry.title },
+		...entry.description === void 0 ? {} : { description: entry.description },
+		enabled: entry.enabled,
+		fiberPhase: entry.fiberPhase,
+		live: true,
+		...entry.patchId === void 0 ? {} : { patchId: entry.patchId },
+		...entry.readOnlyReason === void 0 ? {} : { readOnlyReason: entry.readOnlyReason },
+		selfProtected: selfOwned,
+		canToggle: addressable && !selfOwned
+	});
+}
+/**
+* Build the classified model. `claims` comes from
+* {@link classifyPluginPackages}; an unclassified card falls back to
+* `dsh-plugin`.
+*/
+function buildPluginManagerModel(snapshot, claims) {
+	const liveByEntry = /* @__PURE__ */ new Map();
+	for (const entry of snapshot.plugins) liveByEntry.set(entry.entryId, entry);
+	const bundledEntryIds = /* @__PURE__ */ new Set();
+	for (const bundle of snapshot.bundles) for (const row of bundle.rows) if (row.entryId !== void 0) bundledEntryIds.add(String(row.entryId));
+	const selfBundle = snapshot.bundles.find((bundle) => bundle.name === SELF_BUNDLE);
+	const selfProtectionIds = /* @__PURE__ */ new Set([...(selfBundle?.rows ?? []).map((row) => row.rowId), ...selfBundle?.overrides ?? []]);
+	const cards = [];
+	for (const bundle of snapshot.bundles) {
+		const value = bundleValue(bundle.name);
+		const claim = claims.get(value);
+		const role = claim?.role ?? "dsh-plugin";
+		const isSelf = role === "current-tui";
+		const rows = bundle.rows.map((row) => {
+			return rowView(row, row.entryId === void 0 ? void 0 : liveByEntry.get(String(row.entryId)), isSelf || selfProtectionIds.has(row.rowId));
+		});
+		const hostToggle = bundle.readOnlyReason === void 0;
+		const hostRemove = bundle.removable && bundle.readOnlyReason === void 0;
+		cards.push(Object.freeze({
+			value,
+			source: "bundle",
+			role,
+			name: bundle.name,
+			...bundle.version === void 0 ? {} : { version: bundle.version },
+			...bundle.title === void 0 ? {} : { title: bundle.title },
+			...bundle.description === void 0 ? {} : { description: bundle.description },
+			enabled: bundle.enabled,
+			installed: bundle.installed,
+			optional: bundle.optional,
+			removable: bundle.removable,
+			...bundle.readOnlyReason === void 0 ? {} : { readOnlyReason: bundle.readOnlyReason },
+			...bundle.error === void 0 ? {} : { error: bundle.error },
+			rows: Object.freeze(rows),
+			overrides: Object.freeze([...bundle.overrides]),
+			...claim?.extension === void 0 ? {} : { extension: claim.extension },
+			canToggle: hostToggle && !isSelf,
+			canRemove: hostRemove && !isSelf,
+			isSelf
+		}));
+	}
+	for (const entry of snapshot.plugins) {
+		if (bundledEntryIds.has(entry.entryId)) continue;
+		const value = entryValue(entry.entryId);
+		const claim = claims.get(value);
+		const role = claim?.role ?? "dsh-plugin";
+		const selfProtected = entry.patchId !== void 0 && selfProtectionIds.has(entry.patchId);
+		const row = entryRowView(entry, selfProtected);
+		cards.push(Object.freeze({
+			value,
+			source: "entry",
+			role,
+			name: entry.moduleName,
+			...entry.title === void 0 ? {} : { title: entry.title },
+			...entry.description === void 0 ? {} : { description: entry.description },
+			enabled: entry.enabled,
+			installed: true,
+			optional: false,
+			removable: false,
+			...entry.readOnlyReason === void 0 ? {} : { readOnlyReason: entry.readOnlyReason },
+			rows: Object.freeze([row]),
+			overrides: Object.freeze([]),
+			...claim?.extension === void 0 ? {} : { extension: claim.extension },
+			canToggle: row.canToggle,
+			canRemove: false,
+			isSelf: selfProtected
+		}));
+	}
+	const empty = [];
+	const currentTui = cards.filter((card) => card.role === "current-tui");
+	const tuiExtensions = cards.filter((card) => card.role === "tui-extension");
+	const dshPlugins = cards.filter((card) => card.role === "dsh-plugin");
+	return Object.freeze({
+		currentTui: Object.freeze(currentTui.length > 0 ? currentTui : empty),
+		tuiExtensions: Object.freeze(tuiExtensions),
+		dshPlugins: Object.freeze(dshPlugins),
+		registries: snapshot.registries,
+		exemptions: snapshot.exemptions,
+		exemptionWarnings: snapshot.exemptionWarnings
+	});
+}
+function cardRow(card, busyValue) {
+	const name = card.version === void 0 ? card.name : `${card.name} ${card.version}`;
+	const label = busyValue === card.value ? `${name} …` : name;
+	return {
+		value: card.value,
+		kind: "card",
+		label,
+		...cardSecondary(card) === void 0 ? {} : { secondary: cardSecondary(card) },
+		badge: cardBadge(card),
+		tone: cardTone(card),
+		selectable: true
+	};
+}
+/** The top-level list: three sections, then the global actions. */
+function pluginManagerListRows(model, busyValue) {
+	const rows = [];
+	if (model.currentTui.length > 0) {
+		rows.push(section("Current TUI"));
+		for (const card of model.currentTui) rows.push(cardRow(card, busyValue));
+	}
+	if (model.tuiExtensions.length > 0) {
+		rows.push(section("TUI Extensions"));
+		for (const card of model.tuiExtensions) rows.push(cardRow(card, busyValue));
+	}
+	rows.push(section("DSH Plugins"));
+	for (const card of model.dshPlugins) rows.push(cardRow(card, busyValue));
+	rows.push(section("Registries"));
+	rows.push(info("registries", registriesText(model.registries)));
+	if (model.exemptions.length > 0) {
+		rows.push(section("Version exemptions"));
+		for (const entry of model.exemptions) rows.push(info("exemption", exemptionText(entry)));
+	}
+	for (const warning of model.exemptionWarnings) rows.push(info("exemption warning", warning));
+	rows.push(section("Actions"));
+	rows.push(action(PLUGIN_ACTION.install, "Install…"));
+	rows.push(action(PLUGIN_ACTION.refresh, "Refresh"));
+	rows.push(action(PLUGIN_ACTION.close, "Close"));
+	return rows;
+}
+/** Package detail: metadata, declared rows, diagnostics and item actions.
+* `exemptions` cross-references the profile's exact-version exemptions so a
+* compatibility error says whether one already applies (plan §11). */
+function cardDetailRows(card, exemptions = []) {
+	const rows = [];
+	const status = [card.enabled ? "enabled" : "disabled", roleLabel(card.role)];
+	if (!card.installed) status.push("provided by the installation");
+	if (card.optional) status.push("optional");
+	status.push(card.removable ? "removable" : "not removable");
+	rows.push(info("Status", status.join(" · ")));
+	if (card.readOnlyReason !== void 0) rows.push(info("Read-only", card.readOnlyReason));
+	if (card.error !== void 0) {
+		rows.push({
+			...info("Error", errorText(card.error)),
+			tone: "error"
+		});
+		for (const entry of card.error.incompatible ?? []) {
+			const key = `${entry.name}@${entry.version}`;
+			const exemption = exemptions.find((candidate) => candidate.packageVersion === key);
+			rows.push(info("  exemption", exemption === void 0 ? `${key}: no exact-version exemption applies` : `${key}: exempted for DSH ${exemption.runtimeVersions.join(", ")}`));
+		}
+	}
+	if (card.role === "current-tui") rows.push(info("This bundle provides the current TUI and is managed outside this screen."));
+	else if (card.isSelf) rows.push(info("This row is controlled by the Current TUI composition; it is not changed from this screen."));
+	if (card.extension !== void 0) {
+		const extension = card.extension;
+		rows.push(info("TUI contributions", `${extension.contributionCount} · ${extension.health}`));
+		rows.push(info("Contribution kinds", extension.contributionKinds.join(", ")));
+		rows.push(info("Proven entries", extension.entryIds.join(", ")));
+		if (extension.usesAdvancedCapability) rows.push(info("Capability use", "Uses Advanced capability"));
+		if (extension.usesUnstableCapability) rows.push(info("Capability use", "Uses Unstable capability"));
+	}
+	if (card.rows.length > 0) {
+		rows.push(info("Plugin rows"));
+		for (const row of card.rows) {
+			const text = row.title ?? row.description ?? row.moduleName;
+			const state = row.live ? `${row.enabled ? "enabled" : "disabled"} · ${row.fiberPhase ?? "no live fiber"}` : "not live";
+			rows.push(info(`  ${row.entryId === "" ? row.moduleName : row.entryId}`, `${text} · ${state}`));
+			if (row.selfProtected && card.role !== "current-tui") rows.push(info("    protected", "controlled by the Current TUI composition"));
+			if (row.canToggle) rows.push(action(rowToggleValue(row.entryId), row.enabled ? `    Disable row ${row.entryId}` : `    Enable row ${row.entryId}`));
+		}
+	}
+	if (card.overrides.length > 0) rows.push(info("Overrides", card.overrides.join(", ")));
+	rows.push(info("Actions"));
+	if (card.canToggle) rows.push(action(PLUGIN_ACTION.toggle, card.enabled ? "Disable" : "Enable"));
+	if (card.canRemove) rows.push(action(PLUGIN_ACTION.remove, "Remove…", "warning"));
+	rows.push(action(PLUGIN_ACTION.back, "Back"));
+	return rows;
+}
+/** Human text for one completed mutation, including restart/override facts. */
+function changeSummary(change) {
+	const parts = [`${change.stage} ${change.application}`];
+	if (change.bundle !== void 0) parts.push(`bundle ${change.bundle}`);
+	if (change.error !== void 0) parts.push(errorText(change.error));
+	if (change.application === "restart-required") parts.push("restart the profile to apply");
+	if (change.application === "overridden") parts.push("a higher-priority override still wins");
+	for (const warning of change.warnings ?? []) parts.push(warning);
+	return parts.join(" · ");
+}
+//#endregion
+//#region src/plugin-manager/controller.ts
+const LOG_MAX_LINES = 40;
+const LOG_MAX_CHARS = 4e3;
+let requestCounter = 0;
+/** One user install attempt owns exactly one id. */
+function nextInstallRequestId() {
+	requestCounter += 1;
+	return `plugin-install-${Date.now().toString(36)}-${requestCounter}`;
+}
+const EMPTY_MODEL = Object.freeze({
+	currentTui: Object.freeze([]),
+	tuiExtensions: Object.freeze([]),
+	dshPlugins: Object.freeze([]),
+	registries: Object.freeze({
+		registry: null,
+		fallbackRegistries: Object.freeze([]),
+		resolved: null
+	}),
+	exemptions: Object.freeze([]),
+	exemptionWarnings: Object.freeze([])
+});
+/** The Plugin Manager operation/presentation owner. */
+var PluginManagerController = class {
+	port;
+	hooks;
+	observationSource;
+	snapshot;
+	model = EMPTY_MODEL;
+	state = "loading";
+	error;
+	/** The exact notice text of the last failed inventory read, so a later
+	* successful read can clear it without clobbering an operation message. */
+	refreshErrorMessage;
+	entryHost = "direct-command";
+	mode = "list";
+	selected = 0;
+	detailValue;
+	confirming;
+	busy;
+	message;
+	readEpoch = 0;
+	committedEpoch = 0;
+	mutationToken = 0;
+	install;
+	installEpoch = 0;
+	unsubscribe;
+	disposed = false;
+	constructor(port, hooks, options) {
+		this.port = port;
+		this.hooks = hooks;
+		this.observationSource = options?.observations;
+		this.unsubscribe = port.subscribeInstall((event) => this.onInstallEvent(event));
+	}
+	/** One owned detached task (AGENTS.md: never a bare `void` promise chain). */
+	run(label, task) {
+		runDetached(label, task, { diag: this.hooks.diag });
+	}
+	/** Open the shared surface from one host: read once and show the right view. */
+	open(host) {
+		if (this.disposed) return;
+		this.entryHost = host;
+		const phase = this.install?.phase;
+		const dispatched = phase === "starting" || phase === "installing" || phase === "applying" || phase === "cancelling";
+		this.mode = dispatched ? "install" : "list";
+		this.selected = 0;
+		this.detailValue = void 0;
+		this.confirming = void 0;
+		this.message = void 0;
+		this.run("plugin manager read", () => this.read());
+	}
+	/** Explicit Refresh: read the official inventory again. `read()` owns the
+	* notice clearing (it removes only a previous read-failure notice, so a
+	* just-shown operation outcome survives a refresh). */
+	refresh() {
+		if (this.disposed) return;
+		this.run("plugin manager read", () => this.read());
+	}
+	/** Release the install-event subscription (runner teardown). */
+	dispose() {
+		if (this.disposed) return;
+		this.disposed = true;
+		this.unsubscribe();
+	}
+	/** Current rendered rows for the panel. */
+	rows() {
+		if (this.mode === "detail") {
+			const card = this.selectedCard();
+			if (card !== void 0) return cardDetailRows(card, this.model.exemptions);
+			return pluginManagerListRows(this.model, this.busy);
+		}
+		if (this.mode === "confirm-remove") {
+			const name = this.confirming?.name ?? "";
+			const stale = this.confirmingCard() === void 0;
+			return [
+				{
+					value: "info:confirm",
+					kind: "info",
+					label: `Remove ${name}?`,
+					secondary: "unloads the bundle, then removes the dependency",
+					tone: "warning",
+					selectable: false
+				},
+				{
+					value: PLUGIN_ACTION.confirmRemove,
+					kind: "action",
+					label: "Remove",
+					tone: "warning",
+					selectable: true
+				},
+				{
+					value: PLUGIN_ACTION.cancelRemove,
+					kind: "action",
+					label: "Cancel",
+					tone: "normal",
+					selectable: true
+				},
+				...stale ? [{
+					value: "info:stale",
+					kind: "info",
+					label: "This bundle changed since the confirmation opened; re-open it from the list.",
+					tone: "error",
+					selectable: false
+				}] : []
+			];
+		}
+		return pluginManagerListRows(this.model, this.busy);
+	}
+	/** The stable identity of the currently selected selectable row. */
+	selectedValue() {
+		const selectable = this.rows().filter((row) => row.selectable);
+		if (selectable.length === 0) return void 0;
+		return selectable[Math.min(this.selected, selectable.length - 1)]?.value;
+	}
+	/** The one-line footer hint for the current mode. */
+	hint() {
+		if (this.mode === "install") return this.installHint();
+		if (this.mode === "confirm-remove") return "Enter confirm · Esc cancel";
+		if (this.mode === "detail") return "Enter action · Esc back · R refresh";
+		return this.entryHost === "settings-submenu" ? "Enter open/act · R refresh · I install · Esc back" : "Enter open/act · R refresh · I install · Esc close";
+	}
+	/** The panel title. */
+	title() {
+		if (this.mode === "install") return "Plugin Manager · install";
+		if (this.mode === "detail") {
+			const card = this.selectedCard();
+			if (card !== void 0) return `Plugin Manager · ${card.name}`;
+		}
+		return "Plugin Manager";
+	}
+	/** The transient notice line (an outcome or a stale-confirmation warning). */
+	notice() {
+		return this.message;
+	}
+	/** The load/error state for the panel's empty frame. */
+	status() {
+		return {
+			state: this.state,
+			...this.error === void 0 ? {} : { error: this.error }
+		};
+	}
+	/** The install dialog view, when the panel is in install mode. */
+	installView() {
+		if (this.mode !== "install" || this.install === void 0) return void 0;
+		const active = this.install;
+		return {
+			phase: active.phase,
+			spec: active.spec,
+			registry: active.registry,
+			...active.inspection === void 0 ? {} : { inspection: active.inspection },
+			log: active.log,
+			...active.outcome === void 0 ? {} : { outcome: active.outcome },
+			...active.message === void 0 ? {} : { message: active.message },
+			cancellable: active.phase === "installing" || active.phase === "starting" || active.phase === "cancelling",
+			...active.phase === "editing" || active.phase === "inspecting" || active.phase === "confirm" ? {} : { requestId: active.requestId }
+		};
+	}
+	/** The Host-offered registries for the install dialog (Host facts + null). */
+	registryOptions() {
+		const registries = this.snapshot?.registries;
+		const options = [];
+		options.push({
+			value: null,
+			label: "pnpm configuration default"
+		});
+		if (registries !== void 0) {
+			if (registries.registry !== null) options.push({
+				value: registries.registry,
+				label: registries.registry
+			});
+			for (const fallback of registries.fallbackRegistries) if (fallback !== registries.registry) options.push({
+				value: fallback,
+				label: fallback
+			});
+		}
+		return options;
+	}
+	/** Move the selection among the current mode's selectable rows. */
+	move(delta) {
+		const count = this.rows().filter((row) => row.selectable).length;
+		if (count === 0) return;
+		const next = Math.min(count - 1, Math.max(0, this.selected + delta));
+		if (next === this.selected) return;
+		this.selected = next;
+		this.hooks.requestRender();
+	}
+	/** Activate the selected row. */
+	activate() {
+		const selectable = this.rows().filter((row) => row.selectable);
+		const row = selectable[Math.min(this.selected, Math.max(0, selectable.length - 1))];
+		if (row === void 0) return;
+		if (row.kind === "card") {
+			this.detailValue = row.value;
+			this.mode = "detail";
+			this.selected = 0;
+			this.message = void 0;
+			this.hooks.requestRender();
+			return;
+		}
+		const toggleEntryId = rowToggleEntryId(row.value);
+		if (toggleEntryId !== void 0) {
+			this.run("plugin manager row toggle", () => this.runToggleRow(toggleEntryId));
+			return;
+		}
+		switch (row.value) {
+			case PLUGIN_ACTION.back:
+				this.mode = "list";
+				this.detailValue = void 0;
+				this.selected = 0;
+				this.hooks.requestRender();
+				return;
+			case PLUGIN_ACTION.refresh:
+				this.run("plugin manager read", () => this.read());
+				return;
+			case PLUGIN_ACTION.close:
+				this.hooks.requestClose();
+				return;
+			case PLUGIN_ACTION.install:
+				this.openInstall();
+				return;
+			case PLUGIN_ACTION.toggle:
+				this.run("plugin manager toggle", () => this.toggleSelectedCard());
+				return;
+			case PLUGIN_ACTION.remove:
+				this.requestRemoveSelected();
+				return;
+			case PLUGIN_ACTION.confirmRemove:
+				this.run("plugin manager remove", () => this.runRemove());
+				return;
+			case PLUGIN_ACTION.cancelRemove:
+				this.mode = "detail";
+				this.confirming = void 0;
+				this.selected = 0;
+				this.hooks.requestRender();
+				return;
+			default: return;
+		}
+	}
+	/** Esc semantics: leave the innermost view; close only from the list. */
+	back() {
+		if (this.mode === "install") {
+			const phase = this.install?.phase;
+			if (phase === "confirm" || phase === "inspecting") {
+				this.editInstall();
+				return;
+			}
+			this.closeInstall();
+			return;
+		}
+		if (this.mode === "confirm-remove") {
+			this.mode = "detail";
+			this.confirming = void 0;
+			this.selected = 0;
+			this.hooks.requestRender();
+			return;
+		}
+		if (this.mode === "detail") {
+			this.mode = "list";
+			this.detailValue = void 0;
+			this.selected = 0;
+			this.hooks.requestRender();
+			return;
+		}
+		this.hooks.requestClose();
+	}
+	/** Open the install dialog; an active operation is reopened, never restarted. */
+	openInstall() {
+		const active = this.install;
+		if (active !== void 0 && active.phase !== "done" && active.phase !== "failed" && active.phase !== "unknown") {
+			this.mode = "install";
+			this.selected = 0;
+			this.hooks.requestRender();
+			return;
+		}
+		this.installEpoch += 1;
+		this.install = {
+			requestId: nextInstallRequestId(),
+			spec: "",
+			registry: null,
+			phase: "editing",
+			log: []
+		};
+		this.mode = "install";
+		this.selected = 0;
+		this.message = void 0;
+		this.hooks.requestRender();
+	}
+	/** Inspect one spec against the Host before offering installation. */
+	inspect(spec, registry) {
+		const active = this.install;
+		if (active === void 0 || this.mode !== "install") return;
+		const trimmed = spec.trim();
+		if (trimmed === "") {
+			active.message = "Enter a package spec first";
+			this.hooks.requestRender();
+			return;
+		}
+		if (registry !== null && !/^https?:\/\/\S+$/i.test(registry)) {
+			active.message = "registry must be an http(s) URL";
+			this.hooks.requestRender();
+			return;
+		}
+		const epoch = ++this.installEpoch;
+		active.inspectAbort?.abort();
+		const abort = new AbortController();
+		active.inspectAbort = abort;
+		active.spec = trimmed;
+		active.registry = registry;
+		active.phase = "inspecting";
+		active.message = void 0;
+		active.inspection = void 0;
+		this.hooks.requestRender();
+		this.run("plugin manager inspect", () => this.performInspect(trimmed, registry, epoch, abort));
+	}
+	async performInspect(spec, registry, epoch, abort) {
+		try {
+			const inspection = await this.port.inspect(spec, registry, abort.signal);
+			if (this.disposed || this.installEpoch !== epoch) return;
+			const current = this.install;
+			if (current === void 0) return;
+			current.inspection = inspection;
+			current.phase = "confirm";
+			current.message = inspection.status === "refused" ? `refused: ${inspection.problem} — ${inspection.reason}` : void 0;
+			this.hooks.requestRender();
+		} catch (error) {
+			if (this.disposed || this.installEpoch !== epoch) return;
+			const current = this.install;
+			if (current === void 0) return;
+			current.phase = "editing";
+			current.message = `inspect failed: ${errorMessage(error)}`;
+			this.hooks.requestRender();
+		}
+	}
+	/** Return to spec entry from the confirm/inspecting step (aborts an inspect). */
+	editInstall() {
+		const active = this.install;
+		if (active === void 0 || this.mode !== "install") return;
+		active.inspectAbort?.abort();
+		active.inspectAbort = void 0;
+		this.installEpoch += 1;
+		active.phase = "editing";
+		active.message = void 0;
+		this.hooks.requestRender();
+	}
+	/** Dispatch the official install after an accepted inspection. */
+	confirmInstall() {
+		const active = this.install;
+		if (active === void 0 || active.phase !== "confirm") return;
+		if (active.inspection?.status !== "accepted") return;
+		active.phase = "starting";
+		active.message = void 0;
+		this.hooks.requestRender();
+		const requestId = active.requestId;
+		this.run("plugin manager install", () => this.performInstall(requestId));
+	}
+	/** Dispatch installBundle and settle it; an indeterminate failure recovers
+	* through the official waitForInstall and NEVER retries the install. */
+	async performInstall(requestId) {
+		const active = this.install;
+		if (active === void 0 || active.requestId !== requestId) return;
+		let outcome;
+		try {
+			outcome = await this.port.startInstall({
+				requestId,
+				spec: active.spec,
+				registry: active.registry,
+				enabled: true
+			});
+		} catch (error) {
+			if (this.disposed) return;
+			let recovered = null;
+			try {
+				recovered = await this.port.waitForInstall(requestId);
+			} catch {
+				recovered = null;
+			}
+			if (this.disposed) return;
+			const current = this.install;
+			if (current === void 0 || current.requestId !== requestId) return;
+			if (recovered !== null) {
+				this.settleInstall(requestId, recovered);
+				return;
+			}
+			current.phase = "unknown";
+			current.message = `install outcome unknown: ${errorMessage(error)} — check the inventory below; not retried automatically`;
+			this.run("plugin manager read", () => this.read());
+			this.hooks.requestRender();
+			if (!this.hooks.isOpen()) this.hooks.notify("plugin install outcome unknown; inventory refreshed", "error");
+			return;
+		}
+		if (this.disposed) return;
+		this.settleInstall(requestId, outcome);
+	}
+	/** Stop an active installation; only valid before the Host starts applying. */
+	cancelInstall() {
+		const active = this.install;
+		if (active === void 0) return;
+		if (active.phase !== "installing" && active.phase !== "starting") return;
+		active.phase = "cancelling";
+		active.message = void 0;
+		this.hooks.requestRender();
+		this.run("plugin manager cancel install", () => this.performCancel(active.requestId));
+	}
+	async performCancel(requestId) {
+		try {
+			const cancellation = await this.port.cancelInstall(requestId);
+			if (this.disposed) return;
+			const current = this.install;
+			if (current === void 0 || current.requestId !== requestId) return;
+			if (cancellation.status === "cancelled") {
+				current.phase = "done";
+				current.message = "cancelled — profile files restored";
+			} else if (cancellation.status === "too-late") {
+				current.phase = "applying";
+				current.message = "too late to cancel: the bundle is being applied";
+			} else {
+				current.phase = "unknown";
+				current.message = "the installation already settled; the outcome will reconcile";
+				this.run("plugin manager read", () => this.read());
+			}
+			this.hooks.requestRender();
+		} catch (error) {
+			if (this.disposed) return;
+			const current = this.install;
+			if (current === void 0 || current.requestId !== requestId) return;
+			current.phase = "installing";
+			current.message = `cancel failed: ${errorMessage(error)}`;
+			this.hooks.requestRender();
+		}
+	}
+	/** Leave the install dialog without touching the Host operation. */
+	closeInstall() {
+		if (this.install?.phase === "inspecting") {
+			this.install.inspectAbort?.abort();
+			this.install.inspectAbort = void 0;
+			this.installEpoch += 1;
+			this.install.phase = "editing";
+		}
+		this.mode = "list";
+		this.selected = 0;
+		this.hooks.requestRender();
+	}
+	/**
+	* Toggle the selected card through the official authority. Public because
+	* it is the operation the panel's action row dispatches; it re-checks the
+	* EFFECTIVE capability, so a Current-TUI card can never be mutated here
+	* even if a future UI accidentally exposes the action.
+	*/
+	async toggleSelectedCard() {
+		const card = this.activeCard();
+		if (card === void 0) return;
+		if (!card.canToggle) {
+			this.message = card.isSelf ? selfRefusal(card.name, card.role) : `cannot change ${card.name}: ${card.readOnlyReason ?? "read-only"}`;
+			this.hooks.requestRender();
+			return;
+		}
+		const token = ++this.mutationToken;
+		this.busy = card.value;
+		this.message = void 0;
+		this.hooks.requestRender();
+		try {
+			const change = card.source === "bundle" ? await this.port.setBundleEnabled(card.name, !card.enabled) : await this.port.setPluginEnabled(card.rows[0].entryId, !card.enabled);
+			if (this.disposed || token !== this.mutationToken) return;
+			this.message = changeSummary(change);
+		} catch (error) {
+			if (this.disposed || token !== this.mutationToken) return;
+			this.message = `enable/disable failed: ${errorMessage(error)}`;
+		} finally {
+			if (!this.disposed && token === this.mutationToken) this.busy = void 0;
+		}
+		await this.read();
+	}
+	async runToggleRow(entryId) {
+		const row = this.activeCard()?.rows.find((candidate) => candidate.entryId === entryId);
+		if (row === void 0) return;
+		if (!row.canToggle) {
+			this.message = row.selfProtected ? `${entryId} is controlled by the Current TUI composition and cannot be changed from here` : `cannot change ${entryId}: ${row.readOnlyReason ?? "not addressable"}`;
+			this.hooks.requestRender();
+			return;
+		}
+		const token = ++this.mutationToken;
+		this.busy = rowToggleValueBusy(entryId);
+		this.message = void 0;
+		this.hooks.requestRender();
+		try {
+			const change = await this.port.setPluginEnabled(entryId, !row.enabled);
+			if (this.disposed || token !== this.mutationToken) return;
+			this.message = changeSummary(change);
+		} catch (error) {
+			if (this.disposed || token !== this.mutationToken) return;
+			this.message = `enable/disable failed: ${errorMessage(error)}`;
+		} finally {
+			if (!this.disposed && token === this.mutationToken) this.busy = void 0;
+		}
+		await this.read();
+	}
+	/**
+	* Open the destructive confirmation for the selected bundle. Public for the
+	* same reason as {@link toggleSelectedCard}: it re-checks the effective
+	* capability before a confirmation is ever shown.
+	*/
+	requestRemoveSelected() {
+		const card = this.activeCard();
+		if (card === void 0 || card.source !== "bundle") return;
+		if (!card.canRemove) {
+			this.message = card.isSelf ? selfRefusal(card.name, card.role) : `cannot remove ${card.name}: ${card.readOnlyReason ?? "not removable"}`;
+			this.hooks.requestRender();
+			return;
+		}
+		this.confirming = {
+			value: card.value,
+			name: card.name,
+			epoch: this.readEpoch
+		};
+		this.mode = "confirm-remove";
+		this.selected = 0;
+		this.message = void 0;
+		this.hooks.requestRender();
+	}
+	async runRemove() {
+		const confirmation = this.confirming;
+		if (confirmation === void 0) return;
+		const card = this.confirmingCard();
+		if (card === void 0 || card.isSelf || !card.canRemove) {
+			this.mode = "detail";
+			this.confirming = void 0;
+			this.selected = 0;
+			this.message = card?.isSelf === true ? selfRefusal(confirmation.name, card?.role ?? "dsh-plugin") : "the bundle changed since the confirmation opened; nothing was removed";
+			this.hooks.requestRender();
+			return;
+		}
+		const token = ++this.mutationToken;
+		this.busy = confirmation.value;
+		this.mode = "detail";
+		this.confirming = void 0;
+		this.selected = 0;
+		this.hooks.requestRender();
+		try {
+			const change = await this.port.removeBundle(confirmation.name);
+			if (this.disposed || token !== this.mutationToken) return;
+			this.message = changeSummary(change);
+			if (change.error !== void 0) this.detailValue = void 0;
+		} catch (error) {
+			if (this.disposed || token !== this.mutationToken) return;
+			this.message = `remove failed: ${errorMessage(error)}`;
+		} finally {
+			if (!this.disposed && token === this.mutationToken) this.busy = void 0;
+		}
+		await this.read();
+	}
+	allCards() {
+		return [
+			...this.model.currentTui,
+			...this.model.tuiExtensions,
+			...this.model.dshPlugins
+		];
+	}
+	/** The card of the open detail view (detail mode only). */
+	selectedCard() {
+		if (this.detailValue === void 0) return void 0;
+		return this.allCards().find((card) => card.value === this.detailValue);
+	}
+	/**
+	* The card a mutation targets: the open detail card, else the selected list
+	* row's card. Resolving from the SELECTED ROW (never an index) keeps the
+	* dispatch guard reachable even when the action row is not rendered.
+	*/
+	activeCard() {
+		if (this.mode === "detail") return this.selectedCard();
+		const selectable = this.rows().filter((row) => row.selectable);
+		if (selectable.length === 0) return void 0;
+		const value = selectable[Math.min(this.selected, selectable.length - 1)]?.value;
+		if (value === void 0) return void 0;
+		return this.allCards().find((card) => card.value === value);
+	}
+	confirmingCard() {
+		const confirmation = this.confirming;
+		if (confirmation === void 0) return void 0;
+		if (confirmation.epoch !== this.readEpoch) return void 0;
+		return this.allCards().find((card) => card.value === confirmation.value);
+	}
+	buildModel(snapshot) {
+		const observations = this.observationSource?.() ?? [];
+		const inputs = [];
+		const bundledEntryIds = /* @__PURE__ */ new Set();
+		for (const bundle of snapshot.bundles) {
+			for (const row of bundle.rows) if (row.entryId !== void 0) bundledEntryIds.add(String(row.entryId));
+			inputs.push({
+				key: bundleValue(bundle.name),
+				bundleName: bundle.name,
+				entryIds: bundle.rows.flatMap((row) => row.entryId === void 0 ? [] : [String(row.entryId)])
+			});
+		}
+		for (const entry of snapshot.plugins) {
+			if (bundledEntryIds.has(entry.entryId)) continue;
+			inputs.push({
+				key: entryValue(entry.entryId),
+				entryIds: [entry.entryId]
+			});
+		}
+		return buildPluginManagerModel(snapshot, classifyPluginPackages(inputs, observations));
+	}
+	async read() {
+		if (this.disposed) return;
+		const epoch = ++this.readEpoch;
+		this.state = "loading";
+		this.hooks.requestRender();
+		try {
+			const snapshot = await this.port.snapshot();
+			if (this.disposed || epoch < this.committedEpoch) return;
+			this.committedEpoch = epoch;
+			this.snapshot = snapshot;
+			this.model = this.buildModel(snapshot);
+			this.state = "ready";
+			this.error = void 0;
+			if (this.message === this.refreshErrorMessage) this.message = void 0;
+			this.refreshErrorMessage = void 0;
+			this.clampSelection();
+			this.hooks.requestRender();
+		} catch (error) {
+			if (this.disposed || epoch < this.committedEpoch) return;
+			this.committedEpoch = epoch;
+			this.state = "error";
+			this.error = errorMessage(error);
+			this.refreshErrorMessage = `refresh failed: ${this.error}`;
+			this.message = this.refreshErrorMessage;
+			this.hooks.requestRender();
+		}
+	}
+	clampSelection() {
+		const count = this.rows().filter((row) => row.selectable).length;
+		this.selected = count === 0 ? 0 : Math.min(this.selected, count - 1);
+	}
+	settleInstall(requestId, outcome) {
+		const current = this.install;
+		if (current === void 0 || current.requestId !== requestId) return;
+		current.outcome = outcome;
+		if (outcome.application === "failed") {
+			current.phase = "failed";
+			current.message = changeSummary(outcome);
+		} else if (outcome.application === "cancelled") {
+			current.phase = "done";
+			current.message = "cancelled — profile files restored";
+		} else {
+			current.phase = "done";
+			current.message = changeSummary(outcome);
+		}
+		this.hooks.requestRender();
+		this.run("plugin manager read", () => this.read());
+		if (!this.hooks.isOpen()) this.hooks.notify(`plugin install ${outcome.application}: ${outcome.target}`, outcome.application === "failed" ? "error" : "info");
+	}
+	onInstallEvent(event) {
+		if (this.disposed) return;
+		const active = this.install;
+		if (active === void 0) return;
+		if (event.kind === "phase") {
+			if (event.phase.requestId !== active.requestId) return;
+			if (event.phase.phase === "installing") active.phase = "installing";
+			else if (event.phase.phase === "applying") active.phase = "applying";
+			else if (event.phase.phase === "cancelling") active.phase = "cancelling";
+			if (event.phase.attempt !== void 0) active.message = `installing from ${event.phase.attempt.registry ?? "pnpm default"} (${event.phase.attempt.index}/${event.phase.attempt.total})`;
+			this.hooks.requestRender();
+			return;
+		}
+		if (event.log.requestId !== active.requestId) return;
+		this.appendLog(active, event.log.stream, event.log.text);
+		this.hooks.requestRender();
+	}
+	appendLog(active, stream, text) {
+		if (text === "") return;
+		for (const line of text.split("\n")) {
+			if (line === "") continue;
+			active.log.push(stream === "stderr" ? `! ${line}` : line);
+		}
+		if (active.log.length > LOG_MAX_LINES) active.log.splice(0, active.log.length - LOG_MAX_LINES);
+		let total = active.log.reduce((sum, line) => sum + line.length + 1, 0);
+		while (total > LOG_MAX_CHARS && active.log.length > 1) total -= active.log.shift().length + 1;
+	}
+	installHint() {
+		const active = this.install;
+		if (active === void 0) return "Enter inspect · Esc close";
+		if (active.phase === "editing") return "Enter inspect · Esc close";
+		if (active.phase === "inspecting") return "inspecting…";
+		if (active.phase === "confirm") return active.inspection?.status === "accepted" ? "Enter install · Esc edit" : "Esc edit";
+		if (active.phase === "done" || active.phase === "failed" || active.phase === "unknown") return "Esc close dialog";
+		return active.phase === "installing" || active.phase === "starting" || active.phase === "cancelling" ? "Esc hide · C cancel" : "Esc hide";
+	}
+};
+/** The busy key for one row-level toggle (never the card row's identity). */
+function rowToggleValueBusy(entryId) {
+	return `action:toggle-row:${entryId}`;
+}
+/** The refusal text for a self-protected target: the whole TUI bundle vs one of
+* its modules (a protected standalone entry is not "the current TUI" itself). */
+function selfRefusal(name, role) {
+	return role === "current-tui" ? `${name} provides the current TUI and cannot be changed from here` : `${name} is controlled by the Current TUI composition and cannot be changed from here`;
+}
+function errorMessage(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+//#endregion
+//#region src/plugin-manager/host-registry.ts
+/** Token-owned active-host registry (see the module header). */
+var PluginManagerHostRegistry = class {
+	active;
+	/** Whether any Plugin Manager surface currently owns the manager. */
+	isOpen() {
+		return this.active !== void 0;
+	}
+	/** Invoke the ACTIVE surface's user close path (no-op when closed). */
+	closeActive() {
+		this.active?.close();
+	}
+	/**
+	* Claim the manager for one surface. `close` is the surface's user close
+	* path (what {@link closeActive} calls); `onNormalClose` runs ONLY for a
+	* normal close. A later claim nests over — and restores — the previous owner.
+	*/
+	claim(close, onNormalClose = () => {}) {
+		const token = {};
+		const previous = this.active;
+		this.active = {
+			token,
+			close
+		};
+		const restore = () => {
+			if (this.active?.token !== token) return false;
+			this.active = previous;
+			return true;
+		};
+		return {
+			token,
+			closeNormally: () => {
+				if (restore()) onNormalClose();
+			},
+			releaseExternally: () => {
+				restore();
+			}
+		};
+	}
+};
+//#endregion
+//#region src/plugin-manager/panel.ts
+/**
+* Plugin Manager panel (P1-A/A2/A3): rendering and input only. It draws the
+* rows the controller exposes, converts semantic keys into controller
+* actions, and owns the install dialog's text widgets (spec + custom
+* registry). It never reads a Host service, never mutates inventory and
+* never decides success.
+*
+* @module @xmoon76/dsh-pi-tui/plugin-manager/panel
+*/
+function tone(text, rowTone) {
+	switch (rowTone) {
+		case "dim": return color.textDim(text);
+		case "success": return color.success(text);
+		case "warning": return color.warning(text);
+		case "error": return color.error(text);
+		default: return text;
+	}
+}
+function badge(text, rowTone) {
+	return tone(`[${text}]`, rowTone);
+}
+/** The Plugin Manager overlay component. */
+var PluginManagerPanel = class {
+	controller;
+	requestRender;
+	maxRows = Number.POSITIVE_INFINITY;
+	_focused = false;
+	disposed = false;
+	specInput = new Input();
+	registryInput = new Input();
+	installFocus = "spec";
+	registryIndex = 0;
+	customRegistry = false;
+	/** Fired once when the owning surface disposes this panel (any hide path). */
+	onDispose;
+	disposeNotified = false;
+	constructor(controller, requestRender, options = {}) {
+		this.controller = controller;
+		this.requestRender = requestRender;
+		this.onDispose = options.onDispose;
+		this.registryInput.setValue("");
+	}
+	/** The frame's row budget (frame height minus its two border rows). */
+	setMaxRows(rows) {
+		this.maxRows = Number.isFinite(rows) ? Math.max(1, Math.floor(rows)) : Number.POSITIVE_INFINITY;
+	}
+	get focused() {
+		return this._focused;
+	}
+	set focused(value) {
+		this._focused = value;
+		this.syncInputFocus();
+	}
+	invalidate() {
+		this.specInput.invalidate();
+		this.registryInput.invalidate();
+	}
+	dispose() {
+		this.disposed = true;
+		this.specInput.focused = false;
+		this.registryInput.focused = false;
+		if (this.disposeNotified) return;
+		this.disposeNotified = true;
+		this.onDispose?.();
+	}
+	handleInput(data) {
+		if (this.disposed) return;
+		if (matchesKey(data, "escape") || matchesKey(data, "ctrl+c")) {
+			this.controller.back();
+			return;
+		}
+		const install = this.controller.installView();
+		if (install !== void 0) {
+			this.handleInstallInput(data, install);
+			return;
+		}
+		if (matchesKey(data, "up") || matchesKey(data, "ctrl+p")) {
+			this.controller.move(-1);
+			this.requestRender();
+			return;
+		}
+		if (matchesKey(data, "down") || matchesKey(data, "ctrl+n")) {
+			this.controller.move(1);
+			this.requestRender();
+			return;
+		}
+		if (matchesKey(data, "enter")) {
+			this.controller.activate();
+			this.requestRender();
+			return;
+		}
+		if (data === "r" || data === "R") {
+			this.controller.refresh();
+			return;
+		}
+		if (data === "i" || data === "I") {
+			this.controller.openInstall();
+			return;
+		}
+	}
+	handleInstallInput(data, install) {
+		if (install.phase === "editing") {
+			if (matchesKey(data, "tab")) {
+				this.installFocus = this.installFocus === "spec" ? "registry" : "spec";
+				this.syncInputFocus();
+				this.requestRender();
+				return;
+			}
+			if (this.installFocus === "spec") {
+				if (matchesKey(data, "enter")) {
+					this.submitInspect();
+					return;
+				}
+				this.specInput.handleInput(data);
+				this.requestRender();
+				return;
+			}
+			if (this.customRegistry) {
+				if (matchesKey(data, "enter")) {
+					this.submitInspect();
+					return;
+				}
+				this.registryInput.handleInput(data);
+				this.requestRender();
+				return;
+			}
+			if (matchesKey(data, "up")) {
+				this.cycleRegistry(-1);
+				return;
+			}
+			if (matchesKey(data, "down")) {
+				this.cycleRegistry(1);
+				return;
+			}
+			if (matchesKey(data, "enter")) {
+				this.submitInspect();
+				return;
+			}
+			return;
+		}
+		if (install.phase === "confirm") {
+			if (matchesKey(data, "enter") && install.inspection?.status === "accepted") {
+				this.controller.confirmInstall();
+				this.requestRender();
+			}
+			return;
+		}
+		if (data === "c" || data === "C") {
+			this.controller.cancelInstall();
+			this.requestRender();
+		}
+	}
+	submitInspect() {
+		this.controller.inspect(this.specInput.getValue(), this.chosenRegistry());
+		this.requestRender();
+	}
+	cycleRegistry(delta) {
+		const options = this.controller.registryOptions();
+		const total = options.length + 1;
+		this.registryIndex = ((this.registryIndex + delta) % total + total) % total;
+		this.customRegistry = this.registryIndex === options.length;
+		this.syncInputFocus();
+		this.requestRender();
+	}
+	chosenRegistry() {
+		if (this.customRegistry) return this.registryInput.getValue().trim();
+		return this.controller.registryOptions()[this.registryIndex]?.value ?? null;
+	}
+	syncInputFocus() {
+		const editing = this.controller.installView()?.phase === "editing";
+		this.specInput.focused = this._focused && editing === true && this.installFocus === "spec";
+		this.registryInput.focused = this._focused && editing === true && this.installFocus === "registry" && this.customRegistry;
+	}
+	render(width) {
+		const safeWidth = Math.max(1, width);
+		this.syncInputFocus();
+		const install = this.controller.installView();
+		const rendered = install === void 0 ? this.renderList(safeWidth) : this.renderInstall(safeWidth, install);
+		const limit = Number.isFinite(this.maxRows) ? Math.max(1, Math.floor(this.maxRows)) : Number.POSITIVE_INFINITY;
+		return this.windowLines(rendered.lines, rendered.selectedLine, limit);
+	}
+	/**
+	* Selection-aware viewport: the header (title + blank) and the hint stay
+	* fixed, while the body scrolls so the SELECTED row is always visible. When
+	* content is clipped, `↑ more` / `↓ more` mark the hidden rows.
+	*/
+	windowLines(lines, selectedLine, limit) {
+		if (lines.length <= limit) return [...lines];
+		const hintCount = limit >= 2 ? 1 : 0;
+		const headerCount = Math.min(2, Math.max(0, limit - hintCount - 1));
+		const available = Math.max(1, limit - headerCount - hintCount);
+		const header = lines.slice(0, headerCount);
+		const trailing = hintCount === 0 ? void 0 : lines[lines.length - 1];
+		const body = lines.slice(headerCount, lines.length - hintCount);
+		const selectedBody = selectedLine === void 0 ? 0 : Math.max(0, selectedLine - headerCount);
+		const startFor = (rows) => {
+			const centered = selectedBody - Math.floor(rows / 2);
+			return Math.min(Math.max(0, centered), Math.max(0, body.length - rows));
+		};
+		let budget = available;
+		let start = startFor(budget);
+		let top = start > 0;
+		let bottom = start + budget < body.length;
+		while (budget > 1 && budget + (top ? 1 : 0) + (bottom ? 1 : 0) > available) {
+			budget -= 1;
+			start = startFor(budget);
+			top = start > 0;
+			bottom = start + budget < body.length;
+		}
+		if (budget + (top ? 1 : 0) + (bottom ? 1 : 0) > available) {
+			top = false;
+			bottom = false;
+			budget = available;
+			start = startFor(budget);
+		}
+		const out = [...header];
+		if (top) out.push(color.textDim("  ↑ more"));
+		out.push(...body.slice(start, start + budget));
+		if (bottom) out.push(color.textDim("  ↓ more"));
+		if (trailing !== void 0) out.push(trailing);
+		return out;
+	}
+	renderList(width) {
+		const rows = this.controller.rows();
+		const selected = this.controller.selectedValue();
+		const lines = [];
+		let selectedLine;
+		lines.push(color.textStrong(truncateToWidth(this.controller.title(), width, "…")));
+		lines.push("");
+		for (const row of rows) {
+			if (row.kind === "section") {
+				lines.push(color.textStrong(truncateToWidth(row.label, width, "…")));
+				continue;
+			}
+			const isSelected = row.selectable && selected !== void 0 && row.value === selected;
+			if (isSelected) selectedLine = lines.length;
+			let line = `${row.selectable ? isSelected ? color.accent("▸ ") : "  " : "  "}${row.kind === "info" ? color.textMuted(truncateToWidth(row.label, Math.max(1, width - 2), "…")) : tone(truncateToWidth(row.label, Math.max(1, width - 2), "…"), row.tone)}`;
+			if (row.badge !== void 0) line += ` ${badge(row.badge, row.tone)}`;
+			if (row.secondary !== void 0) {
+				const room = width - visibleWidth(line) - 3;
+				if (room > 8) line += `  ${color.textDim(truncateToWidth(row.secondary, room, "…"))}`;
+			}
+			lines.push(line);
+		}
+		const notice = this.controller.notice();
+		if (notice !== void 0) {
+			lines.push("");
+			lines.push(color.textMuted(truncateToWidth(notice, width, "…")));
+		}
+		if (this.controller.status().state === "loading" && rows.every((row) => row.kind === "section" || row.kind === "info")) lines.push(color.textDim(truncateToWidth("Loading plugins…", width, "…")));
+		lines.push("");
+		lines.push(color.textDim(truncateToWidth(this.controller.hint(), width, "…")));
+		return {
+			lines,
+			selectedLine
+		};
+	}
+	renderInstall(width, install) {
+		const lines = [];
+		lines.push(color.textStrong(truncateToWidth(this.controller.title(), width, "…")));
+		lines.push("");
+		if (install.phase === "editing") {
+			lines.push(`Spec    ${this.specInput.render(Math.max(1, width - 8))[0] ?? ""}`);
+			const options = this.controller.registryOptions();
+			const registry = this.customRegistry ? `custom ${this.registryInput.render(Math.max(1, width - 16))[0] ?? ""}` : options[this.registryIndex]?.label ?? "pnpm configuration default";
+			const focusHint = this.installFocus === "registry" ? color.accent("‹") : " ";
+			lines.push(`Reg     ${focusHint} ${truncateToWidth(registry, Math.max(1, width - 10), "…")}`);
+			if (!this.customRegistry) {
+				const hint = options.map((option) => option.label).join(" · ");
+				if (hint !== "") lines.push(color.textMuted(truncateToWidth(`        ${hint}`, width, "…")));
+			}
+			lines.push("");
+			if (install.message !== void 0) lines.push(color.warning(truncateToWidth(install.message, width, "…")));
+			lines.push(color.textDim(truncateToWidth("Tab switch field · ↑↓ choose registry · Enter inspect · Esc close", width, "…")));
+			return {
+				lines,
+				selectedLine: void 0
+			};
+		}
+		if (install.phase === "inspecting") {
+			lines.push(color.textDim(truncateToWidth(`Inspecting ${install.spec}…`, width, "…")));
+			lines.push("");
+			lines.push(color.textDim(truncateToWidth("Esc back", width, "…")));
+			return {
+				lines,
+				selectedLine: void 0
+			};
+		}
+		if (install.phase === "confirm") {
+			const inspection = install.inspection;
+			if (inspection?.status === "accepted") {
+				lines.push(color.textStrong(truncateToWidth(inspection.name ?? install.spec, width, "…")));
+				if (inspection.version !== void 0) lines.push(color.textDim(truncateToWidth(`version ${inspection.version}`, width, "…")));
+				if (inspection.description !== void 0) lines.push(color.textDim(truncateToWidth(inspection.description, width, "…")));
+				lines.push(color.textDim(truncateToWidth(`source ${inspection.kind} · registry ${inspection.registry ?? "pnpm default"}${inspection.host === void 0 ? "" : ` · host ${inspection.host}`}`, width, "…")));
+				lines.push(color.textDim(truncateToWidth(`bundle: ${inspection.bundle === null ? "unknown" : inspection.bundle ? "yes" : "no"}`, width, "…")));
+				lines.push("");
+				lines.push(color.textDim(truncateToWidth("Enter install · Esc edit", width, "…")));
+			} else if (inspection?.status === "refused") {
+				lines.push(color.error(truncateToWidth(`refused: ${inspection.problem}`, width, "…")));
+				lines.push(color.textMuted(truncateToWidth(inspection.reason, width, "…")));
+				if (inspection.registries !== void 0 && inspection.registries.length > 0) lines.push(color.textMuted(truncateToWidth(`registries: ${inspection.registries.map((r) => r ?? "pnpm default").join(", ")}`, width, "…")));
+				lines.push("");
+				lines.push(color.textDim(truncateToWidth("Esc edit", width, "…")));
+			}
+			return {
+				lines,
+				selectedLine: void 0
+			};
+		}
+		lines.push(color.textStrong(truncateToWidth(`${install.phase}${install.spec === "" ? "" : ` · ${install.spec}`}`, width, "…")));
+		if (install.message !== void 0) lines.push(color.textMuted(truncateToWidth(install.message, width, "…")));
+		lines.push("");
+		const hint = this.controller.hint();
+		const budget = Number.isFinite(this.maxRows) ? Math.max(0, Math.floor(this.maxRows) - lines.length - 1) : install.log.length;
+		const log = install.log.slice(Math.max(0, install.log.length - budget));
+		for (const line of log) lines.push(color.textDim(truncateToWidth(line, width, "…")));
+		lines.push(color.textDim(truncateToWidth(hint, width, "…")));
+		return {
+			lines,
+			selectedLine: void 0
+		};
+	}
+};
+//#endregion
+//#region src/plugin-manager/extension-inventory.ts
+const ADVANCED_PREFIX = "advanced.";
+const UNSTABLE_PREFIX = "unstable.";
+/**
+* Aggregate live contributions by owner. Owners are reported exactly as the
+* runtime records them; no classification or package association happens
+* here.
+*/
+function observeTuiExtensions(source) {
+	const entryIds = source.ownerEntryIds?.();
+	const byOwner = /* @__PURE__ */ new Map();
+	for (const record of source.healthSnapshot()) {
+		let entry = byOwner.get(record.owner);
+		if (entry === void 0) {
+			entry = {
+				owner: record.owner,
+				kinds: /* @__PURE__ */ new Set(),
+				count: 0,
+				failed: 0,
+				active: 0,
+				advanced: false,
+				unstable: false
+			};
+			byOwner.set(record.owner, entry);
+		}
+		entry.kinds.add(record.extensionPoint);
+		entry.count += 1;
+		if (record.state === "failed") entry.failed += 1;
+		else entry.active += 1;
+		if (record.extensionPoint.startsWith(ADVANCED_PREFIX)) entry.advanced = true;
+		if (record.extensionPoint.startsWith(UNSTABLE_PREFIX)) entry.unstable = true;
+	}
+	return [...byOwner.values()].sort((left, right) => left.owner < right.owner ? -1 : left.owner > right.owner ? 1 : 0).map((entry) => {
+		const entryId = entryIds?.get(entry.owner);
+		return Object.freeze({
+			owner: entry.owner,
+			...entryId === void 0 ? {} : { entryId },
+			contributionKinds: Object.freeze([...entry.kinds].sort()),
+			contributionCount: entry.count,
+			health: entry.failed === 0 ? "active" : entry.active === 0 ? "failed" : "mixed",
+			usesAdvancedCapability: entry.advanced,
+			usesUnstableCapability: entry.unstable
+		});
+	});
+}
+//#endregion
 //#region src/runtime/direct/host-file-direct.ts
 /**
 * The Direct Host-file adapter (M1.10) — the in-process implementation of
@@ -74863,6 +76745,7 @@ const SESSIONLESS_COMMANDS = /* @__PURE__ */ new Set([
 	"rewind",
 	"preset",
 	"keybindings",
+	"plugins",
 	"statusline"
 ]);
 /**
@@ -74895,6 +76778,7 @@ const LOCAL_COMMANDS = /* @__PURE__ */ new Set([
 	"model",
 	"new",
 	"preset",
+	"plugins",
 	"quit",
 	"reload",
 	"rename",
@@ -75308,8 +77192,8 @@ function packageVersion() {
 }
 /**
 * The welcome card's version line: the installed dsh version plus the
-* bundle's own version (header-badge parity — `dsh-0.1.7-rc.1 ·
-* tui-v0.4.8`). Without a resolvable dsh launcher it degrades to
+* bundle's own version (header-badge parity — `dsh-0.1.7-rc.2 ·
+* tui-v0.4.9`). Without a resolvable dsh launcher it degrades to
 * the bundle version alone.
 * @returns the combined version string.
 */
@@ -75470,10 +77354,12 @@ function dangerCommand(command) {
 	return DANGER_PATTERNS.some((pattern) => pattern.test(command));
 }
 /**
-* The dsh profile this process was launched with (the `--profile` flag),
-* so the exit-time resume hint names the profile the TUI actually runs
-* under. Falls back to `pi-tui` when the flag is absent (the TUI bundle
-* cannot load without a profile, so this is defensive only).
+* The dsh profile named by the `--profile` flag in `argv`, in both spellings.
+* This is the ARGV-ONLY fallback: it cannot see the positional `dsh <name>`
+* launch form, because the launcher consumes that bare name by synthesizing
+* `['--profile', ...argv]` for its OWN commander parse and leaves
+* `process.argv` untouched. Prefer {@link hostRunningProfile}, which reads the
+* Host's profile identity instead of scraping the command line.
 * @param argv - the process argument vector.
 * @param fallback - the default profile.
 */
@@ -75486,11 +77372,30 @@ function runningProfile(argv = process.argv, fallback = "pi-tui") {
 	return fallback;
 }
 /**
+* The profile this process actually runs — the official Host
+* `profileContext.name` when it is composed, else {@link runningProfile}'s
+* argv scrape.
+*
+* `profileContext.name` is the launcher's own profile identity, so it is
+* correct for EVERY launch form: `--profile <name>`, `--profile=<name>`, the
+* positional `dsh <name>`, and `--from-default-profile <name>`. The argv
+* scrape only knows the flag form, which is why it is the fallback for a
+* profile-less mount (tests, an embedded surface) rather than the primary
+* source.
+* @param ctx - the plugin context (or any structural `get`-only stand-in).
+* @param argv - the process argument vector for the fallback path.
+* @param fallback - the default profile for the fallback path.
+* @returns the running profile name.
+*/
+function hostRunningProfile(ctx, argv = process.argv, fallback = "pi-tui") {
+	return ctx.get("profileContext")?.name ?? runningProfile(argv, fallback);
+}
+/**
 * The interactive-quit resume hint (pi parity): `dsh --profile <p>
 * --session <id>`, printed after the terminal restores so the user can
 * re-enter the session later. Returns undefined when there is no session
 * to resume (deferred start never created one).
-* @param profile - the running profile ({@link runningProfile}).
+* @param profile - the running profile ({@link hostRunningProfile}).
 * @param sessionId - the live session id.
 * @returns the resume command line, or undefined without a session.
 */
@@ -75778,12 +77683,22 @@ function apply(ctx, config) {
 			stderrWarningWriter.write(message);
 		} catch {}
 	};
+	const startupStatus = createStartupStatus(config.startupStatusOutput ?? {
+		isTTY: process.stdout.isTTY === true,
+		write: (text) => process.stdout.write(text)
+	});
+	lifecycleController.signal.addEventListener("abort", () => startupStatus.clear(), { once: true });
 	let liveAgent;
 	let liveHandle;
 	let retireOwnedSessionRef;
 	(async () => {
 		startup.markSurfaceMounted?.();
-		await ctx.get("loader")?.await();
+		startupStatus.show("Starting DSH…");
+		try {
+			await ctx.get("loader")?.await();
+		} finally {
+			startupStatus.clear();
+		}
 		if (lifecycleController.signal.aborted) {
 			diag.dispose();
 			return;
@@ -75867,10 +77782,34 @@ function apply(ctx, config) {
 			else recall.abort();
 		};
 		let retirementPromise;
+		const shutdownCancelledAgents = /* @__PURE__ */ new WeakSet();
+		const cancelShutdownAgent = (agent) => {
+			if (shutdownCancelledAgents.has(agent)) return;
+			agent.cancel({ kind: "user" });
+			shutdownCancelledAgents.add(agent);
+		};
+		const cancelRetiredOwner = (agent) => {
+			if (lifecycleController.signal.aborted) cancelShutdownAgent(agent);
+			else agent.cancel({ kind: "user" });
+		};
+		const preCancelOwnedSession = () => {
+			const agent = liveAgent;
+			if (agent === void 0) return;
+			if (shutdownCancelledAgents.has(agent)) return;
+			diag.info("retire cancel", { session: agent.session.id });
+			try {
+				cancelShutdownAgent(agent);
+			} catch (error) {
+				diag.error("retire pre-cancel failed", {
+					session: agent.session.id,
+					error: safeErrorMessage$1(error)
+				});
+			}
+		};
 		const retireOwnedSession = () => {
 			if (retirementPromise !== void 0) return retirementPromise;
+			preCancelOwnedSession();
 			retirementPromise = (async () => {
-				if (transitionGate?.pending === true) liveAgent?.cancel({ kind: "user" });
 				const retireParked = async (agent, handle) => retireDirectOwnedSession({
 					cancel: () => agent.cancel({ kind: "user" }),
 					whenIdle: () => agent.whenIdle(),
@@ -75889,8 +77828,9 @@ function apply(ctx, config) {
 					diag.info("retire start", { session: agent.session.id });
 					const report = await retireDirectOwnedSession({
 						cancel: () => {
+							if (shutdownCancelledAgents.has(agent)) return;
 							diag.info("retire cancel", { session: agent.session.id });
-							agent.cancel({ kind: "user" });
+							cancelShutdownAgent(agent);
 						},
 						whenIdle: async () => {
 							diag.info("retire idle", { session: agent.session.id });
@@ -75956,7 +77896,7 @@ function apply(ctx, config) {
 		retireOwnedSessionRef = retireOwnedSession;
 		const whenIdleOrAbort = async (agent, signal) => {
 			if (signal.aborted) {
-				agent.cancel({ kind: "user" });
+				cancelShutdownAgent(agent);
 				await agent.whenIdle();
 				return true;
 			}
@@ -75964,7 +77904,11 @@ function apply(ctx, config) {
 			await new Promise((resolve, reject) => {
 				const onAbort = () => {
 					aborted = true;
-					agent.cancel({ kind: "user" });
+					try {
+						cancelShutdownAgent(agent);
+					} catch (error) {
+						reject(error);
+					}
 				};
 				signal.addEventListener("abort", onAbort, { once: true });
 				agent.whenIdle().then(() => {
@@ -76009,6 +77953,15 @@ function apply(ctx, config) {
 		completionController.setMode(parseNotificationMode(tuiSettings?.get().notificationMode));
 		completionController.setMethod(parseNotificationMethod(tuiSettings?.get().notificationMethod));
 		const modelSelections = new DirectModelSelectionOwner(defaultModel);
+		/**
+		* rc.2 shares ONE per-Agent serialization window between `/model` selection
+		* and image-bearing prompt admission (`serializeImageAdmission`): the image
+		* capability check, the attachment admission and the delivery commit apply
+		* in the same Agent-local order as a model switch, so an image prompt can
+		* never be admitted under a model capability that a concurrent switch has
+		* already replaced. A text-only prompt keeps the un-serialized path.
+		*/
+		const withPromptAdmission = (agent, hasImage, operation) => hasImage ? modelSelections.serializeImageAdmission(agent, operation) : operation();
 		const defaultIntent = new DefaultIntentTracker();
 		const setDefaultIntent = (next) => {
 			defaultIntent.set(next);
@@ -76061,7 +78014,8 @@ function apply(ctx, config) {
 			flushSession: async (session) => {
 				await sessions.flush(session);
 			}
-		}), directPendingInputReader, directSessionWriter, new DirectSessionLifecycle(ctx, (presetId) => compose(presetId), directOwnerPool), new DirectInteractionPort(ctx, (sessionId) => liveAgent?.session.id === sessionId ? liveAgent : void 0), new DirectCatalogPort(ctx, (sessionId) => liveAgent?.session.id === sessionId ? liveAgent : void 0, modelSelections, diag), new DirectConfigPort(ctx, tuiSettings, (sessionId) => liveAgent?.session.id === sessionId ? liveAgent : void 0), new DirectHostFilePort((sessionId) => liveAgent?.session.id === sessionId ? liveAgent : void 0), new DirectSessionArchive(ctx), new DirectHostCommandPort(ctx, (sessionId) => liveAgent?.session.id === sessionId ? liveAgent : void 0));
+		}), directPendingInputReader, directSessionWriter, new DirectSessionLifecycle(ctx, (presetId) => compose(presetId), directOwnerPool), new DirectInteractionPort(ctx, (sessionId) => liveAgent?.session.id === sessionId ? liveAgent : void 0), new DirectCatalogPort(ctx, (sessionId) => liveAgent?.session.id === sessionId ? liveAgent : void 0, modelSelections, diag), new DirectConfigPort(ctx, tuiSettings, (sessionId) => liveAgent?.session.id === sessionId ? liveAgent : void 0), new DirectHostFilePort((sessionId) => liveAgent?.session.id === sessionId ? liveAgent : void 0), new DirectSessionArchive(ctx), new DirectHostCommandPort(ctx, (sessionId) => liveAgent?.session.id === sessionId ? liveAgent : void 0), new DirectPluginManagerPort(ctx));
+		let disposePluginManagerController;
 		const userFooterCustomItemsForSave = () => {
 			const raw = backend.config.footerCustomItems.rawForPersistence();
 			if (raw.kind === "unavailable") throw new Error("custom footer definitions unavailable; settings write aborted");
@@ -76113,11 +78067,6 @@ function apply(ctx, config) {
 			}
 		};
 		let resumeFailure;
-		const startupStatus = createStartupStatus(config.startupStatusOutput ?? {
-			isTTY: process.stdout.isTTY === true,
-			write: (text) => process.stdout.write(text)
-		});
-		lifecycleController.signal.addEventListener("abort", () => startupStatus.clear(), { once: true });
 		let handle;
 		let resumeResolved = false;
 		if (sessionId !== void 0) {
@@ -76304,7 +78253,7 @@ function apply(ctx, config) {
 					const retired = [];
 					if (oldHandle !== void 0 && oldAgent !== void 0) {
 						const report = await retireDirectOwnedSession({
-							cancel: () => oldAgent.cancel({ kind: "user" }),
+							cancel: () => cancelRetiredOwner(oldAgent),
 							whenIdle: () => oldAgent.whenIdle(),
 							drainDescendants: async () => {
 								await ctx.get("subagents")?.drainContinuableDescendants?.([oldAgent]);
@@ -76734,7 +78683,7 @@ function apply(ctx, config) {
 						if (pin !== void 0) pin.state.retirementOwnsRelease = true;
 						const retirement = retireSourceOwnerAfterSettlement(oldAgent.session.id, async () => {
 							const report = await retireDirectOwnedSession({
-								cancel: () => oldAgent.cancel({ kind: "user" }),
+								cancel: () => cancelRetiredOwner(oldAgent),
 								whenIdle: () => oldAgent.whenIdle(),
 								drainDescendants: async () => {
 									await ctx.get("subagents")?.drainContinuableDescendants?.([oldAgent]);
@@ -76914,6 +78863,7 @@ function apply(ctx, config) {
 			draftImages.clear();
 			draftFiles.clear();
 			catalogCoordinator?.dispose();
+			disposePluginManagerController?.();
 			cancelDeferredContextMeasure?.();
 			cancelDeferredContextMeasure = void 0;
 			footerCommandUnsubscribe?.();
@@ -76929,6 +78879,7 @@ function apply(ctx, config) {
 			shellTempFiles.clear();
 			jobsEventsDispose?.();
 			jobsEventsDispose = void 0;
+			activeJobViewerClose?.();
 			activeJobViewerClose = void 0;
 			activeTaskBrowser = void 0;
 			activeTaskBrowserToken = void 0;
@@ -76943,9 +78894,10 @@ function apply(ctx, config) {
 		const { requestExit } = createExitController({
 			diag,
 			cleanup: disposeSurface,
+			prepareRetirement: preCancelOwnedSession,
 			hint: (message) => process.stdout.write(`\n${message}\n`),
 			resumeHint: () => {
-				const resume = resumeCommand(runningProfile(), liveAgent?.session.id ?? "");
+				const resume = resumeCommand(hostRunningProfile(ctx), liveAgent?.session.id ?? "");
 				return resume === void 0 ? void 0 : `${color.textDim("To resume this session:")} ${resume}`;
 			},
 			exit
@@ -78357,7 +80309,7 @@ function apply(ctx, config) {
 												reserve: () => fallbackPin,
 												run: async () => {
 													try {
-														await operationBarrier.runWriter(agent.session.id, async () => {
+														await operationBarrier.runWriter(agent.session.id, () => withPromptAdmission(agent, draftHasImages(text, draftImages), async () => {
 															if (!localEchoInstalled) {
 																beginLocalSubmission(submitRequestId, text, submissionPlacement("queue", agent.status === "running"), agent.session.id, generation, submitAckToken);
 																localEchoInstalled = true;
@@ -78397,7 +80349,7 @@ function apply(ctx, config) {
 																throw new Error(failure);
 															}
 															consumeDraftAttachments(text, draftImages, draftFiles);
-														});
+														}));
 													} catch (error) {
 														if (cleanedUp) {
 															fallbackPin();
@@ -78511,7 +80463,7 @@ function apply(ctx, config) {
 						return;
 					}
 					try {
-						await operationBarrier.runWriter(agent.session.id, async () => {
+						await operationBarrier.runWriter(agent.session.id, () => withPromptAdmission(agent, draftHasImages(text, draftImages), async () => {
 							if (!localEchoInstalled) {
 								beginLocalSubmission(submitRequestId, text, submissionPlacement("queue", agent.status === "running"), agent.session.id, generation, submitAckToken);
 								localEchoInstalled = true;
@@ -78551,7 +80503,7 @@ function apply(ctx, config) {
 								throw new Error(failure);
 							}
 							consumeDraftAttachments(text, draftImages, draftFiles);
-						});
+						}));
 					} catch (error) {
 						if (cleanedUp) return;
 						if (error instanceof TransitionInProgressError) {
@@ -78758,53 +80710,60 @@ function apply(ctx, config) {
 						steerDelivery = running ? "steer" : "queue";
 						if (draftHasPayload) beginLocalSubmission(steerRequestId, text, submissionPlacement(steerDelivery, running), agentForSteer.session.id, generationForSteer, steerAckToken);
 					}
-					const prepared = await prepareUserMessage(text, draftImages, submitDeps, { requestId: steerRequestId });
-					if (cleanedUp) return;
-					if (!sessionUnchanged({
-						agent: agentForSteer,
-						generation: generationForSteer
-					}, liveAgent, sessionGeneration)) {
-						const merged = mergeDraft(app.getDraft(), text);
-						app.setEditorText(merged);
-						settleLocalSubmission(steerRequestId);
-						settleLocalSubmitAck("steer stale", {
-							token: steerAckToken,
-							terminal: true
-						});
-						app.notify(merged === text ? "the session changed while sending — try again" : "the draft changed while sending — review it before submitting again (the earlier text was preserved below)", "error");
-						return;
-					}
-					submitLatencyTracker.mark(agentForSteer.session.id, "dispatch");
-					const outcome = await steerAll({
-						currentAgent: () => cleanedUp ? void 0 : agentForSteer,
-						currentGeneration: () => generationForSteer,
-						notify: (message, kind) => {
-							if (cleanedUp) return;
-							app.notify(message, kind);
-						},
-						restoreDraft: (draft) => {
-							if (cleanedUp) return false;
-							const merged = mergeDraft(app.getDraft(), draft);
+					const admission = await withPromptAdmission(agentForSteer, draftHasImages(text, draftImages), async () => {
+						const prepared = await prepareUserMessage(text, draftImages, submitDeps, { requestId: steerRequestId });
+						if (cleanedUp) return { kind: "stale" };
+						if (!sessionUnchanged({
+							agent: agentForSteer,
+							generation: generationForSteer
+						}, liveAgent, sessionGeneration)) {
+							const merged = mergeDraft(app.getDraft(), text);
 							app.setEditorText(merged);
-							steerRestored = true;
-							return merged === draft;
-						},
-						fence: () => transitionGate.busy || cleanedUp,
-						barrier: operationBarrier,
-						fenceNotice: () => "a session transition is in progress — try again in a moment",
-						createDraft: () => prepared,
-						staleNotice: () => "the queue or session changed while sending — try again",
-						mergedNotice: () => "the draft changed while sending — review it before submitting again (the earlier text was preserved below)",
-						pendingInputReader: backend.pendingInputReader,
-						writer: backend.sessionWriter
-					}, text, onlyDraft ? {
-						onlyDraft: true,
-						draftHasPayload,
-						draftDelivery: steerDelivery
-					} : {
-						draftHasPayload,
-						draftDelivery: steerDelivery
+							settleLocalSubmission(steerRequestId);
+							settleLocalSubmitAck("steer stale", {
+								token: steerAckToken,
+								terminal: true
+							});
+							app.notify(merged === text ? "the session changed while sending — try again" : "the draft changed while sending — review it before submitting again (the earlier text was preserved below)", "error");
+							return { kind: "stale" };
+						}
+						submitLatencyTracker.mark(agentForSteer.session.id, "dispatch");
+						return {
+							kind: "delivered",
+							outcome: await steerAll({
+								currentAgent: () => cleanedUp ? void 0 : agentForSteer,
+								currentGeneration: () => generationForSteer,
+								notify: (message, kind) => {
+									if (cleanedUp) return;
+									app.notify(message, kind);
+								},
+								restoreDraft: (draft) => {
+									if (cleanedUp) return false;
+									const merged = mergeDraft(app.getDraft(), draft);
+									app.setEditorText(merged);
+									steerRestored = true;
+									return merged === draft;
+								},
+								fence: () => transitionGate.busy || cleanedUp,
+								barrier: operationBarrier,
+								fenceNotice: () => "a session transition is in progress — try again in a moment",
+								createDraft: () => prepared,
+								staleNotice: () => "the queue or session changed while sending — try again",
+								mergedNotice: () => "the draft changed while sending — review it before submitting again (the earlier text was preserved below)",
+								pendingInputReader: backend.pendingInputReader,
+								writer: backend.sessionWriter
+							}, text, onlyDraft ? {
+								onlyDraft: true,
+								draftHasPayload,
+								draftDelivery: steerDelivery
+							} : {
+								draftHasPayload,
+								draftDelivery: steerDelivery
+							})
+						};
 					});
+					if (admission.kind === "stale") return;
+					const outcome = admission.outcome;
 					if (cleanedUp) return;
 					if (outcome === "ok") consumeDraftAttachments(text, draftImages, draftFiles);
 					if (outcome !== "ok") {
@@ -79109,6 +81068,38 @@ function apply(ctx, config) {
 		};
 		if (lifecycleController.signal.aborted) return;
 		startupStatus.clear();
+		const pluginManagerHosts = new PluginManagerHostRegistry();
+		const pluginManagerController = new PluginManagerController(backend.pluginManager, {
+			requestRender: () => {
+				if (pluginManagerHosts.isOpen()) app.requestRender();
+			},
+			requestClose: () => pluginManagerHosts.closeActive(),
+			notify: (message, kind) => app.notify(message, kind),
+			isOpen: () => pluginManagerHosts.isOpen(),
+			diag
+		}, { observations: () => extensionService === void 0 ? [] : observeTuiExtensions({
+			healthSnapshot: () => extensionService._ledger().healthSnapshot(),
+			ownerEntryIds: () => extensionService._ownerEntryIds()
+		}) });
+		disposePluginManagerController = () => pluginManagerController.dispose();
+		const jobObservation = new DirectJobObservationPort(ctx, diag);
+		const openPluginManager = () => {
+			if (pluginManagerHosts.isOpen()) return;
+			let close = () => {};
+			const claim = pluginManagerHosts.claim(() => close());
+			const panel = new PluginManagerPanel(pluginManagerController, () => app.requestRender(), { onDispose: () => claim.releaseExternally() });
+			close = app.openPluginManagerPanel(panel, () => claim.releaseExternally());
+			pluginManagerController.open("direct-command");
+		};
+		/** The `/settings → Plugins` entry: the SAME panel/controller hosted as a
+		* lazy SettingsList submenu; `done` returns to the Settings list. */
+		const createPluginManagerSubmenu = (done) => {
+			let claim;
+			const panel = new PluginManagerPanel(pluginManagerController, () => app.requestRender(), { onDispose: () => claim?.releaseExternally() });
+			claim = pluginManagerHosts.claim(() => claim?.closeNormally(), done);
+			pluginManagerController.open("settings-submenu");
+			return panel;
+		};
 		app = startProcessTui({
 			onSubmit: (text, request) => dispatchUserInput(text, request),
 			isImageDraft: () => draftHasImages(app.getDraft(), draftImages),
@@ -80361,11 +82352,12 @@ function apply(ctx, config) {
 			refreshAgents();
 		}
 		/**
-		* Open one job from the task browser: a bash job shows a STATUS viewer
-		* (never the output — the job's single read cursor belongs to the agent's
-		* job_output; consuming it from the UI would leave the model an
-		* incomplete result and could swallow the completion notice); a subagent
-		* job shows the status viewer with a /tasks hint. The job record
+		* Open one job from the task browser: an ordinary Job opens the detail
+		* viewer, which shows a NON-CONSUMING live output preview through the
+		* official JobController.follow() stream (never `jobs.read()`), so it can
+		* never leave the model an incomplete `job_output` result or swallow the
+		* completion notice; a subagent job whose stable child session id is
+		* unknown shows the same Job detail with a /tasks hint. The job record
 		* carries no child session id, so label/order/time heuristics cannot
 		* distinguish a background child from a same-label foreground one-shot;
 		* the task browser therefore never opens a transcript by guess.
@@ -80405,26 +82397,44 @@ function apply(ctx, config) {
 			return "keep-open";
 		};
 		/**
-		* Status-only viewer for one job (never touches the read cursor). The
-		* subagent variant appends the /tasks hint because a transcript
-		* cannot always be matched; the bash variant is pure status.
+		* Selected-Job detail viewer. It opens one official non-consuming
+		* observation stream for exactly this Job and repaints the latest local
+		* snapshot on the viewer's timer (the tick never reads Host output). The
+		* subagent variant appends the /tasks hint because a transcript cannot
+		* always be matched. If the jobController service is absent the detail
+		* degrades to the status-only view with an explicit note.
 		*/
 		const openJobStatusViewer = (jobId, title, snapshot) => {
 			activeJobViewerClose?.();
 			if (liveAgent === void 0) return;
 			const ownerSessionId = liveAgent.session.id;
-			activeJobViewerClose = app.openOutputViewer({
-				title,
-				initial: snapshot.kind === "subagent" ? subagentJobViewHint(snapshot.status, snapshot.detail) : jobStatusHint(snapshot.status, snapshot.detail),
-				refresh: () => {
-					if (jobs === void 0) return "";
+			const fallbackText = snapshot.kind === "subagent" ? subagentJobViewHint(snapshot.status, snapshot.detail) : jobStatusHint(snapshot.status, snapshot.detail);
+			let observed;
+			let observationError;
+			let closeObserver = () => {};
+			try {
+				closeObserver = jobObservation.open(ownerSessionId, jobId, (next) => {
+					observed = next;
+				});
+			} catch (error) {
+				observationError = safeErrorMessage$1(error);
+			}
+			const refreshBody = () => {
+				if (observed !== void 0) return formatJobObservation(observed);
+				const current = jobs === void 0 ? void 0 : (() => {
 					try {
-						const current = jobs.get(jobId, ownerSessionId);
-						return current.kind === "subagent" ? subagentJobViewHint(current.status, current.detail) : jobStatusHint(current.status, current.detail);
+						return jobs.get(jobId, ownerSessionId);
 					} catch {
-						return "";
+						return;
 					}
-				},
+				})();
+				const base = current === void 0 ? fallbackText : current.kind === "subagent" ? subagentJobViewHint(current.status, current.detail) : jobStatusHint(current.status, current.detail);
+				return observationError === void 0 ? base : `${base}\nlive observation unavailable: ${observationError}`;
+			};
+			activeJobViewerClose = app.openOutputViewer({
+				title,
+				initial: fallbackText,
+				refresh: refreshBody,
 				onStop: () => {
 					if (jobs === void 0) return;
 					try {
@@ -80442,14 +82452,29 @@ function apply(ctx, config) {
 				},
 				closeHint: "back",
 				onClose: () => {
+					closeObserver();
 					activeJobViewerClose = void 0;
 					refreshTasks();
 				}
 			});
 		};
+		/**
+		* The Job detail body from the detached observation (never a Host read).
+		* The official controller provides a best-effort retained preview, not an
+		* archival terminal log — say so.
+		*/
+		const formatJobObservation = (observed) => {
+			const lines = [observed.status];
+			if (observed.progress !== void 0) lines.push(`progress: ${observed.progress}`);
+			if (observed.detail !== void 0) lines.push(`detail: ${observed.detail}`);
+			if (observed.gapBefore) lines.push("note: earlier output was evicted before this retained preview");
+			if (observed.error !== void 0) lines.push(`follow error: ${observed.error}`);
+			lines.push("", "best-effort retained output preview (not a complete transcript):", "", observed.text);
+			return lines.join("\n");
+		};
 		/** One-line viewer hint for a job state (never touches the read cursor). */
 		const jobStatusHint = (status, detail) => {
-			return `${status}${status === "running" || status === "stopping" ? " — output is delivered to the agent via job_output; viewing never consumes the job’s read cursor" : ` — final output: ask the agent to run job_output in the conversation${detail === void 0 ? "" : ` (${detail})`}`}`;
+			return `${status}${status === "running" || status === "stopping" ? " — opening the non-consuming retained-output stream…" : ` — final output is delivered to the agent via job_output${detail === void 0 ? "" : ` (${detail})`}`}`;
 		};
 		refreshPendingInput();
 		/**
@@ -80891,6 +82916,8 @@ function apply(ctx, config) {
 			openJobView,
 			openTasksBrowser: () => openTasksBrowser("full"),
 			openRewindPicker,
+			openPluginManager,
+			createPluginManagerSubmenu,
 			sessionTransitionPending: () => transitionGate.busy,
 			withSessionTransition: (task) => transitionGate.run(() => operationBarrier.runTransition(async () => {
 				try {
@@ -80900,6 +82927,7 @@ function apply(ctx, config) {
 				}
 			})),
 			withSessionWriter: (sessionId, task) => operationBarrier.runWriter(sessionId, async () => task()),
+			withPromptAdmission: (agent, line, task) => withPromptAdmission(agent, draftHasImages(line, draftImages), async () => task()),
 			enterView,
 			requestExit,
 			exit
@@ -81211,6 +83239,9 @@ function apply(ctx, config) {
 		});
 	})().catch(async (error) => {
 		const message = safeErrorMessage$1(error);
+		try {
+			startupStatus.clear();
+		} catch {}
 		try {
 			ctx.logger.error(`tui-runner: ${message}`);
 		} catch {}
@@ -81248,4 +83279,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { shouldConsumeAdvertisedMiss as A, PI_TUI_EXTENSIONS_SERVICE as B, normalizeSkillInvocation as C, resumeCommand as D, resolveSubmitDelivery as E, viewerActionCapability as F, describeKey as H, dshVersion as I, apply$1 as L, subagentJobViewHint as M, taskRowSelectionDisposition as N, runningProfile as O, teardownViewerForSessionSwap as P, inject$1 as R, name as S, resolveInitialCatalog as T, API_VERSION as V, interruptAgent as _, apply as a, isPlainExitPrompt as b, commandRejectsImages as c, contextRefreshKind as d, createViewerOpenToken as f, inject as g, foldQueueRows as h, SESSIONLESS_COMMANDS as i, subagentJobTranscriptId as j, settleCompactionSurface as k, compactingFromLog as l, foldCompactionEvent as m, HOST_COMMAND_CATALOG as n, busyAfterTurnBoundary as o, dangerCommand as p, LOCAL_COMMANDS as r, commandIsLocalForAttachments as s, Config as t, composeAgent as u, isBareCommandLine as v, recordedPreset as w, matchPendingSubagentCall as x, isLocalCommandLine as y, name$1 as z };
+export { settleCompactionSurface as A, name$1 as B, name as C, resolveSubmitDelivery as D, resolveInitialCatalog as E, teardownViewerForSessionSwap as F, API_VERSION as H, viewerActionCapability as I, dshVersion as L, subagentJobTranscriptId as M, subagentJobViewHint as N, resumeCommand as O, taskRowSelectionDisposition as P, apply$1 as R, matchPendingSubagentCall as S, recordedPreset as T, describeKey as U, PI_TUI_EXTENSIONS_SERVICE as V, inject as _, apply as a, isLocalCommandLine as b, commandRejectsImages as c, contextRefreshKind as d, createViewerOpenToken as f, hostRunningProfile as g, foldQueueRows as h, SESSIONLESS_COMMANDS as i, shouldConsumeAdvertisedMiss as j, runningProfile as k, compactingFromLog as l, foldCompactionEvent as m, HOST_COMMAND_CATALOG as n, busyAfterTurnBoundary as o, dangerCommand as p, LOCAL_COMMANDS as r, commandIsLocalForAttachments as s, Config as t, composeAgent as u, interruptAgent as v, normalizeSkillInvocation as w, isPlainExitPrompt as x, isBareCommandLine as y, inject$1 as z };