v0.6.0

• Web panel at /xray (mounted when the profile composes a webServer):
  summary, health, deps with the disable-cascade table, cost, and shadow
  views, live per request from the running composition. Zero dependencies —
  one self-contained HTML page plus /xray/api/* JSON endpoints; no React,
  no client bundle, no build step. Headless profiles skip it silently.

v0.5.0

• snapshot --against <lockfile>: compare the current composition against a
  saved snapshot — bundle version/patch drift, patch-layer content changes,
  package add/remove/version, composed-tree hash. Exits 1 on drift.
• Repository-source attribution: .dsh-plugin directories under the harness
  home are collected as a fourth layer kind (repository), so rows they
  insert attribute to the repository plugin that owns them.
• Validated end-to-end with a live model: an agent called xray_composition
  in a real conversation and reported the composition summary.

v0.4.1

• Ship assets/ (README hero and section headers) in the npm tarball so the
  package page renders them; no code change.

v0.4.0

• cost now attributes prompt sections: the mounted plugin observes the
  system-prompt/assemble waterfall (purely — the assembly passes through
  unmodified) and records per-section token estimates alongside tool schemas.
  Output separates section vs schema totals; empty state explains that one
  agent message is needed before sections appear.
• xray_composition summary and cost view carry the blended totals.
• README: terminal demo image plus real cost output.

v0.3.2

• README: real-output demo sections for attribute/deps/conflicts/diff;
  npm keywords extended for directory-site discovery. No code change.

v0.3.1

• Tests: plugin integration suite (mock Cordis ctx exercising apply, snapshot
  write, status transitions, and every xray_composition view) and a
  skippable real-dsh e2e suite driving the CLI binary.
• Repo: changelog, security policy, tag-driven release workflow with npm
  provenance, SHA-pinned actions, dependabot, badges, packageManager pin.
• No library behavior change.

v0.3.0

• audit: heuristic static scan of out-of-tree plugins for sensitive
  touchpoints — network egress, subprocess/shell, filesystem, environment
  variables, dynamic evaluation. Kernel @deepseek-ai/* bundles are the
  trusted baseline and are not scanned.
• cost: estimated context-token footprint per model-facing tool schema,
  sorted with shares.
• shadow: services claimed by more than one plugin (legal under isolation
  scopes, and invisible without this), plus per-plugin registration counts.
  Exits 1 when a multi-provider service exists.
• xray_composition gains cost and shadow views; summary now includes
  toolSchemaTokens.

v0.2.0

• Runtime imaging: the mounted plugin maintains $DSH_HOME/xray/runtime.json
  (1s-throttled, atomically replaced, refreshed on every internal/status
  transition and flushed on unload).
• deps: service dependency graph — providers from the reflect store (Impl
  records), consumers from inject declarations, transitive disable-cascade,
  unsatisfied injects.
• health: per-fiber lifecycle state (PENDING/LOADING/ACTIVE/FAILED named
  from the Cordis enum), startup errors, transition history. Exits 1 on any
  unhealthy plugin.
• xray_composition agent tool (views: summary/deps/health): agents can
  introspect their own capability set.

v0.1.2

• Link the npm package to the GitHub repository (repository/homepage/bugs).