@eduwork/dsh-oidc 0.1.0-alpha.11 → 0.1.0

package/docs/EDUWORK-MIGRATION.md

@@ -2,12 +2,12 @@
 
 **简体中文** | [English](EDUWORK-MIGRATION.en.md)
 
-从本版本起，npm 包使用 `@eduwork/dsh-oidc@0.1.0-alpha.11`，替代旧的 `dsh-oidc`。npm `eduwork` 组织已创建；GitHub 仓库和本地 checkout 目录继续使用 `dsh-oidc`。包的当前发布状态以 npm registry 为准。
+从 `0.1.0-alpha.11` 起，npm 包改用 `@eduwork/dsh-oidc`，替代旧的 `dsh-oidc`；`0.1.0` 是完成该迁移后的首个稳定语义版本。npm `eduwork` 组织已创建；GitHub 仓库和本地 checkout 目录继续使用 `dsh-oidc`。包的当前发布状态以 npm registry 为准。
 
 ## 安装与迁移
 
 ```sh
-dsh plugin --profile web add @eduwork/dsh-oidc@0.1.0-alpha.11
+dsh plugin --profile web add @eduwork/dsh-oidc@0.1.0
 ```
 
 已有 Profile 先备份 package.json 与 cordis.patch.yml，再更新依赖和 dsh.profile.bundles；手写 patch 的模块路径 name 也需切换。不要同时启用新旧两份插件，切换后重启 Host。旧版本和新作用域版本是不同 npm 包，旧包的更新不会自动迁移安装。
@@ -20,4 +20,4 @@ dsh plugin --profile web add @eduwork/dsh-oidc@0.1.0-alpha.11
 
 ## 发布范围
 
-此版本为 alpha 包身份迁移，沿用声明的 DSH peer 基线。构建、测试、文档、开源和 tarball 检查针对本次变更执行；不新增真实学校登录、真实邮件发送或生产部署验收结论。稳定发布仍须完成公开发布检查表中的完整部署验收。旧包保持可安装，新包安装验证通过后添加迁移提示，不撤回旧版本。
+`0.1.0` 将包身份稳定在 `@eduwork/dsh-oidc`，并精确适配 DSH `0.1.2-rc.1`。构建、测试、文档、开源和 tarball 检查针对本次变更执行；这不等于真实学校登录、真实邮件发送或生产部署验收。生产采用仍须完成公开发布检查表中的完整部署验收。旧包和 scoped alpha 保持可安装，不撤回旧版本。

package/docs/compatibility.en.md

@@ -6,6 +6,7 @@
 
 | dsh-oidc | Node.js | DSH | pi-ai | Status |
 | --- | --- | --- | --- | --- |
+| `0.1.0` | 22, 24 | `0.1.2-rc.1` / `a66e4702…` | `^0.84.2` (locked at `0.84.4`) | Exact peer closure, Host/Client contract checks, clean npm installation, and isolated Web/RPC acceptance. |
 | `0.1.0-alpha.11` | 22, 24 | Declared baseline remains `0.1.2-alpha.2`; separate mainline `0.1.2-rc.1` configuration RPC probe | `^0.84.2` | npm scope migration with persistent contracts retained; the rc.1 probe is not full compatibility acceptance. |
 | `0.1.0-alpha.10` | 22, 24 | `0.1.2-alpha.2` / `0a53fb55…` | `^0.84.2` (`0.84.4` in npm/source Runtimes) | Migrated to `SettingsProvider.installSection()`; full checks pass through both npm and source release-pack paths. |
 | `0.1.0-alpha.9` | 22, 24 | `0.1.2-alpha.1` / `cd5ef814…` | `^0.84.2` (`0.84.4` in the reviewed source Runtime) | Web and native consume only standard Enterprise Profiles; product institution-catalog conversion is completely outside the plugin. |
@@ -18,7 +19,7 @@
 | `0.1.0-alpha.2` | 22, 24 (development) | `0.1.1-rc.2` / `b150a551…` | `0.82.1` | Standard UserInfo name presentation unified across Web and native adapters; real deployment acceptance pending. |
 | `0.1.0-alpha.1` | 22, 24 (development) | `0.1.1-rc.2` / `b150a551…` | `0.82.1` | Unit/build/package baseline; real deployment acceptance still required. |
 
-Only exact DSH peer versions in `package.json` are supported. Other versions may install only after explicit peer override and are untested.
+The supported current line is `0.1.0` with the exact DSH `0.1.2-rc.1` peers declared in `package.json`; alpha rows are historical validation records only. Other versions may install only after explicit peer override and are untested.
 
 ## Contract versions
 
@@ -56,6 +57,6 @@ No public tag/npm publish until all of the following pass:
 - native desktop no-regression acceptance;
 - OIDC negative tests and Key Binding authorization tests;
 - documentation/version/changelog update;
-- two-person review for authentication, credential, build, or release workflow changes.
+- independent technical review, CI/focused regression evidence, and a recorded maintainer decision for authentication, credential, build, or release workflow changes; add independent human approval after a second maintainer joins.
 
 See [the public release checklist](release-checklist.en.md) for the operator checklist.

package/docs/compatibility.md

@@ -6,6 +6,7 @@
 
 | dsh-oidc | Node.js | DSH | pi-ai | 状态 |
 | --- | --- | --- | --- | --- |
+| `0.1.0` | 22、24 | `0.1.2-rc.1` / `a66e4702…` | `^0.84.2`（锁定为 `0.84.4`） | 精确 peer 闭包、Host/Client 契约检查、干净 npm 安装和隔离 Web/RPC 验收。 |
 | `0.1.0-alpha.11` | 22、24 | 声明基线仍为 `0.1.2-alpha.2`；另有主线 `0.1.2-rc.1` 隔离配置 RPC 探针 | `^0.84.2` | npm 作用域迁移；保留数据协议；不将 rc.1 探针视为完整版本兼容验收。 |
 | `0.1.0-alpha.10` | 22、24 | `0.1.2-alpha.2` / `0a53fb55…` | `^0.84.2`（npm/源码 Runtime 中为 `0.84.4`） | 迁移到 `SettingsProvider.installSection()`；npm 与源码 release-pack 双路径通过完整检查。 |
 | `0.1.0-alpha.9` | 22、24 | `0.1.2-alpha.1` / `cd5ef814…` | `^0.84.2`（已审查源码 Runtime 中为 `0.84.4`） | Web/native 只消费标准 Enterprise Profile；产品机构目录转换彻底移出插件。 |
@@ -18,7 +19,7 @@
 | `0.1.0-alpha.2` | 22、24（开发） | `0.1.1-rc.2` / `b150a551…` | `0.82.1` | Web 与 native adapter 统一使用标准 UserInfo 姓名显示；尚待真实部署验收。 |
 | `0.1.0-alpha.1` | 22、24（开发） | `0.1.1-rc.2` / `b150a551…` | `0.82.1` | 单元测试、构建和打包基线；仍需真实部署验收。 |
 
-仅支持 `package.json` 中声明的精确 DSH peer 版本。其他版本即使通过显式 peer override 安装，也属于未经测试的组合。
+当前受支持线是 `0.1.0` 与 `package.json` 中声明的精确 DSH `0.1.2-rc.1` peer 组合；alpha 行只保留历史验证记录。其他版本即使通过显式 peer override 安装，也属于未经测试的组合。
 
 ## 契约版本
 
@@ -56,6 +57,6 @@
 - native 桌面无回退验收；
 - OIDC 反向测试和 Key Binding 授权测试；
 - 文档、版本和变更日志更新；
-- 对认证、凭据、构建或发布流程变更进行双人审查。
+- 对认证、凭据、构建或发布流程变更完成独立技术复核、CI/专项回归并记录维护者决定；增加第二位维护者后再加入独立人工批准。
 
 操作检查项见[公开发布检查表](release-checklist.md)。

package/docs/decisions/0001-one-plugin-composition-boundary.en.md

@@ -2,7 +2,7 @@
 
 [简体中文](0001-one-plugin-composition-boundary.md) | **English**
 
-- Status: Accepted for alpha
+- Status: Accepted
 - Date: 2026-08-25
 
 ## Context

package/docs/decisions/0001-one-plugin-composition-boundary.md

@@ -2,7 +2,7 @@
 
 **简体中文** | [English](0001-one-plugin-composition-boundary.en.md)
 
-- 状态：Alpha 阶段已接受
+- 状态：已接受
 - 日期：2026-08-25
 
 ## 背景

package/docs/dsh-integration.en.md

@@ -4,7 +4,7 @@
 
 ## Supported host baseline
 
-The current compatibility baseline is DeepSeek Harness `0.1.2-alpha.2`, upstream commit `0a53fb55bea101816fa226bb964ae2bed71c343b`. Peer versions are exact while DSH remains prerelease software.
+The current compatibility baseline is DeepSeek Harness `0.1.2-rc.1`, upstream commit `a66e4702047846cdaa10c66c9d3df3951f5ea70d`. Because DSH remains prerelease software, this package pins the complete DSH peer closure to that exact version and rejects a mixed DSH tree during checks.
 
 The plugin uses public package exports rather than copied DSH source:
 
@@ -59,7 +59,7 @@ The client descriptor uses strict Zod codecs. Configuration sent to the browser
 `dsh-oidc` declares its own default Web-first Bundle patch. Install it directly from npm into the official Web profile without authoring a wrapper Bundle:
 
 ```bash
-dsh plugin --profile web add @eduwork/dsh-oidc@0.1.0-alpha.11
+dsh plugin --profile web add @eduwork/dsh-oidc@0.1.0
 ```
 
 For auditing, development, or validating unpublished changes, install a reviewed local checkout instead:
@@ -72,7 +72,7 @@ npm run check
 dsh plugin --profile web add .
 ```
 
-The local-path install links the checkout into the Profile, so the source directory must remain available. It does not scan the current workspace. Team deployments should prefer a reviewed, exact npm version; `@eduwork/dsh-oidc@alpha` is only for deployments that intentionally follow prerelease updates.
+The local-path install links the checkout into the Profile, so the source directory must remain available. It does not scan the current workspace. Team deployments should pin a reviewed, exact npm version and must not mix another DSH prerelease line into the same Profile.
 
 The shipped patch mounts exactly one `enterprise-oidc` instance using `DSH_OIDC_ENTERPRISE_PROFILE`. The Web backend requires the DSH WebServer to listen exactly on `127.0.0.1` and builds the fixed `/oauth/callback` from its actual port; no public callback-origin setting is accepted. It deliberately does not set `agent-default-model`, because Provider and model IDs belong to the deployment's Enterprise Profile and users can select an available enterprise model in DSH.
 

package/docs/dsh-integration.md

@@ -4,7 +4,7 @@
 
 ## 支持的宿主基线
 
-当前兼容基线为 DeepSeek Harness `0.1.2-alpha.2`，上游 commit `0a53fb55bea101816fa226bb964ae2bed71c343b`。DSH 仍处于预发布阶段，因此 peer version 使用精确版本。
+当前兼容基线为 DeepSeek Harness `0.1.2-rc.1`，上游 commit `a66e4702047846cdaa10c66c9d3df3951f5ea70d`。DSH 仍处于预发布阶段，因此本包把完整 DSH peer 闭包固定到该精确版本，并在检查中拒绝混入其他 DSH 版本。
 
 插件只使用公开 package export，不复制 DSH 源码：
 
@@ -59,7 +59,7 @@ Client 描述符使用严格 Zod codec。发送给浏览器的配置不包含 is
 `dsh-oidc` 自带默认的 Web-first Bundle patch，可以直接从 npm 安装到官方 Web Profile，无需再编写 wrapper Bundle：
 
 ```bash
-dsh plugin --profile web add @eduwork/dsh-oidc@0.1.0-alpha.11
+dsh plugin --profile web add @eduwork/dsh-oidc@0.1.0
 ```
 
 需要审计、开发或验证尚未发布的改动时，可以安装经过审查的本地 checkout：
@@ -72,7 +72,7 @@ npm run check
 dsh plugin --profile web add .
 ```
 
-本地路径安装会把 checkout 链接到 Profile，因此源码目录必须持续存在。它不会扫描当前工作区。团队部署应优先固定经过复核的 npm 精确版本；`@eduwork/dsh-oidc@alpha` 只适合明确希望跟随预发布更新的场景。
+本地路径安装会把 checkout 链接到 Profile，因此源码目录必须持续存在。它不会扫描当前工作区。团队部署应固定经过复核的 npm 精确版本；不要在同一 Profile 中混装其他 DSH 预发布线。
 
 随包 patch 使用 `DSH_OIDC_ENTERPRISE_PROFILE` 挂载且只挂载一个 `enterprise-oidc` 实例。Web backend 要求 DSH WebServer 精确监听 `127.0.0.1`，并从实际端口构造固定 `/oauth/callback`；不接受公网回调源配置。它有意不设置 `agent-default-model`，因为 Provider 和模型 ID 属于部署方 Enterprise Profile，用户可在 DSH 中选择可用企业模型。
 

package/docs/enterprise-profile.en.md

@@ -104,7 +104,7 @@ The Provider object is data interpreted by a local audited adapter.
 | `displayName` | no | User-facing Provider name. |
 | `adapter` | yes | Exact string `openai-compatible`. |
 | `baseURL` | yes | HTTPS OpenAI-compatible API base. |
-| `reasoning` | no | Default DSH/pi-ai reasoning level, default `high`. |
+| `reasoning` | no | Default DSH/pi-ai reasoning level: `off`, `minimal`, `low`, `medium`, `high`, `xhigh`, or `max`; default `high`. |
 | `defaultContextWindow` | no | Positive safe integer, default 262144. |
 | `defaultMaxTokens` | no | Positive safe integer, default 32768. |
 | `maxRequestImageBytes` | no | Accumulated native-image request budget. |
@@ -128,7 +128,7 @@ Each model has:
 - `input` containing `text`, `image`, or both (default `text`);
 - optional positive `contextWindow` and `maxTokens`;
 - optional `reasoning` boolean;
-- optional `reasoningEfforts` object, or `false`;
+- optional `reasoningEfforts` object, or `false`; object keys are limited to `off`, `minimal`, `low`, `medium`, `high`, `xhigh`, and `max`, and only `off` may have a null wire value;
 - optional bounded `compat` overrides.
 
 If a model supports thinking but not selectable reasoning effort, set:

package/docs/enterprise-profile.md

@@ -104,7 +104,7 @@ Provider 对象是由本地、经过审查的 adapter 解释的数据。
 | `displayName` | 否 | 面向用户的 Provider 名称。 |
 | `adapter` | 是 | 精确字符串 `openai-compatible`。 |
 | `baseURL` | 是 | HTTPS OpenAI-compatible API 基址。 |
-| `reasoning` | 否 | 默认 DSH/pi-ai reasoning level，默认为 `high`。 |
+| `reasoning` | 否 | 默认 DSH/pi-ai reasoning level，取值为 `off`、`minimal`、`low`、`medium`、`high`、`xhigh`、`max`，默认为 `high`。 |
 | `defaultContextWindow` | 否 | 正安全整数，默认 262144。 |
 | `defaultMaxTokens` | 否 | 正安全整数，默认 32768。 |
 | `maxRequestImageBytes` | 否 | 单次原生图片请求的累计大小预算。 |
@@ -128,7 +128,7 @@ Provider 对象是由本地、经过审查的 adapter 解释的数据。
 - `input` 可包含 `text`、`image` 或两者，默认 `text`；
 - 可选的正数 `contextWindow` 和 `maxTokens`；
 - 可选 `reasoning` 布尔值；
-- 可选 `reasoningEfforts` 对象或 `false`；
+- 可选 `reasoningEfforts` 对象或 `false`；对象键限于 `off`、`minimal`、`low`、`medium`、`high`、`xhigh`、`max`，且只有 `off` 的过线值可以为 `null`；
 - 可选的受限 `compat` 覆盖。
 
 若模型支持 thinking，但不支持选择 reasoning effort，请设置：

package/docs/getting-started.en.md

@@ -10,7 +10,7 @@ This guide is for operators integrating `dsh-oidc` into their own DeepSeek Harne
 
 | Component | Minimum requirement |
 | --- | --- |
-| DSH Host | DeepSeek Harness `0.1.2-alpha.2` on Node.js 22+. |
+| DSH Host | DeepSeek Harness `0.1.2-rc.1` on Node.js 22+. |
 | Institutional enterprise-model integration service | One accountable owner jointly delivers the OIDC Provider, fixed Key Binding API, and OpenAI-compatible model gateway; all three are required. |
 | Enterprise Profile | Trusted local JSON containing public configuration only. |
 | Credential Provider | The current Web backend supports trusted single-user local storage only. |
@@ -59,7 +59,7 @@ The Profile is trusted deployment data, not a secret store. It must not contain
 The package is itself an installable DSH Bundle. Team deployments should install the reviewed, exact version from npm:
 
 ```bash
-dsh plugin --profile web add @eduwork/dsh-oidc@0.1.0-alpha.11
+dsh plugin --profile web add @eduwork/dsh-oidc@0.1.0
 ```
 
 For auditing, development, or testing unpublished changes, install from a local checkout instead:
@@ -78,11 +78,7 @@ From the parent directory, the equivalent explicit relative-path command is:
 dsh plugin --profile web add ./dsh-oidc
 ```
 
-DSH links the checkout into `$DSH_HOME/profiles/web`; it does not scan or copy the invoking directory. Keep the checkout in place and pin a reviewed commit for source-based deployments. To intentionally follow alpha updates, use:
-
-```bash
-dsh plugin --profile web add @eduwork/dsh-oidc@alpha
-```
+DSH links the checkout into `$DSH_HOME/profiles/web`; it does not scan or copy the invoking directory. Keep the checkout in place and pin a reviewed commit for source-based deployments. Production and team Profiles should use an exact npm version and must not mix another DSH prerelease line.
 
 Set the trusted local Profile path and start DSH on the fixed loopback host:
 
@@ -134,4 +130,4 @@ The current Web backend does not support shared Web. A shared scenario needs a n
 - **A subject string is shown instead of a name:** return a non-empty standard `name` from UserInfo under the `profile` scope; private JSON-path mappings are intentionally unsupported.
 - **Login works but models do not:** inspect `/bootstrap`, explicit provisioning state, exact `provider_id` equality, and whether the model gateway accepts the bound key.
 - **Thinking works but selectable effort does not:** set model `compat.supportsReasoningEffort` to `false`; thinking remains enabled while the unsupported effort parameter is removed.
-- **Why the enterprise controls are inside Models:** DSH `0.1.2-alpha.2` exposes the official `settings.models.footer` extension slot. `dsh-oidc` mounts its management UI there and leaves the upstream Models page enabled; no product-private Models-page fork is required.
+- **Why the enterprise controls are inside Models:** DSH `0.1.2-rc.1` exposes the official `settings.models.footer` extension slot. `dsh-oidc` mounts its management UI there and leaves the upstream Models page enabled; no product-private Models-page fork is required.

package/docs/getting-started.md

@@ -16,7 +16,7 @@
 
 | 组件 | 谁提供 | 最低要求 |
 | --- | --- | --- |
-| DSH Host | 部署方 | DeepSeek Harness `0.1.2-alpha.2`，Node.js 22+。 |
+| DSH Host | 部署方 | DeepSeek Harness `0.1.2-rc.1`，Node.js 22+。 |
 | 机构企业模型集成服务 | 同一服务所有者 | 共同提供 OIDC Provider、固定 Key Binding 和 OpenAI-compatible 模型网关；三者全部必需。 |
 | Enterprise Profile | 部署方 | 一份受信任的本地 JSON，只存公开配置，不存密钥或个人信息。 |
 | Credential Provider | DSH Host | 当前 Web backend 仅支持可信单用户本机存储。 |
@@ -122,7 +122,7 @@ Profile 是部署配置，不是用户输入。它可以声明模型事实和有
 `dsh-oidc` 本身是可直接安装的 DSH Bundle。团队部署应从 npm 安装经过复核的精确版本：
 
 ```bash
-dsh plugin --profile web add @eduwork/dsh-oidc@0.1.0-alpha.11
+dsh plugin --profile web add @eduwork/dsh-oidc@0.1.0
 ```
 
 需要审计、开发或测试尚未发布的改动时，再从本地 checkout 安装：
@@ -141,11 +141,7 @@ dsh plugin --profile web add .
 dsh plugin --profile web add ./dsh-oidc
 ```
 
-DSH 会把本地 checkout 链接到 `$DSH_HOME/profiles/web`，不会扫描或复制当前目录；安装完成后不要移动或删除 checkout。源码部署应固定经过审核的 commit。若明确希望持续跟随 alpha 更新，也可以使用：
-
-```bash
-dsh plugin --profile web add @eduwork/dsh-oidc@alpha
-```
+DSH 会把本地 checkout 链接到 `$DSH_HOME/profiles/web`，不会扫描或复制当前目录；安装完成后不要移动或删除 checkout。源码部署应固定经过审核的 commit。生产或团队 Profile 应使用精确 npm 版本，不要混装其他 DSH 预发布线。
 
 设置 Enterprise Profile 路径，并让 DSH 监听固定 loopback host：
 
@@ -236,4 +232,4 @@ native backend 必须提供 `enterpriseAccounts` 服务，并与 Web 一样传
 
 ### 为什么企业服务是单独的设置页
 
-当前 DSH `0.1.2-alpha.2` 已提供正式的 `settings.models.footer` 插槽。插件直接把企业模型管理能力挂载到官方“模型”页，并保持官方模型页启用，不再依赖产品私有的模型页 fork。
+当前 DSH `0.1.2-rc.1` 提供正式的 `settings.models.footer` 插槽。插件直接把企业模型管理能力挂载到官方“模型”页，并保持官方模型页启用，不再依赖产品私有的模型页 fork。

package/docs/release-checklist.en.md

@@ -2,19 +2,19 @@
 
 [简体中文](release-checklist.md) | **English**
 
-Record reviewer names, date, command output links, and exceptions in the release pull request. An unchecked item blocks public release unless a maintainer and security maintainer document why it is not applicable.
+Record the maintainer, date, command-output links, and exceptions in the release pull request or release record. An applicable but incomplete security, compatibility, or supply-chain item blocks public release; the current maintainer records why an item is not applicable. During the initial single-maintainer phase, do not invent a second human approval: independent technical review, CI/focused regression evidence, and an explicit maintainer decision form the release basis.
 
 ## Authority and project metadata
 
 - [ ] Repository owner confirmed public release and the MIT license.
-- [ ] The `freedomkk-qfeng/dsh-oidc` remote is confirmed; npm package ownership is approved separately if npm publication is planned.
-- [ ] Maintainer, security, and release-manager rosters recorded with backups.
+- [ ] The `freedomkk-qfeng/dsh-oidc` remote and ownership of the `@eduwork/dsh-oidc` npm package are confirmed.
+- [ ] Maintainer, security, and release-manager rosters recorded, accurately stating whether backups and a recovery path currently exist.
 - [ ] GitHub Private Vulnerability Reporting is enabled and its entry point has been checked without sensitive data.
 - [ ] ECNU/ChatECNU name, example text, colors, and trademark notice approved.
 
 ## Source and protocol review
 
-- [ ] Two-person review completed for OIDC, Key Binding, model-gateway invariants, Profile validation, Provider credentials, and native boundary.
+- [ ] Independent technical review completed for OIDC, Key Binding, model-gateway invariants, Profile validation, Provider credentials, and the native boundary; the maintainer accepted findings and exceptions in the release record.
 - [ ] Enterprise Profile JSON Schema matches runtime behavior.
 - [ ] OpenAPI matches normative Key Binding prose and implementation.
 - [ ] OIDC standard references and limitations are current.
@@ -35,7 +35,7 @@ Record reviewer names, date, command output links, and exceptions in the release
 
 ## Supply chain
 
-- [ ] Clean `npm ci` completed on Windows and Linux with Node 22.
+- [ ] Clean `npm ci` and `npm run check` completed on Windows and Linux with Node 22 and 24.
 - [ ] `npm audit` and static analysis reviewed (not merely run).
 - [ ] Every direct/transitive license and exception reviewed.
 - [ ] npm install scripts reviewed; unexpected scripts denied.
@@ -56,5 +56,8 @@ Record reviewer names, date, command output links, and exceptions in the release
 - [ ] `npm pack --dry-run` and extracted tarball reviewed; only intended files included.
 - [ ] Source maps contain no private absolute paths or secrets.
 - [ ] Tag/release notes/checksums prepared.
-- [ ] npm trusted publishing/provenance configured; no long-lived local publish token.
+- [ ] The actual publication path is recorded: until a Trusted Publisher is configured, run the manual workflow only with `publish=false`; the first stable release may use the maintainer's npm CLI plus browser 2FA to publish the frozen tarball, explicitly without claiming provenance.
+- [ ] When using Trusted Publishing, the Publisher is bound to repository `freedomkk-qfeng/dsh-oidc`, workflow `release.yml`, and environment `npm`; the job uses pinned npm CLI `11.6.2`, and this commit's Windows/Linux × Node 22/24 CI is successful.
+- [ ] Inputs and artifacts are verified for the selected path: the CLI path checks frozen tarball identity, SHA-256, 2FA, and registry results; the Trusted path additionally checks the existing `v<package version>` tag, commit, workflow artifact, and an actual npm provenance attestation.
+- [ ] Publishing credentials were not written to the repository, logs, or deliverables, and the release does not claim Trusted Publishing before it is configured.
 - [ ] Rollback/deprecation and vulnerability-notification plan confirmed.

package/docs/release-checklist.md

@@ -2,19 +2,19 @@
 
 **简体中文** | [English](release-checklist.en.md)
 
-在发布 Pull Request 中记录审查人、日期、命令输出链接和例外说明。任何未勾选项目都会阻止公开发布，除非维护者和安全维护者书面说明其不适用原因。
+在发布 Pull Request 或发行记录中记录维护者、日期、命令输出链接和例外说明。适用但未完成的安全、兼容或供应链项目会阻止公开发布；不适用项由当前维护者记录原因。项目处于初期单一维护者阶段时，不虚构第二位人工审批，以独立技术复核、CI/专项回归证据和维护者明确决定作为发布依据。
 
 ## 授权与项目元数据
 
 - [ ] 仓库所有者确认公开发布和 MIT 许可证。
-- [ ] `freedomkk-qfeng/dsh-oidc` 远程仓库位置已确认；如发布 npm，`dsh-oidc` 包所有权另行确认。
-- [ ] 维护者、安全维护者和发布经理名单及替补已记录。
+- [ ] `freedomkk-qfeng/dsh-oidc` 远程仓库位置和 `@eduwork/dsh-oidc` npm 包所有权均已确认。
+- [ ] 维护者、安全维护者和发布经理名单已记录，并如实说明当前是否存在替补及恢复路径。
 - [ ] GitHub Private Vulnerability Reporting 已启用并完成一次无敏感数据的入口检查。
 - [ ] ECNU/ChatECNU 名称、示例文字、颜色和商标声明获批。
 
 ## 源码与协议审查
 
-- [ ] OIDC、Key Binding、模型网关一致性、Profile 校验、Provider 凭据和 native 边界已完成双人审查。
+- [ ] OIDC、Key Binding、模型网关一致性、Profile 校验、Provider 凭据和 native 边界已完成独立技术复核，维护者已在发布记录中接受结论和例外。
 - [ ] Enterprise Profile JSON Schema 与运行行为一致。
 - [ ] OpenAPI 与 Key Binding 规范正文和实现一致。
 - [ ] OIDC 标准引用和限制仍然有效。
@@ -35,7 +35,7 @@
 
 ## 供应链
 
-- [ ] Windows 和 Linux 上使用 Node 22 完成干净 `npm ci`。
+- [ ] Windows 和 Linux 上分别使用 Node 22、24 完成干净 `npm ci` 与 `npm run check`。
 - [ ] `npm audit` 和静态分析结果经过审查，而不只是执行。
 - [ ] 所有直接/间接许可证和例外已经审查。
 - [ ] npm 安装脚本已经审查，未预期脚本被拒绝。
@@ -56,5 +56,8 @@
 - [ ] 已审查 `npm pack --dry-run` 和解压后的 tarball，且只包含预期文件。
 - [ ] Source map 不包含私有绝对路径或秘密。
 - [ ] Tag、发布说明和 checksum 已准备。
-- [ ] npm trusted publishing/provenance 已配置，不使用长期本地 publish token。
+- [ ] 实际发布路径已记录：Trusted Publisher 尚未配置时，手动 workflow 只以 `publish=false` 运行；首次稳定版可以使用维护者 npm CLI + 浏览器 2FA 发布冻结 tarball，且明确不声称 provenance。
+- [ ] 若使用 Trusted Publishing，Publisher 已绑定仓库 `freedomkk-qfeng/dsh-oidc`、workflow `release.yml` 和 environment `npm`；发布 job 使用固定 npm CLI `11.6.2`，且该提交的 Windows/Linux × Node 22/24 CI 已成功。
+- [ ] 发布输入与产物已按所选路径核验：CLI 路径核对冻结 tarball 身份、SHA-256、2FA 和 registry 结果；Trusted 路径还核对现有 `v<package version>` tag、提交、workflow artifact 和实际 npm provenance attestation。
+- [ ] 发布凭据没有写入仓库、日志或交付物；未配置 Trusted Publisher 时也不宣称使用了 Trusted Publishing。
 - [ ] 已确认回滚、弃用和漏洞通知计划。

package/lib/client.js

@@ -5386,6 +5386,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			"theme"
 		];
 		const h = react.default.createElement;
+		const enterpriseBrandPriority = -100;
 		const border = "var(--dsw-alias-border-l2, #e5d4cc)";
 		const button = Object.freeze({
 			border: `1px solid ${border}`,
@@ -5501,14 +5502,17 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			const effects = [
 				ctx.slots.inject("sidebar.brand.mark", () => ctx.slots.register({
 					name: "sidebar.brand.mark",
+					priority: enterpriseBrandPriority,
 					inject: () => ({ profile })
 				}, ProductMark)),
 				ctx.slots.inject("sidebar.brand.name", () => ctx.slots.register({
 					name: "sidebar.brand.name",
+					priority: enterpriseBrandPriority,
 					inject: () => ({ profile })
 				}, ProductName)),
 				ctx.slots.inject("conversation.hero.brand.mark", () => ctx.slots.register({
 					name: "conversation.hero.brand.mark",
+					priority: enterpriseBrandPriority,
 					inject: () => ({ profile })
 				}, ProductMark))
 			];

package/lib/profile.js

@@ -6,6 +6,12 @@ const idPattern = /^[a-z][a-z0-9-]{0,63}$/
 const credentialPattern = /^[A-Za-z_][A-Za-z0-9_]*$/
 const colorPattern = /^#[0-9a-fA-F]{6}$/
 const allowedModalities = new Set(['text', 'image'])
+const allowedThinkingLevels = new Set(['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max'])
+const allowedMaxTokensFields = new Set(['max_completion_tokens', 'max_tokens'])
+const allowedThinkingFormats = new Set([
+  'openai', 'deepseek', 'openrouter', 'together', 'baseten', 'zai', 'qwen',
+  'chat-template', 'qwen-chat-template', 'string-thinking', 'ant-ling',
+])
 const allowedRootKeys = new Set([
   'schemaVersion', 'id', 'displayName', 'organization', 'nativeInstitutionID',
   'allowInsecureDevelopment', 'insecureDevelopmentOrigin', 'brand', 'oidc', 'keyBinding', 'provider',
@@ -141,9 +147,15 @@ function normalizeCompat(value, label) {
   const result = {}
   for (const key of allowedCompatKeys) {
     if (source[key] === undefined) continue
-    result[key] = key === 'maxTokensField' || key === 'thinkingFormat'
-      ? text(source[key], `${label}.${key}`, 64)
-      : boolean(source[key], `${label}.${key}`)
+    if (key === 'maxTokensField') {
+      result[key] = text(source[key], `${label}.${key}`, 64)
+      if (!allowedMaxTokensFields.has(result[key])) throw new Error(`${label}.${key} is not supported by DSH pi-ai`)
+    } else if (key === 'thinkingFormat') {
+      result[key] = text(source[key], `${label}.${key}`, 64)
+      if (!allowedThinkingFormats.has(result[key])) throw new Error(`${label}.${key} is not supported by DSH pi-ai`)
+    } else {
+      result[key] = boolean(source[key], `${label}.${key}`)
+    }
   }
   return Object.freeze(result)
 }
@@ -151,9 +163,12 @@ function normalizeCompat(value, label) {
 function normalizeReasoningEfforts(value, providerID, modelID) {
   if (value === false) return false
   const source = object(value, `${providerID}.${modelID}.reasoningEfforts`)
-  if (Object.keys(source).length === 0 || Object.keys(source).length > 16) throw new Error(`${providerID}.${modelID}.reasoningEfforts must contain 1-16 entries`)
+  if (Object.keys(source).length === 0 || Object.keys(source).length > allowedThinkingLevels.size) {
+    throw new Error(`${providerID}.${modelID}.reasoningEfforts must contain 1-${allowedThinkingLevels.size} entries`)
+  }
   return Object.freeze(Object.fromEntries(Object.entries(source).map(([level, wire]) => {
-    text(level, `${providerID}.${modelID}.reasoningEfforts level`, 32)
+    if (!allowedThinkingLevels.has(level)) throw new Error(`${providerID}.${modelID}.reasoningEfforts level ${level} is not supported by DSH pi-ai`)
+    if (wire === null && level !== 'off') throw new Error(`${providerID}.${modelID}.reasoningEfforts.${level} may be null only for off`)
     if (wire !== null) text(wire, `${providerID}.${modelID}.reasoningEfforts.${level}`, 32)
     return [level, wire]
   })))
@@ -296,7 +311,13 @@ export function normalizeEnterpriseProfile(raw) {
       displayName: text(provider.displayName ?? source.displayName, 'profile.provider.displayName', 120),
       adapter: provider.adapter,
       baseURL: exactURL(provider.baseURL, 'profile.provider.baseURL', allowInsecureDevelopment, allowedInsecureOrigin),
-      reasoning: provider.reasoning === undefined ? 'high' : text(provider.reasoning, 'profile.provider.reasoning', 32),
+      reasoning: provider.reasoning === undefined
+        ? 'high'
+        : (() => {
+            const reasoning = text(provider.reasoning, 'profile.provider.reasoning', 32)
+            if (!allowedThinkingLevels.has(reasoning)) throw new Error('profile.provider.reasoning is not supported by DSH pi-ai')
+            return reasoning
+          })(),
       defaultContextWindow: optionalPositiveInteger(provider.defaultContextWindow, 'profile.provider.defaultContextWindow'),
       defaultMaxTokens: optionalPositiveInteger(provider.defaultMaxTokens, 'profile.provider.defaultMaxTokens'),
       maxRequestImageBytes: optionalPositiveInteger(provider.maxRequestImageBytes, 'profile.provider.maxRequestImageBytes'),
@@ -342,15 +363,22 @@ export function enterpriseProviderConfig(profiles) {
       allowInsecureDevelopment: profile.allowInsecureDevelopment,
       ...(profile.insecureDevelopmentOrigin === undefined ? {} : { insecureDevelopmentOrigin: profile.insecureDevelopmentOrigin }),
       reasoning: profile.provider.reasoning,
-      defaultContextWindow: profile.provider.defaultContextWindow,
-      defaultMaxTokens: profile.provider.defaultMaxTokens,
-      maxRequestImageBytes: profile.provider.maxRequestImageBytes,
-      requestImagePixelBudget: profile.provider.requestImagePixelBudget,
-      requestImageMaxBytes: profile.provider.requestImageMaxBytes,
-      streamIdleTimeoutMs: profile.provider.streamIdleTimeoutMs,
-      retryPolicy: profile.provider.retryPolicy,
-      compat: profile.provider.compat,
-      models: profile.provider.models,
+      ...(profile.provider.defaultContextWindow === undefined ? {} : { defaultContextWindow: profile.provider.defaultContextWindow }),
+      ...(profile.provider.defaultMaxTokens === undefined ? {} : { defaultMaxTokens: profile.provider.defaultMaxTokens }),
+      ...(profile.provider.maxRequestImageBytes === undefined ? {} : { maxRequestImageBytes: profile.provider.maxRequestImageBytes }),
+      ...(profile.provider.requestImagePixelBudget === undefined ? {} : { requestImagePixelBudget: profile.provider.requestImagePixelBudget }),
+      ...(profile.provider.requestImageMaxBytes === undefined ? {} : { requestImageMaxBytes: profile.provider.requestImageMaxBytes }),
+      ...(profile.provider.streamIdleTimeoutMs === undefined ? {} : { streamIdleTimeoutMs: profile.provider.streamIdleTimeoutMs }),
+      ...(profile.provider.retryPolicy === undefined ? {} : { retryPolicy: structuredClone(profile.provider.retryPolicy) }),
+      ...(profile.provider.compat === undefined ? {} : { compat: { ...profile.provider.compat } }),
+      models: profile.provider.models.map(model => ({
+        ...model,
+        input: [...model.input],
+        ...(model.reasoningEfforts && typeof model.reasoningEfforts === 'object'
+          ? { reasoningEfforts: { ...model.reasoningEfforts } }
+          : {}),
+        ...(model.compat === undefined ? {} : { compat: { ...model.compat } }),
+      })),
     }])),
   }
 }

package/lib/provider/index.js

@@ -1,5 +1,5 @@
 import { launchEnvironmentOf } from '@deepseek-ai/dsh-launch-environment'
-import { LlmError, assertUsableApiKey, resolveRetryPolicy } from '@deepseek-ai/dsh-llm'
+import { LlmError, assertUsableApiKey, resolveImageAttachmentAccess, resolveRetryPolicy } from '@deepseek-ai/dsh-llm'
 import { Config as PiAiConfig, PiAiAdapter } from '@deepseek-ai/dsh-llm-pi-ai'
 import { createProvider } from '@earendil-works/pi-ai'
 import { openAICompletionsApi } from '@earendil-works/pi-ai/api/openai-completions.lazy'
@@ -22,7 +22,13 @@ function installEnterpriseSettings(ctx, rawConfig, hooks) {
       SETTINGS_NAMESPACE,
       PiAiConfig,
       settingsBase(rawConfig),
-      hooks,
+      {
+        ...hooks,
+        validate(value) {
+          assertServiceableEnterpriseProviders(value)
+          hooks.validate?.(value)
+        },
+      },
     )
   })
 }
@@ -68,6 +74,10 @@ function profilesFrom(rawConfig) {
   return profiles
 }
 
+export function assertServiceableEnterpriseProviders(rawConfig) {
+  profilesFrom(rawConfig)
+}
+
 function isolatedPiAiAuth() {
   const stored = new Map()
   return {
@@ -89,6 +99,14 @@ function isolatedPiAiAuth() {
   }
 }
 
+export function resolveEnterpriseImageAccess(ctx, attachments, ref) {
+  return resolveImageAttachmentAccess(
+    attachments,
+    hostPath => ctx.get('fs')?.processPathFromHostPath(hostPath),
+    ref,
+  )
+}
+
 export function apply(ctx, rawConfig = {}) {
   const transforms = new EnterpriseModelTransforms(ctx)
   let current = () => settingsBase(rawConfig)
@@ -108,6 +126,7 @@ export function apply(ctx, rawConfig = {}) {
       throw new LlmError(`${name}: no credential for provider route "${provider}" (${ref})`, 'MISSING_CREDENTIAL')
     },
     resolveAttachments: () => ctx.get('attachments'),
+    resolveImageAccess: (attachments, ref) => resolveEnterpriseImageAccess(ctx, attachments, ref),
   })
 
   const adapter = new TransformingEnterpriseAdapter(baseAdapter, transforms, (provider, model) => (

package/lib/provider/transform-adapter.js

@@ -8,6 +8,7 @@ export class TransformingEnterpriseAdapter {
 
   providerInfo(provider) { return this.inner.providerInfo(provider) }
   providerRetryPolicy(provider) { return this.inner.providerRetryPolicy(provider) }
+  imageRequestPricing(provider, model) { return this.inner.imageRequestPricing(provider, model) }
 
   async listModels(provider) {
     const models = await this.inner.listModels(provider)
@@ -62,4 +63,3 @@ export class TransformingEnterpriseAdapter {
     yield* this.streamPrepared(options, prepared)
   }
 }
-