dsh-antigravity-auth 0.1.3 → 0.1.4-alpha.6

package/CHANGELOG.md

@@ -1,6 +1,19 @@
 # Changelog
 
-## [Unreleased]
+## [0.1.4-alpha.6] - 2026-09-07
+
+- Add explicit DSH `0.1.3-alpha.1` source compatibility alongside the npm alpha.5 baseline; keep dependency graphs separate.
+- Add reproducible isolated source-package checks and coherent lockfile validation.
+
+## [0.1.4-alpha.5] - 2026-09-03
+
+- Raised the development and peer baseline to DSH `0.1.2-alpha.5`, Cordis `4.0.2`, and Schemastery `3.18.2`, with one coherent prerelease dependency graph.
+- Migrated tool-call IDs, Settings registration, Session event reads, Connection result types, browser Context owners, and client injection metadata to alpha.5 public APIs; removed the retired client-runtime and Host apiproxy packages.
+- Preserved fail-closed account controls after alpha.5 removed per-method RPC authority: only an explicit `127.0.0.1` Web bind uses the real dispatcher; absent, all-interface, and unknown binds receive an inert value-free denial, while non-loopback clients hide the settings section.
+- Updated the audited community core snapshot to `2.2.0`, normalizing the live `gemini-3.8-flash-tiered` directory alias so Gemini 3.8 Flash survives live intersection with its native Medium default and captured Low/Medium/High wire routes and request metadata.
+- Realigned private requests with the audited AGY 1.1.24 wire identity and envelope: the fixed CLI User-Agent replaces obsolete desktop/X-Goog metadata headers while preserving the mandatory DSH secondary attribution, and Gemini 3.8 sends captured numeric thinking budgets plus the `userAgent` field.
+- Drained successful SSE bodies after provider terminal events and replaced Node's race-prone `Readable.toWeb()` bridge with its async-iterable Web Stream bridge, preventing legitimate response cancellation from crashing the Host with `ERR_INVALID_STATE`.
+- Refreshed the release README with current Gemini 3.8 behavior, exact prerelease/tag/tarball installs, the real Host row ID, and no obsolete rc.2 migration warnings.
 
 ## [0.1.3] - 2026-08-31
 

package/README.md

@@ -1,17 +1,19 @@
 # dsh-antigravity-auth
 
-[![npm version](https://img.shields.io/npm/v/dsh-antigravity-auth.svg)](https://www.npmjs.com/package/dsh-antigravity-auth)
+> **DSH compatibility:** Supports separately verified `0.1.2-alpha.5` and `0.1.3-alpha.1` graphs. The new DSH prerelease is source-only while its npm packages are unavailable; development dependencies retain alpha.5. See [source verification](docs/dsh-source-verification.md).
+
+[![npm alpha version](https://img.shields.io/npm/v/dsh-antigravity-auth/alpha.svg?label=npm%20alpha)](https://www.npmjs.com/package/dsh-antigravity-auth)
 [![awesome · DSH plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 
 English | [中文](README.zh.md)
 
-Current release: **v0.1.2**
+Current alpha release: **v0.1.4-alpha.6**, supporting DSH `0.1.2-alpha.5` and `0.1.3-alpha.1`, with, Cordis `4.0.2`, and Schemastery `3.18.2`.
 
 A self-contained [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)
 **Antigravity Capability Bundle**. It integrates Antigravity's private OAuth session
 and Wire Identity for:
 
-- the `google-antigravity` LLM route (Gemini Flash, Gemini Pro, Claude Opus, Claude Sonnet, GPT-OSS);
+- the `google-antigravity` LLM route (Gemini 3.8/3.7/3.6 Flash, Gemini 3.1 Pro, Claude Opus, Claude Sonnet, GPT-OSS);
 - a Global Antigravity Search Provider behind DSH's stock `web_search` tool;
 - durable image generation and editing through `generate_image`, plus the model-facing `list_images` catalog;
 - multimodal workspace MP4 video understanding through `analyze_video`;
@@ -23,6 +25,14 @@ and Wire Identity for:
 > may be rate-limited or changed without notice. Do not rely on it for
 > production workloads.
 
+## v0.1.4-alpha.5 highlights
+
+- Moves the development graph and peer baseline to DSH `0.1.2-alpha.5`, including current Settings, Session, Connection, client-injection, and `ToolCallId` APIs; this repository's lockfile contains no older DSH family.
+- Adds authenticated Gemini 3.8 Flash discovery with a Medium default and captured Low/Medium/High routes, model enums, and numeric thinking budgets.
+- Realigns every private Cloud Code `v1internal:` operation with the audited AGY CLI 1.1.24 wire identity while retaining mandatory truthful DSH secondary attribution.
+- Drains successful provider terminal SSE framing and bodies, then uses the cancellation-safe async-iterable Web Stream bridge to prevent Node `ERR_INVALID_STATE` crashes.
+- Keeps account RPC fail-closed on alpha.5: only an explicit `127.0.0.1` Web bind reaches authentication services.
+
 ## Features
 
 ### Shared Antigravity Login State
@@ -33,14 +43,14 @@ and Wire Identity for:
 - Resolves credentials through versioned owner-only storage (POSIX `0600`; Windows user-data ACLs), short-lived in-memory cache, and proactive refresh before expiry.
 - Coalesces concurrent refreshes in-process and enforces account/lineage consistency before persisting refreshed tokens.
 - Shows connection state plus real-time visual progress bars for 5-hour and weekly quotas across Gemini and Claude/GPT model families.
-- Sends no token value over the loopback-only `/antigravity-auth` Connection RPC channel.
+- Sends no token value over `/antigravity-auth`. On DSH alpha.5, the real account dispatcher is mounted only for an explicit `127.0.0.1` Web bind; an absent, all-interface, or unknown bind receives an inert value-free denial handler.
 
 ### LLM Routing & Models
 
 - Registers the `google-antigravity` provider through DSH's public `LlmAdapter` seam.
-- Intersects the pinned community model catalog with live account discovery.
-- Keeps DSH's stock model selector usable when live discovery is temporarily unavailable or drifts by falling back to the pinned text snapshot; Settings still reports the live-catalog state. A successful empty intersection stays empty, while missing authentication, authorization denial, cancellation, and explicit attribution rejection remain fail-closed.
-- Supports streaming with pre-delta authentication replay and preserve-by-id function call correlation across fragmented provider names.
+- Intersects the audited `@cortexkit/antigravity-auth-core@2.2.0` model snapshot with live account discovery, normalizing the provider's `gemini-3.8-flash-tiered` directory alias. Gemini 3.8 Flash uses the captured AGY 1.1.24 Low/Medium/High wire routes, numeric thinking budgets, model enums, `userAgent` envelope field, and Medium default.
+- Keeps DSH's stock model selector usable when live discovery is temporarily unavailable or drifts by falling back to the pinned text snapshot; Settings still reports the live-catalog state. This advisory fallback can temporarily retain a legacy route such as Gemini 3.5 Flash, while a successful live intersection filters routes absent for the account. A successful empty intersection stays empty, while missing authentication, authorization denial, cancellation, and explicit attribution rejection remain fail-closed.
+- Supports streaming with pre-delta authentication replay and preserve-by-id function call correlation across fragmented provider names. Successful terminal events drain the remaining SSE framing before DSH completion, while required cancellation paths use Node's async-iterable Web Stream bridge instead of the race-prone `Readable.toWeb()` adapter.
 
 ### Web Search
 
@@ -69,46 +79,55 @@ Multimodal `analyze_video` tool accepts workspace MP4 videos, performing bounded
 
 ## Requirements
 
-- DeepSeek Harness `0.1.1-rc.2` or a compatible later `0.1.x` release.
+- DeepSeek Harness `0.1.2-alpha.5` or `0.1.3-alpha.1` (separately verified graphs; direct peers accept both prerelease lines).
 - Node.js `^22.19.0` or `>=24.0.0`.
+- `pnpm` available on `PATH` (`11.7.0` is the tested project package manager).
 - A Google account with Antigravity access.
 
-## Install from npm (recommended)
+## Install from npm
+
+The npm package includes prebuilt Host and browser bundles. Install the release for either verified DSH graph explicitly:
+
+```sh
+dsh plugin --profile web add dsh-antigravity-auth@0.1.4-alpha.6
+```
+
+With the Web Host bound explicitly to `127.0.0.1`, restart `dsh web`, open Settings, and select **Antigravity Auth**.
 
-The npm package includes prebuilt Host and browser bundles:
+## Install a prebuilt GitHub release
+
+These GitHub examples pin the earlier 0.1.4-alpha.5 release; use the npm command above for 0.1.4-alpha.6.
 
 ```sh
-dsh plugin --profile web add dsh-antigravity-auth
+dsh plugin --profile web add https://github.com/suntianc/dsh-antigravity-auth/releases/download/v0.1.4-alpha.5/dsh-antigravity-auth-0.1.4-alpha.5.tgz
 ```
 
-Restart `dsh web`, open Settings, and select **Antigravity Auth**.
+## Install from the tagged GitHub source
 
-## Install from GitHub source
+These GitHub examples pin the earlier 0.1.4-alpha.5 release; use the npm command above for 0.1.4-alpha.6.
 
 ```sh
-dsh plugin --profile web add github:suntianc/dsh-antigravity-auth
+dsh plugin --profile web add github:suntianc/dsh-antigravity-auth#v0.1.4-alpha.5
 ```
 
 Git dependencies are built by the package's `prepare` script. If prompted by pnpm,
-add the printed `allowBuilds` key to `~/.dsh/profiles/web/pnpm-workspace.yaml`,
-then run the command again.
+add the printed `allowBuilds` key to the `pnpm-workspace.yaml` path printed by
+dsh, then run the command again. Only grant this permission after reviewing the source.
 
 ## Install a tarball
 
 ```sh
-git clone https://github.com/suntianc/dsh-antigravity-auth.git
-cd dsh-antigravity-auth
-pnpm install
-pnpm pack
-dsh plugin --profile web add ./dsh-antigravity-auth-0.1.2.tgz
+npm pack dsh-antigravity-auth@0.1.4-alpha.6
+dsh plugin --profile web add ./dsh-antigravity-auth-0.1.4-alpha.6.tgz
 ```
 
 ## Upgrade
 
-Stop the running `dsh web` process and update the Web profile:
+Stop the running `dsh web` process and verify that the Host itself is already on DSH `0.1.2-alpha.5` or `0.1.3-alpha.1`; upgrade DSH first if it is not. Then install the matching plugin release and verify the profile entry:
 
 ```sh
-dsh plugin --profile web add dsh-antigravity-auth@0.1.2
+dsh --version # must report 0.1.2-alpha.5 or 0.1.3-alpha.1
+dsh plugin --profile web add dsh-antigravity-auth@0.1.4-alpha.6
 dsh plugin --profile web list
 ```
 
@@ -120,15 +139,14 @@ The bundle patch activates independent Host rows in dependency order:
 
 | Row | Export | Purpose |
 |---|---|---|
-| `llm-antigravity-auth` | `dsh-antigravity-auth` | Shared auth coordinator and LLM route |
+| `antigravity-auth` | `dsh-antigravity-auth` | Shared auth coordinator and LLM route |
 | `antigravity-search` | `dsh-antigravity-auth/search` | Global Search Provider |
 | `antigravity-image` | `dsh-antigravity-auth/image` | Image generation & editing tools |
 | `antigravity-video` | `dsh-antigravity-auth/video` | Video understanding tools |
 
 ## Wire Identity
 
-The Wire Identity module keeps the audited Antigravity headers and adds the truthful DSH identity
-returned by DSH's public `attributionHeaders()` formatter as the secondary carrier:
+The Wire Identity module keeps the audited AGY CLI 1.1.24 content-request User-Agent and adds the truthful DSH identity returned by DSH's public `attributionHeaders()` formatter as the mandatory secondary carrier:
 
 ```text
 X-DeepSeek-Harness-Attribution: deepseek-harness/<version> (+repository-url)
@@ -142,7 +160,7 @@ Requests are code-owned: only fixed HTTPS Antigravity origins and enumerated `v1
 - POSIX owner-only modes are enforced for auth, gate-evidence, and controlled live-image files. Windows access is governed by ACLs, so synthetic POSIX group/other bits are not treated as an access decision; symlink, file-type, size, schema, and content checks remain enforced.
 - Single-account only: no account arrays, switching, rotation, quota pools, or identity fallback.
 - Local logout clears local storage and in-memory caches immediately.
-- The status/login RPC channel is restricted to loopback authorities.
+- DSH alpha.5 no longer exposes a per-method or Host-side carrier authority tier. The plugin therefore enables the real account RPC handler only when the public WebServer bind is exactly `127.0.0.1`; absent, all-interface, and unknown binds receive only `loopback-required`. The browser also hides the section when `ConnectionHandle.isLoopback` is false, but that client hint is UX only: an owner-contained custom carrier cannot be authorized until DSH exposes a corresponding Host-side fact.
 - Raw media base64 never enters session text or browser RPC.
 
 ## Development

package/README.zh.md

@@ -1,16 +1,18 @@
 # dsh-antigravity-auth
 
-[![npm version](https://img.shields.io/npm/v/dsh-antigravity-auth.svg)](https://www.npmjs.com/package/dsh-antigravity-auth)
+> **DSH 兼容性：** 已分别验证 `0.1.2-alpha.5` 与 `0.1.3-alpha.1` 两套依赖图。目标 DSH npm 包尚未发布，开发锁文件暂保留 alpha.5；新版本使用固定源码制品验证。见[源码验证说明](docs/dsh-source-verification.md)。
+
+[![npm alpha version](https://img.shields.io/npm/v/dsh-antigravity-auth/alpha.svg?label=npm%20alpha)](https://www.npmjs.com/package/dsh-antigravity-auth)
 [![awesome · DSH plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 
 [English](README.md) | 中文
 
-当前版本：**v0.1.2**
+当前 alpha 版本：**v0.1.4-alpha.6**，支持 DSH `0.1.2-alpha.5` 与 `0.1.3-alpha.1`，使用 Cordis `4.0.2` 与 Schemastery `3.18.2`。
 
 这是一个自包含的 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)
 **Antigravity 能力包**。它集成了 Antigravity 的私有 OAuth 登录态与 Wire Identity 线路身份，提供：
 
-- `google-antigravity` LLM 路由（Gemini Flash、Gemini Pro、Claude Opus、Claude Sonnet、GPT-OSS）；
+- `google-antigravity` LLM 路由（Gemini 3.8/3.7/3.6 Flash、Gemini 3.1 Pro、Claude Opus、Claude Sonnet、GPT-OSS）；
 - 接入 DSH 内置 `web_search` 工具的全局 Antigravity 搜索提供方；
 - 通过 `generate_image` 实现持久图片生成与编辑，并提供供模型使用的 `list_images` 目录；
 - 支持本地工作区 MP4 文件的多模态 `analyze_video` 视频理解；
@@ -20,6 +22,14 @@
 > **⚠️ 非官方通道——仅限个人开发。** 私有、受账户权限控制的 Antigravity
 > 后端服务未获官方支持、可随时撤销，也可能在没有通知的情况下被限流或变更。请勿依赖它承载生产任务。
 
+## v0.1.4-alpha.5 重点更新
+
+- 将开发依赖图与 peer 基线迁移到 DSH `0.1.2-alpha.5`，采用当前 Settings、Session、Connection、client injection 与 `ToolCallId` API；本仓库 lockfile 不含旧 DSH 包族。
+- 新增经过登录态目录确认的 Gemini 3.8 Flash，默认 Medium，并使用抓取的 Low/Medium/High route、model enum 与 numeric thinking budget。
+- 所有私有 Cloud Code `v1internal:` 操作重新对齐已审计的 AGY CLI 1.1.24 wire identity，同时保留强制、真实的 DSH 二级归因。
+- 排空成功的 provider terminal SSE framing 与 body，并改用 cancellation-safe async-iterable Web Stream bridge，避免 Node `ERR_INVALID_STATE` 崩溃。
+- 在 alpha.5 上保持账号 RPC fail-closed：只有明确绑定 `127.0.0.1` 的 Web Host 才能触达认证服务。
+
 ## 功能特性
 
 ### 共享 Antigravity 登录态
@@ -30,14 +40,14 @@
 - 通过属主权限文件存储（POSIX `0600`；Windows 用户数据目录 ACL）、短时内存缓存解析凭证，并在到期前主动刷新。
 - 进程内合并并发刷新请求；仅在账号与 lineage 未变化时原子提交新 token。
 - 仪表盘实时显示连接状态以及 Gemini 与 Claude/GPT 模型家族的 5 小时和每周额度进度条。
-- 插件自有、仅允许 loopback 的 `/antigravity-auth` Connection RPC 绝不向前端泄露任何 token 敏感值。
+- `/antigravity-auth` 绝不向前端泄露 token。DSH alpha.5 下，真实账号 dispatcher 只在明确的 `127.0.0.1` Web bind 上启用；缺失、all-interface 或未知 bind 只能得到不含状态的安全拒绝。
 
 ### LLM 路由与模型发现
 
 - 通过 DSH 公开的 `LlmAdapter` 接口注册 `google-antigravity` 提供方。
-- 将已审计的固定社区模型快照与真实登录账号的可用模型取交集。
-- 当真实模型发现暂时不可用或发生协议漂移时，DSH 内置模型选择器会回退到固定文本模型快照，设置页仍诚实显示 live catalog 状态；成功但零交集的结果仍保持为空，未登录、授权拒绝、取消与明确的 attribution 拒绝仍保持 fail-closed。
-- 流式传输支持首个数据块前的一次认证重放，并支持跨分片提供方函数名的 call-id 稳定关联。
+- 将已审计的 `@cortexkit/antigravity-auth-core@2.2.0` 固定社区模型快照与真实登录账号的可用模型取交集，并规范化服务端返回的 `gemini-3.8-flash-tiered` 目录别名；Gemini 3.8 Flash 使用 AGY 1.1.24 抓取的 Low/Medium/High wire route、numeric thinking budget、model enum、`userAgent` envelope 字段与 Medium 默认档位。
+- 当真实模型发现暂时不可用或发生协议漂移时，DSH 内置模型选择器会回退到固定文本模型快照，设置页仍诚实显示 live catalog 状态；该 advisory 降级可能暂时保留 Gemini 3.5 Flash 等旧路由，而成功的 live intersection 会过滤账号目录中不存在的路由。成功但零交集的结果仍保持为空，未登录、授权拒绝、取消与明确的 attribution 拒绝仍保持 fail-closed。
+- 流式传输支持首个数据块前的一次认证重放，并支持跨分片提供方函数名的 call-id 稳定关联；成功的 terminal event 会先排空剩余 SSE framing 再向 DSH 完成流，必要的取消路径则使用 Node 的 async-iterable Web Stream bridge，避开存在竞态的 `Readable.toWeb()` 适配器。
 
 ### 网页搜索
 
@@ -63,44 +73,53 @@
 
 ## 环境要求
 
-- DeepSeek Harness `0.1.1-rc.2` 或兼容的后续 `0.1.x` 版本。
+- DeepSeek Harness `0.1.2-alpha.5` 或 `0.1.3-alpha.1`（两套依赖图分别验证；直接 peer 接受这两条 prerelease 版本线）。
 - Node.js `^22.19.0` 或 `>=24.0.0`。
+- `PATH` 中可用 `pnpm`（本项目测试版本为 `11.7.0`）。
 - 具有 Antigravity 权限的 Google 账号。
 
-## 从 npm 安装（推荐）
+## 从 npm 安装
+
+npm 包包含预构建的 Host 与浏览器 bundle。请显式安装支持上述两套 DSH 依赖图的版本：
+
+```sh
+dsh plugin --profile web add dsh-antigravity-auth@0.1.4-alpha.6
+```
+
+确认 Web Host 明确绑定 `127.0.0.1` 后，重启 `dsh web`，打开设置并选择 **Antigravity Auth**。
 
-npm 包包含预构建的 Host 与浏览器 bundle，无需安装期构建权限：
+## 安装 GitHub 预构建 Release
+
+以下 GitHub 示例固定到先前的 0.1.4-alpha.5；本次 0.1.4-alpha.6 请使用上面的 npm 安装命令。
 
 ```sh
-dsh plugin --profile web add dsh-antigravity-auth
+dsh plugin --profile web add https://github.com/suntianc/dsh-antigravity-auth/releases/download/v0.1.4-alpha.5/dsh-antigravity-auth-0.1.4-alpha.5.tgz
 ```
 
-重启 `dsh web`，打开设置并选择 **Antigravity Auth**。
+## 从 GitHub tag 源码安装
 
-## 从 GitHub 源码安装
+以下 GitHub 示例固定到先前的 0.1.4-alpha.5；本次 0.1.4-alpha.6 请使用上面的 npm 安装命令。
 
 ```sh
-dsh plugin --profile web add github:suntianc/dsh-antigravity-auth
+dsh plugin --profile web add github:suntianc/dsh-antigravity-auth#v0.1.4-alpha.5
 ```
 
-Git 依赖会通过包内 `prepare` 脚本从源码构建。如遇 pnpm 提示，将输出的 `allowBuilds` 键添加到 `~/.dsh/profiles/web/pnpm-workspace.yaml`，再重新执行安装。
+Git 依赖会通过包内 `prepare` 脚本从源码构建。如遇 pnpm 提示，将输出的 `allowBuilds` 键添加到 dsh 输出的 `pnpm-workspace.yaml` 路径，再重新执行安装。只应在审查并信任源码后授权。
 
 ## 从 tarball 安装
 
 ```sh
-git clone https://github.com/suntianc/dsh-antigravity-auth.git
-cd dsh-antigravity-auth
-pnpm install
-pnpm pack
-dsh plugin --profile web add ./dsh-antigravity-auth-0.1.2.tgz
+npm pack dsh-antigravity-auth@0.1.4-alpha.6
+dsh plugin --profile web add ./dsh-antigravity-auth-0.1.4-alpha.6.tgz
 ```
 
 ## 升级
 
-先停止正在运行的 `dsh web`，再将 Web Profile 更新到当前版本：
+先停止正在运行的 `dsh web`，确认 Host 本身已经是 DSH `0.1.2-alpha.5` 或 `0.1.3-alpha.1`；若不是，必须先升级 DSH。随后安装匹配的插件版本并核对 profile 条目：
 
 ```sh
-dsh plugin --profile web add dsh-antigravity-auth@0.1.2
+dsh --version # 必须显示 0.1.2-alpha.5 或 0.1.3-alpha.1
+dsh plugin --profile web add dsh-antigravity-auth@0.1.4-alpha.6
 dsh plugin --profile web list
 ```
 
@@ -112,14 +131,14 @@ dsh plugin --profile web list
 
 | 行 | Export | 作用 |
 |---|---|---|
-| `llm-antigravity-auth` | `dsh-antigravity-auth` | 共享认证协调器与 LLM 路由 |
+| `antigravity-auth` | `dsh-antigravity-auth` | 共享认证协调器与 LLM 路由 |
 | `antigravity-search` | `dsh-antigravity-auth/search` | 全局搜索提供方 |
 | `antigravity-image` | `dsh-antigravity-auth/image` | 图片生成与编辑工具 |
 | `antigravity-video` | `dsh-antigravity-auth/video` | 视频理解工具 |
 
 ## Wire Identity（线路身份）
 
-Wire Identity 模块保留 Antigravity 专有 header，并调用 DSH 公开的 `attributionHeaders()` formatter，把真实 DSH 身份放入二级 carrier：
+Wire Identity 模块保留已审计的 AGY CLI 1.1.24 content-request User-Agent，并调用 DSH 公开的 `attributionHeaders()` formatter，把真实 DSH 身份放入强制二级 carrier：
 
 ```text
 X-DeepSeek-Harness-Attribution: deepseek-harness/<version> (+repository-url)
@@ -133,7 +152,7 @@ X-DeepSeek-Harness-Attribution: deepseek-harness/<version> (+repository-url)
 - auth、gate evidence 与受控 live image 文件在 POSIX 上严格校验属主 mode；Windows 由 ACL 管理访问权限，因此不把合成的 POSIX group/other bits 作为访问判据，但仍执行 symlink、文件类型、大小、schema 与内容校验。
 - 严格单账号模式：不提供账号池、轮换、身份回退或账号切换。
 - 本地登出立即清除 Host 内存与本地存储。
-- RPC 状态与登录通道仅限本机 loopback 访问。
+- DSH alpha.5 不再提供逐 method 或 Host 侧 carrier authority。插件只在公开 WebServer bind 恰为 `127.0.0.1` 时启用真实 account RPC；缺失、all-interface 与未知 bind 只返回 `loopback-required`。浏览器在 `ConnectionHandle.isLoopback` 为 false 时也不会注册该设置分区，但该客户端提示仅用于 UX：在 DSH 提供对应 Host 侧事实前，owner-contained 自定义 carrier 仍不能获得授权。
 - 原始多媒体 base64 绝不注入会话正文或前端 RPC。
 
 ## 本地开发

package/docs/dsh-source-verification.md

@@ -0,0 +1,67 @@
+# DSH source compatibility verification
+
+This plugin supports two separately checked DSH graphs: npm `0.1.2-alpha.5` and
+the official `0.1.3-alpha.1` source tag at
+`d347e703908d0406b7a7ef80e3a0e594d86b2215`.
+The latter was not available on npm when this upgrade was verified. Therefore the
+ordinary development dependencies and lockfile retain the installable alpha.5
+baseline. Peer ranges explicitly include the new prerelease; they do not imply
+support for arbitrary prereleases. Do not mix the two graphs.
+
+## Build the official artifacts once
+
+Use a separate scratch directory, outside any plugin or live DSH installation:
+
+```sh
+git clone --depth 1 --branch dsh-v0.1.3-alpha.1 https://github.com/deepseek-ai/deepseek-harness.git harness
+cd harness
+git rev-parse HEAD
+# Must be d347e703908d0406b7a7ef80e3a0e594d86b2215.
+pnpm install --frozen-lockfile --ignore-scripts
+pnpm run build:lib
+pnpm --filter './packages/**' --filter './vendor/*' -r pack --pack-destination ../dsh-packages
+```
+
+The Host and Client library build is required. Packing does not publish anything.
+The resulting directory can be reused to check each of the four plugins.
+
+## Check this plugin
+
+From this plugin's own repository:
+
+```sh
+pnpm install --frozen-lockfile
+pnpm run check
+pnpm run check:dsh-source -- /absolute/path/to/dsh-packages
+```
+
+The source check copies the current plugin into a new temporary directory,
+reads the supplied tarball manifests, rejects mixed DSH versions, explicitly
+supplies the complete DSH dependency/peer closure, and pins pi-ai to the plugin's
+development version when present. It installs that isolated graph and runs
+`pnpm peers check` followed by the unmodified `pnpm run check` command.
+
+The runner leaves the verification directory and `artifacts.json` with SHA-512
+checksums for review. The fixed-tag build recipe establishes provenance; the
+runner identifies the supplied bytes and checks their versions, and does not
+claim to authenticate arbitrary user-supplied tarballs. Its local file overrides
+and generated lockfile stay in the temporary directory. They never enter this
+repository, an installed package, or a user profile.
+
+Package smoke checks accept both registry and source-artifact lock identities
+while continuing to verify the selected version. The default check remains on
+alpha.5; the source runner selects alpha.1 using `DSH_VERIFY_VERSION`.
+
+## 中文说明
+
+本次增加对 DSH `0.1.3-alpha.1` 固定源码版本的支持，同时保留
+`0.1.2-alpha.5` 的可安装开发依赖与锁文件。原因是目标 DSH npm 包尚未发布。
+两套图分别完成验证，不能混用；这不是跳过 peer 检查。
+
+按上面的固定 tag 构建、打包一次，然后在本插件目录运行
+`pnpm run check:dsh-source -- /绝对路径/dsh-packages`。脚本在临时目录内安装
+完整源码包图并运行全部检查，输出位置和制品哈希供复核。正式 package.json
+和锁文件不会写入本机临时路径，也不会安装到现用 profile。
+
+升级验证覆盖离线类型检查、测试、构建、打包 smoke 和 publint；
+真实 OAuth、私有服务请求和用户现用 profile 不属于这些离线检查的证明范围。

package/lib/client.cjs

@@ -78,6 +78,7 @@ window.__ModuleLoader__.load({
 		//#region src/rpc-vocabulary.ts
 		/** Closed, browser-safe RPC error vocabulary shared by Host and client. */
 		const OPERATION_ERROR_CODES = [
+			"loopback-required",
 			"invalid-grant",
 			"network",
 			"timeout",
@@ -95,6 +96,7 @@ window.__ModuleLoader__.load({
 		];
 		const SAFE_RPC_ERROR_MESSAGES = Object.freeze({
 			"bad-request": "antigravity-auth: invalid request",
+			"loopback-required": "Antigravity account controls require a loopback-bound DSH Host",
 			cancelled: "The operation was cancelled",
 			"risk-acknowledgement-required": "Risk acknowledgement is required before login",
 			"port-conflict": "The fixed OAuth callback port is already in use",
@@ -151,7 +153,7 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/rpc-contract.ts
 		const ANTIGRAVITY_AUTH_RPC_CHANNEL = "/antigravity-auth";
-		/** Build the browser face over the plugin-owned loopback channel. */
+		/** Build the browser face over the plugin-owned guarded account channel. */
 		function createAntigravityAuthRpcClient(rpc) {
 			return {
 				status: (signal) => callValidated(rpc, "status", {}, signal, (value) => {
@@ -2038,7 +2040,9 @@ window.__ModuleLoader__.load({
 				zh,
 				en
 			}), "antigravity-auth: copy dictionaries");
-			const rpc = createAntigravityAuthRpcClient(ctx.get("connection").rpc);
+			const connection = ctx.get("connection");
+			if (!connection.isLoopback) return;
+			const rpc = createAntigravityAuthRpcClient(connection.rpc);
 			const t = ctx.locale.bind(NS);
 			const settingsScope = ctx.settingsScope;
 			const searchScope = settingsScope?.bind({