dsh-remote-vs 0.9.3 → 0.11.0

package/lib/types/client/scm/commit-model.d.ts

@@ -0,0 +1,119 @@
+import type { GitCommitFile } from '../../protocol.ts';
+/** The pane's three views, in strip order. */
+export declare const HISTORY_TABS: readonly ["details", "content", "diff"];
+export type HistoryTab = (typeof HISTORY_TABS)[number];
+/** Guard for persisted values (`localStorage` may hold anything). */
+export declare function isHistoryTab(value: unknown): value is HistoryTab;
+/**
+ * Keyboard navigation for the pane's tab strip: arrows cycle (wrapping, so the
+ * last tab's → returns to the first), Home/End jump to the ends. `undefined`
+ * means "not a navigation key" and the caller leaves the event alone.
+ */
+export declare function stepHistoryTab(current: HistoryTab, key: string): HistoryTab | undefined;
+/** The state the 差异 tab's lazy read keeps for one commit. */
+export interface PatchLoadState {
+    key: string;
+    text?: string;
+    truncated?: boolean;
+    error?: string;
+}
+/**
+ * Whether the 差异 tab still has to read the patch for `key`.
+ *
+ * The subtle case is a SUPERSEDED read: switching the tab or the commit while
+ * a read is in flight used to leave the key marker behind with no data, and an
+ * equality-only guard (`state.key === key`) then treated that marker as
+ * "already loaded" forever — the reported "点击文件后差异一直说没有改动" bug.
+ * A marker without text/error therefore means RETRY, never "done".
+ */
+export declare function needsPatchLoad(state: PatchLoadState, key: string, tab: HistoryTab): boolean;
+/** One rendered patch line. */
+export interface PatchRow {
+    kind: 'context' | 'add' | 'del' | 'skip';
+    /** Old-revision line number; null on added lines and skip markers. */
+    oldLine: number | null;
+    /** New-revision line number; null on deleted lines and skip markers. */
+    newLine: number | null;
+    /** Line content without the leading ` ` / `+` / `-` marker. */
+    text: string;
+}
+/** One file block of a commit patch. */
+export interface CommitPatchFile {
+    /** Destination path (the source for deletions). */
+    path: string;
+    /** Source path when the block is a rename/copy (equals `path` otherwise). */
+    oldPath: string;
+    status: string;
+    binary: boolean;
+    added: number;
+    deleted: number;
+    rows: PatchRow[];
+    /** True when the global row cap kept this block's rows (partly) out. */
+    truncated: boolean;
+}
+export interface CommitPatchModel {
+    files: CommitPatchFile[];
+    added: number;
+    deleted: number;
+    /** True when the row cap cut the model (later blocks may have no rows). */
+    truncated: boolean;
+}
+/**
+ * Rendered-row ceiling for one commit patch.
+ *
+ * A commit that rewrites a generated file can carry hundreds of thousands of
+ * lines; painting them all freezes the sidebar on a click. The header counts
+ * stay exact (they come from the parsed hunks, not from the rendered rows), so
+ * the truncation notice only claims what is actually missing: the paint.
+ */
+export declare const PATCH_ROW_CAP = 6000;
+/** Build the render model for one commit's `git show --patch` text. */
+export declare function buildCommitPatch(text: string, rowCap?: number): CommitPatchModel;
+/** The file block a path selects in the diff view (rename-aware). */
+export declare function blockForPath(model: CommitPatchModel, path: string): string | undefined;
+/**
+ * Split one commit patch into its per-file raw texts, in the SAME order
+ * `buildCommitPatch` reports the files.
+ *
+ * Used by "copy this file's patch": the view still holds the original text, so
+ * the exact bytes git produced are what lands on the clipboard — no
+ * re-serialization from rows, which would drop headers a future git adds.
+ */
+export declare function splitCommitPatch(text: string): string[];
+/** One directory of the 内容 tree ('' = repository root). */
+export interface CommitFileGroup {
+    dir: string;
+    files: GitCommitFile[];
+}
+/**
+ * Group one commit's files by directory for the 内容 tree: a commit touching
+ * 40 files in 6 folders is a wall of paths as a flat list, and the folder row
+ * is also what lets a reader collapse the part they do not care about.
+ * Root-level files come first; every level keeps git's own order by path.
+ */
+export declare function groupCommitFiles(files: readonly GitCommitFile[]): CommitFileGroup[];
+/**
+ * The next path in `paths` from `current` (wrapping at both ends), the diff
+ * toolbar's prev/next-file math. `current` unknown → the first/last path, so a
+ * fresh pane steps into the list instead of doing nothing.
+ */
+export declare function stepPath(paths: readonly string[], current: string | undefined, direction: 1 | -1): string | undefined;
+/**
+ * Default folding for the 差异 tab: keep the first `rowBudget` rendered rows
+ * open, fold every file after that.
+ *
+ * A 40-file commit painting up to `PATCH_ROW_CAP` rows in a pane that may be
+ * 80px tall is a scroll wall where the reader sees none of the topology; the
+ * reference opens a curated subset for the same reason. Folding the TAIL (not
+ * per-file size) keeps the reading order intact: the files you scrolled to are
+ * still in the same place, just collapsed, and one click opens any of them.
+ */
+export declare function autoFoldCommitPatch(model: CommitPatchModel, rowBudget?: number): string[];
+/**
+ * Ref badge decoration for one `%D` entry (shared by the graph rows and the
+ * commit card). Split for the same reason the history panel split them: the
+ * CSS modifier and the display text are different jobs.
+ */
+export declare function refBadgeClass(ref: string): string;
+/** Display text of one `%D` entry (`HEAD -> main` → `main`, `tag: v1` → `v1`). */
+export declare function refBadgeLabel(ref: string): string;

package/lib/types/client/store.d.ts

@@ -240,7 +240,7 @@ export interface ExplorerValue {
     /** 停靠回主界面（底层的中心视图或侧栏表面）。 */
     dockFloatingEditor: () => void;
     openDiff: (rel: string, staged: boolean, untracked?: boolean) => void;
-    openCommitFile: (hash: string, rel: string) => void;
+    openCommitFile: (hash: string, rel: string, origPath?: string) => void;
     activateTab: (id: string) => void;
     closeTab: (id: string) => void;
     updateTab: (id: string, patch: Partial<EditorTab>) => void;
@@ -547,8 +547,14 @@ export declare function openRemoteFileInBinding(bindingId: string, remotePath: s
 export declare function isEditorTakeoverActive(): boolean;
 /** Open (or focus) a working-tree diff of one repository path. */
 export declare function openDiff(rel: string, staged: boolean, untracked?: boolean): void;
-/** Open (or focus) one file of one commit (`ref^` against `ref`). */
-export declare function openCommitFile(hash: string, rel: string): void;
+/**
+ * Open (or focus) one file of one commit (`ref^` against `ref`).
+ *
+ * `origPath` is the rename source from the commit's file row / patch header:
+ * the two-sided view must diff the OLD path against the NEW one, or git sees
+ * two unrelated paths and paints the rename as a whole-file addition.
+ */
+export declare function openCommitFile(hash: string, rel: string, origPath?: string): void;
 export declare function activateTab(id: string): void;
 export declare function closeTab(id: string): void;
 export declare function updateTab(id: string, next: Partial<EditorTab>): void;

package/lib/types/client/vsc/kit.d.ts

@@ -17,6 +17,14 @@ type IconProps = {
     className?: string;
 };
 export declare function IconChevronRight(props: IconProps): ReactNode;
+/** Mirror of {@link IconChevronRight}, for the commit pane's "previous file". */
+export declare function IconChevronLeft(props: IconProps): ReactNode;
+/** Expand: two arrows pushing the corners apart (the pane's full-height toggle). */
+export declare function IconExpand(props: IconProps): ReactNode;
+/** Restore: the same two arrows pulling the corners back in. */
+export declare function IconCollapse(props: IconProps): ReactNode;
+/** Wrap long lines: a line turning back on itself instead of running off. */
+export declare function IconWrap(props: IconProps): ReactNode;
 export declare function IconChevronDown(props: IconProps): ReactNode;
 /** Mirror of `IconChevronDown`, for the diff's "previous change" button. */
 export declare function IconChevronUp(props: IconProps): ReactNode;
@@ -29,6 +37,14 @@ export declare function IconPlus(props: IconProps): ReactNode;
 export declare function IconNewFolder(props: IconProps): ReactNode;
 export declare function IconTrash(props: IconProps): ReactNode;
 export declare function IconClose(props: IconProps): ReactNode;
+/** Stop: a filled square — the universal "kill this run" mark. */
+export declare function IconStop(props: IconProps): ReactNode;
+/** Copy glyph: two offset sheets, the front one the clipboard's payload. */
+export declare function IconCopy(props: IconProps): ReactNode;
+/** Author glyph for the commit pane's metadata rows. */
+export declare function IconUser(props: IconProps): ReactNode;
+/** Date glyph, the pair of {@link IconUser} in the commit pane's metadata. */
+export declare function IconClock(props: IconProps): ReactNode;
 export declare function IconSearch(props: IconProps): ReactNode;
 /**
  * "Search file NAMES": a page with a magnifier tucked into its lower-right

package/lib/types/git-format.d.ts

@@ -30,5 +30,10 @@ export declare function parseStatus(stdout: string): GitStatus;
 export declare function parseLog(stdout: string): GitCommit[];
 /** Parse for-each-ref branch lines. */
 export declare function parseBranches(stdout: string, current: string): GitBranch[];
+/** Split a raw `%B` message into its subject line and the body below it. */
+export declare function parseMessage(text: string): {
+    subject: string;
+    body: string;
+};
 /** Assemble commit detail from message + stat outputs. */
 export declare function parseShow(hash: string, message: string, stat: string): GitShow;

package/lib/types/git-ops.d.ts

@@ -13,6 +13,15 @@ export declare function assertBranchName(name: string): string;
 export declare function assertRemoteName(name: string): string;
 /** Assert a remote URL (anything printable without control characters). */
 export declare function assertRemoteUrl(url: string): string;
+/**
+ * Assert a push refspec (`HEAD:refs/for/master`, `+refs/heads/x:refs/heads/y`).
+ *
+ * The charset is the union git accepts on the two sides of the optional colon,
+ * plus the force marker and the `{}`/`~`/`^`/`*` revision syntax. `assertRef`
+ * cannot be reused: it deliberately rejects `:`, and the whole point of a
+ * custom refspec is the destination side (Gerrit's `refs/for/<branch>`).
+ */
+export declare function assertPushRefspec(refspec: string): string;
 /** Resolve the enclosing repository root (fails outside a work tree). */
 export declare function repoProbeCommand(workdir: string): string;
 /**
@@ -97,8 +106,35 @@ export interface DiffRequest {
 }
 /** Unified diff (or a diffstat) for one side of the working tree. */
 export declare function diffCommand(workdir: string, request?: DiffRequest): string;
-/** Files touched by one commit (`--name-status`, no patch body). */
+/**
+ * Files touched by one commit (`--name-status`, no patch body).
+ *
+ * `--first-parent` is what makes a MERGE commit show anything: plain
+ * `git show --name-status <merge>` prints no file rows at all (measured), so
+ * the pane said "这个提交没有改动文件" for every merge. With it, the diff is
+ * against the first parent — the merge's own contribution — and non-merge
+ * commits are byte-for-byte unchanged.
+ */
 export declare function commitFilesCommand(workdir: string, ref: string): string;
+/**
+ * Whole patch of one commit, with the commit header stripped (`--format=`), so
+ * the output starts at the first `diff --git` line and parses as a plain
+ * unified diff. Capped like every read-only builder: a commit that rewrites a
+ * generated file would otherwise ship megabytes for one sidebar pane.
+ * `--first-parent` makes merge commits readable (see `commitFilesCommand`).
+ */
+export declare function commitPatchCommand(workdir: string, ref: string): string;
+/**
+ * One changed file's patch inside a commit, with rename detection
+ * (`-M`) across BOTH sides of the path.
+ *
+ * The plain `git diff <hash>^ -- <newPath>` the editor drill-down used to run
+ * is wrong for a rename: the old path never matches, so a 100% rename renders
+ * as an all-added file. Passing both paths to `git show -M` lets git report
+ * the rename the commit actually recorded. Restricted to `paths` so a giant
+ * commit still ships one file.
+ */
+export declare function commitFileDiffCommand(workdir: string, ref: string, paths: readonly string[]): string;
 /** One file's content at a revision (`rev` may also be `:0` for the index). */
 export declare function fileAtRevCommand(workdir: string, rev: string, path: string): string;
 /** Local + remote-tracking branches with their upstream and tip. */
@@ -137,12 +173,31 @@ export declare function renameBranchCommand(workdir: string, from: string, to: s
 export declare function mergeCommand(workdir: string, ref: string): string;
 /** Publish a branch to a remote and set its upstream. */
 export declare function publishBranchCommand(workdir: string, branch: string, remote: string): string;
-/** Fetch every remote, pruning deleted tracking refs. */
+/**
+ * Fetch every remote, pruning deleted tracking refs.
+ *
+ * NOTE: the four NETWORK verbs deliberately do NOT use `statusOk()`. That
+ * wrapper buffers git's output in temp files and cats them back only after the
+ * command exits, which made the live-output panel sit on "waiting…" for the
+ * whole run and then dump everything at once (measured: a 59 s push produced
+ * 0.2 s of output after completion). No pipe is involved here, so the shell
+ * returns git's own exit status directly, and `--progress` forces the progress
+ * lines even though the remote side is not a TTY.
+ */
 export declare function fetchCommand(workdir: string): string;
 /** Pull the current branch (merge, no editor prompt). */
 export declare function pullCommand(workdir: string): string;
 /** Push the current branch. */
 export declare function pushCommand(workdir: string): string;
+/**
+ * Push to an explicit remote with an explicit refspec.
+ *
+ * This is the Gerrit shape (`git push origin HEAD:refs/for/master`): the plain
+ * `git push` above only ever talks to the branch's upstream, so a review
+ * workflow had to drop into a terminal. The remote is explicit because a
+ * refspec says nothing about which remote it belongs to.
+ */
+export declare function pushRefspecCommand(workdir: string, remote: string, refspec: string): string;
 /** Stash the working tree (optionally including untracked files). */
 export declare function stashSaveCommand(workdir: string, message: string, includeUntracked: boolean): string;
 /** Apply (and keep) a stash entry. */

package/lib/types/index.d.ts

@@ -39,6 +39,11 @@ export interface Config {
     /**
      * P2 transparent-routing kill-switch: off = pure local passthrough;
      * shadow = log remote decisions but execute locally; enforce = route.
+     *
+     * The DEFAULT is `enforce`: the plugin exists to execute remote workspaces
+     * remotely, and a fresh profile that silently kept executing locally was the
+     * most common "why is nothing remote" report. `off`/`shadow` stay available as
+     * explicit opt-outs for debugging and for hosts that must stay local.
      */
     routingMode?: RoutingMode;
     /** Per-command timeout for git work on a remote host (ms). */

package/lib/types/pool.d.ts

@@ -3,6 +3,15 @@ import type { RemoteStore } from './store.ts';
 import type { RemoteExecResult } from './protocol.ts';
 export interface ExecOptions {
     timeoutMs?: number;
+    /**
+     * Live sink for the command's output (the streaming network verbs). Called
+     * with already-decoded text so a multi-byte character split across ssh2
+     * chunks is never mangled; the accumulated `stdout`/`stderr` on the result
+     * keep the same bytes.
+     */
+    onData?: (stream: 'out' | 'err', text: string) => void;
+    /** Receives the cancel handle once the run is under way (see `cancel`). */
+    onCancel?: (cancel: () => void) => void;
     /**
      * Internal: send the line exactly as given — no session wrapper, and no group
      * kill when it times out. Only the two commands the pool sends on its own

package/lib/types/protocol.d.ts

@@ -9,6 +9,8 @@ export declare const REMOTE_API: {
     readonly test: "/api/dsh-remote/test";
     readonly keygen: "/api/dsh-remote/keygen";
     readonly exec: "/api/dsh-remote/exec";
+    /** Streaming exec (server-sent events) for the long network verbs. */
+    readonly execStream: "/api/dsh-remote/exec-stream";
     readonly files: "/api/dsh-remote/files";
     /** Streaming binary upload: raw request body, host and path in the query. */
     readonly upload: "/api/dsh-remote/upload";
@@ -212,6 +214,27 @@ export interface RemoteExecResult {
     /** Connection error message when the command never ran. */
     error?: string | undefined;
 }
+/**
+ * One server-sent event of the streaming exec route.
+ *
+ * Used by the long network verbs (fetch / pull / push / sync) so the live git
+ * output can be shown while the command is still running; the unary exec route
+ * keeps serving everything that only needs the result.
+ */
+export type ExecStreamEvent = {
+    t: 'out';
+    d: string;
+} | {
+    t: 'err';
+    d: string;
+} | {
+    t: 'exit';
+    success: boolean;
+    exitCode: number | null;
+    timedOut: boolean;
+    durationMs: number;
+    error?: string;
+};
 /** Client -> server terminal frames (JSON text). */
 export type TerminalClientFrame = {
     t: 'in';

package/lib/types/timeouts.d.ts

@@ -19,8 +19,14 @@
 import type { RemoteTimeouts } from './protocol.ts';
 /** Smallest accepted timeout: below this, local work would start failing. */
 export declare const MIN_TIMEOUT_MS = 1000;
-/** Largest accepted timeout — the exec route clamps to the same ceiling. */
-export declare const MAX_TIMEOUT_MS = 600000;
+/**
+ * Largest accepted timeout — the exec route clamps to the same ceiling.
+ *
+ * Raised from 10 to 30 minutes when the SCM push gained a live output panel:
+ * a Gerrit push on a large repo waits for server-side hooks and can outlast
+ * the old ceiling with nothing wrong on either side.
+ */
+export declare const MAX_TIMEOUT_MS = 1800000;
 /**
  * Default for one git command (status/log/branches/diff over exec).
  *
@@ -30,6 +36,15 @@ export declare const MAX_TIMEOUT_MS = 600000;
  * plausible cold index walk.
  */
 export declare const DEFAULT_GIT_TIMEOUT_MS = 300000;
+/**
+ * Floor for the NETWORK verbs (fetch / pull / push / sync).
+ *
+ * These wait on the far end's hooks and pack transfer, not on this machine, so
+ * their budget starts at 20 minutes and grows with `gitTimeoutMs × 2` up to
+ * `MAX_TIMEOUT_MS`. The old formula started at 5 minutes and capped at 10, which
+ * killed healthy Gerrit pushes.
+ */
+export declare const DEFAULT_NETWORK_TIMEOUT_MS = 1200000;
 /** Default for one SFTP file read (editor, diff sides, document preview). */
 export declare const DEFAULT_READ_TIMEOUT_MS = 120000;
 /** The pair every half starts from before any Host answer arrives. */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-remote-vs",
   "description": "VSCode-style remote development for DSH: SSH host manager (key/password), helper deploy pipeline with version check, remote file explorer + editor + terminal in dsh-better-sidebar.",
-  "version": "0.9.3",
+  "version": "0.11.0",
   "icon": "icon.svg",
   "keywords": [
     "dsh",
@@ -59,7 +59,7 @@
     "./locale/*.json": "./locale/*.json"
   },
   "engines": {
-    "dsh": ">=0.2.1-alpha.3 <0.3.0"
+    "dsh": ">=0.2.2-alpha.2 <0.3.0"
   },
   "dsh": {
     "bundle": {
@@ -122,7 +122,7 @@
     "@codemirror/view": "^6.43.14",
     "@deepseek-ai/dsh-fs-ssh": "0.2.1-rc.2",
     "@deepseek-ai/dsh-ssh": "0.2.1-rc.2",
-    "@deepseek-ai/schemastery": "3.18.5",
+    "@deepseek-ai/schemastery": "3.18.6-alpha.1",
     "@lezer/highlight": "1.2.3",
     "@xterm/addon-fit": "^0.11.0",
     "@xterm/xterm": "^6.0.0",
@@ -130,44 +130,44 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.5-alpha.2",
-    "@deepseek-ai/dsh-agent-preset": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-bash-local": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-file-reference": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-fs": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-shell": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-spill": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-subprocess": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-tools": "^0.2.1-rc.2",
+    "@deepseek-ai/cordis": "^4.0.6-alpha.1",
+    "@deepseek-ai/dsh-agent-preset": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-bash-local": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-file-reference": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-fs": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-shell": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-spill": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-subprocess": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "^0.2.2-alpha.2",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.4",
-    "@deepseek-ai/dsh-agent": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-api-remotes": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-bash-local": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-locale": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-sidebar-right": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-workspace": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-file-reference": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-fs": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-host-directory-picker": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-llm": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-sandbox": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-shell": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-spill": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-subprocess": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-working-directory": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-workspace": "0.2.1-rc.2",
+    "@deepseek-ai/cordis": "^4.0.6-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-api-remotes": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-bash-local": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-locale": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-sidebar-right": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-workspace": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-file-reference": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-fs": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-host-directory-picker": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-sandbox": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-shell": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-spill": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-subprocess": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-working-directory": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-workspace": "0.2.2-alpha.2",
     "@types/node": "^22.20.0",
     "@types/react": "~18.3.1",
     "@types/react-dom": "^18.3.5",

package/src/client/SettingsHosts.tsx

@@ -22,7 +22,8 @@ import { Notice, Row, hairline, optionStyle, selectStyle } from './ui.tsx'
 export function SettingsHostsSection(_props: SettingsSectionOwnerProps): ReactNode {
   const [t] = useState(() => makeT(detectLang()))
   const [hosts, setHosts] = useState<RemoteHostSummary[]>([])
-  const [mode, setMode] = useState<'off' | 'shadow' | 'enforce'>('off')
+  /** Pre-load placeholder; matches the plugin's default (nforce) until the host answers. */
+  const [mode, setMode] = useState<'off' | 'shadow' | 'enforce'>('enforce')
   const [version, setVersion] = useState('')
   const [saving, setSaving] = useState(false)
   const [error, setError] = useState<string | undefined>(undefined)

package/src/client/api.ts

@@ -3,6 +3,7 @@
  */
 import {
   REMOTE_API,
+  type ExecStreamEvent,
   type GitBranch,
   type GitCommit,
   type GitShow,
@@ -23,6 +24,7 @@ import {
   type RemoteWorkspaceBinding,
 } from '../protocol.ts'
 import { DEFAULT_TIMEOUTS, normalizeTimeouts, timeoutSeconds } from '../timeouts.ts'
+import { parseSseFrame, takeSseFrames } from './exec-output.ts'
 import {
   branchesCommand,
   gitFailed,
@@ -230,6 +232,65 @@ export const api = {
   // -- exec
   exec: (alias: string, command: string, timeoutMs?: number) =>
     post<RemoteExecResult>(REMOTE_API.exec, timeoutMs === undefined ? { alias, command } : { alias, command, timeoutMs }),
+  /**
+   * Streaming exec: the network verbs' live log.
+   *
+   * The route answers as SSE frames; `onData` receives decoded text while the
+   * command runs, and the promise settles on the `exit` frame. An aborted
+   * `signal` cancels the remote process group on the host side (the route acts
+   * on the closed response), so a cancel button can actually stop a push.
+   */
+  execStream: async (
+    alias: string,
+    command: string,
+    timeoutMs: number,
+    handlers: { onData?: (stream: 'out' | 'err', text: string) => void; signal?: AbortSignal },
+  ): Promise<RemoteExecResult> => {
+    const response = await fetch(REMOTE_API.execStream, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ alias, command, timeoutMs }),
+      ...(handlers.signal === undefined ? {} : { signal: handlers.signal }),
+    })
+    if (!response.ok || response.body === null) {
+      let message = `request failed: HTTP ${response.status}`
+      try {
+        const data = await response.json() as { error?: unknown }
+        if (typeof data.error === 'string') message = data.error
+      } catch {
+        // Keep the status-based message.
+      }
+      throw new RemoteApiError(response.status, message)
+    }
+    const reader = response.body.getReader()
+    const decoder = new TextDecoder()
+    let buffer = ''
+    let exit: Extract<ExecStreamEvent, { t: 'exit' }> | undefined
+    for (;;) {
+      const { done, value } = await reader.read()
+      if (done) break
+      buffer += decoder.decode(value, { stream: true })
+      const { frames, rest } = takeSseFrames(buffer)
+      buffer = rest
+      for (const frame of frames) {
+        const payload = parseSseFrame(frame)
+        if (payload === null || typeof payload !== 'object') continue
+        const event = payload as ExecStreamEvent
+        if (event.t === 'out' || event.t === 'err') handlers.onData?.(event.t, event.d)
+        else if (event.t === 'exit') exit = event
+      }
+    }
+    if (exit === undefined) throw new RemoteApiError(502, 'stream ended without an exit frame')
+    return {
+      success: exit.success,
+      exitCode: exit.exitCode,
+      timedOut: exit.timedOut,
+      stdout: '',
+      stderr: '',
+      durationMs: exit.durationMs,
+      ...(exit.error === undefined ? {} : { error: exit.error }),
+    }
+  },
   // -- workspaces
   getWorkspaces: () => call<{ workspaces: RemoteWorkspaceBinding[] } & RemoteRoutingStatus & RemotePluginMeta>(REMOTE_API.workspaces),
   createWorkspace: (payload: { name: string; alias: string; remotePath: string }) =>

package/src/client/composer.ts

@@ -100,7 +100,11 @@ interface InputSnapshot {
   draft: string
   draftRev?: number
   occurrences?: readonly OccurrenceLike[]
-  phase?: 'plain' | 'adjudicating' | 'claimed' | 'submitting'
+  /**
+   * Host submission plane. `sending` exists since DSH 0.2.2-alpha.2: an ordinary
+   * message the host has not accepted yet — the editor is read-only there too.
+   */
+  phase?: 'plain' | 'adjudicating' | 'claimed' | 'submitting' | 'sending'
   claim?: { readonly token: string }
 }
 
@@ -295,7 +299,7 @@ export function insertDraftReference(
     const { actx, input } = resolved
     const snapshot = input.state.getSnapshot()
     if (input.insertReference === undefined || snapshot.draftRev === undefined) return false
-    if (snapshot.phase === 'adjudicating' || snapshot.phase === 'submitting') return false
+    if (snapshot.phase === 'adjudicating' || snapshot.phase === 'submitting' || snapshot.phase === 'sending') return false
     before = snapshot.draftRev
     const at = appendOffset(snapshot)
     if (at === undefined) return false
@@ -346,6 +350,11 @@ export function appendToDraft(ctx: Context, sessionId: string, text: string): bo
     const { actx, input } = resolved
     const snapshot = input.state.getSnapshot()
     const draft = snapshot.draft
+    // The host makes the editor read-only on every submission plane: a slash
+    // command being checked, a claimed command running, and (since DSH
+    // 0.2.2-alpha.2) an ordinary message waiting for the host to accept it.
+    // Writing there would either be refused or land after the send snapshot.
+    if (snapshot.phase === 'adjudicating' || snapshot.phase === 'submitting' || snapshot.phase === 'sending') return false
     if ((snapshot.occurrences ?? []).length > 0 || snapshot.phase === 'claimed') {
       const at = appendOffset(snapshot)
       if (snapshot.draftRev === undefined || at === undefined) {