dsh-ssh-tui 0.7.1 → 0.7.2

package/lib/types/tui.d.ts

@@ -20,6 +20,7 @@ import type { Context } from '@deepseek-ai/cordis';
 import { type LlmCallConfig } from '@deepseek-ai/dsh-llm';
 import { SessionId, type SessionEvent } from '@deepseek-ai/dsh-session';
 import type { SubagentRunEndInfo, SubagentRunInfo } from '@deepseek-ai/dsh-subagent';
+import { type SessionRoute } from './session-route.js';
 import { type SubagentSelectionRef } from './subagent-model.js';
 import { type AskUserQuestionAnswer, type AskUserQuestionRequest } from '@deepseek-ai/dsh-user-questions';
 import type { ApprovalOutcome, ApprovalRequest } from '@deepseek-ai/dsh-user-approval';
@@ -28,10 +29,10 @@ import { paintedLinkHits } from './term-text.js';
 export type { CollapsibleBlock, DisplayKind, DisconnectPolicyName, PlanTodoItem, Row, SubagentLogEntry, ToolDiffHunk, } from './transcript-types.js';
 export { clipAnsiToWidth, cursorVisualPosition, displayWidth, foldInputView, hrefAtColumn, osc52Clipboard, osc8Enabled, paintedLinkHits, fmtElapsedCompact, padAnsiToWidth, padToWidth, renderMarkdownLines, repeatToWidth, shimmerText, truncateToWidth, visibleWidth, waitCardCopy, waitSummaryFromReasoning, wrapWaitDetails, } from './term-text.js';
 export { captureHangupSignals, composePaintOutput, detectSshSession, formatLinkQualityChip, ignoreFurtherHangupSignals, isEscapePrefix, findCursorPositionReply, isHangupErrno, linkQualityOf, linkSignalPips, paintIntervalForRtt, paintLinkLabel, parseCursorPositionReply, pickerWindowStart, probeTerminalRttMs, releaseHangupSignals, resolvePaintIntervalMs, waitUntilIdleOrTimeout, writeBootSplash, type LinkQuality, type PaintLinkKind, } from './paint.js';
-export { CONTEXT_IDLE_COMPACT_RATIO, CONTEXT_PRESSURE_DANGER_RATIO, CONTEXT_PRESSURE_WARN_RATIO, CONTEXT_RING_EMPTY, CONTEXT_RING_SEGMENTS, contextPressureAlertText, contextPressureRingColor, contextPressureUsedTokens, contextPressureView, describeProviderRoute, dropFooterQuotaPlanName, fitFooterStatsLine, fitFooterStatusLine, footerActivity, footerIdentityParts, footerStatsGroups, formatContextPressureChip, formatContextPressureRing, formatContextPressureStatusLine, formatDuration, formatFooterQuota, formatQuotaBar, formatQuotaUnknown, formatStatusReport, providerHasQuotaSurface, quotaWindowTag, shortModelName, shortQuotaPlanName, formatTokens, formatTokensPerSecond, parseContextPressure, promptPressureTokens, providerShortCode, providerUsesLocalOAuth, shouldIdleAutoCompact, subagentRouteLabel, type ContextPressureSample, type ContextPressureView, type FooterActivityKind, type FooterStatsInput, type FooterStatusInput, type StatusReportInput, } from './footer.js';
+export { CONTEXT_IDLE_COMPACT_RATIO, CONTEXT_PRESSURE_DANGER_RATIO, CONTEXT_PRESSURE_WARN_RATIO, CONTEXT_RING_EMPTY, CONTEXT_RING_SEGMENTS, contextPressureAlertText, contextPressureRingColor, contextPressureUsedTokens, contextPressureView, describeProviderRoute, dropFooterQuotaPlanName, fitFooterStatsLine, fitFooterStatusLine, footerActivity, footerIdentityParts, footerStatsGroups, footerSubagentForeign, paintFooterSubagentChip, formatContextPressureChip, formatContextPressureRing, formatContextPressureStatusLine, formatDuration, formatFooterQuota, formatQuotaBar, formatQuotaUnknown, formatStatusReport, providerHasQuotaSurface, quotaWindowTag, shortModelName, shortQuotaPlanName, formatTokens, formatTokensPerSecond, parseContextPressure, promptPressureTokens, providerShortCode, providerUsesLocalOAuth, shouldIdleAutoCompact, subagentRouteLabel, type ContextPressureSample, type ContextPressureView, type FooterActivityKind, type FooterStatsInput, type FooterStatusInput, type StatusReportInput, } from './footer.js';
 export { commandCodePeriodStart, commandCodeSourceFor, crossedQuotaThresholds, formatAccountBalance, formatFooterBalance, formatOpenCodeGoUsage, formatQuotaSnapshot, formatQuotaStatusLine, joinUrl, openCodeSourceFor, parseCommandCodeQuota, parseDeepSeekBalance, parseOpenAiCompatibleBalance, parseOpenCodeGoQuota, parseSuperGrokBilling, preferredQuotaWindow, quotaAlertText, quotaRefreshEverySteps, quotaRefreshEveryTurns, remainingPercentFromUsed, tightestQuotaWindow, type AccountBalanceLine, type AccountBalanceSnapshot, type CommandCodeSource, type OpenCodeFlavor, type OpenCodeSource, type QuotaPeriod, type QuotaSnapshot, type QuotaWindow, } from './quota.js';
 export { commandAcceptsAttachments, forEachSessionEvent, isAssistantStreamEvent, isTokenDeltaChunk, listPersistenceHeaders, inspectPersistenceSession, sessionEventType, sessionEvents, settingsNamespace, streamChunkOf, streamFirstTokenTime, streamFrameAttemptId, streamFrameOwner, } from './dsh-compat.js';
-export { applyTurnEndToPlan, askSummary, cardCategoryOf, compactionHeaderText, formatCompactCommandError, isPromptInjectionMessage, matchTranscriptRows, parseFindQuery, parsePlanTodos, planCloseNudgeText, planDockNote, planIsLive, planTitleFromMarkdown, planTurnLeftOpen, promptInjectionSources, promptInjectionTitle, subagentHeaderText, todoProgressLabel, todoSummary, type CardCategory, } from './plan.js';
+export { applyTurnEndToPlan, askSummary, cardCategoryOf, compactionHeaderText, formatCompactCommandError, isPromptInjectionMessage, matchTranscriptRows, parseFindQuery, parsePlanTodos, planCloseNudgeText, planDockNote, planIsLive, planTitleFromMarkdown, planTurnLeftOpen, promptInjectionSources, promptInjectionTitle, buildSubagentHeader, clipSubagentActivity, describeSubagentFailure, subagentChipSummary, subagentDisplayName, subagentInspectLines, subagentRowFromSpawnTool, foldSubagentUserLog, todoProgressLabel, todoSummary, type CardCategory, } from './plan.js';
 export { buildToolHeader, canMergeToolCall, compactEditPath, compactToolBursts, compactToolGroups, countDiffAddDel, countDiffLines, countOutputLines, diffMetaDiffs, diffStatToken, friendlyJsonLines, parseExitStatus, presentToolCall, READ_TOOL_NAMES, renderToolDiff, toolBodyFitsWorkspace, toolBodyLines, toolStateColor, toolStateLabel, wrappedToolBodyLineCount, } from './tool-present.js';
 /** Presentation configuration for the terminal channel. */
 export interface TuiConfig {
@@ -51,6 +52,24 @@ export interface TuiConfig {
     resume?: boolean;
     /** One-line notice after entering a resumed session's working directory. */
     cwdNotice?: string;
+    /**
+     * The route this resumed session ran on, when it has a record. Applied before
+     * the TUI mounts; this is only for saying so on screen.
+     */
+    restoredRoute?: SessionRoute;
+    /**
+     * What the launcher decided about the resumed route: a supplier that is gone,
+     * or one that cannot be routed to at all. Pushed on screen at boot.
+     */
+    launchNotices?: readonly {
+        kind: 'system' | 'error';
+        text: string;
+    }[];
+    /**
+     * Report a settled route to the launcher, which owns the per-session record.
+     * Absent in tests and in line mode: nothing here touches the disk.
+     */
+    onRouteSettled?: (route: Omit<SessionRoute, 'updatedAt'>) => void;
     /** Provider route selected at launch (defaults to deepseek-official). */
     provider?: string;
     /** Model selected at launch (defaults to the saved/fallback model). */
@@ -153,6 +172,19 @@ export declare class SshTui {
     private catalogLoad;
     /** Memoized id→window index over {@link catalogPresets}. */
     private catalogWindows;
+    /** Wizard drafts whose models step is already asking the gateway, so a
+     *  second Enter cannot start a duplicate listing. */
+    private readonly finishingModels;
+    /** `<base>\0<model>` → the family row last seen serving that model. */
+    /**
+     * `<base>\0<model>` → the family row last seen serving that model.
+     *
+     * Bounded: a gateway can publish hundreds of models and their rows are
+     * re-learned on every listing, so the oldest entries are dropped once the map
+     * passes FAMILY_OWNER_CACHE_MAX rather than growing for the life of the
+     * session. Losing an entry only costs one future "which row?" lookup.
+     */
+    private readonly familyModelOwner;
     private input;
     private cursor;
     private inputFolded;
@@ -194,10 +226,13 @@ export declare class SshTui {
     private readonly selectionRef;
     private readonly subagentSelection;
     private readonly onSelectionChanged;
+    private readonly onRouteSettled;
     private readonly disposers;
     private userQuestionDisposer;
     private presetId;
     private presetName;
+    /** Last route reported to the launcher; a repaint must not report it again. */
+    private lastSessionRoute;
     private readonly useAlternateScreen;
     private agentGone;
     private onboarding;
@@ -213,6 +248,8 @@ export declare class SshTui {
     private readonly seenCommandDoneIds;
     private activeSubagents;
     private subagentSessions;
+    /** Parent `subagent` tool descriptions waiting for the matching child card. */
+    private pendingSubagentTasks;
     private openToolCalls;
     /** Survives result settlement so a card-less result can still be labelled. */
     private toolCallNames;
@@ -389,6 +426,20 @@ export declare class SshTui {
      * footer sat on `SSH ○○○○` for the whole load.
      */
     replayHistory(): Promise<void>;
+    /**
+     * Close the chips replay could not settle.
+     *
+     * A spawn `tool/call` with no `tool/result` in the log means the wrapper was
+     * still in flight when the log was last written. Replay only runs in a Host
+     * that has just started, and the child lived in the Host running back then,
+     * so that child is gone and no `subagent/end` will ever arrive for it.
+     * Leaving the chip "running" made every resume of an interrupted turn show a
+     * child counting up forever while `/status` reported none.
+     *
+     * `stopReason: 'unknown'` is also what lets a late live end adopt this row
+     * instead of adding a twin beside it.
+     */
+    private settleUnfinishedReplayChips;
     /** Show the first-launch provider/API-key onboarding when nothing is configured. */
     private maybeRunOnboarding;
     /** Run the provider/API-key onboarding wizard. Resolves true when saved. */
@@ -513,6 +564,9 @@ export declare class SshTui {
     private endWait;
     private waitCardSource;
     private findSubagentRow;
+    private subagentInspectId;
+    /** Courtesy name for a child session; never the raw session hash. */
+    private subagentNameFor;
     private findLivePlanRow;
     /** Older / finished plans stay in the scrolling transcript. */
     private archiveStalePlans;
@@ -531,16 +585,51 @@ export declare class SshTui {
      * including a monochrome terminal.
      */
     private styleEmphasisedLine;
+    /**
+     * A body row whose parts carry different roles: the two columns of a
+     * side-by-side diff.
+     *
+     * No single kind fits such a row — the left column is a removal, the right an
+     * addition — so each part is painted with its own style, the gutter keeps the
+     * row's own (neutral) one, and a word emphasis rides inside whichever column
+     * it belongs to. The first column takes the leading indent and the last one
+     * runs to the end of the row, so both bars are flush.
+     */
+    private styleColumnedLine;
     private paintToolBodyLine;
     private workspaceRowsFor;
     private paintInspectOverlay;
+    /**
+     * Reverse-video (or a `»` in monochrome) on the overlay row that holds the
+     * current `/find` needle, matching what the transcript does for the same hit.
+     */
+    private markSearchRow;
     private openToolInspect;
+    private openSubagentInspect;
+    /**
+     * Line mode has no framed scroller, so an inspect body goes into the log.
+     *
+     * Opening the modal there printed nothing and then swallowed the next Enter:
+     * an invisible dialog. The log is the only detail surface line mode has, and
+     * writing it keeps the input free.
+     */
+    private echoInspectToLog;
     closeInspect(): void;
     private paintCollapsibleHeader;
     /** Move the expand/collapse focus among reasoning and tool rows. */
     private moveCollapsibleFocus;
     /** Toggle the focused block; without focus, toggle the most recent one. */
     toggleCollapsible(): void;
+    /**
+     * Whether an inline tool body would be cut short.
+     *
+     * Two things stop a body short: it cannot fit the workspace, or the measured
+     * link is slow enough that the paint budget trims it. Both leave the reader
+     * looking at part of a diff under a header that counts all of it, and both
+     * are what the overlay is for — so both answers are the overlay, and the
+     * card's own `Enter 全览` hint stays true.
+     */
+    private toolBodyTruncated;
     toggleCard(target: CollapsibleBlock): void;
     /** Expand all collapsible blocks, or collapse them again when all are open. */
     toggleAllCollapsible(): void;
@@ -636,6 +725,28 @@ export declare class SshTui {
     private mutedSeparator;
     private mutedSgr;
     private styleLine;
+    /**
+     * One emphasised piece of a body line — the words a diff changed.
+     *
+     * Inside a filled diff row the mark is a lighter shade of that same fill.
+     * Inverse video was there first, and it inverted the *fill*: a line replaced
+     * wholesale is emphasised from end to end, so it came out a bright block
+     * beside rows that kept the muted tone — visibly from another palette. On a
+     * terminal with no colour left to shift, the attribute is what survives, so
+     * the inverse video stays for that case.
+     */
+    private styleEmphasisedPiece;
+    /**
+     * Paint a row the reader has selected.
+     *
+     * The obvious `7`…`27` wrap only reaches the part before the line's first
+     * reset, and every painted segment ends with one: a focused card kept its
+     * marker and status dot highlighted while the title, the state word and the
+     * summary stayed plain, so ↑/↓ gave no visible clue which card was picked —
+     * on exactly the rows that carry a segmented header. Re-opening the attribute
+     * after every reset covers the whole row, whatever colours sit on top of it.
+     */
+    private selectLine;
     /**
      * Fold one live or durable stream chunk into the in-progress assistant
      * row. 0.1.2 hosts append `assistant/chunk`; 0.1.5 emits the same chunk
@@ -653,6 +764,12 @@ export declare class SshTui {
      * The parent request is left untouched (its own `/model` waterfall already
      * owns the route); direct children created by tool-subagent inherit the
      * parent provider unless `/submodel` stored an explicit subagent provider.
+     *
+     * Effort is not inherited from the parent. `next()` copies the live parent
+     * config, so a grok-4.6 `xhigh` parent would otherwise send `xhigh` with
+     * the light grok-4.5 child and fail with UNSUPPORTED_REASONING_EFFORT
+     * before the child writes a closing message. An explicit `/subeffort`
+     * still wins; otherwise the child's own adapter default is used.
      */
     readonly handleAgentRequest: ({ agent }: {
         agent: Agent;
@@ -669,6 +786,28 @@ export declare class SshTui {
     /** Plan-mode / command / team events that plugins merge into SessionEventMap. */
     private handleExtensionEvent;
     private findCompactionRow;
+    /**
+     * Compaction cards that can still be in flight: not finished, and within the
+     * window a real compaction could take. A stale card is treated as not running
+     * so it cannot hold the footer, the spinner, or `/compact` hostage.
+     */
+    private runningCompactions;
+    /** Whether a compaction is genuinely in flight right now. */
+    private compactionRunning;
+    /**
+     * Close compaction cards whose Host is gone.
+     *
+     * `compaction/start` is written before the work and `compaction/end` after it,
+     * so a Host that exits in between leaves an open start in the durable log.
+     * Replaying that log faithfully used to recreate a card stuck on "running"
+     * forever: the footer said 压缩中, the spinner kept animating, and every later
+     * `/compact` was refused as "already compacting". After a full replay nothing
+     * more can arrive for those starts, so they are settled here.
+     *
+     * `staleOnly` keeps the same sweep usable while the session is live, where a
+     * compaction that is merely slow must not be closed under it.
+     */
+    private settleUnfinishedCompactions;
     private handleCompactionEvent;
     private readContextPressure;
     private refreshContextPressure;
@@ -685,6 +824,8 @@ export declare class SshTui {
     readonly handleSubagentSessionEvent: (sessionId: SessionId, event: SessionEvent) => void;
     readonly handleSubagentStart: (info: SubagentRunInfo) => void;
     readonly handleSubagentEnd: (info: SubagentRunEndInfo) => void;
+    /** Keep an open inspect overlay in sync with the live child log. */
+    private refreshOpenSubagentInspect;
     private hasLiveDisplay;
     private waitForLiveDisplay;
     /**
@@ -726,6 +867,12 @@ export declare class SshTui {
     /** Queue one dialog behind an already-open one instead of overwriting it. */
     private openDialog;
     private showNextDialog;
+    /**
+     * Line mode has no framed dialog. Write the prompt (and its keys) into the
+     * log once when it becomes active, so a `tee` or a screen reader can answer
+     * it. Options stay on the framed path; the log only needs the question.
+     */
+    private echoLineModeDialog;
     private removeQueuedDialog;
     private settleQuestion;
     private openConfirm;
@@ -737,6 +884,58 @@ export declare class SshTui {
     private askQuestion;
     /** The stored llm-pi-ai profile for one provider route, when settings provide one. */
     private piAiProviderProfile;
+    /**
+     * Every settings-backed row one gateway family occupies, base first.
+     *
+     * `llm-pi-ai` puts the wire protocol on the provider entry, so a gateway
+     * whose catalogue spans protocols (Command Code, OpenCode Go) is stored as
+     * sibling rows. To the user they are one supplier: the TUI lists, picks and
+     * remembers them under the family's base id, and files each picked model on
+     * the row that actually serves it.
+     *
+     * The `-responses` / `-completions` / `-messages` suffix is only a naming
+     * convention, so a row is adopted into the family only when it corroborates:
+     * it must speak the protocol its suffix names, point at the same endpoint,
+     * and (when both name one) carry the same display name. A provider someone
+     * legitimately called `foo-messages` on another host therefore stays its own
+     * supplier instead of vanishing from `/provider` behind `foo`. A family of
+     * one — the ordinary case, and a sibling whose base row is missing — stays
+     * exactly as configured.
+     */
+    private providerFamilyRows;
+    /**
+     * Whether `sibling` is genuinely the same gateway as `base`, on another
+     * protocol: its `api` matches its suffix, its endpoint matches the base row's,
+     * and the two labels agree when both are set.
+     */
+    private isFamilyRow;
+    /** The id the TUI shows for a route: its family's base when it is spread. */
+    private displayProviderId;
+    /** The models one row configures, as ids with the labels settings carry. */
+    private configuredModelsOf;
+    /**
+     * The protocols the gateway publishes for one model, best-effort.
+     *
+     * Used when a model is being filed but no picker listed it yet (`/model <id>`
+     * on a new id, a `--model` override, a `/submodel` pin): the gateway's own
+     * answer is the only thing that can put it on a route that can send it.
+     * Any failure is "no opinion", never a blocked selection.
+     */
+    private advertisedFor;
+    /**
+     * The row of a gateway family that serves `model`: the one learned from the
+     * last listing, else the one that already configures it, else the base —
+     * where a brand-new model lands and is re-filed from.
+     */
+    /**
+     * Record which row a family's model belongs to, keeping the map bounded.
+     *
+     * Re-inserting keeps a key fresh, and the oldest half is dropped once the cap
+     * is crossed, so a gateway whose catalogue is re-listed on every `/model`
+     * does not accumulate a second copy of itself each time.
+     */
+    private rememberFamilyOwner;
+    private familyOwnerRow;
     /** Default listing endpoint for a built-in OpenCode route with no stored base URL. */
     private openCodeListingBaseURL;
     /**
@@ -744,8 +943,28 @@ export declare class SshTui {
      * OpenAI-compatible listing endpoint. The provider route is deliberately not
      * passed to discovery: pi-ai would answer a catalog route from its installed
      * registry, while the TUI wants the endpoint's current list.
+     *
+     * A row speaks exactly one protocol (`api` on the provider entry), so with a
+     * gateway that publishes `supported_endpoints` the list is narrowed to the
+     * models that row can actually serve — otherwise `/model` on
+     * `command-code-messages` would offer, and then persist, a model that only
+     * answers `/responses`.
      */
     private discoverEndpointModels;
+    /**
+     * One gateway's own model listing: every model the endpoint returns plus the
+     * route table it publishes. The caller narrows it to a protocol; a gateway
+     * spread over rows asks once and files the answer per row, so opening a
+     * picker costs one listing instead of one per sibling.
+     */
+    private discoverGatewayListing;
+    /**
+     * The row of the same gateway that the gateway itself says serves `model`,
+     * when that is not the row the caller is on. `undefined` when the gateway has
+     * no opinion, when the current row already serves it, or when the model would
+     * need a row that does not exist yet.
+     */
+    private rowServingModel;
     /** Add one endpoint-listed model to the stored provider profile when needed. */
     private ensureProviderModelConfigured;
     /**
@@ -758,12 +977,34 @@ export declare class SshTui {
     /** Built-in SuperGrok catalog used when the live adapter list is still warming up. */
     private static readonly XAI_FALLBACK_MODELS;
     private loadModelOptions;
+    /**
+     * The model list of a gateway spread over protocol rows.
+     *
+     * Every row is asked what it serves and the answers are merged under the
+     * family's base id, so the user picks from one list. Each model remembers the
+     * row that offered it, which is what routes the pick back to the protocol
+     * that can actually send it — the split stays invisible end to end.
+     */
+    private loadFamilyModelOptions;
     /** /model: models and effort for the current provider only. */
     private runModelCommand;
     /** /provider: pick a provider, then its model (remembered route pre-filled). */
     private runProviderCommand;
     /** Persist a provider/model/effort choice and keep the subagent on the same family. */
     private rememberedRoute;
+    /** The route this session is running right now, record-shaped. */
+    private sessionRouteRecord;
+    /**
+     * Tell the launcher which route this session has settled on, so resuming it
+     * comes back on the same supplier — the subagent route included, which is what
+     * makes a resumed cross-provider conversation reproducible.
+     *
+     * Reported when a route settles (`/model`, `/submodel`, `/setup`) and at the
+     * start of every turn, which catches a preset or a settings edit moving the
+     * route behind the TUI's back. The launcher owns the file; the TUI only says
+     * what changed, and says nothing when nothing did.
+     */
+    private noteSessionRoute;
     private rememberRoute;
     private applyModelSelection;
     /**
@@ -780,8 +1021,21 @@ export declare class SshTui {
      * When the parent provider changes (OAuth or API key), keep the subagent
      * on a same-family model. An explicit leftover DeepSeek flash id after
      * switching to xAI is treated as stale.
+     *
+     * A `/submodel` pin is the user's explicit route, so a parent switch asks
+     * before moving the children: dropping the pin silently spends on a route
+     * they pinned away from, and keeping it silently leaves the children on the
+     * old provider.
      */
     private syncSubagentToProvider;
+    /**
+     * Ask whether a `/submodel` pin survives a parent provider change.
+     *
+     * Returns true when the pin should be kept. Cancelling the dialog keeps it
+     * too: the pin is the user's explicit choice, so only an explicit answer
+     * moves the children onto the new parent route.
+     */
+    private confirmKeepSubagentPin;
     private clearQuotaForProvider;
     /** Persist one subagent selection and publish it to the live request waterfall. */
     private saveSubagentSelection;
@@ -789,6 +1043,8 @@ export declare class SshTui {
     private subagentModelOptions;
     /** /submodel: pick (or set) the model subagent children use. */
     private runSubmodelCommand;
+    /** Persist one subagent provider/model pair and say whether it follows or is pinned. */
+    private commitSubagentRoute;
     /** /effort: pick or set the reasoning effort for the current model. */
     private runEffortCommand;
     /**
@@ -894,8 +1150,42 @@ export declare class SshTui {
      * @returns the windows discovered for this pick, by model id.
      */
     private sizeOnboardingModels;
+    /**
+     * Leave the models step, after one best-effort trip to the gateway for what
+     * the picks are still missing: the context window / output cap of every model
+     * the listing has not described yet, and — for a gateway that spreads over
+     * several protocols — the endpoints each picked model answers.
+     *
+     * `Ctrl+F` stays as it was, but it is no longer the only way to learn these:
+     * a model typed by hand would otherwise be saved with no capacity at all, and
+     * with no endpoint data the split had nothing to file it by.
+     */
+    private finishModelsStep;
+    /** Whether leaving the models step has anything left to ask the gateway for. */
+    private onboardingWantsEndpoint;
+    /** Fill the picks' capacities and endpoints from the gateway; never fatal. */
+    private enrichOnboardingModels;
     private handleOnboardingChar;
     private advanceOnboarding;
+    /**
+     * Open the models picker: every model the listing offered — or the template's
+     * pinned ones when nothing was listed — with the template's models checked.
+     *
+     * Enter used to accept the whole listing, which quietly wrote every model of
+     * the gateway into settings and made the session's model whichever id came
+     * first. The picker makes both the set and the session's model explicit; a
+     * typed list still skips it.
+     */
+    private openOnboardingModelPicker;
+    /** The checked models of the wizard's picker, in listing order. */
+    private checkedOnboardingModels;
+    /** Move the highlight in either picker step. */
+    private moveOnboardingModelCursor;
+    /**
+     * Esc in a picker step goes back one step instead of throwing the wizard
+     * away — the listing is the expensive part and the user is still choosing.
+     */
+    private stepBackOnboarding;
     /** Fetch the endpoint's model list into the onboarding wizard's models step. */
     private fetchOnboardingModels;
     private saveOnboarding;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-ssh-tui",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "description": "SSH-friendly interactive terminal TUI plugin for DeepSeek Harness",
   "keywords": [
     "deepseek-harness",