dsh-code 1.0.3 → 1.0.5

package/lib/types/app.d.ts

@@ -21,9 +21,9 @@ import { type ThemeName } from './theme.ts';
 import type { TranscriptStore } from './store.ts';
 import { type TranscriptEntry } from './render/projection.ts';
 import type { ApprovalStore } from './approval.ts';
-import type { CommandsView } from './commands.ts';
+import { type CommandsView } from './commands.ts';
 import type { ModelDirectory, ModelRow } from './models.ts';
-import type { ProviderConfiguration, ProviderSettingsDirectory, ProviderTargetView } from './provider-settings.ts';
+import { type DiscoveredModelView, type ProviderConfiguration, type ProviderSettingsDirectory, type ProviderTargetView } from './provider-settings.ts';
 import type { QuestionStore } from './questions.ts';
 import type { SkillsView, SkillRow } from './skills.ts';
 import { type MentionCandidate } from './mentions.ts';
@@ -108,6 +108,15 @@ export interface AppProps {
     removeModelProvider?(target: ProviderTargetView): Promise<void>;
     /** Save endpoint and explicit model capacities through the provider profile. */
     saveModelProviderConfiguration?(target: ProviderTargetView, configuration: ProviderConfiguration): Promise<void>;
+    /**
+     * Interrogate the provider's real endpoint (typed key wins over the stored
+     * credential) for the models it actually serves — the discovery stage of
+     * the provider setup page.
+     */
+    discoverModelProvider?(target: ProviderTargetView, request: {
+        readonly apiKey?: string;
+        readonly baseURL?: string;
+    }, signal?: AbortSignal): Promise<readonly DiscoveredModelView[]>;
     /** Provider authorization flows and value-free stored-record facts. */
     loadProviderAuthorizations?(): Promise<ProviderAuthorizationDirectory>;
     subscribeProviderAuthorizations?(listener: () => void): () => void;

package/lib/types/commands.d.ts

@@ -37,3 +37,16 @@ export declare function watchCommands(ctx: Context): CommandsView;
  * @returns true when the line parses as `/name` or `/name input`.
  */
 export declare function isSlashLine(line: string): boolean;
+/**
+ * The submission payload for one composer line. Trim is a blank check, not a
+ * rewrite: an ordinary prompt keeps its exact leading indentation, inner
+ * layout, and trailing spaces (pasted code must reach the model verbatim).
+ * Only trailing line terminators are stripped — a draft's final newline is a
+ * paste/Enter artifact (an open bracketed paste turns Enter into an inserted
+ * newline), never deliberate content. A syntactic slash line still normalizes
+ * fully so command routing stays stable (completion inserts a trailing space
+ * after `/name`).
+ * @param line - the complete draft text.
+ * @returns the text to submit verbatim.
+ */
+export declare function submissionPayload(line: string): string;

package/lib/types/git-workflow.d.ts

@@ -1,4 +1,9 @@
-/** Read-only Git inspection used by /diff and /review. */
+/**
+ * Read-only Git inspection used by /diff and /review. Every diff
+ * invocation carries --no-ext-diff and --no-textconv, so configured
+ * external diff drivers and text converters can never execute as a
+ * side effect of reading a diff.
+ */
 export interface GitDiffSpec {
     readonly label: string;
     readonly args: readonly string[];
@@ -18,7 +23,7 @@ export declare function parseGitDiffFiles(text: string): readonly GitDiffFile[];
 /** Parse the intentionally small, option-safe /diff argument vocabulary. */
 export declare function parseGitDiffSpec(argument: string): GitDiffSpec;
 /**
- * Load one complete textual diff without invoking external diff drivers.
+ * Load one complete textual diff without invoking external programs.
  * @param signal - aborted by the caller on session switches/quit, killing the
  * git subprocess instead of letting a stale repository's diff land later.
  */

package/lib/types/history.d.ts

@@ -21,14 +21,21 @@ export declare function serializeHistoryEntry(text: string): string;
  */
 export declare function parseHistoryFile(raw: string, max?: number): readonly string[];
 /**
- * Append one entry to the persistent file content: JSON line, capped to the
- * newest `max` entries with a trailing newline.
- * @param current - existing file content.
- * @param text - submission to persist.
- * @param max - entry cap.
- * @returns the new file content.
+ * The append unit for the persistent file: one JSON line, so a multi-line
+ * draft still occupies exactly one physical line. Each submission appends
+ * this unit at the end of the file, so concurrent terminals add entries
+ * after each other. Node chunks one append at 512 KiB: a pasted entry
+ * beyond that size could interleave mid-line with another writer's
+ * chunks, and the damaged line then drops out at the next parse —
+ * recall tolerates the loss by design.
+ */
+export declare function historyLine(text: string): string;
+/**
+ * Whether the file on disk differs from its canonical form (deduped and
+ * capped). True means stale lines have accumulated and the next boot
+ * should rewrite it once, atomically.
  */
-export declare function appendHistoryContent(current: string, text: string, max?: number): string;
+export declare function needsCompaction(raw: string, max?: number): boolean;
 /**
  * Record one in-session submission: empty text is ignored and an adjacent
  * duplicate collapses (Codex `record_local_submission` semantics). The local
@@ -40,10 +47,10 @@ export declare function appendHistoryContent(current: string, text: string, max?
  */
 export declare function recordLocalEntry(local: readonly string[], text: string, max?: number): readonly string[];
 /**
- * Serialize a capped entry list to the history file format (one JSON line per
- * entry, trailing newline). The runner writes the in-memory list as the whole
- * file, so rapid same-process submissions cannot lose entries to a
- * read-modify-write race (the file is never read back before writing).
+ * Serialize a capped entry list to the history file format (one JSON line
+ * per entry, trailing newline). The boot-time compaction writes this
+ * canonical form once when stale lines have accumulated; submissions
+ * themselves only ever append a single line.
  * @param entries - the entries to persist, oldest first.
  * @returns the file content, '' for an empty list.
  */

package/lib/types/index.d.ts

@@ -10,6 +10,7 @@
  */
 import type { Context } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
+import { type ImageBlock } from '@deepseek-ai/dsh-llm';
 import { SessionId, type SessionEvent } from '@deepseek-ai/dsh-session';
 import type { SessionPersistence } from '@deepseek-ai/dsh-session-persistence';
 import type { TuiStartup } from './startup.ts';
@@ -69,6 +70,33 @@ export interface QuitCleanupStep {
  * @returns the names of the steps that started, in order (for tests).
  */
 export declare function runQuitSequence(steps: readonly QuitCleanupStep[], exit: (code: number) => void, onError?: (name: string, error: unknown) => void): Promise<readonly string[]>;
+/** One composer submission waiting behind the startup delivery. */
+export interface QueuedSubmission {
+    readonly text: string;
+    readonly mode: 'followup' | 'steer';
+    readonly images: readonly ImageBlock[];
+}
+/**
+ * Order-preserving gate for composer input while the startup prompt/images
+ * are still preparing. Anything submitted before the startup delivery settles
+ * queues and flushes afterwards in submit order, so the initial request can
+ * never be overtaken by typing that raced a slow image preparation. The flush
+ * also runs when the startup delivery fails: user input is never stranded.
+ */
+export declare class StartupInputGate {
+    private readonly deliver;
+    private readonly queued;
+    private pending;
+    constructor(deliver: (submission: QueuedSubmission) => void);
+    /** Submit one line: delivered now while idle, queued behind the startup delivery otherwise. */
+    submit(submission: QueuedSubmission): void;
+    /**
+     * Run the startup delivery — the callback receives the direct-delivery sink
+     * for the startup prompt itself — then flush everything that queued behind
+     * it, in order, even when the callback rejects.
+     */
+    run(startup: (deliver: (submission: QueuedSubmission) => void) => Promise<void>): Promise<void>;
+}
 /**
  * Resolve the invocation's target session against the persisted headers.
  * @param startup - the parsed startup flags.

package/lib/types/input-split.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Terminal input arrives as byte chunks, and one chunk can carry several
+ * keypresses: a fast space-then-enter, a bridged stdin that batches reads, a
+ * middle-click paste. Ink parses each chunk as exactly one keypress —
+ * `parseKeypress(' \r')` matches neither member, so both keys silently
+ * vanish (a multi-select question answered with an empty set). The splitter
+ * below cuts every chunk into the individual keypress units Ink's parser
+ * expects, keeping escape sequences and bracketed-paste blocks intact, and
+ * the stdin proxy feeds the split stream to the Ink mount.
+ *
+ * @module @deepseek-ai/dsh-tui/input-split
+ */
+import { PassThrough } from 'node:stream';
+/** One keypress cut from the input stream. */
+export interface KeypressSplitter {
+    /** Feed one chunk; returns every keypress unit this chunk completed. */
+    push(chunk: string): string[];
+    /** Whether an unterminated bracketed-paste block is currently held. */
+    openPaste(): boolean;
+    /**
+     * Last-resort escape hatch for a paste whose end marker never arrived:
+     * drop the start marker and emit the held bytes as plain keypress units so
+     * nothing (Esc and Ctrl+C included) stays hostage. Inert when no paste is
+     * open.
+     */
+    releaseStalePaste(): string[];
+}
+/**
+ * Build a stateful chunk splitter. A partial unit at the end of one chunk
+ * (a cut CSI sequence, an open paste block) waits in the buffer for the
+ * rest. A chunk-trailing lone ESC emits as the Escape key right away:
+ * terminals send Escape as its own chunk, and holding it hostage for a
+ * sequence that may never continue would break every Esc cancel.
+ */
+export declare function createKeypressSplitter(): KeypressSplitter;
+/** The stdin-shaped stream the Ink mount renders through. */
+export interface TuiStdin extends PassThrough {
+    /** Mirrors the real stdin so Ink's raw-mode gate passes. */
+    isTTY: boolean;
+    /** Forwarded to the real stdin; Ink toggles it around focus. */
+    setRawMode(value: boolean): unknown;
+    ref(): void;
+    unref(): void;
+}
+/**
+ * Wrap one real stdin in the splitting proxy: keypress units flow into a
+ * PassThrough Ink reads, while raw-mode/ref calls forward to the source.
+ * @param source - the process (or harness) input stream in raw mode.
+ * @returns the proxy stream plus a dispose that detaches the tap.
+ */
+export declare function createSplitStdin(source: NodeJS.ReadStream): {
+    stdin: TuiStdin;
+    dispose(): void;
+};

package/lib/types/kernel-panels.d.ts

@@ -115,7 +115,7 @@ export declare function StatuslinePanel({ enabled, change, close }: {
  * instead of a bare failure notice. Enter applies one level; Esc returns to
  * the model list without applying.
  */
-export declare function EffortPanel({ row, current, select, back }: {
+export declare function EffortPanel({ row, current, select, back, onExit }: {
     /** The model row whose advertised levels this stage lists. */
     row: ModelRow;
     /** Effective effort currently in force ('' when none), for the ● mark. */
@@ -124,6 +124,8 @@ export declare function EffortPanel({ row, current, select, back }: {
     select(effortId: string): void;
     /** Return to the model list without applying. */
     back(): void;
+    /** Leave the whole /model flow (Ctrl+C). */
+    onExit(): void;
 }): ReactElement;
 /**
  * The /agents panel (the Codex agent-picker contract, read-only): this

package/lib/types/keyboard.d.ts

@@ -42,6 +42,14 @@ export declare function stripTerminalFocusEvents(chunk: string, onFocus: (focuse
 /** Bracketed paste markers as Ink delivers them (it strips the leading ESC). */
 export declare const PASTE_START_MARKER = "[200~";
 export declare const PASTE_END_MARKER = "[201~";
+/**
+ * How long an unterminated bracketed-paste block may hold buffered bytes
+ * before the input splitter strips its start marker and releases them: a
+ * terminal that loses the end marker must never take the whole keyboard
+ * hostage (Esc/Ctrl+C included). Shared by the splitter and the composer's
+ * lost-paste safety net so both use one window.
+ */
+export declare const PASTE_BRACKET_TIMEOUT_MS = 1000;
 /**
  * Remove bracketed paste markers from one input chunk. Panel drafts accept raw
  * `input` text, where an unhandled paste would otherwise persist the literal

package/lib/types/presets.d.ts

@@ -11,8 +11,11 @@ export type AgentPresetsService = AgentPresets;
 export declare function agentPresetsFrom(ctx: Context): AgentPresetsService | undefined;
 /** A preset may change only before the first durable turn begins. */
 export declare function isBlankSession(events: readonly SessionEvent[]): boolean;
+/** Translate a preset id recorded before an upstream rename to its current id. */
+export declare function normalizePresetId(id: string): string;
+export declare function normalizePresetId(id: string | undefined): string | undefined;
 /** Latest logged selection wins; legacy sessions deliberately fall back to standard. */
-export declare function resolvePreset(session: Pick<Session, 'header' | 'events'>): string;
+export declare function resolvePreset(session: Pick<Session, 'header' | 'snapshotEvents'>): string;
 /** Resolve a pre-session choice, or recompose an active blank Agent. */
 export declare function selectPreset(service: AgentPresetsService, agent: Agent | undefined, presetId: string): Promise<PresetRow>;
 /** Recompose atomically from the caller's perspective, logging only success. */

package/lib/types/provider-settings.d.ts

@@ -59,8 +59,67 @@ export interface ProviderModelSettings {
 /** The small, portable subset of a provider profile the terminal edits. */
 export interface ProviderConfiguration {
     readonly baseURL?: string;
+    /**
+     * Wire protocol the stored profile names (e.g. `openai-responses`), when it
+     * names one. Load-only: the editor never writes it, but endpoint discovery
+     * passes it so the listing speaks the same protocol as real requests.
+     */
+    readonly api?: string;
     readonly models: readonly ProviderModelSettings[];
 }
+/** One model an endpoint reported about itself (mirrors `LlmDiscoveredModel`). */
+export interface DiscoveredModelView {
+    /** Model id the endpoint accepts. */
+    readonly id: string;
+    /** Human-readable name when the endpoint supplies one. */
+    readonly name?: string;
+    /** Context window when disclosed; adoption still owes it if absent. */
+    readonly contextWindow?: number;
+    /** Output cap when disclosed. */
+    readonly maxTokens?: number;
+}
+/** One model an endpoint reported about itself (mirrors LlmDiscoveredModel). */
+export interface DiscoveredModelView {
+    /** Model id the endpoint accepts. */
+    readonly id: string;
+    /** Human-readable name when the endpoint supplies one. */
+    readonly name?: string;
+    /** Context window when disclosed; adoption still owes it if absent. */
+    readonly contextWindow?: number;
+    /** Output cap when disclosed. */
+    readonly maxTokens?: number;
+}
+/**
+ * The seven canonical reasoning levels a reasoningEfforts key may name -
+ * pi-ai's THINKING_LEVELS. A pi-ai upgrade that adds or removes one fails
+ * upstream's own drift gate; this mirror exists so the terminal editor can
+ * validate drafts without importing the pi-ai package.
+ */
+export declare const REASONING_EFFORT_LEVELS: readonly ["off", "minimal", "low", "medium", "high", "xhigh", "max"];
+/**
+ * One stored reasoningEfforts declaration: a display-level to wire-value map
+ * (null sends no reasoning parameter), an explicit false disabling the
+ * picker, or undefined leaving the entry to inherit.
+ */
+export type ReasoningEffortsValue = Record<string, string | null> | false | undefined;
+/** Whether a raw extras value is a declared efforts dict (non-empty, non-false). */
+export declare function isDeclaredReasoningEfforts(value: unknown): value is Record<string, string | null>;
+/**
+ * Parse the setup page's compact efforts draft into a storable declaration.
+ * Grammar: empty = clear back to inherit; the single token "false" = disable
+ * the picker; otherwise space-separated level:wire pairs where level is one
+ * of REASONING_EFFORT_LEVELS and wire is any non-empty string or the literal
+ * "null" (send no parameter).
+ */
+export declare function parseReasoningEffortsDraft(draft: string): {
+    readonly ok: true;
+    readonly value: ReasoningEffortsValue;
+} | {
+    readonly ok: false;
+    readonly error: string;
+};
+/** Serialize a stored declaration back to the compact draft form (stored key order preserved). */
+export declare function serializeReasoningEfforts(value: unknown): string;
 /**
  * One provider row in the TUI provider-management panel: the configurable
  * directory entry joined with its settings profile and credential facts.
@@ -143,6 +202,24 @@ export declare function loadProviderSettings(ctx: Context): Promise<ProviderSett
 export declare function saveProviderCredential(ctx: Context, target: ProviderTargetView, rawKey: string): Promise<void>;
 /** Save the endpoint and an explicit model allow-list without rebuilding the profile. */
 export declare function saveProviderConfiguration(ctx: Context, target: ProviderTargetView, configuration: ProviderConfiguration): Promise<void>;
+/**
+ * Interrogate a provider endpoint for the models it really serves, through
+ * the model-discovery capability the provider's settings namespace
+ * registered — the same pipe the official Web Models page uses. The request
+ * is a draft: a typed key forces direct endpoint interrogation (gateway
+ * truth), while an empty key lets the harness resolve the route's stored
+ * credential; with neither baseURL nor route the adapter answers from its
+ * own knowledge.
+ * @param ctx - context carrying the `llm` service (optional discovery).
+ * @param target - provider row whose settings namespace serves the draft.
+ * @param request - typed key and/or endpoint override for this one probe.
+ * @param signal - caller cancellation (panel navigation aborts the probe).
+ * @returns the advertised models in endpoint order, deduplicated.
+ */
+export declare function discoverProviderModels(ctx: Context, target: ProviderTargetView, request: {
+    readonly apiKey?: string;
+    readonly baseURL?: string;
+}, signal?: AbortSignal): Promise<readonly DiscoveredModelView[]>;
 /**
  * Remove the currently named credential without touching the provider
  * profile. Only the resolved profile's own reference is unset; a dormant or

package/lib/types/questions.d.ts

@@ -1,18 +1,19 @@
 /**
- * The terminal ask_user_question provider: registers the single UI provider
- * on `ctx.userQuestions` and drives it with a FIFO queue — one question
- * request on screen at a time, everything else waiting — then resolves the
- * collected answers back into the tool's promise. The community TUI proved
- * this exact pipeline shape; here the dialog is an Ink bar instead of a
- * pi-tui inline modal.
+ * The terminal ask_user_question answerer: one `user-questions/request`
+ * waterfall listener that drives a FIFO queue — one question request on
+ * screen at a time, everything else waiting — then resolves the collected
+ * answers back into the waterfall. Mirrors the approval answerer's claim/
+ * defer split: only agents this TUI owns are answered, every other request
+ * falls through to the next answerer.
  *
- * Plan reviews (`exit_plan_mode`) arrive through the same service with an
+ * Plan reviews (`exit_plan_mode`) arrive through the same waterfall with an
  * `intent: { kind: 'plan-review' }` — the renderer highlights the approve
  * option; the answer encoding is identical either way.
  *
  * @module @deepseek-ai/dsh-code/questions
  */
 import type { Context } from '@deepseek-ai/cordis';
+import type { Agent } from '@deepseek-ai/dsh-agent';
 import { type AskUserQuestionAnswer, type AskUserQuestionRequest } from '@deepseek-ai/dsh-user-questions';
 /** One question request waiting on the human, with its settle channels. */
 export interface PendingQuestion {
@@ -42,9 +43,12 @@ export interface QuestionStore {
     cancel(pending: PendingQuestion): void;
 }
 /**
- * Mount the single `ctx.userQuestions` UI provider over a FIFO queue.
- * @param ctx - context carrying the `userQuestions` service (dsh-base).
- * @returns the store the renderer subscribes to; a context without the
- * service yields a permanently empty store.
+ * Mount the `user-questions/request` answerer over a FIFO queue.
+ * @param ctx - plugin context whose event bus carries the waterfall.
+ * @param owns - agents this terminal answers for; every other request is
+ * deferred back into the waterfall (`next()`), so sibling answerers stay
+ * usable. Agent-less asks are claimed: this TUI is the only human surface
+ * in the process.
+ * @returns the store the renderer subscribes to.
  */
-export declare function mountQuestionProvider(ctx: Context): QuestionStore;
+export declare function mountQuestionProvider(ctx: Context, owns: (agent: Agent) => boolean): QuestionStore;

package/lib/types/render/projection.d.ts

@@ -7,7 +7,8 @@
  * @module @deepseek-ai/dsh-tui/render/projection
  */
 import { type ImageBlock, type MessageId } from '@deepseek-ai/dsh-llm';
-import type { SessionEvent, TodoItem } from '@deepseek-ai/dsh-session';
+import type { SessionEvent } from '@deepseek-ai/dsh-session';
+import type { TodoItem } from '@deepseek-ai/dsh-tool-todo';
 import { type ToolDetail } from './tool-detail.ts';
 /** One user prompt line. */
 export interface UserEntry {
@@ -115,6 +116,8 @@ export interface RetryEntry {
     kind: 'retry';
     /** Correlation id shared with the matching `llm/retry-started`. */
     retryId: string;
+    /** Retry policy mode from the event: `always` has no attempt cap. */
+    mode: 'normal' | 'always';
     /** Attempt ordinal and its cap. */
     attempt: number;
     max: number;
@@ -122,7 +125,11 @@ export interface RetryEntry {
     code: string;
     /** Backoff wait before the next attempt, in ms. */
     delayMs: number;
-    /** `running` while the backoff waits, `done` once the attempt started. */
+    /**
+     * `running` while the backoff waits, `done` once the attempt started — or
+     * when the turn ended first (the turn-end sweep finalizes orphans so they
+     * never pin the settled boundary).
+     */
     state: 'running' | 'done';
 }
 /** Turn-tail deliverables: files mutated by the turn's diff-bearing tools. */

package/lib/types/render/status.d.ts

@@ -72,28 +72,35 @@ export declare const STATUS_ITEM_SEPARATOR = " \u00B7 ";
 /** The Codex-style mode cycle hint appended to the permission badge. */
 export declare const STATUS_CYCLE_HINT = " (shift+tab to cycle)";
 /**
- * Interior columns of the segmented context bar (content-type segments plus
- * the free tail whose right edge carries the usage readout). The layout
- * starts every bar at this width so the drop ladder can pre-measure the
- * group, then shrinks the bar inside a tighter budget before dropping it
- * (see CONTEXT_MIN_WIDTH) rather than asking the layout for more room.
+ * Interior columns of the context bar. The layout starts every bar at this
+ * width so the drop ladder can pre-measure the group, then degrades the
+ * readout and shrinks the bar inside a tighter budget before dropping the
+ * group (see CONTEXT_MIN_WIDTH) rather than asking the layout for more room.
  */
 export declare const CONTEXT_BAR_WIDTH = 24;
 /**
- * Render context occupancy as ONE stepless bar: a solid DeepSeek-blue fill
- * run, a dim dotted free track, and the usage readout riding the track's
- * right edge (`12.3K/1.0M 25%`, shrinking to the bare percent as the track
- * narrows). No per-content-type segmentation. Column split is deterministic:
- * the free share is `Math.round(free/window*width)` clamped to at least
- * CONTEXT_MIN_FREE columns and at most the full width; the fill takes every
- * remaining column, so a given occupancy always renders the identical bar.
- * The readout flips to amber once occupancy reaches the warning threshold.
- * @param usedTokens - reported used tokens (drives the readout and percent).
+ * Render context occupancy as ONE stepless proportional bar: a solid
+ * DeepSeek-blue fill run tracking the occupancy and a dim dotted free
+ * track for the rest. Nothing else lives inside the bar — the usage
+ * readout rides outside it (see contextGroupSpans) — so the geometry
+ * always reads as the true remaining share. A given occupancy always
+ * renders the identical bar.
+ * @param usedTokens - reported used tokens.
  * @param contextWindow - route capacity.
- * @param width - total bar interior columns.
+ * @param width - total bar columns.
  * @returns tone-split spans for the footer to paint.
  */
 export declare function contextBar(usedTokens: number, contextWindow: number, width: number): readonly StatusSpan[];
+/** How much usage detail the context group's readout carries. */
+export type ContextReadoutMode = 'full' | 'percent' | 'none';
+/**
+ * Compose the context group: the proportional bar plus the usage readout
+ * OUTSIDE the bar, so the dotted track keeps its proportional meaning no
+ * matter how wide the readout is. `full` reads `12.3K/1.0M 25%`; `percent`
+ * drops the absolute pair; `none` is the bare bar. The readout turns amber
+ * once occupancy reaches the warning threshold.
+ */
+export declare function contextGroupSpans(usedTokens: number, contextWindow: number, barWidth: number, readout: ContextReadoutMode): readonly StatusSpan[];
 /**
  * One customizable status item (the Codex /statusline picker contract).
  * 'left' items render as pipe-separated clusters after the identity dot;

package/lib/types/settings-file.d.ts

@@ -15,6 +15,14 @@
  *
  * @module @deepseek-ai/dsh-code/settings-file
  */
+/**
+ * Write one file atomically: create the parent directory, write to a
+ * uniquely named temp file, and rename it into place. A crash midway
+ * can never leave a half-written document behind. Unique temp names
+ * keep concurrent writers (two terminals, two chains in one process)
+ * from sharing one temp path.
+ */
+export declare function writeFileAtomically(path: string, text: string): Promise<void>;
 /** The serialized persistence surface; flush() is handed to the quit sequence. */
 export interface UserSettingsPersistence {
     /**

package/lib/types/skills.d.ts

@@ -43,5 +43,5 @@ interface SkillsWatch extends SkillsView {
  * @param ctx - context carrying the `skills` service (optional).
  * @returns the view the completion menu subscribes to.
  */
-export declare function watchSkills(ctx: Context): SkillsWatch;
+export declare function watchSkills(ctx: Context, fallbackCwd?: string): SkillsWatch;
 export {};

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-code",
   "description": "DeepSeek Harness CLI core bundle: interactive coding terminal, durable sessions, and model management for dsh --profile cli",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "type": "module",
   "bin": {
     "deepseek": "./bin/deepseek.mjs",
@@ -63,8 +63,9 @@
     "node": "^22.19 || >=24"
   },
   "dependencies": {
-    "@deepseek-ai/dsh-authorization": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-web-fetch-http": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-authorization": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-web-fetch-http": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-util-values": "0.1.2-rc.1",
     "@deepseek-ai/schemastery": "^3.18.1",
     "chalk": "^5.6.2",
     "commander": "^15.0.0",
@@ -74,32 +75,32 @@
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@deepseek-ai/dsh-attachment": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-default-model": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-presets": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-cmdline": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-code-runtime-worker-thread": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-commands": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-compaction": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-cordis-host-runner": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-file-reference-local": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-goal": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-invariants": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-jobs": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm-retry": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-permission-presets": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-plan-mode": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-persistence": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-reference": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-title": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-skill": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-user-approval": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-user-questions": "0.1.1-rc.2"
+    "@deepseek-ai/dsh-attachment": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-agent": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-agent-default-model": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-agent-presets": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-cmdline": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-code-runtime-worker-thread": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-commands": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-compaction": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-cordis-host-runner": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-credentials": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-file-reference-local": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-goal": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-invariants": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-jobs": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm-retry": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-permission-presets": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-plan-mode": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-persistence": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-reference": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-title": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-skill": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-user-approval": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-user-questions": "0.1.2-rc.1"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": { "optional": true },
@@ -132,23 +133,25 @@
     "@deepseek-ai/dsh-user-questions": { "optional": true }
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-agent-presets": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-attachment": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-compaction": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-commands": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-goal": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-jobs": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm-retry": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-permission-presets": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-plan-mode": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-persistence": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-reference": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-title": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-skill": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-user-approval": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-user-questions": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-agent-presets": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-attachment": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-compaction": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-commands": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-credentials": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-settings": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-tool-todo": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-goal": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-jobs": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm-retry": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-permission-presets": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-plan-mode": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-persistence": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-reference": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-title": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-skill": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-user-approval": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-user-questions": "0.1.2-rc.1",
     "@types/node": "^24.0.0",
     "@types/react": "~18.3.1",
     "tsdown": "^0.22.2",