dsh-auto-review 0.10.6 → 0.11.0

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to `dsh-auto-review` are documented here. The repo is pre-release; versions follow the DeepSeek Harness `0.1.0-rc.x` target runtime and bump on every behavior change.
 
+## [0.11.0] - 2026-09-08
+
+### Changed
+
+- Migrate the dev pins from `@deepseek-ai/dsh@0.1.2-rc.1` to `@deepseek-ai/dsh@0.1.3-alpha.2` (all 15 `@deepseek-ai/dsh-*` devDependencies; `@deepseek-ai/dsh-agent-spine-demo` stays on `0.1.1-rc.2`). Dual-line runtime compatibility is preserved: the runtime `dependencies` and the `>=0.1.2-rc.1 <0.2.0` peer range stay on the published rc line, the trace fold reads stream timing from `assistant/chunk` (0.1.2) or the message's timed `stream` (0.1.3, including the new `assistant/attempt` settlement records), and the session-artifact renderer feature-detects the removed `packChunkRuns` export.
+- Test fixtures now stamp headers with the host line's `SESSION_FORMAT_VERSION` (0 on 0.1.2, 2 on 0.1.3) instead of the literal `0`, and the fake-session header carries `isSeeded`; the reviewer/isolation suites pass on both published lines (278/278 each).
+- `src/audit.ts`: `0.1.3-alpha.2` joins the known-unmarked host lines (its `Session.append` still assembles the envelope without the `ignorable` marker, and `autoReview/*` is still absent from `KNOWN_SESSION_EVENT_TYPES` — verified against the published tarball), so session-log audit stays fail-closed on the alpha line; unit tests cover both lines.
+- `scripts/check-host-versions.mjs`: the `0.1.3-alpha.2` stay-behind exemption is removed — the migrated dev pins now cover the newest alpha line natively.
+- `dshWorkshop.compatibility.dshVersions` and the five-language READMEs now state both supported host lines (`0.1.2-rc.1` and `0.1.3-alpha.2`).
+
 ## [0.10.6] - 2026-09-07
 
 ### Fixed

package/README.es.md

@@ -26,7 +26,7 @@
 
 | Superficie | Estado |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.3-alpha.1` (tag de GitHub, verificado el 2026-09-06; dependencias npm fijadas a `0.1.2-rc.1`, peers `>=0.1.2-rc.1 <0.2.0`) 0.1.2-rc.1 (adaptado el 2026-09-02): el sobre de sesión conserva su campo ignorable solo para compatibilidad de lectura de logs almacenados - Session.append aún no puede estamparlo, por lo que el comportamiento de la puerta no cambia. Verificado el 2026-09-06 contra el checkout master `dsh-v0.1.3-alpha.1` (cadena completa de gates + prueba de humo de instalación en el perfil). |
+| Harness | DeepSeek Harness `dsh-v0.1.3-alpha.1` (tag de GitHub, verificado el 2026-09-06). Soporte npm de doble línea (migrado el 2026-09-08): pins de desarrollo `0.1.3-alpha.2`, dependencias de runtime `0.1.2-rc.1`, peers `>=0.1.2-rc.1 <0.2.0` — el runtime maneja ambas líneas de host publicadas (detección de características), y cada línea ejecuta la cadena completa de gates. |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Plataformas | Todas (answerer de host; panel web opcional mediante la capacidad de proyección de sesión) |
 | Modelo | Cualquiera (el revisor hereda la ruta del agente de sesión; `reviewerModel` la reemplaza) |
@@ -317,7 +317,7 @@ El servidor es de solo lectura y determinista: sin red, sin modelo, sin escritur
 
 - **Permisos**: el manifiesto del workshop declara `session:append`, `approval:answer`, `subagent:spawn`, `command:register` y `tools:observe`.
 - **Datos**: nada se guarda en disco; el búfer circular de informes está en memoria y acotado. Sin peticiones de red propias.
-- **Registro de sesión**: los eventos `autoReview/*` llevan identidad del revisor, veredicto, razón, riesgo y duración — añadidos con el marcador de sobre `ignorable: true` para que cualquier compilación cargue el registro. Los hosts cuyo `Session.append` es anterior al marcador (todas las líneas rc publicadas hasta `0.1.1-rc.2` — ninguna versión lo estampa aún) se detectan antes del primer append (precomprobación de la versión del peer y luego sondeo del sobre devuelto); el host `0.1.2-rc.1` mantiene el campo `ignorable` en el sobre, pero `Session.append` no ofrece ninguna forma de estamparlo (su tercer parámetro es `SurfaceIntent`, solo para eventos de superficie), y la ruta de lectura de persistencia rechaza los tipos de evento desconocidos sin marcar, por lo que esas líneas — y las versiones irresolubles — también cierran en fallo antes de cualquier append. La auditoría se degrada a un espejo en memoria con comentarios sin marcador, de modo que las sesiones siguen siendo cargables en todas partes.
+- **Registro de sesión**: los eventos `autoReview/*` llevan identidad del revisor, veredicto, razón, riesgo y duración — añadidos con el marcador de sobre `ignorable: true` para que cualquier compilación cargue el registro. Los hosts cuyo `Session.append` es anterior al marcador (todas las líneas rc publicadas hasta `0.1.1-rc.2` — ninguna versión lo estampa aún) se detectan antes del primer append (precomprobación de la versión del peer y luego sondeo del sobre devuelto); los hosts `0.1.2-rc.1` y `0.1.3-alpha.2` mantienen el campo `ignorable` en el sobre, pero `Session.append` no ofrece ninguna forma de estamparlo (su tercer parámetro es `SurfaceIntent`, solo para eventos de superficie), y la ruta de lectura de persistencia rechaza los tipos de evento desconocidos sin marcar, por lo que esas líneas — y las versiones irresolubles — también cierran en fallo antes de cualquier append. La auditoría se degrada a un espejo en memoria con comentarios sin marcador, de modo que las sesiones siguen siendo cargables en todas partes.
 
 ## Límites de seguridad
 

package/README.hi.md

@@ -26,7 +26,7 @@
 
 | सतह | स्थिति |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.3-alpha.1` (GitHub tag, 2026-09-06 को सत्यापित; npm dependencies `0.1.2-rc.1` पर पिन की गईं, peers `>=0.1.2-rc.1 <0.2.0`) 0.1.2-rc.1 (2026-09-02 को अनुकूलित): सत्र लिफ़ाफ़ा अपना ignorable फ़ील्ड केवल संग्रहीत-लॉग पठन संगतता के लिए रखता है - Session.append अभी भी इसे स्टैम्प नहीं कर सकता, इसलिए गेट व्यवहार अपरिवर्तित है। 2026-09-06 को `dsh-v0.1.3-alpha.1` master checkout के विरुद्ध सत्यापित (पूर्ण गेट श्रृंखला + profile इंस्टॉल स्मोक)। |
+| Harness | DeepSeek Harness `dsh-v0.1.3-alpha.1` (GitHub tag, 2026-09-06 को सत्यापित)। दोहरी-लाइन npm समर्थन (2026-09-08 को माइग्रेट): dev पिन `0.1.3-alpha.2`, रनटाइम निर्भरताएँ `0.1.2-rc.1`, peers `>=0.1.2-rc.1 <0.2.0` — रनटाइम दोनों प्रकाशित होस्ट लाइनों को संभालता है (फ़ीचर-डिटेक्टेड), और हर लाइन पूरी गेट श्रृंखला चलाती है। |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | प्लेटफ़ॉर्म | सभी (होस्ट answerer; सत्र-प्रोजेक्शन क्षमता के ज़रिए वैकल्पिक वेब समीक्षा पैनल) |
 | मॉडल | कोई भी (समीक्षक सत्र एजेंट का मार्ग विरासत में लेता है; `reviewerModel` उसे बदल देता है) |
@@ -317,7 +317,7 @@ Claude Desktop (`claude_desktop_config.json`) उदाहरण:
 
 - **अनुमतियाँ**: workshop मेनिफ़ेस्ट `session:append`, `approval:answer`, `subagent:spawn`, `command:register` और `tools:observe` घोषित करता है।
 - **डेटा**: डिस्क पर कुछ नहीं लिखा जाता; रिपोर्ट रिंग बफ़र मेमोरी में और सीमित है। अपनी ओर से कोई नेटवर्क अनुरोध नहीं।
-- **सत्र लॉग**: `autoReview/*` घटनाएँ समीक्षक पहचान, निर्णय, कारण, जोखिम और अवधि रखती हैं — लिफ़ाफ़े के `ignorable: true` मार्कर के साथ जोड़ी जाती हैं ताकि कोई भी बिल्ड लॉग लोड कर सके। जिन होस्ट का `Session.append` मार्कर से पुराना है (`0.1.1-rc.2` तक की हर रिलीज़ rc लाइन — कोई रिलीज़ अभी मार्कर नहीं छापती) उन्हें पहले append से पहले ही पहचान लिया जाता है (peer संस्करण पूर्व-जाँच, फिर लौटे लिफ़ाफ़े की जाँच); होस्ट `0.1.2-rc.1` लिफ़ाफ़े पर `ignorable` फ़ील्ड रखता है, लेकिन `Session.append` उसे स्टैम्प करने का कोई तरीका नहीं देता (इसका तीसरा पैरामीटर केवल सतही घटनाओं के लिए `SurfaceIntent` है), और पर्सिस्टेंस रीड पथ बिना-मार्क वाले अज्ञात घटना प्रकारों को अस्वीकार करता है, इसलिए वे लाइनें — और असमाधेय संस्करण — भी किसी भी append से पहले fail closed हो जाते हैं। ऑडिट बिना मार्कर वाले फीडबैक के साथ इन-मेमोरी मिरर में डिग्रेड हो जाता है — सत्र हर जगह लोड होने योग्य रहते हैं।
+- **सत्र लॉग**: `autoReview/*` घटनाएँ समीक्षक पहचान, निर्णय, कारण, जोखिम और अवधि रखती हैं — लिफ़ाफ़े के `ignorable: true` मार्कर के साथ जोड़ी जाती हैं ताकि कोई भी बिल्ड लॉग लोड कर सके। जिन होस्ट का `Session.append` मार्कर से पुराना है (`0.1.1-rc.2` तक की हर रिलीज़ rc लाइन — कोई रिलीज़ अभी मार्कर नहीं छापती) उन्हें पहले append से पहले ही पहचान लिया जाता है (peer संस्करण पूर्व-जाँच, फिर लौटे लिफ़ाफ़े की जाँच); होस्ट `0.1.2-rc.1` और `0.1.3-alpha.2` लिफ़ाफ़े पर `ignorable` फ़ील्ड रखते हैं, लेकिन `Session.append` उसे स्टैम्प करने का कोई तरीका नहीं देता (इसका तीसरा पैरामीटर केवल सतही घटनाओं के लिए `SurfaceIntent` है), और पर्सिस्टेंस रीड पथ बिना-मार्क वाले अज्ञात घटना प्रकारों को अस्वीकार करता है, इसलिए वे लाइनें — और असमाधेय संस्करण — भी किसी भी append से पहले fail closed हो जाते हैं। ऑडिट बिना मार्कर वाले फीडबैक के साथ इन-मेमोरी मिरर में डिग्रेड हो जाता है — सत्र हर जगह लोड होने योग्य रहते हैं।
 
 ## सुरक्षा सीमाएँ
 

package/README.md

@@ -27,7 +27,7 @@
 
 | Surface | Status |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.3-alpha.1` (GitHub tag, verified 2026-09-06; npm dependencies pinned `0.1.2-rc.1`, peers `>=0.1.2-rc.1 <0.2.0`). Verified 2026-09-06 against the `dsh-v0.1.3-alpha.1` master checkout (full gate chain + profile install smoke). |
+| Harness | DeepSeek Harness `dsh-v0.1.3-alpha.1` (GitHub tag, verified 2026-09-06). Dual-line npm support (migrated 2026-09-08): dev pins `0.1.3-alpha.2`, runtime deps `0.1.2-rc.1`, peers `>=0.1.2-rc.1 <0.2.0` — the runtime handles both published host lines (feature-detected), and each line runs the full gate chain. |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Platforms | All (host answerer; optional Web review panel via the session-projection capability) |
 | Model | Any (the reviewer inherits the session agent's route; `reviewerModel` overrides) |
@@ -319,7 +319,7 @@ The server is read-only and deterministic: no network, no model, no writes.
 
 - **Permissions**: the workshop manifest declares `session:append`, `approval:answer`, `subagent:spawn`, `command:register`, and `tools:observe`.
 - **Data**: nothing is stored on disk; the report ring buffer is in-memory and bounded. No network requests of its own.
-- **Session log**: `autoReview/*` events carry reviewer identity, verdict, reason, risk, and duration — appended with the envelope's `ignorable: true` marker so any build loads the log. Hosts whose `Session.append` predates the marker (every released rc line through `0.1.1-rc.2` — no release stamps it yet) are detected before the first append (peer-version pre-check); host `0.1.2-rc.1` keeps the `ignorable` field on the envelope but `Session.append` offers no way to stamp it (its third parameter is `SurfaceIntent` for surface events only), and the persistence read path refuses unmarked unknown event types, so those lines — and unresolvable versions — also fail closed before any append. Audit then degrades to an in-memory mirror with marker-free feedback, so sessions stay loadable everywhere.
+- **Session log**: `autoReview/*` events carry reviewer identity, verdict, reason, risk, and duration — appended with the envelope's `ignorable: true` marker so any build loads the log. Hosts whose `Session.append` predates the marker (every released rc line through `0.1.1-rc.2` — no release stamps it yet) are detected before the first append (peer-version pre-check); hosts `0.1.2-rc.1` and `0.1.3-alpha.2` keep the `ignorable` field on the envelope but `Session.append` offers no way to stamp it (its third parameter is `SurfaceIntent` for surface events only), and the persistence read path refuses unmarked unknown event types, so those lines — and unresolvable versions — also fail closed before any append. Audit then degrades to an in-memory mirror with marker-free feedback, so sessions stay loadable everywhere.
 
 ## Security boundaries
 

package/README.pt.md

@@ -26,7 +26,7 @@
 
 | Superfície | Status |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.3-alpha.1` (tag do GitHub, verificado em 2026-09-06; dependências npm fixadas em `0.1.2-rc.1`, peers `>=0.1.2-rc.1 <0.2.0`) 0.1.2-rc.1 (adaptado em 2026-09-02): o envelope de sessão mantém seu campo ignorable apenas para compatibilidade de leitura de logs armazenados - o Session.append ainda não consegue estampá-lo, então o comportamento da porta não muda. Verificado em 2026-09-06 contra o checkout master `dsh-v0.1.3-alpha.1` (cadeia completa de gates + instalação de perfil e smoke). |
+| Harness | DeepSeek Harness `dsh-v0.1.3-alpha.1` (tag do GitHub, verificado em 2026-09-06). Suporte npm de linha dupla (migrado em 2026-09-08): pins de desenvolvimento `0.1.3-alpha.2`, dependências de runtime `0.1.2-rc.1`, peers `>=0.1.2-rc.1 <0.2.0` — o runtime lida com ambas as linhas de host publicadas (detecção de recursos), e cada linha executa a cadeia completa de gates. |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | Plataformas | Todas (answerer de host; painel web opcional via capacidade de projeção de sessão) |
 | Modelo | Qualquer (o revisor herda a rota do agente da sessão; `reviewerModel` sobrescreve) |
@@ -317,7 +317,7 @@ O servidor é somente-leitura e determinista: sem rede, sem modelo, sem gravaç
 
 - **Permissões**: o manifesto do workshop declara `session:append`, `approval:answer`, `subagent:spawn`, `command:register` e `tools:observe`.
 - **Dados**: nada é gravado em disco; o buffer circular de relatórios fica em memória e é limitado. Sem requisições de rede próprias.
-- **Log de sessão**: os eventos `autoReview/*` carregam identidade do revisor, veredito, razão, risco e duração — anexados com o marcador de envelope `ignorable: true` para que qualquer build carregue o log. Hosts cujo `Session.append` é anterior ao marcador (todas as linhas rc publicadas até `0.1.1-rc.2` — nenhuma versão o estampa ainda) são detectados antes do primeiro append (pré-checagem da versão do peer e, em seguida, sondagem do envelope retornado); o host `0.1.2-rc.1` mantém o campo `ignorable` no envelope, mas o `Session.append` não oferece nenhuma forma de estampá-lo (seu terceiro parâmetro é `SurfaceIntent`, apenas para eventos de superfície), e o caminho de leitura da persistência recusa tipos de evento desconhecidos sem marcação, então essas linhas — e versões irresolvíveis — também falham fechadas antes de qualquer append. A auditoria degrada para um espelho em memória com feedback sem marcador, mantendo as sessões carregáveis em qualquer lugar.
+- **Log de sessão**: os eventos `autoReview/*` carregam identidade do revisor, veredito, razão, risco e duração — anexados com o marcador de envelope `ignorable: true` para que qualquer build carregue o log. Hosts cujo `Session.append` é anterior ao marcador (todas as linhas rc publicadas até `0.1.1-rc.2` — nenhuma versão o estampa ainda) são detectados antes do primeiro append (pré-checagem da versão do peer e, em seguida, sondagem do envelope retornado); os hosts `0.1.2-rc.1` e `0.1.3-alpha.2` mantêm o campo `ignorable` no envelope, mas o `Session.append` não oferece nenhuma forma de estampá-lo (seu terceiro parâmetro é `SurfaceIntent`, apenas para eventos de superfície), e o caminho de leitura da persistência recusa tipos de evento desconhecidos sem marcação, então essas linhas — e versões irresolvíveis — também falham fechadas antes de qualquer append. A auditoria degrada para um espelho em memória com feedback sem marcador, mantendo as sessões carregáveis em qualquer lugar.
 
 ## Limites de segurança
 

package/README.zh.md

@@ -26,7 +26,7 @@
 
 | 方面 | 状态 |
 |---|---|
-| Harness | DeepSeek Harness `dsh-v0.1.3-alpha.1`（GitHub tag，2026-09-06 已核验；npm 依赖锁定 `0.1.2-rc.1`，peer 范围 `>=0.1.2-rc.1 <0.2.0`） 0.1.2-rc.1（2026-09-02 已适配）：会话信封保留 ignorable 字段但仅用于存量日志读取兼容——Session.append 仍无法盖章，门控行为不变。 2026-09-06 已针对 `dsh-v0.1.3-alpha.1` master 检出核验（完整门禁链 + profile 安装冒烟）。 |
+| Harness | DeepSeek Harness `dsh-v0.1.3-alpha.1`（GitHub tag，2026-09-06 已核验）。双线 npm 支持（2026-09-08 迁移）：dev 钉号 `0.1.3-alpha.2`、运行时依赖 `0.1.2-rc.1`、peer 范围 `>=0.1.2-rc.1 <0.2.0` —— 运行时兼容两条已发布宿主线（特性探测），两线均跑完整门禁链。 |
 | Node | `^22.19.0 \|\| >=24.0.0` |
 | 平台 | 全部（宿主 answerer；可选 Web 审查面板，依赖会话投影能力） |
 | 模型 | 任意（审查器默认继承会话代理的路由；`reviewerModel` 可覆盖） |
@@ -317,7 +317,7 @@ Claude Desktop（`claude_desktop_config.json`）配置示例：
 
 - **权限**：workshop 清单声明 `session:append`、`approval:answer`、`subagent:spawn`、`command:register` 与 `tools:observe`。
 - **数据**：不向磁盘写入任何内容；报告环形缓冲在内存中且有界。自身不发起网络请求。
-- **会话日志**：`autoReview/*` 事件携带审查器身份、裁决、理由、风险与耗时 —— 以信封 `ignorable: true` 标记追加，任何构建都能加载日志。`Session.append` 早于该标记的宿主（迄今发布的所有 rc 版本，至 `0.1.1-rc.2`——任何发布版都还未盖标记）会在首次追加前被探测出来（peer 版本预检 + 返回信封探测）；宿主 `0.1.2-rc.1` 在信封上保留 `ignorable` 字段，但 `Session.append` 没有任何方式为其盖章（其第三参数是仅用于 surface 事件的 `SurfaceIntent`），且持久化读取路径拒绝未标记的未知事件类型，因此这些版本线——以及无法解析的版本——同样在首次追加前 fail closed。审计降级为内存镜像 + 无标记反馈，会话日志始终保持可加载。
+- **会话日志**：`autoReview/*` 事件携带审查器身份、裁决、理由、风险与耗时 —— 以信封 `ignorable: true` 标记追加，任何构建都能加载日志。`Session.append` 早于该标记的宿主（迄今发布的所有 rc 版本，至 `0.1.1-rc.2`——任何发布版都还未盖标记）会在首次追加前被探测出来（peer 版本预检 + 返回信封探测）；宿主 `0.1.2-rc.1` 与 `0.1.3-alpha.2` 在信封上保留 `ignorable` 字段，但 `Session.append` 没有任何方式为其盖章（其第三参数是仅用于 surface 事件的 `SurfaceIntent`），且持久化读取路径拒绝未标记的未知事件类型，因此这些版本线——以及无法解析的版本——同样在首次追加前 fail closed。审计降级为内存镜像 + 无标记反馈，会话日志始终保持可加载。
 
 ## 安全边界
 

package/lib/index.js

@@ -12,11 +12,11 @@ import { assertObjectJsonSchema } from "@deepseek-ai/dsh-tools";
 * marker on host builds that expose the surface (post-rc.6
 * `@deepseek-ai/dsh-session`); the `0.1.0-rc.6` line silently drops the
 * options bag, so audit events land unmarked and stricter hosts refuse to
-* resume those sessions (`SessionFormatUnsupportedError`). Host master
-* `0.1.2-alpha.2` keeps the `ignorable` field on the event envelope but
-* offers no append option to write it — the third parameter is
-* `SurfaceIntent`, accepted only for surface event types — so `append`
-* never stamps the marker there either. The runtime detects the host
+* resume those sessions (`SessionFormatUnsupportedError`). The published
+* `0.1.2-rc.1` and `0.1.3-alpha.2` hosts keep the `ignorable` field on
+* the event envelope but offer no append option to write it — the third
+* parameter is `SurfaceIntent`, accepted only for surface event types —
+* so `append` never stamps the marker there either. The runtime detects the host
 * before polluting a log: the installed peer version is checked against
 * the known-unmarked lines first, and an unknown (unresolvable) version is
 * verified by probing the FIRST appended event's returned envelope. The
@@ -40,19 +40,22 @@ function isMarkedAuditEvent(result) {
 * Whether a `@deepseek-ai/dsh-session` version line lacks a safe audit
 * write path: every released rc line through `0.1.1-rc.2` silently drops
 * the marker from `Session.append` options (no release ever stamps it),
-* and host master `0.1.2-alpha.2` keeps the `ignorable` field on the
-* event envelope but has no append option that writes it (the third
-* parameter is `SurfaceIntent` for surface event types only), so writing
+* and the `0.1.2-rc.1` / `0.1.3-alpha.2` hosts keep the `ignorable` field
+* on the event envelope but have no append option that writes it (the
+* third parameter is `SurfaceIntent` for surface event types only — the
+* alpha.2 `append` still assembles the envelope without the marker,
+* verified against the published tarball), so writing
 * on those lines still lands an unmarked event. The persistence read path
 * fails closed on unmarked unknown event types (`autoReview/*` is not in
-* `KNOWN_SESSION_EVENT_TYPES`), so writing there makes sessions
-* unresumable. Extend the bound when a new line ships that still cannot
-* stamp the marker. Non-matching (later rc, stable 0.2+, or unresolvable)
-* versions are treated as possibly-marker-aware and verified by the append
-* probe.
+* `KNOWN_SESSION_EVENT_TYPES` on either line), so writing there makes
+* sessions unresumable. Extend the bound when a new line ships that still
+* cannot stamp the marker. Non-matching (later rc, stable 0.2+, or
+* unresolvable) versions are treated as possibly-marker-aware and verified
+* by the append probe.
 * @param version - the installed peer version string.
 * @returns true for the known-unmarked `0.1.0-rc.1–rc.8`, `0.1.1-rc.1–rc.2`,
-*   and `0.1.2-alpha.1`+ non-stamping lines.
+*   and the non-stamping `0.1.2+`/`0.1.3+` prerelease lines
+*   (`0.1.2-alpha.1` through the published `0.1.2-rc.1` and `0.1.3-alpha.2`).
 */
 function isUnmarkedHostVersion(version) {
 	const v = version.trim();

package/lib/types/audit.d.ts

@@ -5,11 +5,11 @@
  * marker on host builds that expose the surface (post-rc.6
  * `@deepseek-ai/dsh-session`); the `0.1.0-rc.6` line silently drops the
  * options bag, so audit events land unmarked and stricter hosts refuse to
- * resume those sessions (`SessionFormatUnsupportedError`). Host master
- * `0.1.2-alpha.2` keeps the `ignorable` field on the event envelope but
- * offers no append option to write it — the third parameter is
- * `SurfaceIntent`, accepted only for surface event types — so `append`
- * never stamps the marker there either. The runtime detects the host
+ * resume those sessions (`SessionFormatUnsupportedError`). The published
+ * `0.1.2-rc.1` and `0.1.3-alpha.2` hosts keep the `ignorable` field on
+ * the event envelope but offer no append option to write it — the third
+ * parameter is `SurfaceIntent`, accepted only for surface event types —
+ * so `append` never stamps the marker there either. The runtime detects the host
  * before polluting a log: the installed peer version is checked against
  * the known-unmarked lines first, and an unknown (unresolvable) version is
  * verified by probing the FIRST appended event's returned envelope. The
@@ -33,19 +33,22 @@ export declare function isMarkedAuditEvent(result: unknown): boolean;
  * Whether a `@deepseek-ai/dsh-session` version line lacks a safe audit
  * write path: every released rc line through `0.1.1-rc.2` silently drops
  * the marker from `Session.append` options (no release ever stamps it),
- * and host master `0.1.2-alpha.2` keeps the `ignorable` field on the
- * event envelope but has no append option that writes it (the third
- * parameter is `SurfaceIntent` for surface event types only), so writing
+ * and the `0.1.2-rc.1` / `0.1.3-alpha.2` hosts keep the `ignorable` field
+ * on the event envelope but have no append option that writes it (the
+ * third parameter is `SurfaceIntent` for surface event types only — the
+ * alpha.2 `append` still assembles the envelope without the marker,
+ * verified against the published tarball), so writing
  * on those lines still lands an unmarked event. The persistence read path
  * fails closed on unmarked unknown event types (`autoReview/*` is not in
- * `KNOWN_SESSION_EVENT_TYPES`), so writing there makes sessions
- * unresumable. Extend the bound when a new line ships that still cannot
- * stamp the marker. Non-matching (later rc, stable 0.2+, or unresolvable)
- * versions are treated as possibly-marker-aware and verified by the append
- * probe.
+ * `KNOWN_SESSION_EVENT_TYPES` on either line), so writing there makes
+ * sessions unresumable. Extend the bound when a new line ships that still
+ * cannot stamp the marker. Non-matching (later rc, stable 0.2+, or
+ * unresolvable) versions are treated as possibly-marker-aware and verified
+ * by the append probe.
  * @param version - the installed peer version string.
  * @returns true for the known-unmarked `0.1.0-rc.1–rc.8`, `0.1.1-rc.1–rc.2`,
- *   and `0.1.2-alpha.1`+ non-stamping lines.
+ *   and the non-stamping `0.1.2+`/`0.1.3+` prerelease lines
+ *   (`0.1.2-alpha.1` through the published `0.1.2-rc.1` and `0.1.3-alpha.2`).
  */
 export declare function isUnmarkedHostVersion(version: string): boolean;
 /**

package/lib/types/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,sGAAsG;AACtG,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,CAAA;AAElE;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAE3D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAc9D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAOlD"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,sGAAsG;AACtG,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,CAAA;AAElE;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAE3D;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAiB9D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAOlD"}

package/lib/types/audit.js

@@ -5,11 +5,11 @@
  * marker on host builds that expose the surface (post-rc.6
  * `@deepseek-ai/dsh-session`); the `0.1.0-rc.6` line silently drops the
  * options bag, so audit events land unmarked and stricter hosts refuse to
- * resume those sessions (`SessionFormatUnsupportedError`). Host master
- * `0.1.2-alpha.2` keeps the `ignorable` field on the event envelope but
- * offers no append option to write it — the third parameter is
- * `SurfaceIntent`, accepted only for surface event types — so `append`
- * never stamps the marker there either. The runtime detects the host
+ * resume those sessions (`SessionFormatUnsupportedError`). The published
+ * `0.1.2-rc.1` and `0.1.3-alpha.2` hosts keep the `ignorable` field on
+ * the event envelope but offer no append option to write it — the third
+ * parameter is `SurfaceIntent`, accepted only for surface event types —
+ * so `append` never stamps the marker there either. The runtime detects the host
  * before polluting a log: the installed peer version is checked against
  * the known-unmarked lines first, and an unknown (unresolvable) version is
  * verified by probing the FIRST appended event's returned envelope. The
@@ -34,19 +34,22 @@ export function isMarkedAuditEvent(result) {
  * Whether a `@deepseek-ai/dsh-session` version line lacks a safe audit
  * write path: every released rc line through `0.1.1-rc.2` silently drops
  * the marker from `Session.append` options (no release ever stamps it),
- * and host master `0.1.2-alpha.2` keeps the `ignorable` field on the
- * event envelope but has no append option that writes it (the third
- * parameter is `SurfaceIntent` for surface event types only), so writing
+ * and the `0.1.2-rc.1` / `0.1.3-alpha.2` hosts keep the `ignorable` field
+ * on the event envelope but have no append option that writes it (the
+ * third parameter is `SurfaceIntent` for surface event types only — the
+ * alpha.2 `append` still assembles the envelope without the marker,
+ * verified against the published tarball), so writing
  * on those lines still lands an unmarked event. The persistence read path
  * fails closed on unmarked unknown event types (`autoReview/*` is not in
- * `KNOWN_SESSION_EVENT_TYPES`), so writing there makes sessions
- * unresumable. Extend the bound when a new line ships that still cannot
- * stamp the marker. Non-matching (later rc, stable 0.2+, or unresolvable)
- * versions are treated as possibly-marker-aware and verified by the append
- * probe.
+ * `KNOWN_SESSION_EVENT_TYPES` on either line), so writing there makes
+ * sessions unresumable. Extend the bound when a new line ships that still
+ * cannot stamp the marker. Non-matching (later rc, stable 0.2+, or
+ * unresolvable) versions are treated as possibly-marker-aware and verified
+ * by the append probe.
  * @param version - the installed peer version string.
  * @returns true for the known-unmarked `0.1.0-rc.1–rc.8`, `0.1.1-rc.1–rc.2`,
- *   and `0.1.2-alpha.1`+ non-stamping lines.
+ *   and the non-stamping `0.1.2+`/`0.1.3+` prerelease lines
+ *   (`0.1.2-alpha.1` through the published `0.1.2-rc.1` and `0.1.3-alpha.2`).
  */
 export function isUnmarkedHostVersion(version) {
     const v = version.trim();
@@ -56,7 +59,10 @@ export function isUnmarkedHostVersion(version) {
         const patch = Number(rc[2]);
         // `0.1.2-rc.1` ships the alpha.5 surface: the third append parameter is
         // `SurfaceIntent` for surface event types only, so no rc line in the
-        // 0.1.2 minor stamps the marker either.
+        // 0.1.2 minor stamps the marker either. `0.1.3-alpha.2` ships the v2
+        // session format (SESSION_FORMAT_VERSION 2, assistant streams embedded)
+        // but its `append` still assembles the envelope without `ignorable`, so
+        // the 0.1.3 line is non-stamping too (verified against the tarball).
         return (minor === 0 && patch <= 8) || (minor === 1 && patch <= 2) || minor >= 2;
     }
     const line = /^0\.1\.(\d+)(?:-.*)?$/.exec(v);

package/lib/types/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAK3C;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe;IAChD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAK,MAAkC,CAAC,SAAS,KAAK,IAAI,CAAA;AAChH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;IACxB,MAAM,EAAE,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3B,wEAAwE;QACxE,qEAAqE;QACrE,wCAAwC;QACxC,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;IACjF,CAAC;IACD,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC9C,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,uCAAuC,CAA0B,CAAA;QAC5G,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAK3C;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe;IAChD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAK,MAAkC,CAAC,SAAS,KAAK,IAAI,CAAA;AAChH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;IACxB,MAAM,EAAE,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3B,wEAAwE;QACxE,qEAAqE;QACrE,qEAAqE;QACrE,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;IACjF,CAAC;IACD,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC9C,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,uCAAuC,CAA0B,CAAA;QAC5G,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/package.json

@@ -1,7 +1,6 @@
 {
   "name": "dsh-auto-review",
-  "version": "0.10.6",
-  "packageManager": "pnpm@11.7.0",
+  "version": "0.11.0",
   "description": "Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent decides allow/deny on the approval answerer chain, with fail-closed fallback and full session-log audit.",
   "private": false,
   "author": {
@@ -106,7 +105,8 @@
     ],
     "compatibility": {
       "dshVersions": [
-        "0.1.2-rc.1"
+        "0.1.2-rc.1",
+        "0.1.3-alpha.2"
       ]
     },
     "capability": {
@@ -194,22 +194,22 @@
     "@deepseek-ai/cordis": "^4.0.2",
     "@deepseek-ai/cordis-plugin-include": "^1.0.7",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-agent": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-agent": "0.1.3-alpha.2",
     "@deepseek-ai/dsh-agent-spine-demo": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-api-remotes": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-brand": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-connection": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-locale": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-commands": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-invariants": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-llm": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-session": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-session-projection": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-subagent": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-tools": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-user-approval": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-api-remotes": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-brand": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-client-connection": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-commands": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-invariants": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-subagent": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.1.3-alpha.2",
+    "@deepseek-ai/dsh-user-approval": "0.1.3-alpha.2",
     "@deepseek-ai/schemastery": "^3.18.2",
     "@types/node": "^26.2.0",
     "@types/react": "18.3.31",
@@ -220,6 +220,11 @@
     "react-dom": "18.3.1",
     "vitest": "^4.1.10"
   },
+  "license": "Apache-2.0",
+  "funding": {
+    "type": "individual",
+    "url": "https://github.com/sponsors/PerryLink"
+  },
   "scripts": {
     "build": "node scripts/prepare.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json --noEmit",
@@ -227,13 +232,6 @@
     "test:coverage": "vitest run --coverage",
     "lint": "oxlint",
     "check:readmes": "node scripts/check-readme-sync.mjs",
-    "prepare": "node scripts/prepare.mjs",
-    "verify:self-contained": "node scripts/verify-self-contained.mjs",
-    "prepublishOnly": "pnpm run typecheck && pnpm test && pnpm run build && pnpm run verify:self-contained"
-  },
-  "license": "Apache-2.0",
-  "funding": {
-    "type": "individual",
-    "url": "https://github.com/sponsors/PerryLink"
+    "verify:self-contained": "node scripts/verify-self-contained.mjs"
   }
-}
+}

package/src/audit.ts

@@ -5,11 +5,11 @@
  * marker on host builds that expose the surface (post-rc.6
  * `@deepseek-ai/dsh-session`); the `0.1.0-rc.6` line silently drops the
  * options bag, so audit events land unmarked and stricter hosts refuse to
- * resume those sessions (`SessionFormatUnsupportedError`). Host master
- * `0.1.2-alpha.2` keeps the `ignorable` field on the event envelope but
- * offers no append option to write it — the third parameter is
- * `SurfaceIntent`, accepted only for surface event types — so `append`
- * never stamps the marker there either. The runtime detects the host
+ * resume those sessions (`SessionFormatUnsupportedError`). The published
+ * `0.1.2-rc.1` and `0.1.3-alpha.2` hosts keep the `ignorable` field on
+ * the event envelope but offer no append option to write it — the third
+ * parameter is `SurfaceIntent`, accepted only for surface event types —
+ * so `append` never stamps the marker there either. The runtime detects the host
  * before polluting a log: the installed peer version is checked against
  * the known-unmarked lines first, and an unknown (unresolvable) version is
  * verified by probing the FIRST appended event's returned envelope. The
@@ -40,19 +40,22 @@ export function isMarkedAuditEvent(result: unknown): boolean {
  * Whether a `@deepseek-ai/dsh-session` version line lacks a safe audit
  * write path: every released rc line through `0.1.1-rc.2` silently drops
  * the marker from `Session.append` options (no release ever stamps it),
- * and host master `0.1.2-alpha.2` keeps the `ignorable` field on the
- * event envelope but has no append option that writes it (the third
- * parameter is `SurfaceIntent` for surface event types only), so writing
+ * and the `0.1.2-rc.1` / `0.1.3-alpha.2` hosts keep the `ignorable` field
+ * on the event envelope but have no append option that writes it (the
+ * third parameter is `SurfaceIntent` for surface event types only — the
+ * alpha.2 `append` still assembles the envelope without the marker,
+ * verified against the published tarball), so writing
  * on those lines still lands an unmarked event. The persistence read path
  * fails closed on unmarked unknown event types (`autoReview/*` is not in
- * `KNOWN_SESSION_EVENT_TYPES`), so writing there makes sessions
- * unresumable. Extend the bound when a new line ships that still cannot
- * stamp the marker. Non-matching (later rc, stable 0.2+, or unresolvable)
- * versions are treated as possibly-marker-aware and verified by the append
- * probe.
+ * `KNOWN_SESSION_EVENT_TYPES` on either line), so writing there makes
+ * sessions unresumable. Extend the bound when a new line ships that still
+ * cannot stamp the marker. Non-matching (later rc, stable 0.2+, or
+ * unresolvable) versions are treated as possibly-marker-aware and verified
+ * by the append probe.
  * @param version - the installed peer version string.
  * @returns true for the known-unmarked `0.1.0-rc.1–rc.8`, `0.1.1-rc.1–rc.2`,
- *   and `0.1.2-alpha.1`+ non-stamping lines.
+ *   and the non-stamping `0.1.2+`/`0.1.3+` prerelease lines
+ *   (`0.1.2-alpha.1` through the published `0.1.2-rc.1` and `0.1.3-alpha.2`).
  */
 export function isUnmarkedHostVersion(version: string): boolean {
   const v = version.trim()
@@ -62,7 +65,10 @@ export function isUnmarkedHostVersion(version: string): boolean {
     const patch = Number(rc[2])
     // `0.1.2-rc.1` ships the alpha.5 surface: the third append parameter is
     // `SurfaceIntent` for surface event types only, so no rc line in the
-    // 0.1.2 minor stamps the marker either.
+    // 0.1.2 minor stamps the marker either. `0.1.3-alpha.2` ships the v2
+    // session format (SESSION_FORMAT_VERSION 2, assistant streams embedded)
+    // but its `append` still assembles the envelope without `ignorable`, so
+    // the 0.1.3 line is non-stamping too (verified against the tarball).
     return (minor === 0 && patch <= 8) || (minor === 1 && patch <= 2) || minor >= 2
   }
   const line = /^0\.1\.(\d+)(?:-.*)?$/.exec(v)