dsh-code 1.2.0 → 1.3.0

package/lib/startup.mjs

@@ -1,4 +1,4 @@
-import { r as THEME_NAMES } from "./theme-7u5Qo3dF.mjs";
+import { r as THEME_NAMES } from "./theme-B3orFUYz.mjs";
 import { Command } from "commander";
 import { parseCmdline } from "@deepseek-ai/dsh-cmdline";
 //#region src/startup.ts

package/lib/{theme-7u5Qo3dF.mjs → theme-B3orFUYz.mjs}

@@ -538,6 +538,10 @@ function hueOf([r, g, b]) {
 	if (max === g) return (60 * (b - r) / span + 120) % 360;
 	return (60 * (r - g) / span + 240) % 360;
 }
+/** Strict RGB equality for the wrap-collision repair. */
+function sameRgb(left, right) {
+	return left[0] === right[0] && left[1] === right[1] && left[2] === right[2];
+}
 /** A dark row tint for diff backgrounds: the hue at 22% strength over black. */
 function darkTint(hue) {
 	return [
@@ -603,6 +607,10 @@ function rollRainbow(seed) {
 	TONE_ORDER.forEach((tone, index) => {
 		toneColors[tone] = pool[(offset + index) % pool.length];
 	});
+	if (sameRgb(toneColors.live, toneColors.error)) {
+		const replacement = pool.find((hue) => !sameRgb(hue, toneColors.live) && !sameRgb(hue, toneColors.warn));
+		if (replacement !== void 0) toneColors.error = replacement;
+	}
 	return {
 		seed,
 		palette,

package/lib/types/app.d.ts

@@ -234,6 +234,20 @@ export interface AppProps {
     /** Apply the Ctrl+R terminal passthrough to the detected editor (/vscode-keys); resolves to a one-line summary. */
     applyEditorKeys: () => Promise<string>;
 }
+/**
+ * The streaming buffer rendered with a hard size cap: the live region must
+ * ALWAYS fit the terminal, or Ink's erase/rewrite of a dynamic tree taller
+ * than the screen freezes (cursor-up past the top, garbage, no scroll). The
+ * cap counts explicit newlines and terminal wrapping, slicing from the END so
+ * the freshest tokens stay visible while a long reply streams; the complete
+ * text lands in the flushed scrollback once the turn assembles it.
+ *
+ * Body wrap width for a streaming tail. `rowColumns` is the same width
+ * passed to `transcriptEntryLines` (terminal minus the last-column safety);
+ * the hanging prefix then shrinks the body so streamed text and settled
+ * markdown wrap on the same column.
+ */
+export declare function streamTailBodyColumns(rowColumns: number, prefix: string, continuationPrefix?: string): number;
 /** Rows in the exact next-turn inbox order, never transcript append order. */
 export declare function queuedInboxRows(entries: readonly TranscriptEntry[], ids: readonly string[]): readonly Extract<TranscriptEntry, {
     kind: 'pending';
@@ -247,6 +261,12 @@ interface CompletionCandidate {
     /** Candidate origin; skills land the same literal text but route through the prompt. */
     origin: 'command' | 'skill' | 'mention';
 }
+/**
+ * Wrap one completion-menu cursor step. An empty menu keeps the index at 0:
+ * `% 0` is NaN, and a NaN index silently disables the highlight, the accept
+ * key, and any later Enter that runs through the menu.
+ */
+export declare function stepCompletionIndex(index: number, delta: number, count: number): number;
 /**
  * Resolve completion candidates for the current input: TUI-local commands,
  * the live registry descriptors, and user-invocable skills, filtered by the

package/lib/types/attachments.d.ts

@@ -26,17 +26,26 @@ export declare const MAX_FILES_PER_MESSAGE = 8;
 export declare function detectImageMediaType(data: Uint8Array): ImageMediaType | undefined;
 /** Whether a path-like token is worth probing as an image attachment. */
 export declare function looksLikeImagePath(path: string): boolean;
+/** Strip one layer of ASCII or Unicode quotes and shell-escaped spaces. */
+export declare function unwrapDroppedPath(token: string): string;
+/** Absolute/relative drop with a dotted leaf — including unquoted spaces. */
+export declare function looksLikeFilesystemDrop(path: string): boolean;
 /**
- * Parse a paste/drop into its image and file paths: image-suffixed tokens
- * stay images, other path-shaped tokens ride as file attachments (0.1.5
- * file blocks), and anything that is neither leaves both empty — the caller
- * then treats the paste as plain text.
+ * A composer draft that is a filesystem path, not a slash command.
+ * `/usage` stays a command; `/Users/foo.png` and `C:\temp\a.png` are drops.
+ */
+export declare function looksLikePathDraft(value: string): boolean;
+/**
+ * Parse a paste or file-drop into image and file paths: image-suffixed
+ * tokens stay images, other path-shaped tokens ride as file attachments
+ * (0.1.5 file blocks), and anything that is neither leaves both empty —
+ * the caller then treats the paste as plain text.
  *
  * File tokens are held to an absolute-path-with-shape bar (drive/backslash
- * or a dot-suffixed leaf after a separator): a dropped terminal path always
+ * or a dotted leaf after a separator): a dropped terminal path always
  * carries one of those, while prose, slash commands, and option flags never
- * do. A POSIX absolute path without any dot-suffixed leaf falls through as
- * text — the @ mention route still attaches such files deliberately.
+ * do. A POSIX absolute path without a dotted leaf falls through as text —
+ * the @ mention route still attaches such files deliberately.
  */
 export declare function parsePastedAttachmentPaths(input: string): {
     readonly images: readonly string[];

package/lib/types/history.d.ts

@@ -78,6 +78,16 @@ export interface RecallState {
 }
 /** Fresh navigation state over one recall space. */
 export declare function beginRecall(entries: readonly string[], draft: string): RecallState;
+/**
+ * Join a panel-recalled entry onto the draft already in the composer: the
+ * draft is extended, never replaced, so picking a history row cannot discard
+ * work in progress. An empty draft takes the entry as-is; otherwise the entry
+ * starts on its own line unless the draft already ends one.
+ * @param draft - the composer text before the recall.
+ * @param entry - the sanitized text of the accepted row.
+ * @returns the text to place in the composer.
+ */
+export declare function appendRecall(draft: string, entry: string): string;
 /** The outcome of one recall step. */
 export interface RecallStep {
     state: RecallState;

package/lib/types/index.d.ts

@@ -13,7 +13,7 @@ import z from '@deepseek-ai/schemastery';
 import type { Agent, AgentStatus, Inbox } from '@deepseek-ai/dsh-agent';
 import { type ContentBlock } from '@deepseek-ai/dsh-llm';
 import { SessionId, type SessionEvent, type SessionHeader, type UserMessage } from '@deepseek-ai/dsh-session';
-import type { SessionPersistence } from '@deepseek-ai/dsh-session-persistence';
+import { type SessionPersistence } from '@deepseek-ai/dsh-session-persistence';
 import { type QueueMutation } from './app.ts';
 import type { TuiStartup } from './startup.ts';
 import type { SearchRow } from './kernel-panels.ts';

package/lib/types/kernel-panels.d.ts

@@ -66,7 +66,7 @@ export declare function JobsPanel({ load, close }: {
     load: () => readonly JobRow[];
     close: () => void;
 }): ReactElement;
-export declare function ResumePanel({ currentCwd, load, readTranscript, select, requestDelete, deleteConfirmId, reloadToken, deleteMode, close }: {
+export declare function ResumePanel({ currentCwd, load, readTranscript, select, requestDelete, deleteConfirmId, reloadToken, deleteMode, presetId, close }: {
     currentCwd: string;
     load: (options: SessionDirectoryOptions, signal?: AbortSignal) => Promise<readonly SessionRow[]>;
     readTranscript: (id: string, signal?: AbortSignal) => Promise<string>;
@@ -79,6 +79,8 @@ export declare function ResumePanel({ currentCwd, load, readTranscript, select,
     reloadToken?: number;
     /** Opened via /delete: hint-first delete mode. */
     deleteMode?: boolean;
+    /** `/delete <id>` argument to resolve after the listing loads. */
+    presetId?: string;
     close: () => void;
 }): ReactElement;
 /**

package/lib/types/locales/en.d.ts

@@ -51,7 +51,37 @@ export declare const en: {
     readonly 'search.compact.searching': "searching…";
     readonly 'search.compact.error': "error: {message}";
     readonly 'search.footer': "↑↓ move · enter search/resume · esc close";
+    readonly 'header.hint': "/help · Esc interrupt · Ctrl+C quit";
+    readonly 'header.hintResumed': "resumed · /help · Esc interrupt";
     readonly 'statusline.title': "/statusline · items apply to the live status line below";
+    readonly 'statusline.item.model': "model";
+    readonly 'statusline.item.model.desc': "provider/model serving this session";
+    readonly 'statusline.item.cwd': "cwd";
+    readonly 'statusline.item.cwd.desc': "working-directory basename";
+    readonly 'statusline.item.mode': "mode";
+    readonly 'statusline.item.mode.desc': "agent preset composing the session";
+    readonly 'statusline.item.branch': "branch";
+    readonly 'statusline.item.branch.desc': "git branch inside a repository";
+    readonly 'statusline.item.context': "context";
+    readonly 'statusline.item.context.desc': "context-window occupancy meter";
+    readonly 'statusline.item.permission': "permission";
+    readonly 'statusline.item.permission.desc': "permission preset badge with cycle hint";
+    readonly 'statusline.item.plan': "plan";
+    readonly 'statusline.item.plan.desc': "plan-mode state mark";
+    readonly 'statusline.item.turns': "turns";
+    readonly 'statusline.item.turns.desc': "turn and step counters";
+    readonly 'statusline.item.durations': "durations";
+    readonly 'statusline.item.durations.desc': "llm/ttft/decode/tool wall time";
+    readonly 'statusline.item.cache': "cache";
+    readonly 'statusline.item.cache.desc': "cache-hit share of billed input";
+    readonly 'statusline.item.tokens': "tokens";
+    readonly 'statusline.item.tokens.desc': "cumulative input/output tokens";
+    readonly 'statusline.item.title': "title";
+    readonly 'statusline.item.title.desc': "session title or short id";
+    readonly 'statusline.item.goal': "goal";
+    readonly 'statusline.item.goal.desc': "live goal phase and round progress";
+    readonly 'statusline.item.sandbox': "sandbox";
+    readonly 'statusline.item.sandbox.desc': "divergent sandbox-mode override";
     readonly 'schedule.title': "/schedule · {count} active reminder";
     readonly 'schedule.titlePlural': "/schedule · {count} active reminders";
     readonly 'schedule.empty': "no active reminders — the model creates them with schedule_create";
@@ -197,10 +227,16 @@ export declare const en: {
     readonly 'status.label.out': "out";
     readonly 'status.label.mode': "/mode";
     readonly 'status.label.context': "context";
+    readonly 'status.label.sandbox': "sandbox";
+    readonly 'status.plan.on': "plan on";
+    readonly 'status.plan.mark': "⧉ plan";
+    readonly 'status.goal.round': "◎ round {current}/{max}";
+    readonly 'status.goal.phase': "◎ {phase}";
     readonly 'frozen.keysGoTo': "keys go to {owner} · esc {action}";
     readonly 'frozen.action.rejects': "rejects";
     readonly 'frozen.action.cancels': "cancels";
     readonly 'frozen.action.closes': "closes";
+    readonly 'frozen.action.waits': "waits";
     readonly 'time.justNow': "now";
     readonly 'time.minutesAgo': "{n}m ago";
     readonly 'time.hoursAgo': "{n}h ago";
@@ -212,6 +248,7 @@ export declare const en: {
     readonly 'notice.themeSaveFailed': "theme save failed: {message}";
     readonly 'notice.languageSaveFailed': "language save failed: {message}";
     readonly 'notice.alreadyActive': "that session is already active";
+    readonly 'notice.permissionPresetsUnmounted': "permission presets are not mounted in this composition";
     readonly 'notice.queueCancelled': "queued message cancelled";
     readonly 'notice.queueActionFailed': "queue action failed: {message}";
     readonly 'notice.queueUnavailable': "queued message is no longer pending";
@@ -226,6 +263,8 @@ export declare const en: {
     readonly 'notice.usage.animation': "usage: /animation [on|off]";
     readonly 'notice.usage.language': "usage: /language [en|zh]";
     readonly 'notice.usage.rainbow': "usage: /rainbow [seed]";
+    readonly 'notice.usage.bareCommand': "usage: /{name}";
+    readonly 'notice.switchInProgress': "switching sessions — send again once the new session is up, or /resume cancel";
     readonly 'notice.imageCancelled': "image submission cancelled";
     readonly 'notice.themeConfigUnreadable': "theme config unreadable, using dark: {message}";
     readonly 'notice.languageConfigUnreadable': "language config unreadable, using english: {message}";
@@ -256,6 +295,13 @@ export declare const en: {
     readonly 'notice.resumeFailed': "resume failed: {message}";
     readonly 'notice.forkFailed': "fork failed: {message}";
     readonly 'notice.sessionSwitchFailed': "session switch failed: {message}";
+    readonly 'notice.sessionCreated': "created {id} · mode {mode}";
+    readonly 'notice.sessionResumed': "resumed {id} · mode {mode}";
+    readonly 'notice.sessionSwitchedDirty': "switched to {id}, but {detail}";
+    readonly 'notice.flushFailed': "previous session flush failed: {message}";
+    readonly 'notice.agentReleaseFailed': "previous agent release failed: {message}";
+    readonly 'notice.copyEmpty': "nothing to copy yet";
+    readonly 'notice.copied': "copied latest response";
     readonly 'notice.switchQueued': "will switch to {label} when the current turn finishes · /resume cancel to abort";
     readonly 'notice.reviewStarted': "review started under read-only permissions";
     readonly 'notice.reviewFailed': "review failed: {message}";
@@ -307,7 +353,8 @@ export declare const en: {
     readonly 'panel.footer.chooseSelect': "↑↓ choose · enter select · r refresh · esc close";
     readonly 'panel.footer.inspectDetails': "↑↓ inspect · enter details · r refresh · esc close";
     readonly 'panel.footer.inspectRefresh': "↑↓ inspect · r refresh · esc close";
-    readonly 'panel.footer.resume': "tab/←→ filters · ↑↓/pg navigate · ctrl+f search · e details · t transcript · d delete · enter resume";
+    readonly 'panel.footer.resume': "tab/←→ filters · ↑↓/pg navigate · ctrl+f search · e details · t transcript · enter resume";
+    readonly 'panel.footer.delete': "tab/←→ filters · ↑↓/pg navigate · ctrl+f search · e details · t transcript · enter delete · esc close";
     readonly 'panel.footer.transcript': "lines {from}-{to}/{total} · ↑↓/pg/g/G · t/esc close";
     readonly 'panel.footer.history': "↑↓ move · g/G ends · enter fill · esc close";
     readonly 'panel.footer.review': "↑↓ move · enter select · esc back · q close";
@@ -319,6 +366,7 @@ export declare const en: {
     readonly 'panel.jobs.title': "/jobs · background tasks · {count}";
     readonly 'panel.resume.deleteTitle': "permanently delete {target}? this cannot be undone · subagent threads go too";
     readonly 'panel.resume.title': "/resume{mode}{search} · {toolbar}";
+    readonly 'panel.delete.title': "/delete{search} · {toolbar}";
     readonly 'panel.noActiveReminders': "no active reminders — the model schedules via schedule_create";
     readonly 'panel.notMounted': "not mounted";
     readonly 'panel.broken': "broken: {message}";

package/lib/types/render/status.d.ts

@@ -119,6 +119,8 @@ export interface StatusItemInfo {
 }
 /** The full item catalog in canonical order (the /statusline default). */
 export declare const STATUS_ITEMS: readonly StatusItemInfo[];
+/** Picker rows with labels/descriptions in the active interface language. */
+export declare function localizedStatusItems(): readonly StatusItemInfo[];
 /**
  * Default order: the whole catalog (matches the pre-customization bar).
  * The busy dot is not an item — it always leads the identity cluster.
@@ -178,7 +180,8 @@ export declare function permissionTone(permission: string): StatusTone;
 /**
  * Compose the two-row footer layout under a column budget. Row 1 keeps model,
  * cwd, mode, branch, context, then the right-pinned permission badge and cycle
- * hint. It drops hint, context, and permission before ellipsizing identity.
+ * hint. It shrinks the context bar, drops the hint, and peels trailing
+ * identity facts before removing the context group or the permission badge.
  * Row 2 fits all secondary figures and state within its own budget.
  * @param facts - identity facts resolved by the runner.
  * @param stats - session figures folded from the durable log.

package/lib/types/session-directory.d.ts

@@ -1,10 +1,26 @@
 /** Lightweight session-directory projection for the /resume picker. */
-import { type SessionEvent, type SessionHeader } from '@deepseek-ai/dsh-session';
+import { SessionId, type SessionEvent, type SessionHeader } from '@deepseek-ai/dsh-session';
 export interface SessionRecord {
     readonly header: SessionHeader;
     readonly live: boolean;
     readonly persisted: boolean;
 }
+/** Minimal write handle retained while a planned deletion touches artifacts. */
+export interface SessionDeletionLease {
+    close(): Promise<void>;
+}
+/** Public persistence operation used to acquire the backend's write lease. */
+export interface SessionDeletionPersistence {
+    open(id: SessionId, access: 'write'): Promise<SessionDeletionLease>;
+}
+/**
+ * Acquire every subtree member's cross-process write lease before deleting
+ * any artifact. A partial acquisition is rolled back, so callers either hold
+ * the whole deletion boundary or touch nothing.
+ */
+export declare function acquireSessionDeletionLeases(persistence: SessionDeletionPersistence, ids: readonly string[]): Promise<readonly SessionDeletionLease[]>;
+/** Release deletion leases in reverse acquisition order. */
+export declare function releaseSessionDeletionLeases(leases: readonly SessionDeletionLease[]): Promise<void>;
 export interface TitleObservationResult {
     readonly sessionId: string;
     readonly status: 'fulfilled' | 'rejected';
@@ -78,6 +94,12 @@ export declare function isSubagentSession(header: SessionHeader): boolean;
  * @throws when nothing matches or the prefix is ambiguous.
  */
 export declare function matchSessionId(headers: readonly SessionHeader[], wanted: string): SessionHeader;
+/**
+ * Unique picker-row match by exact id, unique prefix, or unique suffix.
+ * The resume list shows `id.slice(-12)`, so `/delete` arguments are often
+ * that tail rather than a leading prefix.
+ */
+export declare function matchSessionRow(rows: readonly SessionRow[], wanted: string): SessionRow;
 /** The newest persisted ROOT session pinned to this cwd, or undefined. */
 export declare function newestRootForCwd(headers: readonly SessionHeader[], cwd: string): SessionHeader | undefined;
 /**
@@ -90,6 +112,8 @@ export declare function newestRootForCwd(headers: readonly SessionHeader[], cwd:
  * @param updated - per-session last-activity timestamps, when resolved.
  */
 export declare function projectSessionRows(records: readonly SessionRecord[], options: SessionDirectoryOptions, updated?: ReadonlyMap<string, number>): SessionRow[];
+/** True when the picker query hits id, path, preset, or the displayed title. */
+export declare function sessionRowMatchesQuery(row: Pick<SessionRow, 'id' | 'cwd' | 'workspace' | 'preset' | 'title'>, query: string): boolean;
 /** Merge page-local title observations without disturbing directory order. */
 export declare function mergeSessionTitles(rows: readonly SessionRow[], observations: readonly TitleObservationResult[]): SessionRow[];
 /**

package/lib/types/session-switch.d.ts

@@ -8,10 +8,18 @@ export declare class SessionSwitchQueue<T> {
     private readonly failed;
     private pending;
     private pumping;
+    private running;
     constructor(execute: (value: T) => Promise<void>, failed: (error: unknown) => void);
     /** Queue a request; a later request replaces any request still waiting. */
     request(activity: IdleActivity, value: T): 'queued' | 'started';
     /** Cancel only work that has not begun activation. */
     cancel(): boolean;
+    /**
+     * Whether a queued change is being activated right now. Between the idle
+     * wait and the handoff the old session is still installed, so a submission
+     * made in that window would start a turn the handoff then discards; callers
+     * use this to refuse one instead of losing it.
+     */
+    get activating(): boolean;
     private pump;
 }

package/lib/types/update-panel.d.ts

@@ -9,11 +9,31 @@
  * here.
  */
 import { type ReactElement } from 'react';
-import type { LauncherUpdateStatus } from './update.ts';
+import type { LauncherUpdatePlan, LauncherUpdateStatus } from './update.ts';
 /** Retained apply-progress lines (ring tail; npm output is ephemeral). */
 export declare const UPDATE_OUTPUT_CAP = 800;
 /** Keep the newest UPDATE_OUTPUT_CAP lines of streamed update output. */
 export declare function clipUpdateLines(lines: readonly string[]): readonly string[];
+/** One in-flight `update --apply`. Closing the panel must not start a second. */
+interface UpdateApplyJob {
+    readonly promise: Promise<number>;
+    readonly lines: string[];
+    readonly lineListeners: Set<(line: string) => void>;
+}
+/** True while an apply child is alive, even if the /update panel is closed. */
+export declare function isUpdateApplyRunning(): boolean;
+/** Subscribe to apply-running changes (frozen-hint "esc waits"). */
+export declare function subscribeUpdateApplyRunning(listener: (running: boolean) => void): () => void;
+/** The live apply job, if any: lines already streamed plus the shared promise. */
+export declare function currentUpdateApply(): UpdateApplyJob | undefined;
+/**
+ * Run `apply` once. A second call while the child is alive reuses the same
+ * promise and replays buffered lines — closing /update and opening it again
+ * must not spawn a second `npm install`.
+ */
+export declare function runUpdateApply(apply: (onLine: (line: string) => void, plan: LauncherUpdatePlan) => Promise<number>, plan: LauncherUpdatePlan, onLine?: (line: string) => void): Promise<number>;
+/** Drop a leftover job between tests. */
+export declare function resetUpdateApply(): void;
 /** One display row of the update surface. */
 export interface UpdateRow {
     readonly key: string;
@@ -47,3 +67,4 @@ export declare function UpdatePanel({ probe, apply, close, notify }: {
     /** One bounded cross-surface notice (phase completions). */
     notify: (text: string, tone?: 'info' | 'warning' | 'error') => void;
 }): ReactElement;
+export {};

package/lib/types/version.d.ts

@@ -1,6 +1,8 @@
 /** Installed dsh-code version exposed by the terminal header. */
 /** Version of the installed dsh-code package. */
 export declare const DSH_CODE_VERSION: string;
+/** Header brand line: hide a missing-manifest fallback so we never paint v0.0.0. */
+export declare function headerBrandTitle(version?: string): string;
 /**
  * Resolve the running dsh CLI host's version from its entry file
  * (`process.argv[1]`, e.g. `.../@deepseek-ai/dsh/lib/bin.js` or a PATH

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "dsh-code",
   "description": "DeepSeek Harness CLI core bundle: interactive coding terminal, durable sessions, and model management for dsh --profile cli",
-  "version": "1.2.0",
+  "version": "1.3.0",
+  "packageManager": "pnpm@12.4.1",
   "type": "module",
   "bin": {
     "deepseek": "./bin/deepseek.mjs",
@@ -57,16 +58,17 @@
   },
   "scripts": {
     "build": "tsdown && tsc -p tsconfig.json",
+    "audit:prod": "pnpm audit --prod --audit-level moderate",
     "test": "vitest run",
     "test:coverage": "vitest run --coverage",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "typecheck:tests": "tsc -p tsconfig.test.json --noEmit",
-    "lint": "eslint .",
-    "lint:fix": "eslint . --fix",
+    "lint": "eslint . --max-warnings 0",
+    "lint:fix": "eslint . --fix --max-warnings 0",
     "verify": "pnpm lint && pnpm typecheck && pnpm typecheck:tests && pnpm test",
     "gen:whale": "tsx scripts/gen-whale-glyph.ts",
     "prepare": "pnpm build",
-    "prepublishOnly": "pnpm typecheck && pnpm typecheck:tests && pnpm test && pnpm build"
+    "prepublishOnly": "pnpm audit:prod && pnpm exec tsx scripts/check-release.ts --package-version && pnpm verify && pnpm build"
   },
   "engines": {
     "node": "^22.19 || >=24"
@@ -314,7 +316,7 @@
     "@vitest/coverage-v8": "^3.2.7",
     "eslint": "^10.10.0",
     "eslint-plugin-react-hooks": "^7.1.1",
-    "js-yaml": "^4.3.1",
+    "js-yaml": "^4.3.2",
     "tsdown": "^0.22.2",
     "tsx": "^4.22.4",
     "typescript": "^5.9.0",