@khorsheed/dsh-context-guard 0.2.4 → 0.2.6

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # 变更记录
 
+## 0.2.6（2026-10-24）
+
+- `dsh.references` 去掉已退役的 `@khorsheed/dsh-bundle-conversation-toolbox`(其成员全部并入 basic)。
+
+## 0.2.5（2026-10-22）
+
+- **设置卡回归插件页**：家族/模式 bundle 折叠后阈值设置卡整体失声——`plugins.row.config` 的键钉死了旧载体 bundle（成员行现由模式包承载，键永不命中），0.1.5 座位 `settings.plugin.item` 已被宿主改名删除（现名 `plugins.item`），鸭式老臂静默失效。现在改为注册一个 `plugins.item` 列表条目并以 `configForms.whileServed` 门在服役中的 `context-guard` 命名空间上：独立安装、家族 bundle、模式包三种形态同一张卡，组合摘掉该行时卡也干净消失。代价：宿主 <0.1.7-alpha.1 不再渲染设置卡（输入框压缩按钮等其余面不变，已记入 README 兼容节与 `dsh.compat.notes`）。见 [Agent Note](../../.agents/notes/implemented/bug-fix/2026-10-18-bundle-member-config-card-via-plugins-item.md)
+- 适配宿主 0.2.1 线：verifiedHost 前移至 0.2.1-rc.1，`@deepseek-ai/dsh-*` peer 区间加宽覆盖 0.2.1 并声明 `engines.dsh`（`>=0.1.2-rc.1 <0.3.0-0`）；退役 load 期 invariant 伴生探针（空仪式，无行为变化）
+
 ## 0.2.4（2026-09-30）
 
 - **设置面直接调用 schemastery 的类型化 `.volatile()`**：0.2.0 开发线解析到 schemastery 3.18.4，其 `Schema` 已声明 `volatile()`——手写的 `VolatileCapable` 强转探测不再类型重叠（TS2352）。运行期双线行为不变：探测在 0.1.5 的 schemastery 3.18.2（无 `volatile` 方法）上仍回落到普通字段

package/README.en.md

@@ -47,9 +47,9 @@ plugins:
 
 ## Compatibility
 
-- npm release line (`@deepseek-ai/dsh@0.1.2-rc.1`): ✅ full — baseline moved to the 0.1.2-rc.1 API surface (single-arm 0.1.2 API consumption; the 0.1.1-rc.2 runtime arm is retired), full build+test green; minHost moves up to 0.1.2-rc.1 — older hosts stay on the previous release line.
-- 0.1.6-alpha.2 pre-release line (`@deepseek-ai/dsh@0.1.6-alpha.2`): ✅ full — the `settings.plugin.item` slot is removed in the ui-settings-plugins refactor; the settings card moves to `plugins.bundle.config` (keyed by package name, the Plugins page drawing the title chrome); the dual-inject probe keeps the 0.1.5 card working, minHost unchanged.
-- source line (deepseek-harness master): ✅ (verifiedHost: 0.1.2-rc.1)
+- npm release line (`@deepseek-ai/dsh@0.1.2-rc.1`): ⚠️ button full, settings card absent — baseline moved to the 0.1.2-rc.1 API surface (single-arm 0.1.2 API consumption; the 0.1.1-rc.2 runtime arm is retired), full build+test green; the settings card now rides only the Plugins page's `plugins.item` seat on 0.1.7-alpha.1+ (mounted through `configForms.whileServed` while the Host serves the `context-guard` namespace — one card for a standalone install, the toolbox family bundle, or a mode pack), so this line renders the composer button only; minHost moves up to 0.1.2-rc.1 — older hosts stay on the previous release line.
+- 0.1.6-alpha.2 pre-release line (`@deepseek-ai/dsh@0.1.6-alpha.2`): ⚠️ button full, settings card absent — the `plugins.item` slot exists, but the `whileServed` gate landed in 0.1.7-alpha.1, so no card mounts here; 0.1.5's legacy `settings.plugin.item` seat is retired with the host's deletion, minHost unchanged.
+- source line (deepseek-harness master): ✅ (verifiedHost: 0.2.1-rc.1) — host-021 wave: full build+test green against the 0.2.1-rc.1 tree, no other surface change.
 
 **Version line mapping**: 0.2.0 and up support host `0.1.2-rc.1` and later; hosts on `0.1.0-rc.6` ~ `0.1.1-rc.2` stay on the 0.1.x release line (last release `0.1.0`).
 
@@ -81,7 +81,7 @@ At the default ratio (0.8) the button appears exactly when the official engine w
 
 Nothing changes for the model: clicking the button runs the same `/compact` the user could type, with the same command lifecycle in the session log. The plugin itself has no token or KV-cache effect.
 
-`/client` exports the plugin body (`apply`/`inject`) and the `CompactGuardButtonProps` / `ContextGuardSettingsCardProps` types.
+`/client` exports the plugin body (`apply`/`inject`) and the `CompactGuardButtonProps` / `ContextGuardBundleConfigProps` types.
 
 </details>
 

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # last confirmed-consistent state. Both languages carry equal authority; after
 # editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/context-guard/README.en.md
-packages/context-guard/README.en.md: 7467dc5a37b821125c3f4f026ac65be1a8584591
-packages/context-guard/README.md: 89f1467584d849cf6da1a4717758305a77e25d7a
+packages/context-guard/README.en.md: afd1d0c450b5e2916377d10a59b537b6fbff9d6f
+packages/context-guard/README.md: ffbb010a2301151f96626f35c72c3208bd523bad

package/README.md

@@ -47,9 +47,9 @@ plugins:
 
 ## Compatibility
 
-- npm 发布线（`@deepseek-ai/dsh@0.1.2-rc.1`）：✅ 完整——基线迁移至 0.1.2-rc.1 API 面（单臂消费 0.1.2 API，0.1.1-rc.2 运行臂已退役），全量构建测试通过；minHost 前移至 0.1.2-rc.1，旧宿主请停留在旧发布线。
-- 0.1.6-alpha.2 预发布线（`@deepseek-ai/dsh@0.1.6-alpha.2`）：✅ 完整——`settings.plugin.item` 槽随 ui-settings-plugins 重构删除，设置卡改投 `plugins.bundle.config`（按包名 keyed，Plugins 页绘制标题后渲染本表单）；双注入探测保持 0.1.5 线旧卡可用，minHost 不动。
-- 源码线（deepseek-harness master）：✅（verifiedHost: 0.1.2-rc.1）
+- npm 发布线（`@deepseek-ai/dsh@0.1.2-rc.1`）：⚠️ 按钮完整、设置卡缺位——基线迁移至 0.1.2-rc.1 API 面（单臂消费 0.1.2 API，0.1.1-rc.2 运行臂已退役），全量构建测试通过；设置卡自本版起只挂 0.1.7-alpha.1 起的 Plugins 页 `plugins.item` 席位（随 `configForms.whileServed` 在宿主服务 `context-guard` 命名空间时挂载，独立安装、toolbox 家族 bundle、模式包同一张卡），此线不再呈现卡片，composer 按钮不受影响；minHost 前移至 0.1.2-rc.1，旧宿主请停留在旧发布线。
+- 0.1.6-alpha.2 预发布线（`@deepseek-ai/dsh@0.1.6-alpha.2`）：⚠️ 按钮完整、设置卡缺位——`plugins.item` 槽已在，但 `whileServed` 门控随 0.1.7-alpha.1 落地，此线不挂卡；0.1.5 的旧 `settings.plugin.item` 席位已随宿主删除一并退役，minHost 不动。
+- 源码线（deepseek-harness master）：✅（verifiedHost: 0.2.1-rc.1）——host-021 波对 0.2.1-rc.1 树全量 build+test 绿，无其它表面变化。
 
 **版本线对照**：0.2.0 起支持宿主 `0.1.2-rc.1` 及以后；宿主 `0.1.0-rc.6` ~ `0.1.1-rc.2` 的用户请停留在 0.1.x 发布线（末版 `0.1.0`）。
 
@@ -81,7 +81,7 @@ plugins:
 
 对模型没有任何变化：点击执行的是与用户手动输入相同的 `/compact`，会话日志里也是同样的命令生命周期。插件本身无 token 与 KV 缓存影响。
 
-`/client` 导出即插件本体（`apply`/`inject`）与 `CompactGuardButtonProps` / `ContextGuardSettingsCardProps` 类型。
+`/client` 导出即插件本体（`apply`/`inject`）与 `CompactGuardButtonProps` / `ContextGuardBundleConfigProps` 类型。
 
 </details>
 

package/lib/client.js

@@ -10,8 +10,9 @@ window.__ModuleLoader__.load({
 		/**
 		* The settings namespace owned by the context-guard plugin. Plain string so
 		* both the host half (settings registration) and the browser half
-		* (settingsScope binding and the 0.1.5 settings.plugin.item card key) import
-		* it without dragging host-only dependencies into the client bundle.
+		* (settingsScope binding, the whileServed gate, and the plugins.item entry
+		* id) import it without dragging host-only dependencies into the client
+		* bundle.
 		*/
 		/** Settings namespace owned by the context-guard plugin. */
 		const CONTEXT_GUARD_NS = "context-guard";
@@ -147,20 +148,6 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/client/icons.tsx
-		const IconChevronDownOutlineMedium = ({ size = 14, className }) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("svg", {
-			width: size,
-			height: size,
-			className,
-			viewBox: "0 0 16 16",
-			fill: "none",
-			xmlns: "http://www.w3.org/2000/svg",
-			"aria-hidden": "true",
-			strokeWidth: 1.3,
-			children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("path", {
-				d: "M4 6L7.29289 9.29289C7.68342 9.68342 8.31658 9.68342 8.70711 9.29289L12 6",
-				stroke: "currentColor"
-			})
-		});
 		const IconWarningOutlineMedium = ({ size = 16, className }) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("svg", {
 			width: size,
 			height: size,
@@ -220,9 +207,9 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var CompactGuardButton_module_css_default = {
-			"icon": "BFFw2a_icon",
-			"button": "BFFw2a_button",
 			"wrap": "BFFw2a_wrap",
+			"button": "BFFw2a_button",
+			"icon": "BFFw2a_icon",
 			"warning": "BFFw2a_warning",
 			"error": "BFFw2a_error"
 		};
@@ -302,30 +289,30 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var SettingsCard_module_css_default = {
-			"fieldHead": "DKjZXq_fieldHead",
-			"headText": "DKjZXq_headText",
-			"chevron": "DKjZXq_chevron",
-			"inputRow": "DKjZXq_inputRow",
-			"hint": "DKjZXq_hint",
-			"saved": "DKjZXq_saved",
-			"header": "DKjZXq_header",
 			"description": "DKjZXq_description",
+			"header": "DKjZXq_header",
+			"chevron": "DKjZXq_chevron",
 			"name": "DKjZXq_name",
-			"body": "DKjZXq_body",
-			"errorText": "DKjZXq_errorText",
-			"field": "DKjZXq_field",
 			"reset": "DKjZXq_reset",
+			"cardOpen": "DKjZXq_cardOpen",
+			"chevronOpen": "DKjZXq_chevronOpen",
+			"saved": "DKjZXq_saved",
 			"fieldName": "DKjZXq_fieldName",
+			"card": "DKjZXq_card",
+			"field": "DKjZXq_field",
+			"body": "DKjZXq_body",
+			"hint": "DKjZXq_hint",
+			"fieldHead": "DKjZXq_fieldHead",
 			"status": "DKjZXq_status",
-			"cardOpen": "DKjZXq_cardOpen",
+			"footer": "DKjZXq_footer",
+			"errorText": "DKjZXq_errorText",
 			"inputInvalid": "DKjZXq_inputInvalid",
-			"save": "DKjZXq_save",
-			"card": "DKjZXq_card",
+			"inputRow": "DKjZXq_inputRow",
 			"badge": "DKjZXq_badge",
-			"input": "DKjZXq_input",
-			"footer": "DKjZXq_footer",
 			"secondary": "DKjZXq_secondary",
-			"chevronOpen": "DKjZXq_chevronOpen"
+			"headText": "DKjZXq_headText",
+			"save": "DKjZXq_save",
+			"input": "DKjZXq_input"
 		};
 		//#endregion
 		//#region src/client/SettingsCard.tsx
@@ -493,51 +480,11 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/**
-		* The context-guard settings card in the 0.1.5 plugin configuration tab: the
-		* same collapsible chrome the official plugin cards use (a header naming the
-		* plugin and what its settings govern, disclosing the controls in place),
-		* re-implemented here because the client bundle-purity gate forbids
-		* value-importing the official card chrome.
-		*/
-		function ContextGuardSettingsCard({ useConfig, scope, t }) {
-			const snapshot = useConfig((value) => value);
-			const value = snapshot.status === "ready" ? snapshot.value : void 0;
-			const [open, setOpen] = (0, react.useState)(false);
-			const draft = useThresholdDraft(scope, snapshot, value);
-			if (snapshot.status === "unavailable") return null;
-			const title = t("settings.title");
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
-				className: open ? `${SettingsCard_module_css_default.card} ${SettingsCard_module_css_default.cardOpen}` : SettingsCard_module_css_default.card,
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
-					type: "button",
-					className: SettingsCard_module_css_default.header,
-					"aria-expanded": open,
-					"aria-label": `${t(open ? "settings.collapse" : "settings.expand")}: ${title}`,
-					onClick: () => {
-						setOpen(!open);
-					},
-					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-						className: SettingsCard_module_css_default.headText,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: SettingsCard_module_css_default.name,
-							children: title
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: SettingsCard_module_css_default.description,
-							children: t("settings.description")
-						})]
-					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(IconChevronDownOutlineMedium, { className: open ? `${SettingsCard_module_css_default.chevron} ${SettingsCard_module_css_default.chevronOpen}` : SettingsCard_module_css_default.chevron })]
-				}), open && value !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SettingsBody, {
-					snapshot,
-					draft,
-					t
-				})]
-			});
-		}
-		/**
-		* The bundle's configuration on the alpha.2 Plugins page
-		* (`plugins.bundle.config`, keyed by package name): the page draws the title,
-		* the icon, and the crumb itself, so the entry renders the one-liner for the
-		* `summary` view and the bare form — with its own save control — for `page`.
+		* The context-guard settings card on the Plugins page (the `plugins.item`
+		* entry client/index.ts registers while the Host serves the namespace): the
+		* page draws the title, the icon, and the crumb itself, so the entry renders
+		* the one-liner for the `summary` view and the bare form — with its own save
+		* control — for `page`.
 		*/
 		function ContextGuardBundleConfig({ view, useConfig, scope, t }) {
 			const snapshot = useConfig((value) => value);
@@ -557,12 +504,6 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/index.ts
 		/**
-		* This bundle's package name — the key the Plugins page dispatches
-		* `plugins.bundle.config` entries on (identity triangle: cordis.patch.yml,
-		* tsdown.config.ts, invariant.ts).
-		*/
-		const PACKAGE_NAME = "@khorsheed/dsh-context-guard";
-		/**
 		* Required services: the slot ledger, the command Remote, and the copy. The
 		* settings scope is deliberately NOT injected — rc.1 and 0.1.5 name different
 		* services (`configForms` vs `settingsScope`), and a composition without
@@ -604,34 +545,22 @@ window.__ModuleLoader__.load({
 					hooks: { config: scope }
 				})
 			}, CompactGuardButton));
-			ctx.slots.inject("plugins.bundle.config", () => ctx.slots.register({
-				name: "plugins.bundle.config",
-				key: PACKAGE_NAME,
-				locale: NS,
-				inject: () => ({
-					scope,
-					hooks: { config: scope }
-				})
-			}, ContextGuardBundleConfig));
-			ctx.slots.inject("plugins.row.config", () => ctx.slots.register({
-				name: "plugins.row.config",
-				key: "@khorsheed/dsh-bundle-conversation-toolbox#context-guard",
-				locale: NS,
-				inject: () => ({
-					scope,
-					hooks: { config: scope }
-				})
-			}, ContextGuardBundleConfig));
-			const legacy = ctx.slots;
-			legacy.inject("settings.plugin.item", () => legacy.register({
-				name: "settings.plugin.item",
-				key: CONTEXT_GUARD_NS,
-				locale: NS,
-				inject: () => ({
-					scope,
-					hooks: { config: scope }
-				})
-			}, ContextGuardSettingsCard));
+			const t = ctx.locale.bind(NS);
+			ctx.inject(["configForms"], (formsCtx) => {
+				const forms = formsCtx.configForms;
+				if (typeof forms.whileServed !== "function") return;
+				return forms.whileServed([CONTEXT_GUARD_NS], () => ctx.slots.inject("plugins.item", () => ctx.slots.register({
+					name: "plugins.item",
+					id: CONTEXT_GUARD_NS,
+					order: 100,
+					label: () => t("settings.title"),
+					locale: NS,
+					inject: () => ({
+						scope,
+						hooks: { config: scope }
+					})
+				}, ContextGuardBundleConfig)));
+			});
 		}
 		//#endregion
 		exports.NS = NS;

package/lib/index.js

@@ -3,8 +3,9 @@ import z from "@deepseek-ai/schemastery";
 /**
 * The settings namespace owned by the context-guard plugin. Plain string so
 * both the host half (settings registration) and the browser half
-* (settingsScope binding and the 0.1.5 settings.plugin.item card key) import
-* it without dragging host-only dependencies into the client bundle.
+* (settingsScope binding, the whileServed gate, and the plugins.item entry
+* id) import it without dragging host-only dependencies into the client
+* bundle.
 */
 /** Settings namespace owned by the context-guard plugin. */
 const CONTEXT_GUARD_NS = "context-guard";

package/lib/types/client/SettingsCard.d.ts

@@ -1,17 +1,10 @@
-import type { ContextGuardBundleConfigProps, ContextGuardSettingsCardProps } from './slots.ts';
+import type { ContextGuardBundleConfigProps } from './slots.ts';
 /**
- * The context-guard settings card in the 0.1.5 plugin configuration tab: the
- * same collapsible chrome the official plugin cards use (a header naming the
- * plugin and what its settings govern, disclosing the controls in place),
- * re-implemented here because the client bundle-purity gate forbids
- * value-importing the official card chrome.
- */
-export declare function ContextGuardSettingsCard({ useConfig, scope, t }: ContextGuardSettingsCardProps): import("react").JSX.Element | null;
-/**
- * The bundle's configuration on the alpha.2 Plugins page
- * (`plugins.bundle.config`, keyed by package name): the page draws the title,
- * the icon, and the crumb itself, so the entry renders the one-liner for the
- * `summary` view and the bare form — with its own save control — for `page`.
+ * The context-guard settings card on the Plugins page (the `plugins.item`
+ * entry client/index.ts registers while the Host serves the namespace): the
+ * page draws the title, the icon, and the crumb itself, so the entry renders
+ * the one-liner for the `summary` view and the bare form — with its own save
+ * control — for `page`.
  */
 export declare function ContextGuardBundleConfig({ view, useConfig, scope, t }: ContextGuardBundleConfigProps): import("react").JSX.Element | null;
 //# sourceMappingURL=SettingsCard.d.ts.map

package/lib/types/client/SettingsCard.js

@@ -1,6 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useRef, useState } from 'react';
-import { IconChevronDownOutlineMedium } from './icons.js';
 import css from './SettingsCard.module.css';
 /** Parse a draft into a number, or NaN when it is not one. */
 function parseNumber(text) {
@@ -91,27 +90,11 @@ function SettingsBody({ snapshot, draft, t }) {
     return (_jsxs("div", { className: css.body, children: [_jsxs("label", { className: css.field, children: [_jsxs("span", { className: css.fieldHead, children: [_jsx("span", { className: css.fieldName, children: t('settings.field.threshold') }), overridden(snapshot, 'thresholdRatio') && _jsx("span", { className: css.badge, children: t('settings.overridden') })] }), _jsxs("span", { className: css.inputRow, children: [_jsx("input", { className: draft.threshold.invalid ? `${css.input} ${css.inputInvalid}` : css.input, type: "number", step: "0.01", min: "0.01", max: "1", value: draft.threshold.text, "aria-label": t('settings.field.threshold'), onChange: (event) => { draft.write({ text: event.target.value, invalid: false }, 0.01, 1); } }), _jsx("button", { type: "button", className: css.reset, onClick: draft.reset, children: t('settings.reset') })] }), _jsx("span", { className: css.hint, children: t('settings.field.threshold.hint') })] }), _jsxs("span", { className: css.footer, children: [_jsxs("span", { className: css.status, children: [draft.saved ? _jsx("span", { className: css.saved, children: t('settings.saved') }) : null, draft.error ? _jsx("span", { className: css.errorText, children: t('settings.error') }) : null] }), _jsx("button", { type: "button", className: css.secondary, disabled: !draft.dirty, onClick: draft.discard, children: t('settings.discard') }), _jsx("button", { type: "button", className: css.save, disabled: !draft.dirty || draft.threshold.invalid || snapshot.writable !== true, onClick: draft.save, children: t('settings.save') })] })] }));
 }
 /**
- * The context-guard settings card in the 0.1.5 plugin configuration tab: the
- * same collapsible chrome the official plugin cards use (a header naming the
- * plugin and what its settings govern, disclosing the controls in place),
- * re-implemented here because the client bundle-purity gate forbids
- * value-importing the official card chrome.
- */
-export function ContextGuardSettingsCard({ useConfig, scope, t }) {
-    const snapshot = useConfig(value => value);
-    const value = snapshot.status === 'ready' ? snapshot.value : undefined;
-    const [open, setOpen] = useState(false);
-    const draft = useThresholdDraft(scope, snapshot, value);
-    if (snapshot.status === 'unavailable')
-        return null;
-    const title = t('settings.title');
-    return (_jsxs("li", { className: open ? `${css.card} ${css.cardOpen}` : css.card, children: [_jsxs("button", { type: "button", className: css.header, "aria-expanded": open, "aria-label": `${t(open ? 'settings.collapse' : 'settings.expand')}: ${title}`, onClick: () => { setOpen(!open); }, children: [_jsxs("span", { className: css.headText, children: [_jsx("span", { className: css.name, children: title }), _jsx("span", { className: css.description, children: t('settings.description') })] }), _jsx(IconChevronDownOutlineMedium, { className: open ? `${css.chevron} ${css.chevronOpen}` : css.chevron })] }), open && value !== undefined && _jsx(SettingsBody, { snapshot: snapshot, draft: draft, t: t })] }));
-}
-/**
- * The bundle's configuration on the alpha.2 Plugins page
- * (`plugins.bundle.config`, keyed by package name): the page draws the title,
- * the icon, and the crumb itself, so the entry renders the one-liner for the
- * `summary` view and the bare form — with its own save control — for `page`.
+ * The context-guard settings card on the Plugins page (the `plugins.item`
+ * entry client/index.ts registers while the Host serves the namespace): the
+ * page draws the title, the icon, and the crumb itself, so the entry renders
+ * the one-liner for the `summary` view and the bare form — with its own save
+ * control — for `page`.
  */
 export function ContextGuardBundleConfig({ view, useConfig, scope, t }) {
     const snapshot = useConfig(value => value);

package/lib/types/client/index.d.ts

@@ -4,14 +4,11 @@
  * tool row that appears automatically when the next request's budget
  * (`contextPressure.projectedTokens` + the output budget) crosses
  * `thresholdRatio` of the routed model's context window — plus one settings
- * surface editing the same number live: a standalone install renders the
- * bundle's own configuration on its Plugins-page detail view
- * (`plugins.bundle.config`, keyed by package name), a family-bundle install
- * renders the same card through the row-level configure entry on the
- * BUNDLE's detail view (`plugins.row.config`, keyed
- * `@khorsheed/dsh-bundle-conversation-toolbox#context-guard`), and 0.1.5
- * renders the `settings.plugin.item` card in the plugin configuration tab
- * (keyed by the settings namespace). The action
+ * card editing the same number live: a `plugins.item` entry on the Plugins
+ * page gated by `configForms.whileServed` on the `context-guard` namespace
+ * (the official companion convention), so every install shape — standalone,
+ * the basic bundle, a mode pack — surfaces the same card, and
+ * a composition without the row shows no trace of it. The action
  * rides the official `/compact` command
  * channel (`remote.commands.execute` → host `ctx.commands` →
  * `ctx.compaction.compactNow`); the config rides the official settings
@@ -41,7 +38,7 @@ export type { ContextGuardKey } from './locales.ts';
 export { guardReading } from './guard.ts';
 export type { GuardInput, GuardLevel, GuardReading } from './guard.ts';
 export type { GuardScope, GuardScopeSnapshot } from './scope.ts';
-export type { CompactGuardButtonProps, ContextGuardBundleConfigProps, ContextGuardInjected, ContextGuardSettingsCardInjected, ContextGuardSettingsCardProps, } from './slots.ts';
+export type { CompactGuardButtonProps, ContextGuardBundleConfigProps, ContextGuardInjected, ContextGuardSettingsCardInjected, } from './slots.ts';
 /** Dictionary namespace owned by this plugin. */
 export { NS };
 /**

package/lib/types/client/index.js

@@ -3,17 +3,11 @@ import { resolveConfig } from './config.js';
 import { en, NS, zh } from './locales.js';
 import { bindGuardScope, GuardScopeChannel } from './scope.js';
 import { CompactGuardButton } from './CompactGuardButton.js';
-import { ContextGuardBundleConfig, ContextGuardSettingsCard } from './SettingsCard.js';
+import { ContextGuardBundleConfig } from './SettingsCard.js';
 export { resolveConfig } from './config.js';
 export { guardReading } from './guard.js';
 /** Dictionary namespace owned by this plugin. */
 export { NS };
-/**
- * This bundle's package name — the key the Plugins page dispatches
- * `plugins.bundle.config` entries on (identity triangle: cordis.patch.yml,
- * tsdown.config.ts, invariant.ts).
- */
-const PACKAGE_NAME = '@khorsheed/dsh-context-guard';
 /**
  * Required services: the slot ledger, the command Remote, and the copy. The
  * settings scope is deliberately NOT injected — rc.1 and 0.1.5 name different
@@ -60,44 +54,34 @@ export function apply(ctx, config) {
             hooks: { config: scope },
         }),
     }, CompactGuardButton));
-    // The settings surface follows the host line AND the install shape — three
-    // tracks, all riding slots.inject so each fires only where its declaration
-    // exists. Standalone install: the package's own Plugins-page detail view
-    // (`plugins.bundle.config`, keyed by package name). Installed as a
-    // conversation-toolbox member: the member is no longer the profile's
-    // direct dependency, so only the bundle gets a detail view — the card rides
-    // the row-level slot (`plugins.row.config`, keyed `<bundle package>#<row
-    // id>` with the row id the bundle's patch declares) and the bundle's page
-    // gains a configure entry opening it. 0.1.5: the legacy
-    // configurable-plugins tab card (`settings.plugin.item`, keyed by the
-    // settings namespace) through a string-keyed duck narrow of the same
-    // service (the slot name is gone from the alpha.2 SlotMap).
-    ctx.slots.inject('plugins.bundle.config', () => ctx.slots.register({
-        name: 'plugins.bundle.config',
-        key: PACKAGE_NAME,
-        locale: NS,
-        inject: () => ({
-            scope,
-            hooks: { config: scope },
-        }),
-    }, ContextGuardBundleConfig));
-    ctx.slots.inject('plugins.row.config', () => ctx.slots.register({
-        name: 'plugins.row.config',
-        key: '@khorsheed/dsh-bundle-conversation-toolbox#context-guard',
-        locale: NS,
-        inject: () => ({
-            scope,
-            hooks: { config: scope },
-        }),
-    }, ContextGuardBundleConfig));
-    const legacy = ctx.slots;
-    legacy.inject('settings.plugin.item', () => legacy.register({
-        name: 'settings.plugin.item',
-        key: CONTEXT_GUARD_NS,
-        locale: NS,
-        inject: () => ({
-            scope,
-            hooks: { config: scope },
-        }),
-    }, ContextGuardSettingsCard));
+    // One Plugins-page card gated on the SERVED NAMESPACE, never on the install
+    // shape: whichever composition carries the `context-guard` row — standalone,
+    // the basic bundle, or a mode pack — serves the row's
+    // volatile Config under the row id, and `whileServed` keeps the
+    // `plugins.item` entry alive for exactly that span (the official companion
+    // convention), so a composition without the row shows no trace of the card.
+    // This replaces the retired per-shape seats: `plugins.row.config` hardcoded
+    // one carrier bundle into its key, and the host deleted
+    // `settings.plugin.item`. The probe rides a deferred inject because
+    // configForms exists only on the alpha.2+ host line; a 0.1.5 host never
+    // fires it, and a configForms predating whileServed (0.1.6-alpha.2) skips
+    // the card.
+    const t = ctx.locale.bind(NS);
+    ctx.inject(['configForms'], (formsCtx) => {
+        const forms = formsCtx.configForms;
+        if (typeof forms.whileServed !== 'function')
+            return;
+        return forms.whileServed([CONTEXT_GUARD_NS], () => ctx.slots.inject('plugins.item', () => ctx.slots.register({
+            name: 'plugins.item',
+            id: CONTEXT_GUARD_NS,
+            // Community cards sort after the official settings pages (orders 10-40).
+            order: 100,
+            label: () => t('settings.title'),
+            locale: NS,
+            inject: () => ({
+                scope,
+                hooks: { config: scope },
+            }),
+        }, ContextGuardBundleConfig)));
+    });
 }

package/lib/types/client/slots.d.ts

@@ -1,13 +1,10 @@
 /**
  * Slot-facing types of the context-guard client half: the injected faces of
- * the composer-tool-row compact button and the settings surfaces, both
- * carrying the shared `context-guard` settings scope as a hooks source so the
- * button and the card react to the same live section. The settings surface
- * has one face per host line: the alpha.2 Plugins page renders the bundle's
- * configuration (`plugins.bundle.config`, keyed by package name, owner prop
- * `view`); the 0.1.5 configurable-plugins tab renders the card
- * (`settings.plugin.item`, keyed by the settings namespace, owner props
- * intentionally empty — the structural type below is exact).
+ * the composer-tool-row compact button and the settings card, both carrying
+ * the shared `context-guard` settings scope as a hooks source so the button
+ * and the card react to the same live section. The settings surface is the
+ * Plugins page's `plugins.item` entry (owner prop `view`), registered by
+ * client/index.ts while the Host serves the `context-guard` namespace.
  */
 import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
 import type { GuardScope } from './scope.ts';
@@ -29,7 +26,7 @@ export interface ContextGuardInjected {
 }
 /** Full props of the composer-tool-row compact entry. */
 export type CompactGuardButtonProps = PropsRuntime<'conversation.input.right'> & InjectFace<ContextGuardInjected> & PropsLocale<'context-guard'>;
-/** Injected face of both settings surfaces: the same shared section, read and written here. */
+/** Injected face of the settings card: the same shared section, read and written here. */
 export interface ContextGuardSettingsCardInjected {
     /** The live section handle; the card stages edits and writes through it on save. */
     scope: GuardScope;
@@ -38,13 +35,6 @@ export interface ContextGuardSettingsCardInjected {
         config: GuardScope;
     };
 }
-/**
- * Full props of the 0.1.5 settings.plugin.item card entry. The removed slot's
- * owner share was intentionally empty, so the props are the injected face and
- * the locale seat alone; the registration goes through a duck-typed narrow of
- * the slots service (see client/index.ts).
- */
-export type ContextGuardSettingsCardProps = InjectFace<ContextGuardSettingsCardInjected> & PropsLocale<'context-guard'>;
-/** Full props of the alpha.2 plugins.bundle.config entry (owner prop `view`). */
-export type ContextGuardBundleConfigProps = PropsRuntime<'plugins.bundle.config'> & InjectFace<ContextGuardSettingsCardInjected> & PropsLocale<'context-guard'>;
+/** Full props of the plugins.item card entry (owner prop `view`). */
+export type ContextGuardBundleConfigProps = PropsRuntime<'plugins.item'> & InjectFace<ContextGuardSettingsCardInjected> & PropsLocale<'context-guard'>;
 //# sourceMappingURL=slots.d.ts.map

package/lib/types/index.js

@@ -38,8 +38,8 @@ export function apply(ctx, config = {}) {
             return;
         }
         // rc.1: the entry's own Config (above) is the served form. Keep the
-        // auto-generated page out of the settings tree — the bundle's own cards
-        // (plugins.bundle.config / the legacy tab seat) edit the same field.
+        // auto-generated page out of the settings tree — the bundle's own
+        // Plugins-page card (plugins.item) edits the same field.
         if (typeof settings.configure === 'function')
             settings.configure({ auto: false }, ctx.fiber);
     });

package/lib/types/namespace.d.ts

@@ -1,8 +1,9 @@
 /**
  * The settings namespace owned by the context-guard plugin. Plain string so
  * both the host half (settings registration) and the browser half
- * (settingsScope binding and the 0.1.5 settings.plugin.item card key) import
- * it without dragging host-only dependencies into the client bundle.
+ * (settingsScope binding, the whileServed gate, and the plugins.item entry
+ * id) import it without dragging host-only dependencies into the client
+ * bundle.
  */
 /** Settings namespace owned by the context-guard plugin. */
 export declare const CONTEXT_GUARD_NS = "context-guard";

package/lib/types/namespace.js

@@ -1,8 +1,9 @@
 /**
  * The settings namespace owned by the context-guard plugin. Plain string so
  * both the host half (settings registration) and the browser half
- * (settingsScope binding and the 0.1.5 settings.plugin.item card key) import
- * it without dragging host-only dependencies into the client bundle.
+ * (settingsScope binding, the whileServed gate, and the plugins.item entry
+ * id) import it without dragging host-only dependencies into the client
+ * bundle.
  */
 /** Settings namespace owned by the context-guard plugin. */
 export const CONTEXT_GUARD_NS = 'context-guard';

package/package.json

@@ -8,7 +8,7 @@
     "context",
     "compaction"
   ],
-  "version": "0.2.4",
+  "version": "0.2.6",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",
@@ -17,10 +17,6 @@
       "types": "./lib/types/index.d.ts",
       "default": "./lib/index.js"
     },
-    "./invariant": {
-      "types": "./lib/types/invariant.d.ts",
-      "default": "./lib/invariant.js"
-    },
     "./client": {
       "types": "./lib/types/client/index.d.ts",
       "default": "./lib/client.js"
@@ -30,9 +26,6 @@
     "./locale/*.json": "./locale/*.json"
   },
   "dsh": {
-    "references": [
-      "@khorsheed/dsh-bundle-conversation-toolbox"
-    ],
     "bundle": {
       "patch": "./cordis.patch.yml"
     },
@@ -48,20 +41,23 @@
     },
     "compat": {
       "minHost": "0.1.2-rc.1",
-      "verifiedHost": "0.1.2-rc.1"
+      "verifiedHost": "0.2.1-rc.1",
+      "notes": "The settings card mounts only on host 0.1.7-alpha.1+ (the Plugins page plugins.item seat, gated by configForms.whileServed on the served context-guard namespace); older lines render the composer button only."
     }
   },
   "license": "MIT",
+  "engines": {
+    "dsh": ">=0.1.2-rc.1 <0.3.0-0"
+  },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-api-remotes": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.6 || ^0.2.0-rc.1",
-    "@deepseek-ai/dsh-token-meter": "^0.1.0-rc.6 || ^0.2.0-rc.1",
+    "@deepseek-ai/dsh-api-remotes": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
+    "@deepseek-ai/dsh-token-meter": "^0.1.0-rc.6 || ^0.2.0-rc.1 || ^0.2.1-rc.1",
     "react": "^18.2.0"
   },
   "files": [

package/lib/invariant.js

@@ -1,26 +0,0 @@
-//#region lib/types/invariant.js
-/**
-* Package-owned invariant companion for `@khorsheed/dsh-context-guard`.
-* @module @khorsheed/dsh-context-guard/invariant
-*/
-const PACKAGE_NAME = "@khorsheed/dsh-context-guard";
-/** Cordis companion plugin name. */
-const name = "context-guard-invariant";
-/** Service required before the companion can reserve package ownership. */
-const inject = ["invariants"];
-/**
-* No runtime invariant: every compact action is executed through the official
-* `/compact` command channel, whose command-log invariant companion audits the
-* command lifecycle, and the plugin's one composer-tool-row entry proves
-* disposal through the browser-plugin spec. No second authority exists to
-* check at runtime.
-*/
-const install = () => {};
-/**
-* Register this package's invariant companion.
-* @param ctx - Cordis context carrying the invariant service.
-* @returns the installed registration's disposer after setup succeeds.
-*/
-const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
-//#endregion
-export { apply, inject, name };

package/lib/types/invariant.d.ts

@@ -1,16 +0,0 @@
-/**
- * Package-owned invariant companion for `@khorsheed/dsh-context-guard`.
- * @module @khorsheed/dsh-context-guard/invariant
- */
-import type { Context } from '@deepseek-ai/cordis';
-/** Cordis companion plugin name. */
-export declare const name = "context-guard-invariant";
-/** Service required before the companion can reserve package ownership. */
-export declare const inject: string[];
-/**
- * Register this package's invariant companion.
- * @param ctx - Cordis context carrying the invariant service.
- * @returns the installed registration's disposer after setup succeeds.
- */
-export declare const apply: (ctx: Context) => Promise<() => void>;
-//# sourceMappingURL=invariant.d.ts.map

package/lib/types/invariant.js

@@ -1,24 +0,0 @@
-/**
- * Package-owned invariant companion for `@khorsheed/dsh-context-guard`.
- * @module @khorsheed/dsh-context-guard/invariant
- */
-const PACKAGE_NAME = '@khorsheed/dsh-context-guard';
-/** Cordis companion plugin name. */
-export const name = 'context-guard-invariant';
-/** Service required before the companion can reserve package ownership. */
-export const inject = ['invariants'];
-/**
- * No runtime invariant: every compact action is executed through the official
- * `/compact` command channel, whose command-log invariant companion audits the
- * command lifecycle, and the plugin's one composer-tool-row entry proves
- * disposal through the browser-plugin spec. No second authority exists to
- * check at runtime.
- */
-const install = () => { };
-/**
- * Register this package's invariant companion.
- * @param ctx - Cordis context carrying the invariant service.
- * @returns the installed registration's disposer after setup succeeds.
- */
-export const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
-/* jscpd:ignore-end */