dsh-web-fetch-enhanced 0.0.5 → 0.0.7

package/README.en.md

@@ -35,7 +35,7 @@ With an empty CIDR allowlist, the security boundary remains equivalent to the na
 
 ## Compatibility & Support Policy
 
-- **Minimum Supported DSH Version**: `0.1.5-rc.2`
+- **Minimum Supported DSH Version**: `0.1.7-rc.1`
 - **Support Policy**: This plugin **only supports DeepSeek Harness RC (Release Candidate) releases and future stable releases**. Compatibility is not maintained for rapid-moving Alpha or development snapshot versions.
 
 ## Quick start
@@ -60,9 +60,9 @@ dsh plugin --profile web add link:/absolute/path/to/dsh-web-fetch-enhanced
 
 Open DSH Web and go to:
 
-**Settings → Plugins → Configurable plugins → Web Fetch Enhanced**
+**Plugins → dsh-web-fetch-enhanced**
 
-Expand the card and enter one network per line under **Allowed CIDRs**. For a typical Clash / Mihomo fake-IP setup:
+The details page shows the allowlist form directly. Enter one network per line under **Allowed CIDRs**. For a typical Clash / Mihomo fake-IP setup:
 
 ```text
 198.18.0.0/15
@@ -75,7 +75,9 @@ api.example.com
 *.docs.example.com
 ```
 
-Choose **Save**. The next `web_fetch` uses the new policy; no Profile restart is required.
+Choose **Save**. The page shows **Saved** and keeps the fields visible. The next `web_fetch` uses the new policy; no Profile restart is required.
+
+DSH displays component status below the form. You do not need to open a component to configure the allowlist.
 
 ### 3. Keep using `web_fetch` normally
 
@@ -150,12 +152,21 @@ Allow only the smallest range you actually need. Do not add all RFC 1918 space f
 
 ## Settings actions
 
-- **Save** writes the current draft to the user settings layer.
-- **Discard** drops unsaved edits and restores the effective values.
-- **Reset to Profile** stages removal of the user overrides for `allowCidrs` and `allowHostnames`, restoring Profile inheritance after you choose **Save**.
-- A **read-only** card means the current connection cannot persist Host Profile settings. Normally, open DSH Web from a loopback address on the Host.
+- **Save** writes both allowlists in one mutation to the selected Profile plugin row. Host rejection or a revision conflict is not reported as success.
+- **Discard** drops unsaved edits and restores effective values.
+- **Restore inherited values** stages removal of both allowlist overrides; choose **Save** to apply. Inherited values may contain a non-empty allowlist, so review the resulting policy.
+- **Read-only** means the form is not ready, the row is unavailable, or the connection cannot write. The card never falls back to another Profile or global configuration.
+
+## Profile configuration and migration
+
+Starting with DSH `0.1.7-rc.1`, this plugin uses Profile-owned Cordis `Config`, `.volatile()`, and plugin-manager `configForms`. It no longer reads global `$DSH_HOME/settings.yaml`.
 
-Saving explicit empty lists is different from resetting: empty lists override the Profile with nothing, while reset restores inheritance.
+- Effective configuration combines schema defaults with the current Profile composition/patch. Web edits target only the selected plugin row.
+- **Clearing a field and saving writes an explicit `[]`** to revoke inherited allowlists. Empty arrays are meaningful security overrides and are no longer pruned.
+- **Restore is not clear**: only an explicit restore uses `unset`, which may reactivate an inherited allowlist.
+- Back up legacy settings, review the old `web-fetch-enhanced` section, and move intended rules into the target Profile plugin configuration. Global authorizations are never automatically copied to every Profile.
+
+See the [0.1.7-rc.1 migration notes (Chinese)](docs/migration-0.1.7-rc.1.zh-CN.md).
 
 ## Security guidance
 
@@ -211,7 +222,9 @@ No. After a successful Web settings save, the next `web_fetch` uses the new poli
 <details>
 <summary><strong>Why is the settings card read-only?</strong></summary>
 
-The current browser connection cannot persist Host settings. Open DSH Web from `127.0.0.1` or `localhost` on the Host and verify that the Profile settings service is writable.
+Verify that the target Profile plugin row is enabled, its form is available, and the current connection has configuration write permission. An unavailable form never falls back to a different configuration.
+
+If both inputs remain disabled on DSH `0.1.7-rc.1` while the card renders normally, update to a build containing the configuration schema serialization fix, restart the Host, and refresh the page. Older builds expose custom validators whose callbacks are stripped during transport, preventing the browser form from becoming ready. The fix retains full Host validation.
 </details>
 
 <details>

package/README.md

@@ -35,7 +35,7 @@ DeepSeek Harness 原生 HTTP provider 默认拒绝所有非公网地址，这是
 
 ## 版本兼容性与支持策略
 
-- **最低支持的 DSH 版本**：`0.1.5-rc.2`
+- **最低支持的 DSH 版本**：`0.1.7-rc.1`
 - **版本支持策略**：本插件**仅对 DeepSeek Harness 的 RC（Release Candidate）候选发布版本及后续稳定正式版提供支持**。由于 Alpha 或开发快照版本更迭频繁且缺乏稳定的 API 保证，本插件不再对 Alpha 等非 RC 阶段版本进行维护与适配。
 
 ## 快速开始
@@ -60,9 +60,9 @@ dsh plugin --profile web add link:/absolute/path/to/dsh-web-fetch-enhanced
 
 打开 DSH Web，进入：
 
-**设置 → 插件 → 可配置插件 → Web Fetch Enhanced**
+**插件 → dsh-web-fetch-enhanced**
 
-展开卡片，在“允许的 CIDR”中每行填写一个网段。例如 Clash / Mihomo 的常见 Fake-IP 配置：
+详情页直接显示白名单表单，在“允许的 CIDR”中每行填写一个网段。例如 Clash / Mihomo 的常见 Fake-IP 配置：
 
 ```text
 198.18.0.0/15
@@ -75,7 +75,9 @@ api.example.com
 *.docs.example.com
 ```
 
-点击“保存”。无需重启 Profile，下一次 `web_fetch` 就会使用新规则。
+点击“保存”，页面显示“已保存”并保留输入框。无需重启 Profile，下一次 `web_fetch` 就会使用新规则。
+
+下方“包含的组件”由 DSH 展示插件运行状态，配置白名单不需要进入组件。
 
 ### 3. 正常使用 `web_fetch`
 
@@ -150,12 +152,21 @@ wiki.corp.example
 
 ## 设置页按钮说明
 
-- **保存**：把当前草稿写入用户设置层；
-- **放弃修改**：丢弃尚未保存的编辑，恢复当前生效值；
-- **重置为 Profile 配置**：把“删除 `allowCidrs` 和 `allowHostnames` 用户覆盖、重新继承 Profile composition”的操作加入草稿；仍需点击“保存”才会生效；
-- **只读状态**：当前连接没有持久化 Host Profile 设置的权限。通常应从 Host 本机的 loopback 地址打开 Web GUI。
+- **保存**：将两项白名单作为一次配置变更写入当前 Profile 的插件行；Host 校验失败或版本冲突不会显示为成功。
+- **放弃修改**：丢弃尚未保存的编辑，恢复当前生效值。
+- **恢复继承值**：将移除两项白名单覆盖的操作加入草稿；仍需点击“保存”才生效。继承值可能包含非空白名单，请检查保存后的生效值。
+- **只读状态**：当前表单尚未就绪、配置行不可用或连接没有写权限；不会回退到其他 Profile 或全局配置。
+
+## Profile 配置与旧版本迁移
+
+从 DSH `0.1.7-rc.1` 起，本插件使用 Profile 拥有的 Cordis `Config`、`.volatile()` 和插件管理页的 `configForms` 表单，不再读取全局 `$DSH_HOME/settings.yaml`。
 
-“保存空列表”和“重置为 Profile 配置”含义不同：前者显式覆盖为空，后者恢复继承。
+- 配置由 Schema 默认值与当前 Profile composition/patch 决定；Web 保存只修改选中的插件行。
+- **清空输入并保存会显式写入 `[]`**，用于撤销继承的白名单。空数组具有安全意义，不再自动清理。
+- **恢复继承与清空不同**：只有显式恢复操作才执行 `unset`，可能重新启用底层配置中的白名单。
+- 升级前备份旧设置，将旧 `web-fetch-enhanced` 节中的授权规则逐项审查后迁入目标 Profile 的插件配置。插件不会自动将全局授权复制到所有 Profile。
+
+详见 [0.1.7-rc.1 升级说明](docs/migration-0.1.7-rc.1.zh-CN.md)。
 
 ## 安全提示
 
@@ -211,7 +222,9 @@ Fake-IP 模式会把域名解析到 `198.18.0.0/15` 等保留网段，再由代
 <details>
 <summary><strong>为什么设置卡片是只读的？</strong></summary>
 
-当前浏览器连接不能持久化 Host 设置。请确认你从 Host 本机通过 `127.0.0.1` 或 `localhost` 访问，并检查 Profile 的设置服务是否允许写入。
+请确认目标 Profile 的插件行已启用且配置表单可用，并检查当前连接的配置写权限。表单未就绪或已失效时不会尝试修改其他配置。
+
+若在 DSH `0.1.7-rc.1` 中卡片正常显示，但两个输入框持续禁用，请更新到包含配置 schema 序列化修复的构建，重启 Host 后刷新页面。旧构建的自定义校验回调在传输中被移除，导致浏览器表单无法就绪；修复保留了 Host 端的完整校验。
 </details>
 
 <details>

package/docs/design.zh-CN.md

@@ -40,7 +40,7 @@ flowchart LR
 
 本插件是 Host 侧 provider：它消费已有的 <code>web</code> 服务并注册一个 fetch provider，但不发布新的 Cordis 服务。因此它属于 Host composition，不属于 agent preset。模型工具仍由 preset 中原有的 <code>tool-web</code> 行提供。
 
-入口采用 namespace plugin 约定，只命名导出 <code>name</code>、<code>inject</code>、<code>Config</code>、安全的 <code>createProvider</code> 和 <code>apply</code>，没有 default export，也不公开低级 pinned transport/custom resolver helper。与 DeepSeek Harness 内部插件一致，源码使用显式 <code>.ts</code> 相对导入，<code>cordis.source.patch.yml</code> 在开发时直接加载源码；发布构建由 TypeScript 生成 <code>lib/types</code>，再由 tsdown 分别输出 Host ESM <code>lib/index.js</code> 和浏览器 Client ESM <code>lib/client.js</code>。Client face 以 <code>web-fetch-enhanced</code> 命名空间键向 <code>settings.plugin.item</code> 注册白名单卡片；Host face 通过 <code>installSettingsSection</code> 将 Profile composition 作为 base layer，并让 provider 在每次请求时读取最新 resolved section。随包发布的 <code>cordis.patch.yml</code> 供操作者显式合并到 Profile composition。
+入口采用 namespace plugin 约定，无 default export；源码使用显式 `.ts` 相对导入。构建生成 Host ESM `lib/index.js`、类型声明及通过 DSH ModuleLoader 注册的浏览器 `lib/client.js`。Client face 在 `plugins.bundle.config` 中提供插件详情页白名单表单，通过 `configForms.get('web-fetch-enhanced')` 绑定当前 Profile 的固定插件行，并用 `useSyncExternalStore` 订阅状态。页面不重复绘制插件标题或嵌套折叠卡片，保存后保持字段可见并显示结果。Host face 使用带 `.volatile()` 的 Config 字段，通过 `.get()` 读取每次请求的配置快照。Loader 在完整 schema 校验后原子提交 live refs，`loader/volatile-update` 通知更新系统提示词；`providerId` 保持非 volatile，修改时由 Loader 重建实例。随包发布的 `cordis.patch.yml` 为 Profile 提供默认 composition。
 
 ## 3. Provider 选择
 
@@ -100,6 +100,15 @@ flowchart LR
 
 ## 6. 配置与生命周期
 
+### 6.1 Profile 配置层级
+
+配置由 Schema 默认值、Profile composition 和 Profile patch 覆盖共同决定，不再使用全局 `settings.yaml` 或 `settings.installSection`。客户端只绑定随包 patch 声明的 `web-fetch-enhanced` 行；配置不可用或只读时不向其他行写入。
+
+### 6.2 保存、清空与恢复继承
+
+表单将两项白名单通过单次 `form.mutate(ops, revision)` 原子提交，使用草稿开始时的 revision 校验并发修改。清空字段保存为显式空数组，只有“恢复继承”执行 `unset`。保存失败时保留草稿，放弃修改重新读取当前 Profile 的值。离开页面会丢弃未保存的草稿；外部变更会更新未编辑的表单，不覆盖正在编辑的草稿。
+
+### 6.3 启动阶段校验
 Cordis Config schema 提供所有默认值；<code>createProvider()</code> 也在直接调用时应用同一默认值。启动阶段校验：
 
 - provider ID 字符集和长度；
@@ -129,7 +138,7 @@ Cordis Config schema 提供所有默认值；<code>createProvider()</code> 也
 
 ## 8. 兼容策略
 
-插件只依赖 <code>@deepseek-ai/dsh-web</code> 和 <code>@deepseek-ai/dsh-timeout</code> 的公开包根 API，不依赖 DSH 包的 <code>src/*</code> 深路径。安全 transport 在本包内维护，相关行为通过契约测试固定。
+最低支持 DSH `0.1.7-rc.1`，DSH peers 声明 `>=0.1.7-rc.1 <0.2.0`，开发依赖固定为经过验证的 rc.1。使用 web、timeout、http-proxy、system-prompt、Cordis Loader 与客户端插件管理/配置表单的公开导出，不依赖 DSH 包的 `src/*` 深路径。安全 transport 在本包内维护，相关行为通过契约测试固定。
 
 版本升级时重点回归：
 

package/docs/migration-0.1.7-rc.1.zh-CN.md

@@ -0,0 +1,63 @@
+# DSH 0.1.7-rc.1 适配与迁移说明
+
+## 基线与版本门禁
+
+此次按上游 `dsh-v0.1.7-rc.1` 源码及 npm 发布包核对接口，不将历史会话评估当作 API 规范。最低支持版本由 `0.1.5-rc.2` 提升为 **`0.1.7-rc.1`**。
+
+- `engines.dsh` 和所有 DSH peer 范围为 `>=0.1.7-rc.1 <0.2.0`。
+- DSH 开发依赖固定 `0.1.7-rc.1`，锁文件同步更新；Cordis 使用 4.0.4、Schemastery 使用 3.18.4、Loader 使用 1.0.5。
+- 上游 `packages/boot/app-boot/src/plugin-compatibility.ts` 实际使用 `semver.satisfies(..., { includePrerelease: true })`。显式 rc 下界避免错误接纳更早版本，也能在常规包管理器 semver 语义下接纳目标 rc。
+- 本次验证针对 rc.1；范围内的未来版本不代表已实测，0.2 系列需重新评估。没有添加版本豁免，也没有修改用户 Profile。
+
+## 采用的上游新能力
+
+| 接入面 | 原实现 | 本次迁移 |
+| --- | --- | --- |
+| Host 配置 | settings.installSection/register 与全局覆盖 | Profile-owned Config + `.volatile()` |
+| 实时值 | 自定义 current/source/watch | Loader 稳定 live refs 的 `.get()` |
+| 配置通知 | Settings watcher | `loader/volatile-update`；授权变更后通知系统提示词 |
+| 客户端 | settingsScope + settings.plugin.item | 插件详情页 `plugins.bundle.config` 与订阅当前 Profile 的 configForms |
+| 保存 | 比对 user layer 推测写入结果 | 单次批量 mutate、revision 乐观并发校验和 Promise<boolean> 结果 |
+| 清空白名单 | unset 并自动清理空数组 | 显式保存 []；恢复继承才 unset |
+| 类型契约 | 本地模拟 Settings/SystemPrompt seam | 公开 Loader、SystemPrompt、PluginManager 类型 |
+
+注意：rc.1 的 volatile 字段是引用对象，不是自动变更的普通数组；没有使用未经上游证实的 `ctx.accept` API。`providerId` 不是 volatile 字段，修改 composition 中的身份会重建 provider，而不是把旧 ID 静默指向新配置。
+
+白名单和资源限制在 schema 校验阶段完整验证，Loader 成功后原子更新；非法候选不会部分扩大授权。每个请求捕获一份配置快照，在途请求继续使用启动时规则，下一次请求使用新配置。
+
+## 操作者迁移步骤
+
+1. 备份旧版 `$DSH_HOME/settings.yaml` 与目标 Profile composition。
+2. 将 Host 升级至 DSH `0.1.7-rc.1` 或更高的兼容版本，并安装/链接本插件新构建。
+3. 审查旧 `web-fetch-enhanced` 节，将必要的 `allowCidrs`、`allowHostnames` 及资源限制迁入目标 Profile 的 `web-fetch-enhanced` 插件行 config；或在插件详情页直接编辑白名单。
+4. 不再依赖全局 settings.yaml；本插件不会自动把全局授权复制到各 Profile，以免扩大网络访问权限。
+5. 保存后确认生效值。清空 CIDR 并保存意味着明确撤销非公网例外；恢复继承可能重新启用底层白名单，两者不可混同。
+6. 升级插件文件后按部署方式重载/重启 Host 并刷新 Web 页面；配置字段的正常保存不需要重启。
+7. 在实际部署中验证一个明确授权目标及一个未授权私网目标；不要为了测试额外放宽生产白名单。
+
+默认 bundle 行 ID 为 `web-fetch-enhanced`，插件详情页注册键为包名 `dsh-web-fetch-enhanced`。bundle 插槽不提供 owner form，客户端显式订阅该 Profile 行的 ConfigForm。手写 composition 改名时，需要使用宿主通用配置表单或配套调整订阅的行 ID；组件不会猜测其他行的配置。
+
+白名单在包详情页直接显示，不再进入组件行或展开额外卡片。保存后保留字段并显示结果，宿主的组件状态列表位于表单下方。
+
+## 输入框持续禁用的修复
+
+在 rc.1 的真实页面中，插件行正常运行且 Host 可写，但两个白名单输入框持续禁用。原因是 `settings.describe` 的传输 schema 保留了 `transform` 节点，却移除了其 `callback`。浏览器的 `ConfigFormController.decode()` 调用 `SettingsSchemaService.validate()` 时因此失败，表单一直停留在 `loading`。
+
+插件现在仅在 Host 的运行时 schema 中保留自定义校验；序列化时输出对应的普通数组和数值 schema，并保留默认值、上下界及 volatile 元数据。Host 的 ConfigEditor/Loader 仍通过原始 Standard Schema 校验完整候选，再持久化和提交 live refs；浏览器表单不承担 CIDR 和域名的安全校验。序列化节点身份保持稳定，避免无配置变化时递增 revision。
+
+已运行的 Host 需要重载插件模块或重启后刷新浏览器，单独刷新页面不会替换内存中的旧 Host schema。
+
+## 保持不变及不适用项目
+
+- `web_fetch` 工具名称、请求参数和返回结果不变；实际 rc.1 WebFetchProvider、WebFetchResult、代理路由接口与现有实现兼容。
+- DNS 全答案检查、连接固定、NAT64 检查、同源重定向、取消/超时、匿名 GET 与非公网默认拒绝策略保持。
+- 本插件没有旧图标导出、PTC、session-start、自定义会话附件、workspaceFiles 或工具视图接入，不为追逐新特性引入无关的浏览器/终端权限。
+- 程序化调用 `createProvider()` 的原始配置类型现在为 `ProviderConfig`；`Config` 表示 Loader 解析后的 live-ref 配置。旧客户端 settingsScope 相关 helper 不再导出。
+
+## 验证入口
+
+运行 `pnpm run check`：类型检查、类型感知 lint、Host/Client 构建、全部测试及 publint。测试覆盖版本门禁、真实 Loader 热配置生命周期、原子拒绝非法候选、系统提示词刷新、请求快照、表单拒绝/版本冲突和既有 SSRF/代理回归。另在独立临时 Profile、DSH 0.1.7-rc.1 和 Chromium 中验收实际配置页面；该验收不代表运行中的用户 Profile 已重载插件。
+
+本次验证结果：类型检查通过；类型感知 lint 为 0 warnings / 0 errors；Host、Client 与声明构建通过；13 个测试文件、100 项测试通过；发布覆盖率检查通过（行 99.54%、分支 95.48%）；`git diff --check` 通过。publint 退出码为 0，但保留一项提示：`./client` 的 `.js` 在 `type: module` 包中含 CJS 形式。该产物不是直接由 Node 导入的通用 ESM，而是 DSH `window.__ModuleLoader__.load` 的 factory 包装；已有构建产物测试验证实际 loader 注册与执行。没有为消除提示擅自改变宿主要求的客户端加载格式。
+
+真实浏览器验收通过：插件详情页直接显示可编辑表单、保存后字段保持可见并显示成功、刷新保留值、Host 拒绝非法 CIDR 且保留草稿、放弃修改、显式空数组持久化、恢复继承并从 Profile patch 中移除覆盖。桌面与 390px 窄屏布局均已检查；双标签页验证了未编辑表单同步、外部更新保留草稿及过期 revision 拒绝写入。测试使用隔离的临时 Profile，未改动用户生产 Profile。

package/docs/releases/0.0.7.md

@@ -0,0 +1,22 @@
+# v0.0.7
+
+## 兼容性
+
+- 最低支持 DeepSeek Harness **0.1.7-rc.1**，支持范围为 `>=0.1.7-rc.1 <0.2.0`。
+- 配置改为当前 Profile 的 Cordis Config 与 volatile 字段，不再读取全局 `settings.yaml`。旧版用户请按[迁移说明](../migration-0.1.7-rc.1.zh-CN.md)迁移白名单。
+- 程序化创建 provider 的原始配置类型为 `ProviderConfig`；`Config` 表示 Loader 解析后的 live-ref 配置。
+
+## 修复与改进
+
+- 修复配置 schema 的校验回调在传输中被移除后，两个输入框持续禁用的问题；Host 仍完整校验所有保存请求。
+- 白名单表单直接显示在插件详情页，无需进入组件；去掉重复标题和折叠卡片，保存后显示结果并保持字段可见。
+- 同步外部配置变更，保留未保存草稿，通过 revision 检查拒绝过期写入。
+- 清空白名单保存为显式空数组；只有“恢复继承”才移除覆盖，避免意外恢复底层授权。
+- 白名单与资源限制更新后供下一次请求使用，在途请求保留原配置快照；授权变化同步更新系统提示词。
+- 改善窄屏按钮布局，补充表单交互、schema 传输与 Loader 热更新回归测试。
+
+升级插件后重启 Host 并刷新 Web 页面。日常白名单保存无需重启。
+
+## English
+
+Requires DSH 0.1.7-rc.1 or later within the 0.1 series. Configuration now belongs to the active Profile; review and migrate legacy global allowlists before upgrading. This release fixes disabled configuration inputs, moves the form onto the plugin details page, preserves drafts during external updates, rejects stale writes, and distinguishes explicit empty overrides from resetting to inherited values. Host validation and request-level configuration snapshots remain enforced. Restart the Host and refresh the browser after upgrading.

package/lib/client.js

@@ -15,12 +15,6 @@ window.__ModuleLoader__.load({
 			const value = Reflect.get(layer, field);
 			return Array.isArray(value) && value.every((entry) => typeof entry === "string") ? value : void 0;
 		}
-		function hasLayerField(layer, field) {
-			return typeof layer === "object" && layer !== null && Object.prototype.hasOwnProperty.call(layer, field);
-		}
-		function equalValues(actual, expected) {
-			return actual !== void 0 && actual.length === expected.length && actual.every((value, index) => value === expected[index]);
-		}
 		function parseLines(text) {
 			const values = text.split(/\r?\n/u).map((line) => line.trim()).filter(Boolean);
 			return {
@@ -28,228 +22,287 @@ window.__ModuleLoader__.load({
 				duplicate: new Set(values).size !== values.length
 			};
 		}
-		const cardCss = ".web-fetch-enhanced-card{list-style:none;border:1px solid var(--dsw-alias-border-l2);border-radius:12px;background:var(--dsw-alias-bg-layer-3);color:var(--dsw-alias-label-primary);transition:border-color .16s,background .16s}.web-fetch-enhanced-card:hover{border-color:var(--dsw-alias-label-dimmed)}.web-fetch-enhanced-card[data-open='true']{border-color:var(--dsw-alias-label-dimmed);background:var(--dsw-alias-bg-layer-2)}.web-fetch-enhanced-header{width:100%;appearance:none;border:0;background:none;font:inherit;color:inherit;text-align:left;cursor:pointer;display:flex;align-items:center;gap:12px;padding:14px 16px;border-radius:12px}.web-fetch-enhanced-header:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:-2px}.web-fetch-enhanced-head-text{flex:1;min-width:0;display:flex;flex-direction:column;gap:4px}.web-fetch-enhanced-name{font-size:15px;font-weight:600;line-height:1.4;color:var(--dsw-alias-label-primary)}.web-fetch-enhanced-description{font-size:13px;line-height:1.5;color:var(--dsw-alias-label-tertiary)}.web-fetch-enhanced-pending{flex:none;border-radius:999px;padding:1px 8px;font-size:11px;line-height:17px;font-weight:500;white-space:nowrap;background:var(--dsw-alias-bg-module-platform);color:var(--dsw-alias-label-secondary)}.web-fetch-enhanced-chevron{box-sizing:border-box;flex:none;width:8px;height:8px;margin-right:3px;border-right:1.5px solid var(--dsw-alias-label-tertiary);border-bottom:1.5px solid var(--dsw-alias-label-tertiary);transform:rotate(45deg);transition:transform .16s}.web-fetch-enhanced-card[data-open='true'] .web-fetch-enhanced-chevron{transform:rotate(225deg)}.web-fetch-enhanced-body{border-top:1px solid var(--dsw-alias-border-l2);margin:0 16px;padding-bottom:8px}.web-fetch-enhanced-field{display:flex;flex-direction:column;gap:6px;padding:12px 0}.web-fetch-enhanced-field+.web-fetch-enhanced-field{border-top:1px solid var(--dsw-alias-border-l2)}.web-fetch-enhanced-label{font-size:13px;font-weight:500;line-height:1.5;color:var(--dsw-alias-label-primary)}.web-fetch-enhanced-textarea{box-sizing:border-box;width:100%;min-height:96px;resize:vertical;padding:9px 12px;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;background:var(--dsw-alias-bg-layer-3);font:12px/1.55 ui-monospace,SFMono-Regular,Consolas,monospace;color:var(--dsw-alias-label-primary)}.web-fetch-enhanced-textarea:focus-visible{outline:none;border-color:var(--dsw-alias-brand-primary)}.web-fetch-enhanced-textarea[aria-invalid='true']{border-color:var(--dsw-alias-label-error)}.web-fetch-enhanced-textarea:disabled{color:var(--dsw-alias-label-tertiary);cursor:default}.web-fetch-enhanced-hint{margin:0;font-size:12px;line-height:1.5;color:var(--dsw-alias-label-tertiary)}.web-fetch-enhanced-invalid,.web-fetch-enhanced-failed{margin:0;font-size:12px;line-height:1.5;color:var(--dsw-alias-label-error)}.web-fetch-enhanced-readonly{margin:12px 0 0;font-size:12px;line-height:1.5;color:var(--dsw-alias-label-tertiary)}.web-fetch-enhanced-footer{display:flex;align-items:center;gap:8px;padding:12px 0 4px;border-top:1px solid var(--dsw-alias-border-l2)}.web-fetch-enhanced-failed{flex:1;min-width:0}.web-fetch-enhanced-actions{margin-left:auto;display:flex;align-items:center;justify-content:flex-end;gap:8px}.web-fetch-enhanced-button{appearance:none;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:5px 14px;background:none;font:inherit;font-size:13px;line-height:1.5;color:var(--dsw-alias-label-secondary);cursor:pointer}.web-fetch-enhanced-button:hover:not(:disabled){color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-dimmed)}.web-fetch-enhanced-save{border-color:transparent;background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)}.web-fetch-enhanced-save:hover:not(:disabled){border-color:transparent;color:var(--dsw-alias-bg-layer-3)}.web-fetch-enhanced-button:disabled{opacity:.4;cursor:default}.web-fetch-enhanced-button:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}@media(max-width:620px){.web-fetch-enhanced-footer{align-items:stretch;flex-direction:column}.web-fetch-enhanced-actions{width:100%;margin-left:0;flex-wrap:wrap}.web-fetch-enhanced-button{flex:1}.web-fetch-enhanced-pending{display:none}}";
-		function AllowlistCard({ scope, t }) {
-			const snapshot = (0, react.useSyncExternalStore)(scope.subscribe.bind(scope), scope.getSnapshot.bind(scope));
-			const resolvedCidrs = formatLines(snapshot.value?.allowCidrs);
-			const resolvedHostnames = formatLines(snapshot.value?.allowHostnames);
+		/** Empty input is an explicit empty profile override, never an implicit reset. */
+		function buildSaveOps(input, resetToInherited = false) {
+			if (resetToInherited) return [{
+				op: "unset",
+				path: ["allowCidrs"]
+			}, {
+				op: "unset",
+				path: ["allowHostnames"]
+			}];
+			return [{
+				op: "set",
+				path: ["allowCidrs"],
+				value: [...input.cidrs]
+			}, {
+				op: "set",
+				path: ["allowHostnames"],
+				value: [...input.hostnames]
+			}];
+		}
+		/** The boolean Host result is authoritative, including when recovered values match. */
+		async function saveAllowlist(form, ops, revision) {
+			if (form.state.status !== "ready" || !form.state.writable || revision === void 0) return false;
+			try {
+				return await form.mutate(ops, revision);
+			} catch {
+				return false;
+			}
+		}
+		function isDirty(params) {
+			return Boolean(params.resetToInherited) || params.cidrs !== params.resolvedCidrs || params.hostnames !== params.resolvedHostnames;
+		}
+		/** Subscribe to the bundle's exact Profile entry, including writes and external edits. */
+		function AllowlistBundlePage({ configForm, t }) {
+			const store = (0, react.useMemo)(() => ({
+				subscribe: (listener) => configForm.subscribe(listener),
+				getSnapshot: () => configForm.getSnapshot(),
+				mutate: configForm.mutate.bind(configForm)
+			}), [configForm]);
+			return (0, react_jsx_runtime.jsx)(AllowlistPage, {
+				view: "page",
+				form: {
+					state: (0, react.useSyncExternalStore)(store.subscribe, store.getSnapshot, store.getSnapshot),
+					mutate: store.mutate
+				},
+				t
+			});
+		}
+		/** Render only the supplied Profile form; never fall back to a global entry. */
+		function AllowlistPage({ view, form, t }) {
+			if (view === "summary") return (0, react_jsx_runtime.jsx)(react_jsx_runtime.Fragment, { children: t("description") });
+			if (!form || form.state.status === "unavailable") return (0, react_jsx_runtime.jsx)("p", {
+				role: "status",
+				children: t("unavailable")
+			});
+			if (form.state.status === "loading") return (0, react_jsx_runtime.jsx)("p", {
+				role: "status",
+				children: t("loading")
+			});
+			return (0, react_jsx_runtime.jsx)(AllowlistCard, {
+				form,
+				t
+			});
+		}
+		const cardCss = `
+.web-fetch-enhanced-form{color:var(--dsw-alias-label-primary)}
+.web-fetch-enhanced-field{display:flex;flex-direction:column;gap:6px;padding:12px 0}
+.web-fetch-enhanced-field+.web-fetch-enhanced-field{border-top:.5px solid var(--dsw-alias-border-l2)}
+.web-fetch-enhanced-label{font-size:13px;font-weight:500;line-height:1.5}
+.web-fetch-enhanced-textarea{box-sizing:border-box;width:100%;min-height:96px;resize:vertical;padding:9px 12px;border:.5px solid var(--dsw-alias-border-l4);border-radius:8px;background:var(--dsw-alias-bg-layer-3);font:12px/1.55 ui-monospace,SFMono-Regular,Consolas,monospace;color:var(--dsw-alias-label-primary)}
+.web-fetch-enhanced-textarea:focus-visible{outline:none;border-color:var(--dsw-alias-brand-primary)}
+.web-fetch-enhanced-textarea[aria-invalid='true']{border-color:var(--dsw-alias-state-error-primary)}
+.web-fetch-enhanced-textarea:disabled{color:var(--dsw-alias-label-tertiary);cursor:default}
+.web-fetch-enhanced-hint,.web-fetch-enhanced-status{margin:0;font-size:12px;line-height:1.5;color:var(--dsw-alias-label-tertiary)}
+.web-fetch-enhanced-invalid,.web-fetch-enhanced-failed{margin:0;font-size:12px;line-height:1.5;color:var(--dsw-alias-state-error-primary)}
+.web-fetch-enhanced-readonly{margin:0 0 12px;font-size:12px;line-height:1.5;color:var(--dsw-alias-label-tertiary)}
+.web-fetch-enhanced-footer{display:flex;align-items:center;gap:12px;padding:16px 0 4px}
+.web-fetch-enhanced-failed,.web-fetch-enhanced-status{flex:1;min-width:0}
+.web-fetch-enhanced-actions{margin-left:auto;display:flex;align-items:center;justify-content:flex-end;gap:8px}
+.web-fetch-enhanced-button{appearance:none;border:.5px solid var(--dsw-alias-border-l2);border-radius:8px;padding:5px 14px;background:none;font:inherit;font-size:13px;line-height:1.5;color:var(--dsw-alias-label-secondary);cursor:pointer}
+.web-fetch-enhanced-button:hover:not(:disabled){color:var(--dsw-alias-label-primary);border-color:var(--dsw-alias-label-dimmed)}
+.web-fetch-enhanced-save{border-color:transparent;background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)}
+.web-fetch-enhanced-save:hover:not(:disabled){border-color:transparent;color:var(--dsw-alias-bg-layer-3)}
+.web-fetch-enhanced-button:disabled{opacity:.4;cursor:default}
+.web-fetch-enhanced-button:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:1px}
+@media(max-width:620px){.web-fetch-enhanced-footer{align-items:stretch;flex-direction:column}.web-fetch-enhanced-actions{width:100%;margin-left:0;flex-wrap:wrap}.web-fetch-enhanced-button{flex:1}.web-fetch-enhanced-button:first-child{flex-basis:100%}}
+`;
+		function AllowlistCard({ form, t }) {
+			const snapshot = form.state;
+			const resolvedCidrs = formatLines(layerValues(snapshot.value, "allowCidrs"));
+			const resolvedHostnames = formatLines(layerValues(snapshot.value, "allowHostnames"));
 			const [cidrs, setCidrs] = (0, react.useState)(resolvedCidrs);
 			const [hostnames, setHostnames] = (0, react.useState)(resolvedHostnames);
-			const [open, setOpen] = (0, react.useState)(false);
 			const [saving, setSaving] = (0, react.useState)(false);
+			const [saved, setSaved] = (0, react.useState)(false);
 			const [failed, setFailed] = (0, react.useState)(false);
 			const [hasDraft, setHasDraft] = (0, react.useState)(false);
-			const [resetToProfile, setResetToProfile] = (0, react.useState)(false);
-			const bodyId = (0, react.useId)();
+			const [resetToInherited, setResetToInherited] = (0, react.useState)(false);
+			const [draftRevision, setDraftRevision] = (0, react.useState)(snapshot.revision);
+			const cidrsId = (0, react.useId)();
+			const hostnamesId = (0, react.useId)();
 			const cidrsHintId = (0, react.useId)();
 			const hostnamesHintId = (0, react.useId)();
 			(0, react.useEffect)(() => {
 				if (!saving && !hasDraft) {
 					setCidrs(resolvedCidrs);
 					setHostnames(resolvedHostnames);
+					setDraftRevision(snapshot.revision);
 				}
 			}, [
 				hasDraft,
 				resolvedCidrs,
 				resolvedHostnames,
-				saving
+				saving,
+				snapshot.revision
 			]);
 			const parsedCidrs = (0, react.useMemo)(() => parseLines(cidrs), [cidrs]);
 			const parsedHostnames = (0, react.useMemo)(() => parseLines(hostnames), [hostnames]);
-			const dirty = resetToProfile || cidrs !== resolvedCidrs || hostnames !== resolvedHostnames;
+			const dirty = failed || isDirty({
+				cidrs,
+				hostnames,
+				resolvedCidrs,
+				resolvedHostnames,
+				resetToInherited
+			});
 			const invalid = parsedCidrs.duplicate || parsedHostnames.duplicate;
 			const disabled = snapshot.status !== "ready" || !snapshot.writable || saving;
 			const save = async () => {
 				if (disabled || !dirty || invalid) return;
 				setSaving(true);
+				setSaved(false);
 				setFailed(false);
-				let accepted = false;
-				try {
-					if (resetToProfile) {
-						await scope.unset("allowCidrs");
-						await scope.unset("allowHostnames");
-						const user = scope.getSnapshot().user;
-						accepted = !hasLayerField(user, "allowCidrs") && !hasLayerField(user, "allowHostnames");
-					} else {
-						await scope.set("allowCidrs", parsedCidrs.values);
-						await scope.set("allowHostnames", parsedHostnames.values);
-						const user = scope.getSnapshot().user;
-						accepted = equalValues(layerValues(user, "allowCidrs"), parsedCidrs.values) && equalValues(layerValues(user, "allowHostnames"), parsedHostnames.values);
-					}
-				} catch {
-					accepted = false;
-				} finally {
-					setSaving(false);
-				}
+				const accepted = await saveAllowlist(form, buildSaveOps({
+					cidrs: parsedCidrs.values,
+					hostnames: parsedHostnames.values
+				}, resetToInherited), draftRevision);
+				setSaving(false);
 				if (accepted) {
 					setHasDraft(false);
-					setResetToProfile(false);
-					setOpen(false);
+					setResetToInherited(false);
+					setSaved(true);
 				} else setFailed(true);
 			};
 			const stageReset = () => {
 				if (disabled) return;
 				setCidrs(formatLines(layerValues(snapshot.base, "allowCidrs")));
 				setHostnames(formatLines(layerValues(snapshot.base, "allowHostnames")));
-				setResetToProfile(true);
+				setResetToInherited(true);
 				setHasDraft(true);
 				setFailed(false);
+				setSaved(false);
 			};
 			const discard = () => {
 				setCidrs(resolvedCidrs);
 				setHostnames(resolvedHostnames);
-				setResetToProfile(false);
+				setResetToInherited(false);
 				setHasDraft(false);
 				setFailed(false);
+				setSaved(false);
 			};
 			if (snapshot.status === "unavailable") return null;
-			const title = t("title");
-			return (0, react_jsx_runtime.jsxs)("li", {
-				className: "web-fetch-enhanced-card",
-				"data-open": open,
+			return (0, react_jsx_runtime.jsxs)("section", {
+				className: "web-fetch-enhanced-form",
+				"aria-label": t("title"),
+				"aria-busy": saving,
 				children: [
 					(0, react_jsx_runtime.jsx)("style", { children: cardCss }),
-					(0, react_jsx_runtime.jsxs)("button", {
-						type: "button",
-						className: "web-fetch-enhanced-header",
-						"aria-expanded": open,
-						"aria-controls": bodyId,
-						"aria-label": `${t(open ? "collapse" : "expand")}: ${title}`,
-						onClick: () => {
-							setOpen((value) => !value);
-						},
+					!snapshot.writable && snapshot.status === "ready" ? (0, react_jsx_runtime.jsx)("p", {
+						className: "web-fetch-enhanced-readonly",
+						role: "status",
+						children: t("readOnly")
+					}) : null,
+					(0, react_jsx_runtime.jsxs)("div", {
+						className: "web-fetch-enhanced-field",
 						children: [
-							(0, react_jsx_runtime.jsxs)("span", {
-								className: "web-fetch-enhanced-head-text",
-								children: [(0, react_jsx_runtime.jsx)("span", {
-									className: "web-fetch-enhanced-name",
-									children: title
-								}), (0, react_jsx_runtime.jsx)("span", {
-									className: "web-fetch-enhanced-description",
-									children: t("description")
-								})]
+							(0, react_jsx_runtime.jsx)("label", {
+								className: "web-fetch-enhanced-label",
+								htmlFor: cidrsId,
+								children: t("cidrs")
 							}),
-							dirty ? (0, react_jsx_runtime.jsx)("span", {
-								className: "web-fetch-enhanced-pending",
-								children: t("unsaved")
-							}) : null,
-							(0, react_jsx_runtime.jsx)("span", {
-								className: "web-fetch-enhanced-chevron",
-								"aria-hidden": "true"
+							(0, react_jsx_runtime.jsx)("textarea", {
+								id: cidrsId,
+								className: "web-fetch-enhanced-textarea",
+								value: cidrs,
+								disabled,
+								placeholder: t("cidrsPlaceholder"),
+								"aria-describedby": cidrsHintId,
+								"aria-invalid": parsedCidrs.duplicate || void 0,
+								spellCheck: false,
+								onChange: (event) => {
+									const value = event.target.value;
+									setCidrs(value);
+									setResetToInherited(false);
+									setHasDraft(value !== resolvedCidrs || hostnames !== resolvedHostnames);
+									setFailed(false);
+									setSaved(false);
+								}
+							}),
+							(0, react_jsx_runtime.jsx)("p", {
+								id: cidrsHintId,
+								className: parsedCidrs.duplicate ? "web-fetch-enhanced-invalid" : "web-fetch-enhanced-hint",
+								children: parsedCidrs.duplicate ? t("duplicate") : t("cidrsHint")
 							})
 						]
 					}),
-					open ? (0, react_jsx_runtime.jsxs)("div", {
-						className: "web-fetch-enhanced-body",
-						id: bodyId,
+					(0, react_jsx_runtime.jsxs)("div", {
+						className: "web-fetch-enhanced-field",
 						children: [
-							!snapshot.writable && snapshot.status === "ready" ? (0, react_jsx_runtime.jsx)("p", {
-								className: "web-fetch-enhanced-readonly",
+							(0, react_jsx_runtime.jsx)("label", {
+								className: "web-fetch-enhanced-label",
+								htmlFor: hostnamesId,
+								children: t("hostnames")
+							}),
+							(0, react_jsx_runtime.jsx)("textarea", {
+								id: hostnamesId,
+								className: "web-fetch-enhanced-textarea",
+								value: hostnames,
+								disabled,
+								placeholder: t("hostnamesPlaceholder"),
+								"aria-describedby": hostnamesHintId,
+								"aria-invalid": parsedHostnames.duplicate || void 0,
+								autoCapitalize: "none",
+								spellCheck: false,
+								onChange: (event) => {
+									const value = event.target.value;
+									setHostnames(value);
+									setResetToInherited(false);
+									setHasDraft(cidrs !== resolvedCidrs || value !== resolvedHostnames);
+									setFailed(false);
+									setSaved(false);
+								}
+							}),
+							(0, react_jsx_runtime.jsx)("p", {
+								id: hostnamesHintId,
+								className: parsedHostnames.duplicate ? "web-fetch-enhanced-invalid" : "web-fetch-enhanced-hint",
+								children: parsedHostnames.duplicate ? t("duplicate") : t("hostnamesHint")
+							})
+						]
+					}),
+					(0, react_jsx_runtime.jsxs)("div", {
+						className: "web-fetch-enhanced-footer",
+						children: [
+							failed ? (0, react_jsx_runtime.jsx)("p", {
+								className: "web-fetch-enhanced-failed",
+								role: "alert",
+								children: t("failed")
+							}) : null,
+							!failed ? (0, react_jsx_runtime.jsx)("p", {
+								className: "web-fetch-enhanced-status",
 								role: "status",
-								children: t("readOnly")
+								children: dirty ? t("unsaved") : saved ? t("saved") : ""
 							}) : null,
 							(0, react_jsx_runtime.jsxs)("div", {
-								className: "web-fetch-enhanced-field",
-								children: [
-									(0, react_jsx_runtime.jsx)("label", {
-										className: "web-fetch-enhanced-label",
-										htmlFor: "web-fetch-enhanced-cidrs",
-										children: t("cidrs")
-									}),
-									(0, react_jsx_runtime.jsx)("textarea", {
-										id: "web-fetch-enhanced-cidrs",
-										className: "web-fetch-enhanced-textarea",
-										value: cidrs,
-										disabled,
-										placeholder: t("cidrsPlaceholder"),
-										"aria-describedby": cidrsHintId,
-										"aria-invalid": parsedCidrs.duplicate || void 0,
-										spellCheck: false,
-										onChange: (event) => {
-											const value = event.target.value;
-											setCidrs(value);
-											setResetToProfile(false);
-											setHasDraft(value !== resolvedCidrs || hostnames !== resolvedHostnames);
-											setFailed(false);
-										}
-									}),
-									(0, react_jsx_runtime.jsx)("p", {
-										id: cidrsHintId,
-										className: parsedCidrs.duplicate ? "web-fetch-enhanced-invalid" : "web-fetch-enhanced-hint",
-										children: parsedCidrs.duplicate ? t("duplicate") : t("cidrsHint")
-									})
-								]
-							}),
-							(0, react_jsx_runtime.jsxs)("div", {
-								className: "web-fetch-enhanced-field",
+								className: "web-fetch-enhanced-actions",
 								children: [
-									(0, react_jsx_runtime.jsx)("label", {
-										className: "web-fetch-enhanced-label",
-										htmlFor: "web-fetch-enhanced-hostnames",
-										children: t("hostnames")
+									(0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "web-fetch-enhanced-button",
+										disabled: disabled || resetToInherited,
+										onClick: stageReset,
+										children: t("reset")
 									}),
-									(0, react_jsx_runtime.jsx)("textarea", {
-										id: "web-fetch-enhanced-hostnames",
-										className: "web-fetch-enhanced-textarea",
-										value: hostnames,
-										disabled,
-										placeholder: t("hostnamesPlaceholder"),
-										"aria-describedby": hostnamesHintId,
-										"aria-invalid": parsedHostnames.duplicate || void 0,
-										autoCapitalize: "none",
-										spellCheck: false,
-										onChange: (event) => {
-											const value = event.target.value;
-											setHostnames(value);
-											setResetToProfile(false);
-											setHasDraft(cidrs !== resolvedCidrs || value !== resolvedHostnames);
-											setFailed(false);
-										}
+									(0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "web-fetch-enhanced-button",
+										disabled: disabled || !dirty,
+										onClick: discard,
+										children: t("discard")
 									}),
-									(0, react_jsx_runtime.jsx)("p", {
-										id: hostnamesHintId,
-										className: parsedHostnames.duplicate ? "web-fetch-enhanced-invalid" : "web-fetch-enhanced-hint",
-										children: parsedHostnames.duplicate ? t("duplicate") : t("hostnamesHint")
+									(0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "web-fetch-enhanced-button web-fetch-enhanced-save",
+										disabled: disabled || !dirty || invalid,
+										onClick: () => {
+											save();
+										},
+										children: saving ? t("saving") : t("save")
 									})
 								]
-							}),
-							(0, react_jsx_runtime.jsxs)("div", {
-								className: "web-fetch-enhanced-footer",
-								children: [failed ? (0, react_jsx_runtime.jsx)("p", {
-									className: "web-fetch-enhanced-failed",
-									role: "alert",
-									children: t("failed")
-								}) : null, (0, react_jsx_runtime.jsxs)("div", {
-									className: "web-fetch-enhanced-actions",
-									children: [
-										(0, react_jsx_runtime.jsx)("button", {
-											type: "button",
-											className: "web-fetch-enhanced-button",
-											disabled: disabled || resetToProfile,
-											onClick: stageReset,
-											children: t("reset")
-										}),
-										(0, react_jsx_runtime.jsx)("button", {
-											type: "button",
-											className: "web-fetch-enhanced-button",
-											disabled: disabled || !dirty,
-											onClick: discard,
-											children: t("discard")
-										}),
-										(0, react_jsx_runtime.jsx)("button", {
-											type: "button",
-											className: "web-fetch-enhanced-button web-fetch-enhanced-save",
-											disabled: disabled || !dirty || invalid,
-											onClick: () => {
-												save();
-											},
-											children: saving ? t("saving") : t("save")
-										})
-									]
-								})]
 							})
 						]
-					}) : null
+					})
 				]
 			});
 		}
@@ -258,8 +311,7 @@ window.__ModuleLoader__.load({
 		const en = {
 			title: "Web Fetch Enhanced",
 			description: "Allow selected non-public destinations for web_fetch. Public addresses remain available by default.",
-			expand: "Expand",
-			collapse: "Collapse",
+			loading: "Loading configuration…",
 			unsaved: "Unsaved",
 			cidrs: "Allowed CIDRs",
 			cidrsHint: "One IPv4 or IPv6 CIDR per line. Keep the range as narrow as possible.",
@@ -268,12 +320,12 @@ window.__ModuleLoader__.load({
 			hostnamesHint: "Optional second factor. Use an exact hostname or a left-most *. wildcard; omit protocols, paths, and ports.",
 			hostnamesPlaceholder: "api.example.com\n*.docs.example.com",
 			save: "Save",
-			reset: "Reset to Profile",
+			reset: "Reset to inherited defaults",
 			discard: "Discard",
 			saving: "Saving…",
 			saved: "Saved",
-			failed: "The Host rejected the change. Review the entries and try again.",
-			unavailable: "This settings namespace is not available in the current Profile.",
+			failed: "The change was not saved. Review the entries, or discard to reload the current Profile before retrying.",
+			unavailable: "This plugin configuration is not available in the current Profile.",
 			readOnly: "This connection cannot persist Host Profile settings.",
 			duplicate: "Duplicate entries are not allowed.",
 			blank: "Blank entries are ignored."
@@ -281,8 +333,7 @@ window.__ModuleLoader__.load({
 		const zh = {
 			title: "Web Fetch Enhanced",
 			description: "允许 web_fetch 访问指定的非公网目标；公网地址默认仍可正常访问。",
-			expand: "展开",
-			collapse: "折叠",
+			loading: "正在加载配置…",
 			unsaved: "未保存",
 			cidrs: "允许的 CIDR",
 			cidrsHint: "每行一个 IPv4 或 IPv6 CIDR；请尽量缩小放行范围。",
@@ -291,25 +342,24 @@ window.__ModuleLoader__.load({
 			hostnamesHint: "可选的第二因子。填写精确域名或最左侧 *. 通配规则，不要包含协议、路径或端口。",
 			hostnamesPlaceholder: "api.example.com\n*.docs.example.com",
 			save: "保存",
-			reset: "重置为 Profile 配置",
+			reset: "重置为继承的默认配置",
 			discard: "放弃修改",
 			saving: "正在保存…",
 			saved: "已保存",
-			failed: "Host 拒绝了修改，请检查条目后重试。",
-			unavailable: "当前 Profile 未提供此设置命名空间。",
+			failed: "修改未保存。请检查条目，或放弃修改以重新加载当前 Profile 后重试。",
+			unavailable: "当前 Profile 未提供此插件配置。",
 			readOnly: "当前连接不能持久化 Host Profile 设置。",
 			duplicate: "不允许重复条目。",
 			blank: "空白行会被忽略。"
 		};
 		//#endregion
 		//#region lib/types/client/index.js
-		const SETTINGS_NAMESPACE = "web-fetch-enhanced";
 		const LOCALE_NAMESPACE = "settings.webFetchEnhanced";
 		const name = "web-fetch-enhanced-client";
 		const inject = [
 			"slots",
 			"locale",
-			"settingsScope"
+			"configForms"
 		];
 		function apply(ctx) {
 			const t = ctx.locale.bind(LOCALE_NAMESPACE);
@@ -317,23 +367,29 @@ window.__ModuleLoader__.load({
 				en,
 				zh
 			}), "web-fetch-enhanced: settings dictionaries");
-			const scope = ctx.settingsScope.bind({ namespace: SETTINGS_NAMESPACE });
-			ctx.slots.inject("settings.plugin.item", () => ctx.slots.register({
-				name: "settings.plugin.item",
-				key: SETTINGS_NAMESPACE,
+			const configForm = ctx.configForms.get("web-fetch-enhanced");
+			ctx.slots.inject("plugins.bundle.config", () => ctx.slots.register({
+				name: "plugins.bundle.config",
+				key: "dsh-web-fetch-enhanced",
 				locale: LOCALE_NAMESPACE,
 				inject: () => ({
-					scope,
-					t
+					t,
+					configForm
 				})
-			}, AllowlistCard));
+			}, AllowlistBundlePage));
 		}
 		//#endregion
+		exports.AllowlistBundlePage = AllowlistBundlePage;
 		exports.AllowlistCard = AllowlistCard;
+		exports.AllowlistPage = AllowlistPage;
 		exports.apply = apply;
+		exports.buildSaveOps = buildSaveOps;
 		exports.inject = inject;
+		exports.isDirty = isDirty;
+		exports.layerValues = layerValues;
 		exports.name = name;
 		exports.parseLines = parseLines;
+		exports.saveAllowlist = saveAllowlist;
 		return module.exports;
 	}
 });

package/lib/index.js

@@ -601,37 +601,59 @@ function translateAbortOrNetwork(error, signal) {
 * @module dsh-web-fetch-enhanced
 */
 const MAX_NODE_TIMER_DELAY_MS = 2147483647;
-const FIBER_DISPOSED = 4;
-const FIBER_UNLOADING = 5;
 /** Explicit product User-Agent used by default. */
 const DEFAULT_USER_AGENT = "dsh-web-fetch-enhanced/0.1.0";
 /** Default provider id; select it in the dsh-web row with fetchProvider. */
 const DEFAULT_PROVIDER_ID = "http-enhanced";
-/** Settings namespace paired with the Web Profile configuration card. */
+/** Default Loader entry id paired with the Web Profile configuration card. */
 const SETTINGS_NAMESPACE = "web-fetch-enhanced";
 /** Cordis plugin name used by loader diagnostics. */
 const name = "web-fetch-enhanced";
 /** The web seam this provider contributes to. */
 const inject = ["web"];
+/** Keep Host-only checks out of the schema serialized for browser forms. */
+function hostValidated(schema, validate) {
+	const checked = z.transform(schema, (value) => {
+		validate(value);
+		return value;
+	}, true);
+	const presentation = new z(schema.toJSON());
+	checked.toJSON = function() {
+		presentation.meta = {
+			...schema.meta,
+			...this.meta
+		};
+		return presentation.toJSON();
+	};
+	return checked;
+}
+/** Schemastery's number bounds alone do not reject NaN; validate finiteness before commit. */
+function positiveLimit(field, max = Number.MAX_VALUE) {
+	return hostValidated(z.number().min(Number.MIN_VALUE).max(max), (value) => {
+		assertPositiveFinite(field, value);
+	});
+}
+/** Validate the whole candidate before Loader atomically commits any live references. */
 const Config = z.object({
-	providerId: z.string().default(DEFAULT_PROVIDER_ID),
-	allowCidrs: z.array(z.string()).default([]),
-	allowHostnames: z.array(z.string()).default([]),
-	maxResponseBytes: z.number().default(5e6),
-	maxBodyChars: z.number().default(1e5),
-	timeoutMs: z.number().default(3e4),
-	maxRedirects: z.number().default(5),
-	userAgent: z.string().default(DEFAULT_USER_AGENT)
+	providerId: z.string().pattern(/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u).default(DEFAULT_PROVIDER_ID),
+	allowCidrs: hostValidated(z.array(z.string()), (value) => {
+		new AddressPolicy({ allowCidrs: value });
+	}).default([]).volatile(),
+	allowHostnames: hostValidated(z.array(z.string()), (value) => {
+		new AddressPolicy({ allowHostnames: value });
+	}).default([]).volatile(),
+	maxResponseBytes: positiveLimit("maxResponseBytes").default(5e6).volatile(),
+	maxBodyChars: positiveLimit("maxBodyChars").default(1e5).volatile(),
+	timeoutMs: positiveLimit("timeoutMs", MAX_NODE_TIMER_DELAY_MS).default(3e4).volatile(),
+	maxRedirects: z.number().step(1).min(0).max(Number.MAX_SAFE_INTEGER).default(5).volatile(),
+	userAgent: z.string().pattern(/^[\x20-\x7e\x80-\xff]*$/u).default(DEFAULT_USER_AGENT).volatile()
 });
 /** Build prompt guidance copy informing the model of authorized non-public destinations. */
 function formatAllowlistPrompt(config) {
 	const cidrs = config.allowCidrs ?? [];
 	const hostnames = config.allowHostnames ?? [];
-	if (cidrs.length === 0 && hostnames.length === 0) return "";
-	const items = [];
-	if (cidrs.length > 0) items.push(`CIDRs: ${cidrs.join(", ")}`);
-	if (hostnames.length > 0) items.push(`hostnames: ${hostnames.join(", ")}`);
-	return `The operator has explicitly authorized web_fetch access to the following non-public destinations: [${items.join("; ")}]. You can safely fetch these endpoints.`;
+	if (cidrs.length === 0) return "";
+	return `${`The operator has explicitly authorized web_fetch access to non-public addresses within [CIDRs: ${cidrs.join(", ")}].`}${hostnames.length === 0 ? "" : ` This exception requires BOTH an address within those CIDRs AND a URL hostname matching one of [hostnames: ${hostnames.join(", ")}]. Hostname rules only restrict the CIDR exceptions; they do not independently authorize any non-public address.`} All other URL, DNS, redirect, and transport safety checks still apply.`;
 }
 /** Construct the provider without mounting it, useful for tests and custom compositions. */
 function createProvider(config = {}, proxyResolver) {
@@ -654,57 +676,38 @@ function createProvider(config = {}, proxyResolver) {
 	};
 	return new EnhancedHttpFetchProvider(resolved.providerId, limits, createAllowlistResolver(policy), proxyResolver);
 }
-function isUnloading(ctx) {
-	const state = ctx.fiber?.state;
-	return state === FIBER_UNLOADING || state === FIBER_DISPOSED;
+/** Capture one coherent immutable configuration for a single request or prompt assembly. */
+function snapshotConfig(config) {
+	return {
+		providerId: config.providerId,
+		allowCidrs: config.allowCidrs.get(),
+		allowHostnames: config.allowHostnames.get(),
+		maxResponseBytes: config.maxResponseBytes.get(),
+		maxBodyChars: config.maxBodyChars.get(),
+		timeoutMs: config.timeoutMs.get(),
+		maxRedirects: config.maxRedirects.get(),
+		userAgent: config.userAgent.get()
+	};
 }
-/** Register the enhanced fetch provider and its live Web Profile settings section. */
+/** Register a provider backed exclusively by Loader-owned live Config references. */
 function apply(ctx, config) {
-	const providerId = resolveConfig(config).providerId;
-	let current = () => config;
-	ctx.inject(["settings"], (settingsCtx) => {
-		const settings = settingsCtx.settings;
-		if (typeof settings.installSection === "function") {
-			settings.installSection(ctx, SETTINGS_NAMESPACE, Config, config, {
-				setSource: (source) => {
-					current = source;
-				},
-				onChange: () => {
-					ctx.emit("system-prompt/change");
-				},
-				validate: (value) => {
-					if (resolveConfig(value).providerId !== providerId) throw new Error("web-fetch-enhanced: providerId cannot be changed through live settings");
-					createProvider(value);
-				}
-			});
-			return;
-		}
-		const scope = settings.register(SETTINGS_NAMESPACE, Config, {
-			base: config,
-			validate: (value) => {
-				if (resolveConfig(value).providerId !== providerId) throw new Error("web-fetch-enhanced: providerId cannot be changed through live settings");
-				createProvider(value);
-			}
-		});
-		current = () => scope.get();
-		settingsCtx.effect(() => () => {
-			if (isUnloading(ctx)) return;
-			current = () => config;
-			ctx.emit("system-prompt/change");
-		});
+	const providerId = createProvider(snapshotConfig(config)).id;
+	ctx.on("loader/volatile-update", (paths) => {
+		if (paths.some(([field]) => field === "allowCidrs" || field === "allowHostnames")) ctx.emit("system-prompt/change");
 	});
 	ctx.inject(["systemPrompt"], (promptCtx) => {
 		promptCtx.systemPrompt.section({
 			name: "web-fetch-enhanced:allowlist",
 			order: 2105,
-			text: () => formatAllowlistPrompt(current())
+			text: () => formatAllowlistPrompt(snapshotConfig(config)),
+			interpolate: false
 		});
 	});
 	const dynamicProvider = {
 		id: providerId,
 		available: () => true,
 		fetch: async (request, signal) => {
-			return await createProvider(current()).fetch(request, signal);
+			return await createProvider(snapshotConfig(config)).fetch(request, signal);
 		}
 	};
 	ctx.web.registerFetchProvider(dynamicProvider);

package/lib/types/client/AllowlistCard.d.ts

@@ -1,16 +1,51 @@
-import type { SettingsScope } from '@deepseek-ai/dsh-client-ui-settings/client';
+import type { ConfigPageForm, PluginConfigViewProps } from '@deepseek-ai/dsh-client-ui-plugin-manager/client';
+import type { ConfigForm } from '@deepseek-ai/dsh-client-ui-settings/client';
 import type { LocaleKey } from './locales.ts';
 export interface AllowlistSettings {
     allowCidrs?: string[];
     allowHostnames?: string[];
 }
 export interface AllowlistCardProps {
-    scope: SettingsScope<AllowlistSettings>;
+    form: ConfigPageForm;
     t: (key: LocaleKey) => string;
 }
+export type SettingsPathOp = {
+    op: 'set';
+    path: string[];
+    value: string[];
+} | {
+    op: 'unset';
+    path: string[];
+};
+export declare function formatLines(value: readonly string[] | undefined): string;
+export declare function layerValues(layer: unknown, field: keyof AllowlistSettings): string[] | undefined;
 export declare function parseLines(text: string): {
     values: string[];
     duplicate: boolean;
 };
-export declare function AllowlistCard({ scope, t }: AllowlistCardProps): import("react").JSX.Element | null;
+/** Empty input is an explicit empty profile override, never an implicit reset. */
+export declare function buildSaveOps(input: {
+    cidrs: readonly string[];
+    hostnames: readonly string[];
+}, resetToInherited?: boolean): SettingsPathOp[];
+/** The boolean Host result is authoritative, including when recovered values match. */
+export declare function saveAllowlist(form: ConfigPageForm, ops: readonly SettingsPathOp[], revision: number | undefined): Promise<boolean>;
+export interface DirtyCheckParams {
+    cidrs: string;
+    hostnames: string;
+    resolvedCidrs: string;
+    resolvedHostnames: string;
+    resetToInherited?: boolean;
+}
+export declare function isDirty(params: DirtyCheckParams): boolean;
+/** Subscribe to the bundle's exact Profile entry, including writes and external edits. */
+export declare function AllowlistBundlePage({ configForm, t }: {
+    configForm: ConfigForm<Record<string, unknown>>;
+    t: (key: LocaleKey) => string;
+}): import("react").JSX.Element;
+/** Render only the supplied Profile form; never fall back to a global entry. */
+export declare function AllowlistPage({ view, form, t }: PluginConfigViewProps & {
+    t: (key: LocaleKey) => string;
+}): import("react").JSX.Element;
+export declare function AllowlistCard({ form, t }: AllowlistCardProps): import("react").JSX.Element | null;
 //# sourceMappingURL=AllowlistCard.d.ts.map

package/lib/types/client/index.d.ts

@@ -8,6 +8,6 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
 export declare const name = "web-fetch-enhanced-client";
 export declare const inject: string[];
 export declare function apply(ctx: Context): void;
-export { AllowlistCard, parseLines } from './AllowlistCard.tsx';
-export type { AllowlistCardProps, AllowlistSettings } from './AllowlistCard.tsx';
+export { AllowlistCard, AllowlistPage, AllowlistBundlePage, parseLines, buildSaveOps, saveAllowlist, isDirty, layerValues } from './AllowlistCard.tsx';
+export type { AllowlistCardProps, AllowlistSettings, SettingsPathOp, DirtyCheckParams } from './AllowlistCard.tsx';
 //# sourceMappingURL=index.d.ts.map

package/lib/types/client/locales.d.ts

@@ -1,8 +1,7 @@
 export declare const en: {
     readonly title: "Web Fetch Enhanced";
     readonly description: "Allow selected non-public destinations for web_fetch. Public addresses remain available by default.";
-    readonly expand: "Expand";
-    readonly collapse: "Collapse";
+    readonly loading: "Loading configuration…";
     readonly unsaved: "Unsaved";
     readonly cidrs: "Allowed CIDRs";
     readonly cidrsHint: "One IPv4 or IPv6 CIDR per line. Keep the range as narrow as possible.";
@@ -11,12 +10,12 @@ export declare const en: {
     readonly hostnamesHint: "Optional second factor. Use an exact hostname or a left-most *. wildcard; omit protocols, paths, and ports.";
     readonly hostnamesPlaceholder: "api.example.com\n*.docs.example.com";
     readonly save: "Save";
-    readonly reset: "Reset to Profile";
+    readonly reset: "Reset to inherited defaults";
     readonly discard: "Discard";
     readonly saving: "Saving…";
     readonly saved: "Saved";
-    readonly failed: "The Host rejected the change. Review the entries and try again.";
-    readonly unavailable: "This settings namespace is not available in the current Profile.";
+    readonly failed: "The change was not saved. Review the entries, or discard to reload the current Profile before retrying.";
+    readonly unavailable: "This plugin configuration is not available in the current Profile.";
     readonly readOnly: "This connection cannot persist Host Profile settings.";
     readonly duplicate: "Duplicate entries are not allowed.";
     readonly blank: "Blank entries are ignored.";

package/lib/types/index.d.ts

@@ -6,27 +6,26 @@
  */
 import type { Context } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
-import type { SettingsNamespace } from '@deepseek-ai/dsh-settings';
 import { EnhancedHttpFetchProvider } from './provider.ts';
 import type { ProxyRouteResolver } from './resolver.ts';
 /** Explicit product User-Agent used by default. */
 export declare const DEFAULT_USER_AGENT = "dsh-web-fetch-enhanced/0.1.0";
 /** Default provider id; select it in the dsh-web row with fetchProvider. */
 export declare const DEFAULT_PROVIDER_ID = "http-enhanced";
-/** Settings namespace paired with the Web Profile configuration card. */
-export declare const SETTINGS_NAMESPACE: SettingsNamespace;
+/** Default Loader entry id paired with the Web Profile configuration card. */
+export declare const SETTINGS_NAMESPACE = "web-fetch-enhanced";
 /** Cordis plugin name used by loader diagnostics. */
 export declare const name = "web-fetch-enhanced";
 /** The web seam this provider contributes to. */
 export declare const inject: string[];
 /** Plugin configuration. Every non-public exception is explicit and deny-by-default. */
-export interface Config {
+export interface ProviderConfig {
     /** Provider id registered in ctx.web. Defaults to http-enhanced. */
     providerId?: string;
     /** Non-public IPv4/IPv6 CIDRs that may bypass the public-address filter. */
-    allowCidrs?: string[];
+    allowCidrs?: readonly string[];
     /** Optional exact hosts or left-most wildcard rules required in addition to allowCidrs. */
-    allowHostnames?: string[];
+    allowHostnames?: readonly string[];
     /** Maximum response body size in bytes. */
     maxResponseBytes?: number;
     /** Maximum decoded body length in characters. */
@@ -38,29 +37,35 @@ export interface Config {
     /** User-Agent header sent on every request. */
     userAgent?: string;
 }
-export declare const Config: z<Config>;
-interface SystemPromptSeam {
-    section(section: {
-        name: string;
-        order: number;
-        text: string | ((context?: unknown) => string);
-    }): () => void;
-}
-declare module '@deepseek-ai/cordis' {
-    interface Context {
-        systemPrompt?: SystemPromptSeam;
-    }
-    interface Events {
-        'system-prompt/change'(): void;
-    }
-}
+/** Validate the whole candidate before Loader atomically commits any live references. */
+export declare const Config: z<Schemastery.ObjectS<NoInfer<{
+    providerId: z<string, string, "defined">;
+    allowCidrs: z<NoInfer<string[]>, NoInfer<string[]>, "volatile-defined">;
+    allowHostnames: z<NoInfer<string[]>, NoInfer<string[]>, "volatile-defined">;
+    maxResponseBytes: z<number, number, "volatile-defined">;
+    maxBodyChars: z<number, number, "volatile-defined">;
+    timeoutMs: z<number, number, "volatile-defined">;
+    maxRedirects: z<number, number, "volatile-defined">;
+    userAgent: z<string, string, "volatile-defined">;
+}>>, Schemastery.ObjectT<NoInfer<{
+    providerId: z<string, string, "defined">;
+    allowCidrs: z<NoInfer<string[]>, NoInfer<string[]>, "volatile-defined">;
+    allowHostnames: z<NoInfer<string[]>, NoInfer<string[]>, "volatile-defined">;
+    maxResponseBytes: z<number, number, "volatile-defined">;
+    maxBodyChars: z<number, number, "volatile-defined">;
+    timeoutMs: z<number, number, "volatile-defined">;
+    maxRedirects: z<number, number, "volatile-defined">;
+    userAgent: z<string, string, "volatile-defined">;
+}>>, "plain">;
+/** Parsed plugin Config: ordinary identity plus stable live field references. */
+export type Config = ReturnType<typeof Config>;
 /** Build prompt guidance copy informing the model of authorized non-public destinations. */
-export declare function formatAllowlistPrompt(config: Config): string;
+export declare function formatAllowlistPrompt(config: ProviderConfig): string;
 /** Construct the provider without mounting it, useful for tests and custom compositions. */
-export declare function createProvider(config?: Config, proxyResolver?: ProxyRouteResolver): EnhancedHttpFetchProvider;
+export declare function createProvider(config?: ProviderConfig, proxyResolver?: ProxyRouteResolver): EnhancedHttpFetchProvider;
 export { isNonPublicIpLiteral } from './address-policy.ts';
 export type { ProxyRouteResolver, ProxyRouteResult } from './resolver.ts';
 export { defaultProxyRoute } from './resolver.ts';
-/** Register the enhanced fetch provider and its live Web Profile settings section. */
+/** Register a provider backed exclusively by Loader-owned live Config references. */
 export declare function apply(ctx: Context, config: Config): void;
 //# sourceMappingURL=index.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-web-fetch-enhanced",
-  "version": "0.0.5",
+  "version": "0.0.7",
   "description": "Configurable non-public address allowlists for DeepSeek Harness web_fetch",
   "type": "module",
   "main": "./lib/index.js",
@@ -36,7 +36,7 @@
     },
     "client": {
       "inject": [
-        "@deepseek-ai/dsh-client-ui-settings-plugins",
+        "@deepseek-ai/dsh-client-ui-plugin-manager",
         "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-locale",
         "@deepseek-ai/dsh-client-ui-renderer"
@@ -66,45 +66,51 @@
   },
   "engines": {
     "node": "^22.19.0 || >=24.0.0",
-    "dsh": ">=0.1.5-rc.2"
+    "dsh": ">=0.1.7-rc.1 <0.2.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1 || ^4.0.2",
-    "@deepseek-ai/dsh-timeout": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-settings": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-web": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-http-proxy": "^0.1.5-rc.2"
+    "@deepseek-ai/cordis": "^4.0.4",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.5",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-plugin-manager": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-http-proxy": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-system-prompt": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-timeout": ">=0.1.7-rc.1 <0.2.0",
+    "@deepseek-ai/dsh-web": ">=0.1.7-rc.1 <0.2.0"
   },
   "dependencies": {
-    "@deepseek-ai/schemastery": "^3.18.1 || ^3.18.2",
+    "@deepseek-ai/schemastery": "^3.18.4",
     "ipaddr.js": "^2.5.0",
     "undici": "^8.10.0"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-timeout": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-settings": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-web": "^0.1.5-rc.2",
-    "@deepseek-ai/dsh-http-proxy": "^0.1.5-rc.2",
+    "@deepseek-ai/cordis": "^4.0.4",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.5",
+    "@deepseek-ai/dsh-client-locale": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-plugin-manager": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-http-proxy": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-timeout": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-web": "0.1.7-rc.1",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.19.13",
     "@types/react": "~18.3.1",
+    "@types/react-test-renderer": "18.3.1",
+    "@types/semver": "^7.7.1",
     "@vitest/coverage-v8": "^4.1.8",
     "js-yaml": "^4.1.0",
     "oxlint": "^1.51.0",
     "oxlint-tsgolint": "7.0.2001",
     "publint": "^0.3.21",
     "react": "^18.2.0",
+    "react-test-renderer": "18.3.1",
+    "semver": "^7.8.5",
     "tsdown": "^0.21.0",
     "typescript": "^6.0.3",
     "vitest": "^4.1.8"