@tonyruan/dsh-bridge-host 0.1.1-beta.8 → 0.1.1-beta.9

package/README.md

@@ -1,6 +1,10 @@
-# beta.8: LAN onboarding
+# beta.9 / build29: integrated local transport and LAN policy
 
-Fresh installations start and pair over LAN without relay configuration. Click Start to initialize and open pairing in one step. Existing identities, pairings and relay configuration are retained.
+Release candidate, not published. Rebuilds all backend entrypoints from final reviewed source; does not reuse old beta6 session bundles. Adds the authenticated Windows/WSL same-machine loopback carrier (127.0.0.1 TCP 38447 business, 38448 pairing), independent of LAN TCP 38445/38446. Existing pinned Noise identity, explicit Host confirmation, persistence/final-ACK order, connection limits and revocation still apply. Local business sockets have no native LAN management provenance and cannot manage devices. Port conflicts are isolated. Actual mirrored WSL end-to-end validation remains pending.
+
+LAN-only restricts backend business transport and relay fallback, not independently configured update or diagnostic services. Updates retain their own trusted source and verification requirements. Diagnostics retain their own valid deployment and explicit opt-in; missing configuration stays off and no diagnostic identity is created automatically. No existing identity, pairing, profile schema, consent or update configuration is rewritten.
+
+LAN pairing displays only bound private IPv4 addresses reported by Host. If multiple addresses are available, select one before displaying or copying the QR descriptor. Changing the selection changes QR/text together and requires a rescan; it never changes the pairing session identity or network mode. Selection is not persisted. A 172.x address alone does not establish NAT or mirrored mode. See the reachability details in the page. If the target already uses mirrored mode, do not switch it merely for this plugin. Another device must reach TCP 38446 (pairing) and 38445 (business); UDP 38444 is discovery. A successful TCP check alone is not a successful Noise pairing. Check actual interface/subnet and scoped Windows Defender/Hyper-V/Linux firewall policy with the administrator. The plugin does not modify WSL or firewall settings and never grants blanket network access.
 
 # DSH Bridge host beta
 
@@ -8,7 +12,7 @@ A community DSH-compatible phone-access plugin, not an official DeepSeek product
 
 Package: @tonyruan/dsh-bridge-host. Use the official DSH plugin manager for installation; stop the target profile before package-name migration. Cordis ID dsh-phone-access, plugin name phone-access, API routes and existing profileDirectory/identity remain stable. The default profile is the existing .dsh-phone-profile; changing an npm name does not authorize replacing data.
 
-This generic build contains no personal relay preset or update root/feed. Without relay configuration, new and existing profiles use LAN-only while preserving their identity and paired devices. Existing saved relay configuration is reused. To retain relay access when replacing an old private code-only preset, use the previously supplied local deployment migration helper before replacing it. LAN-only does not enable diagnostic upload or update networking.
+This generic build contains no personal relay preset or update root/feed. Without relay configuration, new and existing profiles use LAN-only while preserving their identity and paired devices. Existing saved relay configuration is reused. To retain relay access when replacing an old private code-only preset, use the previously supplied local deployment migration helper before replacing it. LAN-only alone neither enables nor blocks independently configured update or diagnostic services.
 
 Own project code is licensed under the standard PolyForm Noncommercial License1.0.0 in LICENSE. This is not OSI open-source; permitted purposes and exceptions are governed by that exact text, not a blanket promise about every business/payment scenario. Third-party components retain their own permission, copyright and NOTICE terms in THIRD-PARTY-NOTICES.txt and oss-licenses/. These own-code terms do not restrict upstream rights. The complete own development project/Git repository is not included; npm runtime JavaScript is publicly readable. Native platform download assets are not included in this npm release.