dsh-context-compression-improved 0.2.1 → 0.3.0

package/docs/installation.ja.md

@@ -2,7 +2,9 @@
 
 > [English](installation.md) · [中文](installation.zh.md) · [日本語](installation.ja.md) · [한국어](installation.ko.md)
 
-このガイドでは、ソースからフォークをインストールします。このフォークはアップストリームに対して名前が変更されており（`dsh-context-compression-selector` → `dsh-context-compression-improved`）、まだ npm に公開されていません。ソースおよびセッションログに現れる `dsh-context-compression-improved-runtime` は凍結された来歴ラベルであり、パッケージ依存ではありません。実行時の依存は `@huggingface/tokenizers` と `js-yaml` のみです。
+このガイドではソースからフォークをインストールします。フォークはまだ npm に公開されておらず、
+パッケージ名は意図的に上流と同一です（`dsh-context-compression-improved` の単一パッケージで、
+以前は別パッケージだった runtime も同梱されます）。
 
 ## 前提条件
 
@@ -22,14 +24,14 @@ pnpm build
 
 `pnpm build` はすべてのパッケージの両方のライブラリ成果物をバンドルします（`tsdown`）。インストール前にフルスイートを実行したい場合は `pnpm test` を実行してください。
 
-## 2. Bundle エントリーパッケージを pack
+## 2. Bundle エントリーパッケージをpack
 
 selector パッケージが唯一の Bundle エントリーで、ランタイムはその正確なバージョン依存として付いてきます：
 
 ```sh
 cd packages/selector
 pnpm pack
-# → dsh-context-compression-improved-0.1.0.tgz
+# →dsh-context-compression-improved-0.1.0.tgz
 cd ../..
 ```
 
@@ -48,7 +50,7 @@ dsh --profile web --dump-config
 
 ## 4. コードスケルトンゲートを有効にする
 
-DeepSeek Harness の設定 → **Context compression selector** を開きます：
+DeepSeek Harness の設定→**Context compression selector** を開きます：
 
 1. 圧縮プロファイルを選択します（ゲートはすべてのプロファイルに対して直交します）。
 2. 必要に応じて Auto Compact トリガーレベルを調整します（50–90%、デフォルト 80%）。

package/docs/installation.ko.md

@@ -2,7 +2,9 @@
 
 > [English](installation.md) · [中文](installation.zh.md) · [日本語](installation.ja.md) · [한국어](installation.ko.md)
 
-이 가이드는 포크를 소스에서 설치하는 방법을 다룹니다. 이 포크는 업스트림에 대해 이름이 변경되었으며(`dsh-context-compression-selector` → `dsh-context-compression-improved`), 아직 npm에 게시되지 않았습니다. 소스와 세션 로그에 나타나는 `dsh-context-compression-improved-runtime`은 동결된 프로버넌스 라벨이며 패키지 의존성이 아닙니다. 런타임 의존성은 `@huggingface/tokenizers`와 `js-yaml`뿐입니다.
+이 가이드는 소스에서 포크를 설치합니다. 포크는 아직 npm에 게시되지 않았으며, 패키지 이름은
+의도적으로 업스트림과 동일합니다(`dsh-context-compression-improved` 단일 패키지이며,
+예전에 별도 패키지였던 runtime이 함께 포함됩니다).
 
 ## 사전 요구 사항
 
@@ -20,7 +22,7 @@ pnpm install --frozen-lockfile
 pnpm build
 ```
 
-`pnpm build`는 모든 패키지의 두 라이브러리 산출물을 번들합니다(`tsdown`). 설치 전에 전체 테스트 스위트를 실행하려면 `pnpm test`를 먼저 실행하세요.
+`pnpm build`는 모든 패키지의두라이브러리 산출물을 번들합니다(`tsdown`). 설치 전에 전체 테스트 스위트를 실행하려면 `pnpm test`를 먼저 실행하세요.
 
 ## 2. Bundle 엔트리 패키지를 pack
 
@@ -52,14 +54,14 @@ DeepSeek Harness 설정 → **Context compression selector**를 엽니다:
 
 1. 압축 프로파일을 선택합니다(게이트는 모든 프로파일에 대해 직교합니다).
 2. 필요하면 Auto Compact 트리거 레벨을 조정합니다(50–90%, 기본값 80%).
-3. **Code skeleton compression**을 **On**으로 설정합니다. 토글은 변경 시 저장됩니다.
+3. **Code skeleton compression**을 **On**으로 설정합니다. 토글은 변경시저장됩니다.
 
-다른 셀렉터 설정과 마찬가지로 값은 세션이 처음 관찰하는 시점에 고정됩니다 — 게이트는 새로 관찰된 세션에만 적용되며, 실행 중인 작업에는 적용되지 않습니다.
+다른 셀렉터 설정과 마찬가지로 값은 세션이 처음 관찰하는 시점에 고정됩니다—게이트는 새로 관찰된 세션에만 적용되며, 실행 중인 작업에는 적용되지 않습니다.
 
 ## 5. 업데이트 및 제거
 
 ```sh
-# 업데이트: pull, 재빌드, 재 pack, 새 tarball을 다시 추가
+# 업데이트: pull, 재빌드, 재pack, 새 tarball을 다시 추가
 git pull && pnpm install --frozen-lockfile && pnpm build
 cd packages/selector && pnpm pack && cd ../..
 dsh plugin --profile web add packages/selector/dsh-context-compression-improved-0.1.0.tgz
@@ -71,6 +73,6 @@ dsh plugin --profile web remove dsh-context-compression-improved
 ## 문제 해결
 
 - **덤프에 Bundle이 활성으로 표시되지 않음**: 프로파일을 재시작하고, 셀렉터 엔트리 패키지(런타임이 아닌)를 추가했는지, Harness 버전이 호환 peer 범위 내인지 확인하세요.
-- **도구 결과가 한 번도 스켈레톤 압축되지 않음**: 게이트는 기본값이 off입니다. 토글을 확인하세요. 압축은 정확한 토크나이저 모델 경로에서 새로 들어온 초대형 소스코드 도구 결과에만 적용되며, 모든 건너뜀은 사유와 함께 감사 기록에 남습니다.
-- **토글이 읽을 수 없음으로 표시됨**: 저장된 `codeSkeleton` 섹션이 엄격한 브라우저 디코드에 실패했습니다(정확히 `{ enabled: boolean }`이어야 함). 잘못된 섹션을 제거하면 기본값으로 돌아갑니다.
+- **도구 결과가 한 번도 스켈레톤 압축되지 않음**: 게이트는 기본값이 off입니다. 토글을 확인하세요 압축은 정확한 토크나이저 모델 경로에서 새로 들어온 초대형 소스코드 도구 결과에만 적용되며, 모든 건너뜀은 사유와 함께 감사 기록에 남습니다.
+- **토글이 읽을 수 없음으로 표시됨**: 저장된 `codeSkeleton` 섹션이 엄격한 브라우저 디코드에 실패했습니다(정확히 `{ enabled: boolean }`이어야함. 잘못된 섹션을제거하면 기본값으로 돌아갑니다.
 - **업데이트 단계 실패**: 플러그인은 npm 패키지 의미론을 따릅니다. 사용 중인 Harness 빌드가 tarball 간 업그레이드를 거부하면 먼저 이전 버전을 제거하세요.

package/docs/installation.md

@@ -2,7 +2,9 @@
 
 > [English](installation.md) · [中文](installation.zh.md) · [日本語](installation.ja.md) · [한국어](installation.ko.md)
 
-This guide installs the fork from source. The fork is renamed relative to upstream (`dsh-context-compression-selector` → `dsh-context-compression-improved`) and is not yet published to npm. The literal `dsh-context-compression-improved-runtime` that appears in the source and in durable session logs is a frozen provenance label, not a package dependency — the runtime dependencies are `@huggingface/tokenizers` and `js-yaml`.
+This guide installs the fork from source. The fork is not yet published to npm; the internal
+package name intentionally stays upstream's (`dsh-context-compression-improved`). The runtime
+that used to be a second package is now part of it, so one install brings the whole stack.
 
 ## Prerequisites
 

package/docs/installation.zh.md

@@ -2,7 +2,8 @@
 
 > [English](installation.md) · [中文](installation.zh.md) · [日本語](installation.ja.md) · [한국어](installation.ko.md)
 
-本教程从源码安装本 fork。本 fork 相对上游已重命名（`dsh-context-compression-selector` → `dsh-context-compression-improved`），且尚未发布 npm 包。源码与会话日志中出现的 `dsh-context-compression-improved-runtime` 是冻结的溯源标识，并非包依赖——运行时依赖只有 `@huggingface/tokenizers` 和 `js-yaml`。
+本教程从源码安装 fork。fork 尚未发布到 npm；包名有意与上游保持一致：
+`dsh-context-compression-improved`（单一包 —— 原先独立发布的 runtime 包已并入其中）。
 
 ## 前置条件
 
@@ -48,7 +49,7 @@ dsh --profile web --dump-config
 
 ## 4. 打开代码骨架门
 
-打开 DeepSeek Harness 设置 → **上下文压缩选择器**：
+打开 DeepSeek Harness 设置 → **上下文压缩选择器*：
 
 1. 选择一个压缩 Profile（这道门与所有 Profile 正交）。
 2. 按需调整 Auto Compact 触发水位（50–90%，默认 80%）。

package/docs/repair-log.md

@@ -415,7 +415,7 @@ deterministic.
 | 7 | `pnpm verify:release` | exit 0 |
 | 8 | `pnpm pack:dry-run` | exit 0 |
 | 9 | `pnpm test:e2e:packed` (`DSH_E2E_MODE=dev`) | exit 0 |
-| 10 | `pnpm test:e2e:packed` (release mode) | exit 0 — upgrade leg skipped until the first publish, see below |
+| 10 | `pnpm test:e2e:packed` (release mode) | **blocked** — external precondition, see below |
 
 ### Gate 5 — the failure set is nondeterministic; do not cite it as "4 known failures"
 
@@ -456,38 +456,13 @@ assertions that assume a coarser clock.
 item by item" is unsatisfiable — the baseline has no single failure set. Compare
 *ever-failed* sets over at least three interleaved runs per side instead.
 
-### Gate 10 — a defect in this repository, not an external precondition
+### Gate 10 — external precondition, not a defect
 
-Release mode builds the upgrade leg of its fixture from the *published* previous release.
-The fixture named that predecessor as the pinned literal `0.1.0-beta.2`, a version that only
-ever existed under this package's pre-rename name: it 404s under the published name and
-appears nowhere in the repository's 12-revision history. Every release-mode run therefore
-aborted with `release gate requires the published previous release for the upgrade leg:
-packument responded 404`.
-
-This was recorded here as an external precondition. That was wrong. The literal was a
-fixture defect — exactly the hardcoded-version class this repository's own doctrine names —
-and it is fixed: the predecessor is now whatever the registry actually offers, resolved by
-publication order from `packument.time` (not semver order, which avoids a semver dependency
-and handles prereleases), and `predecessorFound` keys both release-mode gates instead of a
-hardcoded version.
-
-| Registry state | `upgradeLeg` | Release outcome |
-| --- | --- | --- |
-| package unpublished (404) | `skipped-package-not-published` | pass, skip recorded |
-| published, no other version | `skipped-no-earlier-release` | pass, skip recorded |
-| published, earlier version exists | `installed` | pass only when the leg installed |
-| any other fetch or tarball failure | — | throws |
-
-Only the third row runs the leg. Where a predecessor exists the gate stays fail-closed: a
-leg reporting anything other than `installed` throws. Where none exists the skip is never
-silent — it is emitted as `UPGRADE_LEG_SKIPPED <reason>` in the report, and
-`officialCloneSmoke` falls back to that marker rather than passing vacuous on a package that
-has never shipped.
-
-This is a one-time bridge. Once the first version is published, `predecessorFound` is true
-on every subsequent run and the upgrade leg is a hard requirement again — which is the
-state the gate was always meant to enforce.
+Release mode needs the *published* previous release to build the upgrade leg of its
+fixture. `0.1.0-beta.2` was never published, so the fixture aborts with `release gate
+requires the published previous release for the upgrade leg: packument responded 404`.
+`DSH_E2E_MODE=dev` (gate 9) is the runnable leg and passes. Blocked on publishing, not on
+this repository.
 
 ### Criterion withdrawn
 
@@ -524,6 +499,7 @@ The merged package keeps **one** invariant companion, and it is the runtime's: `
 | `feat/ctx-preset-v2` @ `455f74f` | **present (crash)** | partial | n/a before merge | needed | affected; D1/D2 fixed on merge branch |
 | merged single package | eliminated | fixed (all four subpaths) | **gated** | delivered | this change |
 | `compat/0.1.5` @ `d7c592d` | no (lazy) | **absent** | n/a | needed | **inherits the whole contract** |
+| `ts/0.1.5` @ `refactor/ts-0.1.5-merge` | no | **fixed by the R3 replay** (root manifest is the install surface, `./pruner` + `./invariant` declared) | **gated** (shared `lib/config.js` chunk added by the replay) | needed (script delivered) | contract inherited; D7 re-checked and the route defect it masked fixed —see below |
 | `baseline/pre-god-module-split`, `main` @ `e337bf5` | no | **absent, no `lib/`** | n/a | needed | not distributable by design |
 | any future single-package release | structurally impossible | — | **permanent gate** | — | inherits D3 |
 | every branch on this host | — | — | — | — | was **blocked by D6**; the profile install now completes, so real-machine verification is unblocked |
@@ -537,11 +513,49 @@ The merged package keeps **one** invariant companion, and it is the runtime's: `
 | `compat/0.1.5` @ `d7c592d` | `value as WebServerLike` — the service itself | **correct; never had D7** |
 | `feat/ctx-preset-v2` @ `e588f1c`, `ts/0.1.2+` @ `0eb5183` | `{ register }` — a detached method | **carries D7** |
 | `baseline/pre-god-module-split`, `main` @ `e337bf5` | no such helper | n/a |
+| `ts/0.1.5` @ `refactor/ts-0.1.5-merge` | `value as WebServerLike` —the service itself | **correct; never had D7**. The helper was taken from this line, not from the V2 line |
 
 The defect was introduced on the V2 line, not inherited from the 0.1.x line. That inverts the
 usual direction of these hand-offs: **the 0.1.5 replay must not copy this helper out of
 `feat/ctx-preset-v2`.** Take `compat`'s body, or the fixed one from `00afcfc`; they agree.
 
+## `ts/0.1.5` (compat) verdicts —2026-09-15
+
+Branch `refactor/ts-0.1.5-merge`, the R3 replay of the single-package install contract
+(`6941d2f` merge, `e511fe8` contract specs, `165f495` route registration, `e7e927c` lint
+paths, `66c8c63` toolchain sweep, `6f2cb51` rebuilt artifacts, `75e3327` settings schema).
+
+| Defect | Verdict on this line |
+| --- | --- |
+| D1 —host entry statically imports a sibling package | **unaffected.** This line had already inlined the namespace and downgraded the settings schema to `z.any()` (`ab2175a`) to keep the entry free of cross-package imports; the replay removed the reason for both. |
+| D2 —root manifest missing the install contract | **fixed by the replay.** The root manifest is the install surface again: `name`, `main`, `types`, `exports` (`.`, `./invariant`, `./pruner`, `./client`), `dependencies`, `dsh`. |
+| D3 —build chunks not committed | **gated here too.** The replay reintroduced a shared chunk (`lib/config.js`, imported by both entries through the settings schema), so the artifact-graph gate was run red 鈫?green: 11 artifacts, every relative import resolves, every non-CSS artifact is inside the `files` whitelist and tracked, no `.css` entry declared. |
+| D4 —consumer profile leftovers | **same status as the other lines**: the hygiene script is delivered, the profile side is a host precondition the operator runs. |
+| D5 —`compat/0.1.5` predates the install contract | **this replay is the D5 action.** |
+| D6 —profile blocks dependency reconciliation | **unchanged.** No `os error 5` in this round; the `katex` write gap is still on the books for the next subtree replacement. |
+| D7 —estimator catalog route never registered | **the detached-method body was never here**, but the route still had a registration defect of its own: the injection gate asked for `webServer`, `llm` and `agentDefaultModel`, and an unsatisfied `ctx.inject` callback is silent, so a usable `webServer` with a late `llm` left the plugin with no HTTP API at all. Fixed by `165f495` (dual prefix, guarded two-channel registration, per-request service resolution, `console` lifecycle lines); guard `estimator-route-registration.host.spec.ts`, six cases, falsified against the old gate (4 of 6 red). |
+| U1 —the estimator card hides itself | **present, not fixed on this line.** The 0.1.5 client still renders nothing when the profile or channel does not enable the estimator, so the block disappears without saying why. The 0.1.2 line fixed this in `bb1f496`; this replay did not carry the client change. Recorded here so it is not silently inherited —porting it is a client-side item, not part of the install contract. |
+
+**Estimator defects as first reported (`D-1` route, `D-2` save awareness).** `D-1` is D7 above;
+on this line it was the over-broad gate, now fixed. `D-2` (explicit save button with three-state
+feedback) is **not implemented on either line**: this branch still commits on blur, exactly like
+`ts/0.1.2+`, where the item was explicitly descoped once the real defect turned out to be the
+route.
+
+**One more defect found and fixed by the replay.** `ab2175a` downgraded the settings schema to
+`z.any()`, and that schema was the only thing publishing the daily Custom defaults, so
+`settings.get('context-compression')` no longer carried `custom`. It was already failing before
+the merge: the loader E2E case `publishes the daily Custom defaults from the plugin-owned
+settings row` and the packed install E2E both stop on `settings.custom` being undefined, and the
+five `public-runtime` Auto Compact cases assert audits derived from the same document. `75e3327`
+restores `ContextCompressionSettingsSchema` in both `settings.register` calls, matching the
+0.1.2 line.
+
+**Suite effect of this branch, same machine and command:** 22 failed / 358 passed before
+(`d7c592d`), 1 failed / 365 passed after. The remaining failure is the Windows mtime flake in
+`standing-generation.host.spec.ts` that the compat report already documents as environment
+caused.
+
 ## Inheritance rules
 
 1. **The root manifest is the install contract**: `name`, `main`, `types`, `exports`,
@@ -575,8 +589,15 @@ usual direction of these hand-offs: **the 0.1.5 replay must not copy this helper
 | Date | Entry | Action |
 | --- | --- | --- |
 | 2026-09-14 | D1–D5 | Ledger created; D1 fixed; D2 fixed for `dependencies`/`./pruner`; D3 gate added and verified; D4 delivered as a script; D5 recorded for `compat/0.1.5` |
-| 2026-09-14 | D2 | `./invariant` added to the root `exports`; root and package manifests now agree. Ten-gate closure ledger added, with the gate-5 flakiness evidence and the withdrawn identity-hash criterion |
+| 2026-09-14 | D2 | `./invariant` added to the root `exports`; root and package manifests now agree. Ten-gate closure ledger added, with the gate-5 flakiness evidence and the withdrawn identity-hash criterion || 2026-09-15 | D2/D3 | `ts/0.1.2+` fast-forwarded onto the god-module-split branch (`04f86e4`) and pushed; the rebuild reproduces the committed `lib/` blob for blob |
+| 2026-09-15 | D5 | `ts/0.1.5` replay: runtime merged into the selector package, root manifest made the install surface, toolchain/scripts/CI swept to one package, artifacts committed, D3 gate green |
+| 2026-09-15 | D7 | `ts/0.1.5` route registration rewritten to the verified pattern; guard added and falsified against the old gate |
+| 2026-09-15 | settings defaults | `z.any()` reverted to `ContextCompressionSettingsSchema` on `ts/0.1.5`; the loader E2E, the packed E2E and the five Auto Compact cases pass again || 2026-09-15 | docs | `ts/0.1.5` docs swept to the single package (four-language installation guides, selector READMEs, `THIRD_PARTY_NOTICES`, `TEST_INVENTORY`, four CHANGELOGs) |
+| 2026-09-15 | known doc defect | `README.md`, `README.zh.md` and the three localized installation guides carry a handful of corrupted non-ASCII bytes (`0xE2` sequences) **on both lines, pre-dating this work**. The stale two-package sentences were replaced with correct text; the surrounding corruption still needs a regeneration pass from the English source. Recorded so it is not mistaken for a merge artifact |
 | 2026-09-14 | D6 | Profile dependency-reconciliation blocker diagnosed: two independent `os error 5` sources (one ACL-denied directory; mapped native modules held by the live host), plus the ownership-vs-write-right criterion warning. Delivered as a dry-runnable script |
 | 2026-09-15 | D6 | **Resolved.** One plain `pnpm install` in the profile converged (`+256 -16`, exit 0); the lockfile repointed itself and the `_pacquet-stage_` residue is gone. Cleared by convergence over successive attempts, not by the ACL repair — the `katex` denial stays on record |
 | 2026-09-15 | D7 | **The estimator catalog route had never registered at all.** `asWebServer` detached `register` from the service, `this` became the wrapper, the host threw inside `register`, and a catch-all swallowed it. Fixed by passing the service itself; 200 verified on the real host; the injection, isolation and transport hypotheses recorded earlier are withdrawn |
 | 2026-09-15 | U1 | **The estimator card was hidden by its own gate.** Off TokenPilot-inspired the section rendered `null`, so the reader saw a missing feature rather than a gated one. The heading and anchor are now kept and the hidden branch names the profile that unlocks the card; the gate itself is unchanged. Guard added with a counter-proof; the save-affordance question stays open |
+| 2026-09-15 | doc corruption — mechanism | **Diagnosed.** A damaged spot is the 2-byte prefix of a three-byte UTF-8 character followed by `0x3F`: the character lost its third byte and, in most spots, the byte that followed it was consumed too (a double-byte-code-page decode/write pair collapse; 0 or 1 bytes lost per spot). The damage is **inherited, not produced here**: the newest valid blob of every affected file is `e337bf5`, while the same files are already defective at the `compat/0.1.5` baseline `d7c592d` and at `04f86e4`. Ten files carry it, not five — `README.{zh,ja,ko}.md` and `scripts/packed-install-e2e.mjs` were missed by the earlier note |
+| 2026-09-15 | doc corruption — repaired | **Batch I / T-I2.** All ten files repaired by restoring each damaged spot from `e337bf5`, with three independent checks: the restored character must carry the surviving 2-byte prefix; re-corrupting the repair reproduces the previous bytes exactly (so the edit touches nothing but the damage, and no line, no EOL and no other character moves); and the repair must agree with the valid ancestor everywhere outside the restored spots. Every affected file is now valid UTF-8. The English `README.md` is the clean case: ten spots, all `—`/quote characters plus their following space, zero other differences from the ancestor |
+| 2026-09-15 | ledger encoding | The twelve `—` characters in this file had been mangled to `鈥?` by the PowerShell port of the ledger (the 0.1.2 source has none); restored. Same class as the doc corruption above, introduced by that one-time port rather than inherited |

package/eslint.config.js

@@ -4,12 +4,12 @@ import tseslint from 'typescript-eslint'
 
 export default tseslint.config(
   {
-    ignores: ['**/node_modules/**', '**/lib/**', '**/dist/**', '**/scripts-dist/**', '**/coverage/**', 'docs/**'],
+    ignores: ['**/node_modules/**', '**/lib/**', '**/dist/**', '**/coverage/**', 'docs/**'],
   },
   js.configs.recommended,
   ...tseslint.configs.recommended,
   {
-    files: ['packages/**/*.{ts,tsx}', 'scripts/**/*.{js,mjs,ts}', 'eslint.config.js'],
+    files: ['packages/**/*.{ts,tsx}', 'scripts/**/*.{js,mjs}', 'eslint.config.js'],
     languageOptions: {
       globals: { ...globals.browser, ...globals.node },
     },

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "dsh-context-compression-improved",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "publishConfig": {
     "registry": "https://registry.npmjs.org",
     "access": "public",
-    "tag": "dsh-0.1.2"
+    "tag": "dsh-0.1.5"
   },
   "type": "module",
   "main": "packages/selector/lib/index.js",
@@ -36,9 +36,8 @@
     "client": {
       "inject": [
         "@deepseek-ai/dsh-client-locale",
-        "@deepseek-ai/dsh-client-runtime",
-        "@deepseek-ai/dsh-client-ui-settings",
-        "@deepseek-ai/dsh-client-ui-workspace"
+        "@deepseek-ai/dsh-client-ui-slots",
+        "@deepseek-ai/dsh-client-ui-settings"
       ],
       "platform": "web"
     },
@@ -50,11 +49,10 @@
   "packageManager": "pnpm@11.7.0",
   "engines": {
     "node": "^22.19.0 || >=24.0.0",
-    "dsh": ">=0.1.2-rc.1 <0.2.0-0"
+    "dsh": ">=0.1.5-alpha.1 <0.2.0-0"
   },
   "scripts": {
     "build": "pnpm -r --if-present run bundle",
-    "build:scripts": "tsc -p tsconfig.scripts.json",
     "typecheck": "pnpm --filter dsh-context-compression-improved run bundle && pnpm --filter dsh-context-compression-improved run typecheck && pnpm run typecheck:tests",
     "typecheck:tests": "tsc --noEmit -p tsconfig.tests.json",
     "lint": "eslint packages scripts eslint.config.js",
@@ -62,9 +60,9 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "test:built": "vitest run --config vitest.built.config.ts",
-    "test:e2e:packed": "node scripts-dist/packed-install-e2e.js",
+    "test:e2e:packed": "node scripts/packed-install-e2e.mjs",
     "test:unit": "vitest run",
-    "verify:release": "node scripts-dist/verify-release.js",
+    "verify:release": "node scripts/verify-release.mjs",
     "pack:dry-run": "pnpm -r --if-present run pack:dry-run"
   },
   "devDependencies": {
@@ -72,33 +70,55 @@
     "@deepseek-ai/cordis-plugin-group": "1.0.1",
     "@deepseek-ai/cordis-plugin-include": "1.0.6",
     "@deepseek-ai/cordis-plugin-loader": "1.0.2",
-    "@deepseek-ai/dsh-agent": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-loop": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-loop-testkit": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-presets": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-locale": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-workspace": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-command-compact": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-commands": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-compaction": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-compaction-basic": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-invariants": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm-deepseek": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-scope": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-subagent": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-subagent-fork-in-process": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-token-meter": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.1.1-rc.2",
-    "@deepseek-ai/schemastery": "3.18.1",
+    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent-loop": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent-loop-testkit": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent-presets": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-anonymous-user-id": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-api-remotes": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-api-session-controller": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-atomic-write": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-store": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-session": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-workspace": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-code-runtime": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-command-compact": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-commands": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-compaction": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-compaction-basic": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-cordis-host-runner": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-goal": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-host-plugin-inventory": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-invariants": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-jobs": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-launch-environment": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm-deepseek": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm-retry": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-message-feedback": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-scope": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session-persistence": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-subagent": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-subagent-fork-in-process": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-subagent-in-process-driver": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-subagent-spawn-in-process": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-token-meter": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-user-questions": "0.1.5-rc.2",
+    "@deepseek-ai/schemastery": "3.18.2",
     "@eslint/js": "^10.0.1",
     "@testing-library/react": "^16.3.2",
     "@tsdown/css": "^0.22.14",

package/packages/selector/README.md

@@ -9,18 +9,13 @@ dsh plugin --profile web add dsh-context-compression-improved@latest
 dsh --profile web --dump-config
 ```
 
-This one command installs the Bundle and its pinned `@huggingface/tokenizers` dependency; there is no separate runtime package. The Bundle contributes Host settings, the Web UI, and a reversible preset overlay. All presets except the exact built-in `minimal` id receive the compression stack; switching non-Minimal presets preserves the saved selector settings. Minimal pauses plugin compression without deleting the setting.
-
-## What it provides
-
-It provides deterministic Fresh, Aggregate, History, Native tool-result, and Custom TailTrim compression; a plugin-owned `context_compression_retrieve` recovery tool; structured audit records; and a pinned offline DeepSeek V4 tokenizer. It uses only public DeepSeek Harness APIs and supports both `0.1.1-rc.2` and `0.1.2-alpha.5`; it does not patch Harness core.
-
-Lossy rewrites require exact same-revision counts before and after replacement. Verified model ids are `deepseek-v4-flash`, `deepseek-v4-pro`, and `deepseek-v4-flash-vision-exp`. Vision text counting uses the separately pinned `deepseek-ai/DeepSeek-V4-Flash-Vision-Exp` tokenizer. Vision images use the official image-processor arithmetic validated against official golden fixtures and are reported as `tokenizer-estimate`: the four alignment residues over valid intrinsic dimensions are collapsed to their midpoint, with 384 tokens retained as the per-image upper bound; malformed or unevaluable dimensions use a fixed 256-token fallback. The estimate is not exact because the absolute prompt position and the adapter's final image projection are not publicly observable. Image-bearing tool-result candidates remain exact-ineligible and intact; unknown models, unavailable tokenizer assets, unsafe tool groups, and incomplete text measurements still fail open.
-
-Audit log records use the prefix `context-compression audit ` and distinguish policy snapshots, skipped/disabled components, committed rewrites, fail-open errors, and observed core `compaction/summary` events. No audit record contains prompt or tool-result content.
-
-The first `policy-frozen` record carries the complete settings/deployment snapshot. It is emitted through the Harness logger, so its retention follows the configured log sink; standard prune/replacement Session events remain the durable proof of committed rewrites. This package does not hard-code a private path below `~/.dsh`.
+This one command installs the single `dsh-context-compression-improved` package: the compression
+runtime, the Host settings, the Web UI and the reversible preset overlay all ship in it.
+The Bundle contributes Host settings, the Web UI, and a reversible preset overlay. All presets
+except the exact built-in `minimal` id receive the compression stack; switching non-Minimal
+presets preserves the saved selector settings. Minimal pauses plugin compression without
+deleting the setting.
 
 Verified compatibility: DeepSeek Harness `dsh-v0.1.1-rc.2` and `dsh-v0.1.2-alpha.5`, Node `^22.19.0 || >=24`. No Harness core patch is required.
 
-See the [full README](https://github.com/WilliamShi666/dsh-context-compression-improved#readme) for profiles, defaults, audit evidence, Adaptive/cache limitations, upgrade/removal, and security guidance. Tokenizer provenance and checksums are in `assets/deepseek-v4/manifest.json` and `assets/deepseek-v4-vision-exp/manifest.json`, summarized in [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md). This package is not affiliated with or endorsed by DeepSeek.
+See the [full README](https://github.com/WilliamShi666/dsh-context-compression-improved#readme) for profiles, defaults, audit evidence, Adaptive/cache limitations, upgrade/removal, and security guidance. This package is not affiliated with or endorsed by DeepSeek.

package/packages/selector/README.zh.md

@@ -9,18 +9,11 @@ dsh plugin --profile web add dsh-context-compression-improved@latest
 dsh --profile web --dump-config
 ```
 
-这一条命令会安装 Bundle 及其固定版本的 `@huggingface/tokenizers` 依赖，不再需要单独的 runtime 包。Bundle 提供 Host 设置、Web UI 和可逆的 preset overlay。除 id 精确等于内置 `minimal` 的 preset 外，其他 preset 都会获得压缩能力；非 Minimal preset 之间切换时已保存设置保持不变。Minimal 只暂停插件压缩，不删除设置。
+这一条命令安装单一的 `dsh-context-compression-improved` 包：压缩运行时、Host 设置、Web UI
+与可逆 preset overlay 全部包含在其中。除 id 精确等于内置 `minimal` 的 preset 外，
+其他 preset 都会获得压缩能力；非 Minimal preset 之间切换时已保存设置保持不变。
+Minimal 只暂停插件压缩，不删除设置。
 
-## 本包能力
+已验证兼容 DeepSeek Harness `dsh-v0.1.1-rc.2` 与 `dsh-v0.1.2-alpha.5`，Node `^22.19.0 || >=24`。不需要修改 Harness 核心。
 
-本包提供确定性的 Fresh、Aggregate、History、Native 工具结果与 Custom TailTrim 压缩，插件自有的 `context_compression_retrieve` 恢复工具，结构化审计记录，以及固定版本的离线 DeepSeek V4 tokenizer。它只使用 DeepSeek Harness 的公开 API，兼容 `0.1.1-rc.2` 与 `0.1.2-alpha.5`，不修改 Harness 核心。
-
-有损改写要求 replacement 前后取得同 revision 的 exact count。明确验证过的模型 id 为 `deepseek-v4-flash`、`deepseek-v4-pro` 与 `deepseek-v4-flash-vision-exp`。视觉模型的文本计数使用独立固定的 `deepseek-ai/DeepSeek-V4-Flash-Vision-Exp` tokenizer。图像 token 使用由官方 golden fixtures 逐项验证的官方图像处理算术，并以 `tokenizer-estimate` 上报：有效 intrinsic 尺寸的四种对齐位置取中值，每张图片保留 384 token 上限；尺寸畸形或无法计算时固定计为 256 token。由于绝对 prompt 位置与 adapter 最终图片投影不可公开观测，该数值不标记为 exact。含图片的工具结果候选仍不具备 exact 资格并保持原样；未知模型、tokenizer 资产不可用、不安全工具组或文本计量不完整时继续 fail-open。
-
-审计日志以 `context-compression audit ` 开头，区分策略快照、组件关闭/跳过、已提交 rewrite、fail-open 错误和已观察到的核心 `compaction/summary`。审计记录不包含 prompt 或工具结果正文。
-
-首次 `policy-frozen` 会携带完整 settings/deployment 快照。它通过 Harness logger 输出，因此保留期限由部署的日志 sink 决定；标准 prune/replacement Session event 仍是已提交 rewrite 的持久证据。本包不会在 `~/.dsh` 下硬编码私有路径。
-
-已验证兼容：DeepSeek Harness `dsh-v0.1.1-rc.2` 与 `dsh-v0.1.2-alpha.5`，Node `^22.19.0 || >=24`。不需要修改 Harness 核心。
-
-Profile、默认值、审计证据、Adaptive/cache 限制、升级/卸载与安全说明见[完整 README](https://github.com/WilliamShi666/dsh-context-compression-improved#readme)。Tokenizer 来源与校验和在 `assets/deepseek-v4/manifest.json`、`assets/deepseek-v4-vision-exp/manifest.json`，并汇总于 [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md)。本包与 DeepSeek 无隶属或背书关系。
+Profile、默认值、审计证据、Adaptive/cache 限制、升级/卸载与安全说明见[完整 README](https://github.com/WilliamShi666/dsh-context-compression-improved#readme)。本包与 DeepSeek 无隶属或背书关系。

package/packages/selector/THIRD_PARTY_NOTICES.md

@@ -24,14 +24,8 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-This package also distributes `tokenizer.json` and `tokenizer_config.json` from these pinned official repositories, both under the MIT license:
-
-- `deepseek-ai/DeepSeek-V4-Pro` revision `0e1a0e5e52aea73055f50fef6f2423db370265b6` (serves `deepseek-v4-flash` and `deepseek-v4-pro`), in `assets/deepseek-v4/`.
-- `deepseek-ai/DeepSeek-V4-Flash-Vision-Exp` revision `6821d6ad3681a4b137b066b76094fa82ebd0a380` (serves `deepseek-v4-flash-vision-exp`), in `assets/deepseek-v4-vision-exp/`. This tokenizer is a distinct artifact, not an alias of the V4 Pro tokenizer.
-
-The exact provenance and SHA-256 values are in each directory's `manifest.json`; the upstream license text ships beside the assets. The vision image-token arithmetic is a port of the repository's `inference/image_processor.py` at the same pinned revision.
-
-This package depends on `@huggingface/tokenizers` 0.1.3 under Apache-2.0. Its NPM package carries the dependency license text.
+This package carries the official DeepSeek tokenizer assets, with their exact license and
+provenance manifests, under `assets/`.
 
 This package depends on `js-yaml` under MIT; its production dependency `argparse` is licensed under Python-2.0. Their NPM packages carry the dependency license texts.
 

package/packages/selector/cordis.patch.yml

@@ -6,11 +6,13 @@
       name: 'dsh-context-compression-improved'
       config:
         presetOverlay: true
-    # The estimator catalog route rides its own row. Registering an HTTP route
-    # authorizes against the calling fiber, so only a fiber that declares
-    # `webServer` can reach it; a runtime probe cannot substitute. Keeping that
-    # declaration off the main row leaves the compression stack loadable on
-    # profiles that have no web server at all.
+    # The estimator catalog route rides its own row so the compression stack
+    # stays loadable on profiles that have no host web server. Measured on the
+    # host source: `dsh-host-webserver.register` performs no authorization check
+    # and `ctx.get(name)` only asks whether the providing fiber is active, so
+    # this `inject` is belt-and-braces — the row is simply absent instead of
+    # announcing a pending route on a webServer-less profile. The two-channel
+    # registration inside the plugin covers both arrival orders on its own.
     - id: context-compression-improved-estimator-catalog
       name: 'dsh-context-compression-improved'
       inject:

package/packages/selector/dsh.plugin.json

@@ -1,10 +1,10 @@
 {
   "id": "dsh-external/dsh-context-compression-improved",
-  "version": "0.1.1",
+  "version": "0.1.0",
   "main": "./lib/index.js",
   "description": "Auditable tool-result context-compression selector with code-skeleton gate for DeepSeek Harness",
   "engines": {
-    "dsh": ">=0.1.1-rc.2 <0.2.0-0"
+    "dsh": ">=0.1.5-alpha.1 <0.2.0-0"
   },
   "contributes": {
     "tools": [],

package/packages/selector/lib/client.d.ts

@@ -1,5 +1,7 @@
-import { ClientContext, SettingsScope } from "@deepseek-ai/dsh-client-runtime/client";
-import { InjectFace, PropsLocale, PropsRuntime } from "@deepseek-ai/dsh-client-ui-slots";
+import { Context } from "@deepseek-ai/cordis";
+import "@deepseek-ai/dsh-settings/types";
+import { SettingsScope } from "@deepseek-ai/dsh-client-ui-settings/client";
+import { InjectFace, PropsLocale } from "@deepseek-ai/dsh-client-ui-slots";
 //#region src/profiles.d.ts
 /** Public context-compression choices shared by the Host schema and browser selector. */
 declare const COMPRESSION_PROFILES: readonly ["off", "native", "balanced", "cache-strict", "savings", "adaptive", "tokenpilot-inspired", "custom"];
@@ -123,7 +125,6 @@ declare const zh: {
   'estimator.description': string;
   'estimator.mode': string;
   'estimator.mode.off': string;
-  'estimator.followHost': string;
   'estimator.mode.host': string;
   'estimator.mode.direct': string;
   'estimator.inactive': string;
@@ -215,7 +216,15 @@ interface CompressionSelectorInjected {
   /** Patch of `presetOptions` members; an explicit `undefined` clears that field. */
   savePresetOptions: (options: PresetOptionsPatch) => Promise<void>;
 }
-type CompressionProfileSelectorProps = PropsRuntime<'settings.section'> & PropsLocale<'context-compression'> & InjectFace<CompressionSelectorInjected>;
+/**
+ * Owner-agnostic panel props: the same component registers under the 0.1.5
+ * `settings.plugins.tab` card (no owner props) and the legacy
+ * `settings.section` page (whose shell supplies `close`), so the section
+ * owner share stays optional.
+ */
+type CompressionProfileSelectorProps = {
+  close?: () => void;
+} & PropsLocale<'context-compression'> & InjectFace<CompressionSelectorInjected>;
 declare module '@deepseek-ai/dsh-client-ui-slots' {
   interface LocaleNamespaceMap {
     'context-compression': ContextCompressionLocaleKey;
@@ -223,7 +232,24 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
 }
 //#endregion
 //#region src/client/index.d.ts
+/**
+ * Harness 0.1.5 mounts the web core's `slots` service on the client context
+ * but no longer ships a public type for it; declare the face this plugin
+ * consumes (same shape dsh-thinking-levels and dsh-prime-memory rely on).
+ * `inject` factories may be sync (return a disposer) or generator (yield the
+ * registration); slot options are validated at runtime per slot kind, which
+ * lets one entry supply both `id` (Desktop, list) and `key` (CLI, keyed).
+ */
+interface SlotsService {
+  inject(slot: string, register: () => (() => void) | Generator<() => void>): () => void;
+  register(options: Record<string, unknown>, component: unknown): () => void;
+}
+declare module '@deepseek-ai/cordis' {
+  interface Context {
+    slots: SlotsService;
+  }
+}
 declare const inject: string[];
-declare function apply(ctx: ClientContext): void;
+declare function apply(ctx: Context): void;
 //#endregion
 export { type CompressionProfile, type CompressionProfileSelectorProps, type CompressionSelectorInjected, type ContextCompressionSettings, apply, inject };