dsh-ops 0.2.4 → 0.2.5-beta.1

package/CHANGELOG.md

@@ -5,6 +5,15 @@ All notable changes to this package are recorded here.
 The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and
 this package adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.2.5-beta.1] — Automatic context compaction (prerelease candidate)
+
+- Add the fourth independent marketplace row, `@dsh-ops/auto-compact`, enabled by default; background remains opt-in. Bundle its internal companion package with dsh-ops so rc.2 discovers its browser face through a package-root row, with no separate publishing requirement.
+- Add a settings control on this row in the existing Plugins component region: live threshold (50%), cooldown (120 seconds) and compaction deadline (120 seconds), with revision-fenced profile writes and restore defaults.
+- Use the Web context-pressure projection and the same public `compactNow` API as `/compact`, only after a non-cancelled turn becomes idle; do not publish a model-callable compaction tool or modify the host's own automatic policy.
+- Serialize this component's compactions, suppress unchanged surfaces and self-generated replacements, back off failures, suspend sessions after commit/persistence failures, and abort/drain owned work on disable.
+- Keep host activation free of host value imports: a dependency-free Standard Schema descriptor and a scoped update hook retain validated live references. No Schemastery vendor impersonation.
+- Add targeted safety/lifecycle/schema/browser-registration regressions. Full historical gates still contain stale pre-0.2.4 expectations; no claim of a fully green legacy suite or live Desktop acceptance.
+
 ## [0.2.4] — Independently toggled components
 
 - Split the market bundle into shell (on), file (on), and background (off) rows with exported per-component titles, descriptions, icons and locales.

package/README.en.md

@@ -8,6 +8,16 @@ Routing: **file tools → bash → PowerShell 7**. Prefer bash for general comma
 use pwsh only for necessary Windows-native operations. Fix bash errors in bash.
 Windows x64 only; target DSH `0.2.0-rc.2`. [中文](README.md)
 
+## Beta candidate
+
+`0.2.5-beta.1` adds the fourth component and its row configuration page. It is
+intended for the npm `beta` tag, without changing `latest`. Registry metadata is
+the authority for publication status. Once published, explicitly install
+`dsh-ops@0.2.5-beta.1` from the official npm registry. Exact version selection does
+not bypass pnpm's minimum release age: wait or narrowly exempt this version,
+never delete the lockfile or disable global policy. Fully quit/restart the app
+and verify the installed main version and four components.
+
 ## Install, update and remove
 
 In the official marketplace, enter **`dsh-ops`**, install, then enable. This installs
@@ -69,6 +79,7 @@ Lost ownership after disconnect and permission downgrade do not guarantee termin
 | dsh-ops-bash & powershell 7 | On | Prefer ops_bash for general commands; bundled PowerShell 7 for Windows-native work |
 | dsh-ops-file | On | Rust batch reads, search, path discovery and replacement |
 | dsh-ops-background | Off | Scientific simulations, model training and other long-running tasks |
+| Automatic context compaction | On | Idle-only host /compact service above a configurable Web context threshold; no additional model-facing tool |
 
 Each row owns its tools and runtime prompt section; OFF withdraws both. Nothing is
 appended to AGENTS.md. Shell ON adds a runtime-only configuration overlay for the
@@ -82,6 +93,15 @@ PTC invokes the tools through its generated SDK with unchanged permission checks
 
 ## Configuration and tools
 
+**Beta candidate feature:** the fourth row's configuration control is in
+Plugins → dsh-ops → Included components. Configure the threshold (default **50%**),
+cooldown (120 seconds) and timeout (120 seconds). The policy uses the Web meter,
+requires strictly more than the threshold, and waits for a non-cancelled idle turn.
+It uses revision-fenced host profile persistence and does not interrupt active tools.
+Summarization may call your model and incur cost. Disabling aborts/drains only owned
+compaction. Installed npm `0.2.4` does not yet include this feature. See
+[safety boundaries and validation](docs/auto-compact.md).
+
 Edit the corresponding dsh-ops/shell, dsh-ops/file or dsh-ops/background row's config.
 Unknown keys fail; normal component enablement is available in the marketplace.
 

package/README.md

@@ -1,20 +1,28 @@
 # dsh-ops
 
-解决 Windows 下 DSH 反复使用 PowerShell 报错造成的 token、时间和模型注意力浪费。本插件提供：
+解决 Windows 下 DSH 反复使用 PowerShell 报错造成的 token、时间和模型注意力浪费。本插件的三个主要功能提供：
 
-- 独立 **bash 5.3.15**，用于通用命令、构建、Git、管道和脚本。
-- 独立 **PowerShell 7.6.6**，用于必要的 Windows 原生操作，沿用宿主 `pwsh` 工具。
-- Rust 编写的高性能增强工具，支持批量读取、搜索、替换和有界输出，减少不必要的输入输出。由于部分工具不经过 DSH 的受限终端后端，命令与后台任务工具只在**完全权限**时启用。
+- 提供独立 **bash 5.3.15** 并优先使用bash，让你的AI不再和PowerShell打架
+- 独立 **PowerShell 7.6.6**，用于必要的 Windows 原生操作，沿用宿主 `pwsh` 工具。PowerShell 7 比自带的 PowerShell 5 也有不少优化
+- 一些 Rust 编写的性能更好的，更快的读取、查找、替换工具，加速任务运行，减少不必要的输入输出。由于部分工具不经过 DSH 的受限终端后端，命令与后台任务工具只在**完全权限**时启用。
 
 执行顺序：**工具包 → bash → PowerShell 7**。bash 报错在 bash 内修正，不随意换 shell，不混用两套语法。
 
 仅支持 **Windows x64**；目标宿主 DSH `0.2.0-rc.2`。[English](README.en.md)
 
+## Beta 测试版候选
+
+`0.2.5-beta.1` 增加「上下文自动压缩」及其组件配置入口，默认阈值 50%。它仅计划发布到 npm 的 `beta` 标签；`latest` 保持正式版，不自动给普通用户升级。发布状态以 registry 查询为准，发布前不能据此认定包已在线。
+
+发布后在插件市场指定 **`dsh-ops@0.2.5-beta.1`**、选择 npm 官方源。精确指定版本**不会绕过** pnpm 的发布冷却策略；如被拦截，应等待冷却期结束或由用户对该精确版本设置豁免，不删除锁文件、不关闭全局供应链检查。安装后完全退出并重启应用，确认主包版本与四个组件。
+
 ## 安装、更新、卸载
 
 ### 官方插件市场
 
-在目标 DSH 应用的插件市场中输入 npm 包名 **`dsh-ops`**，安装后选择启用。安装归属于当前运行的 profile，桌面端为 `desktop`。发布包依赖完整 FastCtx、bash 和 PowerShell 7 载荷；不使用安装脚本下载，不改系统 PATH。
+在目标 DSH 应用的插件市场中输入 npm 包名 **`dsh-ops@0.2.4`**，安装后选择启用。安装归属于当前运行的 profile，桌面端为 `desktop`。发布包依赖完整 FastCtx、bash 和 PowerShell 7 载荷；不使用安装脚本下载，不改系统 PATH。
+
+注：新发布版本暂时明确写 dsh-ops@0.2.4，避免 pnpm 安全冷却期使裸包名选择旧版本。
 
 ### npm 一键安装
 
@@ -55,13 +63,14 @@ npx --yes dsh-ops@latest uninstall --profile desktop
 
 ## 组件开关与提示词
 
-官方市场显示三个组件，分别启停，首次安装默认开启前两个：
+官方市场显示四个组件，分别启停，首次安装默认开启 shell、file 和自动压缩：
 
 | 组件 | 介绍 | 默认 | 发布的工具 |
 | --- | --- | --- | --- |
 | `dsh-ops-bash & powershell 7` | 将默认终端改为bash，以及bash覆盖不到时提供powershell7 | 开 | `ops_bash`；宿主 `pwsh` 使用随包 PowerShell 7 |
 | `dsh-ops-file` | 更快、更高性能、输出更精简更省token的rust文件检索 | 开 | 四个文件工具 |
 | `dsh-ops-background` | 为科研仿真、模型训练及其他长进程后台任务提供托管 | 关 | 启动、输出、列出、终止后台任务 |
+| `上下文自动压缩` | Web 占用高于可设置阈值时，空闲后调用宿主 `/compact` 服务 | 开 | 自动策略，不新增模型工具 |
 
 “默认终端改为 bash”指模型提示优先使用 `ops_bash`，**不修改系统默认终端、PATH 或宿主原有 shell 工具名称**。Shell 组件开时，通过官方配置生命周期临时指定 `pwsh-sandbox` 的 PowerShell 7 路径；关时按执行器最新原配置恢复，不写 profile 配置。执行器配置切换不代表取消已在运行的宿主命令。
 
@@ -69,6 +78,8 @@ npx --yes dsh-ops@latest uninstall --profile desktop
 
 ## 配置方式与工具列表
 
+**Beta 测试版新增组件**：在上面的「包含的组件」中打开「上下文自动压缩」的配置入口，设置阈值（默认 **50%**）、冷却（120 秒）、超时（120 秒）。严格高于阈值、正常会话进入空闲后才触发，不打断运行中的工具；保存使用宿主 profile 持久化和版本冲突检查。压缩可能调用模型并产生费用。关闭组件会取消并等待它自己启动的压缩，不取消用户任务。该组件属于 `0.2.5-beta.1` 测试版候选，已安装的正式版 npm `0.2.4` 不含它；是否已发布请查 npm。详见[安全边界与验证记录](docs/auto-compact.md)。
+
 在 DSH 的配置编辑器中找到对应的 `dsh-ops/shell`、`dsh-ops/file` 或 `dsh-ops/background` 行，调整 `config` 后保存；未知配置键会点名报错。也可直接在市场切换组件。主要配置：
 
 ```yaml

package/README.zh.md

@@ -1,20 +1,28 @@
 # dsh-ops
 
-解决 Windows 下 DSH 反复使用 PowerShell 报错造成的 token、时间和模型注意力浪费。本插件提供：
+解决 Windows 下 DSH 反复使用 PowerShell 报错造成的 token、时间和模型注意力浪费。本插件的三个主要功能提供：
 
-- 独立 **bash 5.3.15**，用于通用命令、构建、Git、管道和脚本。
-- 独立 **PowerShell 7.6.6**，用于必要的 Windows 原生操作，沿用宿主 `pwsh` 工具。
-- Rust 编写的高性能增强工具，支持批量读取、搜索、替换和有界输出，减少不必要的输入输出。由于部分工具不经过 DSH 的受限终端后端，命令与后台任务工具只在**完全权限**时启用。
+- 提供独立 **bash 5.3.15** 并优先使用bash，让你的AI不再和PowerShell打架
+- 独立 **PowerShell 7.6.6**，用于必要的 Windows 原生操作，沿用宿主 `pwsh` 工具。PowerShell 7 比自带的 PowerShell 5 也有不少优化
+- 一些 Rust 编写的性能更好的，更快的读取、查找、替换工具，加速任务运行，减少不必要的输入输出。由于部分工具不经过 DSH 的受限终端后端，命令与后台任务工具只在**完全权限**时启用。
 
 执行顺序：**工具包 → bash → PowerShell 7**。bash 报错在 bash 内修正，不随意换 shell，不混用两套语法。
 
 仅支持 **Windows x64**；目标宿主 DSH `0.2.0-rc.2`。[English](README.en.md)
 
+## Beta 测试版候选
+
+`0.2.5-beta.1` 增加「上下文自动压缩」及其组件配置入口，默认阈值 50%。它仅计划发布到 npm 的 `beta` 标签；`latest` 保持正式版，不自动给普通用户升级。发布状态以 registry 查询为准，发布前不能据此认定包已在线。
+
+发布后在插件市场指定 **`dsh-ops@0.2.5-beta.1`**、选择 npm 官方源。精确指定版本**不会绕过** pnpm 的发布冷却策略；如被拦截，应等待冷却期结束或由用户对该精确版本设置豁免，不删除锁文件、不关闭全局供应链检查。安装后完全退出并重启应用，确认主包版本与四个组件。
+
 ## 安装、更新、卸载
 
 ### 官方插件市场
 
-在目标 DSH 应用的插件市场中输入 npm 包名 **`dsh-ops`**，安装后选择启用。安装归属于当前运行的 profile，桌面端为 `desktop`。发布包依赖完整 FastCtx、bash 和 PowerShell 7 载荷；不使用安装脚本下载，不改系统 PATH。
+在目标 DSH 应用的插件市场中输入 npm 包名 **`dsh-ops@0.2.4`**，安装后选择启用。安装归属于当前运行的 profile，桌面端为 `desktop`。发布包依赖完整 FastCtx、bash 和 PowerShell 7 载荷；不使用安装脚本下载，不改系统 PATH。
+
+注：新发布版本暂时明确写 dsh-ops@0.2.4，避免 pnpm 安全冷却期使裸包名选择旧版本。
 
 ### npm 一键安装
 
@@ -55,13 +63,14 @@ npx --yes dsh-ops@latest uninstall --profile desktop
 
 ## 组件开关与提示词
 
-官方市场显示三个组件，分别启停，首次安装默认开启前两个：
+官方市场显示四个组件，分别启停，首次安装默认开启 shell、file 和自动压缩：
 
 | 组件 | 介绍 | 默认 | 发布的工具 |
 | --- | --- | --- | --- |
 | `dsh-ops-bash & powershell 7` | 将默认终端改为bash，以及bash覆盖不到时提供powershell7 | 开 | `ops_bash`；宿主 `pwsh` 使用随包 PowerShell 7 |
 | `dsh-ops-file` | 更快、更高性能、输出更精简更省token的rust文件检索 | 开 | 四个文件工具 |
 | `dsh-ops-background` | 为科研仿真、模型训练及其他长进程后台任务提供托管 | 关 | 启动、输出、列出、终止后台任务 |
+| `上下文自动压缩` | Web 占用高于可设置阈值时，空闲后调用宿主 `/compact` 服务 | 开 | 自动策略，不新增模型工具 |
 
 “默认终端改为 bash”指模型提示优先使用 `ops_bash`，**不修改系统默认终端、PATH 或宿主原有 shell 工具名称**。Shell 组件开时，通过官方配置生命周期临时指定 `pwsh-sandbox` 的 PowerShell 7 路径；关时按执行器最新原配置恢复，不写 profile 配置。执行器配置切换不代表取消已在运行的宿主命令。
 
@@ -69,6 +78,8 @@ npx --yes dsh-ops@latest uninstall --profile desktop
 
 ## 配置方式与工具列表
 
+**Beta 测试版新增组件**：在上面的「包含的组件」中打开「上下文自动压缩」的配置入口，设置阈值（默认 **50%**）、冷却（120 秒）、超时（120 秒）。严格高于阈值、正常会话进入空闲后才触发，不打断运行中的工具；保存使用宿主 profile 持久化和版本冲突检查。压缩可能调用模型并产生费用。关闭组件会取消并等待它自己启动的压缩，不取消用户任务。该组件属于 `0.2.5-beta.1` 测试版候选，已安装的正式版 npm `0.2.4` 不含它；是否已发布请查 npm。详见[安全边界与验证记录](docs/auto-compact.md)。
+
 在 DSH 的配置编辑器中找到对应的 `dsh-ops/shell`、`dsh-ops/file` 或 `dsh-ops/background` 行，调整 `config` 后保存；未知配置键会点名报错。也可直接在市场切换组件。主要配置：
 
 ```yaml

package/cordis.patch.yml

@@ -1,5 +1,6 @@
-# Three independent market components; no unconditional host executor override.
-# Shell and file are enabled by default. Background is explicitly opt-in.
+# Four independent market components; no unconditional host executor override.
+# Shell, file and idle-only automatic compaction are enabled by default.
+# Background remains explicitly opt-in.
 - insert:
     - id: dsh-ops-shell
       name: dsh-ops/shell
@@ -23,3 +24,9 @@
         enableShellTools: true
         required: false
         toolCallTimeoutMs: 300000
+    - id: dsh-ops-auto-compact
+      name: '@dsh-ops/auto-compact'
+      config:
+        thresholdPercent: 50
+        cooldownSeconds: 120
+        timeoutSeconds: 120

package/docs/auto-compact.md

@@ -0,0 +1,102 @@
+# 上下文自动压缩 / Automatic context compaction
+
+## 界面位置
+
+本地开发版在 **插件列表 → dsh-ops → 包含的组件** 中新增第四项「上下文自动压缩」
+（`dsh-ops-auto-compact` / `@dsh-ops/auto-compact`）。使用它旁边的配置入口进入设置，
+不是全局设置中的独立页面。新组件默认启用；原有 background 仍默认停用。
+`0.2.5-beta.1` 是待发布测试版候选；正式版 npm 0.2.4 不含此功能。是否发布以 registry 为准。
+
+| 配置 | 默认 | 范围 |
+| --- | --- | --- |
+| `thresholdPercent` | 50 | 1–99，整数 |
+| `cooldownSeconds` | 120 | 30–3600，整数 |
+| `timeoutSeconds` | 120 | 10–600，整数 |
+
+设置调用现有宿主表单的 revision-fenced mutate，保存到当前 profile 的
+`cordis.patch.yml`，可恢复默认，不使用 localStorage。启用组件且当前客户端具有
+宿主设置权限时才可保存；停用组件不伪装成可配置。修改即时影响下一次判定，
+不重挂载或中断正在运行的压缩；压缩已经开始时沿用当次捕获的截止时间。
+
+## 触发与安全
+
+- 使用与 Web 一致的 `contextPressure` 投影：`projectedTokens ?? pressureTokens`，
+  除以 `contextWindow`，四舍五入并上限 100。显示值 **严格高于** 阈值才满足条件；
+  等于 50% 不触发。无样本或容量、异常值时跳过，不猜模型容量。
+- 不按计时器轮询。正常 turn 进入 idle 时判定，热启用时检查已加载的 idle agent。
+  用户取消的 turn 不自动启动维护。长时间持续运行的 turn 不会在中途压缩；
+  原有宿主 pressure/overflow 自动策略保持不动。
+- 调用宿主 `/compact` 同一个 `compaction.compactNow(agent, signal)` 服务，不向
+  模型发送 `/compact` 文本，不增加模型可调用工具或额外提示词。
+- idle 状态本身不构成互斥：由宿主 runMaintenance admission 和 durable compaction
+  marker 执行真实串行化；busy 是正常竞态，跳过而非循环重试。
+- 一个组件实例同时只运行一个压缩，跨会话共享冷却期；不干扰宿主自己的压缩器。
+  同一 surface 在没有新内容/阈值改变时不重复尝试，自己的摘要替换也不会形成循环。
+  无可压缩历史、失败都受冷却和 surface 门禁控制；无定时后台重试。
+- commit/persistence 故障会暂停该会话的本组件自动压缩，直到重新加载组件。
+  应先检查会话状态，不直接重试。其它故障只记录固定脱敏消息。
+- deadline 是 AbortSignal 取消，不是强制销毁：依赖宿主/模型适配器响应 abort。
+  即使适配器延迟退出，本组件也不开放第二个任务；关闭组件会 abort 自己的压缩并
+  await allSettled，不调用 agent.cancel，不丢用户 inbox，不杀后台任务。
+- 摘要使用宿主配置的模型，可能产生调用费用；摘要会改变 model-visible surface，
+  原始历史/标记与持久化由宿主负责。压缩不是无损保证，不宣称百分比是未来 provider
+  请求的精确计费。文档与截图不能替代真实 Desktop 验收。
+
+## English
+
+The fourth component is in **Plugins → dsh-ops → Included components**. Its row
+configuration page uses the existing host forms, revision-fenced profile writes,
+and restore-default operations. The new component defaults to ON; background stays OFF.
+Only integer settings in the table above are accepted. This feature belongs to the
+0.2.5-beta.1 prerelease candidate, not npm 0.2.4. Check the registry for publication status.
+
+The policy matches the rounded Web context meter and requires a value strictly
+above the threshold. It calls the same public idle-maintenance service as `/compact`
+after a non-cancelled turn, never during active tools. Missing samples skip work.
+No model-callable tool, polling, invented model capacity, host policy mutation, or
+shared registry rewrite is involved. One owned operation, global cooldown,
+unchanged-surface suppression, abort/drain teardown, and commit/save-failure session
+suspension bound work. New user messages are queued by the host's maintenance seam.
+A timeout requests cooperative cancellation, not forced quiescence. Summarization
+may incur model cost and is not guaranteed lossless.
+
+## 内部分发
+
+宿主 Web module discovery 只接受 package-root row，不接受 `dsh-ops/*` 子入口。
+因此此组件是 `packages/auto-compact/` 内的伴随包，声明 file dependency 并通过
+`bundleDependencies` 随主包携带，无单独 npm 发布或安装要求。旧三入口不变，列表
+仍为四组件。宿主从所选 bundle 的 dependency closure 解析这个嵌套依赖。
+`npm pack` 后在隔离目录离线安装，已从主包锚点确认宿主入口/浏览器入口可解析；
+从 consumer 根直接 import 嵌套伴随包失败是预期的 npm 非提升布局，不假称根可解析。
+
+## 验证记录
+
+Target: DSH 0.2.0-rc.2. Runtime packages and vendored Rust are unchanged.
+
+```console
+node test/run.mjs auto-compact
+node --check packages/auto-compact/lib/client.js
+node --check packages/auto-compact/lib/index.js
+git diff --check
+```
+
+Targeted regressions cover schema rehydration with the real host library, real
+Cordis mounting/live update/unloading, strict bounds and occupancy, cancellation,
+serialization, no-op/self-replacement suppression, deadline/drain, errors and row
+registration. The compaction backend and browser rendering are test seams, not a
+real provider-backed Desktop E2E. Manual acceptance still required:
+
+1. Install a local development artifact in an isolated profile, reload the app,
+   confirm four components and this row's configuration control.
+2. Save 60%, reload page/app, confirm profile persistence; restore 50%.
+3. Grow a conversation past the threshold, confirm one compaction after idle;
+   inspect its durable marker and summary; queue input during compaction.
+4. Cancel a turn: no fresh automatic compaction. Disable during a summary: owned
+   abort/drain, no user/tool cancellation. Existing tools and background remain live.
+5. Missing model capacity, busy/manual compaction, provider failure and persistence
+   failure: no spin/no duplicate summary; inspect warnings and original session log.
+
+Full historical `npm run verify` is currently blocked by a pre-existing SVG-only
+icon expectation while the package intentionally ships PNG. Running the old suites
+also reveals earlier ladder/tool/metadata expectations incompatible with 0.2.4;
+no unrelated legacy migration is included in this change.

package/dsh-plugin.json

@@ -3,7 +3,7 @@
   "manifestVersion": "0.15",
   "id": "dsh-ops.fastctx",
   "name": "dsh-ops",
-  "version": "0.2.4",
+  "version": "0.2.5-beta.1",
   "license": "MIT AND Apache-2.0",
   "facets": {
     "host": {
@@ -109,6 +109,11 @@
         "id": "dsh-ops-background",
         "entry": "dsh-ops/background",
         "defaultEnabled": false
+      },
+      {
+        "id": "dsh-ops-auto-compact",
+        "entry": "@dsh-ops/auto-compact",
+        "defaultEnabled": true
       }
     ]
   },

package/lib/profile-install.js

@@ -50,7 +50,7 @@ export function profileCommand(operation, { profile, dshCli, dryRun = false }) {
   if (/\.cmd$/i.test(command)) {
     // cmd wrappers are Windows-owned launchers; reject shell metacharacters in caller-supplied paths.
     if (/["\r\n&|<>^%!]/.test(command)) throw new Error('Unsafe CLI path; use a path without cmd metacharacters.')
-    result = spawnSync(process.env.ComSpec ?? 'cmd.exe', ['/d', '/s', '/c', `""${command}" ${args.join(' ')}"`], { stdio: 'inherit', windowsHide: true })
+    result = spawnSync(process.env.ComSpec ?? 'cmd.exe', ['/d', '/s', '/c', `""${command}" ${args.join(' ')}"`], { stdio: 'inherit', windowsHide: true, windowsVerbatimArguments: true })
   } else result = spawnSync(command, [...prefix, ...args], { stdio: 'inherit', windowsHide: true })
   if (result.error) throw result.error
   if (result.status !== 0) return result.status ?? 1

package/node_modules/@dsh-ops/auto-compact/LICENSE

@@ -0,0 +1,30 @@
+MIT License
+
+Copyright (c) 2026 T-Auto and the dsh-ops contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+-------------------------------------------------------------------------------
+
+This MIT license covers the dsh-ops plugin: everything in this repository
+except `vendor/fastctx/`, which is FastCtx under the Apache License 2.0. The
+distribution as a whole is therefore licensed under the composite
+`MIT AND Apache-2.0`. See `NOTICE` for the full statement and the attribution
+FastCtx requires, and `vendor/fastctx/LICENSE-APACHE` for the Apache License
+2.0 text.

package/node_modules/@dsh-ops/auto-compact/README.md

@@ -0,0 +1,23 @@
+# @dsh-ops/auto-compact
+
+Internal, bundled companion of dsh-ops. It adds one independently toggled row to
+**Plugins → dsh-ops → Included components**, not a second marketplace bundle.
+The package-root entry is required by DSH rc.2's browser module discovery; plugin
+subpaths are not browser entry points. No separate installation is required.
+
+Defaults: threshold 50% (integer 1–99), cooldown 120s (30–3600), timeout 120s
+(10–600). Configuration belongs to this row and uses host profile settings with
+revision fencing and restore defaults. The policy calls the same public idle
+maintenance API as `/compact` only above the rounded Web context percentage and
+after a non-cancelled turn. Running tools are not interrupted. No new model-facing
+tool, polling, or host auto-policy modification is introduced.
+
+One owned operation at a time, cooldown, unchanged-surface suppression and
+abort/drain teardown bound work. Commit/save failures suspend this session until
+component reload and require inspection. Timeouts rely on cooperative cancellation.
+Summarization may call the host's configured model and incur cost; it is not
+lossless. Missing samples/capacity and busy admission skip work.
+
+This companion is carried by the dsh-ops 0.2.5-beta.1 prerelease candidate, not the
+stable 0.2.4. Check registry metadata for publication status. See the main repository's
+`docs/auto-compact.md` for safety limits and manual acceptance requirements.

package/node_modules/@dsh-ops/auto-compact/lib/client.js

@@ -0,0 +1,79 @@
+/** Browser artifact in the host's closure-factory module format; no globals except its loader. */
+window.__ModuleLoader__.load({ id: '@dsh-ops/auto-compact', factory: require => {
+  const { createElement: h, useState, useEffect, useRef } = require('react')
+  const NS = 'dshOps.autoCompact'
+  const dictionaries = {
+    en: {
+      title: 'Settings', threshold: 'Context threshold (%)', cooldown: 'Cooldown (seconds)', timeout: 'Compaction timeout (seconds)',
+      save: 'Save', reset: 'Restore defaults', saved: 'Saved', failed: 'Not saved. Configuration may have changed; reload and retry.',
+      unavailable: 'Enable this component to configure it. This client must have host settings write access.',
+      hint: 'When the Web context meter is strictly above the threshold, compact at the next idle boundary using the same service as /compact. Running tools are not interrupted. Summarization may call your configured model and incur cost. No extra model-facing tool is added.',
+      invalid: 'Enter integers: threshold 1–99, cooldown 30–3600, timeout 10–600.',
+    },
+    zh: {
+      title: '设置', threshold: '上下文阈值（%）', cooldown: '冷却时间（秒）', timeout: '压缩超时（秒）',
+      save: '保存', reset: '恢复默认', saved: '已保存', failed: '未保存，配置可能已变化，请重新加载后重试。',
+      unavailable: '请先启用此组件；当前客户端还需具有宿主设置写入权限。',
+      hint: 'Web 上下文占用严格高于阈值后，在下一次空闲边界调用与 /compact 相同的服务；不会打断正在运行的工具。摘要可能调用已配置模型并产生费用，不额外增加模型可调用工具。',
+      invalid: '请输入整数：阈值 1–99，冷却 30–3600 秒，超时 10–600 秒。',
+    },
+  }
+  const defaults = { thresholdPercent: 50, cooldownSeconds: 120, timeoutSeconds: 120 }
+  const fields = [
+    ['thresholdPercent', 'threshold', 1, 99],
+    ['cooldownSeconds', 'cooldown', 30, 3600],
+    ['timeoutSeconds', 'timeout', 10, 600],
+  ]
+  function Settings({ view, form, t }) {
+    const [draft, setDraft] = useState(defaults)
+    const [revision, setRevision] = useState(undefined)
+    const [busy, setBusy] = useState(false)
+    const [message, setMessage] = useState('')
+    const alive = useRef(false)
+    useEffect(() => { alive.current = true; return () => { alive.current = false } }, [])
+    useEffect(() => {
+      if (form?.state.status === 'ready') {
+        setDraft({ ...defaults, ...form.state.value })
+        setRevision(form.state.revision)
+      }
+    }, [form?.state.revision, form?.state.status])
+    if (view === 'summary') return t('hint')
+    const writable = form?.state.status === 'ready' && form.state.writable && form.state.mode === 'host'
+    async function save(reset) {
+      if (!writable || busy || revision === undefined) return
+      if (!reset && fields.some(([key, , min, max]) => !Number.isInteger(Number(draft[key])) || String(draft[key]).trim() === '' || Number(draft[key]) < min || Number(draft[key]) > max)) {
+        setMessage(t('invalid')); return
+      }
+      setBusy(true); setMessage('')
+      try {
+        const ops = fields.map(([key]) => reset
+          ? { op: 'unset', path: [key] }
+          : { op: 'set', path: [key], value: Number(draft[key]) })
+        const ok = await form.mutate(ops, revision)
+        if (alive.current) setMessage(t(ok ? 'saved' : 'failed'))
+      } catch { if (alive.current) setMessage(t('failed')) }
+      finally { if (alive.current) setBusy(false) }
+    }
+    return h('section', { 'data-dsh-ops-auto-compact-settings': true },
+      h('h4', null, t('title')),
+      h('p', null, t('hint')),
+      !writable ? h('p', { role: 'status' }, t('unavailable')) : null,
+      ...fields.map(([key, label, min, max]) => h('label', { key, style: { display: 'block', marginBottom: 12 } },
+        t(label), ' ', h('input', {
+          type: 'number', min, max, step: 1, value: draft[key], disabled: !writable || busy,
+          onChange: event => setDraft(current => ({ ...current, [key]: event.target.value })),
+        }))),
+      h('button', { type: 'button', disabled: !writable || busy, onClick: () => save(false) }, t('save')), ' ',
+      h('button', { type: 'button', disabled: !writable || busy, onClick: () => save(true) }, t('reset')),
+      h('p', { role: 'status' }, message))
+  }
+  return {
+    inject: ['slots', 'locale'],
+    apply(ctx) {
+      ctx.effect(() => ctx.get('locale').register(NS, dictionaries), 'dsh-ops settings locales')
+      ctx.get('slots').inject('plugins.row.config', () => ctx.get('slots').register({
+        name: 'plugins.row.config', key: 'dsh-ops#dsh-ops-auto-compact', locale: NS,
+      }, Settings))
+    },
+  }
+} })

package/node_modules/@dsh-ops/auto-compact/lib/config.js

@@ -0,0 +1,60 @@
+/** Dependency-free strict settings and structural host form descriptor. */
+export const AUTO_COMPACT_DEFAULTS = Object.freeze({ thresholdPercent: 50, cooldownSeconds: 120, timeoutSeconds: 120 })
+const LIMITS = Object.freeze({ thresholdPercent: [1, 99], cooldownSeconds: [30, 3600], timeoutSeconds: [10, 600] })
+const WRITE = Symbol.for('cosmokit.volatile.write')
+
+export function resolveAutoCompactConfig(input = {}) {
+  if (input === null || typeof input !== 'object' || Array.isArray(input)
+    || ![Object.prototype, null].includes(Object.getPrototypeOf(input))) {
+    throw new TypeError('dsh-ops auto-compact config must be a plain object')
+  }
+  for (const key of Object.keys(input)) {
+    if (!Object.hasOwn(LIMITS, key)) throw new TypeError(`dsh-ops auto-compact: unknown config key ${key}`)
+  }
+  return Object.fromEntries(Object.entries(AUTO_COMPACT_DEFAULTS).map(([key, fallback]) => {
+    const raw = input[key]
+    const value = raw !== null && typeof raw === 'object' && WRITE in raw ? raw.get() : raw === undefined ? fallback : raw
+    const [min, max] = LIMITS[key]
+    if (!Number.isInteger(value) || value < min || value > max) {
+      throw new TypeError(`dsh-ops auto-compact: ${key} must be an integer between ${min} and ${max}`)
+    }
+    return [key, value]
+  }))
+}
+
+/**
+ * Standard Schema validation plus a serializable structural descriptor, not a
+ * Schemastery instance or vendor impersonation. The host rehydrates with its OWN
+ * library. No loading-time host values are imported. Live references implement
+ * the shared cosmokit.volatile.write protocol and are validated before updates.
+ */
+export function createAutoCompactConfigSchema() {
+  const dict = Object.fromEntries(Object.entries(AUTO_COMPACT_DEFAULTS).map(([key, value]) => [key, {
+    type: 'number',
+    meta: { default: value, min: LIMITS[key][0], max: LIMITS[key][1], step: 1, volatile: true },
+    toJSON() { return { type: this.type, meta: { ...this.meta } } },
+  }]))
+  return {
+    type: 'object', meta: { default: {} }, dict,
+    '~standard': {
+      version: 1, vendor: 'dsh-ops',
+      validate(input) {
+        try {
+          const value = Object.fromEntries(Object.entries(resolveAutoCompactConfig(input)).map(([key, initial]) => {
+            let current = initial
+            return [key, Object.freeze({ get: () => current, [WRITE]: next => { current = next } })]
+          }))
+          return { value }
+        } catch (error) { return { issues: [{ message: error.message }] } }
+      },
+    },
+    toJSON() {
+      const refs = { 0: { type: 'object', meta: { default: {} }, dict: {} } }
+      Object.entries(dict).forEach(([key, node], index) => {
+        refs[0].dict[key] = index + 1
+        refs[index + 1] = { type: node.type, meta: { ...node.meta } }
+      })
+      return { uid: 0, refs }
+    },
+  }
+}

package/node_modules/@dsh-ops/auto-compact/lib/index.js

@@ -0,0 +1,132 @@
+/** Idle-only policy over the same public compaction seam as /compact. */
+import { createAutoCompactConfigSchema, resolveAutoCompactConfig } from './config.js'
+
+export const name = 'dsh-ops-auto-compact'
+export const inject = ['compaction', 'sessionProjections']
+export const Config = createAutoCompactConfigSchema()
+
+/** Match the Web context meter; absent/invalid samples never trigger work. */
+export function contextPercent(pressure) {
+  const used = pressure?.projectedTokens ?? pressure?.pressureTokens
+  const capacity = pressure?.contextWindow
+  if (!Number.isFinite(used) || used < 0 || !Number.isFinite(capacity) || capacity <= 0) return null
+  return Math.min(100, Math.round(used / capacity * 100))
+}
+
+/** Surface changes, not compaction bookkeeping, permit a fresh attempt. */
+function surfaceKey(session) {
+  return JSON.stringify([session.surface.contentGeneration, session.surface.nodes])
+}
+
+/** Bounded, event-driven supervisor. It never publishes a model-callable tool. */
+export function createAutoCompactor(ctx, rawConfig, {
+  now = Date.now, setTimer = setTimeout, clearTimer = clearTimeout,
+} = {}) {
+  const states = new WeakMap()
+  const active = new Map()
+  const disposedAgents = new WeakSet()
+  let closed = false
+  // One summary at a time for this component, across all sessions.
+  let globalNextAt = 0
+
+  function check(agent) {
+    if (closed || disposedAgents.has(agent) || agent.status !== 'idle' || active.size > 0) return
+    let config, percent, key
+    try {
+      config = resolveAutoCompactConfig(rawConfig)
+      percent = contextPercent(ctx.get('sessionProjections').snapshot(agent.session, ['contextPressure']).values.contextPressure)
+      key = surfaceKey(agent.session)
+    } catch {
+      // No guessed capacity, no admission when a required service disappears.
+      return
+    }
+    if (percent === null || percent <= config.thresholdPercent) return
+    const state = states.get(agent.session)
+    const time = now()
+    if (time < globalNextAt || time < (state?.nextAt ?? 0)
+      || state?.blocked
+      || state?.key === key && state.threshold === config.thresholdPercent) return
+
+    const controller = new AbortController()
+    const slot = { controller, done: undefined }
+    // Install before calling compactNow: service admission may emit synchronously.
+    active.set(agent, slot)
+    states.set(agent.session, { key, threshold: config.thresholdPercent, nextAt: time + config.cooldownSeconds * 1000 })
+    globalNextAt = time + config.cooldownSeconds * 1000
+    const timer = setTimer(() => controller.abort(new Error('Automatic compaction timed out')), config.timeoutSeconds * 1000)
+    timer.unref?.()
+    let blocked = false
+    slot.done = (async () => {
+      try {
+        const result = await ctx.get('compaction').compactNow(agent, controller.signal)
+        if (result !== null) ctx.logger.info('dsh-ops auto-compact: compacted idle session history')
+      } catch (error) {
+        const code = error?.code
+        if (code === 'commit' || code === 'persistence') {
+          blocked = true
+          ctx.logger.warn('dsh-ops auto-compact: session requires inspection after a commit/save failure; automatic compaction is suspended until this component is reloaded')
+        } else if (!controller.signal.aborted && code !== 'busy' && code !== 'cancelled') {
+          // Do not log history, provider errors, paths or credentials.
+          ctx.logger.warn('dsh-ops auto-compact: compaction failed; automatic retry is backed off')
+        }
+      } finally {
+        clearTimer(timer)
+        // Suppress retries against our own replacement or bookkeeping records.
+        try {
+          states.set(agent.session, {
+            key: surfaceKey(agent.session), threshold: config.thresholdPercent, blocked,
+            nextAt: now() + config.cooldownSeconds * 1000,
+          })
+        } catch { /* disposed session */ }
+        globalNextAt = now() + config.cooldownSeconds * 1000
+        if (active.get(agent) === slot) active.delete(agent)
+      }
+    })()
+  }
+
+  function retire(agent) {
+    disposedAgents.add(agent)
+    active.get(agent)?.controller.abort(new Error('Agent disposed'))
+  }
+
+  async function dispose() {
+    closed = true
+    const slots = [...active.values()]
+    for (const slot of slots) slot.controller.abort(new Error('Automatic compaction component disabled'))
+    await Promise.allSettled(slots.map(slot => slot.done))
+  }
+  return { check, retire, dispose }
+}
+
+/** Keep this plugin's validated live references stable through Fiber.update. */
+export function installLiveConfigUpdates(ctx, config) {
+  ctx.on('internal/update', (candidate, _noSave, _next) => {
+    const values = resolveAutoCompactConfig(candidate)
+    const write = Symbol.for('cosmokit.volatile.write')
+    for (const [key, value] of Object.entries(values)) config[key][write](value)
+    try { ctx.emit('loader/volatile-update', Object.keys(values).map(key => [key])) }
+    catch { ctx.logger.warn('dsh-ops auto-compact: live config notification failed') }
+  })
+}
+
+/** Scoped listeners, abort and drain follow the host's teardown lifecycle. */
+export function apply(ctx, config = {}, { liveUpdates = true } = {}) {
+  resolveAutoCompactConfig(config)
+  if (liveUpdates) installLiveConfigUpdates(ctx, config)
+  const policy = createAutoCompactor(ctx, config)
+  const lastTurnSignals = new WeakMap()
+  ctx.effect(function* () {
+    yield () => policy.dispose()
+    yield ctx.on('agent/status', ({ agent, status }) => {
+      if (status === 'idle' && !lastTurnSignals.get(agent)?.aborted) policy.check(agent)
+    })
+    yield ctx.on('agent/turn-stopping', ({ agent, signal }) => {
+      lastTurnSignals.set(agent, signal)
+    })
+    yield ctx.on('agent/disposed', ({ agent }) => policy.retire(agent))
+    // Hot-enabling also covers already loaded idle sessions, without waking them.
+    ctx.inject(['agents'], inner => {
+      for (const agent of inner.get('agents').list()) policy.check(agent)
+    })
+  }, 'dsh-ops auto-compact lifecycle')
+}

package/node_modules/@dsh-ops/auto-compact/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Automatic context compaction",
+    "description": "Compact idle context above a configurable threshold (50% by default), without interrupting running tasks."
+  }
+}

package/node_modules/@dsh-ops/auto-compact/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "上下文自动压缩",
+    "description": "上下文占用高于可设置阈值（默认 50%）时，在会话空闲后自动压缩，避免打断运行中的任务。"
+  }
+}

package/node_modules/@dsh-ops/auto-compact/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@dsh-ops/auto-compact",
+  "version": "0.1.0",
+  "description": "Idle-only automatic context compaction and row settings for dsh-ops.",
+  "license": "MIT",
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
+  },
+  "dsh": {
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-plugin-manager"
+      ]
+    }
+  },
+  "files": ["lib", "locale", "LICENSE", "README.md"],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/T-Auto/dsh-ops.git",
+    "directory": "packages/auto-compact"
+  },
+  "publishConfig": { "access": "public" }
+}

package/package.json

@@ -1,8 +1,9 @@
 {
   "name": "dsh-ops",
-  "version": "0.2.4",
+  "version": "0.2.5-beta.1",
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "tag": "beta"
   },
   "repository": {
     "type": "git",
@@ -66,6 +67,7 @@
   },
   "files": [
     "lib",
+    "packages/auto-compact",
     "bin",
     "cordis.patch.yml",
     "dsh-plugin.json",
@@ -112,8 +114,8 @@
     }
   },
   "optionalDependencies": {
-    "@dsh-ops/fastctx-win32-x64": "0.2.1",
     "@dsh-ops/bash-win32-x64": "0.2.1",
+    "@dsh-ops/fastctx-win32-x64": "0.2.1",
     "@dsh-ops/pwsh-win32-x64": "0.2.1"
   },
   "devDependencies": {
@@ -127,5 +129,11 @@
   },
   "engines": {
     "node": "^22.19 || >=24"
+  },
+  "bundleDependencies": [
+    "@dsh-ops/auto-compact"
+  ],
+  "dependencies": {
+    "@dsh-ops/auto-compact": "file:packages/auto-compact"
   }
 }

package/packages/README.md

@@ -0,0 +1,87 @@
+# Platform package skeletons
+
+The three directories here are the **skeletons** of the platform packages this
+plugin publishes, one per package, named `<kind>-<platform>-<arch>`. They are
+not the same kind of package:
+
+| Skeleton | Published as | What it carries |
+| --- | --- | --- |
+| `fastctx-win32-x64/` | the FastCtx package for Windows x64 | a payload: `bin/fastctx.exe`, built from `vendor/fastctx`, plus the Apache-2.0 licence and notice documents |
+| `bash-win32-x64/` | the bash pin package for Windows x64 | metadata only: a pin on Git for Windows PortableGit |
+| `pwsh-win32-x64/` | the pwsh pin package for Windows x64 | metadata only: a pin on PowerShell 7 |
+
+Each skeleton holds only what is committed by hand: the package metadata, this
+documentation, and — for the FastCtx package — the licence and notice documents
+that must travel with the binary. **No binary is ever committed here.**
+
+## What the build puts in each package
+
+`scripts/build-platform-packages.mjs` writes every package to
+`<dist>/stage/<kind>-<platform>-<arch>/`.
+
+The **payload** package:
+
+```text
+fastctx-win32-x64/
+├── package.json                    name and version injected, the rest from the skeleton
+├── provenance.json                 source, toolchain, upstream revision, payload digest
+├── bin/fastctx.exe                 the payload
+├── LICENSE, NOTICE, FORK.md,       carried verbatim from vendor/fastctx, as Apache-2.0
+├── UPSTREAM.md,                    requires of a redistributor
+│   THIRD_PARTY_LICENSES*.md
+└── README.md
+```
+
+The **pin** packages:
+
+```text
+bash-win32-x64/  (and pwsh-win32-x64/)
+├── package.json                    name and version injected, the rest from the skeleton
+├── provenance.json                 the pin: repository, tag, asset name, URL, sha256,
+│                                   bytes, the measured unpacked size (files and bytes),
+│                                   unpacked layout, entry point and its digest, licence,
+│                                   copyright, and the statement that this package
+│                                   forwards no upstream bytes
+└── README.md
+```
+
+Two rules keep a pin a pin, and both are enforced rather than asserted:
+
+- **The stage may contain nothing else.** After assembly the script lists every
+  file in a pin package's stage and fails if any file is not one of
+  `package.json`, `provenance.json`, `README.md`. `--check` re-runs the same
+  test on the existing stages, so an upstream byte cannot slip into a pin
+  without failing a gate.
+- **The pin is data, not a copy of the digests in prose.** `provenance.json` is
+  generated from the pin record — today read from `lib/shells.js` when that
+  module exports a pin table or pin function, and otherwise from the measured
+  fallback inside the build script, which the script announces on every run and
+  `--check` prints. `--verify-upstream` re-derives each asset digest from the
+  live upstream release and deletes the download again, so a stale pin is one
+  command away from being caught.
+
+## Where the names come from
+
+**The package name lives in exactly one module.** `lib/shells.js`
+(`PLATFORM_PACKAGES`) owns the shell names and therefore the scope; the FastCtx
+name comes from `lib/binary.js` (`opsFastctxPackage`). The build script imports
+them and never spells a name out, which is why the skeleton `package.json` files
+carry neither `name` nor `version` — a re-scoped release is one edit in `lib/`,
+not a search-and-replace here.
+
+The version of a platform package is always the version of the main package
+(`package.json`), injected at build time so the two can never disagree.
+
+## Only the payload package is injected
+
+The main package's published copy declares the FastCtx platform package as an
+`optionalDependency` — injected by the build script, never in the committed
+manifest, where a version nobody has published yet would make every
+contributor's `npm install` a 404.
+
+The two shell pins are published but **never injected**, because installing one
+alone cannot work: a pin carries no shell, so a dependency on it would install
+metadata where a deployment expects a binary. They exist for a deployment that
+deliberately resolves a shell — the plugin's own provisioning path, or an
+explicit install — and an install on a platform they do not cover skips them
+instead of failing.

package/packages/auto-compact/LICENSE

@@ -0,0 +1,30 @@
+MIT License
+
+Copyright (c) 2026 T-Auto and the dsh-ops contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+-------------------------------------------------------------------------------
+
+This MIT license covers the dsh-ops plugin: everything in this repository
+except `vendor/fastctx/`, which is FastCtx under the Apache License 2.0. The
+distribution as a whole is therefore licensed under the composite
+`MIT AND Apache-2.0`. See `NOTICE` for the full statement and the attribution
+FastCtx requires, and `vendor/fastctx/LICENSE-APACHE` for the Apache License
+2.0 text.

package/packages/auto-compact/README.md

@@ -0,0 +1,23 @@
+# @dsh-ops/auto-compact
+
+Internal, bundled companion of dsh-ops. It adds one independently toggled row to
+**Plugins → dsh-ops → Included components**, not a second marketplace bundle.
+The package-root entry is required by DSH rc.2's browser module discovery; plugin
+subpaths are not browser entry points. No separate installation is required.
+
+Defaults: threshold 50% (integer 1–99), cooldown 120s (30–3600), timeout 120s
+(10–600). Configuration belongs to this row and uses host profile settings with
+revision fencing and restore defaults. The policy calls the same public idle
+maintenance API as `/compact` only above the rounded Web context percentage and
+after a non-cancelled turn. Running tools are not interrupted. No new model-facing
+tool, polling, or host auto-policy modification is introduced.
+
+One owned operation at a time, cooldown, unchanged-surface suppression and
+abort/drain teardown bound work. Commit/save failures suspend this session until
+component reload and require inspection. Timeouts rely on cooperative cancellation.
+Summarization may call the host's configured model and incur cost; it is not
+lossless. Missing samples/capacity and busy admission skip work.
+
+This companion is carried by the dsh-ops 0.2.5-beta.1 prerelease candidate, not the
+stable 0.2.4. Check registry metadata for publication status. See the main repository's
+`docs/auto-compact.md` for safety limits and manual acceptance requirements.

package/packages/auto-compact/lib/client.js

@@ -0,0 +1,79 @@
+/** Browser artifact in the host's closure-factory module format; no globals except its loader. */
+window.__ModuleLoader__.load({ id: '@dsh-ops/auto-compact', factory: require => {
+  const { createElement: h, useState, useEffect, useRef } = require('react')
+  const NS = 'dshOps.autoCompact'
+  const dictionaries = {
+    en: {
+      title: 'Settings', threshold: 'Context threshold (%)', cooldown: 'Cooldown (seconds)', timeout: 'Compaction timeout (seconds)',
+      save: 'Save', reset: 'Restore defaults', saved: 'Saved', failed: 'Not saved. Configuration may have changed; reload and retry.',
+      unavailable: 'Enable this component to configure it. This client must have host settings write access.',
+      hint: 'When the Web context meter is strictly above the threshold, compact at the next idle boundary using the same service as /compact. Running tools are not interrupted. Summarization may call your configured model and incur cost. No extra model-facing tool is added.',
+      invalid: 'Enter integers: threshold 1–99, cooldown 30–3600, timeout 10–600.',
+    },
+    zh: {
+      title: '设置', threshold: '上下文阈值（%）', cooldown: '冷却时间（秒）', timeout: '压缩超时（秒）',
+      save: '保存', reset: '恢复默认', saved: '已保存', failed: '未保存，配置可能已变化，请重新加载后重试。',
+      unavailable: '请先启用此组件；当前客户端还需具有宿主设置写入权限。',
+      hint: 'Web 上下文占用严格高于阈值后，在下一次空闲边界调用与 /compact 相同的服务；不会打断正在运行的工具。摘要可能调用已配置模型并产生费用，不额外增加模型可调用工具。',
+      invalid: '请输入整数：阈值 1–99，冷却 30–3600 秒，超时 10–600 秒。',
+    },
+  }
+  const defaults = { thresholdPercent: 50, cooldownSeconds: 120, timeoutSeconds: 120 }
+  const fields = [
+    ['thresholdPercent', 'threshold', 1, 99],
+    ['cooldownSeconds', 'cooldown', 30, 3600],
+    ['timeoutSeconds', 'timeout', 10, 600],
+  ]
+  function Settings({ view, form, t }) {
+    const [draft, setDraft] = useState(defaults)
+    const [revision, setRevision] = useState(undefined)
+    const [busy, setBusy] = useState(false)
+    const [message, setMessage] = useState('')
+    const alive = useRef(false)
+    useEffect(() => { alive.current = true; return () => { alive.current = false } }, [])
+    useEffect(() => {
+      if (form?.state.status === 'ready') {
+        setDraft({ ...defaults, ...form.state.value })
+        setRevision(form.state.revision)
+      }
+    }, [form?.state.revision, form?.state.status])
+    if (view === 'summary') return t('hint')
+    const writable = form?.state.status === 'ready' && form.state.writable && form.state.mode === 'host'
+    async function save(reset) {
+      if (!writable || busy || revision === undefined) return
+      if (!reset && fields.some(([key, , min, max]) => !Number.isInteger(Number(draft[key])) || String(draft[key]).trim() === '' || Number(draft[key]) < min || Number(draft[key]) > max)) {
+        setMessage(t('invalid')); return
+      }
+      setBusy(true); setMessage('')
+      try {
+        const ops = fields.map(([key]) => reset
+          ? { op: 'unset', path: [key] }
+          : { op: 'set', path: [key], value: Number(draft[key]) })
+        const ok = await form.mutate(ops, revision)
+        if (alive.current) setMessage(t(ok ? 'saved' : 'failed'))
+      } catch { if (alive.current) setMessage(t('failed')) }
+      finally { if (alive.current) setBusy(false) }
+    }
+    return h('section', { 'data-dsh-ops-auto-compact-settings': true },
+      h('h4', null, t('title')),
+      h('p', null, t('hint')),
+      !writable ? h('p', { role: 'status' }, t('unavailable')) : null,
+      ...fields.map(([key, label, min, max]) => h('label', { key, style: { display: 'block', marginBottom: 12 } },
+        t(label), ' ', h('input', {
+          type: 'number', min, max, step: 1, value: draft[key], disabled: !writable || busy,
+          onChange: event => setDraft(current => ({ ...current, [key]: event.target.value })),
+        }))),
+      h('button', { type: 'button', disabled: !writable || busy, onClick: () => save(false) }, t('save')), ' ',
+      h('button', { type: 'button', disabled: !writable || busy, onClick: () => save(true) }, t('reset')),
+      h('p', { role: 'status' }, message))
+  }
+  return {
+    inject: ['slots', 'locale'],
+    apply(ctx) {
+      ctx.effect(() => ctx.get('locale').register(NS, dictionaries), 'dsh-ops settings locales')
+      ctx.get('slots').inject('plugins.row.config', () => ctx.get('slots').register({
+        name: 'plugins.row.config', key: 'dsh-ops#dsh-ops-auto-compact', locale: NS,
+      }, Settings))
+    },
+  }
+} })

package/packages/auto-compact/lib/config.js

@@ -0,0 +1,60 @@
+/** Dependency-free strict settings and structural host form descriptor. */
+export const AUTO_COMPACT_DEFAULTS = Object.freeze({ thresholdPercent: 50, cooldownSeconds: 120, timeoutSeconds: 120 })
+const LIMITS = Object.freeze({ thresholdPercent: [1, 99], cooldownSeconds: [30, 3600], timeoutSeconds: [10, 600] })
+const WRITE = Symbol.for('cosmokit.volatile.write')
+
+export function resolveAutoCompactConfig(input = {}) {
+  if (input === null || typeof input !== 'object' || Array.isArray(input)
+    || ![Object.prototype, null].includes(Object.getPrototypeOf(input))) {
+    throw new TypeError('dsh-ops auto-compact config must be a plain object')
+  }
+  for (const key of Object.keys(input)) {
+    if (!Object.hasOwn(LIMITS, key)) throw new TypeError(`dsh-ops auto-compact: unknown config key ${key}`)
+  }
+  return Object.fromEntries(Object.entries(AUTO_COMPACT_DEFAULTS).map(([key, fallback]) => {
+    const raw = input[key]
+    const value = raw !== null && typeof raw === 'object' && WRITE in raw ? raw.get() : raw === undefined ? fallback : raw
+    const [min, max] = LIMITS[key]
+    if (!Number.isInteger(value) || value < min || value > max) {
+      throw new TypeError(`dsh-ops auto-compact: ${key} must be an integer between ${min} and ${max}`)
+    }
+    return [key, value]
+  }))
+}
+
+/**
+ * Standard Schema validation plus a serializable structural descriptor, not a
+ * Schemastery instance or vendor impersonation. The host rehydrates with its OWN
+ * library. No loading-time host values are imported. Live references implement
+ * the shared cosmokit.volatile.write protocol and are validated before updates.
+ */
+export function createAutoCompactConfigSchema() {
+  const dict = Object.fromEntries(Object.entries(AUTO_COMPACT_DEFAULTS).map(([key, value]) => [key, {
+    type: 'number',
+    meta: { default: value, min: LIMITS[key][0], max: LIMITS[key][1], step: 1, volatile: true },
+    toJSON() { return { type: this.type, meta: { ...this.meta } } },
+  }]))
+  return {
+    type: 'object', meta: { default: {} }, dict,
+    '~standard': {
+      version: 1, vendor: 'dsh-ops',
+      validate(input) {
+        try {
+          const value = Object.fromEntries(Object.entries(resolveAutoCompactConfig(input)).map(([key, initial]) => {
+            let current = initial
+            return [key, Object.freeze({ get: () => current, [WRITE]: next => { current = next } })]
+          }))
+          return { value }
+        } catch (error) { return { issues: [{ message: error.message }] } }
+      },
+    },
+    toJSON() {
+      const refs = { 0: { type: 'object', meta: { default: {} }, dict: {} } }
+      Object.entries(dict).forEach(([key, node], index) => {
+        refs[0].dict[key] = index + 1
+        refs[index + 1] = { type: node.type, meta: { ...node.meta } }
+      })
+      return { uid: 0, refs }
+    },
+  }
+}

package/packages/auto-compact/lib/index.js

@@ -0,0 +1,132 @@
+/** Idle-only policy over the same public compaction seam as /compact. */
+import { createAutoCompactConfigSchema, resolveAutoCompactConfig } from './config.js'
+
+export const name = 'dsh-ops-auto-compact'
+export const inject = ['compaction', 'sessionProjections']
+export const Config = createAutoCompactConfigSchema()
+
+/** Match the Web context meter; absent/invalid samples never trigger work. */
+export function contextPercent(pressure) {
+  const used = pressure?.projectedTokens ?? pressure?.pressureTokens
+  const capacity = pressure?.contextWindow
+  if (!Number.isFinite(used) || used < 0 || !Number.isFinite(capacity) || capacity <= 0) return null
+  return Math.min(100, Math.round(used / capacity * 100))
+}
+
+/** Surface changes, not compaction bookkeeping, permit a fresh attempt. */
+function surfaceKey(session) {
+  return JSON.stringify([session.surface.contentGeneration, session.surface.nodes])
+}
+
+/** Bounded, event-driven supervisor. It never publishes a model-callable tool. */
+export function createAutoCompactor(ctx, rawConfig, {
+  now = Date.now, setTimer = setTimeout, clearTimer = clearTimeout,
+} = {}) {
+  const states = new WeakMap()
+  const active = new Map()
+  const disposedAgents = new WeakSet()
+  let closed = false
+  // One summary at a time for this component, across all sessions.
+  let globalNextAt = 0
+
+  function check(agent) {
+    if (closed || disposedAgents.has(agent) || agent.status !== 'idle' || active.size > 0) return
+    let config, percent, key
+    try {
+      config = resolveAutoCompactConfig(rawConfig)
+      percent = contextPercent(ctx.get('sessionProjections').snapshot(agent.session, ['contextPressure']).values.contextPressure)
+      key = surfaceKey(agent.session)
+    } catch {
+      // No guessed capacity, no admission when a required service disappears.
+      return
+    }
+    if (percent === null || percent <= config.thresholdPercent) return
+    const state = states.get(agent.session)
+    const time = now()
+    if (time < globalNextAt || time < (state?.nextAt ?? 0)
+      || state?.blocked
+      || state?.key === key && state.threshold === config.thresholdPercent) return
+
+    const controller = new AbortController()
+    const slot = { controller, done: undefined }
+    // Install before calling compactNow: service admission may emit synchronously.
+    active.set(agent, slot)
+    states.set(agent.session, { key, threshold: config.thresholdPercent, nextAt: time + config.cooldownSeconds * 1000 })
+    globalNextAt = time + config.cooldownSeconds * 1000
+    const timer = setTimer(() => controller.abort(new Error('Automatic compaction timed out')), config.timeoutSeconds * 1000)
+    timer.unref?.()
+    let blocked = false
+    slot.done = (async () => {
+      try {
+        const result = await ctx.get('compaction').compactNow(agent, controller.signal)
+        if (result !== null) ctx.logger.info('dsh-ops auto-compact: compacted idle session history')
+      } catch (error) {
+        const code = error?.code
+        if (code === 'commit' || code === 'persistence') {
+          blocked = true
+          ctx.logger.warn('dsh-ops auto-compact: session requires inspection after a commit/save failure; automatic compaction is suspended until this component is reloaded')
+        } else if (!controller.signal.aborted && code !== 'busy' && code !== 'cancelled') {
+          // Do not log history, provider errors, paths or credentials.
+          ctx.logger.warn('dsh-ops auto-compact: compaction failed; automatic retry is backed off')
+        }
+      } finally {
+        clearTimer(timer)
+        // Suppress retries against our own replacement or bookkeeping records.
+        try {
+          states.set(agent.session, {
+            key: surfaceKey(agent.session), threshold: config.thresholdPercent, blocked,
+            nextAt: now() + config.cooldownSeconds * 1000,
+          })
+        } catch { /* disposed session */ }
+        globalNextAt = now() + config.cooldownSeconds * 1000
+        if (active.get(agent) === slot) active.delete(agent)
+      }
+    })()
+  }
+
+  function retire(agent) {
+    disposedAgents.add(agent)
+    active.get(agent)?.controller.abort(new Error('Agent disposed'))
+  }
+
+  async function dispose() {
+    closed = true
+    const slots = [...active.values()]
+    for (const slot of slots) slot.controller.abort(new Error('Automatic compaction component disabled'))
+    await Promise.allSettled(slots.map(slot => slot.done))
+  }
+  return { check, retire, dispose }
+}
+
+/** Keep this plugin's validated live references stable through Fiber.update. */
+export function installLiveConfigUpdates(ctx, config) {
+  ctx.on('internal/update', (candidate, _noSave, _next) => {
+    const values = resolveAutoCompactConfig(candidate)
+    const write = Symbol.for('cosmokit.volatile.write')
+    for (const [key, value] of Object.entries(values)) config[key][write](value)
+    try { ctx.emit('loader/volatile-update', Object.keys(values).map(key => [key])) }
+    catch { ctx.logger.warn('dsh-ops auto-compact: live config notification failed') }
+  })
+}
+
+/** Scoped listeners, abort and drain follow the host's teardown lifecycle. */
+export function apply(ctx, config = {}, { liveUpdates = true } = {}) {
+  resolveAutoCompactConfig(config)
+  if (liveUpdates) installLiveConfigUpdates(ctx, config)
+  const policy = createAutoCompactor(ctx, config)
+  const lastTurnSignals = new WeakMap()
+  ctx.effect(function* () {
+    yield () => policy.dispose()
+    yield ctx.on('agent/status', ({ agent, status }) => {
+      if (status === 'idle' && !lastTurnSignals.get(agent)?.aborted) policy.check(agent)
+    })
+    yield ctx.on('agent/turn-stopping', ({ agent, signal }) => {
+      lastTurnSignals.set(agent, signal)
+    })
+    yield ctx.on('agent/disposed', ({ agent }) => policy.retire(agent))
+    // Hot-enabling also covers already loaded idle sessions, without waking them.
+    ctx.inject(['agents'], inner => {
+      for (const agent of inner.get('agents').list()) policy.check(agent)
+    })
+  }, 'dsh-ops auto-compact lifecycle')
+}

package/packages/auto-compact/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Automatic context compaction",
+    "description": "Compact idle context above a configurable threshold (50% by default), without interrupting running tasks."
+  }
+}

package/packages/auto-compact/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "上下文自动压缩",
+    "description": "上下文占用高于可设置阈值（默认 50%）时，在会话空闲后自动压缩，避免打断运行中的任务。"
+  }
+}

package/packages/auto-compact/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@dsh-ops/auto-compact",
+  "version": "0.1.0",
+  "description": "Idle-only automatic context compaction and row settings for dsh-ops.",
+  "license": "MIT",
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
+  },
+  "dsh": {
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-plugin-manager"
+      ]
+    }
+  },
+  "files": ["lib", "locale", "LICENSE", "README.md"],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/T-Auto/dsh-ops.git",
+    "directory": "packages/auto-compact"
+  },
+  "publishConfig": { "access": "public" }
+}