@sparkelf/dsh-plugin-dataops 0.1.0-rc.9 → 0.2.0-rc.10

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/plus/dataops/README.md
-README.md: c843fd3c7aac7ea489b5311e4c3c50e8498cab94
-README.zh.md: 10fa42ed24dc8f8295dbe785a234ded025fcb1a4
+README.md: 204f52df89c185f63099a532a57f6717ee188dc2
+README.zh.md: b7a00c943b5551cef44150fcd1672e11e362f744

package/README.md

@@ -23,7 +23,7 @@ This complete Host and Client plugin owns one DataOps target identity, browser A
 <a id="use-this-package"></a>
 ## Use this package
 
-Set `DSH_DATAOPS_BASE_URL` to the DataOps Web origin that serves both `/auth/dsh/authorize` and proxied `/api`; `DSH_DATAOPS_CALLBACK_ORIGIN` optionally names a non-loopback DSH browser origin. The package stores the delegated access token and stable target identity under `dataops_access_token` and `dataops_target_ref`; DataOps ties the token lifetime to its authenticated browser session. When the current grant expires or its browser session is revoked, the DataOps Client contribution raises a DSH shell modal with **Later** and **Sign in again**; the latter opens the real OAuth popup from the user gesture. Settings also distinguishes the rejected stored grant from a never-connected state and keeps the same recovery action available. An authentication-rejected MCP call remains an error result inside the agent turn; it does not terminate the task, and Plus does not automatically replay an unconfirmed tool operation. Disconnect revokes account tokens but retains target identity. OAuth callback failures expose only a fixed, actionable stage in Settings; authorization codes, state, tokens, upstream bodies, and arbitrary error text remain outside the browser message.
+Set `DSH_DATAOPS_BASE_URL` to the DataOps Web origin that serves both `/auth/dsh/authorize` and proxied `/api`; `DSH_DATAOPS_CALLBACK_ORIGIN` optionally names a non-loopback DSH browser origin. The browser contribution registers only when Host plugin inventory reports the matching `plus-dataops` entry effectively enabled, so an installed package whose environment condition disables the Host stays inert instead of requesting absent routes. The package stores the delegated access token and stable target identity under `dataops_access_token` and `dataops_target_ref`; DataOps ties the token lifetime to its authenticated browser session. When the current grant expires or its browser session is revoked, the DataOps Client contribution raises a DSH shell modal with **Later** and **Sign in again**; the latter opens the real OAuth popup from the user gesture. Settings also distinguishes the rejected stored grant from a never-connected state and keeps the same recovery action available. An authentication-rejected MCP call remains an error result inside the agent turn; it does not terminate the task, and Plus does not automatically replay an unconfirmed tool operation. Disconnect revokes account tokens but retains target identity. OAuth callback failures expose only a fixed, actionable stage in Settings; authorization codes, state, tokens, upstream bodies, and arbitrary error text remain outside the browser message.
 
 -----
 
@@ -58,6 +58,7 @@ Connecting, disconnecting, or MCP discovery changes can alter the tool-schema pr
 
 This Dev Note is working context for maintainers; shipped behavior, limits, and rationale live in the sections above, the package code, and the linked Agent Note.
 
-- `src/index.ts` owns authorization, credentials, access expiry, and MCP child lifecycle. `src/client/store.ts` and `src/client/controller.ts` own shared browser status and OAuth lifecycle; `src/client/DataOpsExpiryModal.tsx` contributes the shell prompt and `src/client/DataOpsSection.tsx` contributes Settings. The [distribution Agent Note](../../../.agents/notes/proposed/architecture/2026-08-29-ranged-plus-patchset-distribution.md) records the package boundary.
+- `src/index.ts` owns authorization, credentials, access expiry, and MCP child lifecycle. `src/client/store.ts` and `src/client/controller.ts` own shared browser status and OAuth lifecycle; `src/client/DataOpsExpiryModal.tsx` contributes the shell prompt and `src/client/DataOpsSection.tsx` contributes Settings. The [distribution Agent Note](../../../.agents/notes/implemented/architecture/2026-08-29-ranged-plus-patchset-distribution.md) records the package boundary.
+- No runtime invariant companion is published because authorization and MCP child lifecycle are observed by their owning services; DataOps keeps no independent projection of those relationships.
 
 </details>

package/README.zh.md

@@ -23,7 +23,7 @@ kind: "package-reference"
 <a id="use-this-package"></a>
 ## 使用此软件包
 
-把`DSH_DATAOPS_BASE_URL`设为同时提供`/auth/dsh/authorize`及proxied `/api`的DataOps Web origin；`DSH_DATAOPS_CALLBACK_ORIGIN`可选指定non-loopback DSH browser origin。该package把delegated access token及stable target identity存入`dataops_access_token`与`dataops_target_ref`；DataOps把token lifetime绑定到authenticated browser session。Current grant过期或其browser session被revoke时，DataOps Client contribution会弹出带**稍后**与**重新登录**的DSH shell modal；后者从用户手势打开real OAuth popup。Settings也会把rejected stored grant与never-connected state区分，并保留同一个恢复动作。Authentication-rejected MCP call仍是agent turn内的error result，不会终止task；Plus不会自动重放结果未知的tool operation。Disconnect会revoke account tokens但保留target identity。OAuth callback failure只在Settings暴露固定、可操作的failure stage；authorization code、state、token、upstream body及任意error text不会进入browser message。
+把`DSH_DATAOPS_BASE_URL`设为同时提供`/auth/dsh/authorize`及proxied `/api`的DataOps Web origin；`DSH_DATAOPS_CALLBACK_ORIGIN`可选指定non-loopback DSH browser origin。Browser contribution仅在Host plugin inventory报告对应`plus-dataops` entry有效启用时注册；若环境条件禁用Host，已安装package保持inert，不请求不存在的route。该package把delegated access token及stable target identity存入`dataops_access_token`与`dataops_target_ref`；DataOps把token lifetime绑定到authenticated browser session。Current grant过期或其browser session被revoke时，DataOps Client contribution会弹出带**稍后**与**重新登录**的DSH shell modal；后者从用户手势打开real OAuth popup。Settings也会把rejected stored grant与never-connected state区分，并保留同一个恢复动作。Authentication-rejected MCP call仍是agent turn内的error result，不会终止task；Plus不会自动重放结果未知的tool operation。Disconnect会revoke account tokens但保留target identity。OAuth callback failure只在Settings暴露固定、可操作的failure stage；authorization code、state、token、upstream body及任意error text不会进入browser message。
 
 -----
 
@@ -58,6 +58,7 @@ Connecting、disconnecting或MCP discovery change可能改变tool-schema prefix
 
 该开发备注是maintainer working context；shipped behavior、limits及rationale以以上sections、package code及linked Agent Note为准。
 
-- `src/index.ts`持有authorization、credentials、access expiry及MCP child lifecycle。`src/client/store.ts`与`src/client/controller.ts`持有shared browser status及OAuth lifecycle；`src/client/DataOpsExpiryModal.tsx`贡献shell prompt，`src/client/DataOpsSection.tsx`贡献Settings。[Distribution Agent Note](../../../.agents/notes/proposed/architecture/2026-08-29-ranged-plus-patchset-distribution.zh.md)记录package boundary。
+- `src/index.ts`持有authorization、credentials、access expiry及MCP child lifecycle。`src/client/store.ts`与`src/client/controller.ts`持有shared browser status及OAuth lifecycle；`src/client/DataOpsExpiryModal.tsx`贡献shell prompt，`src/client/DataOpsSection.tsx`贡献Settings。[Distribution Agent Note](../../../.agents/notes/implemented/architecture/2026-08-29-ranged-plus-patchset-distribution.zh.md)记录package boundary。
+- 该package不发布`./invariant` companion，因为authorization与MCP child lifecycle由各自owner service观测；DataOps不保留这些relation的independent projection。
 
 </details>

package/lib/client.js

@@ -195,8 +195,8 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
-		//#region \0dsh-css:/home/runner/work/deepseek-harness-plus/deepseek-harness-plus/packages/plus/dataops/src/client/DataOpsSection.module.css.mjs
-		const css = ".-x0sCW_section{max-width:720px;color:var(--dsw-alias-label-primary);flex-direction:column;gap:12px;display:flex}.-x0sCW_title{margin:0;font-size:16px;font-weight:500;line-height:24px}.-x0sCW_body{flex-direction:column;gap:14px;display:flex}.-x0sCW_confirmCopy{color:var(--dsw-alias-label-tertiary);margin:0;font-size:14px;line-height:22px}.-x0sCW_statusRow,.-x0sCW_accountRow,.-x0sCW_actions,.-x0sCW_confirmActions{align-items:center;display:flex}.-x0sCW_statusRow{gap:8px;min-height:24px}.-x0sCW_statusLabel{min-width:0;font-size:14px;font-weight:500;line-height:22px}.-x0sCW_accountRow{background:var(--dsw-alias-interactive-bg-hover);border-radius:8px;gap:12px;padding:12px}.-x0sCW_avatar{background:var(--dsw-alias-interactive-bg-hover-solid);width:40px;height:40px;color:var(--dsw-alias-label-primary);border-radius:50%;flex:0 0 40px;place-items:center;font-size:14px;font-weight:600;display:grid}.-x0sCW_accountCopy{flex-direction:column;gap:1px;min-width:0;display:flex}.-x0sCW_accountCopy strong{text-overflow:ellipsis;white-space:nowrap;font-size:14px;font-weight:500;line-height:22px;overflow:hidden}.-x0sCW_accountCopy span{color:var(--dsw-alias-label-tertiary);text-overflow:ellipsis;white-space:nowrap;font-size:12px;line-height:18px;overflow:hidden}.-x0sCW_actions,.-x0sCW_confirmActions{flex-wrap:wrap;gap:8px}.-x0sCW_confirmBox{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-interactive-bg-hover);border-radius:8px;flex-direction:column;gap:10px;padding:12px;display:flex}.-x0sCW_confirmTitle{margin:0;font-size:14px;font-weight:500;line-height:22px}.-x0sCW_hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:18px}.-x0sCW_error{color:var(--dsw-alias-state-error-primary);margin:0;font-size:12px;line-height:18px}@media (width<=560px){.-x0sCW_actions>button,.-x0sCW_confirmActions>button{flex:auto}}";
+		//#region \0dsh-css:/root/projects/deepseek-harness-plus/packages/plus/dataops/src/client/DataOpsSection.module.css.mjs
+		const css = ".bkdB6a_section{max-width:720px;color:var(--dsw-alias-label-primary);flex-direction:column;gap:12px;display:flex}.bkdB6a_title{margin:0;font-size:16px;font-weight:500;line-height:24px}.bkdB6a_body{flex-direction:column;gap:14px;display:flex}.bkdB6a_confirmCopy{color:var(--dsw-alias-label-tertiary);margin:0;font-size:14px;line-height:22px}.bkdB6a_statusRow,.bkdB6a_accountRow,.bkdB6a_actions,.bkdB6a_confirmActions{align-items:center;display:flex}.bkdB6a_statusRow{gap:8px;min-height:24px}.bkdB6a_statusLabel{min-width:0;font-size:14px;font-weight:500;line-height:22px}.bkdB6a_accountRow{background:var(--dsw-alias-interactive-bg-hover);border-radius:8px;gap:12px;padding:12px}.bkdB6a_avatar{corner-shape:round;background:var(--dsw-alias-interactive-bg-hover-solid);width:40px;height:40px;color:var(--dsw-alias-label-primary);border-radius:50%;flex:0 0 40px;place-items:center;font-size:14px;font-weight:600;display:grid}.bkdB6a_accountCopy{flex-direction:column;gap:1px;min-width:0;display:flex}.bkdB6a_accountCopy strong{text-overflow:ellipsis;white-space:nowrap;font-size:14px;font-weight:500;line-height:22px;overflow:hidden}.bkdB6a_accountCopy span{color:var(--dsw-alias-label-tertiary);text-overflow:ellipsis;white-space:nowrap;font-size:12px;line-height:18px;overflow:hidden}.bkdB6a_actions,.bkdB6a_confirmActions{flex-wrap:wrap;gap:8px}.bkdB6a_confirmBox{border:1px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-interactive-bg-hover);border-radius:8px;flex-direction:column;gap:10px;padding:12px;display:flex}.bkdB6a_confirmTitle{margin:0;font-size:14px;font-weight:500;line-height:22px}.bkdB6a_hint{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:18px}.bkdB6a_error{color:var(--dsw-alias-state-error-primary);margin:0;font-size:12px;line-height:18px}@media (width<=560px){.bkdB6a_actions>button,.bkdB6a_confirmActions>button{flex:auto}}";
 		const tagId = "@sparkelf/dsh-plugin-dataops/DataOpsSection.module.css";
 		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
 			const tag = document.createElement("style");
@@ -206,21 +206,21 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var DataOpsSection_module_css_default = {
-			"accountCopy": "-x0sCW_accountCopy",
-			"accountRow": "-x0sCW_accountRow",
-			"actions": "-x0sCW_actions",
-			"avatar": "-x0sCW_avatar",
-			"body": "-x0sCW_body",
-			"confirmActions": "-x0sCW_confirmActions",
-			"confirmBox": "-x0sCW_confirmBox",
-			"confirmCopy": "-x0sCW_confirmCopy",
-			"confirmTitle": "-x0sCW_confirmTitle",
-			"error": "-x0sCW_error",
-			"hint": "-x0sCW_hint",
-			"section": "-x0sCW_section",
-			"statusLabel": "-x0sCW_statusLabel",
-			"statusRow": "-x0sCW_statusRow",
-			"title": "-x0sCW_title"
+			"accountCopy": "bkdB6a_accountCopy",
+			"accountRow": "bkdB6a_accountRow",
+			"actions": "bkdB6a_actions",
+			"avatar": "bkdB6a_avatar",
+			"body": "bkdB6a_body",
+			"confirmActions": "bkdB6a_confirmActions",
+			"confirmBox": "bkdB6a_confirmBox",
+			"confirmCopy": "bkdB6a_confirmCopy",
+			"confirmTitle": "bkdB6a_confirmTitle",
+			"error": "bkdB6a_error",
+			"hint": "bkdB6a_hint",
+			"section": "bkdB6a_section",
+			"statusLabel": "bkdB6a_statusLabel",
+			"statusRow": "bkdB6a_statusRow",
+			"title": "bkdB6a_title"
 		};
 		//#endregion
 		//#region lib/types/client/DataOpsExpiryModal.js
@@ -489,10 +489,18 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region lib/types/client/index.js
 		const NS = "settings.dataops";
-		/** Client services required for the Settings and frame-overlay contributions. */
-		const inject = ["slots", "locale"];
-		/** Register the shared DataOps lifecycle, Settings section, and expiry modal. */
-		function apply(ctx) {
+		/** Client services required for Host activation discovery, Settings, and frame overlays. */
+		const inject = [
+			"slots",
+			"locale",
+			"remote",
+			"remote.pluginInventory"
+		];
+		/** 仅在Host inventory确认对应plugin有效启用时注册browser contributions。 */
+		async function apply(ctx) {
+			const result = await ctx.remote.pluginInventory.list();
+			if (!result.ok) throw new Error(`pluginInventory.list failed: ${result.error.code}: ${result.error.message}`);
+			if (!result.value.entries.some((entry) => entry.moduleName === "@sparkelf/dsh-plugin-dataops" && entry.enabled)) return;
 			ctx.effect(() => ctx.locale.register(NS, {
 				zh,
 				en

package/lib/index.js

@@ -2,7 +2,7 @@ import { createHash, randomBytes } from "node:crypto";
 import { MAX_TIMER_DELAY_MS } from "@deepseek-ai/dsh-timeout";
 import z from "@deepseek-ai/schemastery";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
-import * as McpClient from "@sparkelf/dsh-plugin-mcp-credentials";
+import { Config as Config$1, apply as apply$1, inject as inject$1, name as name$1 } from "@sparkelf/dsh-plugin-mcp-credentials";
 //#region lib/types/index.js
 /**
 * Standalone DataOps MCP integration. It owns one persistent DSH target
@@ -10,6 +10,12 @@ import * as McpClient from "@sparkelf/dsh-plugin-mcp-credentials";
 * authenticated MCP client for the target's immutable principal.
 * @module @sparkelf/dsh-plugin-dataops
 */
+const McpClient = {
+	name: name$1,
+	inject: inject$1,
+	Config: Config$1,
+	apply: apply$1
+};
 /** Cordis plugin name for the standalone DataOps integration. */
 const name = "mcp-dataops";
 /** Services required by the standalone authorization and MCP composition. */

package/lib/types/client/index.d.ts

@@ -5,8 +5,8 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
         'settings.dataops': DataOpsKey;
     }
 }
-/** Client services required for the Settings and frame-overlay contributions. */
+/** Client services required for Host activation discovery, Settings, and frame overlays. */
 export declare const inject: string[];
-/** Register the shared DataOps lifecycle, Settings section, and expiry modal. */
-export declare function apply(ctx: Context): void;
+/** 仅在Host inventory确认对应plugin有效启用时注册browser contributions。 */
+export declare function apply(ctx: Context): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/package.json

@@ -1,92 +1,88 @@
 {
-  "name": "@sparkelf/dsh-plugin-dataops",
-  "description": "Standalone DataOps MCP integration with delegated browser authorization and Settings UI",
-  "version": "0.1.0-rc.9",
-  "publishConfig": {
-    "access": "public"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/SparkElf/deepseek-harness-plus.git",
-    "directory": "packages/plus/dataops"
+  "dependencies": {
+    "@deepseek-ai/schemastery": ">=3.18.1"
   },
-  "type": "module",
-  "main": "lib/index.js",
-  "types": "lib/types/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./lib/types/index.d.ts",
-      "default": "./lib/index.js"
-    },
-    "./client": {
-      "types": "./lib/types/client/index.d.ts",
-      "default": "./lib/client.js"
-    },
-    "./invariant": {
-      "types": "./lib/types/invariant.d.ts",
-      "default": "./lib/invariant.js"
-    },
-    "./package.json": "./package.json"
+  "description": "Standalone DataOps MCP integration with delegated browser authorization and Settings UI",
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-api-remotes": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-brand": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-connection": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-store": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-ui-layout": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-credentials": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-timeout": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-tools": "^0.1.6-alpha.1",
+    "@sparkelf/dsh-plugin-mcp-credentials": "^0.2.0-rc.10",
+    "@types/react": "~18.3.1",
+    "react": "^18.2.0"
   },
   "dsh": {
     "client": {
-      "platform": "web",
       "inject": [
+        "@deepseek-ai/dsh-api-remotes",
         "@deepseek-ai/dsh-client-connection",
         "@deepseek-ai/dsh-client-locale",
         "@deepseek-ai/dsh-client-ui-layout",
         "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-renderer"
-      ]
+      ],
+      "platform": "web"
     }
   },
+  "exports": {
+    ".": {
+      "default": "./lib/index.js",
+      "types": "./lib/types/index.d.ts"
+    },
+    "./client": {
+      "default": "./lib/client.js",
+      "types": "./lib/types/client/index.d.ts"
+    },
+    "./package.json": "./package.json"
+  },
   "files": [
     "lib/index.js",
-    "lib/invariant.js",
     "lib/client.js",
     "lib/types/**/*.d.ts"
   ],
   "license": "MIT",
+  "main": "lib/index.js",
+  "name": "@sparkelf/dsh-plugin-dataops",
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=4.0.1",
-    "@deepseek-ai/dsh-brand": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-connection": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-locale": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-layout": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-credentials": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-invariants": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-timeout": ">=0.1.2-alpha.1",
-    "@deepseek-ai/dsh-tools": ">=0.1.2-alpha.1",
-    "@sparkelf/dsh-plugin-mcp-credentials": ">=0.1.0-rc.9"
+    "@deepseek-ai/dsh-api-remotes": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-brand": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-connection": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-ui-layout": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-credentials": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-timeout": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-tools": "^0.1.6-alpha.1",
+    "@sparkelf/dsh-plugin-mcp-credentials": "^0.2.0-rc.10"
   },
-  "dependencies": {
-    "@deepseek-ai/schemastery": ">=3.18.1"
+  "publishConfig": {
+    "access": "public"
   },
-  "devDependencies": {
-    "@types/react": "~18.3.1",
-    "react": "^18.2.0",
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-brand": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-connection": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-store": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-layout": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-credentials": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-invariants": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-timeout": "^0.1.2-alpha.1",
-    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.1",
-    "@sparkelf/dsh-plugin-mcp-credentials": "^0.1.0-rc.9"
+  "repository": {
+    "directory": "packages/plus/dataops",
+    "type": "git",
+    "url": "git+https://github.com/deepseek-ai/deepseek-harness.git"
   },
   "scripts": {
     "bundle": "tsdown",
     "watch": "tsdown --watch"
-  }
-}
+  },
+  "type": "module",
+  "types": "lib/types/index.d.ts",
+  "version": "0.2.0-rc.10"
+}

package/lib/invariant.js

@@ -1,16 +0,0 @@
-//#region lib/types/invariant.js
-const PACKAGE_NAME = "@sparkelf/dsh-plugin-dataops";
-/** Cordis plugin name for the DataOps invariant companion. */
-const name = "mcp-dataops-invariant";
-/** Services required to register the package invariant installer. */
-const inject = ["invariants"];
-/** No runtime invariant: the package owns browser OAuth handoff and a child mcp-client fiber, not a separate durable projection. */
-const install = () => {};
-/**
-* Register the package's explained empty invariant installer.
-* @param ctx - Cordis context with the invariant registry.
-* @returns The registration disposer.
-*/
-const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
-//#endregion
-export { apply, inject, name };

package/lib/types/invariant.d.ts

@@ -1,13 +0,0 @@
-/** Package-owned invariant companion for `@sparkelf/dsh-plugin-dataops`. */
-import type { Context } from '@deepseek-ai/cordis';
-/** Cordis plugin name for the DataOps invariant companion. */
-export declare const name = "mcp-dataops-invariant";
-/** Services required to register the package invariant installer. */
-export declare const inject: string[];
-/**
- * Register the package's explained empty invariant installer.
- * @param ctx - Cordis context with the invariant registry.
- * @returns The registration disposer.
- */
-export declare const apply: (ctx: Context) => Promise<() => void>;
-//# sourceMappingURL=invariant.d.ts.map