v0.5.0 — 0.1.7-alpha.1 durable native compaction

0.1.7-alpha.1 durable native compaction (isolated verification complete)

Scope: DSH 0.1.7-alpha.1 only. The installer accepts exactly that dsh CLI version.

Highlights

• Owner Settings catalog projection (dsh-token-usage 5.3.0): models.preview / models.apply bind a catalog revision, Settings revision and preview digest; apply is idempotent and revision-guarded, and rejects malformed/duplicate/unknown targets instead of writing a half list. Sol/Luna use verified Codex facts (contextWindow=272000, maxTokens=128000, text+image; off→none, minimal→low).
• Codex Native preset default: preset-local nativeDefault (true only on codex-native-b); explicit on/off/reader-text wins; inherit/never-set follow the CURRENT preset. Status reports capability, preset default, session preference, effective mode and carrier readability separately; the global capability flag never carries preference.
• Deterministic failures: pure-local history/schema precheck runs before any lease, and deterministic bad inputs are fingerprint-blocked instead of riding the transient cooldown (process-local; a restart re-runs the precheck).
• Preset-scoped efficiency guard (default off, experimental): defers an automatic low-gain native request (net freed <4096 heuristic tokens or <10% of the replaced content, within 60 s, no ≥4096 surface growth) with zero HTTP and a fixed reason. Manual compaction bypasses the efficiency deferral but not the safety checks. No fabricated commit, no hidden retry, no automatic reader-text.
• Source-aware retention (source-aware-v1, behind the preset's experimental sourceRetention switch, default off): the full request is still sent; only provably duplicated host-generated copies may leave the retained checkpoint copy. Ambiguous same-text sources fall back conservatively; real user content, constraints and unknown items are never dropped; an old owner without the capability marker receives no hints.
• Observer/history correctness: replacement ranges read from the 0.1.7 surfaceOp/sourceEventSeqs schema; committed requires a source-linked summary → replacement → clean end; comparison-unknown is distinct from failure; V4 tool-role history (top-level tool payloads, durable images) is accepted while legacy V3 wrappers still fail closed.
• Packaging: host peerDependencies removed (they make npx github:…#tag auto-resolve the whole host tree and hit ERESOLVE); compatibility stays gated by the installer's dsh CLI matrix.

Install

npx --yes --ignore-scripts github:shaomingbo/dsh-codex-compaction#v0.5.0

No arguments means install; the default profile is web. status, uninstall, --profile <name>, --source link:<local-path> and --help are also available.

Verified / not verified

Verified in isolation: packaged candidates, an isolated 0.1.7-alpha.1 host, the paired account snapshot, and the installer's npx github: path. Not verified: real-account calls beyond the recorded small matrix, GUI on a production profile, real-model performance, and production deployment.