dsh-draw 0.2.16 → 0.2.18

package/CHANGELOG.md

@@ -6,6 +6,30 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## [Unreleased]
+
+## [0.2.18] - 2026-09-25
+
+### Changed
+
+- Host pins move to `0.1.7-rc.2`; re-verified against that host line. Every `@deepseek-ai/dsh-*` dev/test dependency now pins `0.1.7-rc.2`, the `dshWorkshop.compatibility.dshVersions` timeline appends `0.1.7-rc.2`, and the compatibility baseline in every README records the `dsh-v0.1.7-rc.2` host. The declared host ranges (`engines.dsh` and the `peerDependencies` union) are deliberately **unchanged** — they already admit `0.1.7-rc.2`, and a range is what the manifest accepts, not what has been tested.
+
+## [0.2.17] - 2026-09-23
+
+### Fixed
+
+- The result card is visible again while the call is still arriving. Harness `0.1.7-rc.1` split the client `tool.call.toolview` owner into three stages — `preparing`, `start`, `result` — and dispatches the **same keyed entry in all three**, so an `image_generate` card now receives a *preparing* owner whose block is an ordinary object with no `kind` and no `argsRaw`. The card's only guard was `'kind' in block`, so `presentDrawResult` returned `undefined` and the card rendered an empty `div`. Nothing threw, which is why it read as a cosmetic oddity rather than a crash: **the row was blank for the entire argument-streaming window.** The card now renders its own in-flight row for the stages before `result` — tool name plus a localized preparing/running label — because returning nothing cannot delegate to the host: a keyed cell that is *occupied* never reaches the owner fallback (the renderer falls back only for an empty cell), so an empty answer blanks the line instead of restoring the host's own generic row. The settled card, its accounting line, and regenerate are unchanged.
+
+### Added
+
+- `scripts/verify-host-contract.mjs` (`pnpm run verify:host-contract`), a third ruler beside the two typechecks, wired into CI and the release gate. Both typechecks were green through this whole regression: this repository declares the tool-view contract **locally** (the harness ui-tool package index does not re-export it — re-verified against the installed `0.1.7-rc.1`) and `SlotMap` is an interface, so the two declarations merge and the local, narrower one becomes the program's authority; the host's real union was never the thing being checked. The new gate reads the host's own `ToolCallPhaseProps` declaration and the renderer's keyed dispatch and fails loudly when they no longer match what this plugin declares and relies on. It also pins the assumption the fix rests on ("the fallback is reachable only for an empty cell"), so a future host that changes that naming fails here instead of silently re-blanking the row. The checkout is a local development artifact, so when it is absent (CI, tarball installs) the gate verifies what it can without it; whenever it *is* present, every check runs.
+
+### Changed
+
+- Move the `@deepseek-ai/dsh-*` dev/test pins to `0.1.7-rc.1`, record `0.1.7-rc.1` in `dshWorkshop.compatibility.dshVersions`, and point the CI step label and the weekly Compat workflow at the same line. The declared `engines.dsh` / `peerDependencies` bands are unchanged — the `|| >=0.1.7-0 <0.2.0` arm added in 0.2.16 already admits this prerelease, so no supported host line is dropped and no range is narrowed.
+- The browser-half component specs are the first `.tsx` specs in this repo, so `vitest.config.ts` now includes `tests/**/*.spec.{ts,tsx}`. The previous pattern silently skipped them; a spec file that never runs is worse than no spec file. `@types/react-dom` joins `devDependencies` for the `react-dom/server` render face (no runtime dependency is added — `react-dom` was already a devDependency).
+- The local `ToolCallOwnerProps` in `src/client/DrawResultCard.tsx` is the host's phase discriminant union again (`common & ToolCallPhaseProps`), split into an exported `ToolCallPhaseProps` and `ToolCallCommonProps` exactly as the harness declares them, and a spec assertion now rejects an owner with no `phase`.
+
 ## [0.2.16] - 2026-09-23
 
 ### Fixed

package/README-es.md

@@ -25,11 +25,18 @@
 
 ---
 
+
+<!-- star-cta -->
+## ⭐ 如果它帮到了你
+
+Este plugin forma parte de la [familia de plugins DSH](https://github.com/PerryLink) (más de 40, todos Apache-2.0). Si te resulta útil, **dale una estrella**: no desbloquea nada, pero ayuda a que la siguiente persona lo encuentre antes.
+
+*English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
 ## Compatibilidad
 
 | Superficie | Estado |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.7-alpha.2` (compatibilidad declarada para `0.1.5-rc.2`) |
+| Harness | DeepSeek Harness `dsh-v0.1.7-rc.2` (compatibilidad declarada para `0.1.5-rc.2`) |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Motores | Cualquier endpoint de imágenes compatible con OpenAI; presets para OpenAI Images (`gpt-image-1`) y Zhipu CogView (`cogview-3-flash`) |
 | Superficies | Herramienta host `image_generate` + tarjeta de resultado web + pestaña de ajustes de Plugins |
@@ -37,6 +44,7 @@
 La mitad de navegador se apoya en el `Context` de cordis y en los paquetes de cliente publicados (`dsh-client-ui-slots`, `dsh-client-ui-settings`, `dsh-client-ui-tool`, `dsh-client-locale`, `dsh-client-connection`); ya no depende del paquete eliminado `dsh-client-runtime` (el bloque de llamada de herramienta se lee mediante un contrato estructural local), por lo que la superficie de cliente también encaja con hosts `0.1.2-rc.1`.
 0.1.2-rc.1 (adaptado el 2026-09-02): el sobre de sesión conserva su campo ignorable solo para compatibilidad de lectura de logs almacenados - Session.append aún no puede estamparlo, por lo que el comportamiento de la puerta no cambia. Verificado el 2026-09-06 contra el master checkout dsh-v0.1.7-alpha.1 (cadena completa de puertas + smoke de instalación de perfil).
 0.1.6-alpha.2 (adaptado el 2026-09-18): el tercer parámetro de `Session.append` existe solo para tipos de superficie y es un `SurfaceIntent`, nunca un sobre `ignorable`, así que el tipo no-superficie `draw/generated` tampoco se escribe en esta línea — la cuota se cuenta en memoria por sesión y se reinicia al reiniciar la sesión (véase la nota de durabilidad de cuota). Verificado el 2026-09-18 (doble typecheck + suite completa + puertas self-contained/artifacts/readme).
+0.1.7-rc.2 (adaptado el 2026-09-23): el contrato de cliente `tool.call.toolview` dividió su owner en tres etapas (`preparing` / `start` / `result`), y una tarjeta con clave ahora se despacha mientras los argumentos aún llegan en streaming. Por eso la tarjeta de resultado también dibuja su fila en curso para esas etapas previas: una celda keyed ocupada nunca alcanza la fila genérica del host, así que responder a una etapa preparada con nada dejaba la línea en blanco durante toda la ventana de streaming. Nada más cambia: la tarjeta liquidada, la línea de contabilidad y regenerar se comportan igual que antes. Verificado el 2026-09-23 (doble typecheck + suite completa + la nueva puerta host-contract).
 
 ## Qué obtienes
 
@@ -119,7 +127,7 @@ Ejemplo de sobrescritura en el parche de tu perfil:
 | Superficie | Notas |
 |---|---|
 | `image_generate` | Parámetros estándar; devuelve JSON canónico (motor/modelo/tamaño, referencias de imagen, cuota, indicador de respaldo, intentos) más bloques de imagen |
-| Tarjeta de resultado (`tool.call.toolview`, clave `image_generate`) | Imágenes, línea de motor/cuota, regenerar con un clic (ruta completa del drawer: cuota + enrutamiento + auditoría) |
+| Tarjeta de resultado (`tool.call.toolview`, clave `image_generate`) | En cada etapa de la llamada: una fila en curso mientras llegan los argumentos, y tras asentarse las imágenes, la línea de motor/cuota y regenerar con un clic (ruta completa del drawer: cuota + enrutamiento + auditoría) |
 | Pestaña de ajustes (Plugins → Image generation) | Cadena de motores, estado de credenciales, establecer/eliminar claves API (referencias de credencial), sondas de conectividad, límites de cuota |
 
 ## Permisos y datos
@@ -147,10 +155,11 @@ Ejemplo de sobrescritura en el parche de tu perfil:
 ```sh
 pnpm install        # node ^22.19 || >=24
 pnpm run typecheck  # tsc: src + tests contra el checkout local del harness
-pnpm run typecheck:ci  # tsc contra las caras publicadas 0.1.7-alpha.2 (sin paths)
-pnpm test           # vitest: 17 archivos spec (transporte guionado, Context/Session/ToolRuntime reales)
+pnpm run typecheck:ci  # tsc contra las caras publicadas 0.1.7-rc.2 (sin paths)
+pnpm test           # vitest: 19 archivos spec (transporte guionado, Context/Session/ToolRuntime reales)
 pnpm run build      # declaraciones tsc + bundles tsdown (lib/)
 pnpm run verify:self-contained  # las especificaciones de dependencias resuelven desde el registry
+pnpm run verify:host-contract   # el contrato tool-view del host sigue coincidiendo con lo que declara este plugin
 pnpm run verify:artifacts       # cara ESM host + manifiesto typert + bundle de navegador + archivos de configuración
 pnpm pack           # el tarball publicado
 ```

package/README-hi.md

@@ -25,11 +25,18 @@
 
 ---
 
+
+<!-- star-cta -->
+## ⭐ 如果它帮到了你
+
+यह प्लगइन [DSH प्लगइन परिवार](https://github.com/PerryLink) का हिस्सा है (40+ प्लगइन, सभी Apache-2.0)। अगर यह उपयोगी लगे, तो **एक स्टार दें** — इससे कोई सुविधा अनलॉक नहीं होती, पर अगला व्यक्ति इसे खोज में आसानी से पा लेता है।
+
+*English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
 ## संगतता
 
 | सतह | स्थिति |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.7-alpha.2` (`0.1.5-rc.2` के लिए घोषित संगतता) |
+| Harness | DeepSeek Harness `dsh-v0.1.7-rc.2` (`0.1.5-rc.2` के लिए घोषित संगतता) |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | इंजन | कोई भी OpenAI-संगत images एंडपॉइंट; OpenAI Images (`gpt-image-1`) और Zhipu CogView (`cogview-3-flash`) प्रीसेट |
 | सतहें | Host `image_generate` टूल + वेब परिणाम कार्ड + Plugins सेटिंग टैब |
@@ -37,6 +44,7 @@
 ब्राउज़र हिस्सा cordis `Context` और प्रकाशित क्लाइंट पैकेजों (`dsh-client-ui-slots`, `dsh-client-ui-settings`, `dsh-client-ui-tool`, `dsh-client-locale`, `dsh-client-connection`) पर चलता है; यह अब हटाए गए `dsh-client-runtime` पैकेज पर निर्भर नहीं करता (टूल-कॉल ब्लॉक स्थानीय संरचनात्मक अनुबंध से पढ़ा जाता है), इसलिए क्लाइंट सतह `0.1.2-rc.1` होस्ट के साथ भी मेल खाती है।
 0.1.2-rc.1 (2026-09-02 को अनुकूलित): सत्र लिफ़ाफ़ा अपना ignorable फ़ील्ड केवल संग्रहीत-लॉग पठन संगतता के लिए रखता है - Session.append अभी भी इसे स्टैम्प नहीं कर सकता, इसलिए गेट व्यवहार अपरिवर्तित है। 2026-09-06 को dsh-v0.1.7-alpha.1 master checkout के विरुद्ध सत्यापित (पूर्ण गेट श्रृंखला + प्रोफ़ाइल इंस्टॉल स्मोक)।
 0.1.6-alpha.2 (2026-09-18 को अनुकूलित): `Session.append` का तीसरा पैरामीटर केवल सरफ़ेस-योग्य प्रकारों के लिए होता है और वह `SurfaceIntent` है, कभी `ignorable` एनवेलप नहीं, इसलिए गैर-सरफ़ेस `draw/generated` इस लाइन पर अब भी नहीं लिखा जाता — कोटा प्रति-सत्र स्मृति में गिना जाता है और सत्र पुनः आरंभ पर रीसेट होता है। 2026-09-18 को सत्यापित (दोहरा typecheck + पूरी सूट + self-contained/artifacts/readme गेट)।
+0.1.7-rc.2 (2026-09-23 को अनुकूलित): क्लाइंट `tool.call.toolview` अनुबंध ने अपने owner को तीन चरणों (`preparing` / `start` / `result`) में बाँट दिया, और अब keyed कार्ड तब भी भेजा जाता है जब आर्ग्युमेंट अभी स्ट्रीम हो रहे हों। इसलिए परिणाम कार्ड उन पूर्व चरणों के लिए अपनी इन-फ़्लाइट पंक्ति भी दिखाता है: भरा हुआ keyed सेल कभी होस्ट की सामान्य पंक्ति तक नहीं पहुँचता, इसलिए तैयारी के चरण को खाली उत्तर देने से पूरी स्ट्रीमिंग अवधि में वह पंक्ति खाली रह जाती थी। और कुछ नहीं बदला: तय हो चुका कार्ड, लेखा पंक्ति और पुनः-उत्पादन पहले जैसे ही व्यवहार करते हैं। 2026-09-23 को सत्यापित (दोहरा typecheck + पूरी सूट + नया host-contract गेट)।
 
 ## आपको क्या मिलता है
 
@@ -119,7 +127,7 @@ dsh --profile web --dump-config | grep -A2 'id: dsh-draw'
 | सतह | टिप्पणियाँ |
 |---|---|
 | `image_generate` | मानक पैरामीटर; कैननिकल JSON (इंजन/मॉडल/आकार, छवि संदर्भ, कोटा, फ़ॉलबैक झंडा, प्रयास) + छवि ब्लॉक लौटाता है |
-| परिणाम कार्ड (`tool.call.toolview`, key `image_generate`) | छवियाँ, इंजन/कोटा पंक्ति, एक-क्लिक regenerate (पूरा drawer पथ: कोटा + रूटिंग + ऑडिट) |
+| परिणाम कार्ड (`tool.call.toolview`, key `image_generate`) | कॉल के हर चरण में: आर्ग्युमेंट स्ट्रीम होते समय इन-फ़्लाइट पंक्ति, और तय होने पर छवियाँ, इंजन/कोटा पंक्ति तथा एक-क्लिक regenerate (पूरा drawer पथ: कोटा + रूटिंग + ऑडिट) |
 | सेटिंग टैब (Plugins → Image generation) | इंजन श्रृंखला, क्रेडेंशियल स्थिति, API कुंजी सेट/हटाएँ (क्रेडेंशियल संदर्भ), कनेक्टिविटी जाँच, कोटा सीमाएँ |
 
 ## अनुमतियाँ और डेटा
@@ -147,10 +155,11 @@ dsh --profile web --dump-config | grep -A2 'id: dsh-draw'
 ```sh
 pnpm install        # node ^22.19 || >=24
 pnpm run typecheck  # tsc: src + tests स्थानीय हार्नेस चेकआउट के विरुद्ध
-pnpm run typecheck:ci  # tsc प्रकाशित 0.1.7-alpha.2 फ़ेस के विरुद्ध (बिना paths)
-pnpm test           # vitest: 17 spec फ़ाइलें (स्क्रिप्टेड ट्रांसपोर्ट, वास्तविक Context/Session/ToolRuntime)
+pnpm run typecheck:ci  # tsc प्रकाशित 0.1.7-rc.2 फ़ेस के विरुद्ध (बिना paths)
+pnpm test           # vitest: 19 spec फ़ाइलें (स्क्रिप्टेड ट्रांसपोर्ट, वास्तविक Context/Session/ToolRuntime)
 pnpm run build      # tsc घोषणाएँ + tsdown बंडल (lib/)
 pnpm run verify:self-contained  # निर्भरता स्पेक registry से हल होती हैं
+pnpm run verify:host-contract   # host का tool-view अनुबंध अब भी इस प्लगइन की घोषणा से मेल खाता है
 pnpm run verify:artifacts       # host ESM फ़ेस + typert मैनिफ़ेस्ट + ब्राउज़र बंडल + कॉन्फ़िग फ़ाइलें
 pnpm pack           # प्रकाशित tarball
 ```

package/README-pt.md

@@ -25,11 +25,18 @@
 
 ---
 
+
+<!-- star-cta -->
+## ⭐ 如果它帮到了你
+
+Este plugin faz parte da [família de plugins DSH](https://github.com/PerryLink) (mais de 40, todos Apache-2.0). Se for útil, **deixe uma estrela**: não desbloqueia nada, mas ajuda a próxima pessoa a encontrá-lo.
+
+*English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
 ## Compatibilidade
 
 | Superfície | Status |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.7-alpha.2` (compatibilidade declarada para `0.1.5-rc.2`) |
+| Harness | DeepSeek Harness `dsh-v0.1.7-rc.2` (compatibilidade declarada para `0.1.5-rc.2`) |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Motores | Qualquer endpoint de imagens compatível com OpenAI; presets para OpenAI Images (`gpt-image-1`) e Zhipu CogView (`cogview-3-flash`) |
 | Superfícies | Ferramenta host `image_generate` + cartão de resultado web + aba de ajustes de Plugins |
@@ -37,6 +44,7 @@
 A metade de navegador usa o `Context` do cordis e os pacotes de cliente publicados (`dsh-client-ui-slots`, `dsh-client-ui-settings`, `dsh-client-ui-tool`, `dsh-client-locale`, `dsh-client-connection`); ela não depende mais do pacote removido `dsh-client-runtime` (o bloco de chamada de ferramenta é lido por um contrato estrutural local), então a superfície de cliente também se alinha com hosts `0.1.2-rc.1`.
 0.1.2-rc.1 (adaptado em 2026-09-02): o envelope de sessão mantém seu campo ignorable apenas para compatibilidade de leitura de logs armazenados - o Session.append ainda não consegue estampá-lo, então o comportamento da porta não muda. Verificado em 2026-09-06 contra o checkout master dsh-v0.1.7-alpha.1 (cadeia completa de portas + smoke de instalação de perfil).
 0.1.6-alpha.2 (adaptado em 2026-09-18): o terceiro parâmetro de `Session.append` existe apenas para tipos de superfície e é um `SurfaceIntent`, nunca um envelope `ignorable`, então o tipo não-superfície `draw/generated` também não é gravado nesta linha — a cota é contada em memória por sessão e zera ao reiniciar a sessão (ver a nota de durabilidade de cota). Verificado em 2026-09-18 (typecheck duplo + suíte completa + portas self-contained/artifacts/readme).
+0.1.7-rc.2 (adaptado em 2026-09-23): o contrato de cliente `tool.call.toolview` dividiu seu owner em três estágios (`preparing` / `start` / `result`), e um cartão com chave agora é despachado enquanto os argumentos ainda chegam em streaming. Por isso o cartão de resultado também desenha sua linha em andamento para esses estágios anteriores: uma célula keyed ocupada nunca alcança a linha genérica do host, então responder a um estágio de preparação com nada deixava a linha em branco durante toda a janela de streaming. Nada mais muda: o cartão liquidado, a linha de contabilidade e o regenerar se comportam como antes. Verificado em 2026-09-23 (typecheck duplo + suíte completa + a nova porta host-contract).
 
 ## O que você ganha
 
@@ -119,7 +127,7 @@ Exemplo de sobrescrita no patch do seu perfil:
 | Superfície | Notas |
 |---|---|
 | `image_generate` | Parâmetros padrão; retorna JSON canônico (motor/modelo/tamanho, referências de imagem, cota, indicador de fallback, tentativas) mais blocos de imagem |
-| Cartão de resultado (`tool.call.toolview`, chave `image_generate`) | Imagens, linha de motor/cota, regenerar com um clique (caminho completo do drawer: cota + roteamento + auditoria) |
+| Cartão de resultado (`tool.call.toolview`, chave `image_generate`) | Em cada estágio da chamada: uma linha em andamento enquanto os argumentos chegam, e depois de liquidada as imagens, a linha de motor/cota e regenerar com um clique (caminho completo do drawer: cota + roteamento + auditoria) |
 | Aba de ajustes (Plugins → Image generation) | Cadeia de motores, estado de credenciais, definir/remover chaves de API (referências de credencial), sondas de conectividade, limites de cota |
 
 ## Permissões e dados
@@ -147,10 +155,11 @@ Exemplo de sobrescrita no patch do seu perfil:
 ```sh
 pnpm install        # node ^22.19 || >=24
 pnpm run typecheck  # tsc: src + tests contra o checkout local do harness
-pnpm run typecheck:ci  # tsc contra as faces publicadas 0.1.7-alpha.2 (sem paths)
-pnpm test           # vitest: 17 arquivos spec (transporte roteirizado, Context/Session/ToolRuntime reais)
+pnpm run typecheck:ci  # tsc contra as faces publicadas 0.1.7-rc.2 (sem paths)
+pnpm test           # vitest: 19 arquivos spec (transporte roteirizado, Context/Session/ToolRuntime reais)
 pnpm run build      # declarações tsc + bundles tsdown (lib/)
 pnpm run verify:self-contained  # as especificações de dependências resolvem pelo registry
+pnpm run verify:host-contract   # o contrato tool-view do host ainda coincide com o que este plugin declara
 pnpm run verify:artifacts       # face ESM host + manifesto typert + bundle de navegador + arquivos de configuração
 pnpm pack           # o tarball publicado
 ```

package/README-zh.md

@@ -25,11 +25,18 @@
 
 ---
 
+
+<!-- star-cta -->
+## ⭐ 如果它帮到了你
+
+这个插件是 [DSH 插件家族](https://github.com/PerryLink)的一员（40+ 个，全部 Apache-2.0）。如果你在用，**给个 star** —— 它不会解锁任何功能，但会让下一个人在搜索里更容易找到它。
+
+*English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
 ## 兼容性
 
 | 方面 | 状态 |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.7-alpha.2`（声明兼容 `0.1.5-rc.2`） |
+| Harness | DeepSeek Harness `dsh-v0.1.7-rc.2`（声明兼容 `0.1.5-rc.2`） |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | 引擎 | 任意 OpenAI 兼容图像端点；内置 OpenAI Images（`gpt-image-1`）与智谱 CogView（`cogview-3-flash`）预设 |
 | 界面 | Host `image_generate` 工具 + Web 结果卡片 + Plugins 设置页签 |
@@ -37,6 +44,7 @@
 浏览器半边基于 cordis `Context` 与已发布的客户端包（`dsh-client-ui-slots`、`dsh-client-ui-settings`、`dsh-client-ui-tool`、`dsh-client-locale`、`dsh-client-connection`）；它不再依赖已移除的 `dsh-client-runtime` 包（工具调用块经本地结构契约读取），因此客户端接口面同样对齐 `0.1.2-rc.1` 宿主。
 0.1.2-rc.1（2026-09-02 已适配）：会话信封保留 ignorable 字段但仅用于存量日志读取兼容——Session.append 仍无法盖章，门控行为不变。已于 2026-09-06 对照 dsh-v0.1.7-alpha.1 master 检出核验（完整门禁链 + profile 安装冒烟）。
 0.1.6-alpha.2（2026-09-18 已适配）：`Session.append` 的第三参仅对表面事件类型存在且为 `SurfaceIntent`，绝非 `ignorable` 信封，因此非表面的 `draw/generated` 在该线上仍不落盘——配额按会话内存计数、会话重启归零（与下方「配额持久性」一致）。已于 2026-09-18 核验（双 typecheck 尺子 + 全量测试 + self-contained/artifacts/readme 门）。
+0.1.7-rc.2（2026-09-23 已适配）：客户端 `tool.call.toolview` 契约把 owner 拆成三个阶段（`preparing` / `start` / `result`），且参数仍在流式到达时就会派发带 key 的卡片。因此结果卡片现在也为这些更早的阶段渲染「进行中」行——已占用的 keyed 槽位永远不会落到宿主自带的通用行，所以对准备阶段不作回应会让整行在整个流式窗口内空白。其余行为不变：结算后的卡片、账目行与重新生成与之前完全一致。已于 2026-09-23 核验（双 typecheck 尺子 + 全量测试 + 新增 host-contract 门）。
 
 ## 你能得到什么
 
@@ -119,7 +127,7 @@ profile patch 中的覆盖示例：
 | 界面 | 说明 |
 |---|---|
 | `image_generate` | 标准参数；返回规范 JSON（引擎/模型/尺寸、图片引用、配额、回退标志、尝试记录）加图片内容块 |
-| 结果卡片（`tool.call.toolview`，key `image_generate`） | 图片、引擎/配额行、一键重新生成（完整 drawer 路径：配额 + 路由 + 审计） |
+| 结果卡片（`tool.call.toolview`，key `image_generate`） | 覆盖调用的每个阶段：参数流式到达时先显示进行中行，结算后显示图片、引擎/配额行与一键重新生成（完整 drawer 路径：配额 + 路由 + 审计） |
 | 设置页签（Plugins → 图像生成） | 引擎链、凭据状态、设置/移除 API 密钥（凭据引用）、连通性探测、配额上限 |
 
 ## 权限与数据
@@ -147,10 +155,11 @@ profile patch 中的覆盖示例：
 ```sh
 pnpm install        # node ^22.19 || >=24
 pnpm run typecheck  # tsc：src + tests，对照本地 harness checkout
-pnpm run typecheck:ci  # tsc：对照已发布的 0.1.7-alpha.2 类型（无 paths）
-pnpm test           # vitest：17 个 spec 文件（scripted 传输、真实 Context/Session/ToolRuntime）
+pnpm run typecheck:ci  # tsc：对照已发布的 0.1.7-rc.2 类型（无 paths）
+pnpm test           # vitest：19 个 spec 文件（scripted 传输、真实 Context/Session/ToolRuntime）
 pnpm run build      # tsc 声明 + tsdown 打包（lib/）
 pnpm run verify:self-contained  # 依赖声明全部来自 registry
+pnpm run verify:host-contract   # 宿主 tool-view 契约仍与本插件声明一致
 pnpm run verify:artifacts       # host ESM 面 + typert manifest + 浏览器包 + 配置文件
 pnpm pack           # 发布用 tarball
 ```

package/README.md

@@ -26,11 +26,19 @@
 
 ---
 
+<!-- star-cta -->
+## ⭐ 如果它帮到了你
+
+这个插件是 [DSH 插件家族](https://github.com/PerryLink)的一员（40+ 个，全部 Apache-2.0）。如果你在用，**给个 star** —— 它不会解锁任何功能，但会让下一个人在搜索里更容易找到它。
+
+*English:* part of a 40+ plugin family for DeepSeek Harness. If it is useful, **a star helps the next person find it** — nothing is gated behind it.
+
+
 ## Compatibility
 
 | Surface | Status |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.7-alpha.2` (compat declared for `0.1.5-rc.2`) |
+| Harness | DeepSeek Harness `dsh-v0.1.7-rc.2` (compat declared for `0.1.5-rc.2`) |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Engines | Any OpenAI-compatible images endpoint; presets for OpenAI Images (`gpt-image-1`) and Zhipu CogView (`cogview-3-flash`) |
 | Surfaces | Host `image_generate` tool + web result card + Plugins settings tab |
@@ -38,6 +46,7 @@
 The browser half rides the cordis `Context` and the published client packages (`dsh-client-ui-slots`, `dsh-client-ui-settings`, `dsh-client-ui-tool`, `dsh-client-locale`, `dsh-client-connection`); it no longer depends on the removed `dsh-client-runtime` package (the tool-call block is read through a local structural contract), so the client surface also lines up with `0.1.2-rc.1` hosts.
 0.1.2-rc.1 (adapted 2026-09-02): the session envelope keeps its ignorable field for stored-log read compatibility only - Session.append still cannot stamp it, so audit-gate behavior is unchanged. Verified 2026-09-06 against the dsh-v0.1.7-alpha.1 master checkout (full gate chain + profile install smoke).
 0.1.6-alpha.2 (adapted 2026-09-18): `Session.append`'s third parameter exists only for surface-eligible event types and is a `SurfaceIntent`, never an `ignorable` envelope, so `draw/generated` (a non-surface type) is still not written on this line — quota is counted in memory per session and resets when the session restarts, exactly as the "Quota durability" note below describes. Verified 2026-09-18 (dual typecheck rulers + the full suite + self-contained/artifacts/readme gates).
+0.1.7-rc.2 (adapted 2026-09-23): the client `tool.call.toolview` contract split its owner into three stages (`preparing` / `start` / `result`), and a keyed card is now dispatched while the arguments are still streaming. The result card therefore also renders the in-flight row for those earlier stages — an occupied keyed slot never reaches the host's own generic row, so answering a prepared stage with nothing blanked the line for the whole streaming window. Nothing else changed: the settled card, the accounting line, and regenerate behave exactly as before. Verified 2026-09-23 (dual typecheck rulers + the full suite + the new host-contract gate).
 
 ## What you get
 
@@ -120,7 +129,7 @@ Example override in your profile patch:
 | Surface | Notes |
 |---|---|
 | `image_generate` | Standard parameters; returns canonical JSON (engine/model/size, image references, quota, fallback flag, attempts) plus image content blocks |
-| Result card (`tool.call.toolview`, key `image_generate`) | Images, engine/quota line, one-click regenerate (full drawer path: quota + routing + audit) |
+| Result card (`tool.call.toolview`, key `image_generate`) | In every stage of the call: an in-flight row while the arguments stream, then images, engine/quota line, and one-click regenerate once it settles (full drawer path: quota + routing + audit) |
 | Settings tab (Plugins → Image generation) | Engine chain, credential status, set/remove API keys (credential references), connectivity probes, quota limits |
 
 ## Permissions & data
@@ -148,10 +157,11 @@ Example override in your profile patch:
 ```sh
 pnpm install        # node ^22.19 || >=24
 pnpm run typecheck  # tsc: src + tests against the local harness checkout
-pnpm run typecheck:ci  # tsc against the published 0.1.7-alpha.2 faces (no paths)
-pnpm test           # vitest: 17 spec files (scripted transport, real Context/Session/ToolRuntime)
+pnpm run typecheck:ci  # tsc against the published 0.1.7-rc.2 faces (no paths)
+pnpm test           # vitest: 19 spec files (scripted transport, real Context/Session/ToolRuntime)
 pnpm run build      # tsc declarations + tsdown bundles (lib/)
 pnpm run verify:self-contained  # dependency specs resolve from the registry
+pnpm run verify:host-contract   # the host tool-view contract still matches what this plugin declares
 pnpm run verify:artifacts       # host ESM face + typert manifest + browser bundle + config files
 pnpm pack           # the published tarball
 ```

package/THIRD_PARTY_NOTICES.md

@@ -13,8 +13,8 @@ everything else is install-time:
 | [zod](https://github.com/colinhacks/zod) | `^4.4.3` | MIT | Wire codecs shared by the host and client Typert faces (bundled into `lib/`) |
 | [tsdown](https://github.com/rolldown/tsdown) | `^0.22.14` | MIT | Build-time bundling of `lib/` (a regular dependency so the git-install channel's `prepare` script can build) |
 | [typescript](https://github.com/microsoft/TypeScript) | `^7.0.2` | Apache-2.0 | Build-time declaration emission (`lib/types/`) |
-| [@deepseek-ai/cordis](https://www.npmjs.com/package/@deepseek-ai/cordis) | `^4.0.1` (peer) | See package | The plugin runtime |
-| [@deepseek-ai/schemastery](https://www.npmjs.com/package/@deepseek-ai/schemastery) | `^3.18.0` (peer) | See package | Configuration schema |
+| [@deepseek-ai/cordis](https://www.npmjs.com/package/@deepseek-ai/cordis) | `^4.0.4` (peer) | See package | The plugin runtime |
+| [@deepseek-ai/schemastery](https://www.npmjs.com/package/@deepseek-ai/schemastery) | `^3.18.2` (peer) | See package | Configuration schema |
 | `@deepseek-ai/dsh-*` peers | `>=0.1.2-rc.1 <0.2.0 \|\| >=0.1.5-alpha.1 <0.2.0 \|\| >=0.1.6-0 <0.2.0 \|\| >=0.1.7-0 <0.2.0` (peer) | See packages | Official harness seams (`dsh-tools`, `dsh-session`, `dsh-attachment`, `dsh-credentials`, `dsh-llm`, `dsh-brand`, `dsh-typert-protocol`) |
 
 At runtime the plugin only talks to the image-generation endpoints the user

package/lib/client.js

@@ -7,13 +7,35 @@ window.__ModuleLoader__.load({
 		let react = require("react");
 		//#region src/client/present.ts
 		/**
+		* Classify a frozen tool block into its Host stage, mirroring the Host's own
+		* `toolCallPhase`: a settled node wins on `kind`, and the running family splits
+		* on `phase`. `ToolCallBlock` is structurally narrower than the Host union
+		* (`RunningToolCallBlock` declares no `phase` field), so the running arm is
+		* read through a structural probe rather than a declared member.
+		*
+		* @param block - the frozen tool block the owner delivered.
+		* @returns the stage this block belongs to.
+		*/
+		function toolCallPhase(block) {
+			if ("kind" in block) return "result";
+			return block.phase === "preparing" ? "preparing" : "start";
+		}
+		/**
 		* Project one settled `image_generate` tool block onto the card model.
 		*
+		* The stage guard is explicit, not incidental: only the Host's `result` stage
+		* carries `kind`, and the preparing stage's block is an ordinary object, so
+		* an `undefined` return is the presenter's answer for every non-result stage
+		* as well as for a foreign tool, an error result, or a window-truncated call
+		* head. The card pairs that answer with {@link toolCallPhase} to render its
+		* in-flight row instead of an empty node.
+		*
 		* @param block - the frozen tool-call block (running or settled).
 		* @returns the presented model, or `undefined` when the block is not a settled
 		*   image_generate result.
 		*/
 		function presentDrawResult(block) {
+			if (toolCallPhase(block) !== "result") return void 0;
 			if (!("kind" in block) || block.kind !== "tool-result" || block.isError) return void 0;
 			if (block.call?.name !== "image_generate") return void 0;
 			const value = block.meta ?? {};
@@ -86,10 +108,16 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/DrawResultCard.tsx
 		/**
-		* The keyed `image_generate` tool result card: engine/quota facts and the
-		* regenerate action. The images themselves are the attachment content blocks
-		* the shell already renders from the tool result, so the card only adds the
-		* accounting line and the action — it never duplicates image transport.
+		* The keyed `image_generate` tool view: engine/quota facts and the regenerate
+		* action once the call settles, and an in-flight row of its own while the
+		* arguments are still arriving. The images themselves are the attachment
+		* content blocks the shell already renders from the tool result, so the card
+		* only adds the accounting line and the action — it never duplicates image
+		* transport.
+		*
+		* The Host dispatches this keyed entry in EVERY stage of the call, and a keyed
+		* cell that is occupied never reaches the owner fallback — so the earlier
+		* stages cannot be answered with nothing without blanking the row.
 		*
 		* The `tool.call.toolview` SlotMap member is declared locally (mirroring the
 		* harness's own ui-tool contract declaration, which its package index does not
@@ -98,11 +126,40 @@ window.__ModuleLoader__.load({
 		* @module dsh-draw/client/DrawResultCard
 		*/
 		/**
-		* The keyed tool result card.
-		* @param props - owner currency, locale, and injected bindings.
-		* @returns the card element.
+		* The keyed tool view. Dispatched by the wire tool name in EVERY stage of the
+		* call, so the card owes a presentation to the in-flight stages too: returning
+		* an empty node would leave the row blank, because an occupied keyed cell
+		* never reaches the Host's own generic row.
+		*
+		* @param props - owner currency (common + stage shares), locale, and injected bindings.
+		* @returns the in-flight row, or the settled result card.
 		*/
 		function DrawResultCard(props) {
+			const phase = toolCallPhase(props.block);
+			if (phase !== "result") {
+				const stage = props.phase === "result" ? phase : props.phase;
+				return (0, react.createElement)("div", {
+					className: "dshdraw-inflight",
+					"aria-busy": "true",
+					"data-phase": stage
+				}, (0, react.createElement)("span", { className: "dshdraw-inflight-title" }, props.t("row.title")), (0, react.createElement)("span", {
+					className: "dshdraw-sep",
+					"aria-hidden": "true"
+				}, "·"), (0, react.createElement)("span", { className: "dshdraw-inflight-summary" }, props.toolName), (0, react.createElement)("span", { className: "dshdraw-inflight-state" }, props.t(inFlightKey(stage))));
+			}
+			return (0, react.createElement)(DrawResultCardBody, props);
+		}
+		/** Locale key naming the stage of a call that has not settled yet. */
+		function inFlightKey(phase) {
+			return phase === "preparing" ? "row.preparing" : "row.running";
+		}
+		/**
+		* The settled result card: engine/quota facts and the regenerate action.
+		*
+		* @param props - the owner at its `result` stage, locale, and injected bindings.
+		* @returns the card element.
+		*/
+		function DrawResultCardBody(props) {
 			const { block, regenerate, t } = props;
 			const presented = presentDrawResult(block);
 			const [busy, setBusy] = (0, react.useState)(false);
@@ -275,6 +332,9 @@ window.__ModuleLoader__.load({
 			"result.regenerate": "Regenerate",
 			"result.regenerating": "Regenerating…",
 			"result.failed": "Regenerate failed",
+			"row.title": "Tool call",
+			"row.preparing": "Preparing tool call",
+			"row.running": "Running",
 			"tab": "Image generation",
 			"tab.engines": "Engines",
 			"tab.preferred": "preferred",
@@ -300,6 +360,9 @@ window.__ModuleLoader__.load({
 			"result.regenerate": "重新生成",
 			"result.regenerating": "正在重新生成…",
 			"result.failed": "重新生成失败",
+			"row.title": "工具调用",
+			"row.preparing": "正在准备调用",
+			"row.running": "运行中",
 			"tab": "图像生成",
 			"tab.engines": "引擎",
 			"tab.preferred": "首选",
@@ -5622,6 +5685,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 .dshdraw-figure img { max-width: 100%; border-radius: 6px; border: 1px solid var(--dsh-border, #d0d7de); }
 .dshdraw-figure figcaption { font-size: 11px; opacity: 0.75; overflow-wrap: anywhere; }
 .dshdraw-meta { font-size: 12px; opacity: 0.85; display: flex; flex-wrap: wrap; gap: 12px; }
+.dshdraw-inflight { display: flex; align-items: baseline; gap: 6px; flex-wrap: wrap; font-size: 13px; min-height: 20px; }
+.dshdraw-inflight .dshdraw-sep { opacity: 0.45; }
+.dshdraw-inflight-title { font-weight: 500; }
+.dshdraw-inflight-summary { opacity: 0.85; overflow-wrap: anywhere; }
+.dshdraw-inflight-state { font-size: 12px; opacity: 0.7; }
 .dshdraw-actions { display: flex; gap: 8px; }
 .dshdraw-button {
   border: 1px solid var(--dsh-border, #d0d7de); border-radius: 6px; background: transparent;