dsh-tui-theme 0.5.0 → 0.6.0

package/lib/types/toast.js

@@ -0,0 +1,91 @@
+/**
+ * Toast relay for the plugin-facing transient-notification seam
+ * (dsh-TUI 0.10: `ctx.tuiToast`).
+ *
+ * The plugin's own logger output is invisible to a TUI user, so the few
+ * events worth surfacing — a follow-system pref write, a repaired theme
+ * file, a shadowing legacy static install — go through the host's toast
+ * surface instead. Sending is fire-and-forget: hosts without the seam
+ * (dsh-TUI < 0.10) never fire the inject and every send is a silent no-op,
+ * exactly like the other soft-probed seams.
+ *
+ * The host registers its toast sink late (the dsh-tui row applies after the
+ * extensions row, and both may trail this plugin), so a toast dropped for
+ * having no sink is retried on a short schedule before giving up. The
+ * tuiToast service itself arrives with the extensions row, so a send fired
+ * before the seam even exists waits on the same schedule. Retries are
+ * bounded, unref'd, and cleared with the activation; a toast lost to a host
+ * rate limit is not worth fighting — the next real event re-reports.
+ * @module dsh-tui-theme/toast
+ */
+import { AsyncResource } from 'node:async_hooks';
+/** Drop-retry schedule (ms). The first delivery attempt is always immediate. */
+const RETRY_DELAYS_MS = [2_000, 4_000];
+let retryDelays = RETRY_DELAYS_MS;
+/**
+ * @internal Shrink the retry schedule for hermetic tests (verify.mjs only;
+ * not part of the plugin's behavioral contract).
+ */
+export function setToastRetryDelaysForTests(delays) {
+    retryDelays = delays;
+}
+/**
+ * Start the toast relay. Returns a sender that is callable immediately and
+ * from any later context (settings watches, timers): `show()` binds through
+ * the service's own activation, so unlike `tuiStatus.set` it takes no
+ * identity argument — but the service object itself must still be read
+ * inside the inject (same rule as every other seam).
+ * @param ctx - The plugin's own activation context.
+ */
+export function startToastRelay(ctx) {
+    const pending = new Set();
+    let show;
+    const clearPending = () => {
+        for (const timer of pending)
+            clearTimeout(timer);
+        pending.clear();
+    };
+    ctx.inject(['tuiToast'], toastCtx => {
+        const toast = toastCtx.tuiToast;
+        // show() resolves its caller through the ambient Cordis activation, so a
+        // call from a foreign async scope (a settings watch, a host timer of
+        // another seam) is refused even though this plugin is alive. Capture the
+        // activation scope here — inside the inject, where it is ambient — and
+        // re-enter it for every send, exactly like the inject-created interval
+        // that keeps the status line rendering.
+        const scope = new AsyncResource('dsh-tui-theme-toast');
+        show = (text, options) => {
+            try {
+                return scope.runInAsyncScope(() => toast.show(text, options));
+            }
+            catch {
+                // A hostile or tearing-down host must never propagate into the caller.
+                return false;
+            }
+        };
+        toastCtx.effect(() => () => {
+            show = undefined;
+            clearPending();
+        });
+    });
+    ctx.effect(() => () => {
+        show = undefined;
+        clearPending();
+    });
+    const attempt = (text, color, depth) => {
+        // A seam that has not arrived yet (the extensions row applies after this
+        // plugin) retries on the same bounded schedule as a dropped send.
+        if (show !== undefined && show(text, color === undefined ? {} : { color }))
+            return true;
+        if (depth >= retryDelays.length)
+            return false;
+        const timer = setTimeout(() => {
+            pending.delete(timer);
+            attempt(text, color, depth + 1);
+        }, retryDelays[depth]);
+        timer.unref?.();
+        pending.add(timer);
+        return false;
+    };
+    return (text, color) => attempt(text, color, 0);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-tui-theme",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Sakura-pink themes for dsh-TUI with optional cached background follow (pink-day/pink-night), a blossom status line, and a /settings section. No shortcuts, no commands.",
   "type": "module",
   "main": "lib/types/index.js",
@@ -28,7 +28,7 @@
     "preverify": "npm run build",
     "verify": "node scripts/verify.mjs",
     "verify:package": "node scripts/verify-package.mjs",
-    "verify:host": "npm run build && node scripts/headless-order-test.mjs && node --import tsx/esm scripts/validate-themes-against-host.mjs",
+    "verify:host": "npm run build && node scripts/headless-order-test.mjs && node scripts/runtime-themes-headless.mjs && node --import tsx/esm scripts/validate-themes-against-host.mjs",
     "release:check": "npm run build && npm run verify && npm run verify:package",
     "prepack": "npm run release:check"
   },
@@ -58,17 +58,59 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.6 || ^0.1.1-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6 || ^0.1.1-rc.1",
+    "@deepseek-ai/dsh-session": "^0.1.0-rc.6 || ^0.1.1-rc.1 || ^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6 || ^0.1.1-rc.1 || ^0.1.2-alpha.2",
     "@deepseek-ai/schemastery": "^3.18.1"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.6 || ^0.1.1-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6 || ^0.1.1-rc.1",
+    "@deepseek-ai/dsh-session": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-settings": "0.1.2-alpha.2",
     "@deepseek-ai/schemastery": "^3.18.1",
+    "@deepseek-harness-tui/dsh-tui": "0.10.0-beta.4",
     "@types/node": "^22.0.0",
     "tsx": "^4.23.12",
-    "typescript": "^6.0.3"
+    "typescript": "^6.0.3",
+    "@deepseek-ai/dsh-llm": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-user-questions": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-commands": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-atomic-write": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-tool-ask-user": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-skill": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-agent-instructions": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-invariants": "0.1.2-alpha.2"
+  },
+  "overrides": {
+    "@deepseek-ai/dsh-session": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-settings": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-user-questions": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-commands": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-atomic-write": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-tool-ask-user": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-skill": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-agent-instructions": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-invariants": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-scope": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-attachment": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-timeout": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-code-runtime": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-fs": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.2-alpha.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.2-alpha.2"
+  },
+  "allowScripts": {
+    "esbuild@0.28.2": true
   }
 }

package/scripts/headless-order-test.mjs

@@ -2,7 +2,8 @@
  * End-to-end order test with the installed dsh-TUI services. Composes this
  * plugin before the extension services to exercise late service injection.
  *
- * DSH_TUI_ADAPTER_DIR must point at dsh-TUI's lib/types/dsh-adapter directory.
+ * DSH_TUI_ADAPTER_DIR may point at dsh-TUI's lib/types/dsh-adapter directory.
+ * When omitted, the installed devDependency is used.
  * Script-side floor: the adapter must be a built dsh-TUI >= 0.9.0 — the
  * settings-sections module and its getHostSettingsSections probe landed there.
  * Set DSH_TUI_EXPECTED_VERSION only when an explicit release baseline needs
@@ -10,7 +11,7 @@
  */
 import { existsSync, mkdtempSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'
 import { tmpdir } from 'node:os'
-import { join } from 'node:path'
+import { dirname, join } from 'node:path'
 import { fileURLToPath, pathToFileURL } from 'node:url'
 import { createRequire } from 'node:module'
 import assert from 'node:assert/strict'
@@ -23,10 +24,10 @@ import { assertSettingsContract, SETTINGS_NAMESPACE } from './expected-settings-
 const STATUS_CONTRIBUTION_KEY = SETTINGS_NAMESPACE
 
 const pluginRoot = fileURLToPath(new URL('..', import.meta.url))
-const adapter = process.env.DSH_TUI_ADAPTER_DIR
-if (adapter === undefined || adapter === '') {
-  throw new Error('DSH_TUI_ADAPTER_DIR must point at dsh-TUI lib/types/dsh-adapter for this host integration test.')
-}
+const req = createRequire(import.meta.url)
+const packageJson = req.resolve('@deepseek-harness-tui/dsh-tui/package.json')
+const devHostRoot = dirname(packageJson)
+const adapter = process.env.DSH_TUI_ADAPTER_DIR || join(devHostRoot, 'lib', 'types', 'dsh-adapter')
 
 if (!existsSync(join(adapter, 'extensions.js'))) {
   throw new Error(`dsh-TUI adapter not found at ${adapter}`)
@@ -63,17 +64,28 @@ if (!existsSync(settingsSectionsPath)) {
   )
 }
 
-const req = createRequire(join(adapter, 'extensions.js'))
-const { Context } = await import(pathToFileURL(req.resolve('@deepseek-ai/cordis')).href)
+const hostRequire = createRequire(join(adapter, 'extensions.js'))
+const { Context } = await import(pathToFileURL(hostRequire.resolve('@deepseek-ai/cordis')).href)
 const extensions = await import(pathToFileURL(join(adapter, 'extensions.js')).href)
-const ledgerModule = await import(pathToFileURL(join(adapter, 'effect-ledger.js')).href)
 const statusModule = await import(pathToFileURL(join(adapter, 'status.js')).href)
 const settingsSectionsModule = await import(pathToFileURL(settingsSectionsPath).href)
+const pluginHostModule = await import(pathToFileURL(join(adapter, 'plugin-host.js')).href)
 const pink = await import(pathToFileURL(join(pluginRoot, 'lib', 'types', 'index.js')).href)
 
 const app = new Context()
-await app.plugin(ledgerModule.default)
-await app.plugin(pink)
+await app.plugin(pluginHostModule.default ?? pluginHostModule)
+const testUtilsPath = join(adapter, '..', 'test-utils.js')
+if (existsSync(testUtilsPath)) {
+  const testUtils = await import(pathToFileURL(testUtilsPath).href)
+  const manifest = testUtils.testManifest({ id: SETTINGS_NAMESPACE })
+  const admitted = await testUtils.mountAdmitted(app, SETTINGS_NAMESPACE, manifest)
+  await admitted.context.plugin(pink)
+} else {
+  // dsh-TUI < 0.10 has no public admission test helpers; keep the historical
+  // manual mount and report the structural limitation instead of hiding it.
+  console.log('* mountAdmitted unavailable on this host; using manual plugin mount')
+  await app.plugin(pink)
+}
 await app.plugin(extensions.default ?? extensions)
 await app.plugin(settingsSectionsModule.default ?? settingsSectionsModule)
 

package/scripts/runtime-themes-headless.mjs

@@ -0,0 +1,180 @@
+/**
+ * Dev-only integration check for dsh-TUI 0.10 runtime theme registration.
+ * Uses the installed host adapter and the real admission path; no user HOME
+ * or static theme files are touched.
+ */
+import { existsSync, mkdtempSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'
+import { createRequire } from 'node:module'
+import { tmpdir } from 'node:os'
+import { dirname, join } from 'node:path'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+import assert from 'node:assert/strict'
+
+const pluginRoot = fileURLToPath(new URL('..', import.meta.url))
+const req = createRequire(import.meta.url)
+const hostPackagePath = req.resolve('@deepseek-harness-tui/dsh-tui/package.json')
+const hostRoot = dirname(hostPackagePath)
+const adapter = process.env.DSH_TUI_ADAPTER_DIR || join(hostRoot, 'lib', 'types', 'dsh-adapter')
+if (!existsSync(join(adapter, 'extensions.js'))) {
+  throw new Error(`dsh-TUI runtime adapter not found at ${adapter}`)
+}
+if (!existsSync(join(adapter, 'themes.js'))) {
+  console.log('* runtime theme seam unavailable on this host; skipping 0.10 headless check')
+  process.exit(0)
+}
+
+const sandbox = mkdtempSync(join(tmpdir(), 'pink-runtime-themes-'))
+process.env.USERPROFILE = sandbox
+process.env.HOME = sandbox
+const dataDir = join(sandbox, '.dsh-tui')
+const staticThemes = join(dataDir, 'themes')
+mkdirSync(dataDir, { recursive: true })
+writeFileSync(join(dataDir, 'theme.json'), JSON.stringify({ theme: 'pink-night' }, null, 2))
+
+const hostRequire = createRequire(join(adapter, 'extensions.js'))
+const { Context } = await import(pathToFileURL(hostRequire.resolve('@deepseek-ai/cordis')).href)
+const pluginHost = await import(pathToFileURL(join(adapter, 'plugin-host.js')).href)
+const extensions = await import(pathToFileURL(join(adapter, 'extensions.js')).href)
+const themesModule = await import(pathToFileURL(join(adapter, 'themes.js')).href)
+const themeModule = await import(pathToFileURL(join(adapter, '..', 'theme.js')).href)
+const testUtils = await import(pathToFileURL(join(adapter, '..', 'test-utils.js')).href)
+const pink = await import(pathToFileURL(join(pluginRoot, 'lib', 'types', 'index.js')).href)
+const { SETTINGS_NAMESPACE } = await import(pathToFileURL(join(pluginRoot, 'scripts', 'expected-settings-contract.mjs')).href)
+
+const app = new Context()
+await app.plugin(pluginHost.default ?? pluginHost)
+const manifest = testUtils.testManifest({ id: SETTINGS_NAMESPACE })
+const admitted = await testUtils.mountAdmitted(app, SETTINGS_NAMESPACE, manifest)
+await admitted.context.plugin(pink)
+await app.plugin(extensions.default ?? extensions)
+
+const host = themesModule.getHostThemes(app.get('tuiThemes'))
+assert.ok(host, 'runtime theme host must be mounted')
+const deadline = Date.now() + 5_000
+while (host.getSnapshot().length !== 3 && Date.now() < deadline) {
+  await testUtils.sleep(25)
+}
+const snapshot = host.getSnapshot()
+assert.deepEqual(snapshot.map(entry => entry.name).sort(), ['pink-ansi', 'pink-day', 'pink-night'])
+
+for (const entry of snapshot) {
+  const expected = JSON.parse(readFileSync(join(pluginRoot, 'themes', `${entry.name}.json`), 'utf8'))
+  assert.equal(entry.displayName, expected.displayName)
+  assert.equal(entry.base, expected.base)
+  assert.deepEqual(entry.colors, expected.colors)
+  assert.deepEqual(host.resolve(entry.name), { ...themeModule.getTheme(entry.base), ...expected.colors })
+  assert.equal(themeModule.getTheme(entry.name).claude, expected.colors.claude)
+}
+assert.equal(existsSync(staticThemes), false, 'runtime registration must not create static theme files')
+await testUtils.sleep(1_700)
+assert.equal(existsSync(staticThemes), false, 'runtime confirmation must leave no static fallback files')
+
+const ledgerPath = join(dataDir, 'effect-ledger.jsonl')
+const readLedger = () => (existsSync(ledgerPath) ? readFileSync(ledgerPath, 'utf8').trim().split('\n').filter(Boolean).map(line => JSON.parse(line)) : [])
+const themeCreates = readLedger().filter(entry => entry.resource?.kind === 'theme' && entry.operation === 'create')
+assert.deepEqual(themeCreates.map(entry => entry.resource.id).sort(), ['pink-ansi', 'pink-day', 'pink-night'])
+
+await admitted.fiber.dispose()
+await testUtils.sleep(50)
+assert.deepEqual(host.getSnapshot(), [], 'disposing the admitted plugin must release runtime themes')
+const themeReleases = readLedger().filter(entry => entry.resource?.kind === 'theme' && entry.operation === 'release')
+assert.deepEqual(themeReleases.map(entry => entry.resource.id).sort(), ['pink-ansi', 'pink-day', 'pink-night'])
+assert.deepEqual(themeModule.getTheme('pink-night'), themeModule.getTheme('dark'), 'disposed runtime theme no longer resolves')
+console.log('OK runtime themes: 3 registered, no static files, ledger create/release, disposal clean')
+
+// ── Phase 2: real-host toast delivery (0.10 tuiToast seam) ──────────────────
+// A pre-0.10 user's byte-identical static files shadow the runtime registry;
+// the plugin must surface that through the real toast service. The sink is
+// attached after the extensions row applies, so a toast fired earlier is
+// dropped and must arrive through the relay's bounded retry instead — this
+// exercises both the show() caller binding outside the inject callback and
+// the drop-retry path against the real host.
+const toastModule = await import(pathToFileURL(join(adapter, 'toast.js')).href)
+const sandbox2 = mkdtempSync(join(tmpdir(), 'pink-toast-'))
+process.env.USERPROFILE = sandbox2
+process.env.HOME = sandbox2
+const dataDir2 = join(sandbox2, '.dsh-tui')
+mkdirSync(join(dataDir2, 'themes'), { recursive: true })
+writeFileSync(join(dataDir2, 'theme.json'), JSON.stringify({ theme: 'pink-night' }, null, 2))
+for (const theme of ['pink-night', 'pink-day', 'pink-ansi']) {
+  writeFileSync(
+    join(dataDir2, 'themes', `${theme}.json`),
+    readFileSync(join(pluginRoot, 'themes', `${theme}.json`), 'utf8'),
+  )
+}
+
+const deliveries = []
+const app2 = new Context()
+await app2.plugin(pluginHost.default ?? pluginHost)
+const admitted2 = await testUtils.mountAdmitted(app2, SETTINGS_NAMESPACE, manifest)
+await admitted2.context.plugin(pink)
+await app2.plugin(extensions.default ?? extensions)
+toastModule.getHostToastStore(app2.get('tuiToast'))?.setSink(delivery => deliveries.push(delivery))
+
+const toastDeadline = Date.now() + 8_000
+while (deliveries.length === 0 && Date.now() < toastDeadline) {
+  await testUtils.sleep(25)
+}
+assert.ok(deliveries.length >= 1, 'the shadow-hint toast must reach the host sink (retry included)')
+assert.equal(deliveries[0].color, undefined, 'the shadow hint is neutral')
+for (const file of ['pink-night.json', 'pink-day.json', 'pink-ansi.json']) {
+  assert.ok(deliveries[0].text.includes(file), `hint must name ${file}`)
+}
+await admitted2.fiber.dispose()
+await testUtils.sleep(50)
+console.log('OK toast: shadow hint delivered through the real tuiToast seam')
+
+// ── Phase 3: apply-time toasts reach the sink through the seam-late retry ───
+// On a real 0.10 host the tuiToast service arrives with the extensions row,
+// after this plugin's apply, so toasts fired during apply (the self-heal
+// warning, the boot-follow result) can only survive through the relay's
+// bounded retry. A settings service present at apply time (the dsh CLI core
+// service) drives the boot-follow path with a disagreeing cache.
+const sandbox3 = mkdtempSync(join(tmpdir(), 'pink-apply-toast-'))
+process.env.USERPROFILE = sandbox3
+process.env.HOME = sandbox3
+const dataDir3 = join(sandbox3, '.dsh-tui')
+mkdirSync(join(dataDir3, 'themes'), { recursive: true })
+// Corrupt self-heal target; boot-follow cache disagrees with the persisted pref.
+writeFileSync(join(dataDir3, 'themes', 'pink-night.json'), '{ this is not json')
+writeFileSync(join(dataDir3, 'theme.json'), JSON.stringify({ theme: 'pink-night' }, null, 2))
+writeFileSync(join(dataDir3, 'theme-follow.json'), JSON.stringify({ light: true, at: 1 }, null, 2))
+
+// Minimal settings service standing in for the dsh CLI core service: present
+// at plugin apply time with followSystem already enabled, mirrors scope.watch.
+const fakeSettings = {
+  register() {
+    return {
+      get: () => ({ followSystem: true }),
+      watch(listener) {
+        listener({ followSystem: true })
+        return () => {}
+      },
+    }
+  },
+}
+
+const deliveries3 = []
+const app3 = new Context()
+await app3.plugin(pluginHost.default ?? pluginHost)
+const admitted3 = await testUtils.mountAdmitted(app3, SETTINGS_NAMESPACE, manifest)
+app3.provide('settings', fakeSettings)
+await admitted3.context.plugin(pink)
+await app3.plugin(extensions.default ?? extensions)
+toastModule.getHostToastStore(app3.get('tuiToast'))?.setSink(delivery => deliveries3.push(delivery))
+
+const applyToastDeadline = Date.now() + 8_000
+while (deliveries3.length < 2 && Date.now() < applyToastDeadline) {
+  await testUtils.sleep(25)
+}
+const healToast = deliveries3.find(delivery => delivery.text.includes('已修复'))
+assert.ok(healToast, 'the self-heal warning fired during apply must reach the host sink')
+assert.equal(healToast.color, 'warning', 'the self-heal toast is a warning')
+assert.ok(healToast.text.includes('pink-night.json'), 'the heal toast names the repaired file')
+const followToast = deliveries3.find(delivery => delivery.text.includes('已按保存的终端背景'))
+assert.ok(followToast, 'the boot-follow result fired at settings time must reach the host sink')
+assert.equal(followToast.color, 'success', 'the boot-follow toast is a success')
+assert.ok(followToast.text.includes('pink-day') && followToast.text.includes('reload'), 'the follow toast names the new theme and the reload hint')
+assert.equal(JSON.parse(readFileSync(join(dataDir3, 'theme.json'), 'utf8')).theme, 'pink-day', 'the follow pref write still happened')
+await admitted3.fiber.dispose()
+console.log('OK toast phase 3: apply-time self-heal and boot-follow toasts delivered on the real host')

package/scripts/validate-themes-against-host.mjs

@@ -1,7 +1,8 @@
 /**
  * Validate bundled themes against matching dsh-TUI source and runtime modules.
- * DSH_TUI_SOURCE_ROOT must point at a dsh-TUI source checkout.
- * DSH_TUI_ADAPTER_DIR must point at the matching lib/types/dsh-adapter directory.
+ * DSH_TUI_SOURCE_ROOT and DSH_TUI_ADAPTER_DIR may point at a matching source
+ * checkout and adapter directory. When omitted, the installed dsh-TUI
+ * devDependency is used as a zero-configuration baseline.
  * Set DSH_TUI_EXPECTED_VERSION only when an explicit release baseline needs
  * to be pinned; ordinary development verifies the supplied host as-is.
  *
@@ -9,25 +10,32 @@
  */
 import { existsSync, mkdtempSync, readFileSync, readdirSync } from 'node:fs'
 import { tmpdir } from 'node:os'
-import { join, resolve } from 'node:path'
+import { dirname, join, resolve } from 'node:path'
 import { fileURLToPath, pathToFileURL } from 'node:url'
 import assert from 'node:assert/strict'
 import ts from 'typescript'
+import { createRequire } from 'node:module'
 
 const pluginRoot = fileURLToPath(new URL('..', import.meta.url))
 const sourceRoot = process.env.DSH_TUI_SOURCE_ROOT
-if (sourceRoot === undefined || sourceRoot === '') {
-  throw new Error('DSH_TUI_SOURCE_ROOT must point at a dsh-TUI source checkout for this host theme validation.')
-}
-const hostRoot = resolve(sourceRoot)
-const customThemePath = join(hostRoot, 'src', 'customTheme.ts')
-const themePath = join(hostRoot, 'src', 'theme.ts')
+const hostRequire = createRequire(import.meta.url)
+const devPackageJson = hostRequire.resolve('@deepseek-harness-tui/dsh-tui/package.json')
+const hostRoot = sourceRoot === undefined || sourceRoot === ''
+  ? dirname(devPackageJson)
+  : resolve(sourceRoot)
+const sourceMode = sourceRoot !== undefined && sourceRoot !== ''
+const customThemePath = sourceMode
+  ? join(hostRoot, 'src', 'customTheme.ts')
+  : join(hostRoot, 'lib', 'types', 'customTheme.js')
+const themePath = sourceMode
+  ? join(hostRoot, 'src', 'theme.ts')
+  : join(hostRoot, 'lib', 'types', 'theme.d.ts')
 
 if (!existsSync(customThemePath) || !existsSync(themePath)) {
-  throw new Error(`dsh-TUI sources not found at ${hostRoot}`)
+  throw new Error(`dsh-TUI ${sourceMode ? 'sources' : 'devDependency build'} not found at ${hostRoot}`)
 }
 
-const hostPackagePath = join(hostRoot, 'package.json')
+const hostPackagePath = sourceMode ? join(hostRoot, 'package.json') : devPackageJson
 if (!existsSync(hostPackagePath)) {
   throw new Error(`dsh-TUI package metadata not found at ${hostPackagePath}`)
 }
@@ -35,10 +43,10 @@ const hostPackage = JSON.parse(readFileSync(hostPackagePath, 'utf8'))
 assert.match(hostPackage.version, /^\d+\.\d+\.\d+(?:[-+].+)?$/u, 'host source must declare a version')
 
 const adapter = process.env.DSH_TUI_ADAPTER_DIR
-if (adapter === undefined || adapter === '') {
+if (sourceMode && (adapter === undefined || adapter === '')) {
   throw new Error('DSH_TUI_ADAPTER_DIR must point at dsh-TUI lib/types/dsh-adapter for this host theme validation.')
 }
-const adapterRoot = resolve(adapter)
+const adapterRoot = resolve(adapter || join(hostRoot, 'lib', 'types', 'dsh-adapter'))
 const runtimeThemePath = join(adapterRoot, '..', 'theme.js')
 const runtimeCustomThemePath = join(adapterRoot, '..', 'customTheme.js')
 if (!existsSync(runtimeThemePath) || !existsSync(runtimeCustomThemePath)) {
@@ -86,7 +94,7 @@ function readThemeKeysFromSource(path) {
   return keys
 }
 
-const allKeys = readThemeKeysFromSource(themePath)
+const allKeys = sourceMode ? readThemeKeysFromSource(themePath) : Object.keys(getTheme('dark'))
 assert.deepEqual(
   [...Object.keys(getTheme('dark'))].sort(),
   [...allKeys].sort(),

package/scripts/verify-package.mjs

@@ -40,6 +40,10 @@ for (const required of [
   'lib/types/statusLine.d.ts',
   'lib/types/themeAssets.js',
   'lib/types/themeAssets.d.ts',
+  'lib/types/runtimeThemes.js',
+  'lib/types/runtimeThemes.d.ts',
+  'lib/types/toast.js',
+  'lib/types/toast.d.ts',
   'themes/pink-night.json',
   'themes/pink-day.json',
   'themes/pink-ansi.json',
@@ -49,6 +53,7 @@ for (const required of [
   'scripts/verify.mjs',
   'scripts/verify-package.mjs',
   'scripts/headless-order-test.mjs',
+  'scripts/runtime-themes-headless.mjs',
   'scripts/validate-themes-against-host.mjs',
   'scripts/expected-settings-contract.mjs',
 ]) {
@@ -68,7 +73,15 @@ for (const entry of exportedPaths) {
 for (const name of Object.keys(packageJson.peerDependencies)) {
   if (!name.startsWith('@deepseek-ai/')) continue
   assert.equal(packageJson.dependencies?.[name], undefined, `${name} must not be a runtime dependency`)
-  assert.equal(packageJson.devDependencies?.[name], packageJson.peerDependencies[name], `${name} peer and dev ranges must match`)
+  const peerRange = packageJson.peerDependencies[name]
+  const devRange = packageJson.devDependencies?.[name]
+  // Development baselines may pin one concrete prerelease while the published
+  // peer contract remains a union of compatible release lines.
+  const devAccepted = peerRange.split('||').some(entry => {
+    const candidate = entry.trim()
+    return candidate === devRange || candidate.replace(/^\^/u, '') === devRange
+  })
+  assert.equal(devAccepted, true, `${name} dev pin must be accepted by its peer range`)
 }
 assert.equal(packageJson.dependencies?.['@deepseek-ai/schemastery'], undefined)
 const rootLock = lockfile.packages?.['']