@deepseek-ai/dsh-experimental-inspector 0.1.7-alpha.2 → 0.1.7-rc.2

package/README.i18n.yaml

@@ -1,6 +1,46 @@
-# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
-# side as of the last confirmed-consistent state. Both languages carry equal authority;
-# after editing either side, bring the other along and re-record with:
+# Bilingual-pair consistency record for README.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/experimental/inspector/README.md
-README.md: 2b2986d49bbc970c70cc7bc85de38ba6fb6d9593
-README.zh.md: a24b17d3a8a88736fe5efe83b4185de9379b5903
+/:
+  en: ff4e1ec5ccd5d0b3
+  zh: d29383843e3decc8
+/deepseek-ai-dsh-experimental-inspector:
+  en: 1060bee3ef37134d
+  zh: 7a7b0096714f4279
+/deepseek-ai-dsh-experimental-inspector/summary:
+  en: 65ed8a4c21915cc0
+  zh: dcb1ae527e6bfc8c
+/deepseek-ai-dsh-experimental-inspector/table-of-contents:
+  en: 2650c2b268bf6dff
+  zh: 43a08863d2c75ad1
+/deepseek-ai-dsh-experimental-inspector/runtime-layout:
+  en: a713d2910acf48c9
+  zh: 152dcdba78e73115
+/deepseek-ai-dsh-experimental-inspector/configuration:
+  en: 95f1c9c4ea6ba8b8
+  zh: 16b56e2dd8c7408a
+/deepseek-ai-dsh-experimental-inspector/observation-api:
+  en: d32f994e6c9d0c4a
+  zh: ac2f35f5799aeae0
+/deepseek-ai-dsh-experimental-inspector/cordis-tree-inspection:
+  en: 9abe1a8cd52386fb
+  zh: a5e96ec22a503153
+/deepseek-ai-dsh-experimental-inspector/host-fetch-capture:
+  en: 187859f65acc45d7
+  zh: 606e93905c8275e6
+/deepseek-ai-dsh-experimental-inspector/security:
+  en: 2372c96aba1ce7e6
+  zh: 823ceaa99cfb1f6a
+/deepseek-ai-dsh-experimental-inspector/model-experience:
+  en: 6ac8fb2f45b3a97c
+  zh: 9162ffb1a133e11b
+/deepseek-ai-dsh-experimental-inspector/model-experience/kv-cache-effect:
+  en: ca75c51c89c2c9b0
+  zh: 64715dc7e6d02f71
+/deepseek-ai-dsh-experimental-inspector/known-limitations-and-deferred-work:
+  en: a35e1559aff5e7aa
+  zh: fbe20422dbe4a0f6
+/deepseek-ai-dsh-experimental-inspector/known-limitations-and-deferred-work/dev-note:
+  en: 59a59a4788c80163
+  zh: db23a6b9dc0880ba

package/README.md

@@ -1,6 +1,6 @@
 ---
 description: "Experimental Chrome DevTools inspection for Host and browser Client Cordis runtimes, including Console evaluation, Sources, Network capture, Elements trees, and a CDP-independent query API."
-kind: "package-reference"
+kind: "package-bundle"
 ---
 
 # @deepseek-ai/dsh-experimental-inspector
@@ -9,9 +9,9 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-Use this experimental inspector to inspect one running dsh Host and its browser Clients in Chrome DevTools. It exposes Host and Client Console contexts, Host Sources and debugging, captured Host fetches, and a shared Cordis tree while keeping all CDP state in a Worker.
+Inspect one running dsh Host and its browser Clients in Chrome DevTools: Host and Client Console contexts, Host Sources and debugging, captured Host fetches, and a shared Cordis tree, with all CDP state in a Worker.
 
-The package publishes under its experimental name and requires an explicit composition. The Worker never accesses live Cordis objects: the shared Host/Client collector projects them into validated snapshots before transport. Cordis also owns plugin composition, `ctx.inspector` registration, bootstrap injection, and disposal.
+The Inspector stays off the default plugin list. Install its bundle explicitly with `dsh plugin --profile web add @deepseek-ai/dsh-experimental-inspector`. Its [`cordis.patch.yml`](cordis.patch.yml) mounts the installed package; `pnpm run demo:inspector` mounts the source tree. The Host row needs a Web server. The Worker never accesses live Cordis objects: the shared collector projects them into validated snapshots before transport.
 
 ## Table of Contents
 
@@ -30,7 +30,7 @@ The package publishes under its experimental name and requires an explicit compo
 <a id="runtime-layout"></a>
 ## Runtime layout
 
-The Host plugin starts the Worker and connects a dedicated `MessagePort`. The Client plugin reads the injected `globalThis.__DSH_INSPECTOR__` bootstrap and opens a separate authenticated WebSocket directly to the Worker. Chrome DevTools connects to the Worker's CDP WebSocket. A private `node:inspector.Session` per DevTools connection attaches from the Worker to the Host main thread, so Host Console evaluation, Sources, breakpoints, and resume remain available while Host JavaScript is paused.
+The Host plugin starts the Worker and connects a dedicated `MessagePort`. The Client plugin reads the injected `globalThis.__DSH_INSPECTOR__` bootstrap and opens a separate authenticated WebSocket directly to the Worker; a page opened before the Host row was enabled has no bootstrap, fails its Client plugin with a reload instruction, and inspects only after a reload. Chrome DevTools connects to the Worker's CDP WebSocket. A private `node:inspector.Session` per DevTools connection attaches from the Worker to the Host main thread, so Host Console evaluation, Sources, breakpoints, and resume remain available while Host JavaScript is paused.
 
 The source tree follows those execution environments: `client/` and `host/` provide mirrored adapter entry paths, `worker/` contains only Worker-thread orchestration and Chrome protocol state, and `shared/` contains environment-independent Cordis and network models, normalized realm backend interfaces, and the internal bridge protocol. Worker-side Client and Host adapters are mirrored under `worker/realms/`; a Client adapter in that directory still executes in the Worker.
 

package/README.zh.md

@@ -1,6 +1,6 @@
 ---
 description: "面向 Host 与浏览器 Client Cordis 运行时的实验性 Chrome DevTools 检查，包括 Console 求值、Sources、Network 采集、Elements 树和独立于 CDP 的查询 API。"
-kind: "package-reference"
+kind: "package-bundle"
 ---
 
 # @deepseek-ai/dsh-experimental-inspector
@@ -9,9 +9,9 @@ kind: "package-reference"
 
 ## 概述
 
-使用这个实验性 Inspector，可以在 Chrome DevTools 中检查一个运行中的 dsh Host 及其浏览器 Client。它提供 Host 与 Client Console context、Host Sources 与调试、Host fetch 采集和共享 Cordis 树，并让 Worker 独占全部 CDP 状态。
+在 Chrome DevTools 中检查一个运行中的 dsh Host 及其浏览器 Client：Host 与 Client Console context、Host Sources 与调试、Host fetch 采集和共享 Cordis 树，全部 CDP 状态都在 Worker 中。
 
-本包以实验性名称发布，需要显式组合。Worker 不访问实时 Cordis 对象；共享 Host/Client collector 会在传输前把它们投影成已验证快照。Cordis 还负责插件组合、注册 `ctx.inspector`、注入 bootstrap 和 dispose（资源释放）。
+Inspector 不在默认插件列表中显示。使用 `dsh plugin --profile web add @deepseek-ai/dsh-experimental-inspector` 显式安装其 bundle。其 [`cordis.patch.yml`](cordis.patch.yml) 挂载已安装的包；`pnpm run demo:inspector` 则挂载源码树。Host 行需要 Web 服务器。Worker 不访问实时 Cordis 对象；共享 collector 会在传输前把它们投影成已验证快照。
 
 ## 目录
 
@@ -30,7 +30,7 @@ kind: "package-reference"
 <a id="runtime-layout"></a>
 ## 运行时布局
 
-Host 插件启动 Worker 并连接专用 `MessagePort`。Client 插件读取注入的 `globalThis.__DSH_INSPECTOR__` bootstrap，直接向 Worker 打开一条独立、带鉴权的 WebSocket。Chrome DevTools 连接 Worker 的 CDP WebSocket。每条 DevTools 连接在 Worker 中独占一个连接 Host 主线程的 `node:inspector.Session`，因此 Host JavaScript 暂停时，Host Console 求值、Sources、断点和 resume 仍然可用。
+Host 插件启动 Worker 并连接专用 `MessagePort`。Client 插件读取注入的 `globalThis.__DSH_INSPECTOR__` bootstrap，直接向 Worker 打开一条独立、带鉴权的 WebSocket；在 Host 行启用前打开的页面没有 bootstrap，其 Client 插件会以刷新提示失败，刷新后才能被检查。Chrome DevTools 连接 Worker 的 CDP WebSocket。每条 DevTools 连接在 Worker 中独占一个连接 Host 主线程的 `node:inspector.Session`，因此 Host JavaScript 暂停时，Host Console 求值、Sources、断点和 resume 仍然可用。
 
 源码树遵循这些执行环境：`client/` 与 `host/` 提供镜像的适配器 entry path，`worker/` 只包含 Worker thread orchestration 与 Chrome protocol 状态，`shared/` 包含与环境无关的 Cordis 和 network model、规范化 realm 后端接口及内部 bridge protocol。Worker 侧 Client 与 Host 适配器镜像放在 `worker/realms/` 下；其中的 Client 适配器仍然在 Worker 中执行。
 

package/cordis.patch.yml

@@ -0,0 +1,6 @@
+# Explicitly installed bundle: the cross-realm inspector. The Host row
+# activates only where a Web server exists.
+
+- insert:
+    - id: experimental-inspector
+      name: '@deepseek-ai/dsh-experimental-inspector'

package/icon.svg

@@ -0,0 +1,12 @@
+<svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <circle cx="15.5" cy="15.5" r="8.5" fill="url(#a)" />
+  <circle cx="15.5" cy="15.5" r="5" fill="#FFFFFF" />
+  <path d="M13.2 15.5L14.9 17.2L18.2 13.9" stroke="#145AF3" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" />
+  <path d="M22 22L29 29" stroke="#145AF3" stroke-width="3.2" stroke-linecap="round" />
+  <defs>
+    <linearGradient id="a" x1="7" y1="7" x2="24" y2="24" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#7CB7FF" />
+      <stop offset="1" stop-color="#45D9E7" />
+    </linearGradient>
+  </defs>
+</svg>

package/lib/client.js

@@ -3384,7 +3384,7 @@ window.__ModuleLoader__.load({
 		*/
 		async function apply(ctx) {
 			const injected = globalThis.__DSH_INSPECTOR__;
-			if (injected === void 0) throw new Error("experimental inspector: Host bootstrap is missing");
+			if (injected === void 0) throw new Error("experimental inspector: Host bootstrap is missing; reload the page after enabling the Inspector");
 			const bootstrap = parseInspectorClientBootstrap(injected);
 			await ctx.effect(async () => {
 				const source = await startInspectorClient(bootstrap);

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Inspector",
+    "description": "Open the running Host and its browser Clients in Chrome DevTools through a loopback endpoint that allows code execution and captures Host network traffic, including secrets. For developers; Web only; reload open pages after enabling."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "调试检查器",
+    "description": "通过一个允许执行代码并捕获 Host 网络请求（含密钥）的本机回环端点，在 Chrome DevTools 中检查运行中的 Host 及其浏览器 Client。面向开发者；仅 Web 可用；启用后需刷新已打开的页面。"
+  }
+}

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@deepseek-ai/dsh-experimental-inspector",
   "description": "Experimental cross-realm CDP hub for Host debugging and Client Runtime inspection",
-  "version": "0.1.7-alpha.2",
+  "version": "0.1.7-rc.2",
+  "icon": "./icon.svg",
   "publishConfig": {
     "access": "public"
   },
@@ -23,34 +24,42 @@
       "default": "./lib/client.js"
     },
     "./src/*": "./src/*",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./locale/*.json": "./locale/*.json"
   },
   "dsh": {
     "client": {
       "inject": [],
       "platform": "web",
       "immediately": true
+    },
+    "bundle": {
+      "patch": "./cordis.patch.yml"
     }
   },
   "files": [
+    "icon.svg",
+    "locale/*.json",
     "lib/index.js",
     "lib/client.js",
+    "cordis.patch.yml",
     "lib/worker.js",
     "lib/types/**/*.d.ts"
   ],
   "license": "MIT",
   "dependencies": {
     "ws": "^8.21.0",
-    "@deepseek-ai/dsh-app-boot": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-util-crypto": "0.1.7-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-util-crypto": "0.1.7-rc.2",
     "@deepseek-ai/schemastery": "~3.18.4",
-    "@deepseek-ai/dsh-brand": "0.1.7-alpha.2"
+    "@deepseek-ai/dsh-app-boot": "0.1.7-rc.2"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis-plugin-loader": "~1.0.5",
     "@deepseek-ai/cordis": "~4.0.4",
-    "@deepseek-ai/dsh-client-modules": "0.1.7-alpha.2",
-    "@deepseek-ai/dsh-host-webserver": "0.1.7-alpha.2"
+    "@deepseek-ai/dsh-client-modules": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "0.1.7-rc.2",
+    "@deepseek-ai/cordis-plugin-loader": "~1.0.5"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1",
@@ -59,6 +68,6 @@
     "@deepseek-ai/cordis": "~4.0.4",
     "@deepseek-ai/cordis-plugin-include": "~1.0.9",
     "@deepseek-ai/cordis-plugin-loader": "~1.0.5",
-    "@deepseek-ai/dsh-host-webserver": "0.1.7-alpha.2"
+    "@deepseek-ai/dsh-host-webserver": "0.1.7-rc.2"
   }
 }