dsh-code 0.9.0 → 1.0.0

package/lib/startup.mjs

@@ -1,10 +1,11 @@
-import { t as THEME_NAMES } from "./theme-BEi4i_aN.mjs";
+import { t as THEME_NAMES } from "./theme-DCT8Y2xf.mjs";
 import { Command } from "commander";
 import { parseCmdline } from "@deepseek-ai/dsh-cmdline";
 //#region src/startup.ts
 /**
 * The interactive terminal app's command-line provider: parses `--resume`,
-* `--continue`, `--session`, `--mode`, `--theme`, and `--help`, then
+* `--continue`, `--session`, `--mode`, `--theme`, `--image`, an optional
+* initial prompt, and `--help`, then
 * publishes {@link TUI_STARTUP_SERVICE} for the runner to consume lazily.
 * Follows the headless bundle's startup shape (a commander action publishing
 * a service through {@link parseCmdline}).
@@ -41,23 +42,27 @@ function resolveTuiStartup(options) {
 	if (options.mode === "") throw new Error("--mode needs a preset id");
 	if (options.mode !== void 0 && (options.resume !== void 0 || options.continue === true)) throw new Error("--mode applies only to a new session; it cannot be combined with --resume or --continue");
 	if (options.theme !== void 0 && !THEME_NAMES.includes(options.theme)) throw new Error("--theme must be dark, light, or auto");
-	const theme = options.theme === void 0 ? {} : { theme: options.theme };
+	const input = {
+		...options.theme === void 0 ? {} : { theme: options.theme },
+		...options.prompt === void 0 || options.prompt.trim() === "" ? {} : { prompt: options.prompt.trim() },
+		...options.images === void 0 || options.images.length === 0 ? {} : { images: [...options.images] }
+	};
 	return options.resume !== void 0 ? {
 		kind: "resume",
 		sessionId: options.resume,
-		...theme
+		...input
 	} : options.continue === true ? {
 		kind: "latest",
-		...theme
+		...input
 	} : options.session !== void 0 ? {
 		kind: "named",
 		sessionId: options.session,
 		...options.mode === void 0 ? {} : { mode: options.mode },
-		...theme
+		...input
 	} : {
 		kind: "fresh",
 		...options.mode === void 0 ? {} : { mode: options.mode },
-		...theme
+		...input
 	};
 }
 /**
@@ -66,13 +71,15 @@ function resolveTuiStartup(options) {
 * @returns a fresh program, so one process can parse more than once (tests).
 */
 function tuiCommand() {
-	return new Command().name("dsh --profile cli").description("Claude-Code-style interactive terminal for DeepSeek Harness.").helpOption("-h, --help", "show this help").option("-r, --resume <session>", "resume the persisted session with this id (or unique id prefix)").option("-c, --continue", "resume the most recent persisted session for this working directory").option("--session <id>", "create a new session under this explicit id").option("--mode <preset>", "agent preset for a newly created session").option("--theme <name>", "color theme: dark (default), light, or auto").addHelpText("after", `
+	return new Command().name("dsh --profile cli").description("DeepSeek Harness CLI core: the interactive coding terminal.").helpOption("-h, --help", "show this help").option("-r, --resume <session>", "resume the persisted session with this id (or unique id prefix)").option("-c, --continue", "resume the most recent persisted session for this working directory").option("--session <id>", "create a new session under this explicit id").option("--mode <preset>", "agent preset for a newly created session").option("--theme <name>", "color theme: dark (default), light, or auto").option("-i, --image <path>", "attach an image to the initial prompt (repeatable)", (path, paths) => [...paths, path], []).argument("[prompt...]", "initial prompt; sends immediately after startup").addHelpText("after", `
 Examples:
   dsh --profile cli                       fresh session, minted id
   dsh --profile cli --resume abc123       resume session by id prefix
   dsh --profile cli --continue            resume the latest local session
   dsh --profile cli --mode minimal        fresh session using the minimal preset
   dsh --profile cli --theme light         light palette for bright terminals
+  dsh --profile cli "explain this repo"   start and send an initial prompt
+  dsh --profile cli -i diagram.png "review this diagram"
 `);
 }
 /**
@@ -82,8 +89,11 @@ Examples:
 */
 function apply(ctx) {
 	const program = tuiCommand();
-	program.action(() => {
-		const options = program.opts();
+	program.action((prompt) => {
+		const options = {
+			...program.opts(),
+			prompt: prompt.join(" ")
+		};
 		let startup;
 		try {
 			startup = resolveTuiStartup(options);
@@ -96,4 +106,4 @@ function apply(ctx) {
 	parseCmdline(ctx, program);
 }
 //#endregion
-export { TUI_STARTUP_SERVICE, apply, inject, name, resolveTuiStartup };
+export { apply, inject, name, resolveTuiStartup };

package/lib/{theme-BEi4i_aN.mjs → theme-DCT8Y2xf.mjs}

@@ -491,6 +491,12 @@ const DARK_PALETTE = {
 		125,
 		211,
 		252
+	],
+	/** Composer three-row band base — neutral light gray, hue-free so wave tints read on it. */
+	composerBand: [
+		46,
+		48,
+		52
 	]
 };
 /** Every palette by theme name; auto resolves through {@link resolveTheme}. */
@@ -556,6 +562,12 @@ const PALETTES = {
 			14,
 			116,
 			144
+		],
+		/** Composer three-row band base — neutral light gray, hue-free so wave tints read on it. */
+		composerBand: [
+			229,
+			231,
+			235
 		]
 	}
 };
@@ -608,17 +620,9 @@ function parseThemeName(value) {
 function inkColor(triple) {
 	return `rgb(${triple[0]}, ${triple[1]}, ${triple[2]})`;
 }
-/** Paint with the primary brand blue: whale, wordmark, tool names, accents. */
-function brand(text) {
-	return chalk.rgb(...activePalette.brand)(text);
-}
 /** Paint muted captions, hints, and meta lines. */
 function dim(text) {
 	return chalk.rgb(...activePalette.dim)(text);
 }
-/** Paint failures and error entries. */
-function error(text) {
-	return chalk.rgb(...activePalette.error)(text);
-}
 //#endregion
-export { getPalette as a, parseThemeName as c, error as i, setTheme as l, brand as n, getTheme as o, dim as r, inkColor as s, THEME_NAMES as t, chalk as u };
+export { inkColor as a, chalk as c, getTheme as i, dim as n, parseThemeName as o, getPalette as r, setTheme as s, THEME_NAMES as t };

package/lib/types/app.d.ts

@@ -21,15 +21,17 @@ import { type TranscriptEntry } from './render/projection.ts';
 import type { ApprovalStore } from './approval.ts';
 import type { CommandsView } from './commands.ts';
 import type { ModelDirectory, ModelRow } from './models.ts';
-import type { ProviderSettingsDirectory, ProviderTargetView } from './provider-settings.ts';
+import type { ProviderConfiguration, ProviderSettingsDirectory, ProviderTargetView } from './provider-settings.ts';
 import type { QuestionStore } from './questions.ts';
 import type { SkillsView, SkillRow } from './skills.ts';
 import type { MentionCandidate } from './mentions.ts';
 import type { SubagentFeedView } from './subagents.ts';
+import { type JobRow } from './kernel-panels.ts';
 import type { PresetRow } from './presets.ts';
 import type { PermissionRow } from './permissions.ts';
 import type { PluginRow } from './plugin-inventory.ts';
 import type { SessionDirectoryOptions, SessionRow } from './session-directory.ts';
+import type { GitDiffView } from './git-workflow.ts';
 /** Visual priority for one bounded local notice. */
 export type NoticeTone = 'info' | 'warning' | 'error';
 /** Props the runner hands the app; callbacks stay owned by the runner. */
@@ -96,6 +98,8 @@ export interface AppProps {
     unsetModelProviderCredential?(target: ProviderTargetView): Promise<void>;
     /** Remove one user-owned provider profile and its page-managed credential. */
     removeModelProvider?(target: ProviderTargetView): Promise<void>;
+    /** Save endpoint and explicit model capacities through the provider profile. */
+    saveModelProviderConfiguration?(target: ProviderTargetView, configuration: ProviderConfiguration): Promise<void>;
     /** Cycle to the next permission preset (Shift+Tab); returns the new label. */
     cyclePermission(): string;
     /** Select or inspect a permission preset without requiring a pre-existing session. */
@@ -104,12 +108,20 @@ export interface AppProps {
     exportTranscript(argument: string): Promise<void>;
     /** Rename the session (/title <text>); returns the outcome line for the notice. */
     renameTitle(argument: string): string;
+    /** Copy the latest complete assistant response; resolves to notice text. */
+    copyLastResponse(): Promise<string>;
+    /** Load a complete read-only Git diff for the file-oriented viewport. */
+    loadGitDiff(argument: string): Promise<GitDiffView>;
+    /** Start a model review after applying the read-only permission preset. */
+    reviewChanges(argument: string): void;
     /** Preset/session/plugin kernel operations. */
     loadPresets(): Promise<readonly PresetRow[]>;
     switchMode(id: string): Promise<string>;
     /** Load the switchable permission presets for the /permission panel. */
     loadPermissions(): Promise<readonly PermissionRow[]>;
     createSession(mode?: string): void;
+    /** Fork the active session at a completed-turn boundary. */
+    forkSession(argument: string): void;
     loadSessions(options: SessionDirectoryOptions, signal?: AbortSignal): Promise<readonly SessionRow[]>;
     loadSessionTranscript(id: string, signal?: AbortSignal): Promise<string>;
     /** Load this session's subagent conversations (children by lineage). */
@@ -117,6 +129,8 @@ export interface AppProps {
     switchSession(row: SessionRow): void;
     cancelSessionSwitch(): boolean;
     loadPlugins(): readonly PluginRow[];
+    /** Caller-visible background jobs (the host jobs registry, read-only). */
+    loadJobs(): readonly JobRow[];
     /** Registers the app's notice channel with the runner (called once on mount). */
     onBridgeReady(bridge: {
         notify(text: string, tone?: NoticeTone): void;
@@ -134,6 +148,17 @@ export interface AppProps {
     /** Cancel one queued inbox message by identity (Delete on the empty composer). */
     cancelQueued(messageId: string): void;
 }
+/**
+ * One-row editor window keeping the logical cursor visible in long drafts.
+ * The caret and its surroundings slice at grapheme boundaries: splitting a
+ * star-plane surrogate pair would render an isolated half under the block
+ * caret with a width the terminal never draws.
+ */
+export declare function editorWindow(value: string, cursor: number, columns: number): {
+    before: string;
+    caret: string;
+    after: string;
+};
 /** One completion candidate row. */
 interface CompletionCandidate {
     /** Insertion text for the command name (with leading slash). */
@@ -141,7 +166,7 @@ interface CompletionCandidate {
     /** Human-readable description shown beside the label. */
     description: string;
     /** Candidate origin; skills land the same literal text but route through the prompt. */
-    origin: 'command' | 'skill' | 'mention' | 'path';
+    origin: 'command' | 'skill' | 'mention';
 }
 /**
  * Resolve completion candidates for the current input: TUI-local commands,
@@ -163,14 +188,14 @@ interface SettledRowRecord {
     before: ReactElement | undefined;
     /** The roomy-prompt spacer AFTER the row, or undefined. */
     after: ReactElement | undefined;
-    /** Whether the row's text depends on the reasoning toggle (Ctrl+R). */
-    reasonSensitive: boolean;
-    /** The toggle state the row was built with. */
-    showReasoning: boolean;
+    /** Physical rows this record contributes (row body plus spacers) — the
+     * unit of the rendered-history cap. */
+    rows: number;
 }
 /** The incremental settled-history cache (see `computeSettledRows`). */
 interface SettledRowsCache {
-    /** The exact settled entries the cache covers (`view.entries[0..entries.length)`). */
+    /** The exact settled entries the cache covers (the WINDOW: the newest
+     * `entries.length` settled entries, oldest dropped entries excluded). */
     entries: TranscriptEntry[];
     /** Records keyed by entry identity; mutated in place so the append path
      * never copies the whole map. */
@@ -181,10 +206,21 @@ interface SettledRowsCache {
     resumed: boolean;
     /** The toggle state the rows were built with. */
     showReasoning: boolean;
-    /** The refreshEpoch the rows were built for; a bump forces a full rebuild. */
+    /** The refreshEpoch the rows was built for; a bump forces a full rebuild. */
     epoch: number;
-    /** The flat row list (header + per-entry before/box/after). */
+    /** The terminal width the rows were wrapped for; a change forces a rebuild. */
+    columns: number;
+    /** The flat row list (header + optional hint + per-entry before/box/after). */
     flat: ReactElement[];
+    /** Settled entries dropped from the window's head (rendering only — the
+     * event log keeps everything; Ctrl+O and /export read it directly). */
+    droppedEntries: number;
+    /** Physical rows the window's entries contribute (excludes header/hint). */
+    totalRows: number;
+    /** The window overflowed the trim hysteresis; one source-backed replay
+     * (epoch bump) will re-window the cache. The append path never mutates
+     * flat's head, so <Static> only ever sees tail appends between remounts. */
+    needsTrim: boolean;
 }
 /** One step of `computeSettledRows`. */
 interface SettledRowsResult {
@@ -205,13 +241,29 @@ interface SettledRowsResult {
  * rebuild of rows, Map, or MarkdownBody parses). `records` is mutated in place
  * on the append/toggle paths to stay O(delta).
  *
+ * RENDERED-HISTORY CAP: the window holds at most `rowCap` physical rows of
+ * settled transcript (header and hint reserved on top). The cap exists only
+ * here — the event log, the store projection, /export, Ctrl+O, and /resume
+ * keep the full history. Ink 5's <Static> is a consumption counter
+ * (items.slice(index) keyed on length): deleting head items mid-stream while
+ * appending tail items can permanently swallow new rows, so the append branch
+ * NEVER drops the head — it only accounts rows and flags `needsTrim` once the
+ * window overflows cap + margin. The flag fires one source-backed replay
+ * (epoch bump = the existing clear + <Static> remount), whose rebuild branch
+ * walks the settled entries BACKWARD from the newest, keeps whole entries
+ * until the cap, and counts everything older as `droppedEntries` (those
+ * entries never even reach settledEntryLines). Hysteresis bounds replays to
+ * at most one per 25% growth; resize / Ctrl+L / idle Ctrl+R replays re-window
+ * for free on the same path.
+ *
  * Full rebuilds run only on the rare, deliberate paths: no cache yet, a
- * source-backed replay (`epoch` bump: resize / Ctrl+L / Ctrl+R remounts
- * `<Static>` and must re-flush the CURRENT rows), a `resumed` change, or a shrink
- * (`store.reset`). A reasoning toggle rebuilds only the rows whose text
- * depends on it, preserving the other rows' element identity.
+ * source-backed replay (`epoch` bump: resize / Ctrl+L / an idle Ctrl+R fold
+ * toggle / a cap trim remounts `<Static>` and must re-flush the CURRENT rows
+ * at the CURRENT fold state), a `resumed` change, or a shrink (`store.reset`).
+ * While a turn is busy or streaming, Ctrl+R only flips the live region; rows
+ * already emitted to native scrollback change exclusively through rebuilds.
  */
-export declare function computeSettledRows(previous: SettledRowsCache | undefined, entries: readonly TranscriptEntry[], settled: number, showReasoning: boolean, resumed: boolean, epoch: number): SettledRowsResult;
+export declare function computeSettledRows(previous: SettledRowsCache | undefined, entries: readonly TranscriptEntry[], settled: number, showReasoning: boolean, resumed: boolean, epoch: number, columns?: number, rowCap?: number): SettledRowsResult;
 /** The whole terminal app; state arrives via the store, output via Ink. */
 export declare function App(props: AppProps): ReactElement;
 export {};

package/lib/types/attachments.d.ts

@@ -0,0 +1,7 @@
+/** Terminal image-file adapter over the Harness durable attachment service. */
+import type { AttachmentStore, ImageMediaType } from '@deepseek-ai/dsh-attachment';
+import type { ImageBlock } from '@deepseek-ai/dsh-llm';
+/** Detect the supported encoded raster formats from bytes, never from a path suffix. */
+export declare function detectImageMediaType(data: Uint8Array): ImageMediaType | undefined;
+/** Read, validate, and persist an ordered image path list as model content blocks. */
+export declare function saveImagePaths(paths: readonly string[], attachments: AttachmentStore | undefined): Promise<readonly ImageBlock[]>;

package/lib/types/editor.d.ts

@@ -0,0 +1,6 @@
+/** Host editor and clipboard adapters used by the terminal surface. */
+import type { TranscriptView } from './render/projection.ts';
+/** Copy UTF-8 text through the platform clipboard command. */
+export declare function copyText(text: string): Promise<void>;
+/** Latest complete assistant text, excluding streaming and reasoning. */
+export declare function latestAssistantText(view: TranscriptView): string | undefined;

package/lib/types/fork.d.ts

@@ -0,0 +1,8 @@
+/** Pure session-fork boundary policy shared by the TUI command and tests. */
+import type { SessionEvent } from '@deepseek-ai/dsh-session';
+export interface ForkSeed {
+    readonly boundarySeq: number;
+    readonly events: readonly SessionEvent[];
+}
+/** Select a completed turn and trailing between-turn metadata. */
+export declare function selectForkSeed(events: readonly SessionEvent[], atSeq?: number): ForkSeed;

package/lib/types/git-workflow.d.ts

@@ -0,0 +1,23 @@
+/** Read-only Git inspection used by /diff and /review. */
+export interface GitDiffSpec {
+    readonly label: string;
+    readonly args: readonly string[];
+}
+/** One file section from a unified diff, retained in source order. */
+export interface GitDiffFile {
+    readonly path: string;
+    readonly lines: readonly string[];
+}
+/** A parsed diff ready for a file-oriented terminal viewport. */
+export interface GitDiffView {
+    readonly title: string;
+    readonly files: readonly GitDiffFile[];
+}
+/** Split Git's stable `diff --git` framing without interpreting patch content. */
+export declare function parseGitDiffFiles(text: string): readonly GitDiffFile[];
+/** Parse the intentionally small, option-safe /diff argument vocabulary. */
+export declare function parseGitDiffSpec(argument: string): GitDiffSpec;
+/** Load one complete textual diff without invoking external diff drivers. */
+export declare function loadGitDiff(cwd: string, argument: string): Promise<GitDiffView>;
+/** Review prompt capped before it reaches a provider context window. */
+export declare function buildReviewPrompt(diff: string, label: string, maxChars?: number): string;

package/lib/types/index.d.ts

@@ -10,6 +10,7 @@
  */
 import type { Context } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
+import { SessionId, type SessionEvent } from '@deepseek-ai/dsh-session';
 import type { SessionPersistence } from '@deepseek-ai/dsh-session-persistence';
 import type { TuiStartup } from './startup.ts';
 /** Stable Cordis plugin name. */
@@ -24,6 +25,8 @@ export interface Config {
         sessionId?: string;
         mode?: string;
         theme?: string;
+        prompt?: string;
+        images?: string[];
     };
 }
 export declare const Config: z<Config>;
@@ -33,6 +36,9 @@ interface Target {
     resume: boolean;
     mode?: string;
     cwd?: string;
+    seed?: readonly SessionEvent[];
+    parentSession?: SessionId;
+    seedLength?: number;
 }
 /**
  * Reduce a session id to a filename-safe /export default-name suffix. Session

package/lib/types/kernel-panels.d.ts

@@ -7,6 +7,15 @@ import type { PresetRow } from './presets.ts';
 import type { PluginRow } from './plugin-inventory.ts';
 import type { SessionDirectoryOptions, SessionRow } from './session-directory.ts';
 import { type StatusItemId } from './render/status.ts';
+/**
+ * Apply one keystroke to a panel search query. IME commits arrive as one
+ * multi-character chunk, so the whole printable run is appended; paste
+ * markers are stripped and control-laden chunks are ignored.
+ */
+export declare function editQuery(query: string, input: string, key: {
+    backspace?: boolean;
+    delete?: boolean;
+}): string | undefined;
 export declare function ModePanel({ current, load, select, close }: {
     current: string;
     load(): Promise<readonly PresetRow[]>;
@@ -24,6 +33,36 @@ export declare function PluginPanel({ load, close, initialQuery }: {
     close(): void;
     initialQuery?: string;
 }): ReactElement;
+/** One background job snapshot for the /jobs panel (the registry's read-only view). */
+export interface JobRow {
+    /** The registry-issued id (`<kind>-N`). */
+    readonly id: string;
+    /** Producer kind (bash, subagent, …). */
+    readonly kind: string;
+    /** One-line model-facing label (the command; the delegation description). */
+    readonly label: string;
+    /** Lifecycle state. */
+    readonly status: 'running' | 'stopping' | 'completed' | 'killed' | 'failed';
+    /** Kind-specific status detail once the producer supplied one. */
+    readonly detail?: string;
+    /** Epoch ms when the job was registered. */
+    readonly startedAt: number;
+    /** Epoch ms when the job settled; absent while running/stopping. */
+    readonly finishedAt?: number;
+}
+/** Web TurnStatus elapsed format: `45s` under a minute, `2m03s` beyond. */
+export declare function runClock(ms: number): string;
+/**
+ * The read-only background-job panel: caller-owned and unowned jobs from the
+ * host `jobs` registry in registration order, with a local second-hand while
+ * the panel is open (elapsed clocks advance and the snapshot re-reads; the
+ * interval dies with the panel). Cancel stays upstream-only; an absent
+ * registry renders as the plain empty state (a harmless missing service).
+ */
+export declare function JobsPanel({ load, close }: {
+    load(): readonly JobRow[];
+    close(): void;
+}): ReactElement;
 export declare function ResumePanel({ currentCwd, load, readTranscript, select, requestDelete, deleteConfirmId, reloadToken, deleteMode, close }: {
     currentCwd: string;
     load(options: SessionDirectoryOptions, signal?: AbortSignal): Promise<readonly SessionRow[]>;

package/lib/types/keyboard.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Keyboard enhancement protocol (Codex `keyboard_modes` parity) and the
+ * kitty CSI-u normalization layer.
+ *
+ * The TUI pushes the kitty keyboard protocol with DISAMBIGUATE_ESCAPE_CODES
+ * and REPORT_ALTERNATE_KEYS (flags 1|4 = `\x1b[>5u`), which makes terminals
+ * report Shift+Enter as `CSI 13;2u` instead of a bare CR. Event types are
+ * deliberately NOT requested: Ink 5's parser cannot decode the
+ * `:event-type` suffix, and repeat/release reporting buys this surface
+ * nothing.
+ *
+ * Ink 5 also cannot parse most CSI-u forms at all — they fall through its
+ * regex as unnamed sequences and get INSERTED AS DRAFT TEXT. The composer's
+ * stdin read patch therefore rewrites every CSI-u form it can decode back
+ * to the legacy byte or canonical sequence the existing key handling
+ * already understands, before Ink ever parses the chunk.
+ *
+ * @module @deepseek-ai/dsh-code/keyboard
+ */
+/** Push keyboard enhancement (modifyOtherKeys off, kitty flags 1|4). */
+export declare const KEYBOARD_ENHANCE_ENABLE = "\u001B[>4;0m\u001B[>5u";
+/** Pop the enhancement stack and reset modifyOtherKeys (exit path). */
+export declare const KEYBOARD_ENHANCE_DISABLE = "\u001B[<u\u001B[>4;0m";
+/** Enable bracketed paste reporting. */
+export declare const BRACKETED_PASTE_ENABLE = "\u001B[?2004h";
+/** Disable bracketed paste reporting. */
+export declare const BRACKETED_PASTE_DISABLE = "\u001B[?2004l";
+/** Bracketed paste markers as Ink delivers them (it strips the leading ESC). */
+export declare const PASTE_START_MARKER = "[200~";
+export declare const PASTE_END_MARKER = "[201~";
+/**
+ * Remove bracketed paste markers from one input chunk. Panel drafts accept raw
+ * `input` text, where an unhandled paste would otherwise persist the literal
+ * "[200~"/"[201~" markers Ink leaves after stripping the ESC byte.
+ */
+export declare function stripPasteMarkers(text: string): string;
+/**
+ * Rewrite every decodable kitty CSI-u sequence in one stdin chunk to the
+ * legacy form the input layer already handles. Undecodable or non-key
+ * sequences pass through untouched, so terminals without the protocol are
+ * unaffected.
+ */
+export declare function normalizeKeyboardChunk(chunk: string): string;

package/lib/types/mentions.d.ts

@@ -1,17 +1,21 @@
 /**
- * Workspace @mention support: file and directory candidates from a bounded
- * async scan of the session cwd, session candidates from the opt-in
- * `sessionReferenceResolver` service, and submission preparation through its
- * `prepare()` API. Picked session mentions land as canonical
- * `@[label](dsh-session:…)` tokens; on submit the text is parsed back into
- * readable `@label` text plus structured references, snapshots are injected
- * via `agent.inject()` before the readable message wakes the driver
+ * Workspace @mention support: file and directory candidates from the
+ * `fileReferences` service (dsh-file-reference-local), session candidates
+ * from the opt-in `sessionReferenceResolver` service, and submission
+ * preparation through its `prepare()` API. Picked session mentions land as
+ * canonical `@[label](dsh-session:…)` tokens; on submit the text is parsed
+ * back into readable `@label` text plus structured references, snapshots are
+ * injected via `agent.inject()` before the readable message wakes the driver
  * (`followup` idle, `steer` running) — exactly the upstream README's wiring.
  *
- * Harness exposes no workspace-file mention service (only session references
- * plus a post-hoc produced-file linker), so the file index is the lightweight
- * bounded scan below, kept deliberately smaller than Codex's streaming
- * gitignore-aware walker.
+ * File discovery lives entirely in the Harness service (per-agent bounded
+ * index, `@dir/` listing, symlink guards, tool/result invalidation); this
+ * module only maps candidates to menu rows and never re-implements scanning.
+ * The service is agent-scoped (the agent supplies the session cwd and the
+ * cache key), so before the first session creates an agent the SAME official
+ * search class runs against the launch cwd — @ file completion works on a
+ * bare launch, model- and session-independent, and the agent-scoped service
+ * takes over once a session exists.
  *
  * @module @deepseek-ai/dsh-code/mentions
  */
@@ -20,13 +24,6 @@ import type { Agent } from '@deepseek-ai/dsh-agent';
 import { parseSessionReferenceText, type SessionReferenceCandidate, type SessionReferenceInput } from '@deepseek-ai/dsh-session-reference';
 /** Parsed submission text: readable text plus structured references. */
 type ParsedSessionReferenceText = ReturnType<typeof parseSessionReferenceText>;
-/** One filesystem entry the @ menu can complete. */
-export interface FileCandidate {
-    /** Workspace-relative path with forward slashes. */
-    path: string;
-    /** Entry kind; directories insert with a trailing slash. */
-    kind: 'file' | 'directory';
-}
 /** One merged menu candidate (files and sessions, already ranked). */
 export interface MentionCandidate {
     /** Text inserted after the `@` (directories carry a trailing slash). */
@@ -45,18 +42,8 @@ export interface PreparedMention {
     /** Aggregated snapshot for `agent.inject()`, undefined without references. */
     additionalContext?: import('@deepseek-ai/dsh-session').UserMessage;
 }
-/**
- * Bounded async BFS scan of a workspace; unreadable entries are skipped.
- * Both files and directories are indexed (directories insert with a trailing
- * slash), mirroring Codex's `MatchType::{File,Directory}` index. Dotfiles and
- * the {@link SKIP_DIRS} list are excluded, which is a coarser filter than
- * Codex's gitignore-aware walker but stays dependency-free and bounded.
- */
-export declare function scanWorkspaceFiles(root: string, signal?: AbortSignal): Promise<readonly FileCandidate[]>;
 /** The mention API the input editor and the runner share. */
 export interface MentionsApi {
-    /** Scanned workspace files and directories, cached across one session. */
-    files(): Promise<readonly FileCandidate[]>;
     /** Ranked menu candidates for the typed `@` query. */
     candidates(query: string, signal?: AbortSignal): Promise<readonly MentionCandidate[]>;
     /** Parse submission text into readable text plus structured references. */
@@ -71,17 +58,20 @@ export interface MentionsApi {
 }
 /**
  * Create the mention API for one agent's workspace. A missing
- * session-reference service degrades to file mentions only (the scan still
- * works); `prepare` then passes text through untouched. An undefined agent
- * (a bare launch before any session exists) also degrades to file-only
- * mentions, so `@` file completion works before the first message.
+ * `fileReferences` service (with an agent present) or `sessionReferenceResolver`
+ * degrades that half to empty rows; `prepare` passes text through untouched
+ * without references. An undefined agent (a bare launch before any session
+ * exists) runs the official WorkspaceFileSearch over the launch cwd — the
+ * same class the mounted service uses per agent — so `@` file completion
+ * works from the first keystroke; session references wait for the session.
  *
- * `files` is hoisted into the closure so `candidates` never reaches for
- * `this` — the runner hands `mentions.candidates` to the input editor as a
- * detached callback, and a `this`-bound method would throw on every `@` key.
- * @param ctx - context carrying the optional `sessionReferenceResolver`.
- * @param agent - the session owner; excluded from its own candidates.
- * @param cwd - workspace root to scan.
+ * `candidates` never reaches for `this` — the runner hands it to the input
+ * editor as a detached callback, and a `this`-bound method would throw on
+ * every `@` key.
+ * @param ctx - context carrying the optional `fileReferences` and
+ * `sessionReferenceResolver` services.
+ * @param agent - the session owner; excluded from its own session candidates.
+ * @param cwd - launch working directory; bounds the pre-session search.
  */
 export declare function createMentions(ctx: Context, agent: Agent | undefined, cwd: string): MentionsApi;
 export {};

package/lib/types/presets.d.ts

@@ -1,6 +1,6 @@
 /** Agent-preset policy kept independent from the Ink surface. */
 import type { Context } from '@deepseek-ai/cordis';
-import type { Agent, AgentHandle } from '@deepseek-ai/dsh-agent';
+import type { Agent } from '@deepseek-ai/dsh-agent';
 import type { Session, SessionEvent } from '@deepseek-ai/dsh-session';
 /** One discoverable agent composition. */
 export interface PresetRow {
@@ -30,5 +30,3 @@ export declare function resolvePreset(session: Pick<Session, 'header' | 'events'
 export declare function selectPreset(service: AgentPresetsService, agent: Agent | undefined, presetId: string): Promise<PresetRow>;
 /** Recompose atomically from the caller's perspective, logging only success. */
 export declare function switchPreset(service: AgentPresetsService, agent: Agent, presetId: string): Promise<PresetRow>;
-/** Minimal handle shape used by lifecycle tests without exposing Agent internals. */
-export type OwnedAgent = Pick<AgentHandle, 'agent' | 'dispose'>;

package/lib/types/provider-settings.d.ts

@@ -42,6 +42,18 @@ export type ProviderCredentialView = ({
     readonly kind: 'error';
     readonly message: string;
 };
+/** One explicit model enabled for a provider profile. */
+export interface ProviderModelSettings {
+    readonly id: string;
+    readonly name?: string;
+    readonly contextWindow?: number;
+    readonly maxTokens?: number;
+}
+/** The small, portable subset of a provider profile the terminal edits. */
+export interface ProviderConfiguration {
+    readonly baseURL?: string;
+    readonly models: readonly ProviderModelSettings[];
+}
 /**
  * One provider row in the TUI provider-management panel: the configurable
  * directory entry joined with its settings profile and credential facts.
@@ -71,6 +83,8 @@ export interface ProviderTargetView {
     readonly suggestedRef: string;
     /** Credential facts, a bounded describe error, or undefined when there is no ref to describe. */
     readonly credential: ProviderCredentialView | undefined;
+    /** Endpoint and explicit model overrides visible to the provider editor. */
+    readonly configuration: ProviderConfiguration;
     /** The owning adapter reports this route as hand-declared (absent when it draws no distinction). */
     readonly declared?: boolean;
 }
@@ -120,6 +134,8 @@ export declare function loadProviderSettings(ctx: Context): Promise<ProviderSett
  * @throws {@link ProviderSettingsError} with a single-line, key-free message.
  */
 export declare function saveProviderCredential(ctx: Context, target: ProviderTargetView, rawKey: string): Promise<void>;
+/** Save the endpoint and an explicit model allow-list without rebuilding the profile. */
+export declare function saveProviderConfiguration(ctx: Context, target: ProviderTargetView, configuration: ProviderConfiguration): Promise<void>;
 /**
  * Remove the currently named credential without touching the provider
  * profile. Only the resolved profile's own reference is unset; a dormant or