@ckanner/dsh-plugin-flywheel 0.28.3 → 0.28.4

package/PROTOCOL.md

@@ -238,3 +238,7 @@ launcher 使用绝对 Node 与 CLI 路径，设置安装时可见的绝对工具
 3. 仅当安装记录不存在时，兼容旧配置，从 PATH 查找 `flywheel`。
 
 损坏记录、符号链接、缺失或被修改的 launcher 都明确失败，不静默退回 PATH。SHA-256 核对的是 launcher 内容，不是账号状态或所有外部 CLI 的真实性。已有用户修改会在 setup 时保留并报告冲突；修复方法见[升级教程](../../docs/getting-started.md#8-升级排错与卸载)。普通 npm 卸载不会擅自删除安装记录、配置、skills 或任务数据。
+
+## DSH 宿主兼容性（0.28.4）
+
+包声明只接受 `0.2.1-rc.5` 与 `0.2.2-rc.1`。新 SDK 会按策略文件所属包的 engines.dsh 校验其准入，旧包被禁用时缺少 flywheel/policy 回执，Go 必须拒绝派发模型 prompt。权限插件在公开 agent/created 阶段（创建公告结束后、首个模型请求之前）写入显式 approval/policy，不在 session/created 只读公告中追加事件，再只读公开 approval.overrideOf(session)，不访问私有 effectivePolicy；未知／缺失回执仍不放行。

package/README.en.md

@@ -7,11 +7,9 @@ provides its DSH SDK and Codex Pro workers. The engine owns task state, budgets,
 verification, Git delivery, and process lifecycles. The desktop is a control and
 observation interface; it does not need a parent model session to keep a task alive.
 
-This guide describes the **Flywheel 0.28.3** interfaces. Source availability does
+This guide describes the **Flywheel 0.28.4** interfaces. Source availability does
 not mean that npm `latest` already contains them. Check the registry version and
-the [release guide](https://github.com/ckanner/flywheel/blob/main/docs/en/releasing.md) before installing. The desktop
-compatibility baseline is **DSH Mac 0.2.1-rc.5**, not a claim that every DSH build
-or provider adapter is compatible.
+the [release guide](https://github.com/ckanner/flywheel/blob/main/docs/en/releasing.md) before installing. The checked desktop runtimes are **DSH Mac 0.2.1-rc.5 and 0.2.2-rc.1**. The 0.28.4 engine range declares only those two versions. DSH 0.2.2 itself requires Node 24.9 or later; use its desktop-supplied CLI. Other builds and provider adapters need their own checks.
 
 **Flywheel 0.28.1 introduces the native conversation view.** Version `0.28.0`
 uses the composer popup. Upgrade the CLI and desktop plugin to the same new
@@ -21,6 +19,8 @@ Subscription preset migration and `permissions.mode` are available from **0.28.2
 
 **Changes in 0.28.3:** account defaults, account-error handling, and the current session directory. Version 0.28.2 still uses API-key defaults and the original directory. Reinstalling that version does not include these fixes. Upgrades preserve configuration; adopting the account preset requires explicit migration.
 
+Version 0.28.4 aligns Cordis 4.0/4.1 and host peer declarations, testing the same built plugin against both published renderers with locked dependencies. Configuration, account selection and permissions are preserved. The SDK writes permission events during the public agent/created phase, after the read-only Session creation announcement and before model work; it reads the explicit never override through public `approval.overrideOf(session)`.
+
 ## Components
 
 | Component | Responsibility |

package/README.md

@@ -2,7 +2,7 @@
 
 [English](README.en.md) · 简体中文
 
-目标是 **DSH Mac 桌面 0.2.1-rc.5** 的已存在接口。Go 继续管理状态机、任务、worktree、验收和成本上限；本包提供桌面操作入口、原生 SDK 执行通道和 Codex Pro machine API worker。无需 alpha、OAR、Forge 或一直活着的父智能体。
+目标是 **DSH Mac 桌面 0.2.1-rc.5 与 0.2.2-rc.1** 的公开接口，0.28.4 的版本声明只允许这两个已核对版本。Go 继续管理状态机、任务、worktree、验收和成本上限；本包提供桌面操作入口、原生 SDK 执行通道和 Codex Pro machine API worker。无需 alpha、OAR、Forge 或一直活着的父智能体。
 
 完整的 npm 安装、SDK 配置到首个任务流程见 [Mac 入门教程](../../docs/getting-started.md)，适用于 Flywheel **0.28.0 及以后的完整 npm 发行版**。安装前用 `npm view @ckanner/flywheel version` 确认 registry 的 latest 已更新到所需版本；源码合并或 GitHub Release 不代表 npm 已发行。旧 0.22.1 没有本教程使用的安装与 DSH 接口，当前发行状态见[发行记录](../../docs/releasing.md#3-失败恢复)。
 
@@ -12,6 +12,8 @@
 
 **0.28.3 的变化：**新增 `deepseek-account` 默认、账号错误处理与会话当前工作目录修复。0.28.2 仍使用 API 默认和会话最初目录，重装同版不会获得修复；升级保留已有配置，采用账号预设需要显式迁移。
 
+0.28.4 同步 Cordis 4.0／4.1 和 host peer 声明，并用锁定依赖测试新旧两版发布的 renderer。配置、已有 DeepSeek 账号与权限保持原样。SDK 在公开 agent/created 阶段写入权限事件，通过公开 `approval.overrideOf(session)` 核对 never 覆盖值；Session 创建公告期间保持只读。
+
 ## 提供什么
 
 | 部分 | 行为 |
@@ -221,7 +223,7 @@ FLYWHEEL_NPM_PACKAGES_DIR=dist-npm npm run test:install
 
 ## 实现依据
 
-宿主代码按公开 tag `dsh-v0.2.1-rc.5` 固定；另对实际 Mac rc.5 的编译模块核对了同名 API。关键一手来源：
+宿主基线按公开 tag `dsh-v0.2.1-rc.5`（`b830ec9`）和 `dsh-v0.2.2-rc.1`（`66491b0`）固定。新旧真实发布的 renderer 均运行同一插件构建的生命周期测试；SDK 权限回执使用两版公开的 `approval.overrideOf(session)`。目标 Mac 实测结果见发行验证记录。关键一手来源：
 
 - [SDK server 方法、生命周期与限制](https://github.com/deepseek-ai/deepseek-harness/blob/b830ec950faba0a46dda564be3e2d854afed94f1/packages/sdk/server/README.md)
 - [SDK TypeScript 客户端、usage 事件和关闭语义](https://github.com/deepseek-ai/deepseek-harness/blob/b830ec950faba0a46dda564be3e2d854afed94f1/packages/sdk/client/README.md)

package/dist/bridge.js

@@ -7,7 +7,7 @@ import { fileURLToPath } from 'node:url';
 import { BridgeError, MAX_FRAME_BYTES, normalizedError, record, SessionFold, validateStart } from './protocol.js';
 
 export function makeOverlay(request, policyPath = fileURLToPath(new URL('./policy.js', import.meta.url))) {
-  // Each patch replaces an entire config row. Pin the known rc.5 enforcement
+  // Each patch replaces an entire config row. Pin the checked rc.5/rc.1 enforcement
   // implementations, not the user's mutable permission dropdown defaults.
   const disable = ['permission', 'tool-plugin-manager', 'tool-working-directory',
     'tool-subagent', 'tool-subagent-fork', 'tool-subagent-control', 'tool-subagent-list-agents',

package/dist/policy.js

@@ -1,5 +1,5 @@
 // Loaded only in the independently owned SDK process, never in the desktop host.
-// Public rc.5 Cordis services; the worker verifies this acknowledgement before prompt().
+// Public rc.5/rc.1 Cordis services; the worker verifies this acknowledgement before prompt().
 export const inject = ['sandboxPolicy', 'approval', 'shell'];
 
 export async function apply(ctx, config) {
@@ -21,7 +21,10 @@ export async function apply(ctx, config) {
       (fullAccess ? result.sandbox.denied !== false || result.sandbox.enforcement !== undefined : result.sandbox.enforcement !== 'full')) {
     throw new Error(fullAccess ? 'Flywheel readiness probe did not confirm explicit full access' : 'Flywheel sandbox readiness probe did not prove full enforcement');
   }
-  ctx.on('session/created', session => {
+  // Session creation is read-only in rc.1. Agent creation is awaited after
+  // that announcement and before the factory admits any model work in both hosts.
+  ctx.on('agent/created', ({ agent }) => {
+    const session = agent.session;
     // A fresh SDK session has no inherited permission facts. Pin both canonical
     // knobs, rather than relying on saved UI preferences or a prompt instruction.
     session.append('sandbox/mode', { mode: permissionMode });
@@ -31,7 +34,8 @@ export async function apply(ctx, config) {
       protocol: 1,
       cwd: policy.workspaceRoot,
       permissionMode: policy.mode,
-      approvalPolicy: ctx.approval.effectivePolicy(session),
+      // Read the explicit logged override through the public API.
+      approvalPolicy: ctx.approval.overrideOf(session),
       confinedShell: !fullAccess,
       ...(fullAccess ? {} : { enforcement: result.sandbox.enforcement }),
     });

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@ckanner/dsh-plugin-flywheel",
-  "version": "0.28.3",
+  "version": "0.28.4",
   "description": "Flywheel engine controls with owned DSH SDK and Codex Pro machine workers",
   "type": "module",
   "license": "UNLICENSED",
   "engines": {
     "node": ">=22.18.0",
-    "dsh": "0.2.1-rc.5"
+    "dsh": "0.2.1-rc.5 || 0.2.2-rc.1"
   },
   "exports": {
     ".": "./dist/index.js",
@@ -43,9 +43,9 @@
     }
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "~4.0.5",
-    "@deepseek-ai/dsh-commands": "0.2.1-rc.5",
-    "@deepseek-ai/dsh-tools": "0.2.1-rc.5"
+    "@deepseek-ai/cordis": "~4.0.5 || ~4.1.0",
+    "@deepseek-ai/dsh-commands": "0.2.1-rc.5 || 0.2.2-rc.1",
+    "@deepseek-ai/dsh-tools": "0.2.1-rc.5 || 0.2.2-rc.1"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -60,7 +60,7 @@
   },
   "scripts": {
     "build": "node scripts/build.mjs",
-    "test": "npm run build && node --test test/*.test.js",
+    "test": "npm run build && node --test test/*.test.js && node scripts/test-legacy-host.mjs",
     "check": "npm test",
     "prepack": "npm run build"
   },
@@ -68,13 +68,14 @@
     "dsh-subagent-codex-pro": "0.8.0"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.5",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.2.1-rc.5",
-    "@deepseek-ai/dsh-client-ui-slots": "0.2.1-rc.5",
+    "@deepseek-ai/cordis": "4.1.0",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.2-rc.1",
     "jsdom": "26.1.0",
     "lightningcss": "1.33.0",
     "react": "18.3.1",
-    "react-dom": "18.3.1"
+    "react-dom": "18.3.1",
+    "semver": "7.7.3"
   },
   "repository": {
     "type": "git",