acryl-cli-linux-x64 0.1.31 → 0.1.36

package/runtime/node_modules/@earendil-works/pi-ai/dist/auth/oauth/oauth-page.js

@@ -1,4 +1,4 @@
-const LOGO_SVG = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 800 800" aria-hidden="true"><path fill="#fff" fill-rule="evenodd" d="M165.29 165.29 H517.36 V400 H400 V517.36 H282.65 V634.72 H165.29 Z M282.65 282.65 V400 H400 V282.65 Z"/><path fill="#fff" d="M517.36 400 H634.72 V634.72 H517.36 Z"/></svg>`;
+const LOGO_SVG = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 800 800" aria-hidden="true"><g fill="#fff"><rect x="76.0" y="418.0" width="10.5" height="10.5"/><rect x="88.0" y="394.0" width="10.5" height="10.5"/><rect x="88.0" y="406.0" width="10.5" height="10.5"/><rect x="88.0" y="418.0" width="10.5" height="10.5"/><rect x="100.0" y="382.0" width="10.5" height="10.5"/><rect x="100.0" y="394.0" width="10.5" height="10.5"/><rect x="112.0" y="370.0" width="10.5" height="10.5"/><rect x="112.0" y="382.0" width="10.5" height="10.5"/><rect x="124.0" y="358.0" width="10.5" height="10.5"/><rect x="124.0" y="370.0" width="10.5" height="10.5"/><rect x="136.0" y="346.0" width="10.5" height="10.5"/><rect x="136.0" y="358.0" width="10.5" height="10.5"/><rect x="148.0" y="334.0" width="10.5" height="10.5"/><rect x="148.0" y="346.0" width="10.5" height="10.5"/><rect x="160.0" y="334.0" width="10.5" height="10.5"/><rect x="160.0" y="346.0" width="10.5" height="10.5"/><rect x="160.0" y="358.0" width="10.5" height="10.5"/><rect x="172.0" y="358.0" width="10.5" height="10.5"/><rect x="184.0" y="370.0" width="10.5" height="10.5"/><rect x="196.0" y="370.0" width="10.5" height="10.5"/><rect x="196.0" y="382.0" width="10.5" height="10.5"/><rect x="196.0" y="394.0" width="10.5" height="10.5"/><rect x="208.0" y="370.0" width="10.5" height="10.5"/><rect x="208.0" y="406.0" width="10.5" height="10.5"/><rect x="220.0" y="370.0" width="10.5" height="10.5"/><rect x="220.0" y="418.0" width="10.5" height="10.5"/><rect x="232.0" y="370.0" width="10.5" height="10.5"/><rect x="244.0" y="370.0" width="10.5" height="10.5"/><rect x="256.0" y="358.0" width="10.5" height="10.5"/><rect x="256.0" y="370.0" width="10.5" height="10.5"/><rect x="256.0" y="382.0" width="10.5" height="10.5"/><rect x="268.0" y="346.0" width="10.5" height="10.5"/><rect x="268.0" y="382.0" width="10.5" height="10.5"/><rect x="268.0" y="394.0" width="10.5" height="10.5"/><rect x="280.0" y="334.0" width="10.5" height="10.5"/><rect x="280.0" y="394.0" width="10.5" height="10.5"/><rect x="280.0" y="406.0" width="10.5" height="10.5"/><rect x="280.0" y="418.0" width="10.5" height="10.5"/><rect x="292.0" y="310.0" width="10.5" height="10.5"/><rect x="292.0" y="418.0" width="10.5" height="10.5"/><rect x="292.0" y="430.0" width="10.5" height="10.5"/><rect x="304.0" y="298.0" width="10.5" height="10.5"/><rect x="304.0" y="430.0" width="10.5" height="10.5"/><rect x="304.0" y="442.0" width="10.5" height="10.5"/><rect x="316.0" y="286.0" width="10.5" height="10.5"/><rect x="316.0" y="442.0" width="10.5" height="10.5"/><rect x="328.0" y="274.0" width="10.5" height="10.5"/><rect x="328.0" y="442.0" width="10.5" height="10.5"/><rect x="340.0" y="274.0" width="10.5" height="10.5"/><rect x="340.0" y="442.0" width="10.5" height="10.5"/><rect x="352.0" y="274.0" width="10.5" height="10.5"/><rect x="352.0" y="310.0" width="10.5" height="10.5"/><rect x="352.0" y="442.0" width="10.5" height="10.5"/><rect x="364.0" y="274.0" width="10.5" height="10.5"/><rect x="364.0" y="310.0" width="10.5" height="10.5"/><rect x="364.0" y="442.0" width="10.5" height="10.5"/><rect x="376.0" y="274.0" width="10.5" height="10.5"/><rect x="376.0" y="310.0" width="10.5" height="10.5"/><rect x="376.0" y="442.0" width="10.5" height="10.5"/><rect x="388.0" y="274.0" width="10.5" height="10.5"/><rect x="388.0" y="310.0" width="10.5" height="10.5"/><rect x="388.0" y="358.0" width="10.5" height="10.5"/><rect x="388.0" y="442.0" width="10.5" height="10.5"/><rect x="400.0" y="274.0" width="10.5" height="10.5"/><rect x="400.0" y="310.0" width="10.5" height="10.5"/><rect x="400.0" y="358.0" width="10.5" height="10.5"/><rect x="400.0" y="370.0" width="10.5" height="10.5"/><rect x="400.0" y="442.0" width="10.5" height="10.5"/><rect x="412.0" y="274.0" width="10.5" height="10.5"/><rect x="412.0" y="310.0" width="10.5" height="10.5"/><rect x="412.0" y="358.0" width="10.5" height="10.5"/><rect x="412.0" y="382.0" width="10.5" height="10.5"/><rect x="412.0" y="394.0" width="10.5" height="10.5"/><rect x="412.0" y="442.0" width="10.5" height="10.5"/><rect x="424.0" y="310.0" width="10.5" height="10.5"/><rect x="424.0" y="358.0" width="10.5" height="10.5"/><rect x="424.0" y="406.0" width="10.5" height="10.5"/><rect x="424.0" y="442.0" width="10.5" height="10.5"/><rect x="436.0" y="310.0" width="10.5" height="10.5"/><rect x="436.0" y="358.0" width="10.5" height="10.5"/><rect x="436.0" y="406.0" width="10.5" height="10.5"/><rect x="448.0" y="310.0" width="10.5" height="10.5"/><rect x="448.0" y="322.0" width="10.5" height="10.5"/><rect x="448.0" y="346.0" width="10.5" height="10.5"/><rect x="448.0" y="358.0" width="10.5" height="10.5"/><rect x="448.0" y="430.0" width="10.5" height="10.5"/><rect x="460.0" y="334.0" width="10.5" height="10.5"/><rect x="460.0" y="442.0" width="10.5" height="10.5"/><rect x="472.0" y="442.0" width="10.5" height="10.5"/><rect x="484.0" y="454.0" width="10.5" height="10.5"/><rect x="484.0" y="466.0" width="10.5" height="10.5"/><rect x="496.0" y="478.0" width="10.5" height="10.5"/><rect x="508.0" y="478.0" width="10.5" height="10.5"/><rect x="508.0" y="490.0" width="10.5" height="10.5"/><rect x="508.0" y="502.0" width="10.5" height="10.5"/><rect x="508.0" y="514.0" width="10.5" height="10.5"/><rect x="520.0" y="478.0" width="10.5" height="10.5"/><rect x="532.0" y="454.0" width="10.5" height="10.5"/><rect x="532.0" y="466.0" width="10.5" height="10.5"/><rect x="544.0" y="442.0" width="10.5" height="10.5"/><rect x="556.0" y="442.0" width="10.5" height="10.5"/><rect x="568.0" y="430.0" width="10.5" height="10.5"/><rect x="580.0" y="418.0" width="10.5" height="10.5"/><rect x="580.0" y="430.0" width="10.5" height="10.5"/><rect x="592.0" y="406.0" width="10.5" height="10.5"/><rect x="592.0" y="418.0" width="10.5" height="10.5"/><rect x="592.0" y="430.0" width="10.5" height="10.5"/><rect x="604.0" y="394.0" width="10.5" height="10.5"/><rect x="604.0" y="406.0" width="10.5" height="10.5"/><rect x="604.0" y="430.0" width="10.5" height="10.5"/><rect x="616.0" y="382.0" width="10.5" height="10.5"/><rect x="616.0" y="430.0" width="10.5" height="10.5"/><rect x="628.0" y="370.0" width="10.5" height="10.5"/><rect x="628.0" y="430.0" width="10.5" height="10.5"/><rect x="640.0" y="430.0" width="10.5" height="10.5"/><rect x="652.0" y="430.0" width="10.5" height="10.5"/><rect x="664.0" y="430.0" width="10.5" height="10.5"/><rect x="676.0" y="430.0" width="10.5" height="10.5"/><rect x="688.0" y="430.0" width="10.5" height="10.5"/><rect x="700.0" y="430.0" width="10.5" height="10.5"/><rect x="712.0" y="430.0" width="10.5" height="10.5"/></g></svg>`;
 function escapeHtml(value) {
     return value
         .replaceAll("&", "&amp;")

package/runtime/node_modules/acryl-control/lib/index.js

@@ -348,6 +348,71 @@ function parseAcrylSessionSnapshot(value) {
 	});
 }
 //#endregion
+//#region src/credential/projection.ts
+/** Read a nested value out of an untyped resolved/raw settings section. */
+function getAtPath(value, path) {
+	let current = value;
+	for (const key of path) {
+		if (current === null || typeof current !== "object") return void 0;
+		current = current[key];
+	}
+	return current;
+}
+/** Compute every provider route's joined credential/settings/live-registration row. */
+async function computeCredentialProjection(services, options) {
+	const scope = options.loginRecordScope ?? "llm-pi-ai";
+	const configurable = services.llm.listConfigurableProviders();
+	const live = new Set(services.llm.listProviders().map((provider) => provider.id));
+	const descriptors = services.settings.describe({ redactSecrets: true });
+	const byNs = new Map(descriptors.map((descriptor) => [descriptor.ns, descriptor]));
+	const rows = [];
+	for (const entry of configurable) {
+		const descriptor = byNs.get(entry.settingsNs);
+		const value = descriptor === void 0 ? void 0 : getAtPath(descriptor.value, entry.settingsPath);
+		const userValue = descriptor === void 0 ? void 0 : getAtPath(descriptor.user, entry.settingsPath);
+		const apiKeyRef = value?.apiKeyEnv ?? options.deriveApiKeyRef(entry.provider);
+		const info = await services.credentials.describe(apiKeyRef);
+		const loginRecord = await services.credentials.readRecord?.(`${scope}/${entry.provider}`);
+		const authMethod = loginRecord !== void 0 ? loginRecord.kind === "grant" ? "oauth" : "api-key" : info.configured ? "api-key" : void 0;
+		const isLive = live.has(entry.provider);
+		const models = isLive ? await services.llm.listModels(entry.provider).catch(() => value?.models ?? []) : value?.models ?? [];
+		rows.push({
+			route: entry.provider,
+			displayName: value?.displayName ?? entry.displayName,
+			settingsNs: entry.settingsNs,
+			settingsPath: entry.settingsPath,
+			hasSettingsProfile: userValue !== void 0,
+			hasCredential: info.configured || loginRecord !== void 0,
+			isLive,
+			authMethod,
+			api: value?.api,
+			baseURL: value?.baseURL,
+			apiKeyRef,
+			models,
+			revision: descriptor?.revision
+		});
+	}
+	return rows;
+}
+//#endregion
+//#region src/authorization/service.ts
+var AuthorizationService = class {
+	deps;
+	constructor(deps) {
+		this.deps = deps;
+	}
+	async begin(request) {
+		const outcome = await this.deps.authorization.begin(request);
+		if (outcome.status === "authorized") {
+			const slash = request.key.indexOf("/");
+			const providerId = slash === -1 ? request.key : request.key.slice(slash + 1);
+			if (this.deps.routeActivation !== void 0) await this.deps.routeActivation.ensureRouteActivated(providerId, request.method);
+			this.deps.onCredentialChanged(request.key);
+		}
+		return outcome;
+	}
+};
+//#endregion
 //#region src/lifecycle/controller.ts
 var PluginLifecycleError = class extends Error {
 	code;
@@ -530,6 +595,6 @@ function nonEmptyCommandId(value) {
 	return value;
 }
 //#endregion
-export { AcrAgentControlError, AcrAgentControlService, AcrPluginLifecycleController, AcrPluginLifecycleService, AcrRuntimeArchitectureService, Context, PROVIDER_CAPABILITIES, PluginLifecycleError, Service, acpProvider, claudeProvider, codexProvider, createAcrylSessionClient, createProviderPlugin, dshNativeProvider, parseAcrylSessionSnapshot, projectRuntimeArchitecture };
+export { AcrAgentControlError, AcrAgentControlService, AcrPluginLifecycleController, AcrPluginLifecycleService, AcrRuntimeArchitectureService, AuthorizationService, Context, PROVIDER_CAPABILITIES, PluginLifecycleError, Service, acpProvider, claudeProvider, codexProvider, computeCredentialProjection, createAcrylSessionClient, createProviderPlugin, dshNativeProvider, parseAcrylSessionSnapshot, projectRuntimeArchitecture };
 
 //# sourceMappingURL=index.js.map

package/runtime/node_modules/acryl-control/lib/types/authorization/service.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `AuthorizationService`: the `beginAuthorization` use-case, owned outside
+ * the terminal surface (finding R1). Forwards to the underlying
+ * `AuthorizationPort`, activates the route on success (no display-name
+ * encoding — the `-oauth` suffix hack is deleted, not moved; see finding R2),
+ * and emits `credential.changed` so subscribers can invalidate a targeted
+ * projection instead of a shotgun dual reload (finding R4).
+ *
+ * Framework-free: every dependency is a plain port, so this is directly
+ * unit-testable with stubs — no Cordis boot required.
+ */
+import type { AuthorizationBeginRequest, AuthorizationOutcome, AuthorizationPort, CredentialChangedListener, RouteActivationPort } from './types.ts';
+export interface AuthorizationServiceDeps {
+    readonly authorization: AuthorizationPort;
+    /** Optional: absent profiles degrade to "not available" (matches the surface's own optional-service pattern). */
+    readonly routeActivation?: RouteActivationPort;
+    readonly onCredentialChanged: CredentialChangedListener;
+}
+export declare class AuthorizationService {
+    private readonly deps;
+    constructor(deps: AuthorizationServiceDeps);
+    begin(request: AuthorizationBeginRequest): Promise<AuthorizationOutcome>;
+}

package/runtime/node_modules/acryl-control/lib/types/authorization/types.d.ts

@@ -0,0 +1,46 @@
+/** Typed authorization use-case contract: `/login`'s `beginAuthorization` action. */
+/** A question the running flow needs answered before it can continue (opaque pass-through). */
+export interface AuthorizationInteraction {
+    notify(notice: {
+        readonly message: string;
+        readonly url?: string;
+        readonly code?: string;
+    }): void;
+    prompt(prompt: {
+        readonly kind: 'text' | 'secret' | 'select';
+        readonly message: string;
+        readonly options?: readonly {
+            readonly id: string;
+            readonly label: string;
+            readonly description?: string;
+        }[];
+        readonly placeholder?: string;
+        readonly signal?: AbortSignal;
+    }): Promise<string>;
+}
+export interface AuthorizationBeginRequest {
+    /** The credential record key this flow writes (`<scope>/<id>`). */
+    readonly key: string;
+    readonly method: string | undefined;
+    readonly interaction: AuthorizationInteraction;
+}
+export interface AuthorizationOutcome {
+    readonly status: string;
+    readonly [extra: string]: unknown;
+}
+/** The underlying pi-ai (or equivalent) authorization flow runner. */
+export interface AuthorizationPort {
+    begin(request: AuthorizationBeginRequest): Promise<AuthorizationOutcome>;
+}
+/**
+ * Make a route usable from `/model` after a successful sign-in: `dsh-llm-pi-ai`
+ * only registers a route as live once its settings section names it (even an
+ * empty profile — "use the installed catalog's defaults" — counts), so a
+ * signed-in-but-never-configured route stays credentialed but absent from
+ * `ctx.llm`'s live directory otherwise. A no-op when the route already has a
+ * settings profile, so it never clobbers one the user already configured.
+ */
+export interface RouteActivationPort {
+    ensureRouteActivated(providerId: string, method: string | undefined): Promise<void>;
+}
+export type CredentialChangedListener = (key: string) => void;

package/runtime/node_modules/acryl-control/lib/types/credential/projection.d.ts

@@ -0,0 +1,63 @@
+/**
+ * `CredentialProjection`: the one join of `ctx.llm` + `ctx.settings` +
+ * `ctx.credentials` into provider rows. Replaces the surface's own
+ * `computeProviderRows`/`loadAuthorizationFlows` duplicate joins (finding R1)
+ * so `/login` and `/model` read the same projection instead of two
+ * independently-fetched pictures of the same state.
+ *
+ * Framework-free: takes plain service ports (not a Cordis `Context`), so it
+ * is directly unit-testable with stubs — no Cordis boot required. The
+ * surface wires these ports from `host.ctx.get(...)`.
+ */
+import type { CredentialModelEntry, CredentialProjectionRow } from './types.ts';
+export interface CredentialProjectionConfigurableProvider {
+    readonly provider: string;
+    readonly displayName: string;
+    readonly settingsNs: string;
+    readonly settingsPath: readonly string[];
+}
+export interface CredentialProjectionLlmPort {
+    listConfigurableProviders(): readonly CredentialProjectionConfigurableProvider[];
+    listProviders(): readonly {
+        readonly id: string;
+    }[];
+    listModels(provider: string): Promise<readonly CredentialModelEntry[]>;
+}
+export interface CredentialProjectionSettingsDescriptor {
+    readonly ns: string;
+    readonly value: unknown;
+    readonly user?: unknown;
+    readonly revision?: number;
+}
+export interface CredentialProjectionSettingsPort {
+    describe(options: {
+        readonly redactSecrets: boolean;
+    }): readonly CredentialProjectionSettingsDescriptor[];
+}
+export interface CredentialProjectionRecord {
+    readonly kind: string;
+}
+export interface CredentialProjectionCredentialsPort {
+    describe(ref: string): Promise<{
+        readonly configured: boolean;
+    }>;
+    readRecord?(key: string): Promise<CredentialProjectionRecord | undefined>;
+}
+export interface CredentialProjectionServices {
+    readonly llm: CredentialProjectionLlmPort;
+    readonly settings: CredentialProjectionSettingsPort;
+    readonly credentials: CredentialProjectionCredentialsPort;
+}
+export interface CredentialProjectionOptions {
+    /** Derive the settings-fallback `apiKeyEnv` reference for a route with no stored profile. */
+    readonly deriveApiKeyRef: (route: string) => string;
+    /**
+     * The scope a `/login` sign-in's own credential record lives under
+     * (`dsh-llm-pi-ai`'s `credentialKey(scope, providerId)`), separate from the
+     * `apiKeyEnv` reference a manually configured provider's settings profile
+     * points at. Defaults to `'llm-pi-ai'`.
+     */
+    readonly loginRecordScope?: string;
+}
+/** Compute every provider route's joined credential/settings/live-registration row. */
+export declare function computeCredentialProjection(services: CredentialProjectionServices, options: CredentialProjectionOptions): Promise<readonly CredentialProjectionRow[]>;

package/runtime/node_modules/acryl-control/lib/types/credential/types.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Typed read-model for a provider route's credential/authorization state.
+ * `/login` and `/model` (in `acryl-cli`) both consume the *same* projection —
+ * this is the one place `hasCredential`/`hasSettingsProfile`/`isLive`/
+ * `authMethod` are defined, so no field means two different things across
+ * the two overlays (see `specs/001-acryl-refactor-improvements-and-tech-debt`,
+ * finding R3).
+ */
+/** How a stored credential was obtained. */
+export type AuthMethod = 'oauth' | 'api-key';
+/** One model entry within a provider's catalog (subset shared with the surface's own `ModelEntry`). */
+export interface CredentialModelEntry {
+    readonly id: string;
+    readonly name?: string;
+    readonly contextWindow?: number;
+    readonly maxTokens?: number;
+}
+/** One provider route, joined from `ctx.llm` + `ctx.settings` + `ctx.credentials`. */
+export interface CredentialProjectionRow {
+    readonly route: string;
+    readonly displayName: string;
+    readonly settingsNs: string;
+    readonly settingsPath: readonly string[];
+    /** Whether the user's settings document has an override for this route (a `/model` save, not a `/login` sign-in). */
+    readonly hasSettingsProfile: boolean;
+    /** Whether a credential — an `apiKeyEnv` secret or a `/login` record — is stored for this route. */
+    readonly hasCredential: boolean;
+    /** Whether the route is currently registered/live in `ctx.llm`. */
+    readonly isLive: boolean;
+    /** How the credential behind `hasCredential` was obtained, or `undefined` when none is configured. */
+    readonly authMethod: AuthMethod | undefined;
+    readonly api: string | undefined;
+    readonly baseURL: string | undefined;
+    readonly apiKeyRef: string;
+    readonly models: readonly CredentialModelEntry[];
+    /** Settings revision this row was read at; replay as `expectedRevision` on write. */
+    readonly revision: number | undefined;
+}

package/runtime/node_modules/acryl-control/lib/types/index.d.ts

@@ -10,6 +10,10 @@ export * from './architecture/projection.ts';
 export * from './architecture/provider.ts';
 export * from './contracts/operations.ts';
 export * from './contracts/session.ts';
+export * from './credential/types.ts';
+export * from './credential/projection.ts';
+export * from './authorization/types.ts';
+export * from './authorization/service.ts';
 export * from './events.ts';
 export * from './lifecycle/controller.ts';
 export * from './lifecycle/provider.ts';

package/runtime/node_modules/acryl-control/package.json

@@ -1,6 +1,6 @@
 {
   "name": "acryl-control",
-  "version": "0.1.31",
+  "version": "0.1.36",
   "private": false,
   "description": "Host-neutral Cordis control plane for ACRYL",
   "license": "MIT",

package/runtime/node_modules/acryl-harness-runtime/lib/index.mjs

@@ -1,9 +1,12 @@
 import { createRequire } from "node:module";
-import { existsSync, writeFileSync } from "node:fs";
+import { appendFileSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { installModelSelection } from "@deepseek-ai/dsh-agent";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { SessionId } from "@deepseek-ai/dsh-session";
+import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
+import { homedir } from "node:os";
 import { provideCmdline } from "@deepseek-ai/dsh-cmdline";
 import { DEFAULT_PROFILE_BUNDLES, boot, composeEntries, healProfilesModuleFallback, initProfile, loadProfile, resolveProfileDir } from "@deepseek-ai/dsh-app-boot";
 import { defineTool } from "@deepseek-ai/dsh-tools";
@@ -114,6 +117,8 @@ function status(agent) {
 */
 function createAcrylSessionBridge(ctx, options) {
 	const handles = /* @__PURE__ */ new Map();
+	const modelSelections = /* @__PURE__ */ new Map();
+	const modelSelectionDisposers = /* @__PURE__ */ new Map();
 	const subscribers = /* @__PURE__ */ new Map();
 	const eventListeners = /* @__PURE__ */ new Map();
 	let disposed = false;
@@ -175,6 +180,12 @@ function createAcrylSessionBridge(ctx, options) {
 				}
 			});
 			handles.set(handle.agent.id, handle);
+			const ref = {
+				current: void 0,
+				assembled: void 0
+			};
+			modelSelectionDisposers.set(handle.agent.id, installModelSelection(handle.agent.ctx, ref));
+			modelSelections.set(handle.agent.id, ref);
 			return handle.agent.id;
 		},
 		snapshot,
@@ -234,6 +245,15 @@ function createAcrylSessionBridge(ctx, options) {
 			}));
 			await accepted;
 		},
+		async selectModel(input) {
+			agentFor(input.sessionId);
+			const ref = modelSelections.get(input.sessionId);
+			if (ref === void 0) throw new Error(`ACRYL session ${input.sessionId} has no installed model selection`);
+			ref.current = {
+				provider: input.provider,
+				model: input.model
+			};
+		},
 		async cancel(sessionId) {
 			agentFor(sessionId).cancel({ kind: "user" });
 		},
@@ -243,6 +263,9 @@ function createAcrylSessionBridge(ctx, options) {
 			offSessionEvent();
 			subscribers.clear();
 			eventListeners.clear();
+			for (const dispose of modelSelectionDisposers.values()) dispose();
+			modelSelectionDisposers.clear();
+			modelSelections.clear();
 			const activeHandles = [...handles.values()];
 			handles.clear();
 			const sessions = ctx.get("sessions");
@@ -259,6 +282,106 @@ function createAcrylSessionBridge(ctx, options) {
 	});
 }
 //#endregion
+//#region src/session-log-exporter.ts
+/**
+* A durable, cross-surface debug log for ACRYL sessions.
+*
+* Cordis's own `ctx.logger` already carries every structured log record any
+* plugin emits, but nothing in this stack persisted it anywhere — a failure
+* like a vendored provider's OAuth error only ever reached the terminal
+* transcript, gone the moment the pane scrolled or the process exited. This
+* registers one JSONL file exporter on `ctx.logger` per surface (CLI/TUI,
+* web, and — once wired there too — the desktop GUI), so `error`/`warn`
+* records (and everything, when `ACRYL_LOG_LEVEL=debug`) survive the session
+* and can be read back after the fact instead of re-derived from a
+* screenshot.
+*
+* @module acryl-harness-runtime/session-log-exporter
+*/
+const LOGGER_LEVEL_WARN = 2;
+const LOGGER_LEVEL_DEBUG = 3;
+/**
+* Register the file exporter for this process's lifetime. `ctx.logger.exporter()`
+* already ties its own disposal to the fiber that registers it (see
+* `LoggerService.exporter` in `@deepseek-ai/cordis`), so this needs no extra
+* `ctx.effect()` wrapper of its own.
+* @param ctx - the plugin context whose `ctx.logger` gains the exporter.
+* @param options - which surface/home this log file belongs to.
+*/
+function installSessionLogExporter(ctx, options) {
+	const logDir = join(resolveDshHome(options.dshHome), "logs");
+	try {
+		mkdirSync(logDir, {
+			recursive: true,
+			mode: 448
+		});
+	} catch {
+		return;
+	}
+	const day = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+	const logFile = join(logDir, `acryl-${options.surface}-${day}.jsonl`);
+	const threshold = process.env.ACRYL_LOG_LEVEL === "debug" ? LOGGER_LEVEL_DEBUG : LOGGER_LEVEL_WARN;
+	ctx.logger.exporter({ export(message) {
+		if (message.level > threshold) return;
+		try {
+			appendFileSync(logFile, `${JSON.stringify({
+				ts: new Date(message.ts).toISOString(),
+				type: message.type,
+				name: message.name,
+				args: message.args.map((arg) => arg instanceof Error ? {
+					message: arg.message,
+					stack: arg.stack,
+					name: arg.name
+				} : arg)
+			})}\n`, { mode: 384 });
+		} catch {}
+	} });
+}
+//#endregion
+//#region src/acryl-home.ts
+/**
+* ACRYL's own data root, nested one level above the DSH engine home it
+* composes.
+*
+* The stock DSH Desktop app (from dshdesktop.com) uses plain `~/.dsh`, and so
+* did every ACRYL surface until now — sharing that root made the two
+* genuinely different products silently share credentials/settings/sessions,
+* which is both confusing and useless for comparing ACRYL against a stock
+* DSH Desktop install side by side. ACRYL now owns `~/.acryl` and nests each
+* engine's artifacts under it by engine name:
+*
+* ```txt
+* ~/.acryl/            ACRYL's own root — everything not engine-specific
+* ~/.acryl/.dsh/        the DSH engine home (what DSH_HOME resolves to)
+* ~/.acryl/.pi/         reserved for a future pi.dev engine
+* ```
+*
+* `$DSH_HOME`, if a caller has already set it explicitly, still wins — this
+* only changes the *default* the harness's own `resolveDshHome()` falls
+* back to when nothing overrides it.
+*
+* @module acryl-harness-runtime/acryl-home
+*/
+/** ACRYL's own root directory name under the OS home. */
+const ACRYL_HOME_DIR_NAME = ".acryl";
+/** The DSH engine's directory name, nested under ACRYL's root. */
+const ACRYL_DSH_ENGINE_DIR_NAME = ".dsh";
+/** ACRYL's own root — `~/.acryl` unless `$ACRYL_HOME` overrides it. */
+function resolveAcrylHome(env = process.env) {
+	const overridden = env.ACRYL_HOME?.trim();
+	return overridden && overridden !== "" ? overridden : join(homedir(), ACRYL_HOME_DIR_NAME);
+}
+/**
+* The DSH engine home ACRYL boots against: `$DSH_HOME` if a caller already
+* set it (highest precedence, same as `resolveDshHome()` itself), otherwise
+* `<acrylHome>/.dsh` instead of the harness's own bare `~/.dsh` default.
+*/
+function resolveAcrylDshHome(env = process.env) {
+	const overridden = env.DSH_HOME?.trim();
+	if (overridden && overridden !== "") return resolveDshHome(void 0, env);
+	return resolveDshHome(join(resolveAcrylHome(env), ACRYL_DSH_ENGINE_DIR_NAME), env);
+}
+//#endregion
 //#region src/plugin-acryl-workspace-status.ts
 /** Canonical tool name exposed to the model. */
 const TOOL_NAME = "acryl_workspace_status";
@@ -330,6 +453,7 @@ const profileRoot = "[]\n";
 /** Boot one normal pinned-Harness ACRYL profile in a single Cordis root. */
 async function bootAcrylHarnessProfile(options) {
 	if (options.profile.trim() === "") throw new Error("ACRYL Harness profile must not be empty");
+	process.env.DSH_HOME = resolveAcrylDshHome();
 	initProfile(resolveProfileDir(options.profile), DEFAULT_PROFILE_BUNDLES);
 	healProfilesModuleFallback(dshInstallAnchor);
 	const profile = loadProfile("acryl", options.profile, dshInstallAnchor);
@@ -343,6 +467,7 @@ async function bootAcrylHarnessProfile(options) {
 	if (composeEntries([patches]).find((entry) => entry.id === "hmr")?.disabled !== true && !process.execArgv.includes("--expose-internals")) throw new Error("ACRYL profile enables Cordis HMR and must be launched with Node --expose-internals");
 	const ctx = await boot("acryl", rootConfig, patches, options.prepare);
 	if (ctx.tools) installAcrylWorkspaceStatusTool(ctx);
+	installSessionLogExporter(ctx, { surface: "tui" });
 	let disposed = false;
 	return Object.freeze({
 		ctx,
@@ -363,6 +488,7 @@ async function bootAcrylHarnessProfile(options) {
 */
 async function bootAcrylWebProfile(options = {}) {
 	const profileName = "web";
+	process.env.DSH_HOME = resolveAcrylDshHome();
 	initProfile(resolveProfileDir(profileName), DEFAULT_PROFILE_BUNDLES);
 	healProfilesModuleFallback(dshInstallAnchor);
 	const profile = loadProfile("web", profileName, dshInstallAnchor);
@@ -384,6 +510,7 @@ async function bootAcrylWebProfile(options = {}) {
 		return options.prepare?.(hostCtx);
 	});
 	if (ctx.tools) installAcrylWorkspaceStatusTool(ctx);
+	installSessionLogExporter(ctx, { surface: "web" });
 	const startup = ctx.get("webStartup");
 	const url = `http://${startup?.host ?? "127.0.0.1"}:${startup?.port ?? 3080}`;
 	let disposed = false;
@@ -399,6 +526,6 @@ async function bootAcrylWebProfile(options = {}) {
 	});
 }
 //#endregion
-export { ACRYL_CODING_CAPABILITIES, bootAcrylHarnessProfile, bootAcrylWebProfile, createAcrylCodingCapabilityPatches, createAcrylSessionBridge };
+export { ACRYL_CODING_CAPABILITIES, ACRYL_DSH_ENGINE_DIR_NAME, ACRYL_HOME_DIR_NAME, bootAcrylHarnessProfile, bootAcrylWebProfile, createAcrylCodingCapabilityPatches, createAcrylSessionBridge, installSessionLogExporter, resolveAcrylDshHome, resolveAcrylHome };
 
 //# sourceMappingURL=index.mjs.map

package/runtime/node_modules/acryl-harness-runtime/lib/types/acryl-home.d.ts

@@ -0,0 +1,35 @@
+/**
+ * ACRYL's own data root, nested one level above the DSH engine home it
+ * composes.
+ *
+ * The stock DSH Desktop app (from dshdesktop.com) uses plain `~/.dsh`, and so
+ * did every ACRYL surface until now — sharing that root made the two
+ * genuinely different products silently share credentials/settings/sessions,
+ * which is both confusing and useless for comparing ACRYL against a stock
+ * DSH Desktop install side by side. ACRYL now owns `~/.acryl` and nests each
+ * engine's artifacts under it by engine name:
+ *
+ * ```txt
+ * ~/.acryl/            ACRYL's own root — everything not engine-specific
+ * ~/.acryl/.dsh/        the DSH engine home (what DSH_HOME resolves to)
+ * ~/.acryl/.pi/         reserved for a future pi.dev engine
+ * ```
+ *
+ * `$DSH_HOME`, if a caller has already set it explicitly, still wins — this
+ * only changes the *default* the harness's own `resolveDshHome()` falls
+ * back to when nothing overrides it.
+ *
+ * @module acryl-harness-runtime/acryl-home
+ */
+/** ACRYL's own root directory name under the OS home. */
+export declare const ACRYL_HOME_DIR_NAME = ".acryl";
+/** The DSH engine's directory name, nested under ACRYL's root. */
+export declare const ACRYL_DSH_ENGINE_DIR_NAME = ".dsh";
+/** ACRYL's own root — `~/.acryl` unless `$ACRYL_HOME` overrides it. */
+export declare function resolveAcrylHome(env?: Record<string, string | undefined>): string;
+/**
+ * The DSH engine home ACRYL boots against: `$DSH_HOME` if a caller already
+ * set it (highest precedence, same as `resolveDshHome()` itself), otherwise
+ * `<acrylHome>/.dsh` instead of the harness's own bare `~/.dsh` default.
+ */
+export declare function resolveAcrylDshHome(env?: Record<string, string | undefined>): string;

package/runtime/node_modules/acryl-harness-runtime/lib/types/index.d.ts

@@ -1,6 +1,8 @@
 export { ACRYL_CODING_CAPABILITIES, createAcrylCodingCapabilityPatches, type AcrylCodingCapability, type AcrylSurface, } from './coding-capabilities.ts';
 export type { DurableSessionMessage, DurableSessionMessagePort, DurableSessionMessageReceipt, } from './durable-message.ts';
 export { createAcrylSessionBridge, type AcrylSessionBridge, type AcrylSessionBridgeOptions, } from './session-bridge.ts';
+export { installSessionLogExporter, type InstallSessionLogExporterOptions, } from './session-log-exporter.ts';
+export { ACRYL_DSH_ENGINE_DIR_NAME, ACRYL_HOME_DIR_NAME, resolveAcrylDshHome, resolveAcrylHome, } from './acryl-home.ts';
 import type { Context } from '@deepseek-ai/cordis';
 export interface BootAcrylHarnessProfileOptions {
     readonly profile: string;

package/runtime/node_modules/acryl-harness-runtime/lib/types/session-bridge.d.ts

@@ -22,6 +22,19 @@ export interface AcrylSessionBridge {
         readonly sessionId: string;
         readonly text: string;
     }): Promise<void>;
+    /**
+     * Switch an already-open session's live model. `agentOptions.provider`/`model`
+     * are a one-time construction input to `ctx.agents.create` — not a live
+     * setting — so this is the only thing that changes what a running session
+     * sends its next request to (`ModelSelectionRef` installed on the agent's
+     * own scoped context via `installModelSelection`, per-step prompt assembly
+     * reads it fresh).
+     */
+    selectModel(input: {
+        readonly sessionId: string;
+        readonly provider: string;
+        readonly model: string;
+    }): Promise<void>;
     cancel(sessionId: string): Promise<void>;
     dispose(): Promise<void>;
 }

package/runtime/node_modules/acryl-harness-runtime/lib/types/session-log-exporter.d.ts

@@ -0,0 +1,31 @@
+/**
+ * A durable, cross-surface debug log for ACRYL sessions.
+ *
+ * Cordis's own `ctx.logger` already carries every structured log record any
+ * plugin emits, but nothing in this stack persisted it anywhere — a failure
+ * like a vendored provider's OAuth error only ever reached the terminal
+ * transcript, gone the moment the pane scrolled or the process exited. This
+ * registers one JSONL file exporter on `ctx.logger` per surface (CLI/TUI,
+ * web, and — once wired there too — the desktop GUI), so `error`/`warn`
+ * records (and everything, when `ACRYL_LOG_LEVEL=debug`) survive the session
+ * and can be read back after the fact instead of re-derived from a
+ * screenshot.
+ *
+ * @module acryl-harness-runtime/session-log-exporter
+ */
+import type { Context } from '@deepseek-ai/cordis';
+export interface InstallSessionLogExporterOptions {
+    /** Which ACRYL surface this process is (`tui`, `web`, `desktop`) — becomes part of the log filename. */
+    readonly surface: string;
+    /** Harness home override; defaults to `$DSH_HOME`/`~/.dsh` exactly like credentials/settings resolve it. */
+    readonly dshHome?: string;
+}
+/**
+ * Register the file exporter for this process's lifetime. `ctx.logger.exporter()`
+ * already ties its own disposal to the fiber that registers it (see
+ * `LoggerService.exporter` in `@deepseek-ai/cordis`), so this needs no extra
+ * `ctx.effect()` wrapper of its own.
+ * @param ctx - the plugin context whose `ctx.logger` gains the exporter.
+ * @param options - which surface/home this log file belongs to.
+ */
+export declare function installSessionLogExporter(ctx: Context, options: InstallSessionLogExporterOptions): void;

package/runtime/node_modules/acryl-harness-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "acryl-harness-runtime",
-  "version": "0.1.31",
+  "version": "0.1.36",
   "private": false,
   "license": "MIT",
   "type": "module",