@hanamesh/dsh-app-host 0.6.22 → 0.6.24

package/docs/INSTALL_TARGET.md

@@ -16,7 +16,11 @@ GitHub ref 必须是收录时固定的完整 40 位 SHA，不在安装时解析
 
 GitHub CLI exit 0 后还须核对 profile 精确保存的 Git spec、模块包名/版本、dsh.bundle 和 profile 启用列表，随后报告 restart-required；重开后由原生 DSH 加载。不自行 clone/build，不改上游，不用进程内安装器。失败补偿沿原 CLI；pnpm-workspace.yaml 若发生变化，恢复报告保留 build-permissions 残留及原文件，不擅自撤销或静默宣称恢复。handoff 事件按完整目标匹配，不能只靠同名包把另一个 SHA 报为成功。
 
-网站发现：DSH 本地路由与交接监听的 `/hanamesh/library/install-target` 都按当前 `library.handoff.allowedOrigins` 回答跨来源 GET / OPTIONS；只回显获准 Origin（Vary: Origin），不使用通配 CORS。未获准来源为 403 ORIGIN_DENIED，正文无客户端能力。正常工作区同源读取、无 Origin 的本机工具读取保留。其余安装/状态路由继续需要各自认证与确认。
+网站发现（0.6.23候选，编排11-09授权D3）：DSH本地与交接监听共用`install-target-http.js`。仅获准来源可读取客户端能力；名单外的有效HTTP/HTTPS来源，对无查询、无Cookie/Authorization、非iframe的精确`GET /hanamesh/library/install-target`，返回精确`Access-Control-Allow-Origin: <请求Origin>`、`Vary: Origin`及固定`403 {"error":{"code":"ORIGIN_DENIED","message":"This website is not allowed to read discovery."}}`。无客户端类型/能力/ready/版本/清单/允许名单/traceId；不调用能力或安装清单读取器。该最小拒绝有意允许网站识别本机存在拒绝它的监听，不代表任何安装或读取授权。无`*`/Allow-Credentials/Set-Cookie。无Origin的本机工具及获准工作区读取保留。
+
+预检：精确同一路径的有效GET预检返回204空正文、精确Origin和`Access-Control-Allow-Methods: GET`，使浏览器能继续GET并读到403；不把403放在预检上。仅请求带`Access-Control-Request-Private-Network: true`时返回`Access-Control-Allow-Private-Network: true`；普通预检和实际GET均不带该响应头。Vary包含Origin、Access-Control-Request-Method、Access-Control-Request-Headers、Access-Control-Request-Private-Network；无Max-Age缓存。请求额外headers、非GET预检、非法PNA值被拒绝且不授CORS；名单外预检必须显式声明GET。获准来源/本机工具的旧OPTIONS缺省method保持可用。依据：[Fetch预检成功状态](https://fetch.spec.whatwg.org/#cors-preflight-fetch)、[Chrome PNA预检](https://developer.chrome.com/blog/private-network-access-preflight)。现代Chrome的[LNA本机访问权限](https://developer.chrome.com/docs/modern-web-guidance/guides/security/local-network-access)独立生效，此响应不绕过浏览器授权。
+
+错误Host、绝对/双斜线/反斜线target、opaque或畸形Origin、名单外凭据/查询/非探测方法、iframe均不获此拒绝CORS例外；installation-status、交接、库存、设置、安装等接口继续原名单/同意/认证与确认规则。
 
 轮询设置：`pollMs` 写入应用库真实 storage domain；保存、卸载再加载后保持。旧记录没有该字段时使用既有配置/默认 1500 ms，不重写其它存储数据。
 
@@ -127,7 +131,7 @@ node node_modules/@hanamesh/dsh-app-host/dist/install-target/run.js consumer --u
 
 ## 本机公开探测与目录消费（D-180）
 
-`GET /hanamesh/library/install-target` 无参数，精确回环 Host、非 iframe，允许跨源匿名只读探测。返回 `{client:'dsh',ready,installTarget:{contract:'hanamesh.install-target',contractVersion:'1',supported:['1'],fragmentPrefix:'#hanamesh-install?'},traceId,error?}`；缺安装器 `ready:false` 且 `error.code='INSTALL_TARGET_UNAVAILABLE'`。只这一项带 `Access-Control-Allow-Origin:*`、no-store，不发 Cookie/Allow-Credentials，不返回 profile、已装行、工作区认证地址、命令或租约。独立 DSH 默认报 dsh；没有真实 Desktop 公开证据时不推断 HanaMesh 品牌。其余控制路径仍按原 DSH 认证与准确同源授权执行。
+`GET /hanamesh/library/install-target` 无参数，精确回环 Host、非 iframe，允许跨源匿名只读探测。返回 `{client:'dsh',ready,installTarget:{contract:'hanamesh.install-target',contractVersion:'1',supported:['1'],fragmentPrefix:'#hanamesh-install?'},traceId,error?}`；缺安装器 `ready:false` 且 `error.code='INSTALL_TARGET_UNAVAILABLE'`。只这一项依本页“网站发现”规则带精确Origin CORS、no-store，不发 Cookie/Allow-Credentials，不返回 profile、已装行、工作区认证地址、命令或租约。独立 DSH 默认报 dsh；没有真实 Desktop 公开证据时不推断 HanaMesh 品牌。其余控制路径仍按原 DSH 认证与准确同源授权执行。
 
 C-WEB-CATALOG 第1版的显式 `catalog-source.json?view=hanamesh` 与 manifest 的 `/v1/plugins?view=hanamesh` 可配置为目录来源。旧无 view 源仍严格按 catalog-major-1，不混 schema 或静默降级。新 DTO 保留 id=itemId、可空 npm 身份及公开 sourceLinks；q 是子串查询，目标按精确身份匹配，空页仍有游标则续翻。只给包名时遍历确认唯一目录身份；多个身份返回409 CATALOG_TARGET_AMBIGUOUS。无 npm 包仅浏览；来源链接/分类/目录版本都不能成为启动或安装权限。CATALOG_CHANGED 中止本轮、不拼代或自动重试，其余提供方公开错误保持原 code；故障不退 fixture。
 

package/docs/LICENSES.json

@@ -1,7 +1,7 @@
 {
   "package": {
     "name": "@hanamesh/dsh-app-host",
-    "version": "0.6.22",
+    "version": "0.6.24",
     "license": "SEE LICENSE IN LICENSE",
     "source": "git+https://github.com/yzsnstotz/hanamesh-plugin-app-host.git",
     "purpose": "Application ownership, view leases, Router forwarding, and application library for official DSH"
@@ -20,107 +20,113 @@
       "distribution": "bundleDependencies; original LICENSE at node_modules/@hanamesh/lib-provision/LICENSE"
     },
     "zod": {
-      "version": "4.5.4",
+      "version": "4.4.3",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/zod/-/zod-4.5.4.tgz",
+      "source": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
       "purpose": "Runtime snapshot validation",
       "usedAs": [
         "dependencies"
       ],
       "specs": {
-        "dependencies": "4.5.4"
+        "dependencies": "4.4.3"
       }
     },
     "@deepseek-ai/cordis": {
-      "version": "4.0.5-alpha.1",
+      "version": "4.1.0",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/cordis/-/cordis-4.0.5-alpha.1.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/cordis/-/cordis-4.1.0.tgz",
       "purpose": "Official DSH plugin lifecycle and service container",
       "usedAs": [
         "peerDependencies",
         "devDependencies"
       ],
       "specs": {
-        "peerDependencies": ">=4.0.4 <4.1.0-0 || >=4.0.5-alpha.1 <4.1.0-0",
-        "devDependencies": "4.0.5-alpha.1"
+        "peerDependencies": ">=4.0.4 <4.2.0-0 || >=4.0.5-alpha.1 <4.2.0-0",
+        "devDependencies": "4.1.0"
       }
     },
     "@deepseek-ai/dsh-storage-domain": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-storage-domain/-/dsh-storage-domain-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-storage-domain/-/dsh-storage-domain-0.2.2-rc.1.tgz",
       "purpose": "Official DSH persistent storage service",
       "usedAs": [
         "peerDependencies",
         "devDependencies"
       ],
       "specs": {
-        "peerDependencies": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0",
-        "devDependencies": "0.2.1-alpha.2"
+        "peerDependencies": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0 || >=0.2.2-0 <0.3.0-0",
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "@deepseek-ai/schemastery": {
-      "version": "3.18.5-alpha.1",
+      "version": "3.19.0",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/schemastery/-/schemastery-3.18.5-alpha.1.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/schemastery/-/schemastery-3.19.0.tgz",
       "purpose": "Official DSH configuration schema service",
       "usedAs": [
         "peerDependencies",
         "devDependencies"
       ],
       "specs": {
-        "peerDependencies": ">=3.18.4 <3.19.0-0 || >=3.18.5-alpha.1 <3.19.0-0",
-        "devDependencies": "3.18.5-alpha.1"
+        "peerDependencies": ">=3.18.4 <3.20.0-0 || >=3.18.5-alpha.1 <3.20.0-0",
+        "devDependencies": "3.19.0"
       }
     },
     "@deepseek-ai/dsh-host-webserver": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-host-webserver/-/dsh-host-webserver-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-host-webserver/-/dsh-host-webserver-0.2.2-rc.1.tgz",
       "purpose": "Official DSH authenticated HTTP route host",
       "usedAs": [
         "peerDependencies",
         "devDependencies"
       ],
       "specs": {
-        "peerDependencies": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0",
-        "devDependencies": "0.2.1-alpha.2"
+        "peerDependencies": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0 || >=0.2.2-0 <0.3.0-0",
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "@deepseek-ai/dsh-client-connection": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-client-connection/-/dsh-client-connection-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-client-connection/-/dsh-client-connection-0.2.2-rc.1.tgz",
       "purpose": "Official DSH client connection service",
       "usedAs": [
-        "peerDependencies"
+        "peerDependencies",
+        "devDependencies"
       ],
       "specs": {
-        "peerDependencies": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0"
+        "peerDependencies": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0 || >=0.2.2-0 <0.3.0-0",
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "@deepseek-ai/dsh-client-ui-settings": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-client-ui-settings/-/dsh-client-ui-settings-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-client-ui-settings/-/dsh-client-ui-settings-0.2.2-rc.1.tgz",
       "purpose": "Official DSH client settings surface",
       "usedAs": [
-        "peerDependencies"
+        "peerDependencies",
+        "devDependencies"
       ],
       "specs": {
-        "peerDependencies": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0"
+        "peerDependencies": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0 || >=0.2.2-0 <0.3.0-0",
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "@deepseek-ai/dsh-client-locale": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-client-locale/-/dsh-client-locale-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-client-locale/-/dsh-client-locale-0.2.2-rc.1.tgz",
       "purpose": "Official DSH client localization",
       "usedAs": [
-        "peerDependencies"
+        "peerDependencies",
+        "devDependencies"
       ],
       "specs": {
-        "peerDependencies": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0"
+        "peerDependencies": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0 || >=0.2.2-0 <0.3.0-0",
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "react": {
@@ -136,87 +142,87 @@
       }
     },
     "@deepseek-ai/dsh-scope": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-scope/-/dsh-scope-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-scope/-/dsh-scope-0.2.2-rc.1.tgz",
       "purpose": "Build and test fixture for official DSH scopes",
       "usedAs": [
         "devDependencies"
       ],
       "specs": {
-        "devDependencies": "0.2.1-alpha.2"
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "@deepseek-ai/dsh-session": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-session/-/dsh-session-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-session/-/dsh-session-0.2.2-rc.1.tgz",
       "purpose": "Build and test fixture for official DSH sessions",
       "usedAs": [
         "devDependencies"
       ],
       "specs": {
-        "devDependencies": "0.2.1-alpha.2"
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "@deepseek-ai/dsh-session-persistence": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-session-persistence/-/dsh-session-persistence-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-session-persistence/-/dsh-session-persistence-0.2.2-rc.1.tgz",
       "purpose": "Build and test fixture for official DSH session persistence",
       "usedAs": [
         "devDependencies"
       ],
       "specs": {
-        "devDependencies": "0.2.1-alpha.2"
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "@deepseek-ai/dsh-session-persistence-jsonl": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-session-persistence-jsonl/-/dsh-session-persistence-jsonl-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-session-persistence-jsonl/-/dsh-session-persistence-jsonl-0.2.2-rc.1.tgz",
       "purpose": "Build and test fixture for official DSH JSONL session persistence",
       "usedAs": [
         "devDependencies"
       ],
       "specs": {
-        "devDependencies": "0.2.1-alpha.2"
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "@deepseek-ai/dsh-session-projection": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-session-projection/-/dsh-session-projection-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-session-projection/-/dsh-session-projection-0.2.2-rc.1.tgz",
       "purpose": "Build and test fixture for official DSH session projections",
       "usedAs": [
         "devDependencies"
       ],
       "specs": {
-        "devDependencies": "0.2.1-alpha.2"
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "@deepseek-ai/dsh-storage": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-storage/-/dsh-storage-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-storage/-/dsh-storage-0.2.2-rc.1.tgz",
       "purpose": "Build and test fixture for official DSH storage",
       "usedAs": [
         "devDependencies"
       ],
       "specs": {
-        "devDependencies": "0.2.1-alpha.2"
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "@deepseek-ai/dsh-storage-json": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-storage-json/-/dsh-storage-json-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-storage-json/-/dsh-storage-json-0.2.2-rc.1.tgz",
       "purpose": "Build and test fixture for official DSH JSON storage",
       "usedAs": [
         "devDependencies"
       ],
       "specs": {
-        "devDependencies": "0.2.1-alpha.2"
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "typescript": {
@@ -262,49 +268,181 @@
       }
     },
     "@deepseek-ai/dsh-client-ui-renderer": {
-      "version": "0.2.1-alpha.2",
+      "version": "0.2.2-rc.1",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-client-ui-renderer/-/dsh-client-ui-renderer-0.2.1-alpha.2.tgz",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-client-ui-renderer/-/dsh-client-ui-renderer-0.2.2-rc.1.tgz",
       "purpose": "Public DSH renderer slots service; official client placement without client changes",
       "usedAs": [
         "peerDependencies",
         "devDependencies"
       ],
       "specs": {
-        "peerDependencies": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0",
-        "devDependencies": "0.2.1-alpha.2"
+        "peerDependencies": ">=0.2.0-rc.2 <0.3.0-0 || >=0.2.1-0 <0.3.0-0 || >=0.2.2-0 <0.3.0-0",
+        "devDependencies": "0.2.2-rc.1"
       }
     },
     "@hanamesh/release-platform-gate": {
-      "version": "0.1.10",
+      "version": "0.1.12",
       "license": "UNKNOWN: private development tool does not declare a license",
-      "source": "file:vendor/hanamesh-release-platform-gate-0.1.10.tgz",
-      "purpose": "Development-only shared immutable platform gate0.1.10; R2 PASS docs cce1576, source C7a39e4e and same reviewed archive SHA; never runtime or bundled",
+      "source": "file:vendor/hanamesh-release-platform-gate-0.1.12.tgz",
+      "purpose": "Development-only R119b PASS platform closure and explicit installer exit qualification gate; never runtime or bundled",
       "usedAs": [
         "devDependencies"
       ],
       "specs": {
-        "devDependencies": "file:vendor/hanamesh-release-platform-gate-0.1.10.tgz"
+        "devDependencies": "file:vendor/hanamesh-release-platform-gate-0.1.12.tgz"
       },
-      "sourceCommit": "7a39e4e332a2cbb5dcbfddec68383fb5cef39eb8",
-      "archiveSha256": "71545cbb636d3b1a5e7d9fbba728b16e006b8eaf70bc2540038d077df7263a61",
-      "reviewDocs": "cce157612b1390b845ccca3f0632247de9fb3229"
+      "sourceCommit": "95e54102f9380ea2e8e4d8a2e36eacd387c3f7e7",
+      "archiveSha256": "caf78747649b1dd37cbe9ba331351c81f94a48dc9e779aee83c75336140068d1",
+      "reviewDocs": "a24716374e2d35b8dfaa21131ae654f8b141ba67"
     },
     "@hanamesh/core": {
-      "version": "0.3.30",
+      "version": "0.3.33",
       "license": "MIT",
-      "source": "https://registry.npmjs.org/@hanamesh/core/-/core-0.3.30.tgz",
+      "source": "file:vendor/hanamesh-core-0.3.33.tgz",
       "purpose": "Development-only public Core suite declaration and provider-owned install command for clean CI; never runtime or bundled",
       "usedAs": [
         "devDependencies"
       ],
       "specs": {
-        "devDependencies": "^0.3.30"
+        "devDependencies": "file:vendor/hanamesh-core-0.3.33.tgz"
       },
-      "sourceCommit": "11335137f909d28cd5724d6d206b770841ddb653",
-      "archiveSha256": "6dfa824891aa9115052473e1b27cf87811ff47a757addd812f6d6daf9c35c338",
+      "sourceCommit": "969a89a1f7e383fca7d6aefa7f27507d3a1605d5",
+      "archiveSha256": "088cf6a7b7575fa1d22116d6af8a6b0312fbbb825c50d9bf38f0447ef36c7c78",
       "licenseNotice": "MIT License\n\nCopyright (c) 2026 HanaMesh\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",
       "licenseSha256": "cd29e05178eecb3207c494901de7d41785a7b31216e94ab37f3e104e93f3f3b1"
+    },
+    "@deepseek-ai/cordis-plugin-loader": {
+      "version": "1.1.0",
+      "license": "MIT",
+      "source": "https://registry.npmjs.org/@deepseek-ai/cordis-plugin-loader/-/cordis-plugin-loader-1.1.0.tgz",
+      "purpose": "Official host lifecycle development prerequisite",
+      "usedAs": [
+        "devDependencies"
+      ],
+      "specs": {
+        "devDependencies": "1.1.0"
+      }
+    },
+    "@deepseek-ai/cordis-plugin-include": {
+      "version": "1.1.0",
+      "license": "MIT",
+      "source": "https://registry.npmjs.org/@deepseek-ai/cordis-plugin-include/-/cordis-plugin-include-1.1.0.tgz",
+      "purpose": "Official host lifecycle development prerequisite",
+      "usedAs": [
+        "devDependencies"
+      ],
+      "specs": {
+        "devDependencies": "1.1.0"
+      }
+    },
+    "@deepseek-ai/cordis-plugin-group": {
+      "version": "1.1.0",
+      "license": "MIT",
+      "source": "https://registry.npmjs.org/@deepseek-ai/cordis-plugin-group/-/cordis-plugin-group-1.1.0.tgz",
+      "purpose": "Official host lifecycle development prerequisite",
+      "usedAs": [
+        "devDependencies"
+      ],
+      "specs": {
+        "devDependencies": "1.1.0"
+      }
+    },
+    "@deepseek-ai/dsh-app-boot": {
+      "version": "0.2.2-rc.1",
+      "license": "MIT",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-app-boot/-/dsh-app-boot-0.2.2-rc.1.tgz",
+      "purpose": "Declared public host type/build prerequisite",
+      "usedAs": [
+        "devDependencies"
+      ],
+      "specs": {
+        "devDependencies": "0.2.2-rc.1"
+      }
+    },
+    "@deepseek-ai/dsh-client-ui-primitives": {
+      "version": "0.2.2-rc.1",
+      "license": "MIT",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-client-ui-primitives/-/dsh-client-ui-primitives-0.2.2-rc.1.tgz",
+      "purpose": "Declared public host type/build prerequisite",
+      "usedAs": [
+        "devDependencies"
+      ],
+      "specs": {
+        "devDependencies": "0.2.2-rc.1"
+      }
+    },
+    "@deepseek-ai/dsh-client-ui-sidebar": {
+      "version": "0.2.2-rc.1",
+      "license": "MIT",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-client-ui-sidebar/-/dsh-client-ui-sidebar-0.2.2-rc.1.tgz",
+      "purpose": "Declared public host type/build prerequisite",
+      "usedAs": [
+        "devDependencies"
+      ],
+      "specs": {
+        "devDependencies": "0.2.2-rc.1"
+      }
+    },
+    "@deepseek-ai/dsh-typert-protocol": {
+      "version": "0.2.2-rc.1",
+      "license": "MIT",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-typert-protocol/-/dsh-typert-protocol-0.2.2-rc.1.tgz",
+      "purpose": "Declared public host type/build prerequisite",
+      "usedAs": [
+        "devDependencies"
+      ],
+      "specs": {
+        "devDependencies": "0.2.2-rc.1"
+      }
+    },
+    "@deepseek-ai/dsh-util-file-drag": {
+      "version": "0.2.2-rc.1",
+      "license": "MIT",
+      "source": "https://registry.npmjs.org/@deepseek-ai/dsh-util-file-drag/-/dsh-util-file-drag-0.2.2-rc.1.tgz",
+      "purpose": "Declared public host type/build prerequisite",
+      "usedAs": [
+        "devDependencies"
+      ],
+      "specs": {
+        "devDependencies": "0.2.2-rc.1"
+      }
+    },
+    "@shikijs/langs": {
+      "version": "4.4.3",
+      "license": "MIT",
+      "source": "https://registry.npmjs.org/@shikijs/langs/-/langs-4.4.3.tgz",
+      "purpose": "Declared public host type/build prerequisite",
+      "usedAs": [
+        "devDependencies"
+      ],
+      "specs": {
+        "devDependencies": "4.4.3"
+      }
+    },
+    "@types/node": {
+      "version": "24.13.4",
+      "license": "MIT",
+      "source": "https://registry.npmjs.org/@types/node/-/node-24.13.4.tgz",
+      "purpose": "Declared public host type/build prerequisite",
+      "usedAs": [
+        "devDependencies"
+      ],
+      "specs": {
+        "devDependencies": "24.13.4"
+      }
+    },
+    "@types/js-yaml": {
+      "version": "4.0.9",
+      "license": "MIT",
+      "source": "https://registry.npmjs.org/@types/js-yaml/-/js-yaml-4.0.9.tgz",
+      "purpose": "Declared public host type/build prerequisite",
+      "usedAs": [
+        "devDependencies"
+      ],
+      "specs": {
+        "devDependencies": "4.0.9"
+      }
     }
   },
   "downloadedRuntimes": {

package/docs/SECURITY.md

@@ -1,3 +1,7 @@
+D3（编排11-09授权）：仅公开install-target的有效匿名GET/GET预检对名单外HTTP(S) Origin给精确CORS，披露固定ORIGIN_DENIED与本机拒绝监听存在，不披露客户端能力、安装或允许名单。预检204只使浏览器继续读取拒绝；PNA true响应仅在对应请求头为true时出现。其他接口/Host/凭据/iframe边界不变。详见INSTALL_TARGET.md。
+
+0.6.23：安装状态只在原显式同意之后自动发现当前用户的官方 CLI；不读认证/聊天/配置文件、不修改用户配置。登录 shell 仅输出白名单PATH/管理器/XDG路径的封装JSON，未复制完整环境或模型/API token；正常shell stderr不当失败，插件清单仍要求无stderr。监督器保留管理器PATH及原XDG值/缺省，仅临时工作目录和TMP隔离；CLI 仍限版本与插件/市场只读清单，版本下限和既有 JSON 校验双门。Windows npm shim 解析至具名官方 JS，绝不经 cmd 执行。详见 INSTALLATION_STATUS.md。
+
 0.6.7 installation-status is a separately consented read capability: exact existing loopback Host/approved Origin, credentials omitted, strict POST body before any reader. Core is authoritative; CLI executable/profile/target/budgets are static trusted settings, never browser input. Official list output is whitelisted and no raw paths, unrelated inventory or errors leave the host. A live detached IPC anchor owns cancellation and parent-disconnect group cleanup; no cached installed answer. See INSTALLATION_STATUS.md for exact protocol and scope limits.
 
 D-230: failed activation releases only resources acquired by that AppHost activation, including partially registered routes and optional-service listeners. Once-only releases also serve normal Cordis unload. All failed-startup releases are attempted in reverse order; APPHOST_CLEANUP_FAILED names the internal resource without raw errors or credentials, and logger failures cannot replace the original activation error. No authentication, origin, lease, application or browser policy is relaxed.
@@ -89,3 +93,14 @@ B17 候选的套件来源选择仅在 AppHost 自有同源已准入设置端点
 0.6.16：只消费 DSH 公开源事实和公开排序/后继许可规则，不读 .npmrc、凭据、私有服务字段；配置源与受控 CLI 使用同一选择；null项沿用pnpm自有配置，不显式传registry。30秒上限只用于本次安装前查询，超时终止且不重试；配置源的顺序由 DSH 决定。诊断只投影脱敏的类型/消息/code/cause链及已知CLI字段，同时进既有UI和宿主日志；URL用户信息、全部查询值、Authorization/Cookie、token/secret均删除，限4001字符，不传任意details/stack/响应正文。
 
 公开registry规则只从已证明的宿主manager安装位置加载，复用原版本守卫；不安装第二份manager、不复制生产规则、不从任意浏览器路径加载模块。tests/fixtures的原始MIT规则与SHA/许可证只作测试，不进发布包。
+
+
+## Local snapshot publication on Windows
+
+The optional local `AtomicFileStore` flushes the newly written snapshot file, closes it, then renames it within the same directory on every platform. On Linux and macOS it additionally opens and synchronizes the containing directory before acknowledging publication. Node does not provide the directory-open/fsync operation on Windows, so that extra directory flush is not attempted there. Windows still publishes a complete file image and retains real process-kill/crash-cut checks; this does not promise that the renamed directory entry survives power loss or an OS/storage crash. A file-sync failure is never ignored, and a failure after rename remains `COMMIT_UNCERTAIN`. The normal DSH storage-domain bridge keeps its provider's publication contract.
+
+
+On Windows the optional Coding OAuth Gateway **file** source remains unreachable: Node's POSIX mode bits cannot establish a private Windows ACL, so AppHost rejects that source before reading its contents. `chmod(0600)` is never treated as ACL proof. The authenticated HTTP provider is the supported alternative; no secret is silently imported from an unverified file.
+
+
+An explicitly configured existing standalone Node on Windows x64 may be used by the controlled CLI supervisor. It is executed only for the fixed Node probe, with an empty PATH, bounded output and a two-second deadline; the response must match the selected OS/architecture, Node 24 version floor and absence of Electron. That external selection does not enable managed downloads/preparation or owned application launch.