dsh-code 1.0.0 → 1.0.1

package/lib/types/app.d.ts

@@ -15,6 +15,8 @@
  */
 import { type ReactElement } from 'react';
 import type { CommandDescriptor } from '@deepseek-ai/dsh-commands';
+import type { ImageBlock } from '@deepseek-ai/dsh-llm';
+import type { AuthorizationInteraction, AuthorizationStatus } from '@deepseek-ai/dsh-authorization';
 import { type ThemeName } from './theme.ts';
 import type { TranscriptStore } from './store.ts';
 import { type TranscriptEntry } from './render/projection.ts';
@@ -32,6 +34,8 @@ import type { PermissionRow } from './permissions.ts';
 import type { PluginRow } from './plugin-inventory.ts';
 import type { SessionDirectoryOptions, SessionRow } from './session-directory.ts';
 import type { GitDiffView } from './git-workflow.ts';
+import { type ProviderAuthorizationDirectory, type ProviderAuthorizationRow } from './authorization.ts';
+import { type ImagePathInspection } from './attachments.ts';
 /** Visual priority for one bounded local notice. */
 export type NoticeTone = 'info' | 'warning' | 'error';
 /** Props the runner hands the app; callbacks stay owned by the runner. */
@@ -67,9 +71,9 @@ export interface AppProps {
     /** Permission preset selected for the current or pending first session. */
     permission: string;
     /** Submit one line: slash commands to the registry, other text to the agent. */
-    dispatch(text: string): void;
+    dispatch(text: string, images?: readonly ImageBlock[]): void;
     /** Submit steering: consumed at the running turn's next step boundary. */
-    steer(text: string): void;
+    steer(text: string, images?: readonly ImageBlock[]): void;
     /** Interrupt the running turn (Esc); true when a turn was cancelled. */
     interrupt(): boolean;
     /** Quit: unmount, flush, and request process exit. */
@@ -78,6 +82,10 @@ export interface AppProps {
     loadModels(): Promise<ModelDirectory>;
     /** Load @mention candidates for the typed query (files + sessions). */
     loadMentions(query: string, signal?: AbortSignal): Promise<readonly MentionCandidate[]>;
+    /** Validate draft image paths without committing attachment objects. */
+    inspectImages(paths: readonly string[]): Promise<readonly ImagePathInspection[]>;
+    /** Validate, normalize and persist images immediately before submission. */
+    prepareImages(paths: readonly string[]): Promise<readonly ImageBlock[]>;
     /** Apply one /model selection (with an advertised reasoning effort, when picked); returns the display label. */
     selectModel(row: ModelRow, effortId?: string): string;
     /** The /subagent override label, '' when delegated agents follow the current model. */
@@ -100,6 +108,14 @@ export interface AppProps {
     removeModelProvider?(target: ProviderTargetView): Promise<void>;
     /** Save endpoint and explicit model capacities through the provider profile. */
     saveModelProviderConfiguration?(target: ProviderTargetView, configuration: ProviderConfiguration): Promise<void>;
+    /** Provider authorization flows and value-free stored-record facts. */
+    loadProviderAuthorizations?(): Promise<ProviderAuthorizationDirectory>;
+    subscribeProviderAuthorizations?(listener: () => void): () => void;
+    beginProviderAuthorization?(row: ProviderAuthorizationRow, method: string, interaction: AuthorizationInteraction, signal: AbortSignal): Promise<AuthorizationStatus>;
+    cancelProviderAuthorization?(row: ProviderAuthorizationRow): void;
+    logoutProviderAuthorization?(row: ProviderAuthorizationRow): Promise<void>;
+    openAuthorizationUrl?(url: string): boolean;
+    copyTextValue?(text: string): Promise<void>;
     /** Cycle to the next permission preset (Shift+Tab); returns the new label. */
     cyclePermission(): string;
     /** Select or inspect a permission preset without requiring a pre-existing session. */

package/lib/types/attachments.d.ts

@@ -1,7 +1,20 @@
 /** Terminal image-file adapter over the Harness durable attachment service. */
 import type { AttachmentStore, ImageMediaType } from '@deepseek-ai/dsh-attachment';
 import type { ImageBlock } from '@deepseek-ai/dsh-llm';
+/** A validated path retained in the editor until submission persists it. */
+export interface ImagePathInspection {
+    readonly path: string;
+    readonly name: string;
+    readonly mediaType: ImageMediaType;
+    readonly bytes: number;
+}
 /** Detect the supported encoded raster formats from bytes, never from a path suffix. */
 export declare function detectImageMediaType(data: Uint8Array): ImageMediaType | undefined;
+/** Whether a path-like token is worth probing as an image attachment. */
+export declare function looksLikeImagePath(path: string): boolean;
+/** Parse a terminal paste/drop containing only one or more image paths. */
+export declare function parsePastedImagePaths(input: string): readonly string[];
+/** Validate path, byte size and encoded signature without writing an attachment object. */
+export declare function inspectImagePaths(paths: readonly string[], attachments: AttachmentStore | undefined, cwd?: string): Promise<readonly ImagePathInspection[]>;
 /** Read, validate, and persist an ordered image path list as model content blocks. */
 export declare function saveImagePaths(paths: readonly string[], attachments: AttachmentStore | undefined): Promise<readonly ImageBlock[]>;

package/lib/types/authorization-panel.d.ts

@@ -0,0 +1,22 @@
+/** Bounded Ink surfaces for provider login and logout. */
+import { type ReactElement } from 'react';
+import { type AuthorizationInteraction, type AuthorizationStatus } from '@deepseek-ai/dsh-authorization';
+import type { CredentialKey } from '@deepseek-ai/dsh-credentials';
+import type { ProviderAuthorizationRow } from './authorization.ts';
+export interface ProviderAuthorizationPanelProps {
+    readonly row: ProviderAuthorizationRow;
+    begin(row: ProviderAuthorizationRow, method: string, interaction: AuthorizationInteraction, signal: AbortSignal): Promise<AuthorizationStatus>;
+    cancel(key: CredentialKey): void;
+    openUrl(url: string): boolean;
+    copy(text: string): Promise<void>;
+    done(): void;
+    back(): void;
+}
+/** Run one upstream authorization flow without letting notices or prompts exceed the panel budget. */
+export declare function ProviderAuthorizationPanel(props: ProviderAuthorizationPanelProps): ReactElement;
+export declare function ProviderAuthorizationLogoutPanel({ row, confirm, done, back }: {
+    row: ProviderAuthorizationRow;
+    confirm(row: ProviderAuthorizationRow): Promise<void>;
+    done(): void;
+    back(): void;
+}): ReactElement;

package/lib/types/authorization.d.ts

@@ -0,0 +1,36 @@
+/** Terminal adapter over the Harness provider-authorization and credential-record seams. */
+import type { Context } from '@deepseek-ai/cordis';
+import type { AuthorizationEntry, AuthorizationInteraction, AuthorizationMethod, AuthorizationStatus } from '@deepseek-ai/dsh-authorization';
+import { type CredentialKey, type CredentialRecordInfo } from '@deepseek-ai/dsh-credentials';
+/** One provider login flow joined with its value-free stored-record facts. */
+export interface ProviderAuthorizationRow {
+    readonly key: CredentialKey;
+    readonly provider: string;
+    readonly label: string;
+    readonly methods: readonly AuthorizationMethod[];
+    readonly inFlight: boolean;
+    readonly record: CredentialRecordInfo;
+}
+/** The provider-login directory plus non-fatal record lookup failures. */
+export interface ProviderAuthorizationDirectory {
+    readonly rows: readonly ProviderAuthorizationRow[];
+    readonly failures: readonly string[];
+}
+/** Load only model-provider flows; unrelated future authorization domains stay out of `/model`. */
+export declare function loadProviderAuthorizations(ctx: Context): Promise<ProviderAuthorizationDirectory>;
+/** Subscribe to login settlement and credential-record changes. */
+export declare function subscribeProviderAuthorizations(ctx: Context, listener: () => void): () => void;
+/** Begin one provider login through the interaction surface owned by the caller. */
+export declare function beginProviderAuthorization(ctx: Context, row: Pick<ProviderAuthorizationRow, 'key'>, method: string, interaction: AuthorizationInteraction, signal?: AbortSignal): Promise<AuthorizationStatus>;
+/** Cancel the attempt currently serving this provider, if any. */
+export declare function cancelProviderAuthorization(ctx: Context, key: CredentialKey): void;
+/** Remove an authorization record without changing the provider's settings profile. */
+export declare function logoutProviderAuthorization(ctx: Context, row: ProviderAuthorizationRow): Promise<void>;
+/** Open an authorization URL with the platform default browser, without invoking a shell. */
+export declare function openAuthorizationUrl(raw: string): boolean;
+/** Compact value-free status for the provider list. */
+export declare function providerAuthorizationStatus(row: ProviderAuthorizationRow | undefined): string;
+/** Find a provider's login flow from a previously loaded directory. */
+export declare function authorizationForProvider(directory: ProviderAuthorizationDirectory | undefined, provider: string): ProviderAuthorizationRow | undefined;
+/** Preserve the upstream entry type in declarations without leaking service internals into the TUI. */
+export type { AuthorizationEntry };

package/lib/types/keyboard.d.ts

@@ -3,8 +3,7 @@
  * kitty CSI-u normalization layer.
  *
  * The TUI pushes the kitty keyboard protocol with DISAMBIGUATE_ESCAPE_CODES
- * and REPORT_ALTERNATE_KEYS (flags 1|4 = `\x1b[>5u`), which makes terminals
- * report Shift+Enter as `CSI 13;2u` instead of a bare CR. Event types are
+ * and REPORT_ALTERNATE_KEYS (flags 1|4 = `\x1b[>5u`). Event types are
  * deliberately NOT requested: Ink 5's parser cannot decode the
  * `:event-type` suffix, and repeat/release reporting buys this surface
  * nothing.
@@ -14,7 +13,6 @@
  * stdin read patch therefore rewrites every CSI-u form it can decode back
  * to the legacy byte or canonical sequence the existing key handling
  * already understands, before Ink ever parses the chunk.
- *
  * @module @deepseek-ai/dsh-code/keyboard
  */
 /** Push keyboard enhancement (modifyOtherKeys off, kitty flags 1|4). */

package/lib/types/mentions.d.ts

@@ -32,6 +32,8 @@ export interface MentionCandidate {
     description: string;
     /** Origin kind for icon/coloring decisions. */
     kind: 'file' | 'directory' | 'session';
+    /** Absolute path for file candidates; never rendered or persisted directly. */
+    path?: string;
 }
 /** Prepared submission: readable content plus optional injected context. */
 export interface PreparedMention {

package/lib/types/models.d.ts

@@ -9,7 +9,7 @@
  */
 import type { Context } from '@deepseek-ai/cordis';
 import type { ModelSelection } from '@deepseek-ai/dsh-agent';
-import { type LlmCallConfig, type LlmModelReasoningInfo } from '@deepseek-ai/dsh-llm';
+import { type LlmCallConfig, type LlmModelReasoningInfo, type ModelModality } from '@deepseek-ai/dsh-llm';
 /** Display metadata for one adapter-owned reasoning effort (mirrors `LlmReasoningEffortInfo`). */
 export interface ModelReasoningEffort {
     /** Opaque value accepted by the model's `GenerateOptions.reasoningEffort`. */
@@ -36,6 +36,8 @@ export interface ModelRow {
     model: string;
     /** Human-readable model name. */
     modelName: string;
+    /** Request modalities advertised for this exact route; absent means unknown. */
+    inputModalities?: readonly ModelModality[];
     /** Adapter-owned selectable reasoning levels when the model exposes any. */
     reasoning?: ModelReasoning;
 }

package/lib/types/permissions.d.ts

@@ -1,24 +1,14 @@
 /** Permission-preset policy for pending and active TUI sessions. */
 import type { Context } from '@deepseek-ai/cordis';
-import type { Session, SessionEvent } from '@deepseek-ai/dsh-session';
+import type { PermissionPresetService } from '@deepseek-ai/dsh-permission-presets';
+import type { Session } from '@deepseek-ai/dsh-session';
 /** One selectable permission preset row for the /permission panel. */
 export interface PermissionRow {
     readonly id: string;
     readonly description?: string;
 }
-/** Structural boundary over Harness permission presets; values stay service-owned. */
-export interface PermissionPresetsService {
-    readonly names: readonly string[];
-    readonly defaultPreset: string;
-    resolve(name: string): unknown;
-    current(events: readonly SessionEvent[]): string;
-    set(session: Session, preset: string): void;
-    /** Client presentation metadata for one preset; may reject unknown names. */
-    optionOf?(name: string): {
-        name: string;
-        description?: string;
-    } | undefined;
-}
+/** Public compatibility alias for the official upstream permission service. */
+export type PermissionPresetsService = PermissionPresetService;
 /** Read the optional Harness service without importing its runtime package. */
 export declare function permissionPresetsFrom(ctx: Context): PermissionPresetsService | undefined;
 /** Effective label for either an active session or the not-yet-created first one. */

package/lib/types/presets.d.ts

@@ -1,25 +1,12 @@
 /** Agent-preset policy kept independent from the Ink surface. */
 import type { Context } from '@deepseek-ai/cordis';
 import type { Agent } from '@deepseek-ai/dsh-agent';
+import type { AgentPreset, AgentPresets } from '@deepseek-ai/dsh-agent-presets';
 import type { Session, SessionEvent } from '@deepseek-ai/dsh-session';
 /** One discoverable agent composition. */
-export interface PresetRow {
-    readonly id: string;
-    readonly trust: 'system' | 'user';
-    readonly name?: string;
-    readonly description?: string;
-    readonly order?: number;
-    readonly broken?: string;
-}
-/** Structural boundary for the optional upstream AgentPresets service. */
-export interface AgentPresetsService {
-    readonly defaultId: string;
-    list(): Promise<PresetRow[]>;
-    resolve(id?: string): Promise<PresetRow>;
-    mount(agentCtx: Context, id?: string): Promise<PresetRow>;
-    recompose(agentCtx: Context, id: string): Promise<PresetRow>;
-    composedPreset(agentCtx: Context): string | undefined;
-}
+export type PresetRow = AgentPreset;
+/** Public compatibility alias for the official upstream service type. */
+export type AgentPresetsService = AgentPresets;
 /** Read an optional Cordis service without requiring its package at build time. */
 export declare function agentPresetsFrom(ctx: Context): AgentPresetsService | undefined;
 /** A preset may change only before the first durable turn begins. */

package/lib/types/render/status.d.ts

@@ -26,7 +26,7 @@ export declare function formatDuration(ms: number): string;
 /**
  * Cache-hit share of billed prompt-side input.
  * @param usage - cumulative token totals.
- * @returns rounded integer percent, or null when no input was billed.
+ * @returns percent rounded to one decimal place, or null when no input was billed.
  */
 export declare function cacheHitPercent(usage: TranscriptStats['usage']): number | null;
 /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-code",
   "description": "DeepSeek Harness CLI core bundle: interactive coding terminal, durable sessions, and model management for dsh --profile cli",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "type": "module",
   "bin": {
     "deepseek": "./bin/deepseek.mjs",
@@ -63,41 +63,43 @@
     "node": "^22.19 || >=24"
   },
   "dependencies": {
-    "@deepseek-ai/dsh-web-fetch-http": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-authorization": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-web-fetch-http": "0.1.1-rc.2",
     "@deepseek-ai/schemastery": "^3.18.1",
     "chalk": "^5.6.2",
-    "commander": "^14.0.2",
+    "commander": "^15.0.0",
     "ink": "^5.2.1",
     "react": "^18.3.1"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@deepseek-ai/dsh-attachment": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-agent": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-agent-default-model": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-cmdline": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-code-runtime-worker-thread": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-compaction": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-cordis-host-runner": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-file-reference-local": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-goal": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-jobs-local": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-llm-retry": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-permission-presets": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-plan-mode": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session-persistence": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session-reference": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session-title": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-skill": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-user-approval": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-user-questions": "^0.1.0-rc.8"
+    "@deepseek-ai/dsh-attachment": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-agent": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-agent-default-model": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-agent-presets": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-cmdline": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-code-runtime-worker-thread": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-commands": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-compaction": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-cordis-host-runner": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-file-reference-local": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-goal": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-invariants": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-jobs": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm-retry": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-permission-presets": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-plan-mode": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-persistence": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-reference": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-title": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-skill": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-user-questions": "0.1.1-rc.2"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": { "optional": true },
@@ -108,13 +110,14 @@
     "@deepseek-ai/dsh-agent-presets": { "optional": true },
     "@deepseek-ai/dsh-cmdline": { "optional": true },
     "@deepseek-ai/dsh-cordis-host-runner": { "optional": true },
+    "@deepseek-ai/dsh-credentials": { "optional": true },
     "@deepseek-ai/dsh-file-reference-local": { "optional": true },
     "@deepseek-ai/dsh-code-runtime-worker-thread": { "optional": true },
     "@deepseek-ai/dsh-commands": { "optional": true },
     "@deepseek-ai/dsh-compaction": { "optional": true },
     "@deepseek-ai/dsh-goal": { "optional": true },
     "@deepseek-ai/dsh-invariants": { "optional": true },
-    "@deepseek-ai/dsh-jobs-local": { "optional": true },
+    "@deepseek-ai/dsh-jobs": { "optional": true },
     "@deepseek-ai/dsh-llm": { "optional": true },
     "@deepseek-ai/dsh-llm-retry": { "optional": true },
     "@deepseek-ai/dsh-permission-presets": { "optional": true },
@@ -129,20 +132,23 @@
     "@deepseek-ai/dsh-user-questions": { "optional": true }
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-attachment": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-compaction": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-goal": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-llm-retry": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-permission-presets": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-plan-mode": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session-persistence": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session-reference": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-session-title": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-skill": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-user-approval": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-user-questions": "^0.1.0-rc.8",
+    "@deepseek-ai/dsh-agent-presets": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-compaction": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-commands": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-goal": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-jobs": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-llm-retry": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-permission-presets": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-plan-mode": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-persistence": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-reference": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-session-title": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-skill": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-user-questions": "0.1.1-rc.2",
     "@types/node": "^24.0.0",
     "@types/react": "~18.3.1",
     "tsdown": "^0.22.2",